last executing test programs: 11.192882819s ago: executing program 3 (id=1128): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x20, 0x8, 0x4, "c03ca14d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.916037172s ago: executing program 4 (id=1137): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @private=0xa010100}, {0x1, @broadcast}, 0x2, {0x2, 0x4e20, @multicast2}, 'veth1_virt_wifi\x00'}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_ROPEN(r4, &(0x7f0000000280)={0x18, 0x71, 0x2, {{0x2, 0x4, 0x1}, 0x6}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r5) unshare(0xa000200) r6 = semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x20060400) r7 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) semctl$SETVAL(r6, 0x0, 0x10, &(0x7f00000000c0)=0x7d8947f6) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) 7.813247546s ago: executing program 1 (id=1141): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x12000051) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 6.998967023s ago: executing program 3 (id=1143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 6.965680036s ago: executing program 0 (id=1144): r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r0, 0x0, 0x9b1, 0x1001ed) fallocate(r0, 0x3, 0xf00, 0x10000) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 6.842022583s ago: executing program 2 (id=1145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.799860655s ago: executing program 1 (id=1146): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb, [{{0x9, 0x4, 0x0, 0x3, 0x3e, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0xd, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) fstat(r2, &(0x7f0000000100)) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 6.0242803s ago: executing program 3 (id=1147): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x1) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b02010200", @ANYRESOCT=0x0], 0x0) 5.985693302s ago: executing program 0 (id=1148): r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000300)={0x200f}) 5.918358597s ago: executing program 2 (id=1149): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000400000000000000000000a851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 5.822615072s ago: executing program 2 (id=1150): syz_mount_image$fuse(0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x80) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) getxattr(0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) read$FUSE(r1, &(0x7f0000006a40)={0x2020}, 0x2020) 5.547062478s ago: executing program 4 (id=1151): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @private=0xa010100}, {0x1, @broadcast}, 0x2, {0x2, 0x4e20, @multicast2}, 'veth1_virt_wifi\x00'}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_ROPEN(r4, &(0x7f0000000280)={0x18, 0x71, 0x2, {{0x2, 0x4, 0x1}, 0x6}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r5) unshare(0xa000200) r6 = semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x20060400) r7 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) semctl$SETVAL(r6, 0x0, 0x10, &(0x7f00000000c0)=0x7d8947f6) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) 4.852610988s ago: executing program 0 (id=1152): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e27, @multicast1}}, [0xa4f5, 0x80000001, 0x20000fff, 0xf5f, 0x38521017, 0x8, 0x9, 0xaa4, 0x2, 0xffffffffffffbffc, 0x10001, 0x1, 0x7fffffff, 0xc, 0x3]}, &(0x7f0000000280)=0x100) 4.755290594s ago: executing program 0 (id=1153): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 4.299685701s ago: executing program 4 (id=1156): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x12000051) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 3.724597214s ago: executing program 0 (id=1157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x34}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3.668430248s ago: executing program 4 (id=1158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x80) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.435698111s ago: executing program 1 (id=1159): r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r0, 0x0, 0x9b1, 0x1001ed) fallocate(r0, 0x3, 0xf00, 0x10000) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 2.751068601s ago: executing program 3 (id=1160): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0xfd, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e00)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000280)={@desc={0x1, 0x0, @desc4}}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) r3 = syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) listxattr(&(0x7f0000002d00)='./file0\x00', 0x0, 0xffffffffffffff5e) 2.705202953s ago: executing program 0 (id=1161): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @private=0xa010100}, {0x1, @broadcast}, 0x2, {0x2, 0x4e20, @multicast2}, 'veth1_virt_wifi\x00'}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_ROPEN(r4, &(0x7f0000000280)={0x18, 0x71, 0x2, {{0x2, 0x4, 0x1}, 0x6}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r5) unshare(0xa000200) r6 = semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x20060400) r7 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) semctl$SETVAL(r6, 0x0, 0x10, &(0x7f00000000c0)=0x7d8947f6) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) 2.515900615s ago: executing program 1 (id=1162): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80801, 0x0) write$snddsp(r0, &(0x7f0000000340)="010b", 0x2) 2.496711966s ago: executing program 1 (id=1163): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="8fc9f801fb660f08f30f1ef90f00240f55de3e670f1f400064f2ab2e0f0666b9800000c00f326635008000000f3026ded9", 0x31}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000201260000000000010000c88abb760a000000cfe2794f499d3191c103d63f4ace93f3456b0a30111e889713bed0e885eb4103509842327d77947fbab62a03b22a219e471341d3261bbe8c533defca3cd0fef6119d5256610735dd6a8959cfc979c2f8f2527060294faf61f187efdc288ac9dce148c8680b80e0aaeb035bafa131e3e66f90bb5ca05bb7ad8b019a4d1145f0c22a6c313959c6d460f9099807c8fb12038bb8051b53d37c442fd7d36ce40de499861aa31634880e87b050f8216f9ece31897798e656a8514f15b979"], 0x14}}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xf}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.489529886s ago: executing program 4 (id=1164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) open_tree(r4, 0x0, 0x80100) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.073908789s ago: executing program 1 (id=1165): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @private=0xa010100}, {0x1, @broadcast}, 0x2, {0x2, 0x4e20, @multicast2}, 'veth1_virt_wifi\x00'}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_ROPEN(r4, &(0x7f0000000280)={0x18, 0x71, 0x2, {{0x2, 0x4, 0x1}, 0x6}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r5) unshare(0xa000200) r6 = semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x20060400) r7 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) semctl$SETVAL(r6, 0x0, 0x10, &(0x7f00000000c0)=0x7d8947f6) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) 803.838914ms ago: executing program 2 (id=1166): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x80) 617.145215ms ago: executing program 2 (id=1167): syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x4, 0x0, 0x4, 0x0, 0x7, 0x2b00}}, 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0xea5bc50b6199d77e) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x27, 0x4c, 0x3, 0x40, 0x5ab, 0x60, 0x1106, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0xf4, 0x7, 0x50}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 544.765259ms ago: executing program 3 (id=1168): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1ad040, 0x148) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) pwrite64(r0, 0x0, 0x0, 0x7) 0s ago: executing program 3 (id=1169): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0x4, 0x80000}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ng removed oldalloc option [ 120.028757][ T4798] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 120.046382][ T4800] loop3: detected capacity change from 0 to 512 [ 120.103294][ T4798] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,user_xattr,inlinecrypt,oldalloc,data_err=ignore,nojournal_checksum,errors=remount-ro,mblk_io_submit,noblock_validity,min_batch_time=0x0000000000000000,nombcache,errors=remount-ro,. Quota mode: none. [ 120.165913][ T4800] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 120.187538][ T4800] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.251385][ T4798] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 120.311763][ T4798] EXT4-fs (loop1): Remounting filesystem read-only [ 120.363236][ T4800] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 120.411013][ T1107] hid (null): invalid report_count -1630704896 [ 120.593016][ T1107] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 121.433384][ T1107] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 121.441231][ T1107] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 121.448873][ T1107] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 121.456311][ T1107] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 121.463751][ T1107] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 121.470789][ T1107] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 121.478331][ T1107] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 121.527198][ T4819] loop4: detected capacity change from 0 to 512 [ 121.537877][ T4819] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 121.547875][ T4819] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.580554][ T1107] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 121.590750][ T1107] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 121.597899][ T1107] cougar 0003:060B:500A.0002: collection stack underflow [ 121.605652][ T1107] cougar 0003:060B:500A.0002: item 0 0 0 12 parsing failed [ 121.613374][ T1107] cougar 0003:060B:500A.0002: parse failed [ 121.619253][ T1107] cougar: probe of 0003:060B:500A.0002 failed with error -22 [ 121.644377][ T1107] usb 3-1: USB disconnect, device number 4 [ 121.675253][ T4819] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,dioread_nolock,nouid32,nojournal_checksum,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 121.795375][ T4819] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.883956][ T4819] EXT4-fs error (device loop4): ext4_xattr_block_list:713: inode #15: comm syz.4.170: corrupted xattr block 33 [ 122.665007][ T4833] loop2: detected capacity change from 0 to 512 [ 124.441151][ T4850] loop1: detected capacity change from 0 to 512 [ 124.449997][ T4842] loop3: detected capacity change from 0 to 2048 [ 124.457007][ T4833] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 124.470981][ T4833] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.490154][ T4833] EXT4-fs (loop2): shut down requested (2) [ 124.552761][ T4842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.429460][ T4850] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.180: Invalid inode bitmap blk 4 in block_group 0 [ 125.512751][ T4859] loop2: detected capacity change from 0 to 1024 [ 125.546581][ T4850] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 125.873435][ T4870] binder_alloc: 4868: binder_alloc_buf, no vma [ 125.910935][ T4867] hfsplus: request for non-existent node 16777216 in B*Tree [ 125.994203][ T4867] hfsplus: request for non-existent node 16777216 in B*Tree [ 126.096580][ T4867] hfsplus: request for non-existent node 16777216 in B*Tree [ 126.175354][ T4867] hfsplus: request for non-existent node 16777216 in B*Tree [ 126.244986][ T4867] hfsplus: request for non-existent node 16777216 in B*Tree [ 126.256102][ T4867] hfsplus: request for non-existent node 16777216 in B*Tree [ 126.471742][ T4239] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.761804][ T4239] usb 4-1: Using ep0 maxpacket: 16 [ 126.931803][ T4239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.991190][ T4239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.067656][ T4886] loop2: detected capacity change from 0 to 512 [ 127.075422][ T4884] loop1: detected capacity change from 0 to 512 [ 127.084521][ T4239] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 127.106935][ T4239] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 127.118211][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.186982][ T4239] usb 4-1: config 0 descriptor?? [ 127.261032][ T4886] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 127.278857][ T4884] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 127.332756][ T4886] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.351688][ T4884] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.893852][ T4884] EXT4-fs (loop1): shut down requested (2) [ 128.109503][ T4886] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.189: Invalid inode table block 2147483647 in block_group 0 [ 128.165255][ T4886] EXT4-fs (loop2): Remounting filesystem read-only [ 128.181998][ T4886] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 128.254195][ T4886] EXT4-fs (loop2): Remounting filesystem read-only [ 128.425260][ T4886] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #4: comm syz.2.189: mark_inode_dirty error [ 128.443599][ T4886] EXT4-fs (loop2): Remounting filesystem read-only [ 128.459366][ T4886] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.189: bg 0: block 2147483647: invalid block bitmap [ 128.520632][ T4886] EXT4-fs (loop2): Remounting filesystem read-only [ 128.527910][ T4886] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.189: Invalid inode table block 2147483647 in block_group 0 [ 128.542929][ T4239] usbhid 4-1:0.0: can't add hid device: -71 [ 128.549011][ T4239] usbhid: probe of 4-1:0.0 failed with error -71 [ 128.583769][ T4886] EXT4-fs (loop2): Remounting filesystem read-only [ 129.377503][ T4886] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 129.416596][ T4239] usb 4-1: USB disconnect, device number 4 [ 129.438395][ T4886] EXT4-fs (loop2): Remounting filesystem read-only [ 129.477587][ T4886] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #4: comm syz.2.189: mark_inode_dirty error [ 129.536490][ T4886] EXT4-fs (loop2): Remounting filesystem read-only [ 129.551692][ T4886] Quota error (device loop2): write_blk: dquota write failed [ 129.559907][ T4886] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 129.576593][ T4886] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 129.587036][ T4886] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.189: Failed to acquire dquot type 1 [ 129.654724][ T4886] EXT4-fs (loop2): Remounting filesystem read-only [ 129.712841][ T4886] syz.2.189 (4886) used greatest stack depth: 20688 bytes left [ 129.717879][ T4437] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm kworker/u4:8: Invalid inode table block 2147483647 in block_group 0 [ 132.270518][ T4889] EXT4-fs warning (device loop2): kmmpd:170: kmmpd being stopped since MMP feature has been disabled. [ 132.333692][ T4920] lo speed is unknown, defaulting to 1000 [ 132.385762][ T4920] loop3: detected capacity change from 0 to 128 [ 132.401027][ T4437] EXT4-fs (loop2): Remounting filesystem read-only [ 132.450101][ T4921] loop0: detected capacity change from 0 to 8 [ 132.629867][ T4188] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 2147483647 in block_group 0 [ 132.657490][ T4188] EXT4-fs (loop2): Remounting filesystem read-only [ 135.013567][ T4930] loop4: detected capacity change from 0 to 2048 [ 135.116146][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.122594][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.138730][ T4940] lo speed is unknown, defaulting to 1000 [ 135.183550][ T4930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.215963][ T4958] loop3: detected capacity change from 0 to 512 [ 136.272889][ T4963] siw: device registration error -23 [ 136.278488][ T4958] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 136.308852][ T4958] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.480801][ T4958] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,dioread_nolock,nouid32,nojournal_checksum,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 136.529648][ T4958] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.095824][ T5002] loop1: detected capacity change from 0 to 2048 [ 140.147401][ T5007] loop4: detected capacity change from 0 to 256 [ 140.203275][ T5002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.096469][ T5007] loop4: detected capacity change from 0 to 512 [ 141.270565][ T5007] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.332946][ T5007] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.389260][ T5007] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.228: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 141.552848][ T5025] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 18: comm syz.4.228: lblock 23 mapped to illegal pblock 18 (length 1) [ 141.584393][ T5007] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 12: comm syz.4.228: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 143.043362][ T5048] binder: BINDER_SET_CONTEXT_MGR already set [ 143.067097][ T5048] binder: 5046:5048 ioctl 4018620d 200000000040 returned -16 [ 144.631675][ T4247] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.951863][ T4247] usb 4-1: Using ep0 maxpacket: 8 [ 145.376896][ T4247] usb 4-1: unable to get BOS descriptor or descriptor too short [ 145.513894][ T4247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 145.590213][ T4247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 145.663663][ T4247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 146.497236][ T4247] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 146.507391][ T4247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 146.517127][ T4247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 146.602548][ T5086] binder: BINDER_SET_CONTEXT_MGR already set [ 146.621857][ T5086] binder: 5085:5086 ioctl 4018620d 200000000040 returned -16 [ 146.711767][ T4247] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 146.732316][ T4247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.751550][ T4247] usb 4-1: Product: syz [ 146.770305][ T4247] usb 4-1: Manufacturer: syz [ 146.791560][ T4247] usb 4-1: SerialNumber: syz [ 146.821930][ T4247] usb 4-1: config 0 descriptor?? [ 146.851925][ T5060] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.090318][ T4194] usb 4-1: USB disconnect, device number 5 [ 147.446273][ T4424] udevd[4424]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.540589][ T5120] binder: BINDER_SET_CONTEXT_MGR already set [ 148.594999][ T5120] binder: 5119:5120 ioctl 4018620d 200000000040 returned -16 [ 152.011526][ T4287] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.261982][ T4287] usb 4-1: Using ep0 maxpacket: 8 [ 152.417061][ T4287] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 152.433317][ T4287] usb 4-1: config 0 has no interface number 0 [ 152.631610][ T4287] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 152.660660][ T4287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.725576][ T4287] usb 4-1: Product: syz [ 152.729903][ T4287] usb 4-1: Manufacturer: syz [ 152.751704][ T4287] usb 4-1: SerialNumber: syz [ 152.784871][ T4287] usb 4-1: config 0 descriptor?? [ 153.121934][ T4287] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 153.128707][ T4287] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 153.535582][ T4287] usb 4-1: Failed to create links for entity 5 [ 153.570931][ T4287] usb 4-1: Failed to register entities (-22). [ 153.667317][ T4287] usb 4-1: USB disconnect, device number 6 [ 154.867767][ T5196] loop4: detected capacity change from 0 to 2048 [ 155.119996][ T5196] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.085226][ T5219] loop0: detected capacity change from 0 to 512 [ 156.285311][ T5219] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 156.321580][ T4287] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 156.421870][ T5219] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.661570][ T4287] usb 4-1: device descriptor read/64, error -71 [ 157.071611][ T4287] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 157.121825][ T5230] loop1: detected capacity change from 0 to 1024 [ 157.291553][ T4287] usb 4-1: device descriptor read/64, error -71 [ 157.396893][ T5232] loop2: detected capacity change from 0 to 8192 [ 157.411746][ T4287] usb usb4-port1: attempt power cycle [ 157.432232][ T5238] loop0: detected capacity change from 0 to 2048 [ 157.501187][ T5232] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.525789][ T5238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.641570][ T4240] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 157.821643][ T4287] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 157.896166][ T4240] usb 2-1: Using ep0 maxpacket: 16 [ 157.951901][ T4287] usb 4-1: device descriptor read/8, error -71 [ 158.012392][ T4240] usb 2-1: config 1 interface 0 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 64 [ 158.043198][ T4240] usb 2-1: config 1 interface 0 altsetting 13 bulk endpoint 0x3 has invalid maxpacket 32 [ 158.090078][ T4240] usb 2-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.161524][ T4240] usb 2-1: config 1 interface 0 has no altsetting 0 [ 158.231618][ T4287] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 158.451963][ T4240] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.471865][ T4240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.480090][ T4240] usb 2-1: Product: syz [ 158.502635][ T4240] usb 2-1: Manufacturer: syz [ 158.641878][ T4287] usb 4-1: device descriptor read/8, error -71 [ 158.768732][ T4287] usb usb4-port1: unable to enumerate USB device [ 159.233665][ T5253] loop4: detected capacity change from 0 to 2048 [ 159.241656][ T4240] usb 2-1: SerialNumber: syz [ 159.271919][ T5230] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 159.279982][ T5230] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 159.353449][ T5253] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.612630][ T4240] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 159.643195][ T4240] usb 2-1: USB disconnect, device number 2 [ 160.516940][ T5282] binder: BINDER_SET_CONTEXT_MGR already set [ 160.576222][ T5282] binder: 5281:5282 ioctl 4018620d 200000000040 returned -16 [ 160.641862][ T5290] loop3: detected capacity change from 0 to 128 [ 160.804700][ T5290] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 160.870327][ T5297] loop1: detected capacity change from 0 to 2048 [ 160.902356][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.924955][ T5290] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.971265][ T5297] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.872076][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.411524][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.457752][ T5314] loop0: detected capacity change from 0 to 2048 [ 162.491236][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.526478][ T13] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.553716][ T5314] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.584279][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.648776][ T13] usb 3-1: config 0 descriptor?? [ 163.169451][ T13] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 163.239806][ T5330] binder: BINDER_SET_CONTEXT_MGR already set [ 163.295416][ T5330] binder: 5329:5330 ioctl 4018620d 200000000040 returned -16 [ 163.309018][ T13] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 163.497073][ T5333] 9pnet: Insufficient options for proto=fd [ 163.679661][ T5339] loop4: detected capacity change from 0 to 2048 [ 163.711767][ T21] usb 3-1: USB disconnect, device number 5 [ 163.770069][ T5339] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.875338][ T5335] fido_id[5335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 164.058691][ T5347] netlink: 'syz.1.340': attribute type 12 has an invalid length. [ 164.088423][ T5347] netlink: 'syz.1.340': attribute type 29 has an invalid length. [ 164.113246][ T5347] netlink: 148 bytes leftover after parsing attributes in process `syz.1.340'. [ 164.143821][ T5347] netlink: 59 bytes leftover after parsing attributes in process `syz.1.340'. [ 164.163624][ T5352] lo speed is unknown, defaulting to 1000 [ 164.169625][ T5352] lo speed is unknown, defaulting to 1000 [ 164.177218][ T5352] lo speed is unknown, defaulting to 1000 [ 164.238266][ T5352] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 164.368688][ T5352] lo speed is unknown, defaulting to 1000 [ 164.415642][ T5352] lo speed is unknown, defaulting to 1000 [ 164.453011][ T5352] lo speed is unknown, defaulting to 1000 [ 164.492606][ T5352] lo speed is unknown, defaulting to 1000 [ 164.563808][ T5352] lo speed is unknown, defaulting to 1000 [ 164.600569][ T5366] loop1: detected capacity change from 0 to 2048 [ 164.675099][ T5374] binder: BINDER_SET_CONTEXT_MGR already set [ 164.681164][ T5374] binder: 5372:5374 ioctl 4018620d 200000000040 returned -16 [ 164.937561][ T5366] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.191072][ T5389] loop3: detected capacity change from 0 to 2048 [ 165.297081][ T5389] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.365615][ T5397] siw: device registration error -23 [ 165.514336][ T5403] loop2: detected capacity change from 0 to 128 [ 165.604445][ T5403] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 165.667587][ T5403] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.971279][ T5415] loop0: detected capacity change from 0 to 2048 [ 166.019028][ T5415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.088656][ T5420] loop1: detected capacity change from 0 to 1024 [ 166.238205][ T5420] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noquota,block_validity,jqfmt=vfsv1,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 166.395555][ T5422] xt_CT: No such helper "pptp" [ 166.490112][ T5437] siw: device registration error -23 [ 166.638929][ T5442] loop0: detected capacity change from 0 to 2048 [ 166.717471][ T5442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.915650][ T5444] loop4: detected capacity change from 0 to 8192 [ 167.284913][ T5444] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.591260][ T5467] loop1: detected capacity change from 0 to 2048 [ 167.613826][ T5469] siw: device registration error -23 [ 167.658998][ T5467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.709310][ T5472] loop3: detected capacity change from 0 to 2048 [ 167.772287][ T5472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.792882][ T1107] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 167.821560][ T4287] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 168.325942][ T1107] usb 1-1: device descriptor read/64, error -71 [ 169.301747][ T4287] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x98, skipping [ 169.323526][ T4287] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 15053, setting to 1024 [ 169.331972][ T1107] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 169.338171][ T4287] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 169.354854][ T4287] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.365857][ T4287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.411946][ T5470] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 169.434672][ T4287] usb 5-1: invalid MIDI in EP 0 [ 169.480912][ T4287] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 169.532993][ T4424] udevd[4424]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.549260][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 169.561750][ T1107] usb 1-1: device descriptor read/64, error -71 [ 169.619702][ T5498] siw: device registration error -23 [ 169.641072][ T4194] usb 5-1: USB disconnect, device number 2 [ 169.801567][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 169.821701][ T1107] usb usb1-port1: attempt power cycle [ 170.251650][ T1107] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 170.402271][ T1107] usb 1-1: device descriptor read/8, error -71 [ 170.689059][ T5505] loop4: detected capacity change from 0 to 128 [ 170.751596][ T13] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 170.756267][ T5506] loop3: detected capacity change from 0 to 2048 [ 170.759933][ T13] usb 2-1: config 179 has no interface number 0 [ 170.759988][ T13] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 170.788495][ T13] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 170.801194][ T13] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.812765][ T13] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 170.824613][ T13] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 170.838181][ T13] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 170.847706][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.876322][ T5505] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 170.906706][ T5505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.932306][ T5488] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 170.958227][ T5506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.049692][ T13] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 173.025132][ T4194] usb 2-1: USB disconnect, device number 3 [ 173.051514][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 173.060638][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 173.088670][ T5521] xt_CT: No such helper "pptp" [ 173.102939][ T4194] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 173.569741][ T5545] loop0: detected capacity change from 0 to 1024 [ 174.947115][ T4369] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 175.029038][ T4224] hfsplus: b-tree write err: -5, ino 4 [ 175.213914][ T4369] usb 2-1: device descriptor read/64, error -71 [ 176.321521][ T4369] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 176.976178][ T4369] usb 2-1: device descriptor read/64, error -71 [ 177.152393][ T4369] usb usb2-port1: attempt power cycle [ 179.002511][ T5601] loop0: detected capacity change from 0 to 2048 [ 179.080340][ T5601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.464600][ T5615] fuse: Bad value for 'fd' [ 180.744891][ T5624] loop4: detected capacity change from 0 to 1024 [ 180.938828][ T5624] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noquota,block_validity,jqfmt=vfsv1,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 181.015107][ T5634] loop0: detected capacity change from 0 to 2048 [ 181.146664][ T5634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.017248][ T4197] Bluetooth: hci4: link tx timeout [ 183.023423][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.426079][ T5674] loop4: detected capacity change from 0 to 1024 [ 183.501253][ T5674] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noquota,block_validity,jqfmt=vfsv1,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 183.551663][ T1110] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 183.911835][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.951554][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.990177][ T1110] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.031652][ T1110] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.051259][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.072324][ T1110] usb 3-1: config 0 descriptor?? [ 184.284115][ T5683] loop3: detected capacity change from 0 to 2048 [ 184.370330][ T5683] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.554817][ T1110] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 184.662118][ T1110] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 184.831110][ T1110] usb 3-1: USB disconnect, device number 6 [ 184.979425][ T5687] fido_id[5687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 185.061624][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 185.291657][ T4232] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 185.671598][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.695122][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.735851][ T4232] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 185.771943][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.822531][ T4232] usb 4-1: config 0 descriptor?? [ 186.019257][ T5706] lo speed is unknown, defaulting to 1000 [ 186.293942][ T5706] loop1: detected capacity change from 0 to 128 [ 186.737655][ T4232] elan 0003:04F3:0755.0005: failed to start in urb: -90 [ 186.843642][ T4232] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 187.312501][ T4232] usb 4-1: USB disconnect, device number 11 [ 187.729261][ T5716] fido_id[5716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 187.846322][ T5714] loop4: detected capacity change from 0 to 8192 [ 188.154627][ T5714] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.371882][ T1107] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 188.755846][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.786095][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.861752][ T1107] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.939159][ T1107] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.975191][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.027706][ T1107] usb 1-1: config 0 descriptor?? [ 189.574244][ T1107] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 189.649067][ T1107] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 189.846403][ T4232] usb 1-1: USB disconnect, device number 8 [ 190.040933][ T5744] fido_id[5744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 190.710046][ T5750] lo speed is unknown, defaulting to 1000 [ 193.106902][ T5763] siw: device registration error -23 [ 193.177924][ T5761] loop1: detected capacity change from 0 to 8192 [ 193.184449][ T5769] loop0: detected capacity change from 0 to 1024 [ 193.238967][ T5769] EXT4-fs (loop0): inline encryption not supported [ 193.315074][ T5761] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.321823][ T5769] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.487951][ T5769] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,abort,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 194.205149][ T5782] 9pnet: Insufficient options for proto=fd [ 195.772936][ T5792] netlink: 14 bytes leftover after parsing attributes in process `syz.0.489'. [ 196.964660][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.971146][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.488485][ T5812] loop0: detected capacity change from 0 to 128 [ 198.571746][ T5812] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 198.646707][ T5812] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.679315][ T5810] loop3: detected capacity change from 0 to 8192 [ 198.802469][ T5810] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.981535][ T1107] Bluetooth: hci0: command 0x0406 tx timeout [ 198.989737][ T1107] Bluetooth: hci1: command 0x0406 tx timeout [ 199.019528][ T1107] Bluetooth: hci3: command 0x0406 tx timeout [ 199.053909][ T1107] Bluetooth: hci2: command 0x0406 tx timeout [ 199.624946][ T5819] loop1: detected capacity change from 0 to 256 [ 199.766238][ T5819] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 199.936368][ T5825] 9pnet: Insufficient options for proto=fd [ 200.077258][ T5823] xt_CT: No such helper "pptp" [ 201.897679][ T5827] lo speed is unknown, defaulting to 1000 [ 202.503380][ T26] audit: type=1400 audit(1770235447.049:5): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5844 comm="syz.3.506" [ 202.900152][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 203.120271][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.159962][ T5849] loop3: detected capacity change from 0 to 8192 [ 203.237750][ T5849] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.256976][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.340238][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.356727][ T5858] loop2: detected capacity change from 0 to 256 [ 203.555217][ T5858] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x975a013b, utbl_chksum : 0xe619d30d) [ 203.668677][ T5865] 9pnet: Insufficient options for proto=fd [ 204.724643][ T5853] device syzkaller0 entered promiscuous mode [ 206.059361][ T1110] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 206.711687][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.751882][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.798021][ T1110] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 206.834841][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.877934][ T1110] usb 1-1: config 0 descriptor?? [ 207.270849][ T5896] loop2: detected capacity change from 0 to 2048 [ 207.384283][ T1110] elan 0003:04F3:0755.0007: failed to start in urb: -90 [ 208.264413][ T5896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.309876][ T1110] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 208.393139][ T1110] usb 1-1: USB disconnect, device number 9 [ 208.411735][ T5900] loop1: detected capacity change from 0 to 512 [ 208.602563][ T5905] fido_id[5905]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 208.644402][ T5900] EXT4-fs (loop1): Ignoring removed oldalloc option [ 208.693754][ T5900] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 208.813977][ T5900] EXT4-fs (loop1): 1 truncate cleaned up [ 208.851816][ T5900] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 208.926309][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 208.999087][ T1110] kernel write not supported for file /snd/seq (pid: 1110 comm: kworker/0:2) [ 209.124365][ T5910] loop4: detected capacity change from 0 to 8192 [ 209.911254][ T4182] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 209.938471][ T4182] FAT-fs (loop4): Filesystem has been set read-only [ 210.013154][ T5927] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.841535][ T1110] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 210.965430][ T5946] loop2: detected capacity change from 0 to 1024 [ 211.158128][ T4330] hfsplus: b-tree write err: -5, ino 4 [ 211.164371][ T1110] usb 2-1: Using ep0 maxpacket: 32 [ 211.291849][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.320819][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.345352][ T5952] loop4: detected capacity change from 0 to 2048 [ 211.353529][ T1110] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 211.479497][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.491120][ T1110] usb 2-1: config 0 descriptor?? [ 211.572739][ T5952] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.524018][ T5959] loop3: detected capacity change from 0 to 1024 [ 212.582893][ T1110] logitech 0003:046D:C29C.0008: item fetching failed at offset 5/6 [ 212.591283][ T1110] logitech 0003:046D:C29C.0008: parse failed [ 212.655325][ T1110] logitech: probe of 0003:046D:C29C.0008 failed with error -22 [ 212.663785][ T5959] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noquota,block_validity,jqfmt=vfsv1,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 212.851745][ T4247] usb 2-1: USB disconnect, device number 7 [ 213.382590][ T4232] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 213.651576][ T4232] usb 1-1: Using ep0 maxpacket: 8 [ 213.831664][ T4232] usb 1-1: unable to get BOS descriptor or descriptor too short [ 214.752628][ T4232] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.782970][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 214.803382][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.823975][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 214.871458][ T4232] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 215.107962][ T4232] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 215.117922][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.126941][ T4232] usb 1-1: Product: syz [ 215.131342][ T4232] usb 1-1: Manufacturer: syz [ 215.137036][ T4232] usb 1-1: SerialNumber: syz [ 215.159345][ T4232] usb 1-1: config 0 descriptor?? [ 215.350354][ T4232] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 215.421277][ T4424] udevd[4424]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.749662][ T4240] usb 1-1: USB disconnect, device number 10 [ 217.090121][ T6001] loop4: detected capacity change from 0 to 1024 [ 217.364208][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.373394][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.460526][ T6001] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noquota,block_validity,jqfmt=vfsv1,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 219.082337][ T6012] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 219.699731][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.796458][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.139669][ T6017] loop4: detected capacity change from 0 to 2048 [ 220.235551][ T6017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.480638][ T5981] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.489870][ T5981] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.498919][ T5981] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.507993][ T5981] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.711525][ T6019] netlink: 'syz.0.562': attribute type 12 has an invalid length. [ 220.739249][ T6019] netlink: 'syz.0.562': attribute type 29 has an invalid length. [ 220.757567][ T6019] netlink: 148 bytes leftover after parsing attributes in process `syz.0.562'. [ 220.821742][ T6019] netlink: 59 bytes leftover after parsing attributes in process `syz.0.562'. [ 221.091509][ T4194] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 221.163366][ T1107] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 221.351618][ T4194] usb 3-1: Using ep0 maxpacket: 8 [ 221.363595][ T6045] Bluetooth: hci0: invalid len left 7, exp >= 63 [ 221.407770][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 221.511718][ T4194] usb 3-1: unable to get BOS descriptor or descriptor too short [ 221.531692][ T1107] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 221.540198][ T1107] usb 2-1: config 179 has no interface number 0 [ 221.555847][ T1107] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 221.578081][ T1107] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 221.642145][ T4194] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.457209][ T1107] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 222.468563][ T4194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 222.501539][ T1107] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 222.517574][ T4194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 222.531520][ T1107] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 222.551101][ T4194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 222.567842][ T6055] loop3: detected capacity change from 0 to 2048 [ 222.575298][ T4194] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 222.588796][ T1107] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 222.598267][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.622492][ T6029] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 222.691935][ T6055] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.714568][ T26] audit: type=1800 audit(1770235467.259:6): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.579" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 222.763925][ T4194] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 222.783505][ T4194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.804182][ T4194] usb 3-1: Product: syz [ 222.808429][ T4194] usb 3-1: Manufacturer: syz [ 222.815389][ T4194] usb 3-1: SerialNumber: syz [ 222.832273][ T4194] usb 3-1: config 0 descriptor?? [ 222.855031][ T1107] usb 2-1: USB disconnect, device number 8 [ 222.861529][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 222.869922][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 222.952578][ T4194] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 222.989265][ T4424] udevd[4424]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.009148][ T6065] netlink: 'syz.3.582': attribute type 12 has an invalid length. [ 223.020111][ T6065] netlink: 'syz.3.582': attribute type 29 has an invalid length. [ 223.031657][ T6065] netlink: 148 bytes leftover after parsing attributes in process `syz.3.582'. [ 223.040795][ T6065] netlink: 59 bytes leftover after parsing attributes in process `syz.3.582'. [ 223.116069][ T1107] usb 3-1: USB disconnect, device number 7 [ 223.480501][ T6069] lo speed is unknown, defaulting to 1000 [ 224.088689][ T6072] binder: BINDER_SET_CONTEXT_MGR already set [ 224.121829][ T6072] binder: 6071:6072 ioctl 4018620d 200000000040 returned -16 [ 224.196071][ T6078] loop2: detected capacity change from 0 to 1024 [ 224.382693][ T6078] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noquota,block_validity,jqfmt=vfsv1,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 224.563994][ T6094] lo speed is unknown, defaulting to 1000 [ 225.377505][ T6099] netlink: 'syz.1.593': attribute type 12 has an invalid length. [ 225.535770][ T6099] netlink: 'syz.1.593': attribute type 29 has an invalid length. [ 225.587596][ T6099] netlink: 148 bytes leftover after parsing attributes in process `syz.1.593'. [ 225.634543][ T6099] netlink: 59 bytes leftover after parsing attributes in process `syz.1.593'. [ 225.907793][ T6105] loop3: detected capacity change from 0 to 2048 [ 225.975694][ T6105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.231675][ T4194] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 226.471778][ T4194] usb 3-1: Using ep0 maxpacket: 8 [ 226.632683][ T4194] usb 3-1: unable to get BOS descriptor or descriptor too short [ 226.801787][ T4194] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.816103][ T6116] loop1: detected capacity change from 0 to 128 [ 226.825286][ T4194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 226.856326][ T6116] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 226.871550][ T4194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 226.915057][ T6116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.919118][ T4194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 227.002655][ T4194] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 227.711340][ T6118] xt_CT: No such helper "pptp" [ 227.864555][ T4194] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 227.876569][ T4194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.884703][ T4194] usb 3-1: Product: syz [ 227.888897][ T4194] usb 3-1: Manufacturer: syz [ 227.893630][ T4194] usb 3-1: SerialNumber: syz [ 227.905827][ T4194] usb 3-1: config 0 descriptor?? [ 228.031049][ T4194] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 228.110663][ T4424] udevd[4424]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.149367][ T21] usb 3-1: USB disconnect, device number 8 [ 229.097593][ T6139] lo speed is unknown, defaulting to 1000 [ 229.324342][ T6139] loop1: detected capacity change from 0 to 128 [ 229.851394][ C0] sched: RT throttling activated [ 230.073022][ T6145] netlink: 'syz.3.607': attribute type 12 has an invalid length. [ 230.120550][ T6135] loop2: detected capacity change from 0 to 8192 [ 230.191965][ T6145] netlink: 'syz.3.607': attribute type 29 has an invalid length. [ 230.207474][ T6145] netlink: 148 bytes leftover after parsing attributes in process `syz.3.607'. [ 230.226116][ T6135] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.280366][ T6145] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 230.321635][ T6145] netlink: 'syz.3.607': attribute type 2 has an invalid length. [ 230.419366][ T6145] netlink: 11 bytes leftover after parsing attributes in process `syz.3.607'. [ 230.476982][ T6147] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 230.786892][ T6168] 9pnet: Insufficient options for proto=fd [ 231.167882][ T6168] 9pnet: Insufficient options for proto=fd [ 232.743818][ T6179] xt_CT: No such helper "pptp" [ 233.134899][ T6190] loop4: detected capacity change from 0 to 512 [ 233.260326][ T6190] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.631960][ T6194] process 'syz.4.621' launched './file1' with NULL argv: empty string added [ 233.734078][ T26] audit: type=1804 audit(1770235478.159:7): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.621" name="/newroot/132/file0/file1" dev="loop4" ino=15 res=1 errno=0 [ 234.199947][ T6199] loop4: detected capacity change from 0 to 1024 [ 234.302304][ T6199] EXT4-fs (loop4): Ignoring removed bh option [ 234.315360][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.322790][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.356886][ T6199] EXT4-fs (loop4): Ignoring removed nobh option [ 234.363710][ T6199] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 234.453961][ T6199] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none. [ 235.471004][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.607936][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.406870][ T6171] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.415889][ T6171] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.425224][ T6171] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.434565][ T6171] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.594655][ T6186] lo speed is unknown, defaulting to 1000 [ 236.647758][ T6201] netlink: 'syz.0.624': attribute type 12 has an invalid length. [ 236.681588][ T6201] netlink: 'syz.0.624': attribute type 29 has an invalid length. [ 236.689404][ T6201] netlink: 148 bytes leftover after parsing attributes in process `syz.0.624'. [ 236.711839][ T6201] netlink: 'syz.0.624': attribute type 1 has an invalid length. [ 236.752339][ T6201] netlink: 'syz.0.624': attribute type 2 has an invalid length. [ 236.760061][ T6201] netlink: 11 bytes leftover after parsing attributes in process `syz.0.624'. [ 236.998476][ T6214] loop1: detected capacity change from 0 to 8192 [ 237.078154][ T6214] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.094179][ T6225] 9pnet: Insufficient options for proto=fd [ 237.123515][ T6225] 9pnet: Insufficient options for proto=fd [ 237.200355][ T6233] netlink: 'syz.3.632': attribute type 11 has an invalid length. [ 237.883746][ T6235] xt_CT: No such helper "pptp" [ 237.942714][ T6233] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.112331][ T6233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.623335][ T6253] lo speed is unknown, defaulting to 1000 [ 239.731662][ T6259] netlink: 'syz.3.639': attribute type 12 has an invalid length. [ 239.751557][ T6259] netlink: 'syz.3.639': attribute type 29 has an invalid length. [ 239.759358][ T6259] netlink: 148 bytes leftover after parsing attributes in process `syz.3.639'. [ 239.801605][ T6259] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 239.817166][ T6259] netlink: 'syz.3.639': attribute type 2 has an invalid length. [ 239.857375][ T6259] netlink: 11 bytes leftover after parsing attributes in process `syz.3.639'. [ 241.157252][ T6277] lo speed is unknown, defaulting to 1000 [ 241.323158][ T6273] device syzkaller0 entered promiscuous mode [ 241.414955][ T6288] loop1: detected capacity change from 0 to 128 [ 241.508318][ T6288] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 241.547746][ T6284] loop4: detected capacity change from 0 to 8192 [ 241.559983][ T6288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.602169][ T6284] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.399076][ T6307] lo speed is unknown, defaulting to 1000 [ 245.204201][ T6312] netlink: 'syz.3.654': attribute type 12 has an invalid length. [ 245.242446][ T6312] netlink: 'syz.3.654': attribute type 29 has an invalid length. [ 245.281050][ T6312] netlink: 148 bytes leftover after parsing attributes in process `syz.3.654'. [ 245.296022][ T6312] netlink: 'syz.3.654': attribute type 1 has an invalid length. [ 245.305243][ T6312] netlink: 'syz.3.654': attribute type 2 has an invalid length. [ 245.319290][ T6312] netlink: 11 bytes leftover after parsing attributes in process `syz.3.654'. [ 246.287226][ T6327] loop4: detected capacity change from 0 to 8192 [ 246.331344][ T6327] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.379416][ T6351] lo speed is unknown, defaulting to 1000 [ 247.868660][ T6361] siw: device registration error -23 [ 248.271532][ T4247] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 248.383617][ T6367] xt_CT: No such helper "pptp" [ 248.390066][ T6370] loop1: detected capacity change from 0 to 1024 [ 248.511694][ T4247] usb 5-1: Using ep0 maxpacket: 16 [ 248.631849][ T4247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.661787][ T4247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.718242][ T4247] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 248.743351][ T4247] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 248.763605][ T4247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.803582][ T4247] usb 5-1: config 0 descriptor?? [ 248.870510][ T4330] hfsplus: b-tree write err: -5, ino 4 [ 249.093239][ T6375] binder: 6374:6375 ioctl c0306201 0 returned -14 [ 249.239695][ T6377] lo speed is unknown, defaulting to 1000 [ 249.317192][ T4247] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 249.370529][ T4247] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 249.395705][ T4247] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 249.435456][ T4247] microsoft 0003:045E:07DA.0009: no inputs found [ 249.460872][ T4247] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 249.521628][ T4247] usb 5-1: USB disconnect, device number 3 [ 250.325961][ T6388] loop1: detected capacity change from 0 to 2048 [ 250.655842][ T6386] fido_id[6386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 250.738373][ T4359] loop1: p1 < > p3 p4 [ 250.738373][ T4359] p4: [ 250.772518][ T4359] loop1: p3 start 458752 is beyond EOD, truncated [ 250.801543][ T4359] loop1: p4 size 722688 extends beyond EOD, truncated [ 250.853163][ T4359] loop1: p5 start 262464109 is beyond EOD, truncated [ 250.890329][ T4359] loop1: p6 size 2304 extends beyond EOD, truncated [ 250.956959][ T6388] loop1: p1 < > p3 p4 [ 250.956959][ T6388] p4: [ 250.967875][ T6388] loop1: p3 start 458752 is beyond EOD, truncated [ 250.974441][ T6388] loop1: p4 size 722688 extends beyond EOD, truncated [ 250.982776][ T6388] loop1: p5 start 262464109 is beyond EOD, truncated [ 250.989534][ T6388] loop1: p6 size 2304 extends beyond EOD, truncated [ 251.036058][ T6400] siw: device registration error -23 [ 251.078445][ T3559] loop1: p1 < > p3 p4 [ 251.078445][ T3559] p4: [ 251.137853][ T3559] loop1: p3 start 458752 is beyond EOD, truncated [ 251.166835][ T3559] loop1: p4 size 722688 extends beyond EOD, truncated [ 251.219118][ T3559] loop1: p5 start 262464109 is beyond EOD, truncated [ 251.260226][ T3559] loop1: p6 size 2304 extends beyond EOD, truncated [ 251.382457][ T6412] binder: 6411:6412 ioctl c0306201 0 returned -14 [ 251.438404][ T6408] loop3: detected capacity change from 0 to 2048 [ 251.471166][ T6408] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.582268][ T6416] loop1: detected capacity change from 0 to 8192 [ 251.707948][ T6416] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.821732][ T1110] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 251.895555][ T4348] udevd[4348]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 251.912751][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 251.926336][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 252.081475][ T1110] usb 1-1: Using ep0 maxpacket: 16 [ 252.201747][ T1110] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 252.281799][ T6294] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 252.287883][ T4348] udevd[4348]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 252.290014][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 252.305687][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 252.391882][ T1110] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 252.409652][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.443374][ T1110] usb 1-1: Product: syz [ 252.447744][ T1110] usb 1-1: Manufacturer: syz [ 252.453085][ T1110] usb 1-1: SerialNumber: syz [ 252.472466][ T1110] usb 1-1: config 0 descriptor?? [ 252.514223][ T1110] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 252.542951][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 252.555782][ T4348] udevd[4348]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 252.556090][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 252.581844][ T6294] usb 4-1: Using ep0 maxpacket: 8 [ 252.610547][ T1110] usb 1-1: Detected FT232RL [ 252.742040][ T1110] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 252.752190][ T6294] usb 4-1: unable to get BOS descriptor or descriptor too short [ 252.851796][ T6294] usb 4-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 252.881756][ T6294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 252.934069][ T6294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 252.995534][ T6294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 253.007439][ T1110] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 253.026611][ T1110] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 253.047673][ T6294] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 253.094959][ T1110] usb 1-1: USB disconnect, device number 11 [ 253.141607][ T6294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 253.166362][ T1110] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 253.190528][ T6294] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 253.231699][ T1110] ftdi_sio 1-1:0.0: device disconnected [ 253.407401][ T6294] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 253.427076][ T6294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.466152][ T6294] usb 4-1: Product: syz [ 253.483863][ T6294] usb 4-1: Manufacturer: syz [ 253.541684][ T6294] usb 4-1: SerialNumber: syz [ 253.585737][ T6294] usb 4-1: config 0 descriptor?? [ 253.642253][ T6421] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 253.748718][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 253.787376][ T6294] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 253.891599][ T4424] udevd[4424]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.912532][ T6294] usb 4-1: USB disconnect, device number 12 [ 254.019323][ T6436] loop2: detected capacity change from 0 to 512 [ 254.440876][ T6436] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.692: iget: bad i_size value: 38620345925642 [ 254.520041][ T6436] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.692: couldn't read orphan inode 15 (err -117) [ 254.546435][ T6440] siw: device registration error -23 [ 254.652410][ T6436] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 255.363485][ T6448] loop3: detected capacity change from 0 to 8192 [ 255.422330][ T6448] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 255.468488][ T6448] UDF-fs: Scanning with blocksize 512 failed [ 255.556892][ T6448] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 256.213598][ T6448] UDF-fs: Scanning with blocksize 1024 failed [ 256.241704][ T6448] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 256.249166][ T6448] UDF-fs: Scanning with blocksize 2048 failed [ 256.349917][ T6448] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.480292][ T26] audit: type=1800 audit(1770235501.019:8): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.697" name="file1" dev="loop3" ino=818 res=0 errno=0 [ 257.624532][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.631134][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.680178][ T6475] siw: device registration error -23 [ 257.935149][ T6477] loop3: detected capacity change from 0 to 2048 [ 258.208156][ T6477] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 258.291774][ T6477] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.549034][ T6477] fs-verity: sha512 using implementation "sha512-avx2" [ 259.726603][ T6499] loop3: detected capacity change from 0 to 128 [ 263.045032][ T6520] loop4: detected capacity change from 0 to 1024 [ 263.229130][ T6520] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noquota,block_validity,jqfmt=vfsv1,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 263.803328][ T6537] loop4: detected capacity change from 0 to 2048 [ 263.943902][ T6537] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 263.999538][ T6537] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 264.166359][ T6537] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 264.228905][ T6537] EXT4-fs (loop4): This should not happen!! Data will be lost [ 264.228905][ T6537] [ 264.271661][ T6537] EXT4-fs (loop4): Total free blocks count 0 [ 264.298305][ T6537] EXT4-fs (loop4): Free/Dirty block details [ 264.325727][ T6537] EXT4-fs (loop4): free_blocks=2415919504 [ 264.372754][ T6537] EXT4-fs (loop4): dirty_blocks=48 [ 264.378053][ T6537] EXT4-fs (loop4): Block reservation details [ 264.439450][ T6537] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 264.470039][ T6543] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 28 [ 264.522161][ T6543] EXT4-fs (loop4): This should not happen!! Data will be lost [ 264.522161][ T6543] [ 264.771532][ T4240] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 265.211582][ T4240] usb 2-1: Using ep0 maxpacket: 8 [ 265.332145][ T4240] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 265.346916][ T4240] usb 2-1: config 179 has no interface number 0 [ 265.369434][ T4240] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 265.822144][ T4240] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 265.866628][ T6557] fuse: Unknown parameter 'group_i00000000000000000000' [ 265.883963][ T4240] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.955195][ T4240] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 266.081572][ T4240] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 266.243705][ T4240] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 266.253708][ T4240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.311860][ T6546] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 267.102491][ T4240] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input7 [ 267.585508][ T4240] usb 2-1: USB disconnect, device number 9 [ 267.601544][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 267.609896][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 267.656314][ T4240] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 268.516808][ T6575] loop3: detected capacity change from 0 to 2048 [ 268.788499][ T6575] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.168678][ T6585] fuse: Unknown parameter 'group_id00000000000000000000' [ 273.086777][ T6612] netlink: 'syz.2.747': attribute type 12 has an invalid length. [ 273.164274][ T6612] netlink: 'syz.2.747': attribute type 29 has an invalid length. [ 273.461527][ T6612] netlink: 148 bytes leftover after parsing attributes in process `syz.2.747'. [ 274.021835][ T6612] netlink: 'syz.2.747': attribute type 1 has an invalid length. [ 274.211521][ T6612] netlink: 'syz.2.747': attribute type 2 has an invalid length. [ 274.219739][ T6612] netlink: 11 bytes leftover after parsing attributes in process `syz.2.747'. [ 275.416238][ T6624] loop2: detected capacity change from 0 to 1024 [ 275.529463][ T6632] device syzkaller0 entered promiscuous mode [ 275.654280][ T6624] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 275.727772][ T6624] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.842290][ T6624] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.752: inode has both inline data and extents flags [ 275.856795][ T6638] loop4: detected capacity change from 0 to 512 [ 275.908756][ T6640] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 275.946443][ T6638] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 277.787222][ T6649] siw: device registration error -23 [ 279.171522][ T4240] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 279.310733][ T6669] loop2: detected capacity change from 0 to 128 [ 279.437004][ T6669] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 279.530809][ T6669] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.533300][ T4240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.552824][ T4240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.563938][ T4240] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 279.573489][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.585199][ T4240] usb 4-1: config 0 descriptor?? [ 279.592479][ T6669] ext2 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.697465][ T26] audit: type=1804 audit(1770235524.239:9): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.765" name="/newroot/128/file0/file1" dev="loop2" ino=12 res=1 errno=0 [ 279.824577][ T26] audit: type=1804 audit(1770235524.359:10): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.765" name="/newroot/128/file0/file1" dev="loop2" ino=12 res=1 errno=0 [ 279.850375][ T6673] device syzkaller0 entered promiscuous mode [ 280.085025][ T4240] hid-led 0003:27B8:01ED.000A: unknown main item tag 0x0 [ 280.103240][ T4240] hid-led 0003:27B8:01ED.000A: unknown main item tag 0x0 [ 280.118904][ T4240] hid-led 0003:27B8:01ED.000A: unknown main item tag 0x0 [ 280.135608][ T4240] hid-led 0003:27B8:01ED.000A: unknown main item tag 0x0 [ 280.145718][ T4240] hid-led 0003:27B8:01ED.000A: unknown main item tag 0x0 [ 280.575620][ T4240] hid-led 0003:27B8:01ED.000A: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 280.897241][ T6690] loop4: detected capacity change from 0 to 128 [ 280.976045][ T6690] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 281.009945][ T6690] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 281.166495][ T4240] hid-led 0003:27B8:01ED.000A: ThingM blink(1) initialized [ 281.179279][ T4240] usb 4-1: USB disconnect, device number 13 [ 282.292960][ T6709] loop2: detected capacity change from 0 to 128 [ 282.380572][ T6704] fido_id[6704]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 282.492672][ T6709] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 282.694076][ T6719] lo speed is unknown, defaulting to 1000 [ 283.033421][ T6709] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.376436][ T6728] loop4: detected capacity change from 0 to 128 [ 283.407092][ T6730] loop3: detected capacity change from 0 to 128 [ 283.465164][ T6728] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 283.561244][ T6728] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 283.579257][ T6728] ext2 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.624119][ T144] attempt to access beyond end of device [ 284.624119][ T144] loop3: rw=1, want=177, limit=128 [ 285.081586][ T4287] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 285.347683][ T4287] usb 4-1: device descriptor read/64, error -71 [ 285.419682][ T6761] loop1: detected capacity change from 0 to 2048 [ 285.429980][ T6765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.574510][ T6761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.647033][ T4287] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 285.732106][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.739683][ T6736] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.864651][ T4287] usb 4-1: device descriptor read/64, error -71 [ 285.991702][ T4287] usb usb4-port1: attempt power cycle [ 286.441572][ T4287] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 286.557525][ T6736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.571957][ T4287] usb 4-1: device descriptor read/8, error -71 [ 286.616297][ T6736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.672139][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 286.852983][ T4287] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 286.961870][ T4287] usb 4-1: device descriptor read/8, error -71 [ 287.080334][ T6736] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.089536][ T6736] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.098611][ T6736] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.102202][ T4287] usb usb4-port1: unable to enumerate USB device [ 287.107580][ T6736] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.116447][ T13] usb 5-1: config index 0 descriptor too short (expected 1042, got 18) [ 287.268532][ T4240] lo speed is unknown, defaulting to 1000 [ 287.318564][ T13] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=fc.ee [ 287.355439][ T13] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255 [ 287.370470][ T13] usb 5-1: Product: syz [ 287.375482][ T13] usb 5-1: Manufacturer: syz [ 287.380161][ T13] usb 5-1: SerialNumber: syz [ 287.396733][ T13] usb 5-1: config 0 descriptor?? [ 287.614525][ T13] usb 5-1: selecting invalid altsetting 1 [ 288.174431][ T13] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 288.324406][ T13] usb 5-1: USB disconnect, device number 4 [ 288.468486][ T6802] loop3: detected capacity change from 0 to 4096 [ 288.679203][ T6806] lo speed is unknown, defaulting to 1000 [ 288.947191][ T6724] udevd[6724]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.158716][ T6802] EXT4-fs (loop3): Ignoring removed bh option [ 289.312149][ T6802] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback. [ 289.558016][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.808'. [ 289.580227][ T6823] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 289.740963][ T6829] loop1: detected capacity change from 0 to 512 [ 289.827881][ T6825] loop4: detected capacity change from 0 to 8192 [ 289.892373][ T6825] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 289.988197][ T6829] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.021874][ T26] audit: type=1800 audit(1770235534.569:11): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.799" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 290.460469][ T26] audit: type=1800 audit(1770235534.709:12): pid=6802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.799" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 291.867550][ T6865] loop1: detected capacity change from 0 to 512 [ 291.984446][ T6865] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 292.031864][ T6865] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.196815][ T6869] loop4: detected capacity change from 0 to 8192 [ 292.367109][ T6869] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 292.405302][ T13] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 293.194565][ T6880] lo speed is unknown, defaulting to 1000 [ 293.331471][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 293.393447][ T6882] lo speed is unknown, defaulting to 1000 [ 293.451698][ T13] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 293.469072][ T13] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 293.509430][ T13] usb 4-1: config 179 has no interface number 0 [ 293.529617][ T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 293.571486][ T13] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 293.615184][ T13] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 293.645572][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.934256][ T13] usb 4-1: USB disconnect, device number 18 [ 294.041052][ T6908] input: syz0 as /devices/virtual/input/input8 [ 294.386482][ T6915] loop2: detected capacity change from 0 to 512 [ 294.468437][ T13] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 294.485477][ T6915] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 294.851804][ T13] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 294.886126][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.282480][ T13] usb 1-1: config 0 has no interface number 0 [ 295.469325][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 295.501108][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.524711][ T13] usb 1-1: Product: syz [ 295.531018][ T13] usb 1-1: Manufacturer: syz [ 295.546641][ T13] usb 1-1: SerialNumber: syz [ 295.586697][ T13] usb 1-1: config 0 descriptor?? [ 295.839846][ T6940] loop2: detected capacity change from 0 to 256 [ 295.962145][ T6940] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 296.081247][ T13] usb 1-1: USB disconnect, device number 12 [ 296.696089][ T6955] loop2: detected capacity change from 0 to 512 [ 296.720848][ T6956] mmap: syz.4.851 (6956) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 296.776806][ T6955] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 299.167674][ T6996] loop4: detected capacity change from 0 to 1024 [ 299.217766][ T6996] EXT4-fs (loop4): Ignoring removed orlov option [ 299.267893][ T6996] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 299.444488][ T7006] loop3: detected capacity change from 0 to 512 [ 299.465015][ T7007] device syzkaller0 entered promiscuous mode [ 299.504305][ T7006] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 299.941573][ T26] audit: type=1804 audit(1770235544.449:13): pid=7013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.866" name="/newroot/161/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 301.212608][ T7021] fuse: Invalid rootmode [ 301.364194][ T7028] loop4: detected capacity change from 0 to 8 [ 302.845507][ T7053] loop2: detected capacity change from 0 to 512 [ 302.873209][ T7046] device syzkaller0 entered promiscuous mode [ 302.988944][ T7053] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.025219][ T7052] loop4: detected capacity change from 0 to 2048 [ 303.551914][ T26] audit: type=1804 audit(1770235547.819:14): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.881" name="/newroot/151/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 304.084517][ T7064] fuse: Invalid rootmode [ 304.288179][ T7071] loop1: detected capacity change from 0 to 1024 [ 304.378258][ T7077] loop2: detected capacity change from 0 to 512 [ 304.521131][ T7071] hfsplus: xattr searching failed [ 304.538691][ T7077] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 304.704030][ T7077] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.754840][ T4330] hfsplus: b-tree write err: -5, ino 3 [ 304.892742][ T7077] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.889: Invalid inode table block 0 in block_group 0 [ 305.020422][ T7077] EXT4-fs (loop2): Remounting filesystem read-only [ 305.044542][ T7077] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 305.097587][ T7077] EXT4-fs (loop2): Remounting filesystem read-only [ 305.118771][ T7077] EXT4-fs error (device loop2): __ext4_unlink:3327: inode #2: comm syz.2.889: mark_inode_dirty error [ 305.170475][ T7077] EXT4-fs (loop2): Remounting filesystem read-only [ 305.342649][ T9] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm kworker/u4:0: Invalid inode table block 0 in block_group 0 [ 305.402251][ T9] EXT4-fs (loop2): Remounting filesystem read-only [ 305.626174][ T7100] device syzkaller0 entered promiscuous mode [ 305.801672][ T6294] Bluetooth: hci4: command 0x0406 tx timeout [ 305.913081][ T7109] fuse: Bad value for 'rootmode' [ 306.107368][ T7117] input: syz0 as /devices/virtual/input/input9 [ 306.501505][ T4240] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 306.658732][ T7126] fuse: Unknown parameter 'grou00000000000000000000' [ 306.911915][ T4240] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 306.930388][ T4240] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.964386][ T4240] usb 2-1: config 0 has no interface number 0 [ 307.015492][ T7133] loop2: detected capacity change from 0 to 1024 [ 307.171842][ T4240] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 307.186436][ T4240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.203568][ T4240] usb 2-1: Product: syz [ 307.212592][ T4240] usb 2-1: Manufacturer: syz [ 307.217284][ T4240] usb 2-1: SerialNumber: syz [ 307.273933][ T7133] EXT4-fs (loop2): Ignoring removed nobh option [ 307.281177][ T4240] usb 2-1: config 0 descriptor?? [ 307.287954][ T7133] EXT4-fs (loop2): quotafile must be on filesystem root [ 307.873223][ T4240] usb 2-1: USB disconnect, device number 10 [ 309.714110][ T7159] fuse: Unknown parameter 'grou00000000000000000000' [ 312.342428][ T7178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.921'. [ 312.351919][ T7178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.921'. [ 313.430523][ T7182] 9pnet: Insufficient options for proto=fd [ 313.468842][ T7184] loop1: detected capacity change from 0 to 128 [ 313.760308][ T7184] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 313.820444][ T7184] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.232061][ T7194] loop3: detected capacity change from 0 to 512 [ 314.299083][ T7191] xt_CT: No such helper "pptp" [ 314.564047][ T7194] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 314.622928][ T7194] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 314.662686][ T7200] fuse: Unknown parameter 'grou00000000000000000000' [ 314.691710][ T7194] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.929: Corrupt directory, running e2fsck is recommended [ 314.767031][ T7194] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 314.845786][ T7194] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.929: corrupted in-inode xattr [ 314.932615][ T7194] EXT4-fs (loop3): Remounting filesystem read-only [ 314.966625][ T7194] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.929: couldn't read orphan inode 15 (err -117) [ 315.091748][ T7194] EXT4-fs (loop3): Remounting filesystem read-only [ 315.201880][ T7194] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 317.554859][ T7217] loop4: detected capacity change from 0 to 512 [ 317.622053][ T7221] 9pnet: Insufficient options for proto=fd [ 317.648846][ T7217] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 318.092518][ T26] audit: type=1804 audit(1770235562.609:15): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.937" name="/newroot/200/file0/file1" dev="loop4" ino=15 res=1 errno=0 [ 318.479729][ T7233] xt_CT: No such helper "pptp" [ 318.749291][ T7240] fuse: Unknown parameter 'group_i00000000000000000000' [ 318.929558][ T7243] loop1: detected capacity change from 0 to 2048 [ 319.063855][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.070484][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.206888][ T7243] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 319.251731][ T7243] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 319.320904][ T7243] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 319.379313][ T7243] UDF-fs: Scanning with blocksize 512 failed [ 319.438305][ T7243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.641489][ T4287] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 319.884300][ T7259] 9pnet: Insufficient options for proto=fd [ 319.891541][ T4287] usb 1-1: Using ep0 maxpacket: 8 [ 320.011617][ T4287] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 320.098442][ T7264] loop4: detected capacity change from 0 to 512 [ 320.121590][ T4287] usb 1-1: config 179 has no interface number 0 [ 320.127950][ T4287] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 320.899045][ T4287] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 320.945608][ T7264] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 321.111588][ T4287] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 321.138660][ T4287] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 321.331598][ T26] audit: type=1804 audit(1770235565.749:16): pid=7276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.953" name="/newroot/204/file0/file1" dev="loop4" ino=15 res=1 errno=0 [ 321.582763][ T7273] loop3: detected capacity change from 0 to 128 [ 321.621342][ T4287] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 321.671774][ T7273] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 321.681844][ T4287] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 321.720608][ T7273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.722181][ T4287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.794785][ T7245] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 322.041104][ T13] usb 1-1: USB disconnect, device number 13 [ 322.047373][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 322.047474][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 322.072918][ T7287] fuse: Unknown parameter 'group_i00000000000000000000' [ 322.145771][ T7282] xt_CT: No such helper "pptp" [ 322.186957][ T7295] 9pnet: Insufficient options for proto=fd [ 322.305619][ T7301] loop1: detected capacity change from 0 to 1024 [ 322.343548][ T7303] input: syz0 as /devices/virtual/input/input10 [ 322.384625][ T7301] EXT4-fs (loop1): Ignoring removed orlov option [ 322.443809][ T7301] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 322.491519][ T4240] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 322.775746][ T7318] loop3: detected capacity change from 0 to 512 [ 322.850566][ T7318] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.971: inode has both inline data and extents flags [ 322.864668][ T4240] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 322.878488][ T4240] usb 5-1: config 0 has no interface number 0 [ 322.883457][ T7318] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.971: couldn't read orphan inode 15 (err -117) [ 322.887691][ T4240] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 322.908036][ T4240] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 129, changing to 4 [ 322.919895][ T4240] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 39133, setting to 1023 [ 322.933973][ T4240] usb 5-1: config 0 interface 11 has no altsetting 0 [ 322.940757][ T4240] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 322.950599][ T4240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.951782][ T7318] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 322.972706][ T4240] usb 5-1: config 0 descriptor?? [ 322.995249][ T7297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 323.035311][ T4240] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 323.048373][ T4240] keyspan 5-1:0.11: unsupported endpoint type 1 [ 323.065706][ T4240] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 323.081010][ T4240] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 323.109863][ T4240] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 323.128042][ T4240] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 323.137705][ T4240] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 323.142199][ T4287] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 323.156664][ T4240] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 323.202452][ T4240] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 323.214466][ T4240] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 323.223732][ T4240] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 323.250622][ T4240] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 323.279413][ T4240] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 323.297104][ T4240] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 323.308558][ T7328] fuse: Unknown parameter 'group_i00000000000000000000' [ 323.316386][ T4240] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 323.352335][ T4240] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 323.422028][ T4240] usb 5-1: USB disconnect, device number 5 [ 323.431693][ T4287] usb 3-1: Using ep0 maxpacket: 8 [ 323.478338][ T4240] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 323.524595][ T4240] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 323.544680][ T7333] input: syz0 as /devices/virtual/input/input11 [ 323.553421][ T4240] keyspan 5-1:0.11: device disconnected [ 323.576898][ T4287] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 323.591736][ T7335] loop1: detected capacity change from 0 to 128 [ 323.598303][ T4287] usb 3-1: config 179 has no interface number 0 [ 323.619102][ T4287] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 323.657131][ T7335] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 323.671957][ T4287] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 323.704095][ T7335] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.730600][ T7337] loop3: detected capacity change from 0 to 512 [ 323.740218][ T4287] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 323.923421][ T4287] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 323.945074][ T4287] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 323.958832][ T4287] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 323.968000][ T4287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.029219][ T7320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 324.210257][ T7337] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 324.268250][ T7340] xt_CT: No such helper "pptp" [ 324.275948][ T4287] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input12 [ 324.502825][ T4287] usb 3-1: USB disconnect, device number 9 [ 324.511556][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 324.519951][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 324.533373][ T4287] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 324.548231][ T26] audit: type=1804 audit(1770235569.089:17): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.978" name="/newroot/176/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 324.588861][ T7346] input: syz0 as /devices/virtual/input/input13 [ 324.825405][ T7360] fuse: Unknown parameter 'group_id00000000000000000000' [ 325.090523][ T7369] loop4: detected capacity change from 0 to 256 [ 325.302485][ T7374] lo speed is unknown, defaulting to 1000 [ 325.688241][ T7369] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 325.758196][ T7369] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 325.800059][ T7369] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 325.873181][ T7385] loop1: detected capacity change from 0 to 128 [ 325.886559][ T7384] input: syz0 as /devices/virtual/input/input14 [ 325.968247][ T7385] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 326.035794][ T7385] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 326.289020][ T7385] ext2 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.661767][ T4287] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 326.834270][ T7395] loop4: detected capacity change from 0 to 512 [ 326.893817][ T7395] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 327.251644][ T26] audit: type=1804 audit(1770235571.759:18): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.994" name="/newroot/212/file0/file1" dev="loop4" ino=15 res=1 errno=0 [ 327.982750][ T4287] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 328.007619][ T4287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.031071][ T7405] loop4: detected capacity change from 0 to 256 [ 328.055682][ T4287] usb 4-1: config 0 has no interface number 0 [ 328.098203][ T7405] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 328.172352][ T7407] fuse: Unknown parameter 'group_id00000000000000000000' [ 328.291878][ T4287] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 328.310501][ T4287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.354046][ T4287] usb 4-1: Product: syz [ 328.358620][ T4287] usb 4-1: Manufacturer: syz [ 328.369684][ T4287] usb 4-1: SerialNumber: syz [ 328.409346][ T4287] usb 4-1: config 0 descriptor?? [ 328.698201][ T7414] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 328.711016][ T4247] usb 4-1: USB disconnect, device number 19 [ 328.718352][ T4231] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 329.116783][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 329.195520][ T7422] lo speed is unknown, defaulting to 1000 [ 329.921180][ T7428] loop3: detected capacity change from 0 to 512 [ 330.054992][ T7428] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 330.086653][ T4231] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 330.152688][ T7436] fuse: Unknown parameter 'group_id00000000000000000000' [ 330.330197][ T4231] usb 2-1: config 179 has no interface number 0 [ 330.361617][ T26] audit: type=1804 audit(1770235574.899:19): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1007" name="/newroot/179/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 330.406984][ T4231] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 330.471706][ T4231] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 330.537701][ T4247] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 330.551830][ T4231] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 330.571945][ T4231] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 330.589807][ T4231] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 330.623688][ T4231] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 330.646769][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.821878][ T7411] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 330.911631][ T4247] usb 5-1: Using ep0 maxpacket: 16 [ 331.047868][ T4247] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.099401][ T4247] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.152717][ T4247] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 331.215448][ T4247] usb 5-1: config 0 interface 0 has no altsetting 0 [ 331.254758][ T4247] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 331.352523][ T4247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.403034][ T4247] usb 5-1: config 0 descriptor?? [ 331.418967][ T4240] usb 2-1: USB disconnect, device number 11 [ 331.421660][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 331.433327][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 331.846654][ T7460] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 331.898548][ T4247] hid (null): unknown global tag 0xd [ 331.918009][ T4247] hid (null): invalid report_count 36425 [ 332.116709][ T4247] usb 5-1: USB disconnect, device number 6 [ 332.802510][ T7475] loop2: detected capacity change from 0 to 512 [ 332.946424][ T7475] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 333.962059][ T26] audit: type=1804 audit(1770235578.509:20): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1024" name="/newroot/186/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 334.201623][ T13] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 334.312498][ T7498] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 334.461446][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 334.478909][ T7500] loop3: detected capacity change from 0 to 128 [ 334.581953][ T13] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 334.595638][ T7500] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 334.666167][ T13] usb 1-1: config 179 has no interface number 0 [ 334.691689][ T7500] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 334.734160][ T13] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 334.796886][ T13] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 334.838992][ T7509] 9pnet: Insufficient options for proto=fd [ 334.859302][ T13] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 334.912441][ T13] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 334.944315][ T13] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 334.998504][ T13] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 335.054143][ T7512] loop2: detected capacity change from 0 to 256 [ 335.061703][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.111801][ T7487] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 335.276779][ T7512] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.297187][ T7512] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 335.354692][ T7512] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 335.421932][ T4232] usb 1-1: USB disconnect, device number 14 [ 335.431511][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 335.439944][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 336.041757][ T1107] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 336.414804][ T7525] lo speed is unknown, defaulting to 1000 [ 336.430824][ T7527] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 336.481499][ T1107] usb 4-1: Using ep0 maxpacket: 32 [ 336.619709][ T1107] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.634071][ T1107] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.802354][ T1107] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 336.843705][ T1107] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 336.954850][ T1107] usb 4-1: Product: syz [ 336.959112][ T1107] usb 4-1: Manufacturer: syz [ 337.072929][ T1107] hub 4-1:4.0: USB hub found [ 337.086271][ T7535] loop2: detected capacity change from 0 to 512 [ 337.148065][ T7536] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 337.242019][ T7535] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 337.281649][ T1107] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 337.497478][ T26] audit: type=1804 audit(1770235582.039:21): pid=7539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1043" name="/newroot/192/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 337.652457][ T4231] usb 4-1: USB disconnect, device number 20 [ 337.932585][ T7543] 9pnet: Insufficient options for proto=fd [ 338.164137][ T7553] 9pnet: Could not find request transport: fd0x0000000000000003 [ 338.226001][ T7555] loop2: detected capacity change from 0 to 512 [ 338.474658][ T4232] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 338.494056][ T7564] lo speed is unknown, defaulting to 1000 [ 338.586406][ T7555] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 338.882061][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 338.901866][ T26] audit: type=1804 audit(1770235583.429:22): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1049" name="/newroot/193/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 339.021786][ T4232] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 339.036633][ T4232] usb 2-1: config 179 has no interface number 0 [ 339.195782][ T4232] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 339.236007][ T4232] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 339.268354][ T4232] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 339.289732][ T7579] loop4: detected capacity change from 0 to 512 [ 339.332760][ T4232] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 339.400520][ T4232] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 339.421908][ T7579] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 339.492165][ T4232] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 339.516013][ T7583] 9pnet: Insufficient options for proto=fd [ 339.531769][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.611541][ T26] audit: type=1804 audit(1770235584.139:23): pid=7584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1059" name="/newroot/225/file0/file1" dev="loop4" ino=15 res=1 errno=0 [ 339.745274][ T7549] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 340.097482][ T13] usb 2-1: USB disconnect, device number 12 [ 340.121405][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 340.316276][ T7593] loop2: detected capacity change from 0 to 2048 [ 340.559916][ T7593] loop2: p1 < > p3 p4 [ 340.559916][ T7593] p4: [ 340.592434][ T7593] loop2: p3 start 458752 is beyond EOD, truncated [ 340.599142][ T7593] loop2: p4 size 722688 extends beyond EOD, truncated [ 340.624952][ T7593] loop2: p5 start 262464109 is beyond EOD, truncated [ 340.632037][ T7593] loop2: p6 size 2304 extends beyond EOD, truncated [ 340.855468][ T7598] 9pnet: Could not find request transport: fd0x0000000000000003 [ 340.955521][ T7600] loop4: detected capacity change from 0 to 128 [ 341.050610][ T7600] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 341.072095][ T7600] ext4 filesystem being mounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 341.104092][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.148325][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 341.166411][ T6724] udevd[6724]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 341.180895][ T6703] udevd[6703]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 341.374892][ T7608] lo speed is unknown, defaulting to 1000 [ 341.445178][ T7611] loop1: detected capacity change from 0 to 512 [ 341.455920][ T7613] 9pnet: Insufficient options for proto=fd [ 341.665338][ T7611] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 342.423280][ T26] audit: type=1804 audit(1770235586.959:24): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1070" name="/newroot/219/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 342.865298][ T7637] 9pnet: Insufficient options for proto=fd [ 343.065916][ T7645] loop3: detected capacity change from 0 to 128 [ 343.224682][ T7645] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.371629][ T7645] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 343.501679][ T1107] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 343.780351][ T7654] 9pnet: Insufficient options for proto=fd [ 343.847431][ T7656] lo speed is unknown, defaulting to 1000 [ 343.887281][ T7657] loop4: detected capacity change from 0 to 128 [ 343.952518][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.988759][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.173631][ T1107] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 344.183717][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.202485][ T1107] usb 2-1: config 0 descriptor?? [ 344.267755][ T7660] lo speed is unknown, defaulting to 1000 [ 344.309377][ T1107] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 345.408742][ T7670] loop3: detected capacity change from 0 to 128 [ 345.467106][ T7672] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 345.522800][ T7674] 9pnet: Insufficient options for proto=fd [ 345.545406][ T7670] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 345.620957][ T7670] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.714197][ T7685] loop2: detected capacity change from 0 to 2048 [ 346.727472][ T1107] usb 2-1: USB disconnect, device number 13 [ 346.770386][ T7689] 9pnet: Insufficient options for proto=fd [ 346.796423][ T6724] loop2: p1 < > p3 p4 [ 346.796423][ T6724] p4: [ 346.822746][ T6724] loop2: p3 start 458752 is beyond EOD, truncated [ 346.853027][ T6724] loop2: p4 size 722688 extends beyond EOD, truncated [ 346.860682][ T7687] loop4: detected capacity change from 0 to 2048 [ 346.874268][ T7691] loop3: detected capacity change from 0 to 128 [ 346.885944][ T6724] loop2: p5 start 262464109 is beyond EOD, truncated [ 346.913922][ T6724] loop2: p6 size 2304 extends beyond EOD, truncated [ 346.937084][ T7685] loop2: p1 < > p3 p4 [ 346.937084][ T7685] p4: [ 346.947844][ T7685] loop2: p3 start 458752 is beyond EOD, truncated [ 346.954449][ T7685] loop2: p4 size 722688 extends beyond EOD, truncated [ 346.964034][ T7685] loop2: p5 start 262464109 is beyond EOD, truncated [ 346.970801][ T7685] loop2: p6 size 2304 extends beyond EOD, truncated [ 346.999753][ T7687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.054768][ T7693] lo speed is unknown, defaulting to 1000 [ 347.100386][ T7693] loop1: detected capacity change from 0 to 128 [ 347.159038][ T7691] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 347.272014][ T7691] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 347.306438][ T7697] fuse: Bad value for 'fd' [ 347.386529][ T6724] udevd[6724]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 347.408057][ T4348] udevd[4348]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 347.421304][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 347.459478][ T7699] loop4: detected capacity change from 0 to 2048 [ 347.471113][ T4183] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 347.511469][ T4183] FAT-fs (loop1): Filesystem has been set read-only [ 347.520641][ T7703] netlink: 'syz.2.1103': attribute type 12 has an invalid length. [ 347.536575][ T7699] loop4: p1 < > p3 [ 347.567712][ T7699] loop4: p3 size 134217728 extends beyond EOD, truncated [ 347.575345][ T7703] netlink: 'syz.2.1103': attribute type 29 has an invalid length. [ 347.655379][ T7703] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1103'. [ 348.809329][ T4348] udevd[4348]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 348.844677][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 348.880293][ T6724] udevd[6724]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 348.904169][ T7713] lo speed is unknown, defaulting to 1000 [ 349.251223][ T7730] fuse: Bad value for 'fd' [ 349.351980][ T1107] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 349.457346][ T7734] lo speed is unknown, defaulting to 1000 [ 349.506951][ T7734] loop3: detected capacity change from 0 to 128 [ 349.560869][ T4186] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 349.564152][ T7737] loop2: detected capacity change from 0 to 128 [ 349.593096][ T4186] FAT-fs (loop3): Filesystem has been set read-only [ 349.742477][ T7737] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 349.753644][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.763499][ T7737] ext4 filesystem being mounted at /206/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 349.764741][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.814602][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 349.818342][ T1107] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 349.859742][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.889494][ T1107] usb 5-1: config 0 descriptor?? [ 349.895248][ T6724] udevd[6724]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 349.944606][ T1107] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 350.242378][ T7747] lo speed is unknown, defaulting to 1000 [ 350.802311][ T7755] Illegal XDP return value 2868626263, expect packet loss! [ 350.972466][ T7759] loop1: detected capacity change from 0 to 1024 [ 350.983325][ T7760] loop2: detected capacity change from 0 to 256 [ 351.091636][ T7760] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 351.139914][ T7759] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 351.229142][ T7759] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 16: comm syz.1.1119: bad entry in directory: inode out of bounds - offset=76, inode=589840, rec_len=16, size=1024 fake=0 [ 351.721687][ T7770] input: syz0 as /devices/virtual/input/input15 [ 351.733914][ T7772] fuse: Bad value for 'fd' [ 352.103640][ T4232] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 352.170987][ T4287] usb 5-1: USB disconnect, device number 7 [ 352.532650][ T4232] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 352.575534][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.670153][ T4232] usb 2-1: config 0 has no interface number 0 [ 352.893424][ T21] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 353.043367][ T4232] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 353.140335][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.366049][ T4232] usb 2-1: Product: syz [ 353.370352][ T4232] usb 2-1: Manufacturer: syz [ 353.376180][ T4232] usb 2-1: SerialNumber: syz [ 353.386699][ T4232] usb 2-1: config 0 descriptor?? [ 353.394338][ T7791] loop4: detected capacity change from 0 to 128 [ 353.478183][ T7792] lo speed is unknown, defaulting to 1000 [ 353.583168][ T7791] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 353.632748][ T7791] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 353.911759][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.935865][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.961404][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 353.981494][ T21] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 353.990854][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.043509][ T4232] usb 2-1: USB disconnect, device number 14 [ 354.102617][ T21] usb 4-1: config 0 descriptor?? [ 354.256491][ T7801] loop4: detected capacity change from 0 to 512 [ 354.345808][ T7801] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.450190][ T26] audit: type=1804 audit(1770235598.989:25): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1133" name="/newroot/238/file0/file1" dev="loop4" ino=15 res=1 errno=0 [ 354.594221][ T21] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 354.626513][ T21] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 355.436655][ C0] hrtimer: interrupt took 45759 ns [ 355.842856][ T7827] loop1: detected capacity change from 0 to 128 [ 356.084552][ T4255] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 356.378827][ T7827] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 356.526617][ T7827] ext4 filesystem being mounted at /233/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 356.558786][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.946646][ T4287] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 358.051515][ T4255] usb 4-1: device descriptor read/64, error -71 [ 358.192737][ T4287] usb 2-1: Using ep0 maxpacket: 32 [ 358.311648][ T4287] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 358.323547][ T4287] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 358.332157][ T4255] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 358.338473][ T4287] usb 2-1: config 0 interface 0 has no altsetting 0 [ 358.351559][ T4287] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 358.682133][ T4255] usb 4-1: device firmware changed [ 358.701181][ T21] usb 4-1: USB disconnect, device number 21 [ 358.748265][ T4287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.761153][ T4287] usb 2-1: config 0 descriptor?? [ 358.931524][ T21] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 359.161675][ T4240] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 359.246162][ T4287] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 359.268180][ T4287] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 359.307421][ T4287] hid-thrustmaster 0003:044F:B65D.000D: hidraw0: USB HID v0.04 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 359.321788][ T21] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 359.343988][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.359928][ T4287] hid-thrustmaster 0003:044F:B65D.000D: Wrong number of endpoints? [ 359.385736][ T7868] loop4: detected capacity change from 0 to 128 [ 359.393815][ T21] usb 4-1: config 0 has no interface number 0 [ 359.448395][ T4287] usb 2-1: USB disconnect, device number 15 [ 359.462830][ C0] hid-thrustmaster 0003:044F:B65D.000D: URB to get model id failed with error -71 [ 359.525670][ T7868] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 359.582125][ T4240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.632051][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 359.657665][ T7868] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 359.697554][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.706266][ T4240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.741400][ T21] usb 4-1: Product: syz [ 359.745622][ T21] usb 4-1: Manufacturer: syz [ 359.767074][ T4240] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.791752][ T21] usb 4-1: SerialNumber: syz [ 359.798849][ T7869] fido_id[7869]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 359.824442][ T21] usb 4-1: config 0 descriptor?? [ 359.830060][ T4240] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.840068][ T4240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.892848][ T4240] usb 3-1: config 0 descriptor?? [ 360.076798][ T21] usb 4-1: USB disconnect, device number 22 [ 360.498020][ T4240] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 360.794973][ T4240] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 360.973685][ T7886] loop3: detected capacity change from 0 to 256 [ 361.113683][ T7886] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.151708][ T7886] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 361.218089][ T7886] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 362.663951][ T1107] usb 3-1: USB disconnect, device number 10 [ 364.068580][ T7898] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.077715][ T7898] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.111480][ T13] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 364.191632][ T4287] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 364.471858][ T13] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 364.480635][ T13] usb 3-1: config 0 has no interface number 0 [ 364.493710][ T13] usb 3-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 364.512296][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.523806][ T13] usb 3-1: config 0 descriptor?? [ 364.555320][ T4287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.573049][ T4287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.587173][ T4287] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.611032][ T4287] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.620306][ T4287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.638019][ T4287] usb 4-1: config 0 descriptor?? [ 364.707443][ T7898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.759104][ T7898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.768766][ T4197] ================================================================== [ 364.777597][ T4197] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x133f/0x3c90 [ 364.785468][ T4197] Read of size 1 at addr ffff888020b0f401 by task kworker/u5:5/4197 [ 364.793481][ T4197] [ 364.795924][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 364.803539][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 364.813649][ T4197] Workqueue: hci3 hci_rx_work [ 364.818411][ T4197] Call Trace: [ 364.821723][ T4197] [ 364.824689][ T4197] dump_stack_lvl+0x188/0x250 [ 364.829413][ T4197] ? show_regs_print_info+0x20/0x20 [ 364.834640][ T4197] ? load_image+0x400/0x400 [ 364.839163][ T4197] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 364.844649][ T4197] ? mutex_lock_io_nested+0x60/0x60 [ 364.849894][ T4197] print_address_description+0x60/0x2d0 [ 364.855494][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 364.860679][ T4197] kasan_report+0xdf/0x130 [ 364.865175][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 364.870321][ T4197] hci_le_meta_evt+0x133f/0x3c90 [ 364.875272][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 364.881362][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 364.887009][ T4197] ? mark_lock+0x94/0x320 [ 364.891361][ T4197] ? mutex_unlock+0x10/0x10 [ 364.895879][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 364.901860][ T4197] ? lock_chain_count+0x20/0x20 [ 364.906711][ T4197] ? __rwlock_init+0x140/0x140 [ 364.911486][ T4197] hci_event_packet+0xe48/0x1370 [ 364.916455][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 364.921788][ T4197] ? rcu_lock_release+0x20/0x20 [ 364.926673][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 364.931933][ T4197] hci_rx_work+0x255/0xa10 [ 364.936459][ T4197] process_one_work+0x85f/0x1010 [ 364.941439][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 364.947115][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 364.952454][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 364.957497][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 364.963146][ T4197] ? wq_worker_running+0x97/0x170 [ 364.968190][ T4197] worker_thread+0xaa6/0x1290 [ 364.972873][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 364.978077][ T4197] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 364.983981][ T4197] kthread+0x436/0x520 [ 364.988044][ T4197] ? rcu_lock_release+0x20/0x20 [ 364.992892][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 364.997486][ T4197] ret_from_fork+0x1f/0x30 [ 365.001913][ T4197] [ 365.004936][ T4197] [ 365.007251][ T4197] Allocated by task 7907: [ 365.011586][ T4197] __kasan_kmalloc+0xb5/0xf0 [ 365.016196][ T4197] __alloc_skb+0x22c/0x750 [ 365.020610][ T4197] vhci_write+0xbc/0x450 [ 365.024875][ T4197] vfs_write+0x745/0xd60 [ 365.029110][ T4197] ksys_write+0x152/0x260 [ 365.033435][ T4197] do_syscall_64+0x4c/0xa0 [ 365.037845][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 365.043728][ T4197] [ 365.046045][ T4197] The buggy address belongs to the object at ffff888020b0f000 [ 365.046045][ T4197] which belongs to the cache kmalloc-1k of size 1024 [ 365.060100][ T4197] The buggy address is located 1 bytes to the right of [ 365.060100][ T4197] 1024-byte region [ffff888020b0f000, ffff888020b0f400) [ 365.073828][ T4197] The buggy address belongs to the page: [ 365.079572][ T4197] page:ffffea000082c200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20b08 [ 365.089762][ T4197] head:ffffea000082c200 order:3 compound_mapcount:0 compound_pincount:0 [ 365.098090][ T4197] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 365.106087][ T4197] raw: 00fff00000010200 ffffea0001d4e400 0000000200000002 ffff888016c41dc0 [ 365.114678][ T4197] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 365.123266][ T4197] page dumped because: kasan: bad access detected [ 365.129804][ T4197] page_owner tracks the page as allocated [ 365.135602][ T4197] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 144, ts 76434736098, free_ts 76336548152 [ 365.154049][ T4197] get_page_from_freelist+0x1bbd/0x1ca0 [ 365.159616][ T4197] __alloc_pages+0x1ee/0x480 [ 365.164227][ T4197] new_slab+0xc0/0x4b0 [ 365.168413][ T4197] ___slab_alloc+0x80a/0xdd0 [ 365.173012][ T4197] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 365.178847][ T4197] __alloc_skb+0x22c/0x750 [ 365.183272][ T4197] __netdev_alloc_skb+0x110/0x4c0 [ 365.188318][ T4197] batadv_iv_ogm_queue_add+0x73e/0xcf0 [ 365.193780][ T4197] batadv_iv_ogm_schedule+0x81c/0xec0 [ 365.199156][ T4197] batadv_iv_send_outstanding_bat_ogm_packet+0x72f/0x840 [ 365.206171][ T4197] process_one_work+0x85f/0x1010 [ 365.211115][ T4197] worker_thread+0xaa6/0x1290 [ 365.215808][ T4197] kthread+0x436/0x520 [ 365.219898][ T4197] ret_from_fork+0x1f/0x30 [ 365.224324][ T4197] page last free stack trace: [ 365.228993][ T4197] free_unref_page_prepare+0x637/0x6c0 [ 365.234482][ T4197] free_unref_page+0x8f/0x2a0 [ 365.239205][ T4197] qlist_free_all+0x35/0x90 [ 365.243725][ T4197] kasan_quarantine_reduce+0x150/0x160 [ 365.249187][ T4197] __kasan_slab_alloc+0x2f/0xd0 [ 365.254053][ T4197] slab_post_alloc_hook+0x4c/0x380 [ 365.259192][ T4197] __kmalloc+0x127/0x330 [ 365.263448][ T4197] fib_create_info+0xabc/0x24f0 [ 365.268344][ T4197] fib_table_insert+0xe4/0x1bb0 [ 365.273202][ T4197] fib_magic+0x2e1/0x3c0 [ 365.277439][ T4197] fib_add_ifaddr+0x3f7/0x5e0 [ 365.282131][ T4197] fib_netdev_event+0x35c/0x480 [ 365.286981][ T4197] raw_notifier_call_chain+0xcb/0x160 [ 365.292354][ T4197] __dev_notify_flags+0x194/0x300 [ 365.297378][ T4197] dev_change_flags+0xe3/0x1a0 [ 365.302249][ T4197] do_setlink+0xcdb/0x3d60 [ 365.306727][ T4197] [ 365.309081][ T4197] Memory state around the buggy address: [ 365.314745][ T4197] ffff888020b0f300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.322841][ T4197] ffff888020b0f380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 365.330938][ T4197] >ffff888020b0f400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 365.339028][ T4197] ^ [ 365.343093][ T4197] ffff888020b0f480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 365.351160][ T4197] ffff888020b0f500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 365.359247][ T4197] ================================================================== [ 365.367343][ T4197] Disabling lock debugging due to kernel taint [ 365.377874][ T4197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 365.385130][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:5 Tainted: G B syzkaller #0 [ 365.394150][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.404272][ T4197] Workqueue: hci3 hci_rx_work [ 365.408998][ T4197] Call Trace: [ 365.412309][ T4197] [ 365.415279][ T4197] dump_stack_lvl+0x188/0x250 [ 365.420000][ T4197] ? show_regs_print_info+0x20/0x20 [ 365.425239][ T4197] ? load_image+0x400/0x400 [ 365.429792][ T4197] panic+0x2e5/0x810 [ 365.433730][ T4197] ? bpf_jit_dump+0xd0/0xd0 [ 365.438273][ T4197] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 365.444313][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 365.449318][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 365.454479][ T4197] check_panic_on_warn+0x80/0xa0 [ 365.459495][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 365.464676][ T4197] end_report+0x6d/0xf0 [ 365.468867][ T4197] kasan_report+0x102/0x130 [ 365.473475][ T4197] ? hci_le_meta_evt+0x133f/0x3c90 [ 365.478641][ T4197] hci_le_meta_evt+0x133f/0x3c90 [ 365.483617][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 365.489722][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 365.495401][ T4197] ? mark_lock+0x94/0x320 [ 365.499780][ T4197] ? mutex_unlock+0x10/0x10 [ 365.504332][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 365.510360][ T4197] ? lock_chain_count+0x20/0x20 [ 365.515249][ T4197] ? __rwlock_init+0x140/0x140 [ 365.520052][ T4197] hci_event_packet+0xe48/0x1370 [ 365.525039][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 365.530296][ T4197] ? rcu_lock_release+0x20/0x20 [ 365.535177][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 365.540412][ T4197] hci_rx_work+0x255/0xa10 [ 365.544840][ T4197] process_one_work+0x85f/0x1010 [ 365.549783][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 365.555413][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 365.560704][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 365.565823][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 365.571398][ T4197] ? wq_worker_running+0x97/0x170 [ 365.576466][ T4197] worker_thread+0xaa6/0x1290 [ 365.581138][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 365.586342][ T4197] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 365.592266][ T4197] kthread+0x436/0x520 [ 365.596341][ T4197] ? rcu_lock_release+0x20/0x20 [ 365.601198][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 365.605783][ T4197] ret_from_fork+0x1f/0x30 [ 365.610227][ T4197] [ 365.615356][ T4197] Kernel Offset: disabled [ 365.619711][ T4197] Rebooting in 86400 seconds..