last executing test programs: 8.448817654s ago: executing program 3 (id=996): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) 8.149059291s ago: executing program 3 (id=998): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x41, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 6.2521266s ago: executing program 3 (id=1007): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000040)=0x2) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT=r0, @ANYRES16=r0], 0x0) 4.962751483s ago: executing program 2 (id=1011): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r3, 0xa1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000721000/0x4000)=nil) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0x8) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='1', 0x1) 3.644648417s ago: executing program 1 (id=1014): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.591620488s ago: executing program 1 (id=1015): add_key(&(0x7f0000000000)='ceph\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f00000005c0)="1c00"/13, 0xd, 0xfffffffffffffffe) 3.520643089s ago: executing program 1 (id=1016): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x41, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)={0x0, 0x24, 0x4, {0x4, 0x21, "88ff"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.451971482s ago: executing program 2 (id=1017): syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1800880, &(0x7f0000002000)={[{@umask={'umask', 0x3d, 0x4001}}, {@nodecompose}, {@creator={'creator', 0x3d, "ac5929bd"}}, {@nls={'nls', 0x3d, 'macgreek'}}]}, 0x1, 0x5fb, &(0x7f0000000b00)="$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") syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3.318914985s ago: executing program 2 (id=1019): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) r1 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x130000000}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000580)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x524, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f00000004c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael,\xc4\x00\x00\x00\x00\x00\x00\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x00\x00\x00\x00\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\xf9\xff\x1b\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&\xc1&A0\xa7\xef\x9cL\x8e1K', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) r7 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r6, &(0x7f0000000a00)}, 0x20) 3.14098253s ago: executing program 3 (id=1020): getresuid(0x0, &(0x7f0000000100), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$vcs(0xffffff9c, 0x0, 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendto$inet6(r0, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 2.418073828s ago: executing program 0 (id=1021): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.168606064s ago: executing program 3 (id=1022): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c12, &(0x7f0000000300)={[{}, {@map_acorn}, {@nocompress}, {@map_off}, {@hide}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@check_strict}, {@overriderock}, {@unhide}, {}]}, 0x4, 0xa42, &(0x7f0000001180)="$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") mount$nfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x16) 2.150278584s ago: executing program 0 (id=1023): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.998840589s ago: executing program 0 (id=1024): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) time(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000f00)=""/102400, 0x19000) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x2, 0x7ff, 0x3}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) socket(0x10, 0x80002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x42, 0x4, 0x2f8, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', {0xff}}, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 1.312769506s ago: executing program 0 (id=1025): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r3, 0xa1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000721000/0x4000)=nil) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0x8) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='1', 0x1) 1.262591137s ago: executing program 3 (id=1026): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) socket$inet6(0xa, 0x5, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000001380)={"f2efe21e", 0x9, 0x6, 0x4d, 0xad, 0x7, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', '@\x00', ["062a03b42600010000000900", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00"]}) r3 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x4, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x2, 0xfc, 0x0, 0x10}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c0071215223000000001"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 650.799003ms ago: executing program 2 (id=1027): syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1800880, &(0x7f0000002000)={[{@umask={'umask', 0x3d, 0x4001}}, {@nodecompose}, {@creator={'creator', 0x3d, "ac5929bd"}}, {@nls={'nls', 0x3d, 'macgreek'}}]}, 0x1, 0x5fb, &(0x7f0000000b00)="$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") syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 531.755246ms ago: executing program 2 (id=1028): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000a40)={[{@check_relaxed}, {@nojoliet}, {@utf8}]}, 0x1, 0x56d, &(0x7f0000000440)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 444.022148ms ago: executing program 1 (id=1029): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000040)=0x2) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 268.665273ms ago: executing program 1 (id=1030): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)=@sha1={0x1, "ca216891e220ecfc0c1d3ae6ce7c38427759547c"}, 0x15, 0x1) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 229.957754ms ago: executing program 0 (id=1031): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 89.192508ms ago: executing program 2 (id=1032): getresuid(0x0, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$vcs(0xffffff9c, 0x0, 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendto$inet6(r0, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 37.014129ms ago: executing program 1 (id=1033): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) time(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000f00)=""/102400, 0x19000) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x2, 0x7ff, 0x3}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) socket(0x10, 0x80002, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x42, 0x4, 0x2f8, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', {0xff}}, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x1, 0x0, 0x0, 0x0, r3, 0x58, 0x7}, 0x9, 0x388, 0x4, 0x6, 0x0, 0x0, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) kernel console output (not intermixed with test programs): 188.907869][ T27] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 188.928124][ T27] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 188.937914][ T27] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 188.964081][ T27] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 189.090630][ T27] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 189.288414][ T27] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 189.304097][ T27] cp2112: probe of 0003:10C4:EA90.0002 failed with error -32 [ 189.362066][ T7158] loop2: detected capacity change from 0 to 32768 [ 189.502490][ T7158] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.614572][ T7158] XFS (loop2): Ending clean mount [ 189.633312][ T7158] XFS (loop2): Quotacheck needed: Please wait. [ 189.726748][ T7158] XFS (loop2): Quotacheck: Done. [ 189.811072][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 189.820300][ T7186] bridge_slave_1: left allmulticast mode [ 189.826061][ T7186] bridge_slave_1: left promiscuous mode [ 189.833871][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.896587][ T789] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 189.936336][ T7186] bridge_slave_0: left allmulticast mode [ 189.942351][ T7186] bridge_slave_0: left promiscuous mode [ 189.948876][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.832225][ T5827] usb 4-1: USB disconnect, device number 8 [ 190.973636][ T789] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.982509][ T789] usb 1-1: config 0 has no interface number 0 [ 190.990123][ T789] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 191.019494][ T789] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 191.040919][ T789] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 191.050441][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.143291][ T7193] loop3: detected capacity change from 0 to 1764 [ 191.373595][ T789] usb 1-1: config 0 descriptor?? [ 191.550508][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 191.556799][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 191.573963][ T5775] Bluetooth: hci1: command 0x0406 tx timeout [ 191.586566][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 191.697886][ T7182] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.723025][ T789] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 191.975014][ T789] usb 1-1: USB disconnect, device number 11 [ 192.264317][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 194.551337][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.558488][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.191367][ T7285] loop1: detected capacity change from 0 to 1764 [ 195.574127][ T7211] loop0: detected capacity change from 0 to 65536 [ 195.590574][ T7211] XFS: ikeep mount option is deprecated. [ 195.637367][ T7211] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop0": -EINTR [ 195.793923][ T7292] loop1: detected capacity change from 0 to 2048 [ 196.150283][ T7295] loop3: detected capacity change from 0 to 32768 [ 196.272368][ T7292] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.323016][ T7295] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 196.357634][ T7295] XFS (loop3): Ending clean mount [ 196.380925][ T7295] XFS (loop3): Quotacheck needed: Please wait. [ 196.549822][ T7295] XFS (loop3): Quotacheck: Done. [ 196.679655][ T173] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 196.758595][ T28] audit: type=1800 audit(1786679602.102:23): pid=7295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.315" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4428 res=0 errno=0 [ 196.824255][ T7311] loop2: detected capacity change from 0 to 1024 [ 196.831717][ T7311] EXT4-fs: inline encryption not supported [ 196.837668][ T7311] EXT4-fs: inline encryption not supported [ 196.947275][ T5769] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 196.974322][ T173] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.992043][ T173] usb 1-1: config 0 has no interface number 0 [ 197.002759][ T7311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 197.015268][ T7311] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.058100][ T173] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 197.108742][ T7316] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 197.134713][ T173] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 197.175033][ T173] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 197.211366][ T7316] EXT4-fs (loop2): Remounting filesystem read-only [ 197.222686][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 197.254410][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.296890][ T7318] loop1: detected capacity change from 0 to 32768 [ 197.317366][ T173] usb 1-1: config 0 descriptor?? [ 197.375582][ T7307] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 197.401636][ T7318] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.454827][ T173] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 197.494362][ T7328] loop2: detected capacity change from 0 to 1024 [ 197.595118][ T7318] XFS (loop1): Ending clean mount [ 197.646986][ T7318] XFS (loop1): Quotacheck needed: Please wait. [ 197.660428][ T173] usb 1-1: USB disconnect, device number 12 [ 197.683454][ T7328] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 197.716993][ T7328] System zones: 0-1, 3-8 [ 197.723768][ T7318] XFS (loop1): Quotacheck: Done. [ 197.731184][ T7328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 197.760118][ T7328] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.936449][ T28] audit: type=1800 audit(1786679603.282:24): pid=7318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.327" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 198.094099][ T5770] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 198.107619][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 198.111786][ T7334] loop3: detected capacity change from 0 to 4096 [ 198.427257][ T7334] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 198.564528][ T7341] loop0: detected capacity change from 0 to 1764 [ 200.944676][ T7358] loop3: detected capacity change from 0 to 32768 [ 200.978872][ T7358] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.272473][ T7358] XFS (loop3): Ending clean mount [ 201.285887][ T7358] XFS (loop3): Quotacheck needed: Please wait. [ 201.590615][ T7358] XFS (loop3): Quotacheck: Done. [ 202.020337][ T28] audit: type=1800 audit(1786679607.272:25): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.329" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 202.456583][ T5769] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.603854][ T7380] loop0: detected capacity change from 0 to 32768 [ 202.785544][ T7380] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.875506][ T7380] XFS (loop0): Ending clean mount [ 202.883994][ T7380] XFS (loop0): Quotacheck needed: Please wait. [ 202.972606][ T7380] XFS (loop0): Quotacheck: Done. [ 203.159675][ T5828] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 203.175672][ T28] audit: type=1800 audit(1786679608.442:26): pid=7380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.331" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 203.382681][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 203.429737][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 203.497643][ T5828] usb 2-1: unable to get BOS descriptor or descriptor too short [ 203.706567][ T5828] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 203.797686][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.850735][ T5828] usb 2-1: Product: syz [ 203.855001][ T5828] usb 2-1: Manufacturer: syz [ 203.901703][ T5828] usb 2-1: SerialNumber: syz [ 204.082735][ T7402] loop2: detected capacity change from 0 to 1764 [ 204.651856][ T7403] hsr_slave_0: left promiscuous mode [ 204.879346][ T7403] hsr_slave_1: left promiscuous mode [ 205.335253][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.334'. [ 205.591617][ T5828] usb 2-1: 1:1 : bogus bTerminalLink 5 [ 205.631875][ T5828] usb 2-1: unit 5 not found! [ 205.672099][ T5828] usb 2-1: unit 0 not found! [ 205.712365][ T7423] can0: slcan on ptm0. [ 206.104591][ T5828] usb 2-1: USB disconnect, device number 18 [ 206.444931][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.874380][ T7433] loop0: detected capacity change from 0 to 32768 [ 207.042900][ T7423] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 207.321525][ T7433] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 207.480822][ T7422] can0 (unregistered): slcan off ptm0. [ 207.812807][ T7433] XFS (loop0): Ending clean mount [ 207.830093][ T7433] XFS (loop0): Quotacheck needed: Please wait. [ 207.934894][ T7433] XFS (loop0): Quotacheck: Done. [ 208.140286][ T28] audit: type=1800 audit(1786679613.492:27): pid=7433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.344" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 208.341463][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 208.934147][ T7474] loop0: detected capacity change from 0 to 1764 [ 212.079608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 212.254996][ T7499] can0: slcan on ptm0. [ 212.591677][ T7506] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 213.151390][ T7498] can0 (unregistered): slcan off ptm0. [ 213.507630][ T7517] loop2: detected capacity change from 0 to 1764 [ 215.556090][ T7530] loop1: detected capacity change from 0 to 1024 [ 215.584239][ T7530] EXT4-fs: inline encryption not supported [ 215.599977][ T7530] EXT4-fs: inline encryption not supported [ 216.888215][ T7530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 216.926304][ T7530] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.975067][ T28] audit: type=1800 audit(1786679622.322:28): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 216.975801][ T7530] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.359: lblock 0 mapped to illegal pblock 0 (length 1) [ 217.033710][ T7530] EXT4-fs (loop1): Remounting filesystem read-only [ 217.340822][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 217.421990][ T7543] can0: slcan on ptm0. [ 217.743483][ T7548] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 218.444607][ T7542] can0 (unregistered): slcan off ptm0. [ 218.561688][ T7549] loop3: detected capacity change from 0 to 1764 [ 220.160558][ T7574] loop3: detected capacity change from 0 to 1024 [ 220.201090][ T7574] EXT4-fs: inline encryption not supported [ 220.207086][ T7574] EXT4-fs: inline encryption not supported [ 220.342629][ T7574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 220.444011][ T7574] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.623039][ T28] audit: type=1800 audit(1786679625.972:29): pid=7574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.379" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 220.647220][ T7574] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.379: lblock 0 mapped to illegal pblock 0 (length 1) [ 220.677953][ T7574] EXT4-fs (loop3): Remounting filesystem read-only [ 220.711665][ T7592] loop2: detected capacity change from 0 to 24 [ 220.736291][ T7592] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 220.766162][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 220.824213][ T7592] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 221.469925][ T7603] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 222.297349][ T7569] loop0: detected capacity change from 0 to 32768 [ 222.451182][ T7569] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.650390][ T7569] XFS (loop0): Ending clean mount [ 222.680309][ T7569] XFS (loop0): Quotacheck needed: Please wait. [ 222.783113][ T7569] XFS (loop0): Quotacheck: Done. [ 223.062281][ T7607] loop1: detected capacity change from 0 to 32768 [ 223.969573][ T7607] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 224.095341][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 224.317155][ T7607] XFS (loop1): Ending clean mount [ 224.354010][ T7607] XFS (loop1): Quotacheck needed: Please wait. [ 224.509518][ T7607] XFS (loop1): Quotacheck: Done. [ 224.844858][ T7643] loop0: detected capacity change from 0 to 1024 [ 224.874779][ T7643] EXT4-fs: inline encryption not supported [ 224.914566][ T7643] EXT4-fs: inline encryption not supported [ 224.952453][ T7643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 225.098434][ T7643] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.182931][ T28] audit: type=1800 audit(1786679630.532:30): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.388" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 225.187504][ T7652] loop3: detected capacity change from 0 to 24 [ 225.215055][ T7643] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.388: lblock 0 mapped to illegal pblock 0 (length 1) [ 225.261441][ T7643] EXT4-fs (loop0): Remounting filesystem read-only [ 225.269328][ T7652] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 225.343077][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 225.360854][ T7652] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 225.695880][ T7657] loop0: detected capacity change from 0 to 2048 [ 225.768628][ T7657] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.914766][ T28] audit: type=1800 audit(1786679631.922:31): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.394" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=1370 res=0 errno=0 [ 227.908122][ T5770] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 228.212143][ T7666] loop2: detected capacity change from 0 to 32768 [ 228.296184][ T8] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 228.339036][ T7666] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 228.459822][ T8] usb 1-1: device descriptor read/64, error -71 [ 228.516726][ T7666] XFS (loop2): Ending clean mount [ 228.555952][ T7666] XFS (loop2): Quotacheck needed: Please wait. [ 228.713754][ T7666] XFS (loop2): Quotacheck: Done. [ 228.749726][ T8] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 228.845264][ T7688] loop1: detected capacity change from 0 to 1024 [ 228.863490][ T7688] EXT4-fs: inline encryption not supported [ 228.874500][ T7688] EXT4-fs: inline encryption not supported [ 228.929502][ T8] usb 1-1: device descriptor read/64, error -71 [ 228.960890][ T7688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 229.059549][ T7688] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.071061][ T8] usb usb1-port1: attempt power cycle [ 229.190681][ T7688] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.401: lblock 0 mapped to illegal pblock 0 (length 1) [ 229.191307][ T28] audit: type=1800 audit(1786679634.532:32): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.401" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 229.260872][ T7688] EXT4-fs (loop1): Remounting filesystem read-only [ 229.357329][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 229.390840][ T28] audit: type=1800 audit(1786679634.742:33): pid=7692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.396" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 229.549797][ T8] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 229.600163][ T8] usb 1-1: device descriptor read/8, error -71 [ 229.879817][ T8] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 229.920125][ T8] usb 1-1: device descriptor read/8, error -71 [ 230.076040][ T8] usb usb1-port1: unable to enumerate USB device [ 231.169268][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 231.625314][ T7712] loop3: detected capacity change from 0 to 1024 [ 231.653483][ T7712] EXT4-fs: inline encryption not supported [ 231.677645][ T7707] loop0: detected capacity change from 0 to 32768 [ 231.687026][ T7712] EXT4-fs: inline encryption not supported [ 231.743990][ T7707] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 232.659513][ T7707] XFS (loop0): Ending clean mount [ 232.664119][ T7712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 232.677051][ T7707] XFS (loop0): Quotacheck needed: Please wait. [ 232.683538][ T7712] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.710175][ T28] audit: type=1800 audit(1786679638.062:34): pid=7712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.410" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 232.724019][ T7712] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.410: lblock 0 mapped to illegal pblock 0 (length 1) [ 232.753855][ T7707] XFS (loop0): Quotacheck: Done. [ 232.846294][ T7712] EXT4-fs (loop3): Remounting filesystem read-only [ 232.987261][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 234.089749][ T8] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 234.399555][ T8] usb 4-1: device descriptor read/64, error -71 [ 234.604543][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 234.689492][ T8] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 234.853229][ T8] usb 4-1: device descriptor read/64, error -71 [ 235.730391][ T8] usb usb4-port1: attempt power cycle [ 236.095076][ T7760] loop2: detected capacity change from 0 to 1024 [ 236.130468][ T7762] binder_alloc: 7761: binder_alloc_buf, no vma [ 236.179514][ T8] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 236.208087][ T7760] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 236.504506][ T7764] loop0: detected capacity change from 0 to 32768 [ 236.523090][ T7760] System zones: 0-1, 3-8 [ 236.821984][ T7760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 237.041122][ T7764] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 237.142568][ T7760] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.216582][ T8] usb 4-1: device descriptor read/8, error -71 [ 237.228915][ T7764] XFS (loop0): Ending clean mount [ 237.243938][ T7764] XFS (loop0): Quotacheck needed: Please wait. [ 237.320653][ T7764] XFS (loop0): Quotacheck: Done. [ 237.386366][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 237.696755][ T28] audit: type=1800 audit(1786679643.032:35): pid=7788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.417" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 238.042524][ T7798] loop1: detected capacity change from 0 to 1764 [ 238.613368][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 238.793409][ T7793] loop3: detected capacity change from 0 to 32768 [ 238.854920][ T7793] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 239.029054][ T7793] XFS (loop3): Ending clean mount [ 239.073766][ T7793] XFS (loop3): Quotacheck needed: Please wait. [ 239.115976][ T7814] binder_alloc: 7813: binder_alloc_buf, no vma [ 239.178951][ T7793] XFS (loop3): Quotacheck: Done. [ 239.289195][ T28] audit: type=1800 audit(1786679644.632:36): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.429" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4428 res=0 errno=0 [ 239.559735][ T8] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 239.731969][ T8] usb 2-1: device descriptor read/64, error -71 [ 239.869987][ T7829] loop0: detected capacity change from 0 to 1764 [ 239.915430][ T5769] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 240.010036][ T8] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 240.021101][ T7833] binder_alloc: 7832: binder_alloc_buf, no vma [ 240.140262][ T7837] loop2: detected capacity change from 0 to 1024 [ 240.152854][ T7837] EXT4-fs: inline encryption not supported [ 240.162237][ T7837] EXT4-fs: inline encryption not supported [ 240.184416][ T8] usb 2-1: device descriptor read/64, error -71 [ 240.203596][ T7837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 240.217131][ T7837] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.248179][ T28] audit: type=1800 audit(1786679645.592:37): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.445" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 240.270226][ T7837] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.445: lblock 0 mapped to illegal pblock 0 (length 1) [ 240.287860][ T7837] EXT4-fs (loop2): Remounting filesystem read-only [ 240.310837][ T8] usb usb2-port1: attempt power cycle [ 240.313873][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 240.779568][ T8] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 240.837455][ T8] usb 2-1: device descriptor read/8, error -71 [ 240.974499][ T7855] binder_alloc: 7854: binder_alloc_buf, no vma [ 241.026657][ T7851] loop0: detected capacity change from 0 to 32768 [ 241.091107][ T7851] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 241.109951][ T8] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 241.180733][ T8] usb 2-1: device descriptor read/8, error -71 [ 241.218783][ T7851] XFS (loop0): Ending clean mount [ 241.236271][ T7851] XFS (loop0): Quotacheck needed: Please wait. [ 241.321550][ T7851] XFS (loop0): Quotacheck: Done. [ 241.345296][ T8] usb usb2-port1: unable to enumerate USB device [ 241.527833][ T28] audit: type=1800 audit(1786679646.872:38): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.450" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 241.730163][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 241.782145][ T7874] loop3: detected capacity change from 0 to 1024 [ 241.794297][ T7874] EXT4-fs: inline encryption not supported [ 241.800544][ T7874] EXT4-fs: inline encryption not supported [ 241.883811][ T7874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 241.904191][ T7874] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.941366][ T7874] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.457: lblock 0 mapped to illegal pblock 0 (length 1) [ 241.941838][ T28] audit: type=1800 audit(1786679647.282:39): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.457" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 241.980477][ T7874] EXT4-fs (loop3): Remounting filesystem read-only [ 242.016162][ T7879] loop2: detected capacity change from 0 to 1764 [ 242.041993][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 242.281474][ T7885] binder_alloc: 7884: binder_alloc_buf, no vma [ 242.999816][ T7907] binder_alloc: 7903: binder_alloc_buf, no vma [ 243.723596][ T7922] syz.0.476: attempt to access beyond end of device [ 243.723596][ T7922] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 243.736607][ T173] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 243.789729][ T7922] syz.0.476: attempt to access beyond end of device [ 243.789729][ T7922] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 243.806774][ T7922] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 243.844539][ T7922] syz.0.476: attempt to access beyond end of device [ 243.844539][ T7922] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 243.857718][ T7922] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 244.044652][ T173] usb 4-1: device descriptor read/64, error -71 [ 244.269576][ T7922] syz.0.476: attempt to access beyond end of device [ 244.269576][ T7922] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 244.293511][ T7922] syz.0.476: attempt to access beyond end of device [ 244.293511][ T7922] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 244.309185][ T7922] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 244.320018][ T7922] syz.0.476: attempt to access beyond end of device [ 244.320018][ T7922] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 244.333472][ T7922] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 244.345390][ T7922] syz.0.476: attempt to access beyond end of device [ 244.345390][ T7922] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 244.360342][ T7922] syz.0.476: attempt to access beyond end of device [ 244.360342][ T7922] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 244.373696][ T7922] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 244.384889][ T7922] syz.0.476: attempt to access beyond end of device [ 244.384889][ T7922] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 244.415820][ T7922] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 244.420004][ T173] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 244.436780][ T7922] syz.0.476: attempt to access beyond end of device [ 244.436780][ T7922] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 244.453917][ T7922] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 244.468074][ T7922] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 244.478286][ T7922] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 244.572078][ T7932] loop0: detected capacity change from 0 to 1764 [ 244.579746][ T173] usb 4-1: device descriptor read/64, error -71 [ 244.589460][ T5779] Bluetooth: hci0: command tx timeout [ 244.636634][ T7934] binder_alloc: 7933: binder_alloc_buf, no vma [ 244.772676][ T173] usb usb4-port1: attempt power cycle [ 245.018672][ T7945] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 245.138995][ T7947] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 245.208409][ T173] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 245.248880][ T173] usb 4-1: device descriptor read/8, error -71 [ 245.483746][ T7954] binder: BINDER_SET_CONTEXT_MGR already set [ 245.512754][ T7954] binder: 7952:7954 ioctl 4018620d 200000004a80 returned -16 [ 245.541090][ T173] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 245.589258][ T173] usb 4-1: device descriptor read/8, error -71 [ 245.722996][ T173] usb usb4-port1: unable to enumerate USB device [ 245.928044][ T7969] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 246.643443][ T7981] loop3: detected capacity change from 0 to 1764 [ 246.895234][ T7993] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 247.009099][ T8000] binder_alloc: 7999: binder_alloc_buf, no vma [ 247.890652][ T8020] Bluetooth: hci0: unsupported parameter 255 [ 247.901296][ T8020] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 247.935041][ T5828] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 248.074490][ T8022] loop2: detected capacity change from 0 to 128 [ 248.103027][ T5828] usb 4-1: device descriptor read/64, error -71 [ 248.193547][ T28] audit: type=1800 audit(1787203941.396:40): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.516" name="file2" dev="loop2" ino=1048597 res=0 errno=0 [ 248.287037][ T8022] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 248.314105][ T8022] FAT-fs (loop2): Filesystem has been set read-only [ 248.336053][ T8022] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 248.350258][ T8022] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 248.362083][ T8022] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 248.375985][ T8022] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 248.389427][ T8022] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 248.400423][ T5828] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 248.413438][ T8022] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 248.425373][ T8022] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 248.443573][ T8026] ip_tables: iptables: counters copy to user failed while replacing table [ 248.531554][ T8022] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 248.561080][ T5828] usb 4-1: device descriptor read/64, error -71 [ 248.659976][ T8021] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 248.737043][ T5828] usb usb4-port1: attempt power cycle [ 249.227423][ T5828] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 249.333471][ T8037] loop2: detected capacity change from 0 to 1764 [ 250.211782][ T5828] usb 4-1: device descriptor read/8, error -71 [ 250.507737][ T5828] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 250.623225][ T5828] usb 4-1: device descriptor read/8, error -71 [ 250.927256][ T5828] usb usb4-port1: unable to enumerate USB device [ 251.026038][ T8049] Bluetooth: hci0: unsupported parameter 255 [ 251.045377][ T8049] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 252.064677][ T8059] loop3: detected capacity change from 0 to 1764 [ 253.220769][ T8063] binder: BINDER_SET_CONTEXT_MGR already set [ 253.299593][ T8063] binder: 8060:8063 ioctl 4018620d 200000004a80 returned -16 [ 253.540073][ T8072] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 253.749244][ T23] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 253.864413][ T8079] loop3: detected capacity change from 0 to 24 [ 253.874143][ T8079] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 253.901075][ T8079] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 253.926716][ T23] usb 1-1: device descriptor read/64, error -71 [ 254.384255][ T23] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 254.821763][ T23] usb 1-1: device descriptor read/64, error -71 [ 255.678251][ T23] usb usb1-port1: attempt power cycle [ 255.858885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 255.959519][ T8095] zram: Cannot change disksize for initialized device [ 256.218599][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.237999][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.360137][ T23] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 256.463503][ T23] usb 1-1: device descriptor read/8, error -71 [ 256.587420][ T8100] binder_alloc: 8099: binder_alloc_buf, no vma [ 256.639476][ T8104] loop2: detected capacity change from 0 to 24 [ 256.660773][ T8104] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 256.676593][ T8103] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 256.684453][ T8104] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 256.937444][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 257.137651][ T8120] loop1: detected capacity change from 0 to 1024 [ 257.146050][ T8120] EXT4-fs: inline encryption not supported [ 257.163971][ T8120] EXT4-fs: inline encryption not supported [ 257.269695][ T8120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 257.286740][ T8120] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.312121][ T8123] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 257.328750][ T28] audit: type=1800 audit(1787203950.386:41): pid=8120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.553" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 257.330251][ T8123] EXT4-fs (loop1): Remounting filesystem read-only [ 257.391689][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 257.453356][ T173] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 257.895937][ T8133] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 258.104624][ T173] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.208608][ T8139] zram: Cannot change disksize for initialized device [ 258.224028][ T5828] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 258.508145][ T5828] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 258.595138][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.737392][ T5828] usb 1-1: config 0 descriptor?? [ 258.770304][ T5828] cp210x 1-1:0.0: cp210x converter detected [ 258.828101][ T173] usb 4-1: config 0 has no interfaces? [ 258.834442][ T173] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 258.843592][ T173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.860387][ T173] usb 4-1: config 0 descriptor?? [ 258.882314][ T8141] loop2: detected capacity change from 0 to 24 [ 258.890630][ T8141] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 258.921970][ T8141] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 259.009668][ T5828] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 259.055877][ T5828] cp210x 1-1:0.0: querying part number failed [ 259.313156][ T5828] usb 1-1: cp210x converter now attached to ttyUSB0 [ 259.361127][ T7351] usb 4-1: USB disconnect, device number 21 [ 259.818311][ T8148] loop2: detected capacity change from 0 to 1024 [ 259.842360][ T8148] EXT4-fs: inline encryption not supported [ 259.882435][ T8148] EXT4-fs: inline encryption not supported [ 259.937679][ T8148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 259.956345][ T8148] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.090504][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 260.106149][ T28] audit: type=1800 audit(1787203953.059:42): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.562" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 261.899003][ T973] usb 1-1: USB disconnect, device number 21 [ 261.927891][ T973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 261.973412][ T973] cp210x 1-1:0.0: device disconnected [ 262.353824][ T973] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 262.575814][ T973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.596171][ T973] usb 1-1: config 0 has no interfaces? [ 262.616424][ T973] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 262.646540][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.672940][ T973] usb 1-1: config 0 descriptor?? [ 262.678278][ T8185] loop3: detected capacity change from 0 to 1024 [ 262.679275][ T8185] EXT4-fs: inline encryption not supported [ 262.690752][ T8185] EXT4-fs: inline encryption not supported [ 262.779040][ T8185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 262.791396][ T8185] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.927120][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 262.979987][ T5827] usb 1-1: USB disconnect, device number 22 [ 262.982405][ T8187] loop1: detected capacity change from 0 to 32768 [ 263.086174][ T8187] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 263.824918][ T8187] XFS (loop1): Ending clean mount [ 263.840413][ T8187] XFS (loop1): Quotacheck needed: Please wait. [ 263.889111][ T8187] XFS (loop1): Quotacheck: Done. [ 264.208453][ T5770] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 265.836627][ T8209] zram: Cannot change disksize for initialized device [ 267.169978][ T5827] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 267.371150][ T5827] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 267.398399][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.413806][ T5827] usb 3-1: config 0 descriptor?? [ 267.428179][ T5827] cp210x 3-1:0.0: cp210x converter detected [ 267.657521][ T8223] loop1: detected capacity change from 0 to 1024 [ 267.661733][ T5827] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 267.667117][ T8223] EXT4-fs: inline encryption not supported [ 267.677475][ T8223] EXT4-fs: inline encryption not supported [ 267.700712][ T5827] cp210x 3-1:0.0: querying part number failed [ 267.700805][ T8223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 267.719348][ T8223] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.732496][ T5827] usb 3-1: cp210x converter now attached to ttyUSB0 [ 267.862203][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 269.292741][ T5827] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 269.302557][ T23] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 269.488303][ T5827] usb 1-1: unable to get BOS descriptor or descriptor too short [ 269.500799][ T5827] usb 1-1: not running at top speed; connect to a high speed hub [ 269.503726][ T8240] loop3: detected capacity change from 0 to 32768 [ 269.512017][ T5827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.530224][ T5827] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 269.541393][ T5827] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 269.548459][ T8240] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 269.554946][ T5827] usb 1-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 269.569857][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.579294][ T5827] usb 1-1: Product: syz [ 269.583615][ T5827] usb 1-1: Manufacturer: syz [ 269.588390][ T5827] usb 1-1: SerialNumber: syz [ 269.606836][ T8240] XFS (loop3): Ending clean mount [ 269.616433][ T8240] XFS (loop3): Quotacheck needed: Please wait. [ 269.672664][ T8240] XFS (loop3): Quotacheck: Done. [ 269.719328][ T173] usb 3-1: USB disconnect, device number 11 [ 269.829310][ T5827] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 269.853280][ T173] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 269.871708][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.914806][ T173] cp210x 3-1:0.0: device disconnected [ 269.944471][ T5827] usb 1-1: USB disconnect, device number 23 [ 269.974231][ T23] usb 2-1: config 0 has no interfaces? [ 269.980618][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 269.992081][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.161937][ T5769] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 270.186486][ T23] usb 2-1: config 0 descriptor?? [ 270.286096][ T8253] zram: Cannot change disksize for initialized device [ 270.649102][ T23] usb 2-1: USB disconnect, device number 23 [ 271.051167][ T8259] ªªªªªª: renamed from vlan0 (while UP) [ 271.088487][ T8257] loop2: detected capacity change from 0 to 1024 [ 271.153004][ T8257] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 271.196132][ T8257] System zones: 0-1, 3-8 [ 271.205460][ T8263] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 271.244205][ T8257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 271.274163][ T8257] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.326226][ T8266] loop3: detected capacity change from 0 to 1024 [ 271.333669][ T8266] EXT4-fs: inline encryption not supported [ 271.339729][ T8266] EXT4-fs: inline encryption not supported [ 271.364990][ T8266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 271.377817][ T8266] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.414208][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 272.197119][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 272.482013][ T5827] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 272.684969][ T5827] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 272.800822][ T8289] zram: Cannot change disksize for initialized device [ 273.414600][ T8290] loop0: detected capacity change from 0 to 8 [ 273.460963][ T8290] SQUASHFS error: lzo decompression failed, data probably corrupt [ 273.469366][ T8290] SQUASHFS error: Failed to read block 0x91: -5 [ 273.475679][ T8290] SQUASHFS error: Unable to read metadata cache entry [8f] [ 273.483094][ T8290] SQUASHFS error: Unable to read inode 0x7 [ 273.712748][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.754173][ T5827] usb 3-1: config 0 descriptor?? [ 273.775957][ T5827] cp210x 3-1:0.0: cp210x converter detected [ 273.834788][ T8296] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 273.886905][ T8294] loop3: detected capacity change from 0 to 1024 [ 274.016462][ T5827] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 274.032392][ T8294] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 274.045544][ T5827] cp210x 3-1:0.0: querying part number failed [ 274.046363][ T8294] System zones: 0-1, 3-8 [ 274.064836][ T8294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 274.070352][ T5827] usb 3-1: cp210x converter now attached to ttyUSB0 [ 274.078233][ T8294] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.725803][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 274.862946][ T8309] (null): rxe_set_mtu: Set mtu to 1024 [ 274.870189][ T8309] xfrm0 speed is unknown, defaulting to 1000 [ 274.882874][ T8309] xfrm0 speed is unknown, defaulting to 1000 [ 274.891494][ T8309] xfrm0 speed is unknown, defaulting to 1000 [ 275.071882][ T8309] infiniband syz0: set active [ 275.076969][ T8309] infiniband syz0: added xfrm0 [ 275.078038][ T173] xfrm0 speed is unknown, defaulting to 1000 [ 275.104485][ T973] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 275.139473][ T8309] RDS/IB: syz0: added [ 275.144795][ T8309] smc: adding ib device syz0 with port count 1 [ 275.153496][ T8309] smc: ib device syz0 port 1 has pnetid [ 275.162181][ T173] xfrm0 speed is unknown, defaulting to 1000 [ 275.171125][ T8309] xfrm0 speed is unknown, defaulting to 1000 [ 275.261171][ T23] usb 3-1: USB disconnect, device number 12 [ 275.290608][ T973] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 275.312144][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 275.321414][ T973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.335337][ T23] cp210x 3-1:0.0: device disconnected [ 275.348198][ T973] usb 1-1: config 0 has no interface number 0 [ 275.356268][ T973] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 275.393582][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.515425][ T973] usb 1-1: config 0 descriptor?? [ 275.786995][ T973] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 276.036932][ T8309] xfrm0 speed is unknown, defaulting to 1000 [ 276.050045][ T973] usb 1-1: USB disconnect, device number 24 [ 276.458991][ T8322] loop2: detected capacity change from 0 to 1024 [ 276.551483][ T8323] zram: Cannot change disksize for initialized device [ 276.571897][ T8322] EXT4-fs: Ignoring removed bh option [ 276.968080][ T8322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.109368][ T8322] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 277.268862][ T8309] xfrm0 speed is unknown, defaulting to 1000 [ 277.318501][ T8331] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 277.336776][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.095081][ T8309] xfrm0 speed is unknown, defaulting to 1000 [ 279.091755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 279.503586][ T5774] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 279.705660][ T5774] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 279.724393][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.791613][ T5774] usb 2-1: config 0 descriptor?? [ 279.829701][ T5774] cp210x 2-1:0.0: cp210x converter detected [ 280.031469][ T5774] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 280.088332][ T5774] cp210x 2-1:0.0: querying part number failed [ 280.173265][ T5774] usb 2-1: cp210x converter now attached to ttyUSB0 [ 280.685134][ T8356] binder_alloc: 8355: binder_alloc_buf, no vma [ 280.886122][ T8363] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 282.297893][ T173] usb 2-1: USB disconnect, device number 24 [ 282.307433][ T173] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 282.317168][ T173] cp210x 2-1:0.0: device disconnected [ 282.352224][ T5774] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 282.578026][ T5774] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.594419][ T5774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.425410][ T5774] usb 1-1: config 0 has no interface number 0 [ 283.431603][ T5774] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 283.440797][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.451334][ T5774] usb 1-1: config 0 descriptor?? [ 283.462388][ T5774] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 283.725299][ T5774] usb 1-1: USB disconnect, device number 25 [ 284.171039][ T8386] binder: 8385:8386 ioctl 4018620d 0 returned -22 [ 284.188313][ T8384] loop0: detected capacity change from 0 to 32768 [ 284.228981][ T8384] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 284.291160][ T8384] XFS (loop0): Ending clean mount [ 284.303868][ T8384] XFS (loop0): Quotacheck needed: Please wait. [ 284.538477][ T8384] XFS (loop0): Quotacheck: Done. [ 285.556902][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 286.974444][ T7351] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 287.223058][ T7351] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 287.293937][ T7351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.439235][ T7351] usb 3-1: config 0 descriptor?? [ 287.468773][ T7351] cp210x 3-1:0.0: cp210x converter detected [ 287.698698][ T7351] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 287.715922][ T7351] cp210x 3-1:0.0: querying part number failed [ 287.748395][ T7351] usb 3-1: cp210x converter now attached to ttyUSB0 [ 287.881527][ T8420] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 288.030313][ T8422] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.146517][ T5774] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 288.479968][ T5774] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.709677][ T8432] zram: Cannot change disksize for initialized device [ 288.737229][ T5774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.809550][ T5774] usb 2-1: config 0 has no interface number 0 [ 288.884333][ T5774] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 288.910402][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.921194][ T5774] usb 2-1: config 0 descriptor?? [ 288.932005][ T5774] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 289.212154][ T5774] usb 2-1: USB disconnect, device number 25 [ 291.008004][ T5828] usb 3-1: USB disconnect, device number 13 [ 291.023934][ T5828] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 291.042131][ T5828] cp210x 3-1:0.0: device disconnected [ 291.149611][ T8444] loop0: detected capacity change from 0 to 1764 [ 291.923210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 292.280742][ T8454] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 292.922415][ T28] audit: type=1326 audit(1787203985.782:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.2.656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048999e0d9 code=0x0 [ 293.615278][ T8473] binder: 8472:8473 ioctl 4018620d 0 returned -22 [ 295.057785][ T23] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 295.394909][ T23] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 295.496839][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.663427][ T23] usb 1-1: config 0 descriptor?? [ 295.788301][ T23] cp210x 1-1:0.0: cp210x converter detected [ 295.835882][ T8486] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 295.966602][ T23] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 295.995270][ T23] cp210x 1-1:0.0: querying part number failed [ 296.020349][ T23] usb 1-1: cp210x converter now attached to ttyUSB0 [ 296.528484][ T8499] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 297.264780][ T8505] loop1: detected capacity change from 0 to 1764 [ 297.308360][ T7351] usb 1-1: USB disconnect, device number 26 [ 297.508813][ T8508] loop2: detected capacity change from 0 to 32768 [ 297.586329][ T7351] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 297.598552][ T7351] cp210x 1-1:0.0: device disconnected [ 297.606384][ T8508] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 297.689390][ T8519] binder: 8518:8519 ioctl 4018620d 0 returned -22 [ 297.724920][ T8508] XFS (loop2): Ending clean mount [ 297.734952][ T8508] XFS (loop2): Quotacheck needed: Please wait. [ 298.989884][ T8508] XFS (loop2): Quotacheck: Done. [ 299.008007][ T8526] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 299.571339][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 300.481571][ T8538] xfrm0 speed is unknown, defaulting to 1000 [ 302.875649][ T173] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 302.988045][ T8568] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 303.078202][ T173] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 303.104840][ T173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.120519][ T173] usb 2-1: config 0 descriptor?? [ 303.139536][ T173] cp210x 2-1:0.0: cp210x converter detected [ 303.587325][ T8573] loop2: detected capacity change from 0 to 32768 [ 303.595391][ T173] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 303.603387][ T173] cp210x 2-1:0.0: querying part number failed [ 303.623992][ T173] usb 2-1: cp210x converter now attached to ttyUSB0 [ 303.661297][ T8573] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 303.742389][ T8573] XFS (loop2): Ending clean mount [ 303.759118][ T8573] XFS (loop2): Quotacheck needed: Please wait. [ 303.820244][ T8583] binder: 8582:8583 ioctl c0306201 0 returned -14 [ 303.826991][ T8573] XFS (loop2): Quotacheck: Done. [ 304.249988][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 304.739663][ T173] usb 2-1: USB disconnect, device number 26 [ 304.751574][ T173] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 304.829149][ T173] cp210x 2-1:0.0: device disconnected [ 306.804340][ T8614] netlink: 84 bytes leftover after parsing attributes in process `syz.1.692'. [ 307.817495][ T8619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 307.849705][ T8619] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 307.885792][ T8619] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 307.908976][ T8619] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 307.926961][ T8619] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.934113][ T8619] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 307.950582][ T8619] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.985440][ T8633] binder: 8632:8633 ioctl c0306201 0 returned -14 [ 309.058601][ T8627] loop1: detected capacity change from 0 to 32768 [ 310.242945][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 310.252333][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 310.258454][ T5779] Bluetooth: hci0: command tx timeout [ 310.258520][ T5087] Bluetooth: hci2: command 0x0c1a tx timeout [ 310.264165][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 310.761603][ T5827] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 310.844838][ T23] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 311.266306][ T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.279622][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.479529][ T5827] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 311.563631][ T5827] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 311.798762][ T23] usb 3-1: config 0 has no interface number 0 [ 311.817508][ T5827] usb 1-1: config 1 interface 0 has no altsetting 0 [ 311.834417][ T5827] usb 1-1: string descriptor 0 read error: -22 [ 311.843369][ T5827] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 311.855237][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.880984][ T23] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.987304][ T23] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 311.996502][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.007373][ T23] usb 3-1: config 0 descriptor?? [ 312.015937][ T23] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 312.110439][ T8664] binder: 8663:8664 ioctl c0306201 0 returned -14 [ 312.228394][ T23] usb 3-1: USB disconnect, device number 14 [ 312.292223][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 312.300980][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 312.307130][ T5780] Bluetooth: hci0: command tx timeout [ 312.418658][ T8667] loop1: detected capacity change from 0 to 512 [ 312.542351][ T8667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.804512][ T5827] logitech 0003:046D:C626.0003: unknown main item tag 0x2 [ 312.816578][ T5827] logitech 0003:046D:C626.0003: unexpected long global item [ 312.826292][ T5827] logitech 0003:046D:C626.0003: parse failed [ 312.834304][ T5827] logitech: probe of 0003:046D:C626.0003 failed with error -22 [ 313.008016][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.345614][ T7351] usb 1-1: USB disconnect, device number 27 [ 314.362969][ T23] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 314.441888][ T973] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 314.581999][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 314.596767][ T23] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 314.606877][ T973] usb 3-1: device descriptor read/64, error -71 [ 314.621033][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.632095][ T23] usb 4-1: Product: syz [ 314.636345][ T23] usb 4-1: Manufacturer: syz [ 314.651406][ T23] usb 4-1: SerialNumber: syz [ 314.662909][ T23] usb 4-1: config 0 descriptor?? [ 314.670419][ T8682] loop0: detected capacity change from 0 to 1024 [ 314.679780][ T23] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 314.691679][ T8682] EXT4-fs: Ignoring removed bh option [ 314.710547][ T8682] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 314.739042][ T8682] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 314.767671][ T8682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.882077][ T973] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 315.052252][ T973] usb 3-1: device descriptor read/64, error -71 [ 315.359231][ T973] usb usb3-port1: attempt power cycle [ 315.755776][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.352740][ T173] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 316.633185][ T173] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.707960][ T173] usb 2-1: config 0 has no interface number 0 [ 316.800521][ T173] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 316.853575][ T173] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 316.876745][ T173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.102631][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.109060][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.111182][ T173] usb 2-1: config 0 descriptor?? [ 318.129772][ T173] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 318.159405][ T23] gspca_ov534_9: reg_r err -71 [ 318.207552][ T8708] loop3: detected capacity change from 0 to 1024 [ 318.543470][ T23] gspca_ov534_9: Unknown sensor 0000 [ 318.543973][ T23] ov534_9: probe of 4-1:0.0 failed with error -22 [ 318.598707][ T5828] usb 2-1: USB disconnect, device number 27 [ 318.832379][ T23] usb 4-1: USB disconnect, device number 22 [ 319.414949][ T8717] loop1: detected capacity change from 0 to 1024 [ 319.568537][ T8717] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 319.764515][ T8717] System zones: 0-1, 3-8 [ 320.084846][ T8717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 320.250111][ T8717] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.581433][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 322.280819][ T8738] loop1: detected capacity change from 0 to 1024 [ 322.374279][ T8738] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 322.402874][ T8738] System zones: 0-1, 3-8 [ 322.435779][ T8738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 322.518698][ T8738] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.630657][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 323.094552][ T5809] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 323.379792][ T5809] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.473222][ T5809] usb 1-1: config 0 has no interface number 0 [ 323.509939][ T5809] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 323.542368][ T5809] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 323.564369][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.592888][ T5809] usb 1-1: config 0 descriptor?? [ 323.648387][ T5809] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 323.879244][ T5809] usb 1-1: USB disconnect, device number 28 [ 323.904630][ T8757] syz.2.736 uses obsolete (PF_INET,SOCK_PACKET) [ 325.966290][ T8764] loop0: detected capacity change from 0 to 1024 [ 326.018589][ T8764] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 326.026970][ T8764] System zones: 0-1, 3-8 [ 326.035513][ T8764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 326.048402][ T8764] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.096159][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 327.356751][ T8786] loop0: detected capacity change from 0 to 1024 [ 327.435455][ T8786] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 327.443696][ T8786] System zones: 0-1, 3-8 [ 327.452682][ T8786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 327.568717][ T8786] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.396652][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 329.782247][ T8800] loop0: detected capacity change from 0 to 1024 [ 330.281070][ T8788] loop3: detected capacity change from 0 to 32768 [ 330.761198][ T8807] loop1: detected capacity change from 0 to 8 [ 332.340352][ T8817] loop2: detected capacity change from 0 to 1024 [ 332.599822][ T8817] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 332.634734][ T8817] System zones: 0-1, 3-8 [ 332.697484][ T8817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 332.796871][ T8817] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.918467][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 333.835132][ T8826] loop2: detected capacity change from 0 to 1024 [ 333.923724][ T8826] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 333.954231][ T8826] System zones: 0-1, 3-8 [ 334.036938][ T8824] loop3: detected capacity change from 0 to 512 [ 334.073335][ T8826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 334.114411][ T8826] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.814220][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 335.068798][ T8838] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 336.743866][ T8848] loop1: detected capacity change from 0 to 4096 [ 336.764676][ T8834] loop0: detected capacity change from 0 to 32768 [ 336.866889][ T8848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.942062][ T8857] loop2: detected capacity change from 0 to 164 [ 337.123108][ T8848] EXT4-fs (loop1): shut down requested (2) [ 337.579005][ T8834] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 337.636974][ T8834] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR [ 337.637757][ T8834] XFS (loop0): log mount failed [ 337.727752][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.873952][ T8861] loop2: detected capacity change from 0 to 1024 [ 337.932399][ T8861] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 337.990999][ T8861] System zones: 0-1, 3-8 [ 338.031408][ T8861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 338.086387][ T8861] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.241758][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 338.747555][ T8873] zram: Cannot change disksize for initialized device [ 339.906546][ T5828] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 340.045978][ T8882] loop1: detected capacity change from 0 to 32768 [ 340.095229][ T8882] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 340.156092][ T5828] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 340.177050][ T5828] usb 3-1: config 0 has no interface number 0 [ 340.183200][ T5828] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 340.220241][ T8882] XFS (loop1): Ending clean mount [ 340.231900][ T8882] XFS (loop1): Quotacheck needed: Please wait. [ 340.281349][ T5828] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 340.323067][ T8882] XFS (loop1): Quotacheck: Done. [ 340.326582][ T5828] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 340.366439][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.436602][ T5828] usb 3-1: config 0 descriptor?? [ 340.499622][ T5828] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 340.673888][ T8878] iowarrior 3-1:0.1: Error -90 while submitting URB [ 340.802969][ T973] usb 3-1: USB disconnect, device number 18 [ 341.080493][ T5770] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 341.316345][ T8894] loop3: detected capacity change from 0 to 164 [ 342.833870][ T8915] zram: Cannot change disksize for initialized device [ 343.837203][ T8920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 343.843396][ T8920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 343.871808][ T8920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 343.902725][ T8920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.046999][ T8926] loop2: detected capacity change from 0 to 32768 [ 344.052579][ T8899] loop0: detected capacity change from 0 to 32768 [ 344.115915][ T8926] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 344.157632][ T8899] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 344.173836][ T8926] XFS (loop2): Ending clean mount [ 344.195097][ T8926] XFS (loop2): Quotacheck needed: Please wait. [ 344.202673][ T5774] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 344.346300][ T8926] XFS (loop2): Quotacheck: Done. [ 344.566726][ T8899] XFS (loop0): Ending clean mount [ 344.583872][ T5774] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.584881][ T8899] XFS (loop0): Quotacheck needed: Please wait. [ 344.596698][ T5774] usb 4-1: config 0 has no interface number 0 [ 344.856160][ T8899] XFS (loop0): Quotacheck: Done. [ 345.010714][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 345.100089][ T5774] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 345.116988][ T5774] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 345.126931][ T5774] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 345.135986][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.143315][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 345.153772][ T5774] usb 4-1: config 0 descriptor?? [ 345.190504][ T5774] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 345.406749][ T8923] iowarrior 4-1:0.1: Error -90 while submitting URB [ 345.437317][ T5774] usb 4-1: USB disconnect, device number 23 [ 345.637895][ T8951] loop0: detected capacity change from 0 to 164 [ 345.656898][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 345.712740][ T973] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 345.887080][ T973] usb 2-1: device descriptor read/64, error -71 [ 345.906833][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 345.913663][ T5779] Bluetooth: hci0: command tx timeout [ 345.976807][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 346.269443][ T973] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 346.605873][ T973] usb 2-1: device descriptor read/64, error -71 [ 346.747038][ T973] usb usb2-port1: attempt power cycle [ 346.820398][ T8968] zram: Cannot change disksize for initialized device [ 347.556645][ T8970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 347.586327][ T8970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 347.858714][ T8975] loop0: detected capacity change from 0 to 32768 [ 347.887911][ T8970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 347.893864][ T8976] loop3: detected capacity change from 0 to 32768 [ 347.901480][ T8975] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.794 (8975) [ 347.917251][ T8970] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 347.946306][ T8975] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 347.957132][ T8975] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 347.966528][ T8975] BTRFS info (device loop0): use zlib compression, level 3 [ 347.973836][ T8975] BTRFS info (device loop0): turning on sync discard [ 347.980695][ T8975] BTRFS info (device loop0): using free space tree [ 348.001179][ T8976] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 348.043892][ T8976] XFS (loop3): Ending clean mount [ 348.056242][ T8976] XFS (loop3): Quotacheck needed: Please wait. [ 348.093565][ T8975] BTRFS info (device loop0): enabling ssd optimizations [ 348.131623][ T8976] XFS (loop3): Quotacheck: Done. [ 348.342608][ T973] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 349.110286][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 349.120943][ T28] audit: type=1800 audit(1787204041.299:44): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.793" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 349.409774][ T5769] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 349.558705][ T973] usb 2-1: device descriptor read/8, error -71 [ 349.658954][ T5780] Bluetooth: hci0: command tx timeout [ 349.753363][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 349.909898][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 349.987103][ T5780] Bluetooth: hci4: command 0x1003 tx timeout [ 349.994576][ T5087] Bluetooth: hci2: command 0x0c1a tx timeout [ 350.002092][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 350.205703][ T973] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 350.265978][ T973] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.412215][ T9016] netlink: 84 bytes leftover after parsing attributes in process `syz.2.799'. [ 350.464099][ T973] usb 2-1: config 0 has no interface number 0 [ 350.473692][ T9018] loop0: detected capacity change from 0 to 164 [ 350.482072][ T973] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 350.493382][ T973] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 350.503452][ T973] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 350.529650][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.639126][ T973] usb 2-1: config 0 descriptor?? [ 350.688316][ T973] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 351.092223][ T9026] zram: Cannot change disksize for initialized device [ 351.489878][ T9008] iowarrior 2-1:0.1: Error -90 while submitting URB [ 351.505687][ T5774] usb 2-1: USB disconnect, device number 31 [ 351.995776][ T9030] loop2: detected capacity change from 0 to 32768 [ 352.135795][ T9030] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 352.482199][ T9030] XFS (loop2): Ending clean mount [ 352.497838][ T9030] XFS (loop2): Quotacheck needed: Please wait. [ 352.811276][ T9030] XFS (loop2): Quotacheck: Done. [ 353.026164][ T973] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 353.206418][ T7351] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 353.267369][ T28] audit: type=1800 audit(1787204045.979:45): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.803" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 353.310314][ T973] usb 1-1: device descriptor read/64, error -71 [ 353.559688][ T7351] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 353.573281][ T7351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.586638][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 353.634410][ T973] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 353.670161][ T7351] usb 2-1: config 0 descriptor?? [ 353.687333][ T7351] cp210x 2-1:0.0: cp210x converter detected [ 353.808094][ T973] usb 1-1: device descriptor read/64, error -71 [ 353.895361][ T7351] usb 2-1: cp210x converter now attached to ttyUSB0 [ 353.929226][ T973] usb usb1-port1: attempt power cycle [ 353.962733][ T9052] netlink: 84 bytes leftover after parsing attributes in process `syz.2.808'. [ 354.021226][ T9054] loop2: detected capacity change from 0 to 164 [ 354.350159][ T9058] zram: Cannot change disksize for initialized device [ 354.357736][ T973] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 354.398181][ T973] usb 1-1: device descriptor read/8, error -71 [ 354.667873][ T973] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 354.698079][ T973] usb 1-1: device descriptor read/8, error -71 [ 354.817483][ T973] usb usb1-port1: unable to enumerate USB device [ 355.817509][ T5087] Bluetooth: hci4: command 0x1003 tx timeout [ 355.817553][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 356.047879][ T5827] usb 2-1: USB disconnect, device number 32 [ 356.089328][ T5827] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 356.124659][ T5827] cp210x 2-1:0.0: device disconnected [ 356.161826][ T9071] netlink: 84 bytes leftover after parsing attributes in process `syz.2.817'. [ 357.720643][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 357.802611][ T9081] zram: Cannot change disksize for initialized device [ 357.966169][ T9084] bridge1: port 1(veth0_to_bond) entered blocking state [ 357.987663][ T9084] bridge1: port 1(veth0_to_bond) entered disabled state [ 358.009464][ T9084] veth0_to_bond: entered allmulticast mode [ 358.034934][ T9084] veth0_to_bond: entered promiscuous mode [ 358.148953][ T9087] bridge1: port 2(veth3) entered blocking state [ 358.165884][ T9087] bridge1: port 2(veth3) entered disabled state [ 358.180226][ T9087] veth3: entered allmulticast mode [ 358.206744][ T9087] veth3: entered promiscuous mode [ 358.277338][ T5827] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 358.447644][ T5827] usb 3-1: device descriptor read/64, error -71 [ 358.525669][ T9094] loop3: detected capacity change from 0 to 1024 [ 358.535963][ T9094] EXT4-fs: Ignoring removed bh option [ 358.556658][ T9094] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 358.574837][ T9094] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 358.600809][ T9094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.687195][ T7351] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 358.853659][ T5827] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 358.929691][ T7351] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 358.940854][ T7351] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 358.954161][ T7351] usb 1-1: config 1 interface 0 has no altsetting 0 [ 358.971448][ T7351] usb 1-1: string descriptor 0 read error: -22 [ 358.981164][ T7351] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 358.991421][ T7351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.534997][ T5827] usb 3-1: device descriptor read/64, error -71 [ 359.552182][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.658121][ T5827] usb usb3-port1: attempt power cycle [ 359.678812][ T7351] logitech 0003:046D:C626.0004: unknown main item tag 0x2 [ 359.686034][ T7351] logitech 0003:046D:C626.0004: unexpected long global item [ 359.693849][ T7351] logitech 0003:046D:C626.0004: parse failed [ 359.699926][ T7351] logitech: probe of 0003:046D:C626.0004 failed with error -22 [ 359.880130][ T5809] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 359.888376][ T7351] usb 1-1: USB disconnect, device number 33 [ 360.067629][ T5827] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 360.076813][ T5809] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 360.086009][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.096322][ T5809] usb 4-1: config 0 descriptor?? [ 360.102806][ T5827] usb 3-1: device descriptor read/8, error -71 [ 360.110849][ T5809] cp210x 4-1:0.0: cp210x converter detected [ 360.315298][ T5809] usb 4-1: cp210x converter now attached to ttyUSB0 [ 360.378343][ T5827] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 360.407978][ T5827] usb 3-1: device descriptor read/8, error -71 [ 361.642054][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 361.647486][ T5827] usb usb3-port1: unable to enumerate USB device [ 361.648628][ T5779] Bluetooth: hci4: command 0x1003 tx timeout [ 361.823539][ T9112] netlink: 84 bytes leftover after parsing attributes in process `syz.2.828'. [ 362.153836][ T9117] zram: Cannot change disksize for initialized device [ 362.220700][ T9123] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 362.239731][ T5774] IPVS: starting estimator thread 0... [ 362.327417][ T9124] IPVS: using max 20 ests per chain, 48000 per kthread [ 362.821709][ T5774] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 362.898557][ T9142] process 'syz.1.836' launched './file1' with NULL argv: empty string added [ 363.166728][ T5774] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 363.251209][ T5774] usb 3-1: config 0 has no interface number 0 [ 363.341347][ T5774] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 363.472701][ T5774] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 363.608656][ T5774] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 363.702592][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.725779][ T5809] usb 4-1: USB disconnect, device number 24 [ 363.757078][ T5774] usb 3-1: config 0 descriptor?? [ 363.759397][ T9147] netlink: 84 bytes leftover after parsing attributes in process `syz.3.838'. [ 363.770450][ T5809] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 363.804619][ T9133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.829041][ T5774] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 363.842662][ T5809] cp210x 4-1:0.0: device disconnected [ 364.024339][ T5774] usb 3-1: USB disconnect, device number 23 [ 364.030795][ T5827] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 364.113391][ T9151] zram: Cannot change disksize for initialized device [ 364.214606][ T9154] loop3: detected capacity change from 0 to 512 [ 364.243375][ T9154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.251954][ T5827] usb 1-1: device descriptor read/64, error -71 [ 364.295628][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.537312][ T5827] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 364.687331][ T5827] usb 1-1: device descriptor read/64, error -71 [ 364.791273][ T9166] loop2: detected capacity change from 0 to 512 [ 364.801963][ T9166] EXT4-fs: Ignoring removed oldalloc option [ 364.808240][ T9166] EXT4-fs: Invalid want_extra_isize 46201 [ 364.905568][ T5827] usb usb1-port1: attempt power cycle [ 365.034466][ T9166] xfrm0 speed is unknown, defaulting to 1000 [ 365.867084][ T9177] netlink: 84 bytes leftover after parsing attributes in process `syz.3.848'. [ 365.897818][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 365.904694][ T5779] Bluetooth: hci4: command 0x1003 tx timeout [ 365.911600][ T5827] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 365.974082][ T5827] usb 1-1: device descriptor read/8, error -71 [ 366.037355][ T173] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 366.052621][ T9182] loop1: detected capacity change from 0 to 512 [ 366.072244][ T9183] zram: Cannot change disksize for initialized device [ 366.136397][ T9182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.249321][ T5827] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 366.260716][ T173] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 366.271851][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.296307][ T173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.319308][ T5827] usb 1-1: device descriptor read/8, error -71 [ 366.356158][ T173] usb 3-1: config 0 descriptor?? [ 366.376016][ T173] cp210x 3-1:0.0: cp210x converter detected [ 366.458267][ T5827] usb usb1-port1: unable to enumerate USB device [ 366.614807][ T173] usb 3-1: cp210x converter now attached to ttyUSB0 [ 366.911495][ T23] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 367.217115][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.374372][ T23] usb 2-1: config 0 has no interface number 0 [ 367.547390][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 367.598017][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 367.661709][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 367.707263][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.722439][ T9203] loop0: detected capacity change from 0 to 1024 [ 367.736622][ T23] usb 2-1: config 0 descriptor?? [ 367.764116][ T9187] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 367.798488][ T23] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 367.943466][ T9211] netlink: 84 bytes leftover after parsing attributes in process `syz.3.858'. [ 367.993462][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 368.013246][ T23] usb 2-1: USB disconnect, device number 33 [ 368.058031][ T9215] loop3: detected capacity change from 0 to 512 [ 368.075420][ T9215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.128808][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.217166][ T9219] zram: Cannot change disksize for initialized device [ 368.629156][ T9225] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 368.906720][ T7351] usb 3-1: USB disconnect, device number 24 [ 368.931939][ T23] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 368.967670][ T7351] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 368.984761][ T7351] cp210x 3-1:0.0: device disconnected [ 369.128105][ T23] usb 4-1: device descriptor read/64, error -71 [ 369.168480][ T9231] can0: slcan on ptm0. [ 369.254179][ T9233] loop2: detected capacity change from 0 to 1024 [ 369.437825][ T23] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 369.537489][ T9238] netlink: 84 bytes leftover after parsing attributes in process `syz.1.867'. [ 369.620134][ T23] usb 4-1: device descriptor read/64, error -71 [ 369.724141][ T9244] loop2: detected capacity change from 0 to 1764 [ 369.737686][ T23] usb usb4-port1: attempt power cycle [ 370.431145][ T9246] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 370.598225][ T9230] can0 (unregistered): slcan off ptm0. [ 370.820480][ T9254] zram: Cannot change disksize for initialized device [ 371.108336][ T23] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 371.190878][ T23] usb 4-1: device descriptor read/8, error -71 [ 371.214000][ T9262] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 371.444911][ T9267] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.2852126720.0), cmd(12) [ 371.488675][ T23] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 371.527624][ T7351] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 371.659697][ T23] usb 4-1: device descriptor read/8, error -71 [ 371.759966][ T7351] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.807540][ T7351] usb 3-1: config 0 has no interface number 0 [ 371.814329][ T7351] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 371.828412][ T23] usb usb4-port1: unable to enumerate USB device [ 371.839241][ T7351] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 371.850540][ T7351] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 371.864519][ T7351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.892544][ T7351] usb 3-1: config 0 descriptor?? [ 371.905135][ T9264] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 371.949907][ T7351] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 372.132330][ T23] usb 3-1: USB disconnect, device number 25 [ 372.164421][ T9278] netlink: 84 bytes leftover after parsing attributes in process `syz.3.877'. [ 372.372738][ T9284] loop1: detected capacity change from 0 to 1764 [ 373.459606][ T9295] zram: Cannot change disksize for initialized device [ 373.689730][ T9304] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 373.862973][ T9310] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 374.363078][ T9301] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 374.376476][ T9301] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 374.385715][ T9301] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 374.398773][ T9301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 374.732923][ T5827] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 374.808831][ T5774] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 374.989913][ T5827] usb 4-1: device descriptor read/64, error -71 [ 375.047415][ T5774] usb 1-1: Using ep0 maxpacket: 32 [ 375.063865][ T5774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.083453][ T5774] usb 1-1: config 0 has no interfaces? [ 375.105553][ T5774] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 375.115181][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.125287][ T5774] usb 1-1: Product: syz [ 375.132521][ T5774] usb 1-1: Manufacturer: syz [ 375.139457][ T5774] usb 1-1: SerialNumber: syz [ 375.153914][ T5774] usb 1-1: config 0 descriptor?? [ 375.307412][ T5827] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 375.333422][ T28] audit: type=1326 audit(1787204068.169:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.2.889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048999e0d9 code=0x0 [ 375.437438][ T5774] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 375.457465][ T5827] usb 4-1: device descriptor read/64, error -71 [ 375.577725][ T5827] usb usb4-port1: attempt power cycle [ 375.622498][ T5774] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.630735][ T5774] usb 2-1: config 0 has no interface number 0 [ 375.636827][ T5774] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 375.648096][ T5774] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 375.659000][ T5774] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 375.668285][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.678347][ T5774] usb 2-1: config 0 descriptor?? [ 375.685240][ T9323] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 375.697747][ T5774] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 375.737560][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 375.900237][ T5774] usb 2-1: USB disconnect, device number 34 [ 375.997411][ T5827] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 376.028260][ T5827] usb 4-1: device descriptor read/8, error -71 [ 376.170026][ T9332] loop2: detected capacity change from 0 to 1764 [ 376.297523][ T5827] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 376.348105][ T5827] usb 4-1: device descriptor read/8, error -71 [ 376.380258][ T5780] Bluetooth: hci0: command tx timeout [ 376.457461][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 376.457563][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 376.478627][ T5827] usb usb4-port1: unable to enumerate USB device [ 377.407007][ T9321] usb 1-1: USB disconnect, device number 38 [ 377.499671][ T9340] can0: slcan on ptm0. [ 377.504421][ T9342] loop3: detected capacity change from 0 to 1024 [ 378.399454][ T9349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 378.405627][ T9349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 378.467712][ T9360] zram: Cannot change disksize for initialized device [ 378.497434][ T9349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 378.528609][ T9349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 378.552603][ T9362] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 378.752804][ T9367] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 378.811800][ T9371] loop0: detected capacity change from 0 to 512 [ 378.887037][ T9371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.049609][ T5827] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 379.157383][ T9337] can0 (unregistered): slcan off ptm0. [ 379.344401][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.355475][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.512820][ T5827] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.571731][ T5827] usb 3-1: config 0 has no interface number 0 [ 379.607621][ T5827] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 379.667432][ T5827] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 379.705514][ T5827] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 379.735394][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.771189][ T5827] usb 3-1: config 0 descriptor?? [ 379.790190][ T9369] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 379.802822][ T5827] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 379.808764][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.977689][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 380.009456][ T9382] loop0: detected capacity change from 0 to 1764 [ 380.056406][ T5827] usb 3-1: USB disconnect, device number 26 [ 380.457438][ T5780] Bluetooth: hci0: command tx timeout [ 380.538241][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 380.538252][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 380.757707][ T7351] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 380.963925][ T7351] usb 2-1: no configurations [ 380.988114][ T7351] usb 2-1: can't read configurations, error -22 [ 380.988202][ T173] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 381.138290][ T7351] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 381.302014][ T173] usb 3-1: Using ep0 maxpacket: 32 [ 381.325463][ T173] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 381.340115][ T173] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.357888][ T7351] usb 2-1: no configurations [ 381.362545][ T7351] usb 2-1: can't read configurations, error -22 [ 381.366114][ T9408] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 381.379055][ T173] usb 3-1: config 0 has no interface number 0 [ 381.379530][ T7351] usb usb2-port1: attempt power cycle [ 381.385180][ T173] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.415597][ T173] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 381.427228][ T173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.437724][ T173] usb 3-1: Product: syz [ 381.441925][ T173] usb 3-1: Manufacturer: syz [ 381.448372][ T173] usb 3-1: SerialNumber: syz [ 381.455313][ T173] usb 3-1: config 0 descriptor?? [ 381.469772][ T173] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 381.669904][ T173] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 381.676953][ T173] quatech2: probe of 3-1:0.51 failed with error -8 [ 381.809687][ T7351] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 381.850956][ T7351] usb 2-1: no configurations [ 381.856205][ T7351] usb 2-1: can't read configurations, error -22 [ 381.881017][ T173] usb 3-1: USB disconnect, device number 27 [ 382.007489][ T7351] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 382.040235][ T7351] usb 2-1: no configurations [ 382.044854][ T7351] usb 2-1: can't read configurations, error -22 [ 382.051572][ T7351] usb usb2-port1: unable to enumerate USB device [ 382.240840][ T9411] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 382.247533][ T9411] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 382.253577][ T9411] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 382.259694][ T9411] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 382.316342][ T9416] can0: slcan on ptm0. [ 382.701974][ T173] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 382.853514][ T9433] zram: Cannot change disksize for initialized device [ 382.884477][ T9434] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 382.897854][ T173] usb 1-1: Using ep0 maxpacket: 32 [ 382.914376][ T173] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.928554][ T173] usb 1-1: config 0 has no interface number 0 [ 382.943577][ T173] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 382.971396][ T173] usb 1-1: config 0 interface 1 has no altsetting 0 [ 382.988363][ T173] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 383.005930][ T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.026380][ T173] usb 1-1: Product: syz [ 383.043143][ T173] usb 1-1: Manufacturer: syz [ 383.055857][ T173] usb 1-1: SerialNumber: syz [ 383.078687][ T173] usb 1-1: config 0 descriptor?? [ 383.338343][ T9415] can0 (unregistered): slcan off ptm0. [ 383.346443][ T173] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 383.371208][ T173] cx231xx 1-1:0.1: Failed to read PCB config [ 383.391532][ T173] cx231xx: probe of 1-1:0.1 failed with error -71 [ 383.413415][ T173] usb 1-1: USB disconnect, device number 39 [ 383.579063][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 383.907495][ T173] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 383.948092][ T9452] loop1: detected capacity change from 0 to 1764 [ 384.157476][ T173] usb 1-1: Using ep0 maxpacket: 32 [ 384.172582][ T173] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.196745][ T173] usb 1-1: config 0 has no interface number 0 [ 384.216966][ T173] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 384.245471][ T173] usb 1-1: config 0 interface 1 has no altsetting 0 [ 384.266358][ T173] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 384.288508][ T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.297640][ T5087] Bluetooth: hci2: command 0x0c1a tx timeout [ 384.297665][ T5779] Bluetooth: hci0: command tx timeout [ 384.309363][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 384.326565][ T173] usb 1-1: Product: syz [ 384.342110][ T173] usb 1-1: Manufacturer: syz [ 384.362718][ T173] usb 1-1: SerialNumber: syz [ 384.383709][ T9460] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 384.393479][ T173] usb 1-1: config 0 descriptor?? [ 384.404644][ T9462] netlink: 84 bytes leftover after parsing attributes in process `syz.2.916'. [ 384.624487][ T173] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 384.676188][ T173] cx231xx 1-1:0.1: Failed to read PCB config [ 384.691659][ T173] cx231xx: probe of 1-1:0.1 failed with error -71 [ 384.747756][ T173] usb 1-1: USB disconnect, device number 40 [ 384.867521][ T5774] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 385.080756][ T5774] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 385.098894][ T5774] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.114063][ T5774] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 385.134833][ T5774] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.162666][ T5774] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 385.187407][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 385.210373][ T5774] usb 3-1: Product: syz [ 385.219247][ T5774] usb 3-1: Manufacturer: syz [ 385.321987][ T5774] cdc_wdm 3-1:1.0: skipping garbage [ 385.328930][ T5774] cdc_wdm 3-1:1.0: skipping garbage [ 385.335427][ T5774] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 385.399862][ T9470] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 385.485289][ T9470] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 385.532275][ T9470] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.608994][ T9470] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 385.987180][ T5774] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 386.011527][ T5827] usb 3-1: USB disconnect, device number 28 [ 386.135634][ T9496] can0: slcan on ptm0. [ 386.188436][ T5774] usb 1-1: no configurations [ 386.193101][ T5774] usb 1-1: can't read configurations, error -22 [ 386.213766][ T9468] loop2: detected capacity change from 0 to 3 [ 386.251997][ T9468] bio_check_eod: 2 callbacks suppressed [ 386.252047][ T9468] syz.2.919: attempt to access beyond end of device [ 386.252047][ T9468] loop2: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 386.295804][ T9468] SQUASHFS error: Failed to read block 0x0: -5 [ 386.314789][ T9468] unable to read squashfs_super_block [ 386.417427][ T5774] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 386.461821][ T9502] zram: Cannot change disksize for initialized device [ 386.619779][ T5774] usb 1-1: no configurations [ 386.632460][ T5774] usb 1-1: can't read configurations, error -22 [ 386.650668][ T5774] usb usb1-port1: attempt power cycle [ 386.777407][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 386.951927][ T9514] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 387.077706][ T5774] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 387.139782][ T5774] usb 1-1: no configurations [ 387.144432][ T5774] usb 1-1: can't read configurations, error -22 [ 387.150527][ T9518] netlink: 84 bytes leftover after parsing attributes in process `syz.2.927'. [ 387.169369][ T9495] can0 (unregistered): slcan off ptm0. [ 387.327887][ T5774] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 387.372247][ T5774] usb 1-1: no configurations [ 387.380215][ T5774] usb 1-1: can't read configurations, error -22 [ 387.400780][ T5774] usb usb1-port1: unable to enumerate USB device [ 387.502866][ T5779] Bluetooth: hci0: command tx timeout [ 387.577546][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 387.638011][ T9321] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 387.657633][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout [ 387.852652][ T9321] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 387.892296][ T9321] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 387.937068][ T9321] usb 3-1: config 1 interface 0 has no altsetting 0 [ 387.954610][ T9321] usb 3-1: string descriptor 0 read error: -22 [ 387.971143][ T9321] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 387.992189][ T9321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.112693][ T9540] loop1: detected capacity change from 0 to 1764 [ 389.211234][ T9547] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 389.312412][ T9547] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 389.324307][ T9321] logitech 0003:046D:C626.0005: unknown main item tag 0x2 [ 389.332725][ T9321] logitech 0003:046D:C626.0005: unexpected long global item [ 389.342769][ T9547] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 389.357889][ T9321] logitech 0003:046D:C626.0005: parse failed [ 389.363974][ T9321] logitech: probe of 0003:046D:C626.0005 failed with error -22 [ 389.379660][ T9547] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 389.622978][ T5774] usb 3-1: USB disconnect, device number 29 [ 389.790600][ T9564] zram: Cannot change disksize for initialized device [ 389.815246][ T9563] can0: slcan on ptm0. [ 390.133604][ T9568] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 390.597533][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 390.689108][ T9562] can0 (unregistered): slcan off ptm0. [ 391.137624][ T5774] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 391.337741][ T5780] Bluetooth: hci0: command tx timeout [ 391.353037][ T5774] usb 3-1: no configurations [ 391.386671][ T5774] usb 3-1: can't read configurations, error -22 [ 391.417449][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 391.421297][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 391.587494][ T5774] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 391.828392][ T5774] usb 3-1: no configurations [ 391.843596][ T5774] usb 3-1: can't read configurations, error -22 [ 391.876349][ T5774] usb usb3-port1: attempt power cycle [ 391.894501][ T9590] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 392.347605][ T5774] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 392.410652][ T5774] usb 3-1: no configurations [ 392.415307][ T5774] usb 3-1: can't read configurations, error -22 [ 392.587747][ T5774] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 392.631112][ T5774] usb 3-1: no configurations [ 392.635767][ T5774] usb 3-1: can't read configurations, error -22 [ 392.677696][ T5774] usb usb3-port1: unable to enumerate USB device [ 392.685020][ T9609] loop3: detected capacity change from 0 to 2048 [ 392.764296][ T9609] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 392.806859][ T9609] NILFS (loop3): mounting unchecked fs [ 392.893583][ T5764] udevd[5764]: incorrect nilfs2 checksum on /dev/loop3 [ 392.941615][ T9609] NILFS (loop3): recovery complete [ 392.987073][ T5764] udevd[5764]: incorrect nilfs2 checksum on /dev/loop3 [ 393.177606][ T23] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 394.077397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 394.137403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 394.277404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 394.295895][ T9623] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 394.459204][ T23] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 394.490906][ T23] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 394.532213][ T23] usb 2-1: config 1 interface 0 has no altsetting 0 [ 394.562091][ T23] usb 2-1: string descriptor 0 read error: -22 [ 394.573650][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 394.603613][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.991792][ T9630] zram: Cannot change disksize for initialized device [ 395.244909][ T23] logitech 0003:046D:C626.0006: unknown main item tag 0x2 [ 395.267733][ T23] logitech 0003:046D:C626.0006: unexpected long global item [ 395.282725][ T23] logitech 0003:046D:C626.0006: parse failed [ 395.867073][ T23] logitech: probe of 0003:046D:C626.0006 failed with error -22 [ 395.878486][ T23] usb 2-1: USB disconnect, device number 39 [ 396.741111][ T9653] loop2: detected capacity change from 0 to 512 [ 397.821833][ T9653] EXT4-fs (loop2): Test dummy encryption mode enabled [ 397.851417][ T9653] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 397.903984][ T9653] EXT4-fs (loop2): 1 truncate cleaned up [ 397.916187][ T9653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.922051][ T173] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 398.108276][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.132282][ T173] usb 1-1: no configurations [ 398.138803][ T173] usb 1-1: can't read configurations, error -22 [ 398.206056][ T9660] binder: 9659:9660 ioctl c0306201 0 returned -14 [ 398.298255][ T173] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 398.510564][ T173] usb 1-1: no configurations [ 398.517019][ T173] usb 1-1: can't read configurations, error -22 [ 398.537904][ T173] usb usb1-port1: attempt power cycle [ 398.770569][ T5882] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 398.968170][ T173] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 398.989306][ T5882] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 399.004692][ T5882] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 399.017637][ T23] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 399.036953][ T5882] usb 3-1: config 1 interface 0 has no altsetting 0 [ 399.045944][ T173] usb 1-1: no configurations [ 399.050785][ T173] usb 1-1: can't read configurations, error -22 [ 399.065515][ T5882] usb 3-1: string descriptor 0 read error: -22 [ 399.074341][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 399.086024][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.199921][ T23] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 399.208841][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.217631][ T173] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 399.219608][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 399.236917][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.249085][ T23] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 399.262183][ T23] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 399.268965][ T173] usb 1-1: no configurations [ 399.272542][ T23] usb 4-1: Product: syz [ 399.274847][ T173] usb 1-1: can't read configurations, error -22 [ 399.284004][ T23] usb 4-1: Manufacturer: syz [ 399.295451][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 399.305532][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 399.308392][ T173] usb usb1-port1: unable to enumerate USB device [ 399.311821][ T23] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 399.517241][ T23] usb 4-1: USB disconnect, device number 33 [ 399.534750][ T9679] zram: Cannot change disksize for initialized device [ 399.851502][ T5882] usbhid 3-1:1.0: can't add hid device: -71 [ 399.859742][ T5882] usbhid: probe of 3-1:1.0 failed with error -71 [ 401.016711][ T5882] usb 3-1: USB disconnect, device number 34 [ 401.305960][ T9685] binder: 9684:9685 ioctl c0306201 0 returned -14 [ 402.463353][ T9696] loop1: detected capacity change from 0 to 1024 [ 403.612302][ T9716] binder: 9715:9716 ioctl c0306201 0 returned -14 [ 403.707606][ T9321] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 403.853670][ T9720] zram: Cannot change disksize for initialized device [ 403.898312][ T9321] usb 2-1: no configurations [ 403.903143][ T9321] usb 2-1: can't read configurations, error -22 [ 404.071835][ T9722] loop2: detected capacity change from 0 to 2048 [ 404.081097][ T9321] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 404.128166][ T9722] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 404.170105][ T9722] NILFS (loop2): mounting unchecked fs [ 404.201380][ T9722] NILFS (loop2): recovery complete [ 404.208297][ T5764] udevd[5764]: incorrect nilfs2 checksum on /dev/loop2 [ 404.215442][ T9723] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 404.288420][ T9321] usb 2-1: no configurations [ 404.303332][ T9321] usb 2-1: can't read configurations, error -22 [ 404.317704][ T9321] usb usb2-port1: attempt power cycle [ 404.415652][ T9725] loop2: detected capacity change from 0 to 2048 [ 404.431870][ T9725] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 404.451419][ T9725] NILFS (loop2): mounting unchecked fs [ 404.507481][ T9725] NILFS (loop2): recovery complete [ 404.514340][ T5764] udevd[5764]: incorrect nilfs2 checksum on /dev/loop2 [ 404.551721][ T9726] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 404.747535][ T9321] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 404.807692][ T9321] usb 2-1: no configurations [ 404.812743][ T9321] usb 2-1: can't read configurations, error -22 [ 404.843849][ T9714] loop0: detected capacity change from 0 to 65536 [ 404.905313][ T9714] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 404.997542][ T9321] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 405.136867][ T9714] XFS (loop0): Ending clean mount [ 405.153981][ T9321] usb 2-1: no configurations [ 405.162050][ T9321] usb 2-1: can't read configurations, error -22 [ 405.185723][ T9747] loop3: detected capacity change from 0 to 164 [ 405.233993][ T9321] usb usb2-port1: unable to enumerate USB device [ 405.247919][ T9714] XFS (loop0): Quotacheck needed: Please wait. [ 405.382975][ T9321] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x196/0x260, xfs_agf block 0x1 [ 405.437222][ T9321] XFS (loop0): Unmount and run xfs_repair [ 405.446551][ T9321] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 405.456729][ T9321] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 405.483528][ T9321] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 405.514684][ T9321] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 405.542308][ T9321] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 405.551695][ T9321] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 405.563555][ T9321] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 405.606032][ T9321] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 405.623972][ T9321] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 405.672359][ T7261] XFS (loop0): metadata I/O error in "xfs_read_agf+0x277/0x5a0" at daddr 0x1 len 1 error 74 [ 405.754253][ T9714] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 406.263861][ T9714] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x196/0x260, xfs_agf block 0x1 [ 406.286263][ T9714] XFS (loop0): Unmount and run xfs_repair [ 406.296424][ T9714] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 406.300243][ T9754] loop3: detected capacity change from 0 to 512 [ 406.308582][ T9714] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 406.353205][ T9714] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 406.376269][ T9754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.457639][ T9754] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.468892][ T9714] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 406.477995][ T9714] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 406.488510][ T9714] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 406.498180][ T9714] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 406.507251][ T9714] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 406.516585][ T9714] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 406.526400][ T9714] XFS (loop0): metadata I/O error in "xfs_read_agf+0x277/0x5a0" at daddr 0x1 len 1 error 74 [ 406.555254][ T9714] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xc7d/0x1230 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 406.591988][ T9714] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 406.682262][ T5771] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 406.752753][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.799302][ T9765] zram: Cannot change disksize for initialized device [ 407.417716][ T5808] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 407.460514][ T9775] loop0: detected capacity change from 0 to 2048 [ 407.484254][ T9775] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 407.511073][ T9775] NILFS (loop0): mounting unchecked fs [ 407.531661][ T5764] udevd[5764]: incorrect nilfs2 checksum on /dev/loop0 [ 407.534640][ T9775] NILFS (loop0): recovery complete [ 407.550736][ T9776] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 407.611137][ T5808] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 407.633640][ T5808] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 407.678588][ T5808] usb 4-1: config 1 interface 0 has no altsetting 0 [ 407.694237][ T5808] usb 4-1: string descriptor 0 read error: -22 [ 407.703968][ T5808] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 407.720774][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.060308][ T9782] loop0: detected capacity change from 0 to 164 [ 408.222341][ T5808] usbhid 4-1:1.0: can't add hid device: -71 [ 408.229444][ T5808] usbhid: probe of 4-1:1.0 failed with error -71 [ 408.353408][ T5808] usb 4-1: USB disconnect, device number 34 [ 409.027965][ T5808] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 409.062880][ T9795] loop1: detected capacity change from 0 to 2048 [ 409.089283][ T9795] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 409.118160][ T9795] NILFS (loop1): mounting unchecked fs [ 409.137690][ T9795] NILFS (loop1): recovery complete [ 409.146571][ T5764] udevd[5764]: incorrect nilfs2 checksum on /dev/loop1 [ 409.146672][ T9801] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 409.225545][ T5808] usb 1-1: no configurations [ 409.266343][ T5808] usb 1-1: can't read configurations, error -22 [ 409.317476][ T5882] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 409.487701][ T5808] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 409.722224][ T5808] usb 1-1: no configurations [ 409.759786][ T5808] usb 1-1: can't read configurations, error -22 [ 409.833235][ T5808] usb usb1-port1: attempt power cycle [ 410.093119][ T9806] loop1: detected capacity change from 0 to 164 [ 410.308360][ T5882] usb 4-1: device descriptor read/64, error -71 [ 410.587483][ T5882] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 410.609938][ T9810] zram: Cannot change disksize for initialized device [ 410.630240][ T5808] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 410.747678][ T5882] usb 4-1: device descriptor read/64, error -71 [ 410.748801][ T5808] usb 1-1: no configurations [ 410.771762][ T5808] usb 1-1: can't read configurations, error -22 [ 410.867919][ T5882] usb usb4-port1: attempt power cycle [ 410.927506][ T5808] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 410.987471][ T5808] usb 1-1: no configurations [ 411.056830][ T5808] usb 1-1: can't read configurations, error -22 [ 411.066873][ T5808] usb usb1-port1: unable to enumerate USB device [ 411.385406][ T5882] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 411.468675][ T5882] usb 4-1: device descriptor read/8, error -71 [ 411.738302][ T5882] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 411.791258][ T5882] usb 4-1: device descriptor read/8, error -71 [ 411.812542][ T9825] loop2: detected capacity change from 0 to 1024 [ 412.053178][ T5882] usb usb4-port1: unable to enumerate USB device [ 412.774235][ T5827] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 412.847673][ T9321] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 413.039195][ T5827] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 413.094176][ T9838] loop3: detected capacity change from 0 to 1764 [ 413.102972][ T5827] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 413.163940][ T9321] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 413.168186][ T5827] usb 2-1: config 1 interface 0 has no altsetting 0 [ 413.180333][ T9321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.194173][ T5827] usb 2-1: string descriptor 0 read error: -22 [ 413.206786][ T5827] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 413.217632][ T9321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 413.229115][ T9321] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.249897][ T9321] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 413.258120][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.274795][ T9321] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 413.283391][ T9321] usb 3-1: Product: syz [ 413.292530][ T9321] usb 3-1: Manufacturer: syz [ 413.532513][ T9321] cdc_wdm 3-1:1.0: skipping garbage [ 413.547721][ T9321] cdc_wdm 3-1:1.0: skipping garbage [ 413.569089][ T9321] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 413.783247][ T5774] usb 3-1: USB disconnect, device number 35 [ 414.169922][ T5827] usbhid 2-1:1.0: can't add hid device: -71 [ 414.176067][ T5827] usbhid: probe of 2-1:1.0 failed with error -71 [ 414.189824][ T5827] usb 2-1: USB disconnect, device number 44 [ 414.260935][ T9849] zram: Cannot change disksize for initialized device [ 414.297557][ T9321] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 414.494436][ T9321] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 414.503368][ T9321] usb 4-1: can't read configurations, error -61 [ 414.610059][ T9851] loop2: detected capacity change from 0 to 1024 [ 414.657772][ T9321] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 414.739207][ T9853] loop2: detected capacity change from 0 to 736 [ 414.852953][ T9321] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 414.868833][ T9321] usb 4-1: can't read configurations, error -61 [ 414.885737][ T9321] usb usb4-port1: attempt power cycle [ 415.044452][ T9858] jffs2: notice: (9858) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 415.187757][ T5770] ------------[ cut here ]------------ [ 415.193787][ T5770] kernel BUG at fs/jffs2/nodelist.c:462! [ 415.307476][ T9321] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 415.312715][ T5770] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 415.321087][ T5770] CPU: 0 PID: 5770 Comm: syz-executor Not tainted syzkaller #0 [ 415.328643][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.338719][ T5770] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 415.344828][ T5770] Code: 07 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 f2 fe 07 ff e9 42 fe ff ff e8 d8 7b af fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 415.364672][ T5770] RSP: 0018:ffffc9000467fa98 EFLAGS: 00010293 [ 415.370849][ T5770] RAX: ffffffff82d7f648 RBX: ffff888020f76000 RCX: ffff88807a4bda00 [ 415.378844][ T5770] RDX: 0000000000000000 RSI: ffff888020f76000 RDI: ffff88805d626000 [ 415.386838][ T5770] RBP: 0000000000000006 R08: ffff88805d62636b R09: 1ffff1100bac4c6d [ 415.394824][ T5770] R10: dffffc0000000000 R11: ffffed100bac4c6e R12: ffff888020f76000 [ 415.402804][ T5770] R13: dffffc0000000000 R14: ffff888020f76020 R15: ffff88805d626000 [ 415.410784][ T5770] FS: 00005555796ee500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 415.419720][ T5770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.426320][ T5770] CR2: 00007f04899eb7c0 CR3: 0000000060908000 CR4: 00000000003506f0 [ 415.434741][ T5770] Call Trace: [ 415.438196][ T5770] [ 415.441330][ T5770] ? jffs2_do_clear_inode+0x314/0x390 [ 415.447221][ T5770] jffs2_do_clear_inode+0x31f/0x390 [ 415.452430][ T5770] ? jffs2_statfs+0x370/0x370 [ 415.457114][ T5770] evict+0x4b7/0x8a0 [ 415.461048][ T5770] ? xa_load+0x64/0x2e0 [ 415.465718][ T5770] ? proc_nr_inodes+0x230/0x230 [ 415.470589][ T5770] ? do_raw_spin_unlock+0x121/0x230 [ 415.475849][ T5770] ? do_raw_spin_unlock+0x121/0x230 [ 415.481063][ T5770] evict_inodes+0x64a/0x6e0 [ 415.485664][ T5770] ? clear_inode+0x150/0x150 [ 415.490263][ T5770] ? jffs2_sync_fs+0x97/0xa0 [ 415.494860][ T5770] generic_shutdown_super+0x97/0x2b0 [ 415.500175][ T5770] kill_mtd_super+0x23/0x70 [ 415.504806][ T5770] jffs2_kill_sb+0x96/0xb0 [ 415.509228][ T5770] deactivate_locked_super+0x97/0x100 [ 415.514608][ T5770] cleanup_mnt+0x3d7/0x460 [ 415.519178][ T5770] task_work_run+0x1d4/0x260 [ 415.523908][ T5770] ? task_work_cancel+0x220/0x220 [ 415.529122][ T5770] ? exit_to_user_mode_loop+0x3b/0x110 [ 415.534624][ T5770] exit_to_user_mode_loop+0xe6/0x110 [ 415.539938][ T5770] exit_to_user_mode_prepare+0xee/0x180 [ 415.545513][ T5770] syscall_exit_to_user_mode+0x1a/0x50 [ 415.551075][ T5770] do_syscall_64+0x61/0xb0 [ 415.555505][ T5770] ? clear_bhb_loop+0x40/0x90 [ 415.560272][ T5770] ? clear_bhb_loop+0x40/0x90 [ 415.564962][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.570964][ T5770] RIP: 0033:0x7fc35719f317 [ 415.575416][ T5770] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 415.595043][ T5770] RSP: 002b:00007fff663cb4d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 415.603562][ T5770] RAX: 0000000000000000 RBX: 00007fc357234474 RCX: 00007fc35719f317 [ 415.611535][ T5770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff663cb590 [ 415.619509][ T5770] RBP: 00007fff663cb590 R08: 00007fff663cc590 R09: 00000000ffffffff [ 415.627500][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff663cc620 [ 415.635564][ T5770] R13: 00007fc357234474 R14: 0000000000065377 R15: 00007fff663cc660 [ 415.643550][ T5770] [ 415.646611][ T5770] Modules linked in: [ 415.810811][ T5770] ---[ end trace 0000000000000000 ]--- [ 415.816730][ T5770] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 415.828988][ T5770] Code: 07 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 f2 fe 07 ff e9 42 fe ff ff e8 d8 7b af fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 415.905725][ T9321] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 416.023381][ T9321] usb 4-1: can't read configurations, error -61 [ 416.032059][ T5770] RSP: 0018:ffffc9000467fa98 EFLAGS: 00010293 [ 416.044997][ T5770] RAX: ffffffff82d7f648 RBX: ffff888020f76000 RCX: ffff88807a4bda00 [ 416.072806][ T5770] RDX: 0000000000000000 RSI: ffff888020f76000 RDI: ffff88805d626000 [ 416.083368][ T5770] RBP: 0000000000000006 R08: ffff88805d62636b R09: 1ffff1100bac4c6d [ 416.091918][ T5770] R10: dffffc0000000000 R11: ffffed100bac4c6e R12: ffff888020f76000 [ 416.100263][ T5770] R13: dffffc0000000000 R14: ffff888020f76020 R15: ffff88805d626000 [ 416.112193][ T5770] FS: 00005555796ee500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 416.123670][ T5770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.131045][ T5770] CR2: 00007f0489bef2f8 CR3: 0000000060908000 CR4: 00000000003506e0 [ 416.141666][ T5770] Kernel panic - not syncing: Fatal exception [ 416.148000][ T5770] Kernel Offset: disabled [ 416.152312][ T5770] Rebooting in 86400 seconds..