last executing test programs: 4m18.244674041s ago: executing program 5 (id=2460): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$sock_bt_hci(r0, 0x400448c8, &(0x7f0000000000)) 4m17.440373822s ago: executing program 5 (id=2464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x10, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m16.558546757s ago: executing program 5 (id=2468): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 4m16.022070292s ago: executing program 5 (id=2471): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040840}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 4m15.487786239s ago: executing program 5 (id=2474): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 4m15.080303231s ago: executing program 5 (id=2476): openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x40, 0xb8, 0x22}, 0x18) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f00000000c0)) 3m59.880052332s ago: executing program 32 (id=2476): openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x40, 0xb8, 0x22}, 0x18) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f00000000c0)) 7.020396482s ago: executing program 1 (id=4527): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 6.646651236s ago: executing program 4 (id=4531): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) 6.174922158s ago: executing program 4 (id=4535): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001c40)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,time_offset=0x0000000000000003,fmask=00000000000000000000005,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1548, &(0x7f0000000380)="$eJzs3AuYTdX7OPD3XWvtMSSdJrkMa613c5LLMkmSS5JckiRJktwSkib5SkJiyC1pSEJyGZLLEJLLxKRxv98vCU2SJklCckvW/1H8fftVv++lvl/P85v38zz7sd6z9rv22vOeM2fvdZz5psvQmo1rVWtIRPCn4C//JAFALAAMBIBrACAAgHJx5eIu9OeUmPTnDsL+Wg+lXukZsCuJ65+9cf2zN65/9sb1z964/tkb1z974/pnb1x/xrKzzdMLXstb9t14/T874/f//0OySo/9Ym3p67sCxPyzKVz/7I3r/39W8M/sxPXP3rj+2VXslZ4A+yvN/vfS+PWfHeT4wx6uf/bG9WcsO/t5HTgnXPF16Cu1QSR7fwZypZ9/jDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcayh9P+MgUAl9pXel6MMcYYY4wxxhj76/gcV3oGjDHGGGOMMcYY+89DECBBQQAxkANiISfkAgEAV0MeuAYicC3EwXWQF66HfJAfCkBBiIdCUBg0GLBAEEIRKApRuAGKwY1QHEpASSgFDkpDAtwEZeBmKAu3QDm4FcrDbVABKkIlqAy3QxW4A6rCnVAN7oLqUANqQi24G2rDPVAH7oW6cB/Ug/uhPjwADeBBaAgPQSN4GBrDI9AEHoWm0AyaQwto+W/lvwA94EXoCb0gCXpDH3gJ+kI/6A8DYCC8DIPgFRgMr0IyDIGh8BoMg9dhOLwBI2AkjII3YTS8BWNgLIyD8ZACE2AivA2T4B2YDFNgKkyDVJgOM+BdmAmzYDa8B3PgfZgL82A+LIA0+AAWwiJIhw9hMXwEGbAElsIyWA4rYCWsgtWwBtbCuh/7wgbYCJtgM2yBrbANtsMO2Akfwy74BHbDntfnAUAmfPZH+bD+d/NPXcqHvfApZEJXBAQUKFChwhiMwViMxVyYC3NjbsyDeTCCEYzDOMyLeTEf5sMCWADjMR4LY2E0aJCQsAgWwShGsRgWw+JYHEtiSXToMAETsAzejGWxLJbDclgey2MFrIgVsTJWxipYBatiVayG1bA6VseaWBPvxruxN9bBOlgX62I9rHdpeQobYkNshI2wMTbGJtgEm2JTbI7NsSW2xFbYCltja2yLbbEdtsP22B4TMRE7YAfsiB2xE3bCztgZu2AX7IrdsFvWCzkAX8QXsRdWF72xD/bBvpicoz8OwAH4Mg7CV/AVfBWTcQgOxdfwNXwdh+NJHIEjcRSOwiriLRyDY5HEeEzBFJyIE3ESTsLJOAWn4DRMxek4A2fgTJyFs/A9nIPv4/s4D+fhAkzDNFyIizAd03ExnsIMXIJLcRkuxxW4HFfhalyFa3EdrsUNuAE34SbcgltwG27DHbgDP0YFgJ/gHtyDyZiJmbgP9+F+3I8H8ABmYRYexIN4CA/hYTyMR/AIHsVjeByP4Qk8gSfxFJ7G03gWz+I5fC7+q0Yfl1iTDOICJZSIETEiVsSKXCKXyC1yizwij4iIiIgTcSKvyCvyiXyigCgg4kW8KCwKCyOMIBHGAICIiqgoJoqJ4qK4KClKCiecSBAJoowoI8qKsqKcuFWUF7eJCqKiaOMqi8qiimjrqoo7RTVRTVQXNURNUUvUErVFbVFH1BF1RV1RT9QT9cUDooHojf3xIXGhMo3FEGwihmJT0UzIi7/BWonh2Fq0EW3FE2IkjsD2opVLFE+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo7XqKXmIy9hZ9xDTsK/qJ/mKAmIk1xHs4J2dN8apIFkPEUPGaWICvi+HiDTFCjBSjxJtitHhLjBFjxTgxXqSICWKieFtMEu+IyWKKmCqmiVQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJNfCAWikUiXXwoFouPRIZYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lORKT4T+8TnYr/4QhwQX4os8ZU4KL4Wh8Q34rD4VhwR34mj4pg4Lr4XJ8QP4qQ4JU6LM+Ks+FGcEz+J88ILkCiFlFLJQMbIHDJW5pS55FUytwwu/nSvlXHyOplXXi/zyfyygCwo42UhWVhqaaSVJENZRBaVUXmDLCZvlMVlCVlSlpJOlpYJ8iZZRt4sy8pbZDl5qywvb5MVZEVZSVaWt8sq8g4JkV+OUV3WkDVlLXm3TIJ7ZB15r6wr75P15P2yvnxANpAPyobyIdlIPiwby0dkE/mobCqbyeayhWwpH5Ot5OOytWwj28onZDv5pGwvn5KJ8mnZQfqLT5FnZWf5nOwin5ddZTfZXf4kz0sve8peEnqD7CNfkn1lP9lfDpAD5ctykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZTpFT5TSZKqfL/hdHmi3lP8x/+3fyB/989E1ys9wit8ptcrvcIXfKj+UuuUvulrvlXrlXZspMuU/uk/vlfnlAHpBZMkselAflIXlIHpaH5RF5RB6Vx+QZ+b08IX+QJ+UpeUqekWflWXnu4s8AFCqhpFIqUDEqh4pVOVUudZXKra5WedQ1KqKuVXHqOpVXXa/yqfyqgCqo4lUhVVhpZZRVpEJVRBVVUXUDXnzCqJKqlHKqtEpQN/0r+aqYulEVVyV+lX9pfkl/ML+WqqVqpVqp1qq1aqvaqnaqnWqv2qtElag6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKkklqT7qJdVX9VP91QA1UL2sBqlBarAarJJVshqqhqphapgaroarEWqEGqVGqdFqtBqjxqhxapxKUSlqopqoJqlJarKarKaqqSpVpaoZaoaaqWaq2Wq2mqPmqLlqrpqv5qs0laYWqoUqXaWrxWqxylBL1BK1TC1TK9QKtUqtUmvUGrVOrVMb1AaVoTarzWqr2qq2q+1qp9qpdqldarfarfaqvSpTZap9ap/ar/arA+qAylJZ6qA6qA6pQ+qwOqyOqCPqqDqqjqvj6oQ6oU6qk+q0Oq3OqrPqnDqnzqvzFy77AhGIQAUqiAligtggNsgV5ApyB7mDPEGeIBJEgrggLsgbXB/kC/IHBYKCQXxQKCgc6MAENhAXix4NbgiKBTcGxYMSQcmgVOCC0kFCzMXO4JagXHBrUD64LagQVAwqBZWD24MqwR1B1eDOoFpwV1A9qBHUDGoFdwe1g3uCOsG9Qd3gvqBecH9QP3ggaBA8GDQMHgoaBQ8HjYNHgibBo0HToFnQPGgRtAxuDsr+ZeN7fzL/466n7qWTdG/dR7+k++p+ur8eoAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erKeoqfqaTpVT9cz9Lt6pp6lZ+v39Bz9vp6r5+n5eoFO0x/ohXqRTtcf6sX6I52hl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q536J36Y71Lf6J36z16r/5UZ+rP9D79ud6vv9AH9Jc6S3+lD+qv9SH9jT6sv9VH9Hf6qD6mj+vv9Qn9gz6pT+nT+ow+q3/U5/RP+rz2Fy7uL7y9G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emr8lr8pl8poApYOJNvClsCpsLyJApYoqYqImaYqaYKW6Km5KmpHHGmQSTYMqYMqasKWvKmXKmvClvKpgKppKpZG43t5s7zB3mTnOnucvcZWqYGqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqapqa5aW5ampamlWllWpvWpq1pa9qZdqa9aW8STaLpYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6miSTZPqYPqav6Wv6m/5moBloBplBZrAZbJJNshlqhpphZpgZboabEWakGXXhQtW8ZcaYsWacGW9STIqZaCaaSWaSmWwmm6lmqkk1qWaGmWFmmplmtplt5pg5Zq6Za+ab+SbNpJmFZqFJN+lmsVlsMkyGWWqWmuVmuVlpVprVZrVZa9aa9bDebDQbzWaz2Ww1W812s93sNDvNLrPL7Da7zV6z12SaTLPP7DP7zX5zwBwwWSbLHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81Zk//i+6U3sTanzWWvsrnt1TaPvcb+z7iALWjjbSFb2Gqbz+b/VWystcVtCVvSlrLOlrYJ9qbfxBVsRVvJVra32yr2Dlv1N3Fte4+tY++1de19tpa9+1dxPXu/rW8fsQ0QAWwz28i2sI3tI7aJfdQ2tc1sc9vCtrNP2vb2KZton7Yd7DO/iRfaRXa1XWPX2nV2t91jT9sz9pD9xp61P9qetpcdaF+2g+wrdrB91SbbIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk210+0M+66daWf9Jk6zH9g5Nt3OtfPsfLvg5/jCnNLth3ax/chm2ACW2mV2uV1hV9pV/3+uy+wGu9FusrvsJ3ar3Wa32x1256ULYbvH7rWf2kz7mT1ov7b77Rf2gD1ss+xXP8cXzu+w/dYesd/Zo/aYPW6/tyfsD+pS9oVz/97+ZM9bb4GQgCQpCiiGclAs5aRcdBXlpqspD11DEbqW4ug6ykvXUz7KTwWoIMVTISpMmgxZIgqpCBWlKN1Al6ZXkkqRo9KUQDdRGbqZytItVI5upfJ0G1WgilSJKtPtVIXuoKp0J1Wju6g61aCaVIvuptp0D9Whe6ku3Uf16H6qTw9QA3qQGtJD1Igepsb0CDWhR6kpNaPm1IJa0mPUih6n1tSG2tIT1I6epPb0FCXS09SBnqGO9DfqRM9SZ3qOutDz1JW6UXd6gXrQi9STelES9aY+9BL1pX7UnwbQQHqZBtErNJhepWQaQkPpNRpGr9NweoNG0EgaRW/SaHqLxtBYGkfjKYUm0ER6mybROzSZptBUmkapNJ1m0Ls0k2bRbHqP5tD7NJfm0XxaQGn0AS2kRZROH9Ji+ogyaAktpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO+ph20Se0m/bQXvqUMukz2kef0376gg7Ql5RFX9FB+poO0Td0mL71veg7OkrH6Dh9TyfoBzpJp+g0naGz9COdo5/oPHmCEEMRylCFQRgT5ghjw5xhrvCqMHd4dZgnvCaMhNeGceF1Yd7w+jBfmD8sEBYM48NCYeFQhya0IYVhWCQsGkbDG8Ji4Y1h8bBEWDIsFbqwdJgQ3hSWCW8Oy4a3hOXCW8Py4W1hhbBi+Mh9lcPbwyrhHWHV8M6wWnhXWD2sEdYMa4V3h7XDe8I64b1h3fC+sGx4f1g/fCBsED4YNgwfChuFD4eNw0fCJuGjYdOwWdg8bBG2DB8LW4WPh63DNmHb8ImwXfhk2D58KkwMnw47hM/83H//oj/uTwp7h33Cl8KXQu/vlfOjC6Jp0Q+iC6OLounRD6OLox9FM6JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18oBDp1w0ikXuBiXw8W6nC6Xu8rldle7PO4aF3HXujh3ncvrrnf5XH5XwBV08a6QK+y0M846cqEr4oq6qLvBFXM3uuKuhCvpSjnnSrsE18K1dC1dK/e4a+3auLbuCfeEe9I96Z5yT7mnXQf3jOvo/uY6uWddZ/ece84977q6bq67e8H1cBPy/PKaTHJ9XB/X1/V1/V1/N9ANdIPcIDfYDXbJLtkNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOpbgUN9FNdJPcJDfZTXZT3VSX6lLdDDfDzXQzXZVZvxxlrpvr5rv5Ls2luYXuwjVjulvsFrsMl+GWuqVuuVvuVrqVbrVb7da6tW69W+82uo1us9vstrqtbrvb7na6nW6X2+V2+2t+GdRlun1un9vv9rsD7kuX5b5yB93X7pD7xh1237oj7jt31B1zx9337oT7wZ10p9xpd8addT+6c+4nd955lxKZEJkYeTsyKfJOZHJkSmRqZFokNTI9MiPybmRmZFZkduS9yJzI+5G5kXmR+ZEFkbTIB5GFkUWR9MiHkcWRjyIZkSWRpZFlkeWRFRHvC20NfRFf1Ef9Db6Yv9EX9yV8SV/KO1/aJ/ibfBl/sy/rb/Hl/K2+vL/NV/AVfSX/qG/qm/nmvoVv6R/zrfzjvrVv49v6J3w7/6Rv75/yif5p38E/4zv6v/lO/lnf2T/nu/jnfVffzXf3L/ge/kXf0/fySb637+Nf8n19P9/fD/AD/ct+kH/FD/av+mQ/xA/1r/lh/nU/3L/hR/iRflTMm370pVtkGO9T/AQ/0b/tJ/l3/GQ/xU/103yqn+5n+Hf9TD/Lz/bv+Tn+fT/Xz/Pz/QKf5j/wC/0in+4/9Iv9Rz7DL7m0qOxX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u9/hd/qP/S7/id/t9/i9/lOf6T/z+/znfr//wh/wX/os/5U/6L/2h/w3/rD/1h/x3/mj/pg/7r/3J/wP/qQ/5U/7M/6s/9Gf8z/58/ydNcYYY4yxf8qEy03x655flvN7/06O+Lud+wDA1dsKZv19/4UryvX5fmn3E/HtIgDwdK8uD13aqldPSkq6uG+GhKDoPIBLnwRd8POy8cV4CbSFJyER2kCZ351/P9HtLP2D8aO3AuT6u5xYuBxfHv9zAEz6nfEfe2LUwvLh6bj/Zfx5AMWLXs7JCZfjJdD25/WVNlD2D+afv9U/mH/OL1IAWv9dTm64HF+efwI8Ds9A4q/2ZIwxxhhjjDHGftFPVOp06f7z0v/4/L3783h1OScHXI7/0f05Y4wxxhhjjDHGrrxnu3V/6rFL39x7LDGxTaefH/lnGlX/lZ3/9UYT+E+NzI3fbXgPcOkRBQB/ckCACw353zyLLf+VYyVffLX8z67lZ3wA3Ytd/NLjX3fQ2D9fi3+ncaV+IzHGGGOMMcb+Uy5f9P/6cXWlJsQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGVD/40/J3alz5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi70v5fAAAA//8XnvpB") unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 5.509167693s ago: executing program 1 (id=4540): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000004c0)=[{0x0, 0x16}, {&(0x7f00000003c0)="8c", 0x1}], 0x2) 5.209296964s ago: executing program 4 (id=4541): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) setreuid(0xee01, 0xee01) cachestat(r0, &(0x7f00000000c0)={0x9, 0x41}, &(0x7f0000000100), 0x0) 4.810345507s ago: executing program 4 (id=4545): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0xffffffff) 3.741992062s ago: executing program 4 (id=4553): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x5599, &(0x7f0000005680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) 3.457876711s ago: executing program 1 (id=4555): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000140)={[{@barrier}, {}, {@nls={'nls', 0x3d, 'cp936'}}, {@part={'part', 0x3d, 0xc47}}, {@nodecompose}, {}]}, 0x3, 0x6b9, &(0x7f0000000240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.376539181s ago: executing program 0 (id=4556): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000000000000000000118"], 0x28}, 0x0) 3.300306357s ago: executing program 3 (id=4559): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x7, 0x7, 0x80, 0x200, 0xb, "65e11e03b4d62590c007a44750ce7c6c87df4b"}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x6, 0x0, 0xffffb4d0, 0x5, 0x2, "0e5b632d3b4715db3e0292fb6d3627f01f56c7"}) 2.84671016s ago: executing program 3 (id=4560): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xfffff7ffffffffff}, {0x2cf, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) 2.799950867s ago: executing program 1 (id=4562): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x81, 0x3f7, 0x7, 0x4, 0x1, 0xd}, {0x0, 0x80, 0x2, 0x5, 0x800, 0xff01}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 2.76241568s ago: executing program 6 (id=4563): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x541b, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) 2.620698436s ago: executing program 0 (id=4564): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) 2.384918638s ago: executing program 1 (id=4565): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x10, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 2.384127295s ago: executing program 2 (id=4566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 2.337388165s ago: executing program 3 (id=4567): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 2.336614853s ago: executing program 6 (id=4568): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x88, &(0x7f0000000080)={[{@debug}, {@errors_remount}, {@norecovery}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) 2.240784689s ago: executing program 0 (id=4569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.001931937s ago: executing program 2 (id=4570): r0 = eventfd2(0x0, 0x800) io_setup(0x18, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000c80)=[&(0x7f0000000580)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000640)="adea42a8ab2b3806", 0x8}]) 1.953273616s ago: executing program 1 (id=4571): syz_mount_image$jfs(&(0x7f0000001cc0), &(0x7f0000001c80)='./file0\x00', 0x800000, &(0x7f00000005c0)=ANY=[], 0x1, 0x5dce, &(0x7f0000013b40)="$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") mknod$loop(&(0x7f0000000040)='./bus\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1618c0, 0x142) 1.952279424s ago: executing program 3 (id=4572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 1.809144989s ago: executing program 0 (id=4573): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x1, 0x2}, 0x10) 1.588050071s ago: executing program 0 (id=4574): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) getxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 1.547574308s ago: executing program 2 (id=4575): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000140)={[{@barrier}, {}, {@nls={'nls', 0x3d, 'cp936'}}, {@part={'part', 0x3d, 0xc47}}, {@nodecompose}, {}]}, 0x3, 0x6b9, &(0x7f0000000240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.532722868s ago: executing program 3 (id=4576): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0xfffffffd}, 0xc) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000540), 0xc) 1.479446302s ago: executing program 6 (id=4577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4814) 907.623322ms ago: executing program 6 (id=4578): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x14, r1, 0x1}, 0x14}}, 0x10) 890.968746ms ago: executing program 3 (id=4579): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000044c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000004380)=ANY=[@ANYBLOB="200180"], 0x0}) 864.46635ms ago: executing program 2 (id=4580): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 820.522871ms ago: executing program 4 (id=4581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32000000001400058008000140f104cbbc080002400001"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 517.253538ms ago: executing program 6 (id=4582): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, r1, 0x607, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8801}, 0x80) 467.092099ms ago: executing program 0 (id=4583): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc10, &(0x7f0000000180)=ANY=[], 0x3, 0x300, &(0x7f0000000980)="$eJzs3btPFEEcwPHf7N3BIQRXwJBYoiRWRrExNhjD32As1IjcmRAumAAmYiOxNsbOR2dhZ21sLO2J1kYrY2EP3Zp5LLd4u7P34G45/X4SLuvtzOxvdmdnZy5ZRwD8t64vfX93+af+UyIlKYnIVZFARKoiZRE5LbPVh+tbq1uNes1XUMnk0H9KbE7VkmZlvZ6WVeczOZxQ/6ssE8nv0B9RFEU/vpb8aU4OLBwUxNz9UWs7CERG3d1pdlaLCK4PdooOoGBqX/blkUwWHQcAoFj6+V+xA3/9nJ9w4/cgEJl3j/0he/77R637gwvkWEo8/80sK1L6+ppTpprzPTOF0/uDeJboKTFzz4jYgeSh0aXKm1WaWIKx+6uN+oWVB41aIE9l0UkkmzGfNdt0YznRznmCTZFf9yymxkFF12EhI/7pbo74svNQDuxFalfdUaG8kdrB+K8cmTNirlRo4g4PMtj4L5rtG5WUEsf1h1ImVUYtT5mDnHFHkI/v26hlVTKnpSOuTNt0n9gvwzjOFyOeXFNy+GcFW7tLWUdyuaZTcy3k5Jpp5voV95yuNWfn7F5Gtf+inqubak5+ywdZSoz/A322502C+LR7glQmpWsZ3vqUTcqwjcCCtsJHu9Ju1aZnck+uyOTm9uO15UajvtHuxqdvHSQ+qo3Xb+1GqZdy4pq37CpLrxFGo7bofp2ELiPUXU4HueIG0+9rKiI77pv4mmQmjvu0tHJU66Uclg3puZySjMpa3GceWWDubO+sLTfsVvpAaazbPgnHTKJ7nL2VnzwaREwYKN2HKDv/MyN5O6q7Zvbp2z804/SKpI3Tc9uDKfHV7V07fUjMDZqD1SnzeaKjGdx49gwuUQfvnOvseZFzniN+Plxs6OL8R6gl+SJ3+f0fAAAAAAAAAAAAAAAAAABg2OS+GLAXbWxuu9dbunwzpOAqAgAAAAAAAAAAAAAAAAAAAAAw9Hzr/5o1MnPW/43fDMhe/zfxv3rnr/+7qAvKWP/Xv0gtgI79CQAA///D62tS") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) 382.355174ms ago: executing program 2 (id=4584): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x40, 0x0) mq_timedsend(r0, 0x0, 0xa00, 0xcb5, 0x0) 177.205723ms ago: executing program 6 (id=4585): modify_ldt$write(0x1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=4586): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000100)={[{@keep_last_dots}, {@namecase}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@utf8}, {@keep_last_dots}, {@namecase}, {@uid={'uid', 0x3d, 0xee00}}, {@allow_utime={'allow_utime', 0x3d, 0x1}}]}, 0xc1, 0x1504, &(0x7f0000000e00)="$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") syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input28 [ 479.119057][T14623] netlink: 792 bytes leftover after parsing attributes in process `syz.1.3676'. [ 479.141292][T14623] netlink: 13036 bytes leftover after parsing attributes in process `syz.1.3676'. [ 479.150819][T14623] netlink: 792 bytes leftover after parsing attributes in process `syz.1.3676'. [ 479.180973][T14579] jfs_strtoUCS: char2uni returned -22. [ 479.208998][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 479.218788][T14579] charset = cp949, char = 0xd4 [ 479.257568][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 479.301927][ T24] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 479.315378][ T5179] input input28: unable to receive magic message: -110 [ 479.347244][ T24] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 479.355460][ T24] usb 4-1: Product: syz [ 479.408524][ T5179] input input28: unable to receive magic message: -32 [ 479.418685][ T24] usb 4-1: Manufacturer: syz [ 479.445872][ T24] usb 4-1: SerialNumber: syz [ 479.459424][ T5179] input input28: unable to receive magic message: -32 [ 479.605060][ T10] usb 1-1: USB disconnect, device number 14 [ 479.605134][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 479.648750][ T10] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 479.716156][T11874] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 479.756201][ T24] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 479.764524][ T24] usb 4-1: Handspring Visor / Palm OS: port 177, is for unknown use [ 479.775993][ T24] usb 4-1: Handspring Visor / Palm OS: port 116, is for unknown use [ 479.784132][ T24] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 479.955830][ T24] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 479.964202][ T24] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 480.088371][ T24] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 480.199830][T14634] loop2: detected capacity change from 0 to 4096 [ 480.206888][ T24] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 480.260744][T14634] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 480.285041][ T24] usb 4-1: USB disconnect, device number 13 [ 480.362945][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 480.491126][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 480.576453][ T24] visor 4-1:1.0: device disconnected [ 481.288011][T14656] netlink: 'syz.2.3692': attribute type 2 has an invalid length. [ 481.346191][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3692'. [ 481.473374][T14658] loop0: detected capacity change from 0 to 64 [ 481.487712][T14658] hfs: filesystem is marked locked, mounting read-only. [ 481.514796][T14658] hfs: filesystem is marked locked, leaving read-only. [ 482.193464][T14650] loop4: detected capacity change from 0 to 32768 [ 482.208193][T14650] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3691 (14650) [ 482.244628][T14650] BTRFS info (device loop4 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 482.282094][T14650] BTRFS info (device loop4 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 482.304665][T14650] BTRFS info (device loop4 state S): using free-space-tree [ 482.361669][T14680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3702'. [ 482.455749][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 482.559174][ T5836] BTRFS info (device loop4 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 482.866927][T14690] usb usb8: usbfs: process 14690 (syz.4.3703) did not claim interface 0 before use [ 484.508375][T14656] : entered promiscuous mode [ 484.928756][T14717] loop3: detected capacity change from 0 to 2048 [ 485.016065][T14720] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 485.045796][ T5970] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 485.235879][ T5970] usb 3-1: Using ep0 maxpacket: 32 [ 485.267144][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.309552][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.328635][ T5970] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 485.368000][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.408785][ T5970] usb 3-1: config 0 descriptor?? [ 485.508824][ T5970] hub 3-1:0.0: USB hub found [ 485.710476][ T5970] hub 3-1:0.0: 4 ports detected [ 485.876789][T14740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3739'. [ 485.888101][ T30] audit: type=1326 audit(1747356205.807:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14738 comm="syz.0.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d758e969 code=0x7ffc0000 [ 485.928095][ T5970] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 485.960386][ T5970] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 485.999485][T14745] loop4: detected capacity change from 0 to 256 [ 486.006233][ T30] audit: type=1326 audit(1747356205.807:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14738 comm="syz.0.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f68d758e969 code=0x7ffc0000 [ 486.052014][ T5970] usbhid 3-1:0.0: can't add hid device: -71 [ 486.070352][ T5970] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 486.102868][T14745] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 486.147013][ T30] audit: type=1326 audit(1747356205.967:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14738 comm="syz.0.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d758e969 code=0x7ffc0000 [ 486.173157][ T5970] usb 3-1: USB disconnect, device number 19 [ 486.185951][ T30] audit: type=1326 audit(1747356205.967:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14738 comm="syz.0.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d758e969 code=0x7ffc0000 [ 486.325002][T14748] netlink: 'syz.6.3731': attribute type 5 has an invalid length. [ 487.055159][T14768] netlink: 4388 bytes leftover after parsing attributes in process `syz.6.3741'. [ 487.408834][T14776] loop6: detected capacity change from 0 to 64 [ 488.156686][T14754] loop0: detected capacity change from 0 to 32768 [ 488.311708][T14754] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 488.446040][ T30] audit: type=1800 audit(1747356208.357:169): pid=14754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3747" name="bus" dev="loop0" ino=9553 res=0 errno=0 [ 488.693223][ T5829] ocfs2: Unmounting device (7,0) on (node local) [ 489.385948][T14835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3771'. [ 489.896309][T14840] loop6: detected capacity change from 0 to 4096 [ 489.970352][T14840] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 490.037761][T14840] UDF-fs: Scanning with blocksize 512 failed [ 490.143139][T14840] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 490.670718][T14862] loop2: detected capacity change from 0 to 4096 [ 490.790919][T14874] loop6: detected capacity change from 0 to 512 [ 490.947015][T14874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 491.095266][T14874] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.224905][T14874] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 491.297816][T14874] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 491.376391][T14874] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3790: Failed to acquire dquot type 0 [ 491.675853][T11874] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 491.892165][T14893] loop6: detected capacity change from 0 to 128 [ 491.987836][T14893] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 492.027814][T14893] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 492.213963][T14900] loop4: detected capacity change from 0 to 64 [ 492.284371][T14883] loop3: detected capacity change from 0 to 32768 [ 492.335268][T14883] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 492.431767][T14882] loop1: detected capacity change from 0 to 32768 [ 492.475596][T14882] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3796 (14882) [ 492.499935][T11874] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 492.541101][T14883] XFS (loop3): Ending clean mount [ 492.569839][T14882] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 492.609521][T14883] XFS (loop3): Quotacheck needed: Please wait. [ 492.638836][T14882] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 492.662236][T14882] BTRFS info (device loop1): using free-space-tree [ 492.952589][T14883] XFS (loop3): Quotacheck: Done. [ 493.036025][T14882] BTRFS info (device loop1): rebuilding free space tree [ 493.145824][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 493.331583][T14932] loop4: detected capacity change from 0 to 64 [ 493.352645][ T5841] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 493.385932][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 493.402944][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.471214][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.536794][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.562911][ T5833] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 493.589228][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 493.638756][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.710994][ T24] usb 1-1: config 0 descriptor?? [ 493.882337][T14940] loop4: detected capacity change from 0 to 1764 [ 494.193708][ T24] koneplus 0003:1E7D:2E22.0011: unknown main item tag 0x0 [ 494.240077][ T24] koneplus 0003:1E7D:2E22.0011: unknown main item tag 0x0 [ 494.299785][ T24] koneplus 0003:1E7D:2E22.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 494.380295][ T24] koneplus 0003:1E7D:2E22.0011: couldn't init struct koneplus_device [ 494.415745][ T24] koneplus 0003:1E7D:2E22.0011: couldn't install mouse [ 494.490957][ T24] koneplus 0003:1E7D:2E22.0011: probe with driver koneplus failed with error -71 [ 494.536059][T14950] loop4: detected capacity change from 0 to 64 [ 494.596282][T14953] loop3: detected capacity change from 0 to 512 [ 494.622972][ T24] usb 1-1: USB disconnect, device number 15 [ 494.640519][T14953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 494.680985][T14953] EXT4-fs: Ignoring removed i_version option [ 494.740490][T14953] EXT4-fs (loop3): 1 orphan inode deleted [ 494.818184][T14953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.864495][T14952] fido_id[14952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 495.197220][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.216641][T14958] loop4: detected capacity change from 0 to 256 [ 495.395350][T14958] FAT-fs (loop4): Directory bread(block 64) failed [ 495.436661][T14958] FAT-fs (loop4): Directory bread(block 65) failed [ 495.443321][T14958] FAT-fs (loop4): Directory bread(block 66) failed [ 495.461866][T14966] loop3: detected capacity change from 0 to 64 [ 495.491374][T14958] FAT-fs (loop4): Directory bread(block 67) failed [ 495.542735][T14958] FAT-fs (loop4): Directory bread(block 68) failed [ 495.592029][T14958] FAT-fs (loop4): Directory bread(block 69) failed [ 495.635277][T14958] FAT-fs (loop4): Directory bread(block 70) failed [ 495.653572][T14958] FAT-fs (loop4): Directory bread(block 71) failed [ 495.686614][T14958] FAT-fs (loop4): Directory bread(block 72) failed [ 495.693258][T14958] FAT-fs (loop4): Directory bread(block 73) failed [ 495.715034][T14938] loop2: detected capacity change from 0 to 32768 [ 497.428592][T14993] loop2: detected capacity change from 0 to 64 [ 497.451756][T14992] loop4: detected capacity change from 0 to 1024 [ 497.462042][T14972] loop3: detected capacity change from 0 to 32768 [ 497.493854][T14972] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3824 (14972) [ 497.583003][T14972] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 497.616019][T14994] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 497.647832][T14972] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 497.674451][T14994] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 497.688940][T14969] loop6: detected capacity change from 0 to 32768 [ 497.696399][T14972] BTRFS info (device loop3): using free-space-tree [ 497.862322][T14969] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 498.056665][T14969] XFS (loop6): Ending clean mount [ 498.121726][T14969] XFS (loop6): Quotacheck needed: Please wait. [ 498.193936][T14972] BTRFS info (device loop3): rebuilding free space tree [ 498.372568][T14969] XFS (loop6): Quotacheck: Done. [ 498.430992][T15026] loop0: detected capacity change from 0 to 256 [ 498.628801][T14985] loop1: detected capacity change from 0 to 32768 [ 498.649026][T15026] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 498.716074][T14985] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3830 (14985) [ 498.737412][T11874] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 498.761539][ T5841] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 498.805810][T14985] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 498.830470][T14985] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 498.860291][T14985] BTRFS info (device loop1): using free-space-tree [ 499.005884][ T10] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 499.178246][ T10] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 499.192738][ T10] usb 5-1: config 0 has no interface number 0 [ 499.265784][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 499.303205][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.343467][ T10] usb 5-1: Product: syz [ 499.391585][ T10] usb 5-1: Manufacturer: syz [ 499.432376][ T10] usb 5-1: SerialNumber: syz [ 499.496906][ T10] usb 5-1: config 0 descriptor?? [ 499.739057][ T5833] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 499.758077][ T10] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 499.818158][ T10] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 499.854168][ T10] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 499.917877][ T10] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 499.952548][T15055] loop0: detected capacity change from 0 to 512 [ 499.964267][ T10] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 500.005215][T15055] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 500.040463][T15058] loop3: detected capacity change from 0 to 1024 [ 500.085449][T15055] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 500.198131][T15055] EXT4-fs (loop0): 1 truncate cleaned up [ 500.207441][ T24] usb 5-1: USB disconnect, device number 22 [ 500.310437][T15055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.333682][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 500.389557][ T24] keyspan 5-1:0.133: device disconnected [ 500.659025][T15070] loop3: detected capacity change from 0 to 2048 [ 500.684667][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.863476][T15074] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 500.895145][T15070] NILFS (loop3): unable to set label with more than 80 bytes [ 501.115890][T13673] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 501.321214][T13673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.365164][T13673] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.434270][T13673] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 501.470888][T13673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.495253][T13673] usb 3-1: config 0 descriptor?? [ 501.774792][T15081] loop0: detected capacity change from 0 to 4096 [ 501.972996][T13673] hid (null): invalid report_size 152747971 [ 502.008976][T13673] chicony 0003:04F2:1236.0012: invalid report_size 152747971 [ 502.066290][T13673] chicony 0003:04F2:1236.0012: item 0 4 1 7 parsing failed [ 502.125192][T13673] chicony 0003:04F2:1236.0012: Chicony hid parse failed: -22 [ 502.172142][T13673] chicony 0003:04F2:1236.0012: probe with driver chicony failed with error -22 [ 502.237591][T13673] usb 3-1: USB disconnect, device number 20 [ 502.391032][T15099] loop4: detected capacity change from 0 to 8 [ 502.473565][T15099] SQUASHFS error: zstd decompression error: 10 [ 502.513546][T15099] SQUASHFS error: zstd decompression failed, data probably corrupt [ 502.539659][T15099] SQUASHFS error: Failed to read block 0x60: -5 [ 502.559524][T15099] SQUASHFS error: zstd decompression error: 10 [ 502.581725][T15099] SQUASHFS error: zstd decompression failed, data probably corrupt [ 502.621202][T15099] SQUASHFS error: Failed to read block 0x60: -5 [ 503.105350][T15082] loop6: detected capacity change from 0 to 32768 [ 503.161927][T15082] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3856 (15082) [ 503.305373][T15082] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 503.351772][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'. [ 503.362612][T15082] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 503.409035][T15082] BTRFS info (device loop6): using free-space-tree [ 503.475128][T15117] tipc: Enabled bearer , priority 10 [ 503.800538][T15082] BTRFS info (device loop6): rebuilding free space tree [ 503.931220][T15141] loop0: detected capacity change from 0 to 256 [ 504.055265][T15143] loop4: detected capacity change from 0 to 1024 [ 504.236614][T15143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.313829][T15145] loop1: detected capacity change from 0 to 4096 [ 504.377105][T11874] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 504.587300][ T10] tipc: Node number set to 4269801488 [ 504.803922][T15109] loop2: detected capacity change from 0 to 32768 [ 504.905724][ T48] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 504.966232][T15109] ERROR: (device loop2): diAllocBit: iag inconsistent [ 504.966232][T15109] [ 505.104031][T15109] ERROR: (device loop2): remounting filesystem as read-only [ 505.119466][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 505.139321][ T48] usb 1-1: config 0 interface 0 has no altsetting 0 [ 505.163001][T15109] ialloc: diAlloc returned -5! [ 505.201157][ T48] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 505.226212][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.265031][ T48] usb 1-1: Product: syz [ 505.294779][ T48] usb 1-1: Manufacturer: syz [ 505.324705][ T48] usb 1-1: SerialNumber: syz [ 505.335947][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 505.350970][ T48] usb 1-1: config 0 descriptor?? [ 505.445559][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.531027][ T10] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 505.556433][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.615066][ T10] usb 2-1: Product: syz [ 505.662154][ T10] usb 2-1: Manufacturer: syz [ 505.685745][ T10] usb 2-1: SerialNumber: syz [ 505.751259][ T10] usb 2-1: config 0 descriptor?? [ 505.815457][ T48] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 505.844956][ T48] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 505.952499][ T48] usb 1-1: USB disconnect, device number 16 [ 506.259923][ T10] mos7840 2-1:0.0: required endpoints missing [ 506.331269][ T10] usb 2-1: USB disconnect, device number 19 [ 506.505855][ T48] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 506.702943][T15172] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3888'. [ 506.740268][ T48] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 506.754211][ T48] usb 5-1: config 0 has no interface number 0 [ 506.771911][ T48] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 506.806311][ T48] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 506.848045][ T48] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 506.871249][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.909876][ T48] usb 5-1: Product: syz [ 506.914071][ T48] usb 5-1: Manufacturer: syz [ 506.950553][ T48] usb 5-1: SerialNumber: syz [ 506.992289][ T48] usb 5-1: config 0 descriptor?? [ 507.016116][T15166] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 507.025571][ T48] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 507.086279][ T48] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 507.416012][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 507.585944][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 507.598086][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 507.646472][ T24] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 507.663459][T15184] loop1: detected capacity change from 0 to 2048 [ 507.671564][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.690736][ T24] usb 1-1: Product: syz [ 507.694971][T15184] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 507.704936][ T24] usb 1-1: Manufacturer: syz [ 507.745962][ T24] usb 1-1: SerialNumber: syz [ 507.766213][ T48] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 507.786066][ T24] usb 1-1: config 0 descriptor?? [ 507.809391][T15180] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 507.817999][T15184] syz.1.3894: attempt to access beyond end of device [ 507.817999][T15184] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 507.823063][T15186] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 507.882825][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 507.987156][ T48] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 507.995312][ T48] usb 3-1: config 0 has no interface number 0 [ 508.018562][ T48] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.097533][ T48] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.153378][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 508.201659][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.217726][ T24] usb 1-1: USB disconnect, device number 17 [ 508.261829][ T48] usb 3-1: config 0 descriptor?? [ 508.397852][ T9825] udevd[9825]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.724627][ T48] hid (null): unknown global tag 0xe [ 508.753040][ T48] logitech-djreceiver 0003:046D:C71B.0013: unknown global tag 0xe [ 508.795936][ T48] logitech-djreceiver 0003:046D:C71B.0013: item 0 2 1 14 parsing failed [ 508.805368][ T48] logitech-djreceiver 0003:046D:C71B.0013: logi_dj_probe: parse failed [ 508.866660][ T48] logitech-djreceiver 0003:046D:C71B.0013: probe with driver logitech-djreceiver failed with error -22 [ 508.937540][ T48] usb 3-1: USB disconnect, device number 21 [ 509.069908][T15192] sp0: Synchronizing with TNC [ 509.386992][ T5970] usb 5-1: USB disconnect, device number 23 [ 509.479774][ T5970] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 509.531875][ T5970] cyberjack 5-1:0.69: device disconnected [ 509.553787][T15203] loop1: detected capacity change from 0 to 1024 [ 509.693685][T15203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.026502][T15215] loop0: detected capacity change from 0 to 64 [ 510.452914][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.114361][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.130299][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.897060][T15217] loop3: detected capacity change from 0 to 40427 [ 511.907439][T15217] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 511.952680][T15217] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 512.021447][T15217] F2FS-fs (loop3): invalid crc value [ 512.491287][T15217] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 512.514497][T15252] loop2: detected capacity change from 0 to 8 [ 512.552750][T15217] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 512.599429][T15252] SQUASHFS error: lzo decompression failed, data probably corrupt [ 512.637709][T15247] sp0: Synchronizing with TNC [ 512.645830][T15252] SQUASHFS error: Failed to read block 0x4ef: -5 [ 512.672548][T15252] SQUASHFS error: Unable to read metadata cache entry [4ed] [ 512.737455][T15254] SQUASHFS error: Unable to read metadata cache entry [4ed] [ 512.766798][ T48] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 512.784800][T15252] SQUASHFS error: Unable to read inode 0x50087 [ 512.804553][T15254] SQUASHFS error: Unable to read inode 0x500e3 [ 512.971884][ T48] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 513.015942][ T48] usb 1-1: config 0 has no interface number 0 [ 513.022129][ T48] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.036360][ T48] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.046463][ T48] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 513.055526][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.077486][ T48] usb 1-1: config 0 descriptor?? [ 513.561564][ T48] hid (null): unknown global tag 0xe [ 513.608876][ T48] logitech-djreceiver 0003:046D:C71B.0014: unknown global tag 0xe [ 513.647197][ T48] logitech-djreceiver 0003:046D:C71B.0014: item 0 2 1 14 parsing failed [ 513.681958][ T48] logitech-djreceiver 0003:046D:C71B.0014: logi_dj_probe: parse failed [ 513.705824][ T48] logitech-djreceiver 0003:046D:C71B.0014: probe with driver logitech-djreceiver failed with error -22 [ 513.828235][ T48] usb 1-1: USB disconnect, device number 18 [ 514.249697][T15244] loop4: detected capacity change from 0 to 32768 [ 514.337587][T15244] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3929 (15244) [ 514.451501][T15265] loop2: detected capacity change from 0 to 4096 [ 514.524180][T15244] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 514.538108][ T5970] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 514.646098][T15244] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 514.672412][T15244] BTRFS info (device loop4): using free-space-tree [ 514.705788][ T5970] usb 7-1: Using ep0 maxpacket: 16 [ 514.718745][ T5970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 514.749574][ T5970] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 514.762832][ T5970] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 514.800737][ T5970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.908064][ T5970] usb 7-1: config 0 descriptor?? [ 515.407431][T15244] BTRFS error (device loop4): open_ctree failed: -4 [ 515.477309][ T5970] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 515.497000][ T5970] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 515.544081][ T5970] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 515.627585][ T5970] kovaplus 0003:1E7D:2D50.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 515.816264][ T5970] kovaplus 0003:1E7D:2D50.0015: couldn't init struct kovaplus_device [ 515.838253][ T5970] kovaplus 0003:1E7D:2D50.0015: couldn't install mouse [ 515.887941][ T5970] kovaplus 0003:1E7D:2D50.0015: probe with driver kovaplus failed with error -71 [ 515.996320][ T5970] usb 7-1: USB disconnect, device number 7 [ 516.167727][T15295] fido_id[15295]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 516.655953][T13673] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 516.725965][ T5970] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 516.825822][T13673] usb 3-1: Using ep0 maxpacket: 16 [ 516.840132][T13673] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 516.849247][T13673] usb 3-1: config 0 has no interface number 0 [ 516.861463][T13673] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 516.897638][T13673] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 516.910461][ T5970] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 516.919407][ T5970] usb 1-1: config 0 has no interface number 0 [ 516.926906][T13673] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 516.936530][ T5970] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 516.948306][T13673] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 516.956694][ T5970] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.967107][T13673] usb 3-1: Product: syz [ 516.971300][T13673] usb 3-1: SerialNumber: syz [ 516.977964][ T5970] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 516.990816][T13673] usb 3-1: config 0 descriptor?? [ 516.996305][ T48] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 517.002212][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.017648][T13673] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 517.027525][ T5970] usb 1-1: config 0 descriptor?? [ 517.041278][T13673] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input30 [ 517.177674][ T48] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 517.215361][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.252496][ T48] usb 4-1: Product: syz [ 517.263062][ T48] usb 4-1: Manufacturer: syz [ 517.302311][ T48] usb 4-1: SerialNumber: syz [ 517.339960][ T48] usb 4-1: config 0 descriptor?? [ 517.359790][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 517.368548][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 517.375761][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 517.382937][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 517.392105][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 517.399874][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 517.407825][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 517.415853][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 517.425255][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 517.432439][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 517.450909][ T10] usb 3-1: USB disconnect, device number 22 [ 517.451007][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 517.490162][ T5970] wacom 0003:056A:0094.0016: unknown main item tag 0x1 [ 517.501178][ T5970] wacom 0003:056A:0094.0016: Using device in hidraw-only mode [ 517.517453][ T5970] wacom 0003:056A:0094.0016: hidraw0: USB HID v0.04 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input1 [ 517.537385][T13673] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 517.566807][ T10] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 517.604747][ T5970] usb 4-1: USB disconnect, device number 14 [ 517.721057][ T48] usb 1-1: USB disconnect, device number 19 [ 517.725748][T13673] usb 7-1: Using ep0 maxpacket: 32 [ 517.742391][T13673] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.767322][T13673] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.769019][T15316] fido_id[15316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 517.786754][T13673] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 517.812057][T13673] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 517.824372][T13673] usb 7-1: Product: syz [ 517.831644][T13673] usb 7-1: Manufacturer: syz [ 517.836427][T13673] usb 7-1: SerialNumber: syz [ 517.861921][T13673] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input31 [ 518.099369][T13673] usb 7-1: USB disconnect, device number 8 [ 518.127686][T13673] appletouch 7-1:1.0: input: appletouch disconnected [ 518.444473][T15325] loop2: detected capacity change from 0 to 1024 [ 518.463324][T15325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 518.643793][T15325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.931478][T15334] loop4: detected capacity change from 0 to 1024 [ 518.958353][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.317441][ T5970] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 519.535740][ T5970] usb 2-1: Using ep0 maxpacket: 32 [ 519.554434][ T5970] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.577791][ T5970] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 519.643480][ T5970] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 519.673670][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 519.685844][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 519.726660][ T5970] usb 2-1: Product: syz [ 519.731375][ T48] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 519.736074][ T5970] usb 2-1: Manufacturer: syz [ 519.755472][ T5970] usb 2-1: SerialNumber: syz [ 519.815336][ T5970] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input32 [ 519.872837][ T10] usb 4-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 519.897579][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.919239][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 519.938041][ T10] usb 4-1: config 0 descriptor?? [ 519.938518][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 519.993787][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 520.045808][ T48] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 520.088765][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.138395][ T48] usb 5-1: config 0 descriptor?? [ 520.150159][T13673] usb 2-1: USB disconnect, device number 20 [ 520.150283][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 520.221258][T13673] appletouch 2-1:1.0: input: appletouch disconnected [ 520.384554][ T10] saitek 0003:0738:1705.0017: unknown main item tag 0x0 [ 520.409062][ T10] saitek 0003:0738:1705.0017: item fetching failed at offset 3/5 [ 520.421924][ T10] saitek 0003:0738:1705.0017: parse failed [ 520.429047][ T10] saitek 0003:0738:1705.0017: probe with driver saitek failed with error -22 [ 520.583051][ T48] kovaplus 0003:1E7D:2D50.0018: unknown main item tag 0x0 [ 520.592518][ T48] kovaplus 0003:1E7D:2D50.0018: unknown main item tag 0x0 [ 520.604243][ T48] kovaplus 0003:1E7D:2D50.0018: unknown main item tag 0x0 [ 520.621503][T13673] usb 4-1: USB disconnect, device number 15 [ 520.624163][ T48] kovaplus 0003:1E7D:2D50.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 520.814331][ T48] kovaplus 0003:1E7D:2D50.0018: couldn't init struct kovaplus_device [ 520.864305][ T48] kovaplus 0003:1E7D:2D50.0018: couldn't install mouse [ 520.902763][ T48] kovaplus 0003:1E7D:2D50.0018: probe with driver kovaplus failed with error -71 [ 520.947503][ T48] usb 5-1: USB disconnect, device number 24 [ 521.165881][ T5970] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 521.330687][ T5970] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 521.365609][ T5970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.416125][ T5970] usb 7-1: Product: syz [ 521.435751][ T5970] usb 7-1: Manufacturer: syz [ 521.440385][ T5970] usb 7-1: SerialNumber: syz [ 521.463602][ T5970] usb 7-1: config 0 descriptor?? [ 521.636612][T15365] loop1: detected capacity change from 0 to 1024 [ 521.757911][T15365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.776266][ T24] usb 7-1: USB disconnect, device number 9 [ 521.838241][T15365] ext4 filesystem being mounted at /696/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.924375][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.086268][ T48] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 522.110854][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.289848][ T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.320816][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 522.357443][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 522.399727][ T48] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 522.426304][T15387] netlink: 'syz.1.3978': attribute type 5 has an invalid length. [ 522.494980][ T48] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 522.515720][ T48] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 522.560127][ T48] usb 1-1: Manufacturer: syz [ 522.594367][ T48] usb 1-1: config 0 descriptor?? [ 523.010202][ T5134] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 523.075895][ T48] rc_core: IR keymap rc-hauppauge not found [ 523.081867][ T48] Registered IR keymap rc-empty [ 523.155933][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.182727][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.216991][ T48] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 523.305492][ T48] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 523.385419][T15415] netlink: 'syz.4.3980': attribute type 10 has an invalid length. [ 523.435587][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.535049][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.577087][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.626384][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.696174][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.746156][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.772802][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.805871][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.865932][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.915803][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 523.998550][ T48] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 524.025891][ T48] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 524.123479][ T48] usb 1-1: USB disconnect, device number 20 [ 524.138706][T15434] loop1: detected capacity change from 0 to 256 [ 524.237523][T15439] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.3989'. [ 524.275485][T15434] FAT-fs (loop1): Directory bread(block 64) failed [ 524.319512][T15434] FAT-fs (loop1): Directory bread(block 65) failed [ 524.376928][T15434] FAT-fs (loop1): Directory bread(block 66) failed [ 524.383570][T15434] FAT-fs (loop1): Directory bread(block 67) failed [ 524.425905][T15434] FAT-fs (loop1): Directory bread(block 68) failed [ 524.487687][T15434] FAT-fs (loop1): Directory bread(block 69) failed [ 524.512054][T15434] FAT-fs (loop1): Directory bread(block 70) failed [ 524.551252][T15434] FAT-fs (loop1): Directory bread(block 71) failed [ 524.605965][T15434] FAT-fs (loop1): Directory bread(block 72) failed [ 524.612581][T15434] FAT-fs (loop1): Directory bread(block 73) failed [ 524.936755][T15434] FAT-fs (loop1): Filesystem has been set read-only [ 525.219537][T15464] loop2: detected capacity change from 0 to 64 [ 525.999394][T15484] netlink: 'syz.2.4025': attribute type 16 has an invalid length. [ 526.043618][T15484] netlink: 'syz.2.4025': attribute type 3 has an invalid length. [ 526.087395][T15484] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.4025'. [ 526.605828][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 526.615957][T13673] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 526.775920][T13673] usb 4-1: Using ep0 maxpacket: 32 [ 526.788920][T13673] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.814433][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 526.842588][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.850974][T13673] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.886139][ T10] usb 2-1: Product: syz [ 526.905158][ T10] usb 2-1: Manufacturer: syz [ 526.917214][ T10] usb 2-1: SerialNumber: syz [ 526.936633][T13673] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 526.958649][ T10] usb 2-1: config 0 descriptor?? [ 526.970251][T13673] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 527.005988][T13673] usb 4-1: Product: syz [ 527.011833][T13673] usb 4-1: Manufacturer: syz [ 527.046709][T13673] usb 4-1: SerialNumber: syz [ 527.157704][T13673] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input34 [ 527.355982][T13673] usb 2-1: USB disconnect, device number 21 [ 527.434528][ T5970] usb 4-1: USB disconnect, device number 16 [ 527.630952][ T5970] appletouch 4-1:1.0: input: appletouch disconnected [ 528.087295][ T5888] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 528.325877][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 528.339501][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 528.465751][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 528.528038][ T5888] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 528.575311][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.624244][ T5888] usb 1-1: config 0 descriptor?? [ 528.676155][T15533] program syz.2.4031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.112039][ T5888] kovaplus 0003:1E7D:2D50.0019: unknown main item tag 0x0 [ 529.139518][ T5888] kovaplus 0003:1E7D:2D50.0019: unknown main item tag 0x0 [ 529.170171][ T5888] kovaplus 0003:1E7D:2D50.0019: unknown main item tag 0x0 [ 529.196926][T15543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4037'. [ 529.227006][ T5888] kovaplus 0003:1E7D:2D50.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 529.270441][T15547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4039'. [ 529.367669][ T5888] kovaplus 0003:1E7D:2D50.0019: couldn't init struct kovaplus_device [ 529.388043][ T5888] kovaplus 0003:1E7D:2D50.0019: couldn't install mouse [ 529.429249][ T5888] kovaplus 0003:1E7D:2D50.0019: probe with driver kovaplus failed with error -71 [ 529.515769][ T5888] usb 1-1: USB disconnect, device number 21 [ 529.609239][T15550] fido_id[15550]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 529.778028][T15557] loop3: detected capacity change from 0 to 1024 [ 529.846753][T15559] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 529.891531][T15557] hfsplus: bad catalog entry type [ 530.118598][T15564] loop2: detected capacity change from 0 to 64 [ 530.161251][T15561] loop6: detected capacity change from 0 to 4096 [ 530.167361][ T82] hfsplus: b-tree write err: -5, ino 4 [ 530.229573][T15561] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 530.551502][T15561] ntfs3(loop6): Failed to load $Extend (-22). [ 530.585177][T15561] ntfs3(loop6): Failed to initialize $Extend. [ 531.115954][T15574] loop1: detected capacity change from 0 to 8192 [ 531.134268][ T82] kworker/u8:5: attempt to access beyond end of device [ 531.134268][ T82] loop2: rw=1, sector=65, nr_sectors = 1 limit=64 [ 531.185434][ T82] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 531.196173][ T82] kworker/u8:5: attempt to access beyond end of device [ 531.196173][ T82] loop2: rw=1, sector=66, nr_sectors = 1 limit=64 [ 531.242701][ T82] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 531.276073][ T82] kworker/u8:5: attempt to access beyond end of device [ 531.276073][ T82] loop2: rw=1, sector=67, nr_sectors = 1 limit=64 [ 531.336390][ T82] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 531.345021][ T82] kworker/u8:5: attempt to access beyond end of device [ 531.345021][ T82] loop2: rw=1, sector=68, nr_sectors = 1 limit=64 [ 531.445754][ T82] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 531.454381][ T82] kworker/u8:5: attempt to access beyond end of device [ 531.454381][ T82] loop2: rw=1, sector=72, nr_sectors = 1 limit=64 [ 531.535898][ T82] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 531.571333][T15582] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4054'. [ 531.583814][ T82] kworker/u8:5: attempt to access beyond end of device [ 531.583814][ T82] loop2: rw=1, sector=73, nr_sectors = 1 limit=64 [ 531.645061][ T82] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 531.678104][ T82] kworker/u8:5: attempt to access beyond end of device [ 531.678104][ T82] loop2: rw=1, sector=76, nr_sectors = 1 limit=64 [ 531.736111][ T82] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 531.782810][ T82] kworker/u8:5: attempt to access beyond end of device [ 531.782810][ T82] loop2: rw=1, sector=77, nr_sectors = 1 limit=64 [ 531.899958][ T82] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 531.942681][ T82] kworker/u8:5: attempt to access beyond end of device [ 531.942681][ T82] loop2: rw=1, sector=78, nr_sectors = 88 limit=64 [ 532.126916][ T48] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 532.170394][T15593] loop3: detected capacity change from 0 to 256 [ 532.263750][T15597] loop1: detected capacity change from 0 to 512 [ 532.300386][T15597] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 532.310173][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 532.344260][ T48] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.369274][T15597] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 532.388961][ T48] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.435757][ T48] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.449532][T15597] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 532.450094][T15597] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 532.450220][T15597] System zones: 0-2 [ 532.470293][ T48] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 532.494250][ T48] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 532.510981][ T48] usb 1-1: Product: syz [ 532.515434][ T48] usb 1-1: Manufacturer: syz [ 532.520920][ T48] usb 1-1: SerialNumber: syz [ 532.549801][ T48] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input35 [ 532.568007][T15597] , 18-18, 34-34 [ 532.581674][T15597] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1129: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 532.681375][T15597] EXT4-fs (loop1): 1 truncate cleaned up [ 532.708195][T15597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.921531][ T30] audit: type=1800 audit(1747356252.837:170): pid=15597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4060" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 533.028790][ T48] usb 1-1: USB disconnect, device number 22 [ 533.192223][ T48] appletouch 1-1:1.0: input: appletouch disconnected [ 533.329622][T15615] loop3: detected capacity change from 0 to 2048 [ 533.474637][T15620] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 533.518312][T15617] loop4: detected capacity change from 0 to 2048 [ 533.588934][ T30] audit: type=1800 audit(1747356253.507:171): pid=15615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4067" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 533.620996][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.759100][T15623] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 534.136024][ T48] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 534.328542][T15638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4076'. [ 534.387544][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.387603][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.387662][ T48] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 534.387711][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.416017][ T48] usb 7-1: config 0 descriptor?? [ 534.629736][T15642] loop4: detected capacity change from 0 to 16 [ 534.737088][T15642] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 534.737395][T15642] erofs (device loop4): mounted with root inode @ nid 36. [ 534.745776][ T30] audit: type=1326 audit(1747356254.657:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.2.4080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47058e969 code=0x7ffc0000 [ 534.745857][ T30] audit: type=1326 audit(1747356254.657:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.2.4080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47058e969 code=0x7ffc0000 [ 534.757684][ T30] audit: type=1326 audit(1747356254.677:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.2.4080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc47058e969 code=0x7ffc0000 [ 534.757771][ T30] audit: type=1326 audit(1747356254.677:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.2.4080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47058e969 code=0x7ffc0000 [ 534.757867][ T30] audit: type=1326 audit(1747356254.677:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.2.4080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47058e969 code=0x7ffc0000 [ 534.758788][ T30] audit: type=1326 audit(1747356254.677:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.2.4080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fc47058e969 code=0x7ffc0000 [ 534.758862][ T30] audit: type=1326 audit(1747356254.677:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.2.4080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47058e969 code=0x7ffc0000 [ 534.764648][ T30] audit: type=1326 audit(1747356254.677:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15643 comm="syz.2.4080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47058e969 code=0x7ffc0000 [ 534.882340][ T48] steelseries 0003:1038:12B6.001A: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.6-1/input0 [ 535.138223][ T48] steelseries 0003:1038:12B6.001A: hid_hw_raw_request() failed with -71 [ 535.145810][ T48] usb 7-1: USB disconnect, device number 10 [ 535.239670][T15648] fido_id[15648]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 535.430810][T15650] loop4: detected capacity change from 0 to 4096 [ 535.891384][T15657] loop3: detected capacity change from 0 to 4096 [ 535.933192][T15640] loop0: detected capacity change from 0 to 32768 [ 535.989094][T15640] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4078 (15640) [ 536.011000][T15640] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 536.011114][T15640] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 536.011161][T15640] BTRFS info (device loop0): using free-space-tree [ 536.438341][T15680] bridge0: entered promiscuous mode [ 536.478690][T15680] macvlan2: entered promiscuous mode [ 536.505278][T15680] bridge0: port 3(macvlan2) entered blocking state [ 536.532255][ T5829] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 536.549325][T15680] bridge0: port 3(macvlan2) entered disabled state [ 536.594813][T15680] macvlan2: entered allmulticast mode [ 536.641021][T15680] bridge0: entered allmulticast mode [ 536.720540][T15680] macvlan2: left allmulticast mode [ 536.805867][T15680] bridge0: left allmulticast mode [ 536.823333][T15680] bridge0: left promiscuous mode [ 537.123612][T15697] tmpfs: Bad value for 'mpol' [ 537.339913][T15703] loop6: detected capacity change from 0 to 256 [ 537.594789][T15702] loop0: detected capacity change from 0 to 4096 [ 537.729111][T15710] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 538.265827][T15723] tipc: Started in network mode [ 538.286659][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4106'. [ 538.296295][T15723] tipc: Node identity ac14140f, cluster identity 4711 [ 538.307188][T15723] tipc: New replicast peer: 255.255.255.255 [ 538.331206][T15723] tipc: Enabled bearer , priority 10 [ 538.391863][T15728] loop3: detected capacity change from 0 to 256 [ 538.796785][T15736] loop6: detected capacity change from 0 to 256 [ 538.846436][T15736] exfat: Deprecated parameter 'utf8' [ 538.851863][T15736] exfat: Deprecated parameter 'namecase' [ 538.905903][T15736] exfat: Deprecated parameter 'namecase' [ 538.929844][T15736] exfat: Deprecated parameter 'utf8' [ 539.036395][T15736] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 539.319674][T15746] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 539.336267][ T48] tipc: Node number set to 2886997007 [ 540.049095][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 540.178271][T15772] loop4: detected capacity change from 0 to 256 [ 540.191991][T15774] loop2: detected capacity change from 0 to 64 [ 540.234589][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.265056][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.270293][T15774] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 540.325362][ T9] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 540.375861][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.436952][ T9] usb 2-1: config 0 descriptor?? [ 540.546234][T15777] loop3: detected capacity change from 0 to 256 [ 540.553995][T15777] exfat: Deprecated parameter 'utf8' [ 540.573734][ T24] IPVS: starting estimator thread 0... [ 540.581379][T15777] exfat: Deprecated parameter 'namecase' [ 540.589922][T15777] exfat: Deprecated parameter 'namecase' [ 540.619891][T15777] exfat: Deprecated parameter 'utf8' [ 540.685089][T15777] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 540.708337][T15779] IPVS: using max 21 ests per chain, 50400 per kthread [ 540.891504][ T9] hid_mf 0003:0079:1846.001B: unknown main item tag 0x0 [ 540.930924][ T9] hid_mf 0003:0079:1846.001B: unknown main item tag 0x0 [ 540.980274][ T9] hid_mf 0003:0079:1846.001B: unknown main item tag 0x0 [ 541.047560][T15788] loop6: detected capacity change from 0 to 65 [ 541.055094][T15789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4139'. [ 541.057945][ T9] hid_mf 0003:0079:1846.001B: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 541.085589][T15788] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway [ 541.090435][ T9] hid_mf 0003:0079:1846.001B: Invalid report, this should never happen! [ 541.138161][ T9] hid_mf 0003:0079:1846.001B: Force feedback init failed. [ 541.185895][ T24] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 541.274959][ T9] usb 2-1: USB disconnect, device number 22 [ 541.389472][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 541.435710][ T24] usb 1-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 541.493341][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.512715][T15793] fido_id[15793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 541.538177][ T24] usb 1-1: config 0 descriptor?? [ 541.625413][T15798] netlink: 664 bytes leftover after parsing attributes in process `syz.3.4143'. [ 542.087040][ T24] sigmamicro 0003:1C4F:0059.001C: hidraw0: USB HID v1.05 Device [HID 1c4f:0059] on usb-dummy_hcd.0-1/input0 [ 542.139759][T15806] loop3: detected capacity change from 0 to 2048 [ 542.221480][ T24] usb 1-1: USB disconnect, device number 23 [ 542.289467][T15806] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.425749][T13673] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 542.520142][T15809] fido_id[15809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 542.630391][T13673] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 542.664311][T13673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.680956][T15794] loop2: detected capacity change from 0 to 32768 [ 542.718485][T13673] usb 2-1: config 0 descriptor?? [ 542.722047][T15817] loop6: detected capacity change from 0 to 128 [ 542.765176][T13673] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 542.781193][T15817] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 542.808052][T13673] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 542.824067][T15794] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 542.854822][T15817] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 542.974382][T15794] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 543.062044][T15827] loop3: detected capacity change from 0 to 4096 [ 543.071415][ T24] usb 2-1: USB disconnect, device number 23 [ 543.153816][T15827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.289136][T15827] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 543.326433][ T5838] ocfs2: Unmounting device (7,2) on (node local) [ 543.339091][T15827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 543.389014][T15827] EXT4-fs (loop3): stripe (248) is not aligned with cluster size (16), stripe is disabled [ 543.465583][T15827] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 543.518211][T15827] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 543.859224][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.284031][T15852] loop3: detected capacity change from 0 to 512 [ 544.325863][T15853] netlink: 'syz.1.4165': attribute type 1 has an invalid length. [ 544.353884][T15852] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 544.391637][T15852] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 544.464045][T15852] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 544.505723][T15852] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 544.605813][T15852] System zones: 0-2, 18-18, 34-34 [ 544.623929][T15862] loop0: detected capacity change from 0 to 16 [ 544.643980][T15852] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1129: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 544.696213][T15862] erofs (device loop0): mounted with root inode @ nid 36. [ 544.743916][T15852] EXT4-fs (loop3): 1 truncate cleaned up [ 544.789587][T15852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.942556][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 544.942583][ T30] audit: type=1800 audit(1747356264.847:181): pid=15852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4164" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 545.169282][T15869] loop6: detected capacity change from 0 to 64 [ 545.350016][T15867] loop2: detected capacity change from 0 to 32768 [ 545.439817][T15867] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 545.450911][T15867] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 545.498238][T15867] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 545.512382][ T970] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 545.519628][ T970] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 545.678579][ T970] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 158ms [ 545.721278][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.758315][ T970] gfs2: fsid=syz:syz.0: jid=0: Done [ 545.764856][T15867] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 545.803671][T15846] loop4: detected capacity change from 0 to 32768 [ 546.044397][T15867] gfs2: fsid=syz:syz.0: found 1 quota changes [ 546.235349][T15846] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 546.407293][T15846] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 546.407293][T15846] allowing incompatible features above 0.0: (unknown version) [ 546.436964][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.465072][ T5838] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 546.516002][T15846] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 546.524329][T15846] bcachefs (loop4): Version upgrade required: [ 546.524329][T15846] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 546.524329][T15846] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 546.524329][T15846] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 546.594649][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.625712][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 546.625762][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.625784][ T5838] Call Trace: [ 546.625795][ T5838] [ 546.625809][ T5838] dump_stack_lvl+0x16c/0x1f0 [ 546.625879][ T5838] gfs2_assert_warn_i+0x1e4/0x370 [ 546.625944][ T5838] ? __pfx_gfs2_assert_warn_i+0x10/0x10 [ 546.626005][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.626056][ T5838] gfs2_qd_dispose+0x63c/0x780 [ 546.626108][ T5838] gfs2_quota_cleanup+0x361/0x780 [ 546.626163][ T5838] ? __pfx_gfs2_quota_cleanup+0x10/0x10 [ 546.626214][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.626266][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.626312][ T5838] ? gfs2_quota_sync+0xa9/0x570 [ 546.626360][ T5838] ? __pfx___might_resched+0x10/0x10 [ 546.626423][ T5838] gfs2_make_fs_ro+0x11d/0x370 [ 546.626464][ T5838] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 546.626503][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.626549][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.626590][ T5838] ? do_raw_spin_lock+0x12c/0x2b0 [ 546.626626][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.626670][ T5838] ? find_held_lock+0x2b/0x80 [ 546.626716][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.626773][ T5838] gfs2_put_super+0x197/0x750 [ 546.626818][ T5838] ? __pfx_gfs2_put_super+0x10/0x10 [ 546.626867][ T5838] generic_shutdown_super+0x156/0x390 [ 546.626919][ T5838] kill_block_super+0x3b/0x90 [ 546.626962][ T5838] gfs2_kill_sb+0x371/0x420 [ 546.627031][ T5838] deactivate_locked_super+0xc1/0x1a0 [ 546.627080][ T5838] deactivate_super+0xde/0x100 [ 546.627130][ T5838] cleanup_mnt+0x225/0x450 [ 546.627183][ T5838] task_work_run+0x150/0x240 [ 546.627226][ T5838] ? __pfx_task_work_run+0x10/0x10 [ 546.627262][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 546.627309][ T5838] ? __pfx___x64_sys_umount+0x10/0x10 [ 546.627374][ T5838] syscall_exit_to_user_mode+0x27b/0x2a0 [ 546.627437][ T5838] do_syscall_64+0xda/0x260 [ 546.627499][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.627536][ T5838] RIP: 0033:0x7fc47058fc97 [ 546.627563][ T5838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 546.627598][ T5838] RSP: 002b:00007ffd94807eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 546.627632][ T5838] RAX: 0000000000000000 RBX: 00007fc47061089d RCX: 00007fc47058fc97 [ 546.627655][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd94807f70 [ 546.627678][ T5838] RBP: 00007ffd94807f70 R08: 0000000000000000 R09: 0000000000000000 [ 546.627701][ T5838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd94809000 [ 546.627723][ T5838] R13: 00007fc47061089d R14: 00000000000850fc R15: 00007ffd94809040 [ 546.627773][ T5838] [ 546.914188][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.943311][T15846] bcachefs (loop4): dropping and reconstructing all alloc info [ 547.034287][T15846] bcachefs (loop4): accounting_read... done [ 547.271950][T15846] bcachefs (loop4): alloc_read... done [ 547.278469][T15846] bcachefs (loop4): snapshots_read... done [ 547.341529][T15899] tipc: Started in network mode [ 547.369027][T15846] bcachefs (loop4): done starting filesystem [ 547.388821][T15899] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 547.430225][T15899] tipc: Enabled bearer , priority 10 [ 547.641936][ T5836] bcachefs (loop4): shutting down [ 547.704246][ T5194] udevd[5194]: worker [15168] terminated by signal 33 (Unknown signal 33) [ 547.765924][ T5194] udevd[5194]: worker [15168] failed while handling '/devices/virtual/block/loop4' [ 548.041259][ T5836] bcachefs (loop4): shutdown complete [ 548.438273][ T24] IPVS: starting estimator thread 0... [ 548.545985][ T24] tipc: Node number set to 4269801488 [ 548.565962][T15922] IPVS: using max 20 ests per chain, 48000 per kthread [ 548.580175][T15924] loop6: detected capacity change from 0 to 128 [ 548.648597][T15924] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 548.745531][T15924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 549.301754][T15938] netlink: 'syz.6.4201': attribute type 178 has an invalid length. [ 549.327411][T15940] loop2: detected capacity change from 0 to 512 [ 549.369485][T15941] loop0: detected capacity change from 0 to 512 [ 549.492459][T15940] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.4203: iget: bogus i_mode (0) [ 549.512807][T15941] EXT4-fs (loop0): 1 orphan inode deleted [ 549.519100][T15940] EXT4-fs (loop2): Remounting filesystem read-only [ 549.528089][T15940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.676709][T15941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.711259][T15949] loop6: detected capacity change from 0 to 512 [ 549.730924][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.788897][T15949] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 549.834587][T15949] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 549.898628][T15941] EXT4-fs error (device loop0): ext4_add_entry:2419: inode #2: comm syz.0.4202: Directory hole found for htree leaf block 0 [ 549.931855][T15915] loop1: detected capacity change from 0 to 32768 [ 549.966058][T15949] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 550.078371][T15949] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 550.091759][T15949] System zones: 0-2, 18-18, 34-34 [ 550.102092][T15949] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1129: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 550.187179][T15949] EXT4-fs (loop6): 1 truncate cleaned up [ 550.195007][T15949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.329819][ T30] audit: type=1800 audit(1747356270.247:182): pid=15949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4204" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 550.499919][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.803867][T11874] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.804758][T15961] loop3: detected capacity change from 0 to 256 [ 550.962196][T15961] FAT-fs (loop3): Directory bread(block 64) failed [ 551.011709][T15961] FAT-fs (loop3): Directory bread(block 65) failed [ 551.043121][T15961] FAT-fs (loop3): Directory bread(block 66) failed [ 551.064051][T15961] FAT-fs (loop3): Directory bread(block 67) failed [ 551.081713][T15961] FAT-fs (loop3): Directory bread(block 68) failed [ 551.128648][T15961] FAT-fs (loop3): Directory bread(block 69) failed [ 551.161583][T15961] FAT-fs (loop3): Directory bread(block 70) failed [ 551.196492][T15961] FAT-fs (loop3): Directory bread(block 71) failed [ 551.213174][T15961] FAT-fs (loop3): Directory bread(block 72) failed [ 551.224146][T15967] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 551.265802][T15961] FAT-fs (loop3): Directory bread(block 73) failed [ 551.787776][T15981] loop2: detected capacity change from 0 to 1024 [ 551.911288][T15981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.105946][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 552.250521][T15979] loop0: detected capacity change from 0 to 8192 [ 552.268979][ T24] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.292961][ T24] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.352980][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 552.362889][T15979] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 552.394443][ T24] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 552.420600][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.468042][ T24] usb 2-1: config 0 descriptor?? [ 552.477374][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.579899][T15995] capability: warning: `syz.4.4225' uses 32-bit capabilities (legacy support in use) [ 553.018506][ T24] cypress 0003:04B4:DE61.001D: unknown main item tag 0x0 [ 553.055812][ T24] cypress 0003:04B4:DE61.001D: unknown main item tag 0x0 [ 553.062972][ T24] cypress 0003:04B4:DE61.001D: unknown main item tag 0x0 [ 553.156622][ T24] cypress 0003:04B4:DE61.001D: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.1-1/input0 [ 553.158012][T16004] loop4: detected capacity change from 0 to 2048 [ 553.238792][T16004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 553.245922][ T24] usb 2-1: USB disconnect, device number 24 [ 553.275198][T16009] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4230'. [ 553.327485][ T5970] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 553.522120][ T5970] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.565820][ T5970] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.576986][T16008] fido_id[16008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 553.629612][ T5970] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 553.680759][ T5970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 553.719890][ T5970] usb 7-1: SerialNumber: syz [ 554.033406][ T5970] usb 7-1: 0:2 : does not exist [ 554.067370][ T5970] usb 7-1: unit 56 not found! [ 554.088748][ T5970] usb 7-1: unit 52 not found! [ 554.110605][ T5970] usb 7-1: unit 54 not found! [ 554.147001][T16020] loop2: detected capacity change from 0 to 256 [ 554.159724][ T5970] usb 7-1: unit 55 not found! [ 554.169071][T16020] exfat: Deprecated parameter 'utf8' [ 554.179855][ T5970] usb 7-1: unit 48 not found! [ 554.184576][ T5970] usb 7-1: unit 51 not found! [ 554.211033][ T5970] usb 7-1: unit 57 not found! [ 554.257641][T16024] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4231'. [ 554.266048][ T5970] usb 7-1: unit 53 not found! [ 554.277571][ T5970] usb 7-1: unit 49 not found! [ 554.328737][T16020] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 554.386030][ T5970] usb 7-1: USB disconnect, device number 11 [ 554.644542][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.275831][T13673] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 555.433929][T16050] loop2: detected capacity change from 0 to 1024 [ 555.445236][T16052] loop1: detected capacity change from 0 to 1024 [ 555.455834][T13673] usb 7-1: Using ep0 maxpacket: 32 [ 555.493601][T13673] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.525275][T16050] hfsplus: bad catalog entry type [ 555.544626][T13673] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 555.604322][T16052] hfsplus: bad catalog entry type [ 555.637113][T13673] usb 7-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 555.684967][T13673] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.749759][T13673] usb 7-1: config 0 descriptor?? [ 555.781165][ T54] hfsplus: b-tree write err: -5, ino 4 [ 555.810600][T13673] usb 7-1: bad CDC descriptors [ 555.957311][ T65] hfsplus: b-tree write err: -5, ino 4 [ 556.052197][T13673] usb 7-1: USB disconnect, device number 12 [ 556.177709][T16066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4257'. [ 556.524037][T16075] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 556.582251][T16076] loop2: detected capacity change from 0 to 2048 [ 556.668003][T16076] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 556.717932][T16080] loop4: detected capacity change from 0 to 512 [ 556.811726][T16080] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4263: iget: bad extended attribute block 1 [ 556.991557][T16080] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.4263: couldn't read orphan inode 15 (err -117) [ 557.127998][T16080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.296770][T16086] loop3: detected capacity change from 0 to 32768 [ 557.372605][T16086] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 557.688255][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.703403][T16101] loop1: detected capacity change from 0 to 4096 [ 557.739946][T16104] loop2: detected capacity change from 0 to 4096 [ 557.907675][T16107] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 558.066683][T16086] XFS (loop3): Torn write (CRC failure) detected at log block 0x180. Truncating head block from 0x200. [ 558.243101][T16086] XFS (loop3): Starting recovery (logdev: internal) [ 558.285729][T16086] XFS (loop3): Ending recovery (logdev: internal) [ 558.511399][T16115] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4274'. [ 558.558969][ T5841] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 558.582098][T16118] ptrace attach of "./syz-executor exec"[5833] was attempted by ""[16118] [ 559.075727][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 559.296221][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 559.314310][ T10] usb 1-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.365835][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 559.395378][ T10] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 559.415458][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.441214][ T10] usb 1-1: config 0 descriptor?? [ 559.455343][T16138] loop6: detected capacity change from 0 to 256 [ 559.590621][T16138] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 559.921902][ T10] zeroplus 0003:0C12:0005.001E: item fetching failed at offset 0/3 [ 559.966817][ T10] zeroplus 0003:0C12:0005.001E: parse failed [ 560.005794][ T10] zeroplus 0003:0C12:0005.001E: probe with driver zeroplus failed with error -22 [ 560.043919][T16151] tipc: Started in network mode [ 560.076289][T16151] tipc: Node identity , cluster identity 4711 [ 560.101572][T16151] tipc: Failed to set node id, please configure manually [ 560.145788][T16151] tipc: Enabling of bearer rejected, failed to enable media [ 560.195129][ T48] usb 1-1: USB disconnect, device number 24 [ 560.251109][T16155] Invalid logical block size (2050) [ 560.372094][T16160] loop6: detected capacity change from 0 to 256 [ 560.450178][ T30] audit: type=1326 audit(1747356280.367:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16159 comm="syz.6.4296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856e38e969 code=0x7ffc0000 [ 560.497000][T16162] loop4: detected capacity change from 0 to 1024 [ 560.538160][ T30] audit: type=1326 audit(1747356280.367:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16159 comm="syz.6.4296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856e38e969 code=0x7ffc0000 [ 560.643954][T16162] hfsplus: bad catalog entry type [ 560.666497][ T30] audit: type=1326 audit(1747356280.397:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16159 comm="syz.6.4296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f856e38e969 code=0x7ffc0000 [ 560.799921][ T30] audit: type=1326 audit(1747356280.397:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16159 comm="syz.6.4296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856e38e969 code=0x7ffc0000 [ 560.929585][ T36] hfsplus: b-tree write err: -5, ino 4 [ 560.960366][ T30] audit: type=1326 audit(1747356280.397:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16159 comm="syz.6.4296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856e38e969 code=0x7ffc0000 [ 560.982726][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.105119][ T30] audit: type=1800 audit(1747356280.697:188): pid=16166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4299" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 561.271172][T16174] can0: slcan on ptm0. [ 561.401938][T16182] loop6: detected capacity change from 0 to 256 [ 561.426355][T16172] can0 (unregistered): slcan off ptm0. [ 561.446573][T16182] exfat: Deprecated parameter 'utf8' [ 561.451979][T16182] exfat: Deprecated parameter 'namecase' [ 561.501733][T16187] loop2: detected capacity change from 0 to 256 [ 561.520818][T16182] exfat: Deprecated parameter 'utf8' [ 561.522847][T16186] loop3: detected capacity change from 0 to 256 [ 561.542160][T16187] exfat: Deprecated parameter 'namecase' [ 561.566566][T16187] exfat: Deprecated parameter 'utf8' [ 561.589852][T16182] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 561.590252][T16186] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 561.705200][T16187] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 561.757618][T16183] syz.1.4307 (16183) used greatest stack depth: 18392 bytes left [ 561.844385][ T30] audit: type=1800 audit(1747356281.757:189): pid=16187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4309" name="file1" dev="loop2" ino=1048763 res=0 errno=0 [ 561.865393][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.883267][T16191] loop0: detected capacity change from 0 to 1024 [ 562.060956][T16191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.463721][T16202] syz.2.4315 (16202): /proc/16200/oom_adj is deprecated, please use /proc/16200/oom_score_adj instead. [ 562.670324][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.103272][T16208] loop6: detected capacity change from 0 to 4096 [ 563.186505][T16208] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 563.261402][T16218] loop2: detected capacity change from 0 to 4096 [ 563.308515][T16218] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 563.332495][T16208] ntfs3(loop6): ino=19, mi_enum_attr [ 563.349505][T16208] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 564.013500][ T5134] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 564.013560][ T5134] Bluetooth: hci3: Malformed LE Event: 0x02 [ 564.195743][ T48] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 564.280162][T16241] ubi31: attaching mtd0 [ 564.339571][T16244] loop6: detected capacity change from 0 to 1024 [ 564.365823][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 564.384018][ T48] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 564.413654][ T48] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 564.437755][T16244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.513933][T16214] loop1: detected capacity change from 0 to 32768 [ 564.515670][ T48] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 564.533428][T16214] XFS: ikeep mount option is deprecated. [ 564.569480][T16214] XFS: noikeep mount option is deprecated. [ 564.608992][ T48] usb 4-1: config 0 interface 0 has no altsetting 0 [ 564.633285][ T48] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 564.650590][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.659390][ T48] usb 4-1: Product: syz [ 564.663716][ T48] usb 4-1: Manufacturer: syz [ 564.669234][ T48] usb 4-1: SerialNumber: syz [ 564.784478][ T48] usb 4-1: config 0 descriptor?? [ 564.832182][T16234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 564.875103][T16248] loop0: detected capacity change from 0 to 32768 [ 564.899668][T16214] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 564.988279][T11874] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.088800][T16234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 565.110987][T16248] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 565.152099][T16214] XFS (loop1): Ending clean mount [ 565.153298][T16248] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,norecovery,nojournal_transaction_names,noexcl [ 565.153298][T16248] allowing incompatible features above 0.0: (unknown version) [ 565.182369][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.189370][T16248] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 565.197794][T16248] bcachefs (loop0): Version upgrade required: [ 565.197794][T16248] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 565.197794][T16248] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 565.197794][T16248] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 565.201966][T16214] XFS (loop1): Quotacheck needed: Please wait. [ 565.267655][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.302269][ T48] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input36 [ 565.342601][T16248] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 565.342644][T16248] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 565.342675][T16248] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 565.383980][T16248] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 565.383980][T16248] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 565.387182][ T48] usb 4-1: USB disconnect, device number 17 [ 565.408710][ C1] synaptics_usb 4-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 565.457984][ T5179] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 565.473086][T16248] bcachefs (loop0): accounting_read... done [ 565.528493][T16248] bcachefs (loop0): alloc_read... done [ 565.534250][T16248] bcachefs (loop0): snapshots_read... done [ 565.540297][T16248] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 565.550623][T16248] bcachefs (loop0): done starting filesystem [ 565.572509][T16214] XFS (loop1): Quotacheck: Done. [ 565.609429][ T5179] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 565.687365][ T5829] bcachefs (loop0): shutting down [ 565.726015][T13673] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 565.905852][T13673] usb 5-1: Using ep0 maxpacket: 8 [ 565.945210][ T5833] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 565.954728][T13673] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 565.965451][T13673] usb 5-1: config 2 has no interface number 0 [ 565.980476][T13673] usb 5-1: config 2 interface 31 has no altsetting 0 [ 565.994738][ T5829] bcachefs (loop0): shutdown complete [ 566.005504][T13673] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 566.046561][T13673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.104623][T13673] usb 5-1: Product: syz [ 566.119755][T13673] usb 5-1: Manufacturer: syz [ 566.124409][T13673] usb 5-1: SerialNumber: syz [ 566.925380][T13673] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 566.975738][T13673] usb 5-1: USB disconnect, device number 25 [ 567.070035][T16253] loop2: detected capacity change from 0 to 40427 [ 567.120973][T16253] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3fffff [ 567.153224][T16253] F2FS-fs (loop2): invalid crc value [ 567.600394][T16253] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 567.675786][T16301] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 567.702297][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.764036][T16303] loop3: detected capacity change from 0 to 1024 [ 567.804435][T16301] CIFS: Unable to determine destination address [ 567.808769][T16303] EXT4-fs: Ignoring removed orlov option [ 567.858881][T16303] EXT4-fs: Ignoring removed orlov option [ 567.974099][T16303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.121716][T16307] loop4: detected capacity change from 0 to 4096 [ 568.179993][T16307] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 568.300236][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.405969][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 568.616169][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 568.663433][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 568.729935][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 568.796363][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 568.805457][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.878603][ T9] usb 2-1: Product: syz [ 568.892552][ T9] usb 2-1: Manufacturer: syz [ 568.915800][ T9] usb 2-1: SerialNumber: syz [ 568.950228][ T9] usb 2-1: config 0 descriptor?? [ 569.251682][T16327] loop3: detected capacity change from 0 to 1024 [ 569.266155][ T9] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 569.294107][ T9] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 569.403785][ T9] usb 2-1: USB disconnect, device number 25 [ 569.585303][T16331] loop6: detected capacity change from 0 to 512 [ 569.727730][T16331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.761523][T16331] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 569.911961][T11874] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.160378][T16346] loop4: detected capacity change from 0 to 1024 [ 570.228142][T16346] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 570.293666][T16346] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 570.319161][T16346] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 570.353050][T16346] EXT4-fs (loop4): orphan cleanup on readonly fs [ 570.419098][T16346] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 570.501618][T16346] EXT4-fs (loop4): Remounting filesystem read-only [ 570.556690][T16346] Quota error (device loop4): write_blk: dquota write failed [ 570.625879][T16346] Quota error (device loop4): write_blk: dquota write failed [ 570.653523][T16346] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 570.705872][T16346] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 570.715455][T16346] EXT4-fs (loop4): 1 orphan inode deleted [ 570.787736][T16346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 570.896207][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 571.038245][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.096896][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 571.108568][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 571.139917][ T24] usb 4-1: config 0 has no interface number 0 [ 571.155000][ T24] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 571.194218][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.224581][ T24] usb 4-1: Product: syz [ 571.230670][ T24] usb 4-1: Manufacturer: syz [ 571.256333][ T24] usb 4-1: SerialNumber: syz [ 571.270249][ T24] usb 4-1: config 0 descriptor?? [ 571.297528][T16340] loop0: detected capacity change from 0 to 32768 [ 571.314430][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 571.357600][T16340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4369 (16340) [ 571.440315][T16340] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 571.493464][T16340] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 571.609452][T16344] loop2: detected capacity change from 0 to 32768 [ 571.858440][T16340] BTRFS error (device loop0 state M): cannot disable free-space-tree [ 571.892501][ T24] gspca_spca1528: reg_w err -71 [ 571.926676][ T24] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 571.991841][ T24] usb 4-1: USB disconnect, device number 18 [ 572.196317][ T5829] BTRFS info (device loop0 state M): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 572.322709][T16399] loop6: detected capacity change from 0 to 1764 [ 572.352664][ T970] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 572.545701][ T970] usb 3-1: Using ep0 maxpacket: 16 [ 572.552312][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.565881][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.609264][ T970] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 572.626521][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 572.640938][ T970] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 572.657869][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.668899][ T970] usb 3-1: Product: syz [ 572.686788][ T970] usb 3-1: Manufacturer: syz [ 572.706865][ T970] usb 3-1: SerialNumber: syz [ 572.769059][ T970] usb 3-1: config 0 descriptor?? [ 573.157213][ T970] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 573.227602][ T970] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 573.353294][ T970] usb 3-1: USB disconnect, device number 23 [ 573.524841][T16420] loop4: detected capacity change from 0 to 256 [ 573.550303][ T30] audit: type=1800 audit(1747356293.457:190): pid=16421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4400" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 573.728696][T16420] FAT-fs (loop4): Directory bread(block 64) failed [ 573.735303][T16420] FAT-fs (loop4): Directory bread(block 65) failed [ 573.776051][T16420] FAT-fs (loop4): Directory bread(block 66) failed [ 573.792847][T16420] FAT-fs (loop4): Directory bread(block 67) failed [ 573.835887][T16420] FAT-fs (loop4): Directory bread(block 68) failed [ 573.858491][T16420] FAT-fs (loop4): Directory bread(block 69) failed [ 573.894137][T16420] FAT-fs (loop4): Directory bread(block 70) failed [ 573.929775][T16420] FAT-fs (loop4): Directory bread(block 71) failed [ 573.948782][T16420] FAT-fs (loop4): Directory bread(block 72) failed [ 573.955386][T16420] FAT-fs (loop4): Directory bread(block 73) failed [ 574.141691][T16431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4405'. [ 574.804574][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 574.819279][T16448] loop0: detected capacity change from 0 to 1024 [ 574.880617][T16448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.987030][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 574.999090][ T24] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.014553][ T24] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.031925][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 575.038722][T16448] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm syz.0.4412: bg 0: block 260: invalid block bitmap [ 575.091276][T16457] EXT4-fs error (device loop0): __ext4_new_inode:1072: comm syz.0.4412: reserved inode found cleared - inode=1 [ 575.099744][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 575.115766][T16448] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.4412: bit already cleared for inode 15 [ 575.179334][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.222396][ T24] usb 5-1: config 0 descriptor?? [ 575.274097][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.315247][ T970] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 575.413239][T16464] loop2: detected capacity change from 0 to 256 [ 575.498560][ T970] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 575.518875][ T970] usb 2-1: config 0 has no interface number 0 [ 575.564194][ T970] usb 2-1: too many endpoints for config 0 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 575.599561][ T970] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 575.646212][ T970] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.688848][T16468] loop0: detected capacity change from 0 to 2048 [ 575.700938][ T24] mcp2200 0003:04D8:00DF.001F: unknown main item tag 0x2 [ 575.736714][ T970] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 575.756900][ T24] mcp2200 0003:04D8:00DF.001F: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 575.762286][T16468] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 575.789395][ T970] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 575.795205][T16468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 575.830980][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.919967][ T970] usb 2-1: config 0 descriptor?? [ 575.943974][ T24] usb 5-1: USB disconnect, device number 26 [ 576.326016][T16482] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 576.403332][T16483] loop0: detected capacity change from 0 to 512 [ 576.417331][ T970] uclogic 0003:28BD:0935.0020: interface is invalid, ignoring [ 576.450410][T16483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 576.491106][T16483] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.4427: iget: bad extended attribute block 9 [ 576.552953][T16483] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4427: couldn't read orphan inode 15 (err -117) [ 576.575115][T16486] loop6: detected capacity change from 0 to 2048 [ 576.582676][T16486] EXT4-fs: inline encryption not supported [ 576.655134][T16483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.718117][T16486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.802013][ T970] usb 2-1: USB disconnect, device number 26 [ 576.899410][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.916613][T16494] loop2: detected capacity change from 0 to 256 [ 576.990953][T11874] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.043138][ T30] audit: type=1800 audit(1747356296.957:191): pid=16496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4432" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 577.398084][T16503] loop6: detected capacity change from 0 to 256 [ 577.684185][T16503] FAT-fs (loop6): Directory bread(block 64) failed [ 577.715478][T16503] FAT-fs (loop6): Directory bread(block 65) failed [ 577.745889][T16503] FAT-fs (loop6): Directory bread(block 66) failed [ 577.799051][T16503] FAT-fs (loop6): Directory bread(block 67) failed [ 577.838535][T16503] FAT-fs (loop6): Directory bread(block 68) failed [ 577.883095][T16503] FAT-fs (loop6): Directory bread(block 69) failed [ 577.947891][T16503] FAT-fs (loop6): Directory bread(block 70) failed [ 577.954467][T16503] FAT-fs (loop6): Directory bread(block 71) failed [ 578.019584][T16503] FAT-fs (loop6): Directory bread(block 72) failed [ 578.061202][T16503] FAT-fs (loop6): Directory bread(block 73) failed [ 578.236775][ T5888] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 578.375316][T16523] loop3: detected capacity change from 0 to 512 [ 578.436201][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 578.448683][ T5888] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.479897][T16525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4446'. [ 578.489896][T16525] netlink: 'syz.2.4446': attribute type 2 has an invalid length. [ 578.498235][T16525] netlink: 'syz.2.4446': attribute type 1 has an invalid length. [ 578.506356][T16492] loop4: detected capacity change from 0 to 32768 [ 578.509990][ T5888] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.513510][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4446'. [ 578.554888][T16523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.567852][T16523] ext4 filesystem being mounted at /792/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.615971][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 578.667640][ T5888] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 578.720255][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.769924][ T5888] usb 2-1: config 0 descriptor?? [ 578.804666][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.898776][ T1156] kworker/u8:7: attempt to access beyond end of device [ 578.898776][ T1156] loop6: rw=1, sector=1224, nr_sectors = 544 limit=256 [ 578.997154][ T1156] kworker/u8:7: attempt to access beyond end of device [ 578.997154][ T1156] loop6: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 579.075007][ T1156] kworker/u8:7: attempt to access beyond end of device [ 579.075007][ T1156] loop6: rw=1, sector=1960, nr_sectors = 896 limit=256 [ 579.319882][ T5888] uclogic 0003:5543:0522.0021: item fetching failed at offset 2/5 [ 579.376150][ T5888] uclogic 0003:5543:0522.0021: parse failed [ 579.382195][ T5888] uclogic 0003:5543:0522.0021: probe with driver uclogic failed with error -22 [ 579.550098][ T24] usb 2-1: USB disconnect, device number 27 [ 579.796497][ T5888] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 580.009927][ T5888] usb 7-1: Using ep0 maxpacket: 16 [ 580.028263][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 580.077608][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 580.141405][ T5888] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 580.181099][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.231262][ T5888] usb 7-1: Product: syz [ 580.235473][ T5888] usb 7-1: Manufacturer: syz [ 580.262105][ T5888] usb 7-1: SerialNumber: syz [ 580.304213][ T5888] usb 7-1: config 0 descriptor?? [ 580.456463][T16570] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4460'. [ 580.543457][ T30] audit: type=1326 audit(1747356300.457:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d758e969 code=0x7ffc0000 [ 580.654804][ T5888] appledisplay 7-1:0.0: Error while getting initial brightness: -71 [ 580.689059][ T30] audit: type=1326 audit(1747356300.457:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68d758e969 code=0x7ffc0000 [ 580.728828][ T5888] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -71 [ 580.773087][T16572] loop0: detected capacity change from 0 to 512 [ 580.805491][ T5888] usb 7-1: USB disconnect, device number 13 [ 580.824030][T16572] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 580.847816][ T30] audit: type=1326 audit(1747356300.517:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f68d758e969 code=0x7ffc0000 [ 580.965858][T16572] EXT4-fs (loop0): 1 truncate cleaned up [ 580.995791][ T30] audit: type=1326 audit(1747356300.517:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68d758e9a3 code=0x7ffc0000 [ 581.024037][T16572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.025737][ T30] audit: type=1326 audit(1747356300.527:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f68d758d41f code=0x7ffc0000 [ 581.148467][ T30] audit: type=1326 audit(1747356300.547:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f68d758e9f7 code=0x7ffc0000 [ 581.219689][ T30] audit: type=1326 audit(1747356300.687:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68d758d2d0 code=0x7ffc0000 [ 581.327459][ T30] audit: type=1326 audit(1747356300.687:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68d758e56b code=0x7ffc0000 [ 581.371521][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.380732][ T5970] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 581.419083][ T30] audit: type=1326 audit(1747356300.737:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.0.4461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f68d758d5ca code=0x7ffc0000 [ 581.567805][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.606359][T16553] loop2: detected capacity change from 0 to 32768 [ 581.616015][ T5970] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 581.625080][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.707037][T16553] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4455 (16553) [ 581.722422][ T5970] usb 4-1: config 0 descriptor?? [ 581.825690][T16553] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 581.878777][T16553] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 581.947458][T16553] BTRFS info (device loop2): using free-space-tree [ 582.207142][ T5970] logitech-hidpp-device 0003:046D:C086.0022: unknown main item tag 0x0 [ 582.221212][ T5970] logitech-hidpp-device 0003:046D:C086.0022: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 582.452641][T16623] loop4: detected capacity change from 0 to 1024 [ 582.479953][ T5970] usb 4-1: USB disconnect, device number 19 [ 582.511820][T16626] pim6reg: left allmulticast mode [ 582.529315][ T5838] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 582.579066][T16623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.722908][T16624] fido_id[16624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 583.165105][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.439740][ T970] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 583.481657][T16650] sd 0:0:1:0: device reset [ 583.663730][ T970] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 583.685675][ T970] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.775451][ T970] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 583.825790][ T970] usb 7-1: config 1 has no interface number 1 [ 583.831951][ T970] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 583.876938][T16655] loop2: detected capacity change from 0 to 2048 [ 583.922257][ T970] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 583.941523][ T970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.971288][T16664] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 583.991300][ T970] usb 7-1: Product: syz [ 584.011191][ T970] usb 7-1: Manufacturer: syz [ 584.021880][ T970] usb 7-1: SerialNumber: syz [ 584.176368][ T24] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 584.278054][T16666] netlink: 'syz.4.4494': attribute type 8 has an invalid length. [ 584.316446][ T970] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 584.325325][T16666] netlink: 'syz.4.4494': attribute type 3 has an invalid length. [ 584.352186][ T970] usb 7-1: MIDIStreaming interface descriptor not found [ 584.362551][T16666] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.4494'. [ 584.378638][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 584.400654][ T24] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 584.446699][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.485151][ T24] usb 1-1: config 0 descriptor?? [ 584.545885][ T970] usb 7-1: USB disconnect, device number 14 [ 584.876100][T16676] loop3: detected capacity change from 0 to 1024 [ 584.880021][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.991556][T16676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.039043][ T24] nintendo 0003:057E:200E.0023: item fetching failed at offset 5/7 [ 585.087437][ T24] nintendo 0003:057E:200E.0023: HID parse failed [ 585.113988][ T24] nintendo 0003:057E:200E.0023: probe - fail = -22 [ 585.162128][ T24] nintendo 0003:057E:200E.0023: probe with driver nintendo failed with error -22 [ 585.223344][T16682] loop1: detected capacity change from 0 to 4096 [ 585.241803][ T24] usb 1-1: USB disconnect, device number 25 [ 585.292799][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 585.297236][T16682] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 585.452770][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.487554][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 585.512141][ T9] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 585.545754][ T48] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 585.545776][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.577196][ T9] usb 5-1: Product: syz [ 585.596434][ T9] usb 5-1: Manufacturer: syz [ 585.625793][ T9] usb 5-1: SerialNumber: syz [ 585.659153][ T9] usb 5-1: config 0 descriptor?? [ 585.709637][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 585.746090][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 585.815213][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 585.841736][ T48] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 585.878686][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.914271][ T48] usb 3-1: config 0 descriptor?? [ 586.120572][ T9] gspca_se401: Bayer format not supported! [ 586.176190][ T48] usb 3-1: string descriptor 0 read error: -71 [ 586.211862][ T48] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input37 [ 586.280102][ T5179] bcm5974 3-1:0.0: could not read from device [ 586.339129][ T9] usb 5-1: USB disconnect, device number 27 [ 586.368862][ T5179] bcm5974 3-1:0.0: could not read from device [ 586.420054][T16701] loop0: detected capacity change from 0 to 4096 [ 586.429618][ T48] usb 3-1: USB disconnect, device number 24 [ 586.453744][ T5179] bcm5974 3-1:0.0: could not read from device [ 586.509781][ T5179] bcm5974 3-1:0.0: could not read from device [ 586.999422][T16717] loop3: detected capacity change from 0 to 512 [ 587.072732][T16717] EXT4-fs: Ignoring removed i_version option [ 587.215296][T16717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.244661][T16717] ext4 filesystem being mounted at /806/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.579037][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.718473][T16732] pim6reg: entered allmulticast mode [ 587.768563][T16706] loop1: detected capacity change from 0 to 32768 [ 587.797411][T16706] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4511 (16706) [ 587.828231][T16706] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 587.828337][T16706] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 587.828385][T16706] BTRFS info (device loop1): using free-space-tree [ 587.896027][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 588.033989][T16706] BTRFS info (device loop1): rebuilding free space tree [ 588.098226][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4524'. [ 588.116801][T16706] BTRFS info (device loop1): checking UUID tree [ 588.358289][T16713] loop6: detected capacity change from 0 to 32768 [ 588.422896][T16713] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 588.481047][ T5833] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 588.603653][T16713] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 588.868222][T16771] loop0: detected capacity change from 0 to 512 [ 589.098997][T16771] EXT4-fs (loop0): 1 orphan inode deleted [ 589.176580][ T1142] __quota_error: 11 callbacks suppressed [ 589.176604][ T1142] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 589.196553][T16771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.275946][ T1142] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 589.305975][T16771] ext4 filesystem being mounted at /784/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.326780][T11874] ocfs2: Unmounting device (7,6) on (node local) [ 589.521584][T16789] loop4: detected capacity change from 0 to 256 [ 589.593400][T16789] exfat: Deprecated parameter 'utf8' [ 589.707824][T16789] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 589.728999][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.375976][ T5970] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 590.546191][ T5970] usb 2-1: Using ep0 maxpacket: 8 [ 590.562504][ T5970] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 590.584120][ T5970] usb 2-1: config 0 has no interface number 0 [ 590.614457][ T5970] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 590.676777][ T5970] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 590.722402][ T5970] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 590.757872][ T5970] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 590.791500][ T5970] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 590.813378][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.854073][ T5970] usb 2-1: config 0 descriptor?? [ 590.915098][ T5970] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 591.255241][ T9] usb 2-1: USB disconnect, device number 28 [ 591.275423][T16819] gtp0: entered promiscuous mode [ 591.288819][T16822] loop0: detected capacity change from 0 to 1024 [ 591.292426][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 591.305141][T16793] loop2: detected capacity change from 0 to 32768 [ 591.314906][T16822] EXT4-fs: Ignoring removed oldalloc option [ 591.326445][T16819] gtp0: entered allmulticast mode [ 591.336873][T16819] team0: Device gtp0 is of different type [ 591.344383][T16822] EXT4-fs: Ignoring removed bh option [ 591.407773][T16822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.449483][T16793] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 591.610573][ T5838] ocfs2: Unmounting device (7,2) on (node local) [ 591.772350][T16832] loop6: detected capacity change from 0 to 128 [ 592.133128][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.215216][T16840] loop1: detected capacity change from 0 to 1024 [ 592.352358][T16840] hfsplus: bad catalog entry type [ 592.639143][ T1142] hfsplus: b-tree write err: -5, ino 4 [ 593.302222][T16866] loop6: detected capacity change from 0 to 512 [ 593.334580][T16866] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 593.386505][T16866] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc128, mo2=0002] [ 593.414475][T16866] System zones: 1-12 [ 593.462867][T16866] EXT4-fs (loop6): 1 truncate cleaned up [ 593.537931][T16866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.728107][T16836] loop4: detected capacity change from 0 to 32768 [ 593.752717][T16836] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4553 (16836) [ 593.866024][T16836] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 593.932697][T16836] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 593.985324][T16836] BTRFS info (device loop4): using free-space-tree [ 594.008583][T11874] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.084072][T16883] loop2: detected capacity change from 0 to 1024 [ 594.112442][T16886] pim6reg: left allmulticast mode [ 594.321943][T16883] hfsplus: bad catalog entry type [ 594.571813][ T12] hfsplus: b-tree write err: -5, ino 4 [ 594.687997][ T5836] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 594.925764][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 595.115922][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 595.174940][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 595.195762][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.217180][ T24] usb 4-1: Product: syz [ 595.221450][ T24] usb 4-1: Manufacturer: syz [ 595.260193][ T24] usb 4-1: SerialNumber: syz [ 595.265122][T16916] loop0: detected capacity change from 0 to 64 [ 595.283881][ T24] usb 4-1: config 0 descriptor?? [ 595.328402][ T24] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 595.360761][T16877] loop1: detected capacity change from 0 to 32768 [ 595.419065][T16916] [ 595.421440][T16916] ====================================================== [ 595.428471][T16916] WARNING: possible circular locking dependency detected [ 595.435503][T16916] 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 Not tainted [ 595.442621][T16916] ------------------------------------------------------ [ 595.449650][T16916] syz.0.4583/16916 is trying to acquire lock: [ 595.455724][T16916] ffff88805b9ecef8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa1/0xb10 [ 595.466503][T16916] [ 595.466503][T16916] but task is already holding lock: [ 595.473870][T16916] ffff88805b5520b0 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x183/0x220 [ 595.483460][T16916] [ 595.483460][T16916] which lock already depends on the new lock. [ 595.483460][T16916] [ 595.493870][T16916] [ 595.493870][T16916] the existing dependency chain (in reverse order) is: [ 595.502889][T16916] [ 595.502889][T16916] -> #1 (&tree->tree_lock#2/1){+.+.}-{4:4}: [ 595.511059][T16916] __mutex_lock+0x199/0xb90 [ 595.516126][T16916] hfs_find_init+0x183/0x220 [ 595.521281][T16916] hfs_ext_read_extent+0x19b/0x9e0 [ 595.526967][T16916] hfs_extend_file+0x4e2/0xb10 [ 595.532315][T16916] hfs_bmap_reserve+0x2a2/0x390 [ 595.537714][T16916] hfs_cat_create+0x229/0x820 [ 595.542932][T16916] hfs_mkdir+0x6f/0xe0 [ 595.547542][T16916] vfs_mkdir+0x593/0x8c0 [ 595.552328][T16916] do_mkdirat+0x304/0x3e0 [ 595.557233][T16916] __x64_sys_mkdirat+0x83/0xb0 [ 595.562557][T16916] do_syscall_64+0xcd/0x260 [ 595.567625][T16916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.574059][T16916] [ 595.574059][T16916] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 595.583308][T16916] __lock_acquire+0x1173/0x1ba0 [ 595.588745][T16916] lock_acquire+0x179/0x350 [ 595.593802][T16916] __mutex_lock+0x199/0xb90 [ 595.598885][T16916] hfs_extend_file+0xa1/0xb10 [ 595.604118][T16916] hfs_bmap_reserve+0x2a2/0x390 [ 595.609512][T16916] __hfs_ext_write_extent+0x3cf/0x520 [ 595.615431][T16916] hfs_ext_read_extent+0x807/0x9e0 [ 595.621094][T16916] hfs_extend_file+0x4e2/0xb10 [ 595.626410][T16916] hfs_get_block+0x17f/0x830 [ 595.631546][T16916] __block_write_begin_int+0x4f4/0x16d0 [ 595.637634][T16916] block_write_begin+0x9a/0x1d0 [ 595.643021][T16916] cont_write_begin+0x61b/0x950 [ 595.648408][T16916] hfs_write_begin+0x64/0x120 [ 595.653630][T16916] cont_write_begin+0x350/0x950 [ 595.659020][T16916] hfs_write_begin+0x64/0x120 [ 595.664260][T16916] hfs_file_truncate+0xc0f/0xfc0 [ 595.669743][T16916] hfs_inode_setattr+0x48e/0x5e0 [ 595.675224][T16916] notify_change+0x6a9/0x1230 [ 595.680442][T16916] do_truncate+0x15b/0x220 [ 595.685405][T16916] do_ftruncate+0x5a9/0x960 [ 595.690460][T16916] do_sys_ftruncate+0x61/0xa0 [ 595.695693][T16916] __x64_sys_ftruncate+0x58/0x80 [ 595.701184][T16916] do_syscall_64+0xcd/0x260 [ 595.706243][T16916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.712675][T16916] [ 595.712675][T16916] other info that might help us debug this: [ 595.712675][T16916] [ 595.722904][T16916] Possible unsafe locking scenario: [ 595.722904][T16916] [ 595.730359][T16916] CPU0 CPU1 [ 595.735723][T16916] ---- ---- [ 595.741090][T16916] lock(&tree->tree_lock#2/1); [ 595.745982][T16916] lock(&HFS_I(tree->inode)->extents_lock); [ 595.754499][T16916] lock(&tree->tree_lock#2/1); [ 595.761912][T16916] lock(&HFS_I(tree->inode)->extents_lock); [ 595.767907][T16916] [ 595.767907][T16916] *** DEADLOCK *** [ 595.767907][T16916] [ 595.776048][T16916] 4 locks held by syz.0.4583/16916: [ 595.781245][T16916] #0: ffff88803248e420 (sb_writers#25){.+.+}-{0:0}, at: do_sys_ftruncate+0x61/0xa0 [ 595.790747][T16916] #1: ffff88805b9ef120 (&sb->s_type->i_mutex_key#32){+.+.}-{4:4}, at: do_truncate+0x14a/0x220 [ 595.801189][T16916] #2: ffff88805b9eef78 (&HFS_I(inode)->extents_lock#2){+.+.}-{4:4}, at: hfs_extend_file+0xa1/0xb10 [ 595.812062][T16916] #3: ffff88805b5520b0 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x183/0x220 [ 595.822087][T16916] [ 595.822087][T16916] stack backtrace: [ 595.827990][T16916] CPU: 1 UID: 0 PID: 16916 Comm: syz.0.4583 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 595.828033][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 595.828052][T16916] Call Trace: [ 595.828062][T16916] [ 595.828075][T16916] dump_stack_lvl+0x116/0x1f0 [ 595.828129][T16916] print_circular_bug+0x275/0x350 [ 595.828182][T16916] check_noncircular+0x14c/0x170 [ 595.828237][T16916] __lock_acquire+0x1173/0x1ba0 [ 595.828298][T16916] lock_acquire+0x179/0x350 [ 595.828354][T16916] ? hfs_extend_file+0xa1/0xb10 [ 595.828396][T16916] ? __pfx___might_resched+0x10/0x10 [ 595.828444][T16916] __mutex_lock+0x199/0xb90 [ 595.828495][T16916] ? hfs_extend_file+0xa1/0xb10 [ 595.828532][T16916] ? __lock_acquire+0xf7f/0x1ba0 [ 595.828584][T16916] ? hfs_extend_file+0xa1/0xb10 [ 595.828624][T16916] ? __pfx___mutex_lock+0x10/0x10 [ 595.828677][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.828716][T16916] ? __mutex_trylock_common+0xe9/0x250 [ 595.828774][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.828814][T16916] ? __pfx___might_resched+0x10/0x10 [ 595.828867][T16916] ? hfs_extend_file+0xa1/0xb10 [ 595.828905][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.828946][T16916] hfs_extend_file+0xa1/0xb10 [ 595.828987][T16916] ? __pfx_hfs_extend_file+0x10/0x10 [ 595.829027][T16916] ? hfs_brec_find+0x3ea/0x540 [ 595.829054][T16916] ? __pfx___mutex_lock+0x10/0x10 [ 595.829110][T16916] hfs_bmap_reserve+0x2a2/0x390 [ 595.829144][T16916] ? rcu_is_watching+0x12/0xc0 [ 595.829188][T16916] __hfs_ext_write_extent+0x3cf/0x520 [ 595.829231][T16916] hfs_ext_read_extent+0x807/0x9e0 [ 595.829273][T16916] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 595.829319][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.829367][T16916] hfs_extend_file+0x4e2/0xb10 [ 595.829406][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.829445][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.829490][T16916] ? __pfx_hfs_extend_file+0x10/0x10 [ 595.829530][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.829578][T16916] hfs_get_block+0x17f/0x830 [ 595.829621][T16916] ? __pfx_hfs_get_block+0x10/0x10 [ 595.829663][T16916] __block_write_begin_int+0x4f4/0x16d0 [ 595.829703][T16916] ? __pfx_hfs_get_block+0x10/0x10 [ 595.829743][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.829785][T16916] ? __pfx___block_write_begin_int+0x10/0x10 [ 595.829826][T16916] ? __pfx_hfs_get_block+0x10/0x10 [ 595.829865][T16916] block_write_begin+0x9a/0x1d0 [ 595.829903][T16916] cont_write_begin+0x61b/0x950 [ 595.829940][T16916] ? find_held_lock+0x2b/0x80 [ 595.829980][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.830020][T16916] ? __pfx_hfs_get_block+0x10/0x10 [ 595.830063][T16916] ? __pfx_cont_write_begin+0x10/0x10 [ 595.830098][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.830139][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.830182][T16916] hfs_write_begin+0x64/0x120 [ 595.830223][T16916] ? __pfx_hfs_get_block+0x10/0x10 [ 595.830265][T16916] cont_write_begin+0x350/0x950 [ 595.830305][T16916] ? __pfx_hfs_get_block+0x10/0x10 [ 595.830349][T16916] ? __pfx_cont_write_begin+0x10/0x10 [ 595.830392][T16916] hfs_write_begin+0x64/0x120 [ 595.830433][T16916] ? __pfx_hfs_get_block+0x10/0x10 [ 595.830475][T16916] hfs_file_truncate+0xc0f/0xfc0 [ 595.830517][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.830556][T16916] ? __up_read+0x1f8/0x750 [ 595.830586][T16916] ? down_read+0x13d/0x480 [ 595.830618][T16916] ? __pfx___up_read+0x10/0x10 [ 595.830656][T16916] ? __pfx_hfs_file_truncate+0x10/0x10 [ 595.830700][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.830747][T16916] ? inode_newsize_ok+0x13b/0x200 [ 595.830785][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.830830][T16916] hfs_inode_setattr+0x48e/0x5e0 [ 595.830873][T16916] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 595.830916][T16916] notify_change+0x6a9/0x1230 [ 595.830960][T16916] do_truncate+0x15b/0x220 [ 595.831005][T16916] ? __pfx_do_truncate+0x10/0x10 [ 595.831058][T16916] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.831102][T16916] do_ftruncate+0x5a9/0x960 [ 595.831149][T16916] ? __pfx_do_ftruncate+0x10/0x10 [ 595.831202][T16916] do_sys_ftruncate+0x61/0xa0 [ 595.831249][T16916] __x64_sys_ftruncate+0x58/0x80 [ 595.831297][T16916] do_syscall_64+0xcd/0x260 [ 595.831354][T16916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.831387][T16916] RIP: 0033:0x7f68d758e969 [ 595.831412][T16916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.831444][T16916] RSP: 002b:00007f68d845b038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 595.831474][T16916] RAX: ffffffffffffffda RBX: 00007f68d77b5fa0 RCX: 00007f68d758e969 [ 595.831499][T16916] RDX: 0000000000000000 RSI: 000000000000c17a RDI: 0000000000000004 [ 595.831518][T16916] RBP: 00007f68d7610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 595.831538][T16916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.831558][T16916] R13: 0000000000000000 R14: 00007f68d77b5fa0 R15: 00007ffe9e5fc258 [ 595.831594][T16916] [ 595.831630][ C1] vkms_vblank_simulate: vblank timer overrun [ 596.327574][ C1] vkms_vblank_simulate: vblank timer overrun [ 596.347852][T16921] loop2: detected capacity change from 0 to 256 [ 596.354919][T16921] exfat: Deprecated parameter 'namecase' [ 596.360714][T16921] exfat: Deprecated parameter 'utf8' [ 596.366126][T16921] exfat: Deprecated parameter 'namecase' [ 596.387455][ T24] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 596.397191][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 596.559533][T16921] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d) [ 596.578647][T16877] ERROR: (device loop1): diWrite: ixpxd invalid [ 596.578647][T16877] [ 596.599185][T16877] ERROR: (device loop1): remounting filesystem as read-only [ 596.606958][T16877] ERROR: (device loop1): txAbort: [ 596.606958][T16877] [ 597.672435][ T24] usb 4-1: USB disconnect, device number 20 [ 600.215741][ T5134] Bluetooth: hci1: command 0x0406 tx timeout