last executing test programs: 12.83126862s ago: executing program 1 (id=4201): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 11.147228914s ago: executing program 1 (id=4223): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 9.477914447s ago: executing program 1 (id=4228): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000140)={0x0, 0x8, 0x4, "003a6eb7"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x10}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x85, 0x3, "9cf0c2"}}) 8.492491711s ago: executing program 2 (id=4234): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x4, 0x0) 8.303917884s ago: executing program 2 (id=4235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240080d0}, 0x0) 8.157650635s ago: executing program 2 (id=4236): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000440), 0x2, r1, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f0000000400)=[r1], &(0x7f0000000180), &(0x7f0000000380)=[r2], &(0x7f0000000280), 0x0, 0x1253}) 7.903958319s ago: executing program 2 (id=4238): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000080)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$9p_xen(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) 7.575389014s ago: executing program 1 (id=4239): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 7.476697865s ago: executing program 2 (id=4240): io_uring_setup(0x5bec, &(0x7f0000000040)={0x0, 0x0, 0x100, 0xfffffffe, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000104c, &(0x7f0000000700)=ANY=[@ANYBLOB="787fd34580c3b851d7919ec27e2a54f25b0444d29317e95422c8ad6f58dc523658866778b829702d93c36b05eec8fa599c90daa58df75c4f11a6df03e400b1778e570b59d206130f9c189902d6950277350ef6d34bf836dc9478bd94ba9453693c070b5a66a4a22802a101a983b865f493eac79ddaaafabfb457e71ded03f5b11a0d3f8c4e56fb5a9a0221d03910f32ae62d94621a39581e91b2dd10081c69e0b98f2eb883b1e0eefe97bc8103d533811a1341e218c74c803ecede84e3d986f8a4a4627a7950aa4309a84d7035b8b9b0fe40a994eaff22f15dc5cb65fb35454c23e9f5ca965e012db566798d4678eef4fc6ac55313a6f2", @ANYRES8=r1, @ANYRES64, @ANYRES8=r0, @ANYRESHEX], 0x1, 0x14fb, &(0x7f0000002a80)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x5, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.970685062s ago: executing program 2 (id=4244): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB='6\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab"], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000003000000040001000500000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000"], 0x7c}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.498169389s ago: executing program 32 (id=4244): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB='6\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab"], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000003000000040001000500000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000"], 0x7c}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.477420299s ago: executing program 0 (id=4247): socket(0x400000000010, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x15d) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0xfff) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 5.875437087s ago: executing program 1 (id=4252): write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.494294563s ago: executing program 0 (id=4253): io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x3, 0x23c}) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x6669cc1368519859, 0x0, {0x9, 0x21, 0x5, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8}}]}}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 4.809619743s ago: executing program 3 (id=4255): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.711781728s ago: executing program 1 (id=4257): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8545}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0xd, 0xe9, &(0x7f0000000400)=""/233, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000500)=[{0x5, 0x5, 0xa}], 0x10, 0x1, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000540)=r2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffff7}]}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002840)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x8}, {0x7, 0x3, 0x801a, 0x6, 0x1, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.601608979s ago: executing program 4 (id=4258): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 3.261207044s ago: executing program 4 (id=4259): openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x4100, 0x0) 3.023985868s ago: executing program 4 (id=4260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0x5e, 0x4, 0x0, 0x8, 0x9, 0x7e, 0x5, 0x1, 0xd5, 0x2, 0xd, 0x0, 0x6, 0x3, 0x3, 0x2, 0x2, 0x1, '\x00', 0x5}) 2.757400191s ago: executing program 4 (id=4261): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.328958008s ago: executing program 0 (id=4262): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16], 0x0) 1.831133514s ago: executing program 4 (id=4263): socket(0x400000000010, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x15d) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0xfff) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 1.485050089s ago: executing program 3 (id=4264): io_uring_setup(0x5bec, &(0x7f0000000040)={0x0, 0x0, 0x100, 0xfffffffe, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000104c, &(0x7f0000000700)=ANY=[@ANYBLOB="787fd34580c3b851d7919ec27e2a54f25b0444d29317e95422c8ad6f58dc523658866778b829702d93c36b05eec8fa599c90daa58df75c4f11a6df03e400b1778e570b59d206130f9c189902d6950277350ef6d34bf836dc9478bd94ba9453693c070b5a66a4a22802a101a983b865f493eac79ddaaafabfb457e71ded03f5b11a0d3f8c4e56fb5a9a0221d03910f32ae62d94621a39581e91b2dd10081c69e0b98f2eb883b1e0eefe97bc8103d533811a1341e218c74c803ecede84e3d986f8a4a4627a7950aa4309a84d7035b8b9b0fe40a994eaff22f15dc5cb65fb35454c23e9f5ca965e012db566798d4678eef4fc6ac55313a6f2", @ANYRES8=r1, @ANYRES64, @ANYRES8=r0, @ANYRESHEX], 0x1, 0x14fb, &(0x7f0000002a80)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x5, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.101274384s ago: executing program 3 (id=4265): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 860.796878ms ago: executing program 3 (id=4266): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000140)={0x0, 0x8, 0x4, "003a6eb7"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x10}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x85, 0x3, "9cf0c2"}}) 860.220018ms ago: executing program 4 (id=4267): socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffff000000000000000000"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x48002) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ishtp_dump\x00', r0, 0x0, 0x9}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 698.12813ms ago: executing program 0 (id=4268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)) r1 = io_uring_setup(0x7767, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 263.874557ms ago: executing program 0 (id=4269): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 202.967677ms ago: executing program 3 (id=4270): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 102.620119ms ago: executing program 0 (id=4271): io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x3, 0x23c}) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x6669cc1368519859, 0x0, {0x9, 0x21, 0x5, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8}}]}}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 0s ago: executing program 3 (id=4272): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, 0x0, &(0x7f00000002c0)) kernel console output (not intermixed with test programs): ning ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 776.690492][ T26] audit: type=1326 audit(1543504176.590:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15079 comm="syz.1.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867db8e969 code=0x7ffc0000 [ 776.753359][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.778461][ T27] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 776.809035][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.869481][ T27] usb 1-1: config 0 descriptor?? [ 776.880893][T15091] loop3: detected capacity change from 0 to 1764 [ 776.888521][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 777.244611][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3832'. [ 777.294280][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 777.311978][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 777.332716][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 777.541314][ T27] pwc: recv_control_msg error -71 req 04 val 1300 [ 777.558957][ T27] pwc: recv_control_msg error -71 req 04 val 1400 [ 777.585600][ T27] pwc: recv_control_msg error -71 req 02 val 2000 [ 777.610862][ T27] pwc: recv_control_msg error -71 req 02 val 2100 [ 777.618633][ T26] audit: type=1326 audit(1543504177.800:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15116 comm="syz.3.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d638e969 code=0x7ffc0000 [ 777.649436][ T27] pwc: recv_control_msg error -71 req 04 val 1500 [ 777.676555][ T27] pwc: recv_control_msg error -71 req 02 val 2500 [ 777.692948][ T27] pwc: recv_control_msg error -71 req 02 val 2400 [ 777.699577][ T26] audit: type=1326 audit(1543504177.800:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15116 comm="syz.3.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d638e969 code=0x7ffc0000 [ 777.731849][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 777.756039][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 777.763307][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 777.770211][ T26] audit: type=1326 audit(1543504177.800:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15116 comm="syz.3.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fb9d638e969 code=0x7ffc0000 [ 777.795606][ T26] audit: type=1326 audit(1543504177.800:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15116 comm="syz.3.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d638e969 code=0x7ffc0000 [ 777.831635][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 777.844982][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 777.866347][ T27] pwc: Registered as video103. [ 777.885653][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 777.897919][ T26] audit: type=1326 audit(1543504177.800:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15116 comm="syz.3.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d638e969 code=0x7ffc0000 [ 777.905247][T15123] loop3: detected capacity change from 0 to 512 [ 777.953338][ T27] usb 1-1: USB disconnect, device number 11 [ 777.966463][T15123] EXT4-fs: Ignoring removed i_version option [ 778.051211][T15123] EXT4-fs: Ignoring removed bh option [ 778.078964][T15127] loop1: detected capacity change from 0 to 256 [ 778.085689][T15123] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 778.164991][T15123] EXT4-fs (loop3): 1 truncate cleaned up [ 778.202727][T15123] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 778.268235][T14104] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 778.433246][T14060] EXT4-fs (loop3): unmounting filesystem. [ 778.631543][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 778.639432][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3847'. [ 778.746339][ T26] audit: type=1326 audit(1543504178.930:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15149 comm="syz.1.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867db8e969 code=0x7ffc0000 [ 778.821630][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 778.844368][ T27] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 778.889110][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 778.913707][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 778.941953][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.970548][ T27] usb 3-1: Product: syz [ 778.980673][ T27] usb 3-1: Manufacturer: syz [ 779.037933][ T27] usb 3-1: SerialNumber: syz [ 779.192961][T15163] loop0: detected capacity change from 0 to 1764 [ 779.259188][ T27] usb 3-1: 0:2 : does not exist [ 779.287718][ T27] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 779.344380][ T27] usb 3-1: USB disconnect, device number 10 [ 779.392472][T15169] loop4: detected capacity change from 0 to 256 [ 779.472446][T12156] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 779.613578][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.790931][T15178] loop0: detected capacity change from 0 to 256 [ 779.862823][T14100] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 779.971539][ T4255] Bluetooth: hci5: command 0x0406 tx timeout [ 779.991708][ T4297] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 780.187836][ T4297] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.218760][ T4297] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 780.246897][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.273992][ T4297] usb 5-1: config 0 descriptor?? [ 780.282854][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3862'. [ 780.325447][ T4297] pwc: Askey VC010 type 2 USB webcam detected. [ 780.732222][ T4297] pwc: recv_control_msg error -32 req 02 val 2b00 [ 780.740040][ T4297] pwc: recv_control_msg error -32 req 02 val 2700 [ 780.772865][ T4297] pwc: recv_control_msg error -32 req 02 val 2c00 [ 780.779993][T15211] loop2: detected capacity change from 0 to 1764 [ 780.982530][ T4297] pwc: recv_control_msg error -71 req 04 val 1300 [ 780.999672][ T4297] pwc: recv_control_msg error -71 req 04 val 1400 [ 781.032433][ T4297] pwc: recv_control_msg error -71 req 02 val 2000 [ 781.061522][ T4297] pwc: recv_control_msg error -71 req 02 val 2100 [ 781.096478][ T4297] pwc: recv_control_msg error -71 req 04 val 1500 [ 781.108275][ T4297] pwc: recv_control_msg error -71 req 02 val 2500 [ 781.127238][ T4297] pwc: recv_control_msg error -71 req 02 val 2400 [ 781.141680][ T4297] pwc: recv_control_msg error -71 req 02 val 2600 [ 781.158517][ T4297] pwc: recv_control_msg error -71 req 02 val 2900 [ 781.160494][T15220] loop1: detected capacity change from 0 to 256 [ 781.176234][ T4297] pwc: recv_control_msg error -71 req 02 val 2800 [ 781.190502][ T4297] pwc: recv_control_msg error -71 req 04 val 1100 [ 781.206689][ T4297] pwc: recv_control_msg error -71 req 04 val 1200 [ 781.223492][ T4297] pwc: Registered as video103. [ 781.235187][ T4297] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 781.270933][ T4297] usb 5-1: USB disconnect, device number 8 [ 781.281483][ T4300] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 781.481497][ T4300] usb 1-1: Using ep0 maxpacket: 16 [ 781.488614][ T4300] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 781.550027][ T4300] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 781.602353][ T4300] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 781.621716][ T4300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.640079][ T4300] usb 1-1: Product: syz [ 781.647650][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 781.647665][ T26] audit: type=1326 audit(1543504181.830:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.3.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d638e969 code=0x7ffc0000 [ 781.677940][ T4300] usb 1-1: Manufacturer: syz [ 781.687423][ T4300] usb 1-1: SerialNumber: syz [ 781.721527][ T26] audit: type=1326 audit(1543504181.830:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.3.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d638e969 code=0x7ffc0000 [ 781.772616][ T26] audit: type=1326 audit(1543504181.830:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.3.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fb9d638e969 code=0x7ffc0000 [ 781.796145][ T26] audit: type=1326 audit(1543504181.830:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.3.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d638e969 code=0x7ffc0000 [ 781.821028][ T26] audit: type=1326 audit(1543504181.830:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.3.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d638e969 code=0x7ffc0000 [ 781.853700][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3879'. [ 781.908624][ T4300] usb 1-1: 0:2 : does not exist [ 781.936503][ T4300] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 782.012568][ T4300] usb 1-1: USB disconnect, device number 12 [ 782.263448][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 782.287635][T15250] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3884'. [ 782.347120][T15254] loop1: detected capacity change from 0 to 1764 [ 782.819424][ T26] audit: type=1326 audit(1543504183.000:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz.4.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b098e969 code=0x7ffc0000 [ 782.891481][ T26] audit: type=1326 audit(1543504183.000:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz.4.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b098e969 code=0x7ffc0000 [ 782.961551][ T26] audit: type=1326 audit(1543504183.000:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz.4.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fc2b098e969 code=0x7ffc0000 [ 783.051577][ T26] audit: type=1326 audit(1543504183.000:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz.4.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b098e969 code=0x7ffc0000 [ 783.136553][ T26] audit: type=1326 audit(1543504183.000:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz.4.3890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b098e969 code=0x7ffc0000 [ 783.189506][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3895'. [ 783.221551][ T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 783.336528][T15292] loop0: detected capacity change from 0 to 1024 [ 783.348249][T15292] EXT4-fs: inline encryption not supported [ 783.355699][T15292] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 783.421080][T15292] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 783.431021][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.431623][T15292] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.459305][ T27] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 783.479776][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.527646][ T27] usb 2-1: config 0 descriptor?? [ 783.534829][T15298] loop4: detected capacity change from 0 to 1764 [ 783.567054][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 783.598747][T12294] EXT4-fs (loop0): unmounting filesystem. [ 783.641773][T15300] loop4: detected capacity change from 0 to 128 [ 783.654301][T15300] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 783.674990][T15300] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 783.681715][ T4798] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 783.735956][T12156] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 783.881645][ T4798] usb 3-1: Using ep0 maxpacket: 16 [ 783.889331][ T4798] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 783.924532][ T4798] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 783.964222][ T4798] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 783.982290][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 783.989581][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 784.011552][ T4798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.028063][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 784.034930][ T4798] usb 3-1: Product: syz [ 784.039451][ T4798] usb 3-1: Manufacturer: syz [ 784.059193][ T27] pwc: recv_control_msg error -71 req 04 val 1000 [ 784.066494][ T4798] usb 3-1: SerialNumber: syz [ 784.091914][ T27] pwc: recv_control_msg error -71 req 04 val 1300 [ 784.121552][ T27] pwc: recv_control_msg error -71 req 04 val 1400 [ 784.136992][ T27] pwc: recv_control_msg error -71 req 02 val 2000 [ 784.162661][ T27] pwc: recv_control_msg error -71 req 02 val 2100 [ 784.188715][ T27] pwc: recv_control_msg error -71 req 04 val 1500 [ 784.211932][ T27] pwc: recv_control_msg error -71 req 02 val 2500 [ 784.220265][ T27] pwc: recv_control_msg error -71 req 02 val 2400 [ 784.242372][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 784.251739][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 784.267147][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 784.284047][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 784.304627][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 784.311774][ T4798] usb 3-1: 0:2 : does not exist [ 784.325270][ T4798] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 784.342471][ T27] pwc: Registered as video103. [ 784.386351][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 784.407636][ T4798] usb 3-1: USB disconnect, device number 11 [ 784.425028][ T27] usb 2-1: USB disconnect, device number 12 [ 784.675193][T12156] udevd[12156]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 784.922830][T15332] loop4: detected capacity change from 0 to 1764 [ 786.031856][ T4798] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 786.111611][ T4297] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 786.223470][ T4798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.244783][ T4798] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 786.264454][ T4798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.295784][ T4798] usb 2-1: config 0 descriptor?? [ 786.301772][ T4297] usb 5-1: Using ep0 maxpacket: 16 [ 786.308971][ T4297] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 786.332712][ T4798] pwc: Askey VC010 type 2 USB webcam detected. [ 786.344244][ T4297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 786.375867][ T4297] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 786.392958][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.411668][ T4297] usb 5-1: Product: syz [ 786.416788][ T4297] usb 5-1: Manufacturer: syz [ 786.441952][ T4297] usb 5-1: SerialNumber: syz [ 786.583550][T15386] loop0: detected capacity change from 0 to 1764 [ 786.659548][ T4297] usb 5-1: 0:2 : does not exist [ 786.678088][ T4297] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 786.714918][ T4798] pwc: recv_control_msg error -32 req 02 val 2b00 [ 786.723504][ T4798] pwc: recv_control_msg error -32 req 02 val 2700 [ 786.752821][ T4798] pwc: recv_control_msg error -32 req 02 val 2c00 [ 786.769083][ T4297] usb 5-1: USB disconnect, device number 9 [ 786.793041][ T4798] pwc: recv_control_msg error -71 req 04 val 1000 [ 786.822689][ T4798] pwc: recv_control_msg error -71 req 04 val 1300 [ 786.840058][ T4798] pwc: recv_control_msg error -71 req 04 val 1400 [ 786.871311][ T4798] pwc: recv_control_msg error -71 req 02 val 2000 [ 786.890504][ T4798] pwc: recv_control_msg error -71 req 02 val 2100 [ 786.903355][ T4798] pwc: recv_control_msg error -71 req 04 val 1500 [ 786.919961][ T4798] pwc: recv_control_msg error -71 req 02 val 2500 [ 786.942939][ T4798] pwc: recv_control_msg error -71 req 02 val 2400 [ 786.960110][ T4798] pwc: recv_control_msg error -71 req 02 val 2600 [ 786.977468][ T4798] pwc: recv_control_msg error -71 req 02 val 2900 [ 786.994703][ T4798] pwc: recv_control_msg error -71 req 02 val 2800 [ 787.022016][ T4798] pwc: recv_control_msg error -71 req 04 val 1100 [ 787.042431][T12156] udevd[12156]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 787.067923][ T4798] pwc: recv_control_msg error -71 req 04 val 1200 [ 787.092466][ T4798] pwc: Registered as video103. [ 787.126597][ T4798] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 787.160863][ T4798] usb 2-1: USB disconnect, device number 13 [ 787.307256][T15405] loop2: detected capacity change from 0 to 256 [ 787.413804][T14104] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 787.654247][T15418] sctp: [Deprecated]: syz.0.3941 (pid 15418) Use of int in maxseg socket option. [ 787.654247][T15418] Use struct sctp_assoc_value instead [ 788.328723][T15436] loop3: detected capacity change from 0 to 1764 [ 788.767403][T15448] loop2: detected capacity change from 0 to 256 [ 788.791564][ T4297] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 788.981600][ T4297] usb 5-1: Using ep0 maxpacket: 16 [ 788.988703][ T4297] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 789.034383][ T4297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.082604][ T4297] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 789.101511][ T4250] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 789.120389][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.150791][ T4297] usb 5-1: Product: syz [ 789.160909][ T4297] usb 5-1: Manufacturer: syz [ 789.176766][ T4297] usb 5-1: SerialNumber: syz [ 789.293585][ T4250] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.311530][ T4250] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 789.335736][ T4250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.356805][ T4250] usb 4-1: config 0 descriptor?? [ 789.393109][ T4297] usb 5-1: 0:2 : does not exist [ 789.400848][ T4250] pwc: Askey VC010 type 2 USB webcam detected. [ 789.430407][ T4297] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 789.482890][ T4297] usb 5-1: USB disconnect, device number 10 [ 789.732562][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.778067][ T4250] pwc: recv_control_msg error -32 req 02 val 2b00 [ 789.788131][ T4250] pwc: recv_control_msg error -32 req 02 val 2700 [ 789.823390][ T4250] pwc: recv_control_msg error -32 req 02 val 2c00 [ 789.834978][ T4250] pwc: recv_control_msg error -71 req 04 val 1000 [ 789.842506][ T4250] pwc: recv_control_msg error -71 req 04 val 1300 [ 789.849436][ T4250] pwc: recv_control_msg error -71 req 04 val 1400 [ 789.886711][ T4250] pwc: recv_control_msg error -71 req 02 val 2000 [ 789.897115][ T4250] pwc: recv_control_msg error -71 req 02 val 2100 [ 789.914600][ T4250] pwc: recv_control_msg error -71 req 04 val 1500 [ 789.926313][ T4250] pwc: recv_control_msg error -71 req 02 val 2500 [ 789.954864][ T4250] pwc: recv_control_msg error -71 req 02 val 2400 [ 789.972003][ T4250] pwc: recv_control_msg error -71 req 02 val 2600 [ 789.982406][ T4250] pwc: recv_control_msg error -71 req 02 val 2900 [ 789.989435][ T4250] pwc: recv_control_msg error -71 req 02 val 2800 [ 790.001923][ T4250] pwc: recv_control_msg error -71 req 04 val 1100 [ 790.011845][ T4250] pwc: recv_control_msg error -71 req 04 val 1200 [ 790.018242][T15474] loop1: detected capacity change from 0 to 2048 [ 790.039006][ T4250] pwc: Registered as video103. [ 790.061949][ T4250] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 790.106948][T15474] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 790.137305][ T4250] usb 4-1: USB disconnect, device number 49 [ 790.143696][T15474] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.268220][T15484] loop4: detected capacity change from 0 to 256 [ 790.284212][T13215] EXT4-fs (loop1): unmounting filesystem. [ 790.633587][T15495] loop3: detected capacity change from 0 to 1764 [ 791.651729][ T27] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 791.773725][T15533] loop2: detected capacity change from 0 to 256 [ 791.861630][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 791.869470][ T27] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 791.911823][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 791.931642][T12155] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 791.937535][ T27] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 791.973619][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.995579][ T27] usb 4-1: Product: syz [ 792.009881][ T27] usb 4-1: Manufacturer: syz [ 792.020764][ T27] usb 4-1: SerialNumber: syz [ 792.161864][T12155] usb 2-1: Using ep0 maxpacket: 8 [ 792.169118][T12155] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 792.188660][T12155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.229469][T12155] usb 2-1: config 0 descriptor?? [ 792.245838][ T27] usb 4-1: 0:2 : does not exist [ 792.260146][ T27] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 792.301528][ T4297] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 792.316217][ T27] usb 4-1: USB disconnect, device number 50 [ 792.493765][ T4297] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.524696][ T4297] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 792.544576][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.565528][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.596672][ T4297] usb 3-1: config 0 descriptor?? [ 792.634555][ T4297] pwc: Askey VC010 type 2 USB webcam detected. [ 792.655822][T12155] hid-generic 0003:1044:7A4D.0004: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.1-1/input0 [ 792.854934][T12155] usb 2-1: USB disconnect, device number 14 [ 793.024622][ T4297] pwc: recv_control_msg error -32 req 02 val 2b00 [ 793.042524][ T4297] pwc: recv_control_msg error -32 req 02 val 2700 [ 793.098347][T15566] loop3: detected capacity change from 0 to 1764 [ 793.268357][ T4297] pwc: recv_control_msg error -71 req 04 val 1000 [ 793.285326][ T4297] pwc: recv_control_msg error -71 req 04 val 1300 [ 793.321607][ T4297] pwc: recv_control_msg error -71 req 04 val 1400 [ 793.358797][ T4297] pwc: recv_control_msg error -71 req 02 val 2000 [ 793.389549][ T4297] pwc: recv_control_msg error -71 req 02 val 2100 [ 793.412764][ T4297] pwc: recv_control_msg error -71 req 04 val 1500 [ 793.423179][ T4297] pwc: recv_control_msg error -71 req 02 val 2500 [ 793.447739][ T4297] pwc: recv_control_msg error -71 req 02 val 2400 [ 793.466906][ T4297] pwc: recv_control_msg error -71 req 02 val 2600 [ 793.503685][T15582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3988'. [ 793.535733][ T4297] pwc: recv_control_msg error -71 req 02 val 2900 [ 793.574251][ T4297] pwc: recv_control_msg error -71 req 02 val 2800 [ 793.610080][ T4297] pwc: recv_control_msg error -71 req 04 val 1100 [ 793.633542][ T4297] pwc: recv_control_msg error -71 req 04 val 1200 [ 793.676839][ T4297] pwc: Registered as video103. [ 793.693977][ T4297] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 793.706400][T15587] loop0: detected capacity change from 0 to 256 [ 793.787794][ T4297] usb 3-1: USB disconnect, device number 12 [ 794.411611][ T27] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 794.514697][T15613] loop2: detected capacity change from 0 to 1764 [ 794.601584][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 794.609335][ T27] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 794.621915][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 794.644995][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 794.661471][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.669530][ T27] usb 2-1: Product: syz [ 794.681713][ T27] usb 2-1: Manufacturer: syz [ 794.686387][ T27] usb 2-1: SerialNumber: syz [ 794.702084][T15617] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4004'. [ 794.844884][T15623] loop0: detected capacity change from 0 to 256 [ 794.898791][T14100] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 794.910123][ T27] usb 2-1: 0:2 : does not exist [ 794.945582][ T27] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 795.002555][ T27] usb 2-1: USB disconnect, device number 15 [ 795.033226][T15626] loop4: detected capacity change from 0 to 1024 [ 795.081492][T12155] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 795.136653][T15626] __quota_error: 9 callbacks suppressed [ 795.136672][T15626] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 795.182611][T15626] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 795.193686][T15626] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.4009: Failed to acquire dquot type 0 [ 795.241585][T15626] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 795.271773][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 795.293133][T15626] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4009: corrupted inode contents [ 795.309950][T15626] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #13: comm syz.4.4009: mark_inode_dirty error [ 795.327595][T15626] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4009: corrupted inode contents [ 795.345382][T12155] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.353644][T15626] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.4009: mark_inode_dirty error [ 795.365166][T12155] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 795.386266][T12155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.388861][T15626] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4009: corrupted inode contents [ 795.413584][T15626] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 795.431505][T15626] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4009: corrupted inode contents [ 795.446379][T12155] usb 3-1: config 0 descriptor?? [ 795.469595][T12155] pwc: Askey VC010 type 2 USB webcam detected. [ 795.475414][T15626] EXT4-fs error (device loop4): ext4_truncate:4312: inode #13: comm syz.4.4009: mark_inode_dirty error [ 795.494791][T15626] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 795.511335][T15626] EXT4-fs (loop4): 1 truncate cleaned up [ 795.517546][T15626] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 795.681945][T15626] EXT4-fs: Ignoring removed orlov option [ 795.688223][T15626] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 795.761534][T15626] EXT4-fs (loop4): can't enable nombcache during remount [ 795.861099][T12155] pwc: recv_control_msg error -32 req 02 val 2b00 [ 795.872226][T12155] pwc: recv_control_msg error -32 req 02 val 2700 [ 795.957977][T12832] EXT4-fs (loop4): unmounting filesystem. [ 796.100941][T12155] pwc: recv_control_msg error -71 req 04 val 1000 [ 796.131492][T12155] pwc: recv_control_msg error -71 req 04 val 1300 [ 796.158890][T12155] pwc: recv_control_msg error -71 req 04 val 1400 [ 796.179776][T12155] pwc: recv_control_msg error -71 req 02 val 2000 [ 796.203451][T12155] pwc: recv_control_msg error -71 req 02 val 2100 [ 796.214938][T15652] loop3: detected capacity change from 0 to 1764 [ 796.234000][T12155] pwc: recv_control_msg error -71 req 04 val 1500 [ 796.248233][T12155] pwc: recv_control_msg error -71 req 02 val 2500 [ 796.264530][T12155] pwc: recv_control_msg error -71 req 02 val 2400 [ 796.279552][T12155] pwc: recv_control_msg error -71 req 02 val 2600 [ 796.296224][T12155] pwc: recv_control_msg error -71 req 02 val 2900 [ 796.315632][T12155] pwc: recv_control_msg error -71 req 02 val 2800 [ 796.340449][T12155] pwc: recv_control_msg error -71 req 04 val 1100 [ 796.379299][T12155] pwc: recv_control_msg error -71 req 04 val 1200 [ 796.408368][T12155] pwc: Registered as video103. [ 796.424278][T12155] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 796.460938][T12155] usb 3-1: USB disconnect, device number 13 [ 796.469000][T15660] loop3: detected capacity change from 0 to 256 [ 797.286471][T15680] loop2: detected capacity change from 0 to 1024 [ 797.413365][T15680] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 797.461698][ T4297] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 797.482600][T15680] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 797.531554][T15680] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.4027: Failed to acquire dquot type 0 [ 797.608654][T15680] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 797.650074][T15680] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #13: comm syz.2.4027: corrupted inode contents [ 797.662242][ T4297] usb 1-1: Using ep0 maxpacket: 16 [ 797.669236][ T4297] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 797.690616][ T4297] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 797.709905][T15680] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #13: comm syz.2.4027: mark_inode_dirty error [ 797.724227][ T4297] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 797.743725][T15680] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #13: comm syz.2.4027: corrupted inode contents [ 797.756381][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.771662][ T4297] usb 1-1: Product: syz [ 797.775902][ T4297] usb 1-1: Manufacturer: syz [ 797.796323][T15680] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #13: comm syz.2.4027: mark_inode_dirty error [ 797.841456][ T4297] usb 1-1: SerialNumber: syz [ 797.868881][T15680] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #13: comm syz.2.4027: corrupted inode contents [ 797.894004][T15680] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 797.922153][T15680] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #13: comm syz.2.4027: corrupted inode contents [ 797.926953][T15692] loop4: detected capacity change from 0 to 256 [ 797.971303][T15680] EXT4-fs error (device loop2): ext4_truncate:4312: inode #13: comm syz.2.4027: mark_inode_dirty error [ 798.002947][T15680] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 798.034814][T15680] EXT4-fs (loop2): 1 truncate cleaned up [ 798.040581][T15680] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 798.088167][ T4297] usb 1-1: 0:2 : does not exist [ 798.104278][ T4297] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 798.218297][ T4297] usb 1-1: USB disconnect, device number 13 [ 798.241806][T15680] EXT4-fs: Ignoring removed orlov option [ 798.247614][T15680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 798.281575][T15680] EXT4-fs (loop2): can't enable nombcache during remount [ 798.328551][T15694] loop3: detected capacity change from 0 to 1764 [ 798.395282][T12021] EXT4-fs (loop2): unmounting filesystem. [ 798.473111][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 798.601521][ T4294] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 798.691766][ T4255] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 798.702781][ T4255] Bluetooth: hci2: Injecting HCI hardware error event [ 798.714232][ T4265] Bluetooth: hci2: hardware error 0x00 [ 798.813352][ T4294] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.826355][ T4294] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 798.835731][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.854263][ T4294] usb 5-1: config 0 descriptor?? [ 798.870756][ T4294] pwc: Askey VC010 type 2 USB webcam detected. [ 798.982747][T15708] loop2: detected capacity change from 0 to 4096 [ 799.011685][ T27] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 799.171902][T15708] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 799.182660][T15708] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 799.205389][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.218944][ T27] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 799.230033][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.274892][ T4294] pwc: recv_control_msg error -32 req 02 val 2b00 [ 799.283303][ T4294] pwc: recv_control_msg error -32 req 02 val 2700 [ 799.299424][ T27] usb 2-1: config 0 descriptor?? [ 799.315972][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 799.491516][ T4294] pwc: recv_control_msg error -71 req 04 val 1000 [ 799.499490][ T4294] pwc: recv_control_msg error -71 req 04 val 1300 [ 799.508658][ T4294] pwc: recv_control_msg error -71 req 04 val 1400 [ 799.521279][ T4294] pwc: recv_control_msg error -71 req 02 val 2000 [ 799.528699][ T4294] pwc: recv_control_msg error -71 req 02 val 2100 [ 799.543839][ T4294] pwc: recv_control_msg error -71 req 04 val 1500 [ 799.550867][ T4294] pwc: recv_control_msg error -71 req 02 val 2500 [ 799.558007][ T4294] pwc: recv_control_msg error -71 req 02 val 2400 [ 799.565210][ T4294] pwc: recv_control_msg error -71 req 02 val 2600 [ 799.572289][ T4294] pwc: recv_control_msg error -71 req 02 val 2900 [ 799.579297][ T4294] pwc: recv_control_msg error -71 req 02 val 2800 [ 799.586819][ T4294] pwc: recv_control_msg error -71 req 04 val 1100 [ 799.608648][ T4294] pwc: recv_control_msg error -71 req 04 val 1200 [ 799.637243][ T4294] pwc: Registered as video103. [ 799.648710][ T4294] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 799.713275][ T4294] usb 5-1: USB disconnect, device number 11 [ 799.722184][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 799.731611][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 799.762255][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 799.778465][T15720] loop3: detected capacity change from 0 to 256 [ 799.781264][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 799.812937][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 799.820427][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 799.842624][ T27] pwc: recv_control_msg error -32 req 02 val 2000 [ 799.860075][T15722] loop0: detected capacity change from 0 to 1024 [ 799.861938][ T27] pwc: recv_control_msg error -32 req 02 val 2100 [ 799.922779][T15722] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 799.938450][T15722] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 799.961592][ T4798] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 800.015117][T15722] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.4045: lblock 3 mapped to illegal pblock 3 (length 13) [ 800.036837][T15722] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 800.096373][ T27] pwc: recv_control_msg error -71 req 02 val 2500 [ 800.107971][ T27] pwc: recv_control_msg error -71 req 02 val 2400 [ 800.121194][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 800.130278][T15728] loop3: detected capacity change from 0 to 1024 [ 800.139033][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 800.145917][ T4798] usb 3-1: Using ep0 maxpacket: 16 [ 800.152273][T15722] EXT4-fs (loop0): This should not happen!! Data will be lost [ 800.152273][T15722] [ 800.153466][ T4798] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 800.181514][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 800.191300][T15731] loop4: detected capacity change from 0 to 1764 [ 800.198384][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 800.208842][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 800.229406][ T4798] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 800.238314][T15728] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 800.249446][ T27] pwc: Registered as video103. [ 800.260193][T15728] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 800.301677][T15728] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.4046: Failed to acquire dquot type 0 [ 800.322538][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 800.333915][ T4798] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 800.365425][T12294] EXT4-fs (loop0): unmounting filesystem. [ 800.392360][ T27] usb 2-1: USB disconnect, device number 16 [ 800.405608][ T4798] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 800.417788][T15728] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 800.443923][ T4798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 800.452247][ T4798] usb 3-1: SerialNumber: syz [ 800.458025][T15728] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #13: comm syz.3.4046: corrupted inode contents [ 800.486627][T15715] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 800.511692][T15728] EXT4-fs error (device loop3): ext4_dirty_inode:6118: inode #13: comm syz.3.4046: mark_inode_dirty error [ 800.557625][T15728] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #13: comm syz.3.4046: corrupted inode contents [ 800.591997][T15728] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #13: comm syz.3.4046: mark_inode_dirty error [ 800.630119][T15728] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #13: comm syz.3.4046: corrupted inode contents [ 800.664552][T15728] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 800.684899][T15728] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #13: comm syz.3.4046: corrupted inode contents [ 800.711954][T15728] EXT4-fs error (device loop3): ext4_truncate:4312: inode #13: comm syz.3.4046: mark_inode_dirty error [ 800.726640][ T4798] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 800.752234][T15728] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 800.771017][ T4798] usb 3-1: USB disconnect, device number 14 [ 800.819286][T15728] EXT4-fs (loop3): 1 truncate cleaned up [ 800.833536][T15728] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 800.851647][ T4265] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 800.901739][T12155] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 801.005882][T15728] EXT4-fs: Ignoring removed orlov option [ 801.037916][T15728] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 801.057115][T15728] EXT4-fs (loop3): can't enable nombcache during remount [ 801.121521][T12155] usb 5-1: Using ep0 maxpacket: 16 [ 801.132276][T12155] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 801.161455][T12155] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 801.184662][T12155] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 801.207542][T14060] EXT4-fs (loop3): unmounting filesystem. [ 801.213443][T12155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.241430][T12155] usb 5-1: Product: syz [ 801.251824][T12155] usb 5-1: Manufacturer: syz [ 801.270485][T12155] usb 5-1: SerialNumber: syz [ 801.473454][T15745] loop1: detected capacity change from 0 to 4096 [ 801.495742][T12155] usb 5-1: 0:2 : does not exist [ 801.512945][T12155] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 801.566731][T12155] usb 5-1: USB disconnect, device number 12 [ 801.669989][T15745] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 801.708295][T15745] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 801.800733][T15755] loop3: detected capacity change from 0 to 256 [ 801.831779][T12156] udevd[12156]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 801.995519][T15763] loop1: detected capacity change from 0 to 512 [ 802.003915][T15763] EXT4-fs: Ignoring removed mblk_io_submit option [ 802.051345][T15763] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.4059: inode #13: comm syz.1.4059: iget: illegal inode # [ 802.081494][ T4798] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 802.112997][T15763] EXT4-fs (loop1): Remounting filesystem read-only [ 802.119790][T15763] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.4059: couldn't read orphan inode 13 (err -117) [ 802.164135][T15767] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4061'. [ 802.172928][T15763] EXT4-fs (loop1): Remounting filesystem read-only [ 802.179685][T15763] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 802.219518][T15768] loop3: detected capacity change from 0 to 1764 [ 802.247755][T15763] loop7: detected capacity change from 0 to 16384 [ 802.284050][ T4798] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.321615][ T4798] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 802.330769][ T4798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.380001][ T4798] usb 1-1: config 0 descriptor?? [ 802.406214][ T4798] pwc: Askey VC010 type 2 USB webcam detected. [ 802.521577][T15771] loop7: detected capacity change from 16384 to 0 [ 802.578268][T15775] loop3: detected capacity change from 0 to 128 [ 802.640634][T15775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 802.704818][T15775] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 802.715009][T13215] EXT4-fs (loop1): unmounting filesystem. [ 802.736799][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.804104][ T4798] pwc: recv_control_msg error -32 req 02 val 2b00 [ 802.814294][ T4798] pwc: recv_control_msg error -32 req 02 val 2700 [ 802.856679][T15775] sctp: [Deprecated]: syz.3.4063 (pid 15775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 802.856679][T15775] Use struct sctp_sack_info instead [ 802.895171][T15780] IPv6: Can't replace route, no match found [ 802.964557][T15775] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 18: comm syz.3.4063: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 803.022904][ T4798] pwc: recv_control_msg error -71 req 04 val 1000 [ 803.035005][ T4798] pwc: recv_control_msg error -71 req 04 val 1300 [ 803.081680][ T4798] pwc: recv_control_msg error -71 req 04 val 1400 [ 803.106348][ T4798] pwc: recv_control_msg error -71 req 02 val 2000 [ 803.111528][T15775] EXT4-fs (loop3): Remounting filesystem read-only [ 803.150364][T15775] EXT4-fs error (device loop3) in do_split:2095: Corrupt filesystem [ 803.161664][ T4798] pwc: recv_control_msg error -71 req 02 val 2100 [ 803.169521][ T4798] pwc: recv_control_msg error -71 req 04 val 1500 [ 803.192026][T15775] EXT4-fs (loop3): Remounting filesystem read-only [ 803.198859][ T4798] pwc: recv_control_msg error -71 req 02 val 2500 [ 803.212686][ T4798] pwc: recv_control_msg error -71 req 02 val 2400 [ 803.224189][T15781] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 18: comm syz.3.4063: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 803.252641][ T4798] pwc: recv_control_msg error -71 req 02 val 2600 [ 803.269466][ T4798] pwc: recv_control_msg error -71 req 02 val 2900 [ 803.291070][ T4798] pwc: recv_control_msg error -71 req 02 val 2800 [ 803.305669][ T4798] pwc: recv_control_msg error -71 req 04 val 1100 [ 803.325625][ T4798] pwc: recv_control_msg error -71 req 04 val 1200 [ 803.366661][ T4798] pwc: Registered as video103. [ 803.373399][T15781] EXT4-fs (loop3): Remounting filesystem read-only [ 803.380606][ T4798] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 803.439397][ T4798] usb 1-1: USB disconnect, device number 14 [ 803.446894][T15781] EXT4-fs error (device loop3) in do_split:2095: Corrupt filesystem [ 803.517530][T15781] EXT4-fs (loop3): Remounting filesystem read-only [ 803.593081][T15797] loop2: detected capacity change from 0 to 256 [ 803.650807][T15792] loop4: detected capacity change from 0 to 4096 [ 803.795414][T14060] EXT4-fs (loop3): unmounting filesystem. [ 803.889944][T15792] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 803.932165][T15792] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 804.161635][T15734] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 804.241675][T15805] loop3: detected capacity change from 0 to 1764 [ 804.363610][T15734] usb 1-1: Using ep0 maxpacket: 16 [ 804.382829][T15734] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 804.421521][T15734] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 804.454336][T15734] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 804.481614][T15734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.506910][T15734] usb 1-1: Product: syz [ 804.530502][T15814] loop3: detected capacity change from 0 to 512 [ 804.537126][T15734] usb 1-1: Manufacturer: syz [ 804.543580][T15734] usb 1-1: SerialNumber: syz [ 804.566446][T15814] EXT4-fs: Ignoring removed mblk_io_submit option [ 804.592878][T15814] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.4078: inode #13: comm syz.3.4078: iget: illegal inode # [ 804.606333][T15814] EXT4-fs (loop3): Remounting filesystem read-only [ 804.665625][T15814] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4078: couldn't read orphan inode 13 (err -117) [ 804.745883][T15814] EXT4-fs (loop3): Remounting filesystem read-only [ 804.761592][T15814] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 804.776541][T15734] usb 1-1: 0:2 : does not exist [ 804.811616][T15734] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 804.840621][T15734] usb 1-1: USB disconnect, device number 15 [ 804.890137][T15818] loop4: detected capacity change from 0 to 64 [ 804.955838][T14060] EXT4-fs (loop3): unmounting filesystem. [ 805.092649][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 805.235319][ T26] audit: type=1326 audit(1543504205.420:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.1.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867db8e969 code=0x7ffc0000 [ 805.362154][ T26] audit: type=1326 audit(1543504205.420:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.1.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f867db8e969 code=0x7ffc0000 [ 805.443019][ T26] audit: type=1326 audit(1543504205.420:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.1.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867db8e969 code=0x7ffc0000 [ 805.484201][T15833] loop2: detected capacity change from 0 to 256 [ 805.512281][ T26] audit: type=1326 audit(1543504205.420:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.1.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867db8e969 code=0x7ffc0000 [ 805.583651][T12156] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 805.611481][ T4300] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 805.772660][T15841] loop1: detected capacity change from 0 to 1764 [ 805.813384][ T4300] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.838012][ T4300] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 805.902858][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.936965][ T4300] usb 5-1: config 0 descriptor?? [ 805.974825][ T4300] pwc: Askey VC010 type 2 USB webcam detected. [ 805.997850][T15847] loop2: detected capacity change from 0 to 512 [ 806.033189][T15847] EXT4-fs: Ignoring removed mblk_io_submit option [ 806.102927][T15847] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.4093: inode #13: comm syz.2.4093: iget: illegal inode # [ 806.143241][T15847] EXT4-fs (loop2): Remounting filesystem read-only [ 806.150255][T15847] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.4093: couldn't read orphan inode 13 (err -117) [ 806.183500][T15847] EXT4-fs (loop2): Remounting filesystem read-only [ 806.190096][T15847] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 806.470818][T15851] loop1: detected capacity change from 0 to 40427 [ 806.478892][T15851] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 806.486748][T15851] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 806.497596][T15851] F2FS-fs (loop1): invalid crc value [ 806.510423][T15851] F2FS-fs (loop1): Found nat_bits in checkpoint [ 806.553114][ T4300] pwc: recv_control_msg error -32 req 02 val 2b00 [ 806.561703][ T4300] pwc: recv_control_msg error -32 req 02 val 2700 [ 806.568198][T15851] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 806.575330][T15851] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 806.607193][T12021] EXT4-fs (loop2): unmounting filesystem. [ 806.785781][ T4300] pwc: recv_control_msg error -71 req 04 val 1000 [ 806.803640][ T4300] pwc: recv_control_msg error -71 req 04 val 1300 [ 806.819342][ T4300] pwc: recv_control_msg error -71 req 04 val 1400 [ 806.833759][ T4300] pwc: recv_control_msg error -71 req 02 val 2000 [ 806.850529][ T4300] pwc: recv_control_msg error -71 req 02 val 2100 [ 806.885544][ T4300] pwc: recv_control_msg error -71 req 04 val 1500 [ 806.901575][ T4300] pwc: recv_control_msg error -71 req 02 val 2500 [ 806.916258][ T4300] pwc: recv_control_msg error -71 req 02 val 2400 [ 806.930797][ T4300] pwc: recv_control_msg error -71 req 02 val 2600 [ 806.945637][ T4300] pwc: recv_control_msg error -71 req 02 val 2900 [ 806.959310][ T4300] pwc: recv_control_msg error -71 req 02 val 2800 [ 806.975531][ T4300] pwc: recv_control_msg error -71 req 04 val 1100 [ 806.985397][ T4300] pwc: recv_control_msg error -71 req 04 val 1200 [ 806.997888][ T4300] pwc: Registered as video103. [ 807.014061][ T4300] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 807.050740][ T4300] usb 5-1: USB disconnect, device number 13 [ 807.141755][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 807.149534][ T4798] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 807.256089][T15868] loop3: detected capacity change from 0 to 8 [ 807.341646][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 807.352263][ T4798] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.373926][ T27] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 807.393907][ T4798] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 807.405154][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 807.414968][T15734] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 807.434076][ T4798] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 807.445318][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.461462][ T4798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 807.469701][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.487366][ T4798] usb 3-1: SerialNumber: syz [ 807.493042][ T27] usb 1-1: Product: syz [ 807.497252][ T27] usb 1-1: Manufacturer: syz [ 807.505097][ T27] usb 1-1: SerialNumber: syz [ 807.621511][T15734] usb 2-1: Using ep0 maxpacket: 16 [ 807.630100][T15734] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 807.661791][T15734] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 807.685442][T15734] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.714323][T15734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.734714][ T27] usb 1-1: 0:2 : does not exist [ 807.739677][ T27] usb 1-1: unit 14 not found! [ 807.763029][T15734] usb 2-1: Product: syz [ 807.769875][ T4798] usb 3-1: 0:2 : does not exist [ 807.779676][ T27] usb 1-1: USB disconnect, device number 16 [ 807.787400][T15734] usb 2-1: Manufacturer: syz [ 807.797020][ T4798] usb 3-1: USB disconnect, device number 15 [ 807.803235][T15734] usb 2-1: SerialNumber: syz [ 807.906547][T15878] loop4: detected capacity change from 0 to 256 [ 808.027947][T15734] usb 2-1: 0:2 : does not exist [ 808.043495][T12156] udevd[12156]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.045038][T15734] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 808.110200][T15734] usb 2-1: USB disconnect, device number 17 [ 808.169850][T15881] loop3: detected capacity change from 0 to 1764 [ 808.289303][T15883] loop4: detected capacity change from 0 to 1024 [ 808.302965][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 808.352871][T15883] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 808.363023][T15739] udevd[15739]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.388525][T15883] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 808.411908][T15883] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.4106: Failed to acquire dquot type 0 [ 808.480193][T15883] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 808.498416][T15889] loop0: detected capacity change from 0 to 512 [ 808.507014][T15889] EXT4-fs: Ignoring removed mblk_io_submit option [ 808.529570][T15891] loop3: detected capacity change from 0 to 512 [ 808.548918][T15889] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.4107: inode #13: comm syz.0.4107: iget: illegal inode # [ 808.563006][T15883] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4106: corrupted inode contents [ 808.591636][T15883] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #13: comm syz.4.4106: mark_inode_dirty error [ 808.605962][T15889] EXT4-fs (loop0): Remounting filesystem read-only [ 808.618012][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.618059][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.633565][T15883] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4106: corrupted inode contents [ 808.661629][T15889] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.4107: couldn't read orphan inode 13 (err -117) [ 808.681860][T15883] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.4106: mark_inode_dirty error [ 808.691672][T15889] EXT4-fs (loop0): Remounting filesystem read-only [ 808.700675][T15891] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.4109: casefold flag without casefold feature [ 808.706103][T15883] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4106: corrupted inode contents [ 808.726664][T15883] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 808.735811][T15883] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4106: corrupted inode contents [ 808.738638][T15891] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4109: couldn't read orphan inode 15 (err -117) [ 808.760551][T15734] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 808.761505][T15889] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 808.769615][T15891] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 808.787191][T15883] EXT4-fs error (device loop4): ext4_truncate:4312: inode #13: comm syz.4.4106: mark_inode_dirty error [ 808.800977][T15883] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 808.812630][T15883] EXT4-fs (loop4): 1 truncate cleaned up [ 808.818336][T15883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 808.856534][T15883] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 808.941803][T15734] usb 3-1: Using ep0 maxpacket: 32 [ 808.945493][T12832] EXT4-fs (loop4): unmounting filesystem. [ 808.949972][T15734] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 808.981717][T15734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.030598][T15734] usb 3-1: config 0 descriptor?? [ 809.115809][T12294] EXT4-fs (loop0): unmounting filesystem. [ 809.159307][T14060] EXT4-fs (loop3): unmounting filesystem. [ 809.257401][T15734] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 809.295222][T15734] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 809.320816][T15734] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 809.335515][T15734] usb 3-1: media controller created [ 809.381554][ T4301] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 809.388832][T15734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 809.464653][T15734] az6027: usb out operation failed. (-71) [ 809.481639][T15734] az6027: usb out operation failed. (-71) [ 809.487661][T15734] stb0899_attach: Driver disabled by Kconfig [ 809.501434][T15734] az6027: no front-end attached [ 809.501434][T15734] [ 809.532307][T15734] az6027: usb out operation failed. (-71) [ 809.538176][T15734] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 809.564259][ T4301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.574012][T15734] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 809.606066][ T4301] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 809.621481][ T4301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.623681][T15734] dvb-usb: schedule remote query interval to 400 msecs. [ 809.647523][ T4301] usb 5-1: config 0 descriptor?? [ 809.662692][T15734] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 809.677570][ T4301] pwc: Askey VC010 type 2 USB webcam detected. [ 809.709461][T15912] loop3: detected capacity change from 0 to 512 [ 809.715675][T15734] usb 3-1: USB disconnect, device number 16 [ 809.723176][T15912] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 809.754389][T15915] loop1: detected capacity change from 0 to 256 [ 809.781267][T15912] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.4116: bg 0: block 104: invalid block bitmap [ 809.803328][T15912] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 809.813282][T15912] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.4116: invalid indirect mapped block 1 (level 1) [ 809.830358][T15912] EXT4-fs (loop3): 1 truncate cleaned up [ 809.838450][T15912] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 809.903182][T15734] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 809.965331][T14060] EXT4-fs (loop3): unmounting filesystem. [ 810.075040][ T4301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 810.091785][ T4301] pwc: recv_control_msg error -32 req 02 val 2700 [ 810.184700][T15919] loop3: detected capacity change from 0 to 1764 [ 810.313261][ T4301] pwc: recv_control_msg error -71 req 04 val 1000 [ 810.340200][ T4301] pwc: recv_control_msg error -71 req 04 val 1300 [ 810.381109][ T4301] pwc: recv_control_msg error -71 req 04 val 1400 [ 810.428854][ T4301] pwc: recv_control_msg error -71 req 02 val 2000 [ 810.481613][ T4301] pwc: recv_control_msg error -71 req 02 val 2100 [ 810.513499][ T4301] pwc: recv_control_msg error -71 req 04 val 1500 [ 810.541575][ T4301] pwc: recv_control_msg error -71 req 02 val 2500 [ 810.571328][ T4301] pwc: recv_control_msg error -71 req 02 val 2400 [ 810.588899][T15922] loop2: detected capacity change from 0 to 40427 [ 810.601603][T15922] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 810.609436][T15922] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 810.619859][T15922] F2FS-fs (loop2): invalid crc value [ 810.630705][ T4301] pwc: recv_control_msg error -71 req 02 val 2600 [ 810.658260][ T4301] pwc: recv_control_msg error -71 req 02 val 2900 [ 810.667878][T15922] F2FS-fs (loop2): Found nat_bits in checkpoint [ 810.687547][ T4301] pwc: recv_control_msg error -71 req 02 val 2800 [ 810.701884][ T4301] pwc: recv_control_msg error -71 req 04 val 1100 [ 810.715905][T15922] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 810.723223][ T4301] pwc: recv_control_msg error -71 req 04 val 1200 [ 810.729722][T15922] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 810.749223][ T4301] pwc: Registered as video103. [ 810.757482][ T4301] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 810.771756][ T4296] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 810.789504][T15922] syz.2.4119: attempt to access beyond end of device [ 810.789504][T15922] loop2: rw=2049, sector=77824, nr_sectors = 184 limit=40427 [ 810.811052][ T4301] usb 5-1: USB disconnect, device number 14 [ 810.891824][T15734] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 810.928859][T12021] syz-executor: attempt to access beyond end of device [ 810.928859][T12021] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 810.945623][ T4250] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 810.959343][T15934] loop4: detected capacity change from 0 to 1024 [ 810.967769][ T7962] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 810.994764][ T7962] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 811.005855][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.021158][T15934] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 811.041494][ T4296] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 811.050596][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.056537][T15934] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 811.082295][T15734] usb 2-1: Using ep0 maxpacket: 16 [ 811.087595][T15934] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.4122: Failed to acquire dquot type 0 [ 811.112331][T15734] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 811.124523][ T4296] usb 1-1: config 0 descriptor?? [ 811.146666][T15934] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 811.151665][ T4250] usb 4-1: Using ep0 maxpacket: 16 [ 811.163190][T15734] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 811.184285][T15934] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4122: corrupted inode contents [ 811.202464][ T4250] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 811.205126][T15934] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #13: comm syz.4.4122: mark_inode_dirty error [ 811.221560][ T4250] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 811.236068][T15934] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4122: corrupted inode contents [ 811.248720][T15734] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 811.258311][T15734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.268226][T15934] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.4122: mark_inode_dirty error [ 811.280312][T15734] usb 2-1: Product: syz [ 811.285392][ T4250] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 811.286026][T15934] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4122: corrupted inode contents [ 811.307302][ T4250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.308239][T15734] usb 2-1: Manufacturer: syz [ 811.320600][T15734] usb 2-1: SerialNumber: syz [ 811.325629][ T4250] usb 4-1: Product: syz [ 811.327458][T15934] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 811.329900][ T4250] usb 4-1: Manufacturer: syz [ 811.329921][ T4250] usb 4-1: SerialNumber: syz [ 811.386554][T15934] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4122: corrupted inode contents [ 811.419664][T15934] EXT4-fs error (device loop4): ext4_truncate:4312: inode #13: comm syz.4.4122: mark_inode_dirty error [ 811.451588][T15934] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 811.472263][T15934] EXT4-fs (loop4): 1 truncate cleaned up [ 811.478042][T15934] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 811.552708][ T4250] usb 4-1: 0:2 : does not exist [ 811.565626][T15934] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 811.565784][ T4250] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 811.575293][ T4296] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 811.615128][T15734] usb 2-1: 0:2 : does not exist [ 811.620247][T15734] usb 2-1: unit 14 not found! [ 811.625856][ T4250] usb 4-1: USB disconnect, device number 51 [ 811.644918][ T4296] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input27 [ 811.701812][T15734] usb 2-1: USB disconnect, device number 18 [ 811.754575][T12832] EXT4-fs (loop4): unmounting filesystem. [ 811.785250][T15937] loop2: detected capacity change from 0 to 512 [ 811.852822][ T4296] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 811.877800][T15937] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.4123: casefold flag without casefold feature [ 811.902018][T15937] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.4123: couldn't read orphan inode 15 (err -117) [ 811.932224][T15937] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 811.942622][T12156] udevd[12156]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 811.959220][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 812.145515][T15942] loop4: detected capacity change from 0 to 512 [ 812.219956][T15942] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 812.220056][T15942] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.327062][T12832] EXT4-fs (loop4): unmounting filesystem. [ 812.359959][T15947] loop3: detected capacity change from 0 to 4096 [ 812.499511][T12021] EXT4-fs (loop2): unmounting filesystem. [ 812.771540][ T4250] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 812.804136][T15958] loop3: detected capacity change from 0 to 256 [ 812.854140][T14100] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 812.976723][ T4250] usb 5-1: config 145 has an invalid interface number: 253 but max is 0 [ 812.988702][ T4250] usb 5-1: config 145 has no interface number 0 [ 812.998698][T15961] loop1: detected capacity change from 0 to 1764 [ 813.007318][ T4250] usb 5-1: config 145 interface 253 has no altsetting 0 [ 813.026529][ T4250] usb 5-1: string descriptor 0 read error: -22 [ 813.038685][ T4250] usb 5-1: New USB device found, idVendor=0499, idProduct=1015, bcdDevice= 9.28 [ 813.060051][ T4250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.182366][T15963] loop1: detected capacity change from 0 to 256 [ 813.188293][ T4250] snd-usb-audio: probe of 5-1:145.253 failed with error -2 [ 813.265308][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:145.253/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 813.315683][ T4300] usb 5-1: USB disconnect, device number 15 [ 813.481443][ T4250] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 813.529000][T15969] loop1: detected capacity change from 0 to 1024 [ 813.604881][T15969] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 813.631167][T15734] usb 1-1: USB disconnect, device number 17 [ 813.631945][T15969] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 813.690800][T15969] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.4137: Failed to acquire dquot type 0 [ 813.704417][ T4250] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.730896][ T4250] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 813.766371][T15969] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 813.778268][T15975] loop0: detected capacity change from 0 to 512 [ 813.789606][ T4250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.808916][ T4250] usb 4-1: config 0 descriptor?? [ 813.817980][T15975] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.4139: casefold flag without casefold feature [ 813.838077][T15969] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #13: comm syz.1.4137: corrupted inode contents [ 813.862346][T15969] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #13: comm syz.1.4137: mark_inode_dirty error [ 813.871356][T15975] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.4139: couldn't read orphan inode 15 (err -117) [ 813.885945][ T27] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 813.907943][ T4250] pwc: Askey VC010 type 2 USB webcam detected. [ 813.908355][T15969] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #13: comm syz.1.4137: corrupted inode contents [ 813.926638][T15975] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 813.936213][T15969] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.4137: mark_inode_dirty error [ 813.952362][T15969] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #13: comm syz.1.4137: corrupted inode contents [ 813.992470][T15969] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 814.004128][T15969] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #13: comm syz.1.4137: corrupted inode contents [ 814.016874][T15969] EXT4-fs error (device loop1): ext4_truncate:4312: inode #13: comm syz.1.4137: mark_inode_dirty error [ 814.037858][T15969] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 814.058279][T15969] EXT4-fs (loop1): 1 truncate cleaned up [ 814.070179][T15969] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 814.076859][T15978] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4140'. [ 814.079295][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 814.131883][ T27] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 814.151707][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 814.162163][T15969] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 814.182057][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 814.191199][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.211755][ T27] usb 3-1: Product: syz [ 814.215993][ T27] usb 3-1: Manufacturer: syz [ 814.262339][ T27] usb 3-1: SerialNumber: syz [ 814.299476][T13215] EXT4-fs (loop1): unmounting filesystem. [ 814.307083][ T4250] pwc: recv_control_msg error -32 req 02 val 2b00 [ 814.314338][T12294] EXT4-fs (loop0): unmounting filesystem. [ 814.322311][ T4250] pwc: recv_control_msg error -32 req 02 val 2700 [ 814.490048][ T27] usb 3-1: 0:2 : does not exist [ 814.502752][ T27] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 814.528048][T15982] loop0: detected capacity change from 0 to 4096 [ 814.536137][ T4250] pwc: recv_control_msg error -71 req 04 val 1000 [ 814.548483][ T27] usb 3-1: USB disconnect, device number 17 [ 814.559561][ T4250] pwc: recv_control_msg error -71 req 04 val 1300 [ 814.576035][ T4250] pwc: recv_control_msg error -71 req 04 val 1400 [ 814.623647][ T4250] pwc: recv_control_msg error -71 req 02 val 2000 [ 814.631688][T12155] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 814.640298][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 814.656604][ T4250] pwc: recv_control_msg error -71 req 02 val 2100 [ 814.657052][ T4250] pwc: recv_control_msg error -71 req 04 val 1500 [ 814.701671][ T4250] pwc: recv_control_msg error -71 req 02 val 2500 [ 814.731279][ T4250] pwc: recv_control_msg error -71 req 02 val 2400 [ 814.739643][ T4250] pwc: recv_control_msg error -71 req 02 val 2600 [ 814.767666][ T4250] pwc: recv_control_msg error -71 req 02 val 2900 [ 814.787501][ T4250] pwc: recv_control_msg error -71 req 02 val 2800 [ 814.807848][ T4250] pwc: recv_control_msg error -71 req 04 val 1100 [ 814.821669][T12155] usb 5-1: Using ep0 maxpacket: 16 [ 814.828826][T12155] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 814.846859][ T4250] pwc: recv_control_msg error -71 req 04 val 1200 [ 814.861575][T12155] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 814.872711][ T4250] pwc: Registered as video103. [ 814.878713][ T4250] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 814.903532][T12155] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 814.922044][T12155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.934291][ T4250] usb 4-1: USB disconnect, device number 52 [ 814.954303][T12155] usb 5-1: Product: syz [ 814.969043][T12155] usb 5-1: Manufacturer: syz [ 814.984217][T12155] usb 5-1: SerialNumber: syz [ 815.058757][T15990] loop0: detected capacity change from 0 to 256 [ 815.061565][T15991] loop1: detected capacity change from 0 to 1764 [ 815.209744][T12155] usb 5-1: 0:2 : does not exist [ 815.216359][T12155] usb 5-1: unit 14 not found! [ 815.264275][T12155] usb 5-1: USB disconnect, device number 16 [ 815.512286][T14104] udevd[14104]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 815.638692][T16007] loop1: detected capacity change from 0 to 512 [ 815.677710][T16007] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.4152: casefold flag without casefold feature [ 815.701818][T16007] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.4152: couldn't read orphan inode 15 (err -117) [ 815.724664][T16007] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 815.814953][ T4296] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 816.011803][ T4296] usb 3-1: Using ep0 maxpacket: 16 [ 816.019607][ T4296] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.070325][ T4296] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 816.109580][ T4296] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 816.139160][T16012] loop0: detected capacity change from 0 to 40427 [ 816.149894][T16012] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 816.157767][T16012] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 816.167932][T16012] F2FS-fs (loop0): invalid crc value [ 816.191509][ T4296] usb 3-1: config 0 interface 0 has no altsetting 0 [ 816.198616][ T4296] usb 3-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 816.203628][T16012] F2FS-fs (loop0): Found nat_bits in checkpoint [ 816.216531][T16014] loop4: detected capacity change from 0 to 1024 [ 816.257711][T16012] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 816.264885][T16012] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 816.272747][ T4296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.315632][T16014] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 816.326564][ T4296] usb 3-1: config 0 descriptor?? [ 816.343436][T16014] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 816.353267][T16014] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.4155: Failed to acquire dquot type 0 [ 816.365713][T16014] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 816.418462][T16014] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4155: corrupted inode contents [ 816.436932][T13215] EXT4-fs (loop1): unmounting filesystem. [ 816.446209][ T7955] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 816.459166][T16014] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #13: comm syz.4.4155: mark_inode_dirty error [ 816.462990][ T7955] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 816.483476][T16021] loop3: detected capacity change from 0 to 1024 [ 816.509888][T16014] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4155: corrupted inode contents [ 816.561478][T16014] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.4155: mark_inode_dirty error [ 816.604176][T16014] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4155: corrupted inode contents [ 816.637115][T16014] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 816.646843][T16014] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.4155: corrupted inode contents [ 816.659820][T16014] EXT4-fs error (device loop4): ext4_truncate:4312: inode #13: comm syz.4.4155: mark_inode_dirty error [ 816.673201][T16021] hfsplus: unable to load nls mapping "cP861" [ 816.680150][T16021] hfsplus: unable to parse mount options [ 816.722520][T16014] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 816.749845][T16014] EXT4-fs (loop4): 1 truncate cleaned up [ 816.765340][T16014] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 816.926453][T16014] EXT4-fs: Ignoring removed orlov option [ 816.934208][T16014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 816.945801][ T4296] usbhid 3-1:0.0: can't add hid device: -71 [ 816.958072][T16014] EXT4-fs (loop4): can't enable nombcache during remount [ 816.965444][ T4296] usbhid: probe of 3-1:0.0 failed with error -71 [ 816.997815][ T4296] usb 3-1: USB disconnect, device number 18 [ 817.064219][T12832] EXT4-fs (loop4): unmounting filesystem. [ 817.184027][T16032] loop4: detected capacity change from 0 to 1764 [ 817.211483][ T4250] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 817.264430][T16033] loop0: detected capacity change from 0 to 4096 [ 817.291553][T15734] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 817.411549][ T4250] usb 2-1: Using ep0 maxpacket: 16 [ 817.418798][ T4250] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 817.447608][ T4250] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 817.483391][T15734] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.484405][ T4250] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 817.503964][T15734] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 817.529874][T15734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.558727][T15734] usb 4-1: config 0 descriptor?? [ 817.581635][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.601146][T15734] pwc: Askey VC010 type 2 USB webcam detected. [ 817.611461][ T4250] usb 2-1: Product: syz [ 817.624866][ T4250] usb 2-1: Manufacturer: syz [ 817.639761][ T4250] usb 2-1: SerialNumber: syz [ 817.648397][T16040] loop0: detected capacity change from 0 to 256 [ 817.775398][T12156] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 817.807015][T16043] loop4: detected capacity change from 0 to 512 [ 817.862293][T16043] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.4166: casefold flag without casefold feature [ 817.876182][ T4250] usb 2-1: 0:2 : does not exist [ 817.892180][T16043] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.4166: couldn't read orphan inode 15 (err -117) [ 817.905802][T16043] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 817.919674][ T4250] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 817.951566][ T4293] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 817.963078][ T4250] usb 2-1: USB disconnect, device number 19 [ 817.982898][T16001] udevd[16001]: setting owner of /dev/bus/usb/002/019 to uid=0, gid=0 failed: No such file or directory [ 818.006222][T15734] pwc: recv_control_msg error -32 req 02 val 2b00 [ 818.036153][T15734] pwc: recv_control_msg error -32 req 02 val 2700 [ 818.045669][T12832] EXT4-fs (loop4): unmounting filesystem. [ 818.151630][ T4293] usb 3-1: Using ep0 maxpacket: 16 [ 818.160312][ T4293] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 818.171267][ T4293] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 818.182875][ T4293] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 818.193256][T16001] udevd[16001]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.209332][ T4293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.217571][ T4293] usb 3-1: Product: syz [ 818.225712][ T4293] usb 3-1: Manufacturer: syz [ 818.230927][ T4293] usb 3-1: SerialNumber: syz [ 818.245888][T15734] pwc: recv_control_msg error -71 req 04 val 1000 [ 818.261754][T15734] pwc: recv_control_msg error -71 req 04 val 1300 [ 818.281736][T15734] pwc: recv_control_msg error -71 req 04 val 1400 [ 818.288599][T15734] pwc: recv_control_msg error -71 req 02 val 2000 [ 818.296648][T15734] pwc: recv_control_msg error -71 req 02 val 2100 [ 818.304074][T15734] pwc: recv_control_msg error -71 req 04 val 1500 [ 818.311016][T15734] pwc: recv_control_msg error -71 req 02 val 2500 [ 818.318444][T15734] pwc: recv_control_msg error -71 req 02 val 2400 [ 818.325717][T15734] pwc: recv_control_msg error -71 req 02 val 2600 [ 818.346245][T15734] pwc: recv_control_msg error -71 req 02 val 2900 [ 818.353436][T15734] pwc: recv_control_msg error -71 req 02 val 2800 [ 818.360353][T15734] pwc: recv_control_msg error -71 req 04 val 1100 [ 818.368331][T15734] pwc: recv_control_msg error -71 req 04 val 1200 [ 818.378078][T15734] pwc: Registered as video103. [ 818.384158][T15734] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 818.428293][T15734] usb 4-1: USB disconnect, device number 53 [ 818.464209][ T4293] usb 3-1: 0:2 : does not exist [ 818.484013][ T4293] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 818.522799][ T4293] usb 3-1: USB disconnect, device number 19 [ 818.742509][T16001] udevd[16001]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.873736][T16048] loop0: detected capacity change from 0 to 256 [ 819.152612][T16059] loop2: detected capacity change from 0 to 1024 [ 819.185854][T16059] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 819.213019][T16065] loop4: detected capacity change from 0 to 512 [ 819.220245][T16065] EXT4-fs: Ignoring removed nobh option [ 819.221754][ T4293] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 819.227182][T16065] EXT4-fs: Ignoring removed nobh option [ 819.240631][T16059] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 819.250830][T16065] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 819.263034][T16059] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.4172: Failed to acquire dquot type 0 [ 819.298510][T16061] loop1: detected capacity change from 0 to 1764 [ 819.313575][T16065] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 819.332548][T16059] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 819.369081][T16065] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4174: invalid indirect mapped block 2683928664 (level 1) [ 819.416165][T16059] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #13: comm syz.2.4172: corrupted inode contents [ 819.432962][T16059] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #13: comm syz.2.4172: mark_inode_dirty error [ 819.439287][T16065] EXT4-fs (loop4): 1 truncate cleaned up [ 819.455884][ T4293] usb 4-1: Using ep0 maxpacket: 16 [ 819.467952][ T4293] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 819.472799][T16059] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #13: comm syz.2.4172: corrupted inode contents [ 819.495093][T16059] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #13: comm syz.2.4172: mark_inode_dirty error [ 819.508073][ T4293] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.508304][T16059] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #13: comm syz.2.4172: corrupted inode contents [ 819.519356][T16065] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 819.530189][T16059] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 819.547620][T16059] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #13: comm syz.2.4172: corrupted inode contents [ 819.556961][ T4293] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 819.561643][T16059] EXT4-fs error (device loop2): ext4_truncate:4312: inode #13: comm syz.2.4172: mark_inode_dirty error [ 819.581952][ T4293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.590129][ T4293] usb 4-1: Product: syz [ 819.596062][T16059] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 819.616254][ T4293] usb 4-1: Manufacturer: syz [ 819.630267][T16059] EXT4-fs (loop2): 1 truncate cleaned up [ 819.634904][ T4293] usb 4-1: SerialNumber: syz [ 819.641568][T16059] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 819.669935][T12832] EXT4-fs (loop4): unmounting filesystem. [ 819.740177][T16059] EXT4-fs: Ignoring removed orlov option [ 819.771833][T16059] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 819.780582][T16059] EXT4-fs (loop2): can't enable nombcache during remount [ 819.821484][ T4250] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 819.859185][T12021] EXT4-fs (loop2): unmounting filesystem. [ 819.863886][ T4293] usb 4-1: 0:2 : does not exist [ 819.877641][ T4293] usb 4-1: unit 14 not found! [ 819.952222][ T4293] usb 4-1: USB disconnect, device number 54 [ 820.012395][ T4250] usb 2-1: Using ep0 maxpacket: 16 [ 820.025646][ T4250] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.086063][ T4250] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 820.100681][ T4250] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 820.145871][ T4250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 820.152747][ T4250] usb 2-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 820.168324][T16076] loop0: detected capacity change from 0 to 512 [ 820.175266][ T4250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.192858][T16076] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.4180: casefold flag without casefold feature [ 820.212445][ T4250] usb 2-1: config 0 descriptor?? [ 820.221629][T16076] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.4180: couldn't read orphan inode 15 (err -117) [ 820.235306][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 820.240377][T16076] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 820.281619][ T4296] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 820.348909][T12294] EXT4-fs (loop0): unmounting filesystem. [ 820.361495][T15734] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 820.481766][ T4296] usb 3-1: Using ep0 maxpacket: 16 [ 820.489971][T16079] loop0: detected capacity change from 0 to 256 [ 820.497928][ T4296] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 820.511097][ T4296] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 820.543791][ T4296] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 820.563062][T15734] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.585480][ T4296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.593869][T15734] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 820.621547][ T4296] usb 3-1: Product: syz [ 820.625783][ T4296] usb 3-1: Manufacturer: syz [ 820.630402][ T4296] usb 3-1: SerialNumber: syz [ 820.636021][T15734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.673618][T15734] usb 5-1: config 0 descriptor?? [ 820.688421][T15734] pwc: Askey VC010 type 2 USB webcam detected. [ 820.865666][ T4250] usbhid 2-1:0.0: can't add hid device: -71 [ 820.873784][ T4250] usbhid: probe of 2-1:0.0 failed with error -71 [ 820.890854][ T4296] usb 3-1: 0:2 : does not exist [ 820.903459][ T4250] usb 2-1: USB disconnect, device number 20 [ 820.931155][ T4296] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 820.989664][ T4296] usb 3-1: USB disconnect, device number 20 [ 821.082919][T16090] device bond_slave_0 entered promiscuous mode [ 821.089199][T16090] device bond_slave_1 entered promiscuous mode [ 821.097572][T16090] device vlan2 entered promiscuous mode [ 821.104058][T15734] pwc: recv_control_msg error -32 req 02 val 2b00 [ 821.111341][T15734] pwc: recv_control_msg error -32 req 02 val 2700 [ 821.119928][T16090] device bond0 entered promiscuous mode [ 821.232234][T16001] udevd[16001]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.321101][T15734] pwc: recv_control_msg error -71 req 04 val 1000 [ 821.333588][T15734] pwc: recv_control_msg error -71 req 04 val 1300 [ 821.341617][T15734] pwc: recv_control_msg error -71 req 04 val 1400 [ 821.354900][T16094] loop0: detected capacity change from 0 to 1764 [ 821.361821][T15734] pwc: recv_control_msg error -71 req 02 val 2000 [ 821.362168][T15734] pwc: recv_control_msg error -71 req 02 val 2100 [ 821.401860][T15734] pwc: recv_control_msg error -71 req 04 val 1500 [ 821.428998][T15734] pwc: recv_control_msg error -71 req 02 val 2500 [ 821.461740][T15734] pwc: recv_control_msg error -71 req 02 val 2400 [ 821.478144][T15734] pwc: recv_control_msg error -71 req 02 val 2600 [ 821.493932][T15734] pwc: recv_control_msg error -71 req 02 val 2900 [ 821.520885][T15734] pwc: recv_control_msg error -71 req 02 val 2800 [ 821.549442][T15734] pwc: recv_control_msg error -71 req 04 val 1100 [ 821.576422][T15734] pwc: recv_control_msg error -71 req 04 val 1200 [ 821.616054][T15734] pwc: Registered as video103. [ 821.659034][T16098] loop1: detected capacity change from 0 to 512 [ 821.680283][T15734] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 821.717359][T16098] EXT4-fs: Ignoring removed orlov option [ 821.767445][T15734] usb 5-1: USB disconnect, device number 17 [ 821.773935][T16098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 821.830523][T16096] loop3: detected capacity change from 0 to 40427 [ 821.844880][T16096] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 821.852723][T16096] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 821.871603][T16096] F2FS-fs (loop3): invalid crc value [ 821.876949][T16098] EXT4-fs (loop1): orphan cleanup on readonly fs [ 821.920875][T16096] F2FS-fs (loop3): Found nat_bits in checkpoint [ 821.973970][T16096] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 821.981076][T16096] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 822.031786][T16096] syz.3.4188: attempt to access beyond end of device [ 822.031786][T16096] loop3: rw=2049, sector=77824, nr_sectors = 184 limit=40427 [ 822.047394][T16110] loop4: detected capacity change from 0 to 512 [ 822.058719][T16096] syz.3.4188: attempt to access beyond end of device [ 822.058719][T16096] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 822.082060][T16098] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4189: bg 0: block 248: padding at end of block bitmap is not set [ 822.109236][T16110] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.4192: casefold flag without casefold feature [ 822.144483][T14060] syz-executor: attempt to access beyond end of device [ 822.144483][T14060] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 822.177604][T16098] Quota error (device loop1): write_blk: dquota write failed [ 822.185825][T16098] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 822.196275][T16098] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.4189: Failed to acquire dquot type 1 [ 822.209641][T16098] EXT4-fs (loop1): 1 truncate cleaned up [ 822.219655][T16098] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 822.261867][ T4374] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 822.271175][T16098] EXT4-fs: Ignoring removed orlov option [ 822.277722][T16098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 822.293135][ T4374] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 822.300110][T16110] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.4192: couldn't read orphan inode 15 (err -117) [ 822.329270][T16098] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 822.337710][T16110] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 822.389033][T16098] EXT4-fs error (device loop1): __ext4_remount:6611: comm syz.1.4189: Abort forced by user [ 822.412172][T16098] EXT4-fs (loop1): Remounting filesystem read-only [ 822.429010][T16098] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 822.440462][T16118] loop0: detected capacity change from 0 to 256 [ 822.455907][T16098] ext4 filesystem being remounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 822.509318][T14100] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 822.548099][T12832] EXT4-fs (loop4): unmounting filesystem. [ 822.658984][T13215] EXT4-fs (loop1): unmounting filesystem. [ 822.920553][T16126] device bond_slave_0 entered promiscuous mode [ 822.926871][T16126] device bond_slave_1 entered promiscuous mode [ 822.951770][T16126] device vlan2 entered promiscuous mode [ 822.961753][T16126] device bond0 entered promiscuous mode [ 823.115555][T16131] tipc: Started in network mode [ 823.130652][T16131] tipc: Node identity 4000004, cluster identity 4711 [ 823.177259][T16131] tipc: Node number set to 67108868 [ 823.311528][ T4293] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 823.497544][T16144] loop0: detected capacity change from 0 to 1764 [ 823.531701][ T4293] usb 5-1: Using ep0 maxpacket: 16 [ 823.538935][ T4293] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.568927][ T4293] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 823.590710][ T4293] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 823.620446][ T4293] usb 5-1: config 0 interface 0 has no altsetting 0 [ 823.633360][ T4293] usb 5-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 823.643022][ T4293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.653598][ T4293] usb 5-1: config 0 descriptor?? [ 823.681536][ T4301] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 823.833431][T15734] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 823.871753][ T4301] usb 2-1: Using ep0 maxpacket: 16 [ 823.883050][ T4301] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 823.913276][ T4301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 823.926831][ T4301] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 823.944505][T16155] loop3: detected capacity change from 0 to 512 [ 823.953529][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.961703][ T4301] usb 2-1: Product: syz [ 823.990052][ T4301] usb 2-1: Manufacturer: syz [ 824.002294][ T4301] usb 2-1: SerialNumber: syz [ 824.024501][T16155] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.4207: casefold flag without casefold feature [ 824.039036][T15734] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.081538][T15734] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 824.090639][T15734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.109407][T16155] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4207: couldn't read orphan inode 15 (err -117) [ 824.142194][T16155] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 824.174594][T16160] loop0: detected capacity change from 0 to 512 [ 824.179883][T15734] usb 3-1: config 0 descriptor?? [ 824.183103][T16160] EXT4-fs: Ignoring removed orlov option [ 824.223702][T15734] pwc: Askey VC010 type 2 USB webcam detected. [ 824.240428][T16160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 824.250535][ T4301] usb 2-1: 0:2 : does not exist [ 824.263425][ T4301] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 824.308381][ T4293] usbhid 5-1:0.0: can't add hid device: -71 [ 824.318497][T16160] EXT4-fs (loop0): orphan cleanup on readonly fs [ 824.331543][ T4293] usbhid: probe of 5-1:0.0 failed with error -71 [ 824.357309][T16160] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4210: bg 0: block 248: padding at end of block bitmap is not set [ 824.391925][ T4301] usb 2-1: USB disconnect, device number 21 [ 824.431949][ T4293] usb 5-1: USB disconnect, device number 18 [ 824.478309][T16001] udevd[16001]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.506533][T16160] Quota error (device loop0): write_blk: dquota write failed [ 824.534442][T14060] EXT4-fs (loop3): unmounting filesystem. [ 824.571641][T16160] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 824.618679][T16160] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.4210: Failed to acquire dquot type 1 [ 824.635293][T15734] pwc: recv_control_msg error -32 req 02 val 2b00 [ 824.649080][T15734] pwc: recv_control_msg error -32 req 02 val 2700 [ 824.678214][T16160] EXT4-fs (loop0): 1 truncate cleaned up [ 824.697365][T16160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 824.753622][T16160] EXT4-fs: Ignoring removed orlov option [ 824.790116][T16160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 824.827719][T16160] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 824.857695][T15734] pwc: recv_control_msg error -71 req 04 val 1000 [ 824.871849][T15734] pwc: recv_control_msg error -71 req 04 val 1300 [ 824.893776][T15734] pwc: recv_control_msg error -71 req 04 val 1400 [ 824.902929][T16166] loop3: detected capacity change from 0 to 256 [ 824.912248][T16160] EXT4-fs error (device loop0): __ext4_remount:6611: comm syz.0.4210: Abort forced by user [ 824.922738][T15734] pwc: recv_control_msg error -71 req 02 val 2000 [ 824.933848][T16160] EXT4-fs (loop0): Remounting filesystem read-only [ 824.940431][T16160] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 824.947726][T15734] pwc: recv_control_msg error -71 req 02 val 2100 [ 824.968909][T15734] pwc: recv_control_msg error -71 req 04 val 1500 [ 824.991496][T16160] ext4 filesystem being remounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 825.021710][T15734] pwc: recv_control_msg error -71 req 02 val 2500 [ 825.041707][T15734] pwc: recv_control_msg error -71 req 02 val 2400 [ 825.060045][T15734] pwc: recv_control_msg error -71 req 02 val 2600 [ 825.097236][T15734] pwc: recv_control_msg error -71 req 02 val 2900 [ 825.131519][T15734] pwc: recv_control_msg error -71 req 02 val 2800 [ 825.161554][T15734] pwc: recv_control_msg error -71 req 04 val 1100 [ 825.170324][T12294] EXT4-fs (loop0): unmounting filesystem. [ 825.181621][T15734] pwc: recv_control_msg error -71 req 04 val 1200 [ 825.200196][T15734] pwc: Registered as video103. [ 825.213376][T15734] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 825.225544][T16172] device bond_slave_0 entered promiscuous mode [ 825.231840][T16172] device bond_slave_1 entered promiscuous mode [ 825.240786][T15734] usb 3-1: USB disconnect, device number 21 [ 825.329464][T16172] device vlan2 entered promiscuous mode [ 825.383460][T16172] device bond0 entered promiscuous mode [ 825.413063][ T4293] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 825.621486][ T4293] usb 2-1: Using ep0 maxpacket: 16 [ 825.628934][ T4293] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 825.665069][ T4293] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 825.724096][ T4293] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 825.766162][ T4293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.793374][ T4293] usb 2-1: Product: syz [ 825.806678][ T4293] usb 2-1: Manufacturer: syz [ 825.817949][ T4293] usb 2-1: SerialNumber: syz [ 826.038096][T16195] loop0: detected capacity change from 0 to 512 [ 826.045324][ T4293] usb 2-1: 0:2 : does not exist [ 826.056783][ T4293] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 826.089253][T16202] netlink: 1180 bytes leftover after parsing attributes in process `syz.2.4220'. [ 826.114854][T16195] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.4221: casefold flag without casefold feature [ 826.135821][T16195] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.4221: couldn't read orphan inode 15 (err -117) [ 826.142153][T16202] netlink: set zone limit has 8 unknown bytes [ 826.168694][ T4293] usb 2-1: USB disconnect, device number 22 [ 826.178710][T16195] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 826.349492][T12294] EXT4-fs (loop0): unmounting filesystem. [ 826.351550][T15734] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 826.365345][ T4294] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 826.397741][T16207] loop2: detected capacity change from 0 to 256 [ 826.447925][T16001] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 826.463212][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 826.486709][T16210] loop0: detected capacity change from 0 to 512 [ 826.530467][T16210] EXT4-fs: Ignoring removed orlov option [ 826.561636][T15734] usb 5-1: Using ep0 maxpacket: 8 [ 826.566838][ T4294] usb 4-1: Using ep0 maxpacket: 16 [ 826.578248][ T4294] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.591129][T15734] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 826.600659][T16210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 826.615868][T15734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.624239][ T4294] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 826.638063][T16210] EXT4-fs (loop0): orphan cleanup on readonly fs [ 826.644929][T15734] usb 5-1: Product: syz [ 826.660750][T16210] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4227: bg 0: block 248: padding at end of block bitmap is not set [ 826.675405][ T4294] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 826.692270][T15734] usb 5-1: Manufacturer: syz [ 826.696908][T15734] usb 5-1: SerialNumber: syz [ 826.713873][T15734] usb 5-1: config 0 descriptor?? [ 826.721319][ T4294] usb 4-1: config 0 interface 0 has no altsetting 0 [ 826.732632][T16210] Quota error (device loop0): write_blk: dquota write failed [ 826.740529][T16210] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 826.763760][ T4294] usb 4-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 826.773610][T16210] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.4227: Failed to acquire dquot type 1 [ 826.785541][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.793848][T16210] EXT4-fs (loop0): 1 truncate cleaned up [ 826.815169][ T4294] usb 4-1: config 0 descriptor?? [ 826.822114][T16210] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 826.838458][T16210] EXT4-fs: Ignoring removed orlov option [ 826.844834][T16210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 826.860905][T16210] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 826.902014][T16210] EXT4-fs error (device loop0): __ext4_remount:6611: comm syz.0.4227: Abort forced by user [ 826.924621][T15734] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 826.934636][T16210] EXT4-fs (loop0): Remounting filesystem read-only [ 826.941284][T16210] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 826.959265][T16210] ext4 filesystem being remounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 827.012092][T12294] EXT4-fs (loop0): unmounting filesystem. [ 827.092201][ T27] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 827.294541][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.312308][ T27] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 827.350514][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.375431][ T27] usb 2-1: config 0 descriptor?? [ 827.396180][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 827.566835][T16228] 8021q: VLANs not supported on gre0 [ 827.787893][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 827.807124][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 828.015653][ T27] pwc: recv_control_msg error -71 req 04 val 1000 [ 828.031987][ T27] pwc: recv_control_msg error -71 req 04 val 1300 [ 828.046875][ T27] pwc: recv_control_msg error -71 req 04 val 1400 [ 828.056212][ T27] pwc: recv_control_msg error -71 req 02 val 2000 [ 828.063993][ T27] pwc: recv_control_msg error -71 req 02 val 2100 [ 828.071281][ T27] pwc: recv_control_msg error -71 req 04 val 1500 [ 828.079905][ T27] pwc: recv_control_msg error -71 req 02 val 2500 [ 828.105340][ T27] pwc: recv_control_msg error -71 req 02 val 2400 [ 828.113274][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 828.120492][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 828.127668][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 828.136782][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 828.144925][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 828.171650][ T27] pwc: Registered as video103. [ 828.195257][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 828.223836][ T27] usb 2-1: USB disconnect, device number 23 [ 828.231970][T16237] loop0: detected capacity change from 0 to 512 [ 828.295591][T16237] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.4237: casefold flag without casefold feature [ 828.329292][T16240] loop2: detected capacity change from 0 to 512 [ 828.342334][T16237] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.4237: couldn't read orphan inode 15 (err -117) [ 828.372822][T16237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 828.405623][T16240] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 828.431969][T16240] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.570445][T15734] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 828.601778][T15734] usb 5-1: USB disconnect, device number 19 [ 828.665414][T12294] EXT4-fs (loop0): unmounting filesystem. [ 828.850312][T16231] EXT4-fs (loop2): unmounting filesystem. [ 828.941138][ T4293] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 829.088707][ T4294] usbhid 4-1:0.0: can't add hid device: -71 [ 829.113592][ T4294] usbhid: probe of 4-1:0.0 failed with error -71 [ 829.139453][ T4294] usb 4-1: USB disconnect, device number 55 [ 829.152554][ T4293] usb 2-1: Using ep0 maxpacket: 16 [ 829.174337][T16001] udevd[16001]: setting owner of /dev/bus/usb/004/055 to uid=0, gid=0 failed: No such file or directory [ 829.186700][ T4293] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 829.212846][ T4293] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 829.254433][ T4293] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 829.283996][ T4293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.315437][ T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.321604][ T4293] usb 2-1: Product: syz [ 829.351678][ T4293] usb 2-1: Manufacturer: syz [ 829.356342][ T4293] usb 2-1: SerialNumber: syz [ 829.406147][T16256] 8021q: VLANs not supported on gre0 [ 829.530752][ T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.597022][ T4293] usb 2-1: 0:2 : does not exist [ 829.615093][ T4293] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 829.630650][ T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.663234][ T4293] usb 2-1: USB disconnect, device number 24 [ 829.782494][ T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.859366][ T4300] libceph: connect (1)[c::]:6789 error -101 [ 829.879113][ T4300] libceph: mon0 (1)[c::]:6789 connect error [ 829.895258][T16264] ceph: No mds server is up or the cluster is laggy [ 829.922131][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 830.289522][T16271] loop3: detected capacity change from 0 to 512 [ 830.370462][T16271] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.4251: casefold flag without casefold feature [ 830.387156][T16271] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4251: couldn't read orphan inode 15 (err -117) [ 830.402461][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 830.412047][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 830.420648][ T4265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 830.424248][T16271] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 830.440702][ T4265] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 830.449583][ T4265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 830.458700][ T4265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 830.521605][ T4300] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 830.554258][T16271] overlayfs: failed to resolve './file2': -2 [ 830.664247][T14060] EXT4-fs (loop3): unmounting filesystem. [ 830.721885][ T4293] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 830.748746][ T4300] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.789555][ T4300] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 830.793974][T16277] hsr0 speed is unknown, defaulting to 1000 [ 830.811924][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.842390][ T4300] usb 5-1: config 0 descriptor?? [ 830.868935][T16288] loop3: detected capacity change from 0 to 256 [ 830.881333][ T4300] pwc: Askey VC010 type 2 USB webcam detected. [ 830.953389][T16001] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 830.965550][ T4293] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.986638][ T4293] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 831.012637][ T27] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 831.021920][ T4293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.072648][ T4293] usb 2-1: config 0 descriptor?? [ 831.087678][ T4293] pwc: Askey VC010 type 2 USB webcam detected. [ 831.211544][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 831.239332][ T27] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.259207][ T4300] pwc: recv_control_msg error -32 req 02 val 2b00 [ 831.268505][ T27] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 831.283436][ T27] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 831.299358][ T4300] pwc: recv_control_msg error -32 req 02 val 2700 [ 831.306767][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 831.313915][ T27] usb 1-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 831.323553][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.334533][ T27] usb 1-1: config 0 descriptor?? [ 831.484536][ T4293] pwc: recv_control_msg error -32 req 02 val 2b00 [ 831.540252][ T4300] pwc: recv_control_msg error -71 req 04 val 1000 [ 831.554973][T16277] chnl_net:caif_netlink_parms(): no params data found [ 831.582802][ T4300] pwc: recv_control_msg error -71 req 04 val 1300 [ 831.597626][ T4300] pwc: recv_control_msg error -71 req 04 val 1400 [ 831.630433][ T4300] pwc: recv_control_msg error -71 req 02 val 2000 [ 831.638420][ T4300] pwc: recv_control_msg error -71 req 02 val 2100 [ 831.650971][ T4300] pwc: recv_control_msg error -71 req 04 val 1500 [ 831.662431][ T4300] pwc: recv_control_msg error -71 req 02 val 2500 [ 831.672070][ T4300] pwc: recv_control_msg error -71 req 02 val 2400 [ 831.693822][ T4293] pwc: recv_control_msg error -71 req 02 val 2c00 [ 831.706485][ T4293] pwc: recv_control_msg error -71 req 04 val 1000 [ 831.715177][ T4300] pwc: recv_control_msg error -71 req 02 val 2600 [ 831.722618][ T4293] pwc: recv_control_msg error -71 req 04 val 1300 [ 831.729476][ T4300] pwc: recv_control_msg error -71 req 02 val 2900 [ 831.736900][ T4293] pwc: recv_control_msg error -71 req 04 val 1400 [ 831.743973][ T4300] pwc: recv_control_msg error -71 req 02 val 2800 [ 831.752422][ T4293] pwc: recv_control_msg error -71 req 02 val 2000 [ 831.762414][ T4300] pwc: recv_control_msg error -71 req 04 val 1100 [ 831.783958][ T4250] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 831.792163][ T4293] pwc: recv_control_msg error -71 req 02 val 2100 [ 831.799016][ T4300] pwc: recv_control_msg error -71 req 04 val 1200 [ 831.807748][ T4293] pwc: recv_control_msg error -71 req 04 val 1500 [ 831.816579][ T4300] pwc: Registered as video103. [ 831.822023][ T4293] pwc: recv_control_msg error -71 req 02 val 2500 [ 831.831872][ T4300] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input33 [ 831.841979][ T4293] pwc: recv_control_msg error -71 req 02 val 2400 [ 831.855698][ T4293] pwc: recv_control_msg error -71 req 02 val 2600 [ 831.874455][ T4300] usb 5-1: USB disconnect, device number 20 [ 831.889397][ T4293] pwc: recv_control_msg error -71 req 02 val 2900 [ 831.909652][ T4293] pwc: recv_control_msg error -71 req 02 val 2800 [ 831.932046][ T4293] pwc: recv_control_msg error -71 req 04 val 1100 [ 831.963820][ T4293] pwc: recv_control_msg error -71 req 04 val 1200 [ 831.975689][ T4293] pwc: Registered as video103. [ 831.991210][ T4293] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 832.001476][ T4250] usb 4-1: Using ep0 maxpacket: 8 [ 832.012799][ T4250] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 832.028288][ T4293] usb 2-1: USB disconnect, device number 25 [ 832.041492][ T4250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.061508][ T4250] usb 4-1: Product: syz [ 832.065813][ T4250] usb 4-1: Manufacturer: syz [ 832.101110][ T4250] usb 4-1: SerialNumber: syz [ 832.133178][ T4250] usb 4-1: config 0 descriptor?? [ 832.347890][ T4250] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 832.409602][T16277] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.440386][T16277] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.465310][T16277] device bridge_slave_0 entered promiscuous mode [ 832.531584][ T4255] Bluetooth: hci4: command 0x0409 tx timeout [ 832.671339][T16277] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.681077][T16277] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.708236][T16277] device bridge_slave_1 entered promiscuous mode [ 832.720512][T16319] 8021q: VLANs not supported on gre0 [ 832.798110][ T33] device hsr_slave_0 left promiscuous mode [ 832.808210][ T33] device hsr_slave_1 left promiscuous mode [ 832.826535][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.844497][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.882655][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.900535][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.980158][ T33] device veth1_macvtap left promiscuous mode [ 832.986766][ T33] device veth0_macvtap left promiscuous mode [ 832.994734][ T33] device veth1_vlan left promiscuous mode [ 833.000825][ T33] device veth0_vlan left promiscuous mode [ 833.777336][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 833.785056][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 833.797592][ T27] usb 1-1: USB disconnect, device number 18 [ 834.034135][ T4250] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 834.055118][ T4250] usb 4-1: USB disconnect, device number 56 [ 834.282680][ T33] team0 (unregistering): Port device team_slave_1 removed [ 834.321630][ T27] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 834.401044][ T33] team0 (unregistering): Port device team_slave_0 removed [ 834.475932][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.531061][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 834.538497][ T27] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 834.551488][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 834.574099][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 834.583509][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.583955][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.602411][ T27] usb 1-1: Product: syz [ 834.607396][ T27] usb 1-1: Manufacturer: syz [ 834.629329][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 834.637570][ T27] usb 1-1: SerialNumber: syz [ 834.803544][T16345] loop3: detected capacity change from 0 to 256 [ 834.868164][ T27] usb 1-1: 0:2 : does not exist [ 834.885276][ T27] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 834.938348][ T27] usb 1-1: USB disconnect, device number 19 [ 835.075989][T16348] loop3: detected capacity change from 0 to 512 [ 835.107599][T16348] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.4265: casefold flag without casefold feature [ 835.121062][T16348] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4265: couldn't read orphan inode 15 (err -117) [ 835.138724][T16348] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 835.208016][T16348] overlayfs: failed to resolve './file2': -2 [ 835.212807][T14100] udevd[14100]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 835.264533][T14060] EXT4-fs (loop3): unmounting filesystem. [ 836.261917][ T33] bond0 (unregistering): Released all slaves [ 836.311837][ T4265] Bluetooth: hci1: command 0x0406 tx timeout [ 836.325383][ T4297] hsr0 speed is unknown, defaulting to 1000 [ 836.361613][ T4297] ================================================================== [ 836.369731][ T4297] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450 [ 836.376965][ T4297] Read of size 4 at addr ffff8880786a00e0 by task kworker/1:6/4297 [ 836.384873][ T4297] [ 836.387231][ T4297] CPU: 1 PID: 4297 Comm: kworker/1:6 Not tainted 6.1.137-syzkaller #0 [ 836.395408][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 836.405487][ T4297] Workqueue: infiniband ib_cache_event_task [ 836.411418][ T4297] Call Trace: [ 836.414712][ T4297] [ 836.417660][ T4297] dump_stack_lvl+0x168/0x22e [ 836.422386][ T4297] ? __lock_acquire+0x7c50/0x7c50 [ 836.427438][ T4297] ? show_regs_print_info+0x12/0x12 [ 836.432666][ T4297] ? load_image+0x3b0/0x3b0 [ 836.437221][ T4297] ? __virt_addr_valid+0x465/0x540 [ 836.442375][ T4297] ? siw_query_port+0x358/0x450 [ 836.447244][ T4297] print_report+0xa8/0x220 [ 836.451684][ T4297] kasan_report+0x10b/0x140 [ 836.456225][ T4297] ? siw_query_port+0x358/0x450 [ 836.461105][ T4297] siw_query_port+0x358/0x450 [ 836.465804][ T4297] ? ib_query_port+0x372/0x820 [ 836.470596][ T4297] ib_cache_update+0x1bb/0x980 [ 836.475410][ T4297] ? lock_acquire+0x20f/0x490 [ 836.480114][ T4297] ? ib_cache_setup_one+0x5d0/0x5d0 [ 836.485346][ T4297] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 836.491359][ T4297] ? read_lock_is_recursive+0x10/0x10 [ 836.496754][ T4297] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 836.502682][ T4297] ? _raw_spin_unlock+0x40/0x40 [ 836.507565][ T4297] ib_cache_event_task+0xd4/0x1c0 [ 836.512618][ T4297] ? process_one_work+0x7a1/0x1160 [ 836.517757][ T4297] process_one_work+0x898/0x1160 [ 836.522752][ T4297] ? worker_detach_from_pool+0x240/0x240 [ 836.528415][ T4297] ? _raw_spin_lock_irq+0xab/0xe0 [ 836.533465][ T4297] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 836.538866][ T4297] ? kthread_data+0x4b/0xc0 [ 836.543411][ T4297] worker_thread+0xaa2/0x1250 [ 836.548119][ T4297] kthread+0x29d/0x330 [ 836.552217][ T4297] ? worker_clr_flags+0x1a0/0x1a0 [ 836.557263][ T4297] ? kthread_blkcg+0xd0/0xd0 [ 836.561909][ T4297] ret_from_fork+0x1f/0x30 [ 836.566362][ T4297] [ 836.569393][ T4297] [ 836.571727][ T4297] Allocated by task 12021: [ 836.576144][ T4297] kasan_set_track+0x4b/0x70 [ 836.580761][ T4297] __kasan_kmalloc+0x8e/0xa0 [ 836.585376][ T4297] __kmalloc_node+0xb0/0x240 [ 836.589979][ T4297] kvmalloc_node+0x6c/0x180 [ 836.594496][ T4297] alloc_netdev_mqs+0x84/0xf00 [ 836.599289][ T4297] rtnl_create_link+0x2fb/0xb80 [ 836.604159][ T4297] rtnl_newlink+0x13ca/0x1ff0 [ 836.608858][ T4297] rtnetlink_rcv_msg+0x79b/0xed0 [ 836.613823][ T4297] netlink_rcv_skb+0x1de/0x420 [ 836.618632][ T4297] netlink_unicast+0x74c/0x8c0 [ 836.623429][ T4297] netlink_sendmsg+0x89e/0xbc0 [ 836.628216][ T4297] __sys_sendto+0x44f/0x5c0 [ 836.632740][ T4297] __x64_sys_sendto+0xda/0xf0 [ 836.637437][ T4297] do_syscall_64+0x4c/0xa0 [ 836.641874][ T4297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 836.647791][ T4297] [ 836.650120][ T4297] Freed by task 33: [ 836.653935][ T4297] kasan_set_track+0x4b/0x70 [ 836.658558][ T4297] kasan_save_free_info+0x2d/0x50 [ 836.663606][ T4297] ____kasan_slab_free+0x126/0x1e0 [ 836.668744][ T4297] slab_free_freelist_hook+0x131/0x1a0 [ 836.674227][ T4297] __kmem_cache_free+0xb6/0x1f0 [ 836.679096][ T4297] device_release+0x92/0x1c0 [ 836.683703][ T4297] kobject_put+0x21d/0x460 [ 836.688140][ T4297] netdev_run_todo+0xc8f/0xd80 [ 836.692922][ T4297] default_device_exit_batch+0x9c8/0xa50 [ 836.698584][ T4297] cleanup_net+0x77b/0xb80 [ 836.703021][ T4297] process_one_work+0x898/0x1160 [ 836.707972][ T4297] worker_thread+0xaa2/0x1250 [ 836.712667][ T4297] kthread+0x29d/0x330 [ 836.716760][ T4297] ret_from_fork+0x1f/0x30 [ 836.721194][ T4297] [ 836.723530][ T4297] The buggy address belongs to the object at ffff8880786a0000 [ 836.723530][ T4297] which belongs to the cache kmalloc-cg-4k of size 4096 [ 836.737872][ T4297] The buggy address is located 224 bytes inside of [ 836.737872][ T4297] 4096-byte region [ffff8880786a0000, ffff8880786a1000) [ 836.751262][ T4297] [ 836.753602][ T4297] The buggy address belongs to the physical page: [ 836.760034][ T4297] page:ffffea0001e1a800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x786a0 [ 836.770216][ T4297] head:ffffea0001e1a800 order:3 compound_mapcount:0 compound_pincount:0 [ 836.778741][ T4297] memcg:ffff88805a4a49c1 [ 836.782996][ T4297] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 836.791013][ T4297] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801744c280 [ 836.799707][ T4297] raw: 0000000000000000 0000000000040004 00000001ffffffff ffff88805a4a49c1 [ 836.808305][ T4297] page dumped because: kasan: bad access detected [ 836.814736][ T4297] page_owner tracks the page as allocated [ 836.820459][ T4297] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 12021, tgid 12021 (syz-executor), ts 662835165341, free_ts 662833936050 [ 836.845328][ T4297] post_alloc_hook+0x173/0x1a0 [ 836.850133][ T4297] get_page_from_freelist+0x1a26/0x1ac0 [ 836.855714][ T4297] __alloc_pages+0x1df/0x4e0 [ 836.860343][ T4297] alloc_slab_page+0x5d/0x160 [ 836.865047][ T4297] new_slab+0x87/0x2c0 [ 836.869141][ T4297] ___slab_alloc+0xbc6/0x1220 [ 836.873847][ T4297] __kmem_cache_alloc_node+0x1a0/0x260 [ 836.879326][ T4297] __kmalloc_node+0xa0/0x240 [ 836.883943][ T4297] kvmalloc_node+0x6c/0x180 [ 836.888465][ T4297] alloc_netdev_mqs+0x84/0xf00 [ 836.893256][ T4297] rtnl_create_link+0x2fb/0xb80 [ 836.898138][ T4297] rtnl_newlink+0x13ca/0x1ff0 [ 836.902845][ T4297] rtnetlink_rcv_msg+0x79b/0xed0 [ 836.907923][ T4297] netlink_rcv_skb+0x1de/0x420 [ 836.912717][ T4297] netlink_unicast+0x74c/0x8c0 [ 836.917500][ T4297] netlink_sendmsg+0x89e/0xbc0 [ 836.922297][ T4297] page last free stack trace: [ 836.926992][ T4297] free_unref_page_prepare+0x8b4/0x9a0 [ 836.932493][ T4297] free_unref_page+0x2e/0x3f0 [ 836.937205][ T4297] __unfreeze_partials+0x1a5/0x200 [ 836.942344][ T4297] put_cpu_partial+0x17c/0x250 [ 836.947127][ T4297] qlist_free_all+0x76/0xe0 [ 836.951651][ T4297] kasan_quarantine_reduce+0x144/0x160 [ 836.957126][ T4297] __kasan_slab_alloc+0x1e/0x80 [ 836.962030][ T4297] slab_post_alloc_hook+0x4b/0x480 [ 836.967168][ T4297] __kmem_cache_alloc_node+0x140/0x260 [ 836.972658][ T4297] __kmalloc+0xa0/0x240 [ 836.976836][ T4297] tomoyo_realpath_from_path+0xdf/0x5d0 [ 836.982408][ T4297] tomoyo_path_number_perm+0x1e3/0x600 [ 836.987889][ T4297] security_file_ioctl+0x6c/0xa0 [ 836.992864][ T4297] __se_sys_ioctl+0x48/0x170 [ 836.997475][ T4297] do_syscall_64+0x4c/0xa0 [ 837.001915][ T4297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 837.007838][ T4297] [ 837.010172][ T4297] Memory state around the buggy address: [ 837.015826][ T4297] ffff88807869ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 837.023901][ T4297] ffff8880786a0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 837.031995][ T4297] >ffff8880786a0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 837.040074][ T4297] ^ [ 837.047294][ T4297] ffff8880786a0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 837.055378][ T4297] ffff8880786a0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 837.063452][ T4297] ================================================================== [ 837.072161][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 837.073156][T15734] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 837.091827][ T4297] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 837.099074][ T4297] CPU: 1 PID: 4297 Comm: kworker/1:6 Not tainted 6.1.137-syzkaller #0 [ 837.106348][T16277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.109139][T16277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.125280][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 837.135357][ T4297] Workqueue: infiniband ib_cache_event_task [ 837.141277][ T4297] Call Trace: [ 837.144557][ T4297] [ 837.147491][ T4297] dump_stack_lvl+0x168/0x22e [ 837.152184][ T4297] ? memcpy+0x3c/0x60 [ 837.156169][ T4297] ? show_regs_print_info+0x12/0x12 [ 837.161379][ T4297] ? load_image+0x3b0/0x3b0 [ 837.165899][ T4297] panic+0x2c9/0x710 [ 837.169806][ T4297] ? bpf_jit_dump+0xd0/0xd0 [ 837.174329][ T4297] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 837.180231][ T4297] ? _raw_spin_unlock+0x40/0x40 [ 837.185090][ T4297] ? print_memory_metadata+0x314/0x400 [ 837.190572][ T4297] check_panic_on_warn+0x80/0xa0 [ 837.195534][ T4297] ? siw_query_port+0x358/0x450 [ 837.200399][ T4297] end_report+0x66/0x110 [ 837.204672][ T4297] kasan_report+0x118/0x140 [ 837.209212][ T4297] ? siw_query_port+0x358/0x450 [ 837.214067][ T4297] siw_query_port+0x358/0x450 [ 837.218743][ T4297] ? ib_query_port+0x372/0x820 [ 837.223512][ T4297] ib_cache_update+0x1bb/0x980 [ 837.228292][ T4297] ? lock_acquire+0x20f/0x490 [ 837.232976][ T4297] ? ib_cache_setup_one+0x5d0/0x5d0 [ 837.238185][ T4297] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 837.244173][ T4297] ? read_lock_is_recursive+0x10/0x10 [ 837.249552][ T4297] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 837.255455][ T4297] ? _raw_spin_unlock+0x40/0x40 [ 837.260320][ T4297] ib_cache_event_task+0xd4/0x1c0 [ 837.265354][ T4297] ? process_one_work+0x7a1/0x1160 [ 837.270470][ T4297] process_one_work+0x898/0x1160 [ 837.275419][ T4297] ? worker_detach_from_pool+0x240/0x240 [ 837.281058][ T4297] ? _raw_spin_lock_irq+0xab/0xe0 [ 837.286096][ T4297] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 837.291477][ T4297] ? kthread_data+0x4b/0xc0 [ 837.295992][ T4297] worker_thread+0xaa2/0x1250 [ 837.300683][ T4297] kthread+0x29d/0x330 [ 837.304771][ T4297] ? worker_clr_flags+0x1a0/0x1a0 [ 837.309798][ T4297] ? kthread_blkcg+0xd0/0xd0 [ 837.314397][ T4297] ret_from_fork+0x1f/0x30 [ 837.318833][ T4297] [ 837.322142][ T4297] Kernel Offset: disabled [ 837.326465][ T4297] Rebooting in 86400 seconds..