last executing test programs: 2m54.824981144s ago: executing program 1 (id=928): r0 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r0, 0x409, 0x7) pwritev2(r0, &(0x7f00000007c0)=[{&(0x7f0000000000)="ac01", 0x2}], 0x1, 0x6, 0x5f9b, 0x0) 2m54.102101807s ago: executing program 1 (id=932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 2m53.480987689s ago: executing program 1 (id=934): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="626172726965722c63726561746f723d30c6da432c6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nls=cp869,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00cda88eef6460690a64e8746bfb2b58ce0f9934b742a306036dc0b12a28db4c7ec38aff23528c0cd914221851f22c6d7152cda8", @ANYRES32=0x0], 0x1, 0x5c8, &(0x7f0000005440)="$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") syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000008380)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYBLOB="fb6de6407b95b94665531b96bdea884c003908e83dec9d678910cccd54c7f9c540229a29e28f2894f3a3578712290311dfc303880cee69902c38ee860bef703051c3e3fdc69a9b073d827434a7a998ddc6e913e293ad7167db49c55cf2654e100d7c115fd110e5f3944b563c77d2ebaa398f6e170cc8c6e0100504667cfe4b367eae3864510a5798931dfd4812b2a16e52f95807bb6c157c45f19c6ff68ef7b07bd932e4f0ddf3504a849ff32be407a9cbf0cff620ac8a50c3c585a09990b88198b78287b5b8e7bdce9fd2c453092476e347c2", @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32], 0x8, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000002f80)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32, @ANYBLOB="7b8ae4d950a510a981c78f2246d4825535c37655327112a414ee394162b6e558c36104bc2a1b47a800a92237a6148a222bcace4f74ebf7b4d63ad663b601d02146f21caf496271e9376e3f721e48caaa194f00e137096facebc4e2574ed5d094491b637c93517ded181fdf49e2daceefb5c72f3fef86df384ff03cb9820b35f281ae9b5064199b03e8e689b35f17c7e23647ccaa01c87d80ab00757848", @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRES8, @ANYRES16], 0x0, 0x0, &(0x7f0000000000)) 2m52.443068758s ago: executing program 1 (id=942): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000001b40)=ANY=[@ANYBLOB='dmask=00000000000000000001777,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000263,discard,\x00'], 0x1, 0x1524, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 2m51.24150521s ago: executing program 1 (id=947): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) 2m50.395337629s ago: executing program 1 (id=953): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) sendfile(r0, r0, 0x0, 0x8) write$P9_RLERRORu(r0, &(0x7f0000000380)={0xd, 0x7, 0x2, {{}, 0x8}}, 0xd) 2m46.150871686s ago: executing program 32 (id=953): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) sendfile(r0, r0, 0x0, 0x8) write$P9_RLERRORu(r0, &(0x7f0000000380)={0xd, 0x7, 0x2, {{}, 0x8}}, 0xd) 9.701203737s ago: executing program 3 (id=1587): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000940)={'sit0\x00', 0x0}) 9.210744928s ago: executing program 3 (id=1590): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex, 0x1f, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 8.366819734s ago: executing program 3 (id=1596): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a00000099"], 0x184}}, 0x0) 7.217734791s ago: executing program 3 (id=1601): mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000011, 0x32, 0xffffffffffffffff, 0x8000000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000010002000000000000004000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014f6ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0xff7, &(0x7f0000002d00)=""/4087, 0x41100, 0x5}, 0x94) 6.529760111s ago: executing program 3 (id=1602): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 3.926982478s ago: executing program 2 (id=1620): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x2, 0x4) 3.623954892s ago: executing program 0 (id=1621): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) writev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000100)="c8", 0x1}], 0x2) 3.360920073s ago: executing program 2 (id=1622): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) 3.352407312s ago: executing program 5 (id=1632): r0 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) pwrite64(r0, &(0x7f00000002c0)="e6", 0x1, 0x4002) fcntl$addseals(r0, 0x409, 0xb) 3.294332161s ago: executing program 4 (id=1623): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x1200c86, &(0x7f0000000100)=ANY=[@ANYBLOB='codepage=euc-jp,umask=00000000000000000000000,iocharset=cp932,gid=', @ANYRESHEX=0x0, @ANYRESDEC=0x0], 0x1, 0x297, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x40942, 0x0) lchown(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 2.951745788s ago: executing program 0 (id=1624): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r0, 0x9, 0x0) 2.839866418s ago: executing program 5 (id=1625): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x22, 0x7c, 0x0, @loopback}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2.698540705s ago: executing program 2 (id=1626): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000002000000900010073"], 0x43}}, 0x0) 2.640652229s ago: executing program 4 (id=1627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000024c0)={0xa, 0x4e24, 0x5, @remote, 0x1000}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000002940)="ad40cdc771f4dd8459ef6cde95413515058302f9", 0x14) 2.37682767s ago: executing program 0 (id=1628): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) sysinfo(&(0x7f0000000040)=""/193) 2.172150325s ago: executing program 5 (id=1629): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x12) close(r0) 2.050183773s ago: executing program 4 (id=1630): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=ANY=[@ANYBLOB="6b0000000000000029000000050000000000020000000000000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100010000"], 0x6b}, 0xfc00) 2.001381627s ago: executing program 2 (id=1631): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r1, @ANYBLOB="030000000a00010001"], 0x30}}, 0x4) 1.778186534s ago: executing program 0 (id=1633): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000000)={[{@part={'part', 0x3d, 0x10ffff}}, {@umask={'umask', 0x3d, 0x4ffff}}, {@codepage={'codepage', 0x3d, 'cp861'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}]}, 0x4, 0x343, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000540)=""/239, 0xef) 1.497891511s ago: executing program 5 (id=1634): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write(r1, &(0x7f0000000140)="de9dde", 0x3) 1.349627052s ago: executing program 2 (id=1635): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000008780)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000ec0)=""/246, 0xf6}, {&(0x7f00000026c0)=""/159, 0x9f}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x3}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xffe}], 0x4, 0x40000020, 0x0) 1.349365602s ago: executing program 4 (id=1636): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r1 = dup(r0) writev(r1, &(0x7f0000001580)=[{&(0x7f00000000c0)="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", 0x200}, {0x0}], 0x2) 1.008543173s ago: executing program 5 (id=1637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@multicast]}) 898.338287ms ago: executing program 0 (id=1638): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002"], 0x44}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="dc2000003d0007010000000000000000017c0000040000000c00018006000600800a0000b8200280b12006"], 0x20dc}}, 0x10) 682.932015ms ago: executing program 4 (id=1639): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000030500000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="35230000000000002c0012800b0001006d616373656300001c00028005000b00000000000500060000000000080005000c00000008000500", @ANYRES32=r1], 0x5c}}, 0x0) 241.428307ms ago: executing program 0 (id=1640): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x22, 0x7c, 0x0, @loopback}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 241.202602ms ago: executing program 5 (id=1641): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00bf05"], 0x0, 0x0, 0x0, 0x0}, 0x0) 241.079389ms ago: executing program 2 (id=1642): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000}) 240.961404ms ago: executing program 3 (id=1643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 4 (id=1644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) kernel console output (not intermixed with test programs): 6 bytes leftover after parsing attributes in process `syz.2.737'. [ 390.319445][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.473755][ T7688] loop3: detected capacity change from 0 to 128 [ 390.529051][ T7689] PKCS8: Unsupported PKCS#8 version [ 390.629899][ T7688] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 390.749453][ T7688] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 390.858855][ T7688] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.738: bg 0: bad block bitmap checksum [ 391.244466][ T7699] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 391.252751][ T7699] netlink: 128 bytes leftover after parsing attributes in process `syz.0.743'. [ 391.334699][ T5819] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.456759][ T7703] loop4: detected capacity change from 0 to 256 [ 391.502480][ T7703] exfat: Deprecated parameter 'namecase' [ 391.509789][ T7703] exfat: Deprecated parameter 'utf8' [ 391.740829][ T7703] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 392.703412][ T7717] loop4: detected capacity change from 0 to 256 [ 393.093694][ T7717] FAT-fs (loop4): Directory bread(block 64) failed [ 393.100926][ T7717] FAT-fs (loop4): Directory bread(block 65) failed [ 393.114163][ T7717] FAT-fs (loop4): Directory bread(block 66) failed [ 393.123042][ T7717] FAT-fs (loop4): Directory bread(block 67) failed [ 393.130290][ T7717] FAT-fs (loop4): Directory bread(block 68) failed [ 393.137041][ T7717] FAT-fs (loop4): Directory bread(block 69) failed [ 393.144234][ T7717] FAT-fs (loop4): Directory bread(block 70) failed [ 393.151291][ T7717] FAT-fs (loop4): Directory bread(block 71) failed [ 393.158447][ T7717] FAT-fs (loop4): Directory bread(block 72) failed [ 393.165469][ T7717] FAT-fs (loop4): Directory bread(block 73) failed [ 394.110837][ T7733] sp0: Synchronizing with TNC [ 394.706291][ T1565] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 394.918358][ T1565] usb 3-1: Using ep0 maxpacket: 16 [ 394.942801][ T1565] usb 3-1: unable to get BOS descriptor or descriptor too short [ 395.012541][ T1565] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 395.078454][ T1565] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.088030][ T1565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.096267][ T1565] usb 3-1: Product: syz [ 395.100997][ T1565] usb 3-1: Manufacturer: syz [ 395.105814][ T1565] usb 3-1: SerialNumber: syz [ 395.525255][ T9] kernel write not supported for file /comedi4 (pid: 9 comm: kworker/0:0) [ 395.538243][ T1565] cdc_ncm 3-1:1.0: bind() failure [ 395.557705][ T1565] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 395.573123][ T1565] cdc_ncm 3-1:1.1: bind() failure [ 395.664767][ T7757] loop1: detected capacity change from 0 to 22 [ 395.779495][ T1565] usb 3-1: USB disconnect, device number 9 [ 395.819746][ T7757] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 396.651356][ T7767] loop1: detected capacity change from 0 to 256 [ 397.144779][ T7767] FAT-fs (loop1): Directory bread(block 64) failed [ 397.152028][ T7767] FAT-fs (loop1): Directory bread(block 65) failed [ 397.159188][ T7767] FAT-fs (loop1): Directory bread(block 66) failed [ 397.166062][ T7767] FAT-fs (loop1): Directory bread(block 67) failed [ 397.173321][ T7767] FAT-fs (loop1): Directory bread(block 68) failed [ 397.180791][ T7767] FAT-fs (loop1): Directory bread(block 69) failed [ 397.188820][ T7767] FAT-fs (loop1): Directory bread(block 70) failed [ 397.195582][ T7767] FAT-fs (loop1): Directory bread(block 71) failed [ 397.204957][ T7767] FAT-fs (loop1): Directory bread(block 72) failed [ 397.212554][ T7767] FAT-fs (loop1): Directory bread(block 73) failed [ 398.415974][ T7782] loop0: detected capacity change from 0 to 2048 [ 398.480590][ T1565] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 398.631402][ T7782] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 398.644328][ T7787] loop1: detected capacity change from 0 to 2048 [ 398.650707][ T1565] usb 3-1: Using ep0 maxpacket: 16 [ 398.660345][ T1565] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.660515][ T1565] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.660656][ T1565] usb 3-1: config 0 interface 0 has no altsetting 0 [ 398.660835][ T1565] usb 3-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 398.660983][ T1565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.673815][ T1565] usb 3-1: config 0 descriptor?? [ 398.674322][ T7782] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 398.718313][ T7787] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 398.859075][ T7789] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 399.215890][ T1565] chicony 0003:04F2:0418.000A: unbalanced collection at end of report description [ 399.268248][ T1565] chicony 0003:04F2:0418.000A: Chicony hid parse failed: -22 [ 399.268870][ T1565] chicony 0003:04F2:0418.000A: probe with driver chicony failed with error -22 [ 399.429285][ T1565] usb 3-1: USB disconnect, device number 10 [ 399.732463][ T7794] loop0: detected capacity change from 0 to 16 [ 399.798430][ T7794] erofs (device loop0): mounted with root inode @ nid 36. [ 399.918411][ T7794] syz.0.788: attempt to access beyond end of device [ 399.918411][ T7794] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 401.501863][ T7811] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 401.527805][ T7814] loop0: detected capacity change from 0 to 512 [ 401.560533][ T7814] EXT4-fs: Ignoring removed nobh option [ 401.653451][ T7814] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.798: iget: bad i_size value: 38620345925642 [ 401.655220][ T7814] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.798: couldn't read orphan inode 15 (err -117) [ 401.659487][ T7814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.799244][ T7814] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.798: bg 0: block 5: invalid block bitmap [ 401.851587][ T7814] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 401.851745][ T7814] EXT4-fs (loop0): This should not happen!! Data will be lost [ 401.851745][ T7814] [ 401.851840][ T7814] EXT4-fs (loop0): Total free blocks count 0 [ 401.851938][ T7814] EXT4-fs (loop0): Free/Dirty block details [ 401.852037][ T7814] EXT4-fs (loop0): free_blocks=0 [ 401.852130][ T7814] EXT4-fs (loop0): dirty_blocks=2 [ 401.852221][ T7814] EXT4-fs (loop0): Block reservation details [ 401.852311][ T7814] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 402.291780][ T7821] loop4: detected capacity change from 0 to 256 [ 402.358412][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.412825][ T7821] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 404.073227][ T7838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.073302][ T7838] IPv6: NLM_F_CREATE should be set when creating new route [ 404.073387][ T7838] IPv6: NLM_F_CREATE should be set when creating new route [ 404.073458][ T7838] IPv6: NLM_F_CREATE should be set when creating new route [ 404.097580][ T7838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.118003][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 404.673859][ T7846] loop4: detected capacity change from 0 to 256 [ 404.758408][ T7846] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 404.769965][ T7846] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 404.896698][ T7846] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 405.305390][ T7854] loop0: detected capacity change from 0 to 1024 [ 405.478904][ T7854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.492687][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 405.760101][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 405.813368][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 405.825348][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.835657][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00 [ 405.845252][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.986936][ T24] usb 4-1: config 0 descriptor?? [ 406.201436][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.475359][ T24] apple 0003:05AC:0292.000B: item fetching failed at offset 5/7 [ 406.592710][ T24] apple 0003:05AC:0292.000B: parse failed [ 406.606796][ T24] apple 0003:05AC:0292.000B: probe with driver apple failed with error -22 [ 406.780699][ T24] usb 4-1: USB disconnect, device number 5 [ 406.834666][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 406.843983][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'. [ 407.876140][ T7872] loop0: detected capacity change from 0 to 40427 [ 407.887628][ T1565] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 407.901597][ T7872] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 407.910297][ T7872] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 407.932664][ T7872] F2FS-fs (loop0): invalid crc value [ 407.963252][ T7872] F2FS-fs (loop0): Current segment's next free block offset is inconsistent with bitmap, logtype:3, segno:0, type:0, next_blkoff:3, blkofs:4 [ 407.997818][ T7872] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 408.097782][ T1565] usb 5-1: Using ep0 maxpacket: 8 [ 408.134117][ T1565] usb 5-1: unable to get BOS descriptor or descriptor too short [ 408.250181][ T1565] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 408.259689][ T1565] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.281949][ T1565] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 408.295836][ T1565] usb 5-1: config 1 has no interface number 1 [ 408.302540][ T1565] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 408.315834][ T1565] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 408.329827][ T1565] usb 5-1: config 1 interface 2 has no altsetting 0 [ 408.338119][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 408.453838][ T7885] loop3: detected capacity change from 0 to 256 [ 408.558738][ T1565] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.573213][ T1565] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.583355][ T1565] usb 5-1: Product: syz [ 408.587945][ T1565] usb 5-1: Manufacturer: syz [ 408.592995][ T1565] usb 5-1: SerialNumber: syz [ 408.610244][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 408.621999][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 408.632366][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 408.641912][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.719109][ T7885] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 408.840114][ T7883] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 409.076112][ T1565] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 409.091941][ T1565] usb 5-1: MIDIStreaming interface descriptor not found [ 409.308452][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 409.412887][ T1565] usb 5-1: USB disconnect, device number 5 [ 409.704433][ T24] usb 2-1: USB disconnect, device number 9 [ 410.130664][ T6724] udevd[6724]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.547050][ T7907] loop1: detected capacity change from 0 to 512 [ 410.580246][ T7907] EXT4-fs: Ignoring removed i_version option [ 410.646055][ T7907] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 410.711976][ T7909] loop3: detected capacity change from 0 to 512 [ 410.802663][ T7907] EXT4-fs (loop1): 1 truncate cleaned up [ 410.811617][ T7907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.006653][ T7909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.020653][ T7909] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.051031][ T7909] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 10: comm syz.3.837: lblock 15 mapped to illegal pblock 10 (length 19) [ 411.252058][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.465800][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.011592][ T7944] loop4: detected capacity change from 0 to 512 [ 413.087774][ T7944] EXT4-fs: Ignoring removed mblk_io_submit option [ 413.235599][ T7944] EXT4-fs error (device loop4): __ext4_iget:5464: inode #11: block 1: comm syz.4.853: invalid block [ 413.335481][ T7949] macsec0: entered promiscuous mode [ 413.342398][ T7949] macsec0: entered allmulticast mode [ 413.367573][ T7944] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.853: couldn't read orphan inode 11 (err -117) [ 413.396461][ T7952] veth1_macvtap: entered allmulticast mode [ 413.403636][ T7952] macsec0: left promiscuous mode [ 413.410247][ T7952] macsec0: left allmulticast mode [ 413.415935][ T7952] veth1_macvtap: left allmulticast mode [ 413.427248][ T7944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.902706][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.929518][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 414.148451][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.160364][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.170797][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 414.180573][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.277468][ T24] usb 2-1: config 0 descriptor?? [ 414.420712][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 414.782100][ T24] cp2112 0003:10C4:EA90.000C: item fetching failed at offset 5/7 [ 414.802930][ T7970] netlink: 'syz.2.862': attribute type 29 has an invalid length. [ 414.869704][ T24] cp2112 0003:10C4:EA90.000C: parse failed [ 414.876631][ T24] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -22 [ 414.933755][ T7972] netlink: 'syz.2.862': attribute type 29 has an invalid length. [ 415.020434][ T24] usb 2-1: USB disconnect, device number 10 [ 415.296456][ T7976] loop4: detected capacity change from 0 to 512 [ 415.611930][ T7976] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 415.679854][ T7976] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 415.688846][ T7976] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.865: iget: bad i_size value: 12154757448730 [ 415.728905][ T7979] loop3: detected capacity change from 0 to 256 [ 415.730990][ T7976] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.865: couldn't read orphan inode 13 (err -117) [ 415.830974][ T7976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.591436][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.696951][ T7989] loop2: detected capacity change from 0 to 1024 [ 416.960883][ T7989] hfsplus: found bad thread record in catalog [ 417.312576][ T3676] hfsplus: b-tree write err: -5, ino 4 [ 418.517028][ T8011] loop2: detected capacity change from 0 to 64 [ 418.906433][ T30] audit: type=1800 audit(1754484790.722:28): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.883" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 419.055930][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.062899][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.263239][ T30] audit: type=1800 audit(1754484791.069:29): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.881" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 419.565607][ T8024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.887'. [ 419.842790][ T8025] loop3: detected capacity change from 0 to 2048 [ 419.996019][ T8025] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.444455][ T8051] loop2: detected capacity change from 0 to 256 [ 421.954615][ T8059] loop3: detected capacity change from 0 to 256 [ 422.001290][ T8051] FAT-fs (loop2): Directory bread(block 64) failed [ 422.008468][ T8051] FAT-fs (loop2): Directory bread(block 65) failed [ 422.015472][ T8051] FAT-fs (loop2): Directory bread(block 66) failed [ 422.022669][ T8051] FAT-fs (loop2): Directory bread(block 67) failed [ 422.029950][ T8051] FAT-fs (loop2): Directory bread(block 68) failed [ 422.037469][ T8051] FAT-fs (loop2): Directory bread(block 69) failed [ 422.044535][ T8051] FAT-fs (loop2): Directory bread(block 70) failed [ 422.051636][ T8051] FAT-fs (loop2): Directory bread(block 71) failed [ 422.061196][ T8051] FAT-fs (loop2): Directory bread(block 72) failed [ 422.069092][ T8051] FAT-fs (loop2): Directory bread(block 73) failed [ 422.257183][ T8062] loop1: detected capacity change from 0 to 512 [ 422.652272][ T8062] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.905: bg 0: block 248: padding at end of block bitmap is not set [ 422.746804][ T8062] Quota error (device loop1): write_blk: dquota write failed [ 422.755193][ T8062] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 422.768611][ T8062] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.905: Failed to acquire dquot type 1 [ 422.871463][ T8062] EXT4-fs (loop1): 1 truncate cleaned up [ 422.898723][ T8062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.912613][ T8062] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.924470][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 423.107343][ T8073] raw_sendmsg: syz.2.908 forgot to set AF_INET. Fix it! [ 423.144559][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.156498][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 423.166443][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.371301][ T24] usb 5-1: config 0 descriptor?? [ 423.565831][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.909176][ T24] lenovo 0003:17EF:60A3.000D: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0 [ 424.058044][ T1565] usb 5-1: USB disconnect, device number 6 [ 424.730791][ T30] audit: type=1326 audit(1754484796.653:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.2.915" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f568938ebe9 code=0x0 [ 424.752981][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.854867][ T8091] loop0: detected capacity change from 0 to 64 [ 424.929381][ T8091] syz.0.917: attempt to access beyond end of device [ 424.929381][ T8091] loop0: rw=0, sector=482, nr_sectors = 2 limit=64 [ 424.943405][ T8091] Buffer I/O error on dev loop0, logical block 241, async page read [ 424.951982][ T8091] syz.0.917: attempt to access beyond end of device [ 424.951982][ T8091] loop0: rw=0, sector=482, nr_sectors = 2 limit=64 [ 424.965379][ T8091] Buffer I/O error on dev loop0, logical block 241, async page read [ 425.009862][ T8085] fido_id[8085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 425.020879][ T30] audit: type=1800 audit(1754484796.917:31): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.917" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 426.071346][ T8107] netlink: 'syz.1.924': attribute type 62 has an invalid length. [ 426.284195][ T1565] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 426.396170][ T8100] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 426.542880][ T1565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.555056][ T1565] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 426.564735][ T1565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.655782][ T1565] usb 3-1: config 0 descriptor?? [ 427.151890][ T1565] smartjoyplus 0003:6666:8804.000E: item fetching failed at offset 2/5 [ 427.258333][ T1565] smartjoyplus 0003:6666:8804.000E: parse failed [ 427.265768][ T1565] smartjoyplus 0003:6666:8804.000E: probe with driver smartjoyplus failed with error -22 [ 427.266464][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.929'. [ 427.366341][ T1565] usb 3-1: USB disconnect, device number 11 [ 428.285600][ T8132] loop1: detected capacity change from 0 to 1024 [ 428.548865][ T8132] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 428.808141][ T8141] loop0: detected capacity change from 0 to 1024 [ 429.083331][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'. [ 429.094071][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 429.103896][ T8144] netlink: 'syz.2.941': attribute type 15 has an invalid length. [ 429.173118][ T8146] loop1: detected capacity change from 0 to 256 [ 429.410748][ T8146] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 430.152743][ T8153] loop2: detected capacity change from 0 to 1024 [ 430.203133][ T8153] EXT4-fs: Ignoring removed bh option [ 430.303728][ T8153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 430.488191][ T8161] tmpfs: Cannot enable quota on remount [ 430.879493][ T3601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.079494][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 431.157133][ T8163] loop3: detected capacity change from 0 to 4096 [ 431.171376][ T3601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.329248][ T8168] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 431.391108][ T3601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.740216][ T3601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.426319][ T8167] loop0: detected capacity change from 0 to 40427 [ 432.442313][ T3601] bridge_slave_1: left allmulticast mode [ 432.449606][ T3601] bridge_slave_1: left promiscuous mode [ 432.458741][ T3601] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.548334][ T3601] bridge_slave_0: left allmulticast mode [ 432.554254][ T3601] bridge_slave_0: left promiscuous mode [ 432.561226][ T3601] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.588930][ T8167] F2FS-fs (loop0): build fault injection rate: 25 [ 432.595607][ T8167] F2FS-fs (loop0): build fault injection type: 0x3bfe8d [ 432.627481][ T8167] F2FS-fs (loop0): invalid crc value [ 432.633847][ T8167] F2FS-fs (loop0): Wrong cp_pack_start_sum: 1 [ 432.643205][ T8167] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 434.107335][ T3601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.156140][ T3601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.209693][ T3601] bond0 (unregistering): Released all slaves [ 434.379419][ T3601] tipc: Left network mode [ 434.928149][ T3601] hsr_slave_0: left promiscuous mode [ 434.954148][ T3601] hsr_slave_1: left promiscuous mode [ 434.962686][ T3601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.970741][ T3601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.027110][ T3601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.035803][ T3601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.127584][ T3601] veth1_macvtap: left promiscuous mode [ 435.133358][ T3601] veth0_macvtap: left promiscuous mode [ 435.139629][ T3601] veth1_vlan: left promiscuous mode [ 435.145327][ T3601] veth0_vlan: left promiscuous mode [ 436.937088][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 437.157754][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 437.172764][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 437.275469][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 437.297344][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 438.018111][ T3601] team0 (unregistering): Port device team_slave_1 removed [ 438.061017][ T8199] loop4: detected capacity change from 0 to 32768 [ 438.074470][ T8199] gfs2: Bad value for 'commit' [ 438.292183][ T3601] team0 (unregistering): Port device team_slave_0 removed [ 438.678107][ T8188] : entered promiscuous mode [ 439.257087][ T3601] IPVS: stop unused estimator thread 0... [ 439.431341][ T5822] Bluetooth: hci4: command tx timeout [ 440.585731][ T8197] chnl_net:caif_netlink_parms(): no params data found [ 440.874455][ T8235] ptrace attach of "./syz-executor exec"[5815] was attempted by "ߖ鷴)Qo \x0dvҢ9T{-92\x0ap_3j nޭOa)bkߟ.\x0aK~򜛱تKOkF^3B3){\x5crHBd,X\x09\x0b3c\x22&W\x22\x1bTL'\x09!_Nhٹ=n>a (G6茷A+&ϋЈUߍa{@{\x0b[ɸYacAzÂGl:d<]u~v!9,?Ŵ>\x22ar\x1blKڬY*VS8ȁ6]kK.=`#\x07x!gMDR*OLK\x0c}oKbA>{@aMdnQj̖5)];r,L\x0c=\x0dWAE n`>Ɵs-3`yfeH^/$L1&NP\x0d1D<\x07cPd(EdtaE!ҭ \x09@ݞHG~H%3{- ^Qǚ4e3\x0b>sF̗H]+\x [ 441.385743][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 441.491070][ T8243] netlink: 116 bytes leftover after parsing attributes in process `syz.4.978'. [ 441.550659][ T5822] Bluetooth: hci4: command tx timeout [ 442.230740][ T8253] loop0: detected capacity change from 0 to 512 [ 442.309356][ T8253] EXT4-fs: Ignoring removed mblk_io_submit option [ 442.376749][ T8253] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 442.461747][ T8253] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 442.583346][ T8253] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 442.651518][ T8253] EXT4-fs (loop0): 1 truncate cleaned up [ 442.663487][ T8253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.710752][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.718939][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.727389][ T8197] bridge_slave_0: entered allmulticast mode [ 442.737358][ T8197] bridge_slave_0: entered promiscuous mode [ 442.920082][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.928463][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.936567][ T8197] bridge_slave_1: entered allmulticast mode [ 442.946414][ T8197] bridge_slave_1: entered promiscuous mode [ 443.075020][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.535547][ T8197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.584855][ T5822] Bluetooth: hci4: command tx timeout [ 443.719847][ T8197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.889678][ T1873] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 444.101419][ T1873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.112846][ T1873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.123652][ T1873] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 444.133184][ T1873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.275960][ T8280] loop0: detected capacity change from 0 to 256 [ 444.295305][ T8197] team0: Port device team_slave_0 added [ 444.344587][ T1873] usb 3-1: config 0 descriptor?? [ 444.359284][ T8280] exfat: Deprecated parameter 'namecase' [ 444.365754][ T8280] exfat: Deprecated parameter 'utf8' [ 444.395818][ T8197] team0: Port device team_slave_1 added [ 444.607358][ T8280] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 444.836878][ T1873] hid-led 0003:1D34:0004.000F: unknown main item tag 0x0 [ 444.847804][ T8197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.856948][ T8197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.886215][ T8197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.006195][ T1873] hid-led 0003:1D34:0004.000F: probe with driver hid-led failed with error -71 [ 445.076512][ T1873] usb 3-1: USB disconnect, device number 12 [ 445.117114][ T8197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.117201][ T8197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.117363][ T8197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.646159][ T5822] Bluetooth: hci4: command tx timeout [ 445.680695][ T8197] hsr_slave_0: entered promiscuous mode [ 445.691927][ T8197] hsr_slave_1: entered promiscuous mode [ 445.701021][ T8197] debugfs: 'hsr0' already exists in 'hsr' [ 445.707417][ T8197] Cannot create hsr debugfs directory [ 445.719425][ T8295] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 446.613599][ T1873] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 446.873770][ T1873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 446.885885][ T1873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.897228][ T1873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.911483][ T1873] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 446.920941][ T1873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.994411][ T8300] loop4: detected capacity change from 0 to 32768 [ 447.157790][ T1873] usb 3-1: config 0 descriptor?? [ 447.224449][ T8307] loop0: detected capacity change from 0 to 512 [ 447.317762][ T8300] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 447.317935][ T8300] allowing incompatible features above 0.9: (unknown version) [ 447.318034][ T8300] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 447.371998][ T8300] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 447.380592][ T8300] bcachefs (loop4): initializing new filesystem [ 447.416492][ T8300] bcachefs (loop4): going read-write [ 447.466962][ T8300] bcachefs (loop4): marking superblocks [ 447.514721][ T8307] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.999: casefold flag without casefold feature [ 447.520542][ T8300] bcachefs (loop4): initializing freespace [ 447.564343][ T8300] bcachefs (loop4): done initializing freespace [ 447.586751][ T8300] bcachefs (loop4): reading snapshots table [ 447.593254][ T8300] bcachefs (loop4): reading snapshots done [ 447.692915][ T8307] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.999: couldn't read orphan inode 15 (err -117) [ 447.705685][ T1873] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 447.713079][ T1873] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 447.720587][ T1873] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 447.727993][ T1873] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 447.735410][ T1873] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 447.741895][ T8307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.777991][ T8300] bcachefs (loop4): done starting filesystem [ 447.851382][ T1873] acrux 0003:1A34:0802.0010: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 447.865958][ T1873] acrux 0003:1A34:0802.0010: no inputs found [ 447.872189][ T1873] acrux 0003:1A34:0802.0010: Failed to enable force feedback support, error: -19 [ 447.986873][ T8300] syz.4.996 (8300) used greatest stack depth: 1200 bytes left [ 448.042077][ T5817] bcachefs (loop4): shutting down [ 448.047836][ T5817] bcachefs (loop4): going read-only [ 448.053864][ T5817] bcachefs (loop4): finished waiting for writes to stop [ 448.085389][ T1873] usb 3-1: USB disconnect, device number 13 [ 448.198464][ T5817] bcachefs (loop4): flushing journal and stopping allocators, journal seq 6 [ 448.667805][ T8197] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 448.707402][ T5817] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 448.770794][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.782964][ T5817] bcachefs (loop4): clean shutdown complete, journal seq 11 [ 448.872593][ T5817] bcachefs (loop4): marking filesystem clean [ 448.897621][ T8197] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 449.012873][ T8197] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 449.172425][ T8197] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 449.179539][ T5817] bcachefs (loop4): shutdown complete [ 449.758071][ T8327] fido_id[8327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 450.171330][ T8339] loop2: detected capacity change from 0 to 64 [ 450.827646][ T8197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.096791][ T8197] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.230058][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.237770][ T4740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.426045][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.428217][ T8349] loop3: detected capacity change from 0 to 16 [ 451.433686][ T4740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.210834][ T5828] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 453.299137][ T8366] loop3: detected capacity change from 0 to 256 [ 453.540193][ T8370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1016'. [ 453.852429][ T8366] FAT-fs (loop3): Directory bread(block 64) failed [ 453.859562][ T8366] FAT-fs (loop3): Directory bread(block 65) failed [ 453.866603][ T8366] FAT-fs (loop3): Directory bread(block 66) failed [ 453.873970][ T8366] FAT-fs (loop3): Directory bread(block 67) failed [ 453.881117][ T8366] FAT-fs (loop3): Directory bread(block 68) failed [ 453.892028][ T8366] FAT-fs (loop3): Directory bread(block 69) failed [ 453.901899][ T8366] FAT-fs (loop3): Directory bread(block 70) failed [ 453.908924][ T8366] FAT-fs (loop3): Directory bread(block 71) failed [ 453.915830][ T8366] FAT-fs (loop3): Directory bread(block 72) failed [ 453.922760][ T8366] FAT-fs (loop3): Directory bread(block 73) failed [ 454.352287][ T8197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.465007][ T8386] loop4: detected capacity change from 0 to 256 [ 457.213973][ T5828] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 457.222881][ T5828] Bluetooth: hci3: Injecting HCI hardware error event [ 457.230742][ T5828] Bluetooth: hci3: hardware error 0x00 [ 457.439371][ T8412] loop0: detected capacity change from 0 to 512 [ 457.441133][ T8417] loop2: detected capacity change from 0 to 65 [ 457.537517][ T8197] veth0_vlan: entered promiscuous mode [ 457.603122][ T8417] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 457.667494][ T8197] veth1_vlan: entered promiscuous mode [ 457.702857][ T8412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.716051][ T8412] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 457.996095][ T8197] veth0_macvtap: entered promiscuous mode [ 458.081805][ T8197] veth1_macvtap: entered promiscuous mode [ 458.158591][ T8426] loop4: detected capacity change from 0 to 256 [ 458.209869][ T8423] loop3: detected capacity change from 0 to 2048 [ 458.323152][ T8197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.348312][ T8423] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.443583][ T8197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.532540][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.603325][ T3706] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.656535][ T3706] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.725974][ T3601] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.776297][ T8426] FAT-fs (loop4): Directory bread(block 64) failed [ 458.783376][ T8426] FAT-fs (loop4): Directory bread(block 65) failed [ 458.794690][ T8426] FAT-fs (loop4): Directory bread(block 66) failed [ 458.804866][ T8426] FAT-fs (loop4): Directory bread(block 67) failed [ 458.805658][ T3601] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.812057][ T8426] FAT-fs (loop4): Directory bread(block 68) failed [ 458.812192][ T8426] FAT-fs (loop4): Directory bread(block 69) failed [ 458.812455][ T8426] FAT-fs (loop4): Directory bread(block 70) failed [ 458.812570][ T8426] FAT-fs (loop4): Directory bread(block 71) failed [ 458.812835][ T8426] FAT-fs (loop4): Directory bread(block 72) failed [ 458.812951][ T8426] FAT-fs (loop4): Directory bread(block 73) failed [ 459.081099][ T30] audit: type=1800 audit(1754484831.169:32): pid=8426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1033" name="file1" dev="loop4" ino=1048731 res=0 errno=0 [ 459.289591][ T5828] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 459.411188][ T8433] loop0: detected capacity change from 0 to 1024 [ 459.491726][ T8433] EXT4-fs: Ignoring removed bh option [ 459.497828][ T8433] EXT4-fs: inline encryption not supported [ 459.737381][ T8433] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 459.925622][ T8433] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 460.079944][ T8433] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.1034: lblock 2 mapped to illegal pblock 2 (length 1) [ 460.237829][ T8444] binder: 8440:8444 ioctl c018620c 200000000000 returned -1 [ 460.271128][ T8433] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 460.281096][ T8433] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1034: lblock 0 mapped to illegal pblock 48 (length 1) [ 460.407287][ T8433] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 460.416327][ T8433] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1034: Failed to acquire dquot type 0 [ 460.551041][ T8433] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 460.656890][ T8433] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1034: mark_inode_dirty error [ 460.765907][ T8433] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 460.776918][ T8433] EXT4-fs (loop0): 1 orphan inode deleted [ 460.784948][ T8433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.815621][ T3706] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 460.941509][ T3706] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 460.950449][ T3706] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:17: Failed to release dquot type 0 [ 461.134267][ T8451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1041'. [ 461.183496][ T8433] EXT4-fs: Cannot change journaled quota options when quota turned on [ 461.720007][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.873946][ T5813] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 461.950079][ T5813] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 462.010726][ T5813] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 462.105328][ T1565] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 462.338034][ T1565] usb 3-1: Using ep0 maxpacket: 16 [ 462.406417][ T1565] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 462.414980][ T1565] usb 3-1: config 0 has no interface number 0 [ 462.421330][ T1565] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 462.432808][ T1565] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 462.645643][ T1565] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 462.655425][ T1565] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 462.663847][ T1565] usb 3-1: Product: syz [ 462.668463][ T1565] usb 3-1: SerialNumber: syz [ 462.752399][ T9] kernel write not supported for file /input/mouse0 (pid: 9 comm: kworker/0:0) [ 462.770067][ T1565] usb 3-1: config 0 descriptor?? [ 462.860816][ T1565] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 462.872174][ T1565] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input7 [ 463.030006][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.042093][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.051662][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.062316][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.070005][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.077590][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.087838][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.096440][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.104171][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.112322][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.247231][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 463.256757][ T1565] usb 3-1: USB disconnect, device number 14 [ 463.273151][ T1565] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 464.161037][ T8485] loop3: detected capacity change from 0 to 512 [ 464.269294][ T8485] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 464.344517][ T8485] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 464.430328][ T8492] loop2: detected capacity change from 0 to 64 [ 464.438882][ T8485] System zones: 1-12 [ 464.484381][ T8485] EXT4-fs (loop3): orphan cleanup on readonly fs [ 464.512094][ T8492] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 464.526949][ T8485] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1052: bg 0: block 361: padding at end of block bitmap is not set [ 464.662447][ T8485] EXT4-fs (loop3): Remounting filesystem read-only [ 464.733918][ T8485] EXT4-fs (loop3): 1 truncate cleaned up [ 464.770318][ T8485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 465.020605][ T30] audit: type=1400 audit(1754484837.136:33): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626207376312C7573726A71756F74613D2C6572726F72733D72656D6F756E742D726F2C696E69745F697461626C65 pid=8483 comm="syz.3.1052" [ 465.429888][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 465.526915][ T8504] loop2: detected capacity change from 0 to 64 [ 465.737586][ T8496] loop0: detected capacity change from 0 to 4096 [ 465.876203][ T8496] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 465.984802][ T8509] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 466.205526][ T8511] overlayfs: missing 'lowerdir' [ 466.811909][ T30] audit: type=1800 audit(1754484838.918:34): pid=8496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1055" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 466.832586][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.025973][ T8519] loop4: detected capacity change from 0 to 64 [ 468.643458][ T3601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.652833][ T3601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.960855][ T8543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1070'. [ 468.984339][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.993120][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.545390][ T1565] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 469.784812][ T1565] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.796276][ T1565] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.913621][ T1565] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 469.913786][ T1565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 469.913916][ T1565] usb 5-1: SerialNumber: syz [ 470.189728][ T1565] usb 5-1: 0:2 : does not exist [ 470.189972][ T1565] usb 5-1: unit 255 not found! [ 470.408222][ T1565] usb 5-1: USB disconnect, device number 7 [ 470.918148][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.412243][ T8566] sp0: Synchronizing with TNC [ 471.488379][ T8565] [U] ` [ 472.739808][ T8587] loop3: detected capacity change from 0 to 1024 [ 472.925370][ T8587] hfsplus: bad catalog entry type [ 473.236463][ T3861] hfsplus: b-tree write err: -5, ino 4 [ 473.268562][ T5828] Bluetooth: hci1: unexpected event for opcode 0x204e [ 474.198540][ T8600] loop0: detected capacity change from 0 to 32768 [ 474.336557][ T8600] (syz.0.1091,8600,1):ocfs2_check_set_options:1252 ERROR: User quotas were requested, but this filesystem does not have the feature enabled. [ 474.366383][ T8600] (syz.0.1091,8600,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 475.320948][ T8618] loop0: detected capacity change from 0 to 128 [ 475.380786][ T8618] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 475.543999][ T8618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.784096][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1105'. [ 476.793567][ T8638] tc_dump_action: action bad kind [ 477.858073][ T8650] loop0: detected capacity change from 0 to 16 [ 477.963630][ T8650] erofs (device loop0): mounted with root inode @ nid 36. [ 478.025547][ T1873] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 478.245523][ T1873] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 478.257236][ T1873] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.268024][ T1873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 478.275073][ T1873] usb 5-1: New USB device found, idVendor=05ac, idProduct=8242, bcdDevice= 0.00 [ 478.284820][ T1873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.514595][ T1873] usb 5-1: config 0 descriptor?? [ 479.035182][ T1873] appleir 0003:05AC:8242.0011: item fetching failed at offset 5/7 [ 479.081487][ T1873] appleir 0003:05AC:8242.0011: parse failed [ 479.088867][ T1873] appleir 0003:05AC:8242.0011: probe with driver appleir failed with error -22 [ 479.237028][ T1873] usb 5-1: USB disconnect, device number 8 [ 479.703232][ T8671] netlink: 'syz.2.1119': attribute type 3 has an invalid length. [ 479.723842][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 479.934180][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 480.005102][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.017027][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.027377][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 480.041081][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 480.050626][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.112212][ T41] IPVS: starting estimator thread 0... [ 480.194107][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.202268][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 480.239315][ T8675] IPVS: using max 192 ests per chain, 9600 per kthread [ 480.345094][ T24] usb 4-1: config 0 descriptor?? [ 480.854439][ T24] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 480.864505][ T24] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 481.133426][ T24] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 481.146357][ T24] microsoft 0003:045E:07DA.0012: no inputs found [ 481.154158][ T24] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 481.231228][ T41] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 481.346162][ T24] usb 4-1: USB disconnect, device number 6 [ 481.430035][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.443369][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.456482][ T41] usb 1-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 481.466154][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.570084][ T8682] loop4: detected capacity change from 0 to 4096 [ 481.651698][ T41] usb 1-1: config 0 descriptor?? [ 482.278349][ T41] logitech 0003:046D:C287.0013: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.0-1/input0 [ 482.292130][ T41] logitech 0003:046D:C287.0013: no inputs found [ 482.468556][ T41] usb 1-1: USB disconnect, device number 3 [ 482.599850][ T8691] fido_id[8691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 482.722632][ T8699] affs: No valid root block on device nullb0 [ 482.753072][ T8682] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 483.225142][ T8682] ntfs3(loop4): ino=1f, "file2" attr_set_size [ 483.662598][ T8707] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1132'. [ 483.802053][ T5817] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22. [ 484.055922][ T8708] loop0: detected capacity change from 0 to 2364 [ 484.151374][ T5828] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 484.158784][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 484.629184][ T8718] loop4: detected capacity change from 0 to 256 [ 484.632105][ T8713] fido_id[8713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 485.514295][ T8719] loop3: detected capacity change from 0 to 4096 [ 485.570363][ T8723] loop2: detected capacity change from 0 to 32768 [ 485.581019][ T8723] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value [ 485.861958][ T8719] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 486.451976][ T8732] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 486.458880][ T8732] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 486.466713][ T8732] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 486.473611][ T8732] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 486.480558][ T8732] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 486.487457][ T8732] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 486.494379][ T8732] comedi comedi3: 8255: I/O port conflict (0x400000a,4) [ 486.503120][ T8732] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 486.510051][ T8732] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 486.516891][ T8732] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 486.527600][ T8732] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 486.535855][ T8732] comedi comedi3: 8255: I/O port conflict (0x101,4) [ 486.542941][ T8732] comedi comedi3: 8255: I/O port conflict (0x40,4) [ 486.550609][ T8732] comedi comedi3: 8255: I/O port conflict (0x1a449,4) [ 486.557792][ T8732] comedi comedi3: 8255: I/O port conflict (0x300000,4) [ 486.750903][ T8719] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 487.210593][ T30] audit: type=1326 audit(1754484859.349:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76498ebe9 code=0x7ffc0000 [ 487.234040][ T30] audit: type=1326 audit(1754484859.349:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76498ebe9 code=0x7ffc0000 [ 487.370051][ T30] audit: type=1326 audit(1754484859.409:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fb76498ebe9 code=0x7ffc0000 [ 487.393805][ T30] audit: type=1326 audit(1754484859.479:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76498ebe9 code=0x7ffc0000 [ 487.416602][ T30] audit: type=1326 audit(1754484859.479:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76498ebe9 code=0x7ffc0000 [ 487.985502][ T8738] loop0: detected capacity change from 0 to 4096 [ 488.283118][ T8738] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 488.293781][ T8748] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.346627][ T8738] NILFS (loop0): mounting fs with errors [ 488.849524][ T8757] loop5: detected capacity change from 0 to 64 [ 489.743189][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.751859][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.178819][ T11] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 490.264163][ T8763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.294888][ T8763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.449207][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 490.462451][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.473660][ T11] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 490.487890][ T11] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 490.498717][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.630049][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 490.769609][ T11] usb 4-1: config 0 descriptor?? [ 490.842874][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 490.895253][ T24] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 490.904474][ T24] usb 3-1: config 179 has no interface number 0 [ 490.911731][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 490.926658][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 490.939679][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 490.951330][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 490.963189][ T24] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 490.976933][ T24] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 490.986410][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.349403][ T11] acrux 0003:1A34:0802.0014: unknown main item tag 0x0 [ 491.356817][ T11] acrux 0003:1A34:0802.0014: unknown main item tag 0x0 [ 491.364467][ T11] acrux 0003:1A34:0802.0014: unknown main item tag 0x0 [ 491.371798][ T11] acrux 0003:1A34:0802.0014: unknown main item tag 0x0 [ 491.379111][ T11] acrux 0003:1A34:0802.0014: unknown main item tag 0x0 [ 491.522888][ T8770] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 491.550845][ T11] acrux 0003:1A34:0802.0014: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 491.562631][ T11] acrux 0003:1A34:0802.0014: no inputs found [ 491.569282][ T11] acrux 0003:1A34:0802.0014: Failed to enable force feedback support, error: -19 [ 491.638723][ T3861] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.720145][ T3861] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.807401][ T3861] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.851747][ T11] usb 4-1: USB disconnect, device number 7 [ 491.920198][ T3861] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.973312][ T8770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.984161][ T8770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.318381][ T24] usb 3-1: USB disconnect, device number 15 [ 492.325517][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 492.325764][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 492.908881][ T8784] fido_id[8784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 493.567879][ T11] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 493.590621][ T8805] binder: 8804:8805 ioctl c018620c 200000000000 returned -1 [ 493.728758][ T1565] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 493.760532][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 493.803270][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.818257][ T11] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 493.828301][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.979684][ T1565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.991058][ T1565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.004832][ T1565] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 494.015539][ T1565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.076184][ T11] usb 6-1: config 0 descriptor?? [ 494.242864][ T1565] usb 3-1: config 0 descriptor?? [ 494.263643][ T8810] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1170'. [ 494.691768][ T8812] loop3: detected capacity change from 0 to 1024 [ 494.851059][ T11] aquacomputer_d5next 0003:0C70:F00E.0015: hidraw0: USB HID v0.83 Device [HID 0c70:f00e] on usb-dummy_hcd.5-1/input0 [ 494.921320][ T1565] logitech 0003:046D:C287.0016: hidraw1: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.2-1/input0 [ 494.933153][ T1565] logitech 0003:046D:C287.0016: no inputs found [ 495.031063][ T8812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.156203][ T11] usb 6-1: USB disconnect, device number 2 [ 495.200705][ T1565] usb 3-1: USB disconnect, device number 16 [ 495.670103][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.286707][ T8823] fido_id[8823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 496.313735][ T8822] fido_id[8822]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 496.727716][ T11] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 496.979552][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.991282][ T11] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 497.000833][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.138759][ T11] usb 3-1: config 0 descriptor?? [ 497.849202][ T11] itetech 0003:258A:6A88.0017: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 498.040110][ T11] usb 3-1: USB disconnect, device number 17 [ 498.099198][ T5828] Bluetooth: hci2: Malformed Event: 0x2f [ 498.733445][ T8845] loop3: detected capacity change from 0 to 32768 [ 498.743989][ T8845] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value [ 499.965849][ T8865] loop3: detected capacity change from 0 to 256 [ 500.274512][ T8860] fido_id[8860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 500.429535][ T8859] loop0: detected capacity change from 0 to 4096 [ 500.556592][ T8859] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 501.025248][ T8859] ntfs3(loop0): ino=19, mi_enum_attr [ 501.031447][ T8859] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 501.214304][ T8859] ntfs3(loop0): failed to convert "c46c" to maccenteuro [ 501.276880][ T8859] ntfs3(loop0): ino=20, mi_enum_attr [ 501.336982][ T11] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 501.616531][ T11] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 501.626556][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.635022][ T11] usb 3-1: Product: syz [ 501.639730][ T11] usb 3-1: Manufacturer: syz [ 501.644544][ T11] usb 3-1: SerialNumber: syz [ 501.744987][ T8884] loop5: detected capacity change from 0 to 2048 [ 501.832710][ T11] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 501.953526][ T8884] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 502.317537][ T11] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 502.329071][ T11] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 502.580139][ T24] usb 3-1: USB disconnect, device number 18 [ 503.205639][ T8899] loop3: detected capacity change from 0 to 512 [ 503.376984][ T8899] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 503.427170][ T11] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 503.492365][ T8899] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0102] [ 503.572462][ T8899] EXT4-fs (loop3): orphan cleanup on readonly fs [ 503.580474][ T8899] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1201: bg 0: block 361: padding at end of block bitmap is not set [ 503.623908][ T8899] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 503.677377][ T8899] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.1201: attempt to clear invalid blocks 33619980 len 1 [ 503.679841][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.702965][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.713393][ T11] usb 6-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 503.726249][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.734712][ T8899] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1201: invalid indirect mapped block 1811939328 (level 0) [ 503.839750][ T11] usb 6-1: config 0 descriptor?? [ 503.888755][ T8899] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1201: invalid indirect mapped block 2185560079 (level 1) [ 503.956007][ T8899] EXT4-fs (loop3): 1 truncate cleaned up [ 504.029589][ T8899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 504.383581][ T11] logitech 0003:046D:C287.0018: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.5-1/input0 [ 504.396676][ T11] logitech 0003:046D:C287.0018: no inputs found [ 504.514767][ T8899] System zones: 1-12 [ 504.519514][ T8899] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.1201: Abort forced by user [ 504.604596][ T11] usb 6-1: USB disconnect, device number 3 [ 504.627277][ T8899] EXT4-fs (loop3): Remounting filesystem read-only [ 504.634031][ T8899] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000007. [ 504.889027][ T8917] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1210'. [ 504.898968][ T8917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1210'. [ 505.080521][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 505.691736][ T8919] fido_id[8919]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 505.985434][ T8932] netlink: 'syz.5.1215': attribute type 2 has an invalid length. [ 505.994050][ T8932] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1215'. [ 507.077064][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 507.341550][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.352456][ T24] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 507.362300][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.396565][ T8949] loop2: detected capacity change from 0 to 1024 [ 507.439755][ T8949] EXT4-fs: Ignoring removed nobh option [ 507.445752][ T8949] EXT4-fs: Ignoring removed bh option [ 507.482026][ T24] usb 1-1: config 0 descriptor?? [ 507.629253][ T8949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.018400][ T24] smartjoyplus 0003:6666:8804.0019: item fetching failed at offset 2/5 [ 508.095314][ T24] smartjoyplus 0003:6666:8804.0019: parse failed [ 508.103866][ T24] smartjoyplus 0003:6666:8804.0019: probe with driver smartjoyplus failed with error -22 [ 508.153205][ T8963] loop5: detected capacity change from 0 to 256 [ 508.183059][ T8963] exfat: Deprecated parameter 'namecase' [ 508.190173][ T8963] exfat: Deprecated parameter 'utf8' [ 508.235982][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.248969][ T24] usb 1-1: USB disconnect, device number 4 [ 508.394289][ T8963] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 508.725173][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 508.734874][ T8969] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1227'. [ 510.163130][ T8992] sp0: Synchronizing with TNC [ 510.282345][ T8994] netlink: 'syz.3.1234': attribute type 1 has an invalid length. [ 510.291212][ T8994] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1234'. [ 510.383216][ T11] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 510.587733][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 510.620733][ T11] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 510.629934][ T11] usb 6-1: config 179 has no interface number 0 [ 510.636616][ T11] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 510.648280][ T11] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 510.660129][ T11] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 510.677831][ T11] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 510.693111][ T11] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 510.708347][ T11] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 510.717822][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.915318][ T8990] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 511.017276][ T1565] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 511.219117][ T1565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.231980][ T1565] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 511.241858][ T1565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.470549][ T8990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.481839][ T8990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.539915][ T1565] usb 1-1: config 0 descriptor?? [ 511.997343][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 511.997351][ T24] usb 6-1: USB disconnect, device number 4 [ 511.997638][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 512.043187][ T9013] loop3: detected capacity change from 0 to 256 [ 512.089589][ T9013] exfat: Deprecated parameter 'namecase' [ 512.098003][ T9013] exfat: Deprecated parameter 'utf8' [ 512.205757][ T1565] lenovo 0003:17EF:60A3.001A: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.0-1/input0 [ 512.280366][ T9013] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 512.347805][ T1565] usb 1-1: USB disconnect, device number 5 [ 512.826876][ T24] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 513.084007][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.094451][ T24] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 513.104907][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.221531][ T24] usb 5-1: config 0 descriptor?? [ 513.591181][ T9027] loop5: detected capacity change from 0 to 256 [ 513.630278][ T9028] loop2: detected capacity change from 0 to 256 [ 513.786618][ T24] smartjoyplus 0003:6666:8804.001B: item fetching failed at offset 2/5 [ 513.831950][ T24] smartjoyplus 0003:6666:8804.001B: parse failed [ 513.839910][ T24] smartjoyplus 0003:6666:8804.001B: probe with driver smartjoyplus failed with error -22 [ 513.909482][ T9022] fido_id[9022]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 514.027835][ T24] usb 5-1: USB disconnect, device number 9 [ 514.096225][ T9027] FAT-fs (loop5): Directory bread(block 64) failed [ 514.103026][ T9027] FAT-fs (loop5): Directory bread(block 65) failed [ 514.110166][ T9027] FAT-fs (loop5): Directory bread(block 66) failed [ 514.117306][ T9027] FAT-fs (loop5): Directory bread(block 67) failed [ 514.124242][ T9027] FAT-fs (loop5): Directory bread(block 68) failed [ 514.131310][ T9027] FAT-fs (loop5): Directory bread(block 69) failed [ 514.139020][ T9027] FAT-fs (loop5): Directory bread(block 70) failed [ 514.146017][ T9027] FAT-fs (loop5): Directory bread(block 71) failed [ 514.153037][ T9027] FAT-fs (loop5): Directory bread(block 72) failed [ 514.159980][ T9027] FAT-fs (loop5): Directory bread(block 73) failed [ 514.293957][ T9028] FAT-fs (loop2): Directory bread(block 64) failed [ 514.301401][ T9028] FAT-fs (loop2): Directory bread(block 65) failed [ 514.308924][ T9028] FAT-fs (loop2): Directory bread(block 66) failed [ 514.317518][ T9028] FAT-fs (loop2): Directory bread(block 67) failed [ 514.324548][ T9028] FAT-fs (loop2): Directory bread(block 68) failed [ 514.331783][ T9028] FAT-fs (loop2): Directory bread(block 69) failed [ 514.338903][ T9028] FAT-fs (loop2): Directory bread(block 70) failed [ 514.345661][ T9028] FAT-fs (loop2): Directory bread(block 71) failed [ 514.352960][ T9028] FAT-fs (loop2): Directory bread(block 72) failed [ 514.360331][ T9028] FAT-fs (loop2): Directory bread(block 73) failed [ 515.344200][ T9040] loop3: detected capacity change from 0 to 512 [ 515.583489][ T9040] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1262: casefold flag without casefold feature [ 515.677679][ T9040] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1262: couldn't read orphan inode 15 (err -117) [ 515.707757][ T9052] loop2: detected capacity change from 0 to 256 [ 515.741798][ T1565] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 515.807837][ T9040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.968623][ T1565] usb 5-1: Using ep0 maxpacket: 16 [ 516.033212][ T1565] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.044706][ T1565] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.055319][ T1565] usb 5-1: config 0 interface 0 has no altsetting 0 [ 516.062595][ T1565] usb 5-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 516.072228][ T1565] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.104837][ T9052] FAT-fs (loop2): Directory bread(block 64) failed [ 516.113916][ T9052] FAT-fs (loop2): Directory bread(block 65) failed [ 516.121899][ T9052] FAT-fs (loop2): Directory bread(block 66) failed [ 516.129151][ T9052] FAT-fs (loop2): Directory bread(block 67) failed [ 516.136360][ T9052] FAT-fs (loop2): Directory bread(block 68) failed [ 516.143122][ T9052] FAT-fs (loop2): Directory bread(block 69) failed [ 516.150549][ T9052] FAT-fs (loop2): Directory bread(block 70) failed [ 516.157631][ T9052] FAT-fs (loop2): Directory bread(block 71) failed [ 516.164539][ T9052] FAT-fs (loop2): Directory bread(block 72) failed [ 516.171537][ T9052] FAT-fs (loop2): Directory bread(block 73) failed [ 516.357245][ T1565] usb 5-1: config 0 descriptor?? [ 516.374975][ T30] audit: type=1800 audit(1754484888.512:40): pid=9052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1253" name="file1" dev="loop2" ino=1048768 res=0 errno=0 [ 516.527706][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.904409][ T1565] chicony 0003:04F2:0418.001C: unbalanced collection at end of report description [ 517.012452][ T1565] chicony 0003:04F2:0418.001C: Chicony hid parse failed: -22 [ 517.020576][ T1565] chicony 0003:04F2:0418.001C: probe with driver chicony failed with error -22 [ 517.183475][ T1565] usb 5-1: USB disconnect, device number 10 [ 519.001466][ T9080] loop4: detected capacity change from 0 to 1024 [ 519.027205][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 519.037421][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'. [ 519.239924][ T9080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.744994][ T9077] loop5: detected capacity change from 0 to 4096 [ 519.860783][ T9077] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 519.923575][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.925803][ T9095] loop3: detected capacity change from 0 to 512 [ 520.084916][ T9095] EXT4-fs: Ignoring removed nobh option [ 520.210279][ T9095] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1267: iget: bad i_size value: 38620345925642 [ 520.298259][ T9095] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1267: couldn't read orphan inode 15 (err -117) [ 520.318329][ T9102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.325963][ T9102] IPv6: NLM_F_CREATE should be set when creating new route [ 520.333598][ T9102] IPv6: NLM_F_CREATE should be set when creating new route [ 520.341274][ T9102] IPv6: NLM_F_CREATE should be set when creating new route [ 520.354676][ T9077] ntfs3(loop5): ino=19, mi_enum_attr [ 520.360603][ T9077] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 520.401753][ T9095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.453396][ T9102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.562778][ T9105] loop2: detected capacity change from 0 to 64 [ 520.576007][ T9077] ntfs3(loop5): failed to convert "c46c" to maccenteuro [ 520.632595][ T9077] ntfs3(loop5): ino=20, mi_enum_attr [ 520.646103][ T9095] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1267: bg 0: block 5: invalid block bitmap [ 520.727673][ T9095] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 520.740344][ T9095] EXT4-fs (loop3): This should not happen!! Data will be lost [ 520.740344][ T9095] [ 520.750424][ T9095] EXT4-fs (loop3): Total free blocks count 0 [ 520.756900][ T9095] EXT4-fs (loop3): Free/Dirty block details [ 520.763020][ T9095] EXT4-fs (loop3): free_blocks=0 [ 520.767158][ T9105] syz.2.1271: attempt to access beyond end of device [ 520.767158][ T9105] loop2: rw=0, sector=482, nr_sectors = 2 limit=64 [ 520.769673][ T9095] EXT4-fs (loop3): dirty_blocks=2 [ 520.781749][ T9105] Buffer I/O error on dev loop2, logical block 241, async page read [ 520.787477][ T9095] EXT4-fs (loop3): Block reservation details [ 520.795115][ T9105] syz.2.1271: attempt to access beyond end of device [ 520.795115][ T9105] loop2: rw=0, sector=482, nr_sectors = 2 limit=64 [ 520.801815][ T9095] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 520.814690][ T9105] Buffer I/O error on dev loop2, logical block 241, async page read [ 520.878482][ T30] audit: type=1800 audit(1754484892.992:41): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1271" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 521.601040][ T9116] tipc: Started in network mode [ 521.601139][ T9116] tipc: Node identity b, cluster identity 4711 [ 521.601217][ T9116] tipc: Node number set to 11 [ 521.601930][ T9116] tipc: Cannot configure node identity twice [ 521.669726][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.913668][ T9126] loop2: detected capacity change from 0 to 256 [ 524.656073][ T1565] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 524.848051][ T1565] usb 1-1: Using ep0 maxpacket: 32 [ 524.871687][ T9152] tipc: Started in network mode [ 524.876961][ T9152] tipc: Node identity b, cluster identity 4711 [ 524.883565][ T9152] tipc: Node number set to 11 [ 524.889427][ T9152] tipc: Cannot configure node identity twice [ 524.926250][ T1565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 524.938949][ T1565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.949846][ T1565] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00 [ 524.959370][ T1565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.987828][ T9154] loop2: detected capacity change from 0 to 512 [ 525.069490][ T1565] usb 1-1: config 0 descriptor?? [ 525.157619][ T9154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.171435][ T9154] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.368673][ T9154] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 10: comm syz.2.1291: lblock 15 mapped to illegal pblock 10 (length 19) [ 525.543083][ T1565] apple 0003:05AC:0292.001D: item fetching failed at offset 5/7 [ 525.609618][ T1565] apple 0003:05AC:0292.001D: parse failed [ 525.616701][ T1565] apple 0003:05AC:0292.001D: probe with driver apple failed with error -22 [ 525.788758][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.817103][ T1565] usb 1-1: USB disconnect, device number 6 [ 526.585679][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 526.795814][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 526.814481][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 526.888172][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 526.897639][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.908392][ T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 526.917785][ T24] usb 3-1: config 1 has no interface number 1 [ 526.924203][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 526.937745][ T24] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.951077][ T24] usb 3-1: config 1 interface 2 has no altsetting 0 [ 527.161765][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 527.173153][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.182272][ T24] usb 3-1: Product: syz [ 527.186848][ T24] usb 3-1: Manufacturer: syz [ 527.191652][ T24] usb 3-1: SerialNumber: syz [ 527.556738][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.564164][ T24] usb 3-1: MIDIStreaming interface descriptor not found [ 527.832663][ T24] usb 3-1: USB disconnect, device number 19 [ 527.842747][ T9192] veth1_macvtap: left promiscuous mode [ 527.848831][ T9192] macsec0: entered promiscuous mode [ 527.993593][ T30] audit: type=1800 audit(1754484900.138:42): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1305" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 528.040531][ T9192] veth1_macvtap: entered promiscuous mode [ 528.047747][ T9192] macsec0: left promiscuous mode [ 528.632698][ T9202] veth1_macvtap: left promiscuous mode [ 528.638471][ T9202] macsec0: entered promiscuous mode [ 528.644345][ T9202] macsec0: entered allmulticast mode [ 528.663686][ T9201] loop3: detected capacity change from 0 to 256 [ 528.728717][ T9201] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 528.740249][ T9201] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 528.751139][ T9207] veth1_macvtap: entered promiscuous mode [ 528.757548][ T9207] veth1_macvtap: entered allmulticast mode [ 528.764928][ T9207] macsec0: left promiscuous mode [ 528.771304][ T9207] macsec0: left allmulticast mode [ 528.778979][ T9207] veth1_macvtap: left allmulticast mode [ 529.026667][ T9201] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 529.247384][ T9214] loop4: detected capacity change from 0 to 256 [ 529.778158][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 530.013231][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.025259][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.035604][ T24] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 530.045104][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.160036][ T24] usb 6-1: config 0 descriptor?? [ 530.719962][ T24] hid-led 0003:1D34:0004.001E: unknown main item tag 0x0 [ 530.797769][ T9236] loop0: detected capacity change from 0 to 1024 [ 530.813971][ T9235] loop3: detected capacity change from 0 to 256 [ 530.876930][ T24] hid-led 0003:1D34:0004.001E: probe with driver hid-led failed with error -71 [ 530.924724][ T24] usb 6-1: USB disconnect, device number 5 [ 531.021845][ T9236] hfsplus: found bad thread record in catalog [ 531.179250][ T9235] FAT-fs (loop3): Directory bread(block 64) failed [ 531.186709][ T9235] FAT-fs (loop3): Directory bread(block 65) failed [ 531.194277][ T9235] FAT-fs (loop3): Directory bread(block 66) failed [ 531.201222][ T9235] FAT-fs (loop3): Directory bread(block 67) failed [ 531.208212][ T9235] FAT-fs (loop3): Directory bread(block 68) failed [ 531.215148][ T9235] FAT-fs (loop3): Directory bread(block 69) failed [ 531.222378][ T9235] FAT-fs (loop3): Directory bread(block 70) failed [ 531.229466][ T9235] FAT-fs (loop3): Directory bread(block 71) failed [ 531.237202][ T9235] FAT-fs (loop3): Directory bread(block 72) failed [ 531.244270][ T9235] FAT-fs (loop3): Directory bread(block 73) failed [ 531.342518][ T3861] hfsplus: b-tree write err: -5, ino 4 [ 531.435208][ T30] audit: type=1800 audit(1754484903.666:43): pid=9235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1321" name="file1" dev="loop3" ino=1048771 res=0 errno=0 [ 531.872581][ T9247] loop0: detected capacity change from 0 to 512 [ 531.931626][ T9247] EXT4-fs: Ignoring removed mblk_io_submit option [ 531.950951][ T9248] loop2: detected capacity change from 0 to 512 [ 532.004297][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.057436][ T9247] EXT4-fs error (device loop0): __ext4_iget:5464: inode #11: block 1: comm syz.0.1323: invalid block [ 532.073313][ T9248] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 532.097638][ T9250] loop5: detected capacity change from 0 to 256 [ 532.106732][ T9248] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 532.144639][ T9247] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1323: couldn't read orphan inode 11 (err -117) [ 532.145836][ T9248] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.1325: iget: bad i_size value: 12154757448730 [ 532.158856][ T9250] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 532.189817][ T9250] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 532.214366][ T9248] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1325: couldn't read orphan inode 13 (err -117) [ 532.258816][ T9247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.305776][ T9250] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 532.342678][ T9248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.776416][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.817106][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.282628][ T9281] team0 (unregistering): Port device team_slave_0 removed [ 534.389260][ T9281] team0 (unregistering): Port device team_slave_1 removed [ 535.554379][ T9297] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1341'. [ 535.915397][ T9293] loop4: detected capacity change from 0 to 32768 [ 535.928142][ T9293] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1340 (9293) [ 535.952542][ T9293] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 535.964502][ T9293] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 535.973621][ T9293] BTRFS info (device loop4): using free-space-tree [ 536.219830][ T4098] BTRFS warning (device loop4): checksum verify failed on logical 5292032 mirror 1 wanted 0xd5bc16bf7502c3940107ef92895f3d2e7f4c766f4585e38c0ad39b0a5d2e0772 found 0x1d6c935bab0b9ca5c4f7c86f7582190b3fa7241ae52bf7e012ef9f0b43e5a3fa level 0 [ 536.246206][ T9293] BTRFS warning (device loop4): failed to read root (objectid=9): -5 [ 536.344836][ T9293] BTRFS error (device loop4): open_ctree failed: -5 [ 536.899378][ T9324] netlink: 'syz.0.1348': attribute type 6 has an invalid length. [ 536.909421][ T9324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1348'. [ 537.505623][ T9331] loop4: detected capacity change from 0 to 512 [ 537.635887][ T9331] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1351: bg 0: block 248: padding at end of block bitmap is not set [ 537.682906][ T9331] Quota error (device loop4): write_blk: dquota write failed [ 537.693725][ T9331] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 537.705597][ T9331] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1351: Failed to acquire dquot type 1 [ 537.817881][ T9331] EXT4-fs (loop4): 1 truncate cleaned up [ 537.860310][ T9331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.874129][ T9331] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.886236][ T1565] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 538.086303][ T1565] usb 6-1: Using ep0 maxpacket: 8 [ 538.135501][ T1565] usb 6-1: unable to get BOS descriptor or descriptor too short [ 538.215654][ T1565] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 538.225866][ T1565] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.236676][ T1565] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 538.246211][ T1565] usb 6-1: config 1 has no interface number 1 [ 538.253288][ T1565] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 538.253471][ T1565] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.280657][ T1565] usb 6-1: config 1 interface 2 has no altsetting 0 [ 538.629727][ T9347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1355'. [ 538.714261][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.772087][ T1565] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 538.781843][ T1565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.791154][ T1565] usb 6-1: Product: syz [ 538.799184][ T1565] usb 6-1: Manufacturer: syz [ 538.805286][ T1565] usb 6-1: SerialNumber: syz [ 539.132360][ T1565] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.140283][ T1565] usb 6-1: MIDIStreaming interface descriptor not found [ 539.525939][ T1565] usb 6-1: USB disconnect, device number 6 [ 539.884195][ T9358] loop4: detected capacity change from 0 to 1024 [ 540.252756][ T9360] loop3: detected capacity change from 0 to 764 [ 540.300294][ T9358] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 540.825386][ T30] audit: type=1326 audit(1754484913.225:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.5.1363" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f295938ebe9 code=0x0 [ 541.000552][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.327209][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 541.334504][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.335826][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1369'. [ 542.345814][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1369'. [ 542.355581][ T9385] netlink: 'syz.5.1369': attribute type 15 has an invalid length. [ 543.169038][ T9396] team0 (unregistering): Port device team_slave_0 removed [ 543.274740][ T9396] team0 (unregistering): Port device team_slave_1 removed [ 543.790054][ T9403] loop0: detected capacity change from 0 to 1024 [ 543.870678][ T9403] EXT4-fs: Ignoring removed bh option [ 544.082978][ T9403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 544.756324][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 546.226305][ T9441] ptrace attach of "./syz-executor exec"[5813] was attempted by "ߖ鷴)Qo \x0dvҢ9T{-92\x0ap_3j nޭOa)bkߟ.\x0aK~򜛱تKOkF^3B3){\x5crHBd,X\x09\x0b3c\x22&W\x22\x1bTL'\x09!_Nhٹ=n>a (G6茷A+&ϋЈUߍa{@{\x0b[ɸYacAzÂGl:d<]u~v!9,?Ŵ>\x22ar\x1blKڬY*VS8ȁ6]kK.=`#\x07x!gMDR*OLK\x0c}oKbA>{@aMdnQj̖5)];r,L\x0c=\x0dWAE n`>Ɵs-3`yfeH^/$L1&NP\x0d1D<\x07cPd(EdtaE!ҭ \x09@ݞHG~H%3{- ^Qǚ4e3\x0b>sF̗H]+\x [ 546.759617][ T9435] loop5: detected capacity change from 0 to 32768 [ 546.880468][ T9435] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1387 (9435) [ 546.920711][ T9435] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 546.931484][ T9435] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 546.941948][ T9435] BTRFS info (device loop5): using free-space-tree [ 547.144753][ T3706] BTRFS warning (device loop5): checksum verify failed on logical 5292032 mirror 1 wanted 0xd5bc16bf7502c3940107ef92895f3d2e7f4c766f4585e38c0ad39b0a5d2e0772 found 0x1d6c935bab0b9ca5c4f7c86f7582190b3fa7241ae52bf7e012ef9f0b43e5a3fa level 0 [ 547.168961][ T9435] BTRFS warning (device loop5): failed to read root (objectid=9): -5 [ 547.268980][ T9435] BTRFS error (device loop5): open_ctree failed: -5 [ 547.450862][ T9465] : entered promiscuous mode [ 547.828090][ T9443] loop4: detected capacity change from 0 to 4096 [ 548.068707][ T9469] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 549.440154][ T9472] loop2: detected capacity change from 0 to 32768 [ 549.450858][ T9472] gfs2: Bad value for 'commit' [ 550.690405][ T24] hid-generic 0000:0005:0009.001F: unknown main item tag 0x0 [ 550.699155][ T24] hid-generic 0000:0005:0009.001F: unknown main item tag 0x0 [ 550.707174][ T24] hid-generic 0000:0005:0009.001F: unknown main item tag 0x0 [ 550.875001][ T24] hid-generic 0000:0005:0009.001F: hidraw0: HID v0.02 Device [syz0] on syz1 [ 551.058073][ T9491] team0 (unregistering): Port device team_slave_0 removed [ 551.134307][ T9491] team0 (unregistering): Port device team_slave_1 removed [ 552.111152][ T9495] fido_id[9495]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 552.333642][ T9498] loop0: detected capacity change from 0 to 32768 [ 552.399695][ T9498] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1406 (9498) [ 552.428419][ T9498] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 552.439191][ T9498] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 552.451644][ T9498] BTRFS info (device loop0): using free-space-tree [ 552.778431][ T3601] BTRFS warning (device loop0): checksum verify failed on logical 5292032 mirror 1 wanted 0xd5bc16bf7502c3940107ef92895f3d2e7f4c766f4585e38c0ad39b0a5d2e0772 found 0x1d6c935bab0b9ca5c4f7c86f7582190b3fa7241ae52bf7e012ef9f0b43e5a3fa level 0 [ 552.806836][ T9498] BTRFS warning (device loop0): failed to read root (objectid=9): -5 [ 552.932990][ T9498] BTRFS error (device loop0): open_ctree failed: -5 [ 553.518469][ T9532] 9pnet_fd: Insufficient options for proto=fd [ 554.242492][ T9530] loop5: detected capacity change from 0 to 32768 [ 555.548834][ T9543] loop3: detected capacity change from 0 to 1024 [ 555.922725][ T9530] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 555.922903][ T9530] allowing incompatible features above 0.9: (unknown version) [ 555.923002][ T9530] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 555.980227][ T9530] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 555.991345][ T9530] bcachefs (loop5): initializing new filesystem [ 556.024361][ T9530] bcachefs (loop5): going read-write [ 556.082859][ T9530] bcachefs (loop5): marking superblocks [ 556.133983][ T9530] bcachefs (loop5): initializing freespace [ 556.168003][ T9530] bcachefs (loop5): done initializing freespace [ 556.189999][ T9530] bcachefs (loop5): reading snapshots table [ 556.196522][ T9530] bcachefs (loop5): reading snapshots done [ 556.440686][ T9530] bcachefs (loop5): done starting filesystem [ 557.023446][ T9567] loop2: detected capacity change from 0 to 16 [ 557.115979][ T8197] bcachefs (loop5): shutting down [ 557.122038][ T8197] bcachefs (loop5): going read-only [ 557.127942][ T8197] bcachefs (loop5): finished waiting for writes to stop [ 557.236677][ T8197] bcachefs (loop5): flushing journal and stopping allocators, journal seq 4 [ 557.845792][ T8197] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 10 [ 557.954314][ T8197] bcachefs (loop5): clean shutdown complete, journal seq 11 [ 557.995036][ T8197] bcachefs (loop5): marking filesystem clean [ 558.163384][ T9578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1429'. [ 558.224906][ T8197] bcachefs (loop5): shutdown complete [ 558.614222][ T5828] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 558.739067][ T9584] loop0: detected capacity change from 0 to 256 [ 558.782039][ T1565] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 559.062948][ T1565] usb 4-1: Using ep0 maxpacket: 32 [ 559.119471][ T1565] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 559.131593][ T1565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 559.143097][ T1565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 559.153906][ T1565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 559.165473][ T1565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 559.347745][ T9584] FAT-fs (loop0): Directory bread(block 64) failed [ 559.354630][ T9584] FAT-fs (loop0): Directory bread(block 65) failed [ 559.362166][ T9584] FAT-fs (loop0): Directory bread(block 66) failed [ 559.369060][ T9584] FAT-fs (loop0): Directory bread(block 67) failed [ 559.375978][ T9584] FAT-fs (loop0): Directory bread(block 68) failed [ 559.382899][ T9584] FAT-fs (loop0): Directory bread(block 69) failed [ 559.390168][ T9584] FAT-fs (loop0): Directory bread(block 70) failed [ 559.397200][ T9584] FAT-fs (loop0): Directory bread(block 71) failed [ 559.408470][ T9584] FAT-fs (loop0): Directory bread(block 72) failed [ 559.415261][ T9584] FAT-fs (loop0): Directory bread(block 73) failed [ 559.547469][ T1565] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 559.557290][ T1565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.565531][ T1565] usb 4-1: Product: syz [ 559.570607][ T1565] usb 4-1: Manufacturer: syz [ 559.575418][ T1565] usb 4-1: SerialNumber: syz [ 559.642577][ T1565] usb 4-1: config 0 descriptor?? [ 560.154279][ T1565] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 560.160774][ T1565] input input8: Device does not respond to id packet M [ 560.248131][ T1565] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 560.254637][ T1565] input input8: Device does not respond to id packet P [ 560.334859][ T9595] loop4: detected capacity change from 0 to 65 [ 560.344754][ T1565] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 560.351107][ T1565] input input8: Device does not respond to id packet B [ 560.384382][ T9595] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 560.415398][ T1565] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 560.422991][ T1565] input input8: Device does not respond to id packet N [ 560.515901][ T1565] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 560.573339][ T1565] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 560.607102][ T1565] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 560.644257][ T1565] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 560.655304][ T1565] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 560.972087][ T1565] usb 4-1: USB disconnect, device number 8 [ 561.703363][ T9611] tmpfs: Cannot change global quota limit on remount [ 562.665034][ T5822] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 562.677074][ T5822] Bluetooth: hci0: Injecting HCI hardware error event [ 562.686243][ T5822] Bluetooth: hci0: hardware error 0x00 [ 563.162750][ T9626] loop4: detected capacity change from 0 to 1024 [ 563.176974][ T24] kernel write not supported for file /input/mouse0 (pid: 24 comm: kworker/1:0) [ 563.225599][ T9626] EXT4-fs: Ignoring removed bh option [ 563.231459][ T9626] EXT4-fs: inline encryption not supported [ 563.291564][ T9626] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 563.293688][ T9631] overlayfs: missing 'lowerdir' [ 563.361832][ T9626] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 563.524449][ T9626] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1445: lblock 2 mapped to illegal pblock 2 (length 1) [ 563.683223][ T9626] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 563.696883][ T9626] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1445: lblock 0 mapped to illegal pblock 48 (length 1) [ 563.750037][ T5820] Bluetooth: hci4: command 0x0406 tx timeout [ 563.958884][ T9626] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 563.968283][ T9626] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1445: Failed to acquire dquot type 0 [ 564.175567][ T9626] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 564.312068][ T9626] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1445: mark_inode_dirty error [ 564.434893][ T9642] loop5: detected capacity change from 0 to 64 [ 564.465045][ T9626] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 564.475996][ T9626] EXT4-fs (loop4): 1 orphan inode deleted [ 564.484425][ T9626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.523873][ T9641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1451'. [ 564.549518][ T3555] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 564.648625][ T9642] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 564.688662][ T3555] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 564.697741][ T3555] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0 [ 564.747671][ T5822] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 565.056557][ T9626] EXT4-fs: Cannot change journaled quota options when quota turned on [ 565.554796][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.639180][ T5817] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 565.704683][ T5817] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 565.768853][ T5817] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 565.946313][ T9652] netlink: 'syz.0.1457': attribute type 7 has an invalid length. [ 565.954278][ T9652] netlink: 'syz.0.1457': attribute type 8 has an invalid length. [ 566.827504][ T5822] Bluetooth: hci4: unexpected event for opcode 0x204e [ 567.553704][ T9674] option changes via remount are deprecated (pid=9673 comm=syz.0.1466) [ 569.508090][ T9696] tmpfs: Cannot change global quota limit on remount [ 571.258382][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 571.445047][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 571.513382][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 571.513563][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 571.515794][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 571.515947][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 571.516109][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 571.540112][ T9] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 571.540277][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.540411][ T9] usb 5-1: Product: syz [ 571.540519][ T9] usb 5-1: Manufacturer: syz [ 571.540624][ T9] usb 5-1: SerialNumber: syz [ 571.596130][ T9] usb 5-1: config 0 descriptor?? [ 572.082833][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.089281][ T9] input input9: Device does not respond to id packet M [ 572.128655][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.135567][ T9] input input9: Device does not respond to id packet P [ 572.201543][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.208074][ T9] input input9: Device does not respond to id packet B [ 572.278106][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.285838][ T9] input input9: Device does not respond to id packet N [ 572.315685][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.342008][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.366674][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.440697][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.452063][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 572.521439][ T9] usb 5-1: USB disconnect, device number 11 [ 572.808778][ T9731] loop0: detected capacity change from 0 to 164 [ 572.943389][ T9731] Unable to read rock-ridge attributes [ 572.975876][ T9734] loop2: detected capacity change from 0 to 128 [ 573.027303][ T9731] ISOFS: unable to read i-node block [ 573.041210][ T9734] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 573.052282][ T9735] loop5: detected capacity change from 0 to 1024 [ 573.141805][ T9735] EXT4-fs: Ignoring removed bh option [ 573.147692][ T9735] EXT4-fs: inline encryption not supported [ 573.241621][ T9735] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 573.326877][ T9735] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 573.375926][ T9735] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1495: lblock 2 mapped to illegal pblock 2 (length 1) [ 573.391756][ T9735] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 573.402838][ T9735] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1495: lblock 0 mapped to illegal pblock 48 (length 1) [ 573.426197][ T9735] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 573.435750][ T9735] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1495: Failed to acquire dquot type 0 [ 573.480720][ T9735] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 573.539277][ T9735] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1495: mark_inode_dirty error [ 573.599045][ T9735] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 573.612963][ T9735] EXT4-fs (loop5): 1 orphan inode deleted [ 573.621361][ T9735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.636201][ T4317] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 573.699633][ T4317] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 573.712749][ T4317] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:30: Failed to release dquot type 0 [ 573.901596][ T9735] EXT4-fs: can't change dax mount option while remounting [ 574.234218][ T8197] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.343947][ T9749] loop4: detected capacity change from 0 to 1764 [ 574.353114][ T8197] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 574.429780][ T8197] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 574.487769][ T8197] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 574.524712][ T9755] netlink: 'syz.3.1505': attribute type 7 has an invalid length. [ 574.532861][ T9755] netlink: 'syz.3.1505': attribute type 8 has an invalid length. [ 575.027822][ T9759] tmpfs: Cannot change global quota limit on remount [ 575.044246][ T9757] netlink: 340 bytes leftover after parsing attributes in process `syz.5.1504'. [ 575.366342][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 575.394055][ T30] audit: type=1800 audit(1754484947.994:45): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1509" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 575.414878][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.616080][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 575.663981][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 575.678056][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 575.689558][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 575.700164][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 575.711916][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 575.968276][ T24] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 575.978984][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.987583][ T24] usb 3-1: Product: syz [ 575.991952][ T24] usb 3-1: Manufacturer: syz [ 575.997028][ T24] usb 3-1: SerialNumber: syz [ 576.064656][ T24] usb 3-1: config 0 descriptor?? [ 576.498877][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 576.505613][ T24] input input10: Device does not respond to id packet M [ 576.532563][ T24] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 576.539111][ T24] input input10: Device does not respond to id packet P [ 576.604663][ T24] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 576.611033][ T24] input input10: Device does not respond to id packet B [ 576.680055][ T24] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 576.686671][ T24] input input10: Device does not respond to id packet N [ 576.745491][ T24] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 576.772217][ T24] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 576.804385][ T24] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 576.819735][ T24] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 576.876276][ T24] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 576.997201][ T24] usb 3-1: USB disconnect, device number 20 [ 577.781163][ T9788] loop5: detected capacity change from 0 to 64 [ 579.945081][ T9813] binder: 9812:9813 ioctl c0306201 2000000003c0 returned -22 [ 580.328211][ T9819] loop4: detected capacity change from 0 to 128 [ 580.371605][ T9819] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 580.383039][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 580.479050][ T9819] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 580.599687][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 580.624393][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 580.637892][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 580.649800][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 580.662163][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 580.674326][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 580.906459][ T24] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 580.917015][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.925767][ T24] usb 6-1: Product: syz [ 580.930297][ T24] usb 6-1: Manufacturer: syz [ 580.935139][ T24] usb 6-1: SerialNumber: syz [ 581.028101][ T24] usb 6-1: config 0 descriptor?? [ 581.541092][ T24] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 581.547596][ T24] input input11: Device does not respond to id packet M [ 581.603323][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 581.610403][ T24] input input11: Device does not respond to id packet P [ 581.659062][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 581.665627][ T24] input input11: Device does not respond to id packet B [ 581.695427][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 581.702362][ T24] input input11: Device does not respond to id packet N [ 581.715681][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1540'. [ 581.725748][ T9829] smc: net device bond0 applied user defined pnetid S [ 581.765257][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 581.815723][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 581.838312][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 581.871978][ T24] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 581.885593][ T24] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input11 [ 582.000922][ T24] usb 6-1: USB disconnect, device number 7 [ 582.471253][ T9837] loop0: detected capacity change from 0 to 64 [ 584.079825][ T9859] loop4: detected capacity change from 0 to 256 [ 584.133743][ T9859] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 584.150992][ T9859] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 584.384482][ T9859] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 584.925812][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 584.975782][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 585.155719][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.173595][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 585.184505][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 585.190190][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 585.194099][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.296437][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 585.308683][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 585.320695][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 585.331444][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 585.343099][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 585.450223][ T9] usb 4-1: config 0 descriptor?? [ 585.502267][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 585.509413][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 585.554392][ T24] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 585.564298][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.575519][ T24] usb 1-1: Product: syz [ 585.579959][ T24] usb 1-1: Manufacturer: syz [ 585.585861][ T24] usb 1-1: SerialNumber: syz [ 585.610081][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 585.617146][ T9874] binder: 9873:9874 ioctl c0306201 2000000003c0 returned -22 [ 585.633762][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 585.641975][ T9] usb 4-1: media controller created [ 585.683603][ T9866] dvb-usb: bulk message failed: -22 (2/0) [ 585.716037][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 585.742070][ T24] usb 1-1: config 0 descriptor?? [ 585.857127][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 585.863382][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 585.906454][ T4740] hfsplus: b-tree write err: -5, ino 4 [ 585.918841][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 586.048160][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 586.056023][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 586.196676][ T9] usb 4-1: USB disconnect, device number 9 [ 586.212908][ T24] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 586.219532][ T24] input input12: Device does not respond to id packet M [ 586.314997][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 586.321565][ T24] input input12: Device does not respond to id packet P [ 586.390272][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 586.397217][ T24] input input12: Device does not respond to id packet B [ 586.412387][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 586.452970][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 586.460425][ T24] input input12: Device does not respond to id packet N [ 586.524626][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 586.552938][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 586.575487][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 586.627062][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 586.638150][ T24] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 586.809003][ T24] usb 1-1: USB disconnect, device number 7 [ 587.626745][ T9893] usb usb1: check_ctrlrecip: process 9893 (syz.5.1568) requesting ep 01 but needs 81 [ 590.103602][ T5822] Bluetooth: hci4: Malformed Event: 0x2f [ 591.452821][ T24] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 591.639165][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.650789][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 591.661299][ T24] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 591.670609][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.696090][ T24] usb 6-1: config 0 descriptor?? [ 591.773587][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 591.780672][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 591.903955][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 591.961177][ T9925] dvb-usb: bulk message failed: -22 (2/0) [ 591.963151][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 591.974797][ T24] usb 6-1: media controller created [ 592.035715][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 592.106520][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 592.113658][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 592.145328][ T9938] netlink: 'syz.0.1600': attribute type 2 has an invalid length. [ 592.154483][ T9938] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1600'. [ 592.194586][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 592.284157][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 592.292567][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 592.448818][ T24] usb 6-1: USB disconnect, device number 8 [ 592.679263][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 593.234563][ T9954] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1596'. [ 593.246398][ T9954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1596'. [ 594.417708][ T9956] loop5: detected capacity change from 0 to 4096 [ 594.757379][ T9956] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 594.812675][ T9956] ntfs3(loop5): Failed to load $Extend (-22). [ 594.819017][ T9956] ntfs3(loop5): Failed to initialize $Extend. [ 594.981634][ T9956] ntfs3(loop5): ino=1b, "file0" ntfs_readdir [ 596.485583][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1609'. [ 597.017323][ T9994] PKCS8: Unsupported PKCS#8 version [ 597.627822][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1618'. [ 598.266502][T10012] loop4: detected capacity change from 0 to 64 [ 598.911981][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1626'. [ 599.561427][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 599.768582][T10030] loop0: detected capacity change from 0 to 64 [ 600.799064][T10040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 600.874944][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 600.902618][T10042] batadv0: entered promiscuous mode [ 600.908412][T10042] macsec1: entered promiscuous mode [ 600.914858][T10042] macsec1: entered allmulticast mode [ 600.922619][T10042] batadv0: entered allmulticast mode [ 601.332548][T10049] ===================================================== [ 601.341936][T10049] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 601.351721][T10049] _copy_to_user+0xcc/0x120 [ 601.356583][T10049] do_insn_ioctl+0x59c/0x6d0 [ 601.361786][T10049] comedi_unlocked_ioctl+0xa5e/0x1f60 [ 601.367855][T10049] __se_sys_ioctl+0x23c/0x400 [ 601.372772][T10049] __x64_sys_ioctl+0x97/0xe0 [ 601.378278][T10049] x64_sys_call+0x1cbc/0x3e20 [ 601.383318][T10049] do_syscall_64+0xd9/0x210 [ 601.388233][T10049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.394517][T10049] [ 601.396939][T10049] Uninit was created at: [ 601.404456][T10049] ___kmalloc_large_node+0x310/0x3b0 [ 601.410215][T10049] __kmalloc_large_node_noprof+0x3f/0x1f0 [ 601.416334][T10049] __kmalloc_noprof+0xbad/0x1310 [ 601.422597][T10049] do_insn_ioctl+0x108/0x6d0 [ 601.428012][T10049] comedi_unlocked_ioctl+0xa5e/0x1f60 [ 601.437621][T10049] __se_sys_ioctl+0x23c/0x400 [ 601.442506][T10049] __x64_sys_ioctl+0x97/0xe0 [ 601.448630][T10049] x64_sys_call+0x1cbc/0x3e20 [ 601.453642][T10049] do_syscall_64+0xd9/0x210 [ 601.458653][T10049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.464934][T10049] [ 601.467631][T10049] Bytes 4-150523 of 150524 are uninitialized [ 601.473836][T10049] Memory access of size 150524 starts at ffff88801f700000 [ 601.481321][T10049] [ 601.483806][T10049] CPU: 0 UID: 0 PID: 10049 Comm: syz.2.1642 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(none) [ 601.496182][T10049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 601.506648][T10049] ===================================================== [ 601.513889][T10049] Disabling lock debugging due to kernel taint [ 601.520888][T10049] Kernel panic - not syncing: kmsan.panic set ... [ 601.527571][T10049] CPU: 0 UID: 0 PID: 10049 Comm: syz.2.1642 Tainted: G B 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(none) [ 601.541128][T10049] Tainted: [B]=BAD_PAGE [ 601.545501][T10049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 601.555843][T10049] Call Trace: [ 601.559280][T10049] [ 601.562339][T10049] __dump_stack+0x26/0x30 [ 601.566905][T10049] dump_stack_lvl+0x53/0x270 [ 601.571732][T10049] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 601.577889][T10049] dump_stack+0x1e/0x25 [ 601.582305][T10049] vpanic+0x361/0xc50 [ 601.586541][T10049] panic+0x15d/0x160 [ 601.590759][T10049] kmsan_report+0x31c/0x320 [ 601.595494][T10049] ? kmsan_internal_check_memory+0x1e1/0x230 [ 601.601702][T10049] ? kmsan_copy_to_user+0xf1/0x190 [ 601.607097][T10049] ? _copy_to_user+0xcc/0x120 [ 601.612010][T10049] ? do_insn_ioctl+0x59c/0x6d0 [ 601.617022][T10049] ? comedi_unlocked_ioctl+0xa5e/0x1f60 [ 601.622901][T10049] ? __se_sys_ioctl+0x23c/0x400 [ 601.627969][T10049] ? __x64_sys_ioctl+0x97/0xe0 [ 601.632994][T10049] ? x64_sys_call+0x1cbc/0x3e20 [ 601.638886][T10049] ? do_syscall_64+0xd9/0x210 [ 601.643797][T10049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.650093][T10049] ? kmsan_get_metadata+0xfb/0x160 [ 601.655614][T10049] ? kmsan_get_metadata+0xfb/0x160 [ 601.660943][T10049] ? kmsan_get_metadata+0xfb/0x160 [ 601.666363][T10049] ? kmsan_get_metadata+0xfb/0x160 [ 601.672225][T10049] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 601.679025][T10049] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 601.685474][T10049] ? irqentry_enter+0x30/0x60 [ 601.690529][T10049] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 601.697239][T10049] ? __pfx_subdev_8255_io+0x10/0x10 [ 601.702771][T10049] kmsan_internal_check_memory+0x1e1/0x230 [ 601.708848][T10049] kmsan_copy_to_user+0xf1/0x190 [ 601.714568][T10049] _copy_to_user+0xcc/0x120 [ 601.719334][T10049] do_insn_ioctl+0x59c/0x6d0 [ 601.724288][T10049] comedi_unlocked_ioctl+0xa5e/0x1f60 [ 601.729966][T10049] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 601.736037][T10049] __se_sys_ioctl+0x23c/0x400 [ 601.740945][T10049] __x64_sys_ioctl+0x97/0xe0 [ 601.745763][T10049] x64_sys_call+0x1cbc/0x3e20 [ 601.750708][T10049] do_syscall_64+0xd9/0x210 [ 601.755433][T10049] ? irqentry_exit+0x16/0x60 [ 601.760225][T10049] ? clear_bhb_loop+0x40/0x90 [ 601.765119][T10049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.771322][T10049] RIP: 0033:0x7f568938ebe9 [ 601.775903][T10049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.796497][T10049] RSP: 002b:00007f568a17d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.805876][T10049] RAX: ffffffffffffffda RBX: 00007f56895b5fa0 RCX: 00007f568938ebe9 [ 601.814077][T10049] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 601.822356][T10049] RBP: 00007f5689411e19 R08: 0000000000000000 R09: 0000000000000000 [ 601.830634][T10049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.839208][T10049] R13: 00007f56895b6038 R14: 00007f56895b5fa0 R15: 00007fff7cbfdf68 [ 601.847706][T10049] [ 601.851192][T10049] Kernel Offset: disabled [ 601.855600][T10049] Rebooting in 86400 seconds..