last executing test programs: 2m20.111165935s ago: executing program 1 (id=407): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m18.979539165s ago: executing program 1 (id=415): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xb, @local, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c088088f51e72eb2f7e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 2m18.441700978s ago: executing program 1 (id=418): io_setup(0x2, &(0x7f0000000040)=0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) sendto$inet6(r1, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) 2m17.95069035s ago: executing program 1 (id=422): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f00000001c0)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x9c) lseek(r0, 0x12, 0x0) getdents64(r0, 0x0, 0x22) 2m15.82040896s ago: executing program 1 (id=430): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000001080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "7e581ba68817"}}}}}}}, 0x0) 2m15.343848613s ago: executing program 1 (id=435): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 2m14.484162403s ago: executing program 32 (id=435): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 1m32.369339357s ago: executing program 0 (id=657): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file1'}, 0xb) mmap(&(0x7f000025e000/0x4000)=nil, 0x4000, 0x3000007, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) write(r0, &(0x7f0000000180)="86", 0x1) 1m31.889625155s ago: executing program 0 (id=661): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x1, 0x1, 0x2, 0x100, @val=0x80}, "580f20af9978"}}}}}}}, 0x0) 1m31.440147709s ago: executing program 0 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 1m31.056207542s ago: executing program 0 (id=669): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 1m30.788643779s ago: executing program 0 (id=673): socket$packet(0x11, 0x3, 0x300) fanotify_init(0x1b, 0x40000) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 1m29.821590814s ago: executing program 0 (id=684): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010089"], 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x90) syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000010280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25020000000500010066"], 0x1c}, 0x1, 0x0, 0x0, 0x40002}, 0x20000800) 1m29.061672271s ago: executing program 33 (id=684): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010089"], 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x90) syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000010280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25020000000500010066"], 0x1c}, 0x1, 0x0, 0x0, 0x40002}, 0x20000800) 5.682720506s ago: executing program 6 (id=1261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}}, 0x0) 5.345893711s ago: executing program 6 (id=1263): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close(r1) 5.22004409s ago: executing program 3 (id=1264): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001300010925bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="12030000000000000a0001"], 0x2c}}, 0x42) 5.114243822s ago: executing program 5 (id=1265): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)={0x10000001}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 4.932530558s ago: executing program 6 (id=1268): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) 4.672197241s ago: executing program 5 (id=1270): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x20007fff, @empty, 0x4}, {0xa, 0x2, 0xf7fffffe, @remote}, r1, 0x4809a0}}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 4.572976012s ago: executing program 4 (id=1271): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x3ff}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 4.487031278s ago: executing program 3 (id=1272): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e21, 0xc65, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xa}}, 0x0, 0x0, 0x37, 0x0, "27a439314dd4e44381cf3c6e80332476357abfaa44bc2c5d062d5fbc71d4e0b287638552b9a1a24857cc61ac44f581adbcd175f4b0d67ce555409997c4e172ca22cfa5dd9876f62c9a441e2074dbb4ba"}, 0xd8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 4.326015945s ago: executing program 5 (id=1274): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25) 4.203592009s ago: executing program 4 (id=1276): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x8, r2, 0x0, 0x4, 0x96495, 0x1, &(0x7f0000000280)="ec", 0x10000}) 4.099928243s ago: executing program 5 (id=1277): syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a19", @ANYRES64], 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) msgrcv(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000) syz_open_dev$evdev(&(0x7f0000000080), 0x4000000000000, 0x101401) 3.986630463s ago: executing program 4 (id=1279): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000140)='-\t:\xfd\xff\xff\xff\xff\xff\xff$\xdcG|\xbd1\xc2\xb1\x00\xadSP\xb3\xc9\x9c\x9d\xd2\x1f,\xc6\xea\x1fj\xac\xa35\x86\xe5\xechC\x0fz\'\xa9\xb3\x86\r&\"\xe6\xc8\x13\xc3e\xdf\x1bh\x031\xda\x1bNG\xac\xf3O\x02\x83\x96', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x13000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x900389b, 0x1c481, 0x0, 0x3b2}, 0x0, 0x0) 3.884966649s ago: executing program 6 (id=1280): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000003040)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x4}, 0x8) 3.691361858s ago: executing program 4 (id=1281): syz_usb_connect(0x4, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d500102"], 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='@!\f\x00\x00\x00\f!'], 0x0}, 0x0) 3.564475485s ago: executing program 6 (id=1283): setresgid(0xee00, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x2a8000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x2008004, &(0x7f0000000000), 0x1, 0x29b, &(0x7f0000000180)="$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") exit(0x5) prlimit64(r0, 0x7, 0x0, 0x0) 3.420380682s ago: executing program 7 (id=1284): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3.42022798s ago: executing program 3 (id=1285): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000440)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000040)='THAWED\x00', 0x7) 3.245861449s ago: executing program 2 (id=1286): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001300010925bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="12030000000000000a0001"], 0x2c}}, 0x42) 2.927232065s ago: executing program 7 (id=1287): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)={0x0, 0x40000000}) 2.491054745s ago: executing program 3 (id=1288): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/26, 0x1a) close(r0) 2.364486653s ago: executing program 6 (id=1289): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.123357411s ago: executing program 2 (id=1290): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r0}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000800000000000000001000000850000000f000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 2.113136997s ago: executing program 7 (id=1291): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2024) 1.899758748s ago: executing program 3 (id=1292): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a44000010203010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.850006735s ago: executing program 5 (id=1293): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r2, 0x0, 0x80, 0x6) 1.709200337s ago: executing program 2 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10) 1.314528718s ago: executing program 7 (id=1295): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0x8000000000000001, 0x3, 0x5, 0xfffffffb}) 1.014878547s ago: executing program 7 (id=1296): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000032c0)={0x2c, r0, 0x1, 0x70bd23, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x0) 840.06399ms ago: executing program 2 (id=1297): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010826bd7000030000000b00000008000300", @ANYRES32=r2, @ANYBLOB="2800508005000200020000000800030002ac0f00090001000fd693f95900000005000900010000080a0006"], 0x50}}, 0x40000) 767.968017ms ago: executing program 5 (id=1298): syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x143041, 0x100) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") 628.494583ms ago: executing program 7 (id=1299): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc4ff, 0x800, 0x2, 0x33b}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 408.21239ms ago: executing program 4 (id=1300): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x8, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 317.059011ms ago: executing program 2 (id=1301): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000440)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000040)='THAWED\x00', 0x7) 187.412799ms ago: executing program 2 (id=1302): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x603) ioctl$I2C_SMBUS(r1, 0x720, 0x0) 115.148959ms ago: executing program 4 (id=1303): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast2}, 0x10) 0s ago: executing program 3 (id=1304): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r0, &(0x7f0000000180)=""/67, 0x43) kernel console output (not intermixed with test programs): ][ T5903] usb 5-1: USB disconnect, device number 5 [ 220.863588][ T5938] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 220.873297][ T5903] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 220.896875][ T5938] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 220.924247][ T5938] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 220.954294][ T5903] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 220.976196][ T5938] usb 7-1: config 1 has no interface number 0 [ 221.002578][ T5903] quatech2 5-1:0.51: device disconnected [ 221.008534][ T5938] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.020799][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.062377][ T5938] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 221.125219][ T5938] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 221.150731][ T7868] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 221.171104][ T5938] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.172298][ T7884] netlink: 'syz.5.623': attribute type 83 has an invalid length. [ 221.216500][ T5938] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 221.250827][ T7868] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 221.281871][ T7868] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 221.388817][ T31] audit: type=1800 audit(1769750754.022:10): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.615" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 221.431776][ T5938] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 221.443801][ T7868] syz.3.615: attempt to access beyond end of device [ 221.443801][ T7868] loop3: rw=8423425, sector=77824, nr_sectors = 8 limit=40427 [ 221.542292][ T7888] syz.3.615: attempt to access beyond end of device [ 221.542292][ T7888] loop3: rw=524288, sector=77824, nr_sectors = 8 limit=40427 [ 221.615667][ T7888] syz.3.615: attempt to access beyond end of device [ 221.615667][ T7888] loop3: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 221.665406][ T31] audit: type=1800 audit(1769750754.302:11): pid=7888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.615" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 221.862675][ T5903] usb 7-1: USB disconnect, device number 3 [ 221.893872][ T5903] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 221.948397][ T7879] loop2: detected capacity change from 0 to 32768 [ 222.020006][ T7879] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.622 (7879) [ 222.035749][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.157458][ T7897] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 222.184096][ T7879] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 222.195891][ T7897] overlayfs: overlapping lowerdir path [ 222.244715][ T7879] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm [ 222.432676][ T5910] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 222.471236][ T7879] BTRFS info (device loop2): enabling ssd optimizations [ 222.501761][ T7879] BTRFS info (device loop2): turning on async discard [ 222.508608][ T7879] BTRFS info (device loop2): enabling free space tree [ 222.569721][ T7879] BTRFS info (device loop2): use zstd compression, level 3 [ 222.602782][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 222.642351][ T5910] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 222.670064][ T5910] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.721721][ T5910] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.758434][ T5910] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.810603][ T5910] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.824621][ T791] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 222.848777][ T5910] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 222.910950][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.039709][ T791] usb 6-1: Using ep0 maxpacket: 16 [ 223.072530][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.084524][ T791] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 223.108992][ T791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.141149][ T5809] hid-generic 0000:0D17:0000.000D: unknown main item tag 0x0 [ 223.142963][ T5826] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 223.152611][ T791] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.188337][ T5809] hid-generic 0000:0D17:0000.000D: unknown main item tag 0x0 [ 223.208708][ T5910] usb 1-1: usb_control_msg returned -32 [ 223.232915][ T5910] usbtmc 1-1:16.0: can't read capabilities [ 223.259609][ T791] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.277518][ T5809] hid-generic 0000:0D17:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 223.288065][ T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.347689][ T791] usb 6-1: Product: syz [ 223.385826][ T791] usb 6-1: Manufacturer: syz [ 223.400618][ T791] usb 6-1: SerialNumber: syz [ 223.632272][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.695323][ T7929] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 223.729037][ T7927] fido_id[7927]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 223.796765][ T7934] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.636'. [ 223.809741][ T5903] usb 1-1: USB disconnect, device number 8 [ 223.888407][ T791] usb 6-1: 0:2 : does not exist [ 224.118849][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.348461][ T7940] loop3: detected capacity change from 0 to 512 [ 224.403036][ T7942] netlink: 64 bytes leftover after parsing attributes in process `syz.6.640'. [ 224.483239][ T7940] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.639: inode has both inline data and extents flags [ 224.533948][ T791] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 224.551918][ T7946] binder: 7945:7946 ioctl 40046205 0 returned -22 [ 224.574879][ T7940] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.639: couldn't read orphan inode 15 (err -117) [ 224.618782][ T7940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.781511][ T791] usb 6-1: USB disconnect, device number 13 [ 224.925496][ T31] audit: type=1326 audit(1769750757.562:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7950 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f419aeb9 code=0x7fc00000 [ 225.097250][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.155795][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.166095][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.584249][ T31] audit: type=1326 audit(1769750758.222:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7950 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f73f419aeb9 code=0x7fc00000 [ 225.789444][ T7975] loop3: detected capacity change from 0 to 2048 [ 225.935866][ T7975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.981888][ T7975] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.146686][ T7975] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.651: bg 0: block 345: padding at end of block bitmap is not set [ 226.202455][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.246345][ T7975] EXT4-fs (loop3): Remounting filesystem read-only [ 226.435319][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.615468][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 226.615528][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 226.625067][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 226.633919][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 226.633991][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 226.684067][ T791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.232908][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.254134][ T8003] netlink: 'syz.4.663': attribute type 2 has an invalid length. [ 228.272563][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.104975][ T8050] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.686'. [ 229.314850][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.332101][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.513827][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.712168][ T791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.727565][ T8058] loop5: detected capacity change from 0 to 256 [ 229.764879][ T8058] exfat: Deprecated parameter 'namecase' [ 229.813900][ T8058] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 229.885190][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.933991][ T8058] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 230.202003][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 230.226478][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 230.235620][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 230.250385][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.268445][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 230.290178][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.355107][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.600547][ T13] bridge_slave_1: left allmulticast mode [ 230.606731][ T13] bridge_slave_1: left promiscuous mode [ 230.613310][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.627941][ T13] bridge_slave_0: left allmulticast mode [ 230.633870][ T13] bridge_slave_0: left promiscuous mode [ 230.639775][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.956701][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.968269][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.979790][ T13] bond0 (unregistering): Released all slaves [ 231.000643][ T8062] chnl_net:caif_netlink_parms(): no params data found [ 231.198547][ T8062] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.228530][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.240019][ T8062] bridge_slave_0: entered allmulticast mode [ 231.249587][ T8062] bridge_slave_0: entered promiscuous mode [ 231.309097][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.322215][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.329664][ T8062] bridge_slave_1: entered allmulticast mode [ 231.346634][ T8062] bridge_slave_1: entered promiscuous mode [ 231.463631][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.531664][ T13] hsr_slave_0: left promiscuous mode [ 231.537875][ T13] hsr_slave_1: left promiscuous mode [ 231.544405][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.559653][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.568376][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.575877][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.608581][ T13] veth1_macvtap: left promiscuous mode [ 231.614256][ T13] veth0_macvtap: left promiscuous mode [ 231.619939][ T13] veth1_vlan: left promiscuous mode [ 231.627414][ T13] veth0_vlan: left promiscuous mode [ 232.160609][ T13] team0 (unregistering): Port device team_slave_1 removed [ 232.197770][ T13] team0 (unregistering): Port device team_slave_0 removed [ 232.354477][ T5838] Bluetooth: hci5: command tx timeout [ 232.516037][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.610800][ T8062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.627538][ T8062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.670213][ T8062] team0: Port device team_slave_0 added [ 232.682792][ T8062] team0: Port device team_slave_1 added [ 232.733899][ T8062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.740895][ T8062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.767500][ T8062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.769461][ T791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.788581][ T8062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.796035][ T8062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.827186][ T8062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.945952][ T8062] hsr_slave_0: entered promiscuous mode [ 232.955246][ T8062] hsr_slave_1: entered promiscuous mode [ 232.967019][ T8062] debugfs: 'hsr0' already exists in 'hsr' [ 232.972869][ T8062] Cannot create hsr debugfs directory [ 233.396813][ T8062] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 233.411206][ T8062] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 233.423850][ T8062] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 233.439222][ T8062] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 233.552769][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.608754][ T8062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.631134][ T8062] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.665642][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.672862][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.696139][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.703501][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.036349][ T8062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.434222][ T5838] Bluetooth: hci5: command tx timeout [ 234.479661][ T8062] veth0_vlan: entered promiscuous mode [ 234.506943][ T8062] veth1_vlan: entered promiscuous mode [ 234.553769][ T8062] veth0_macvtap: entered promiscuous mode [ 234.569208][ T8062] veth1_macvtap: entered promiscuous mode [ 234.590930][ T8062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.599463][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.604206][ T8062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.653168][ T1000] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.664583][ T1000] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.696520][ T1000] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.747176][ T1000] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.755185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.767185][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.789240][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.857045][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.875808][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.921894][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.940612][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.206604][ T8149] loop5: detected capacity change from 0 to 8 [ 235.259251][ T8151] loop6: detected capacity change from 0 to 512 [ 235.326333][ T8151] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 235.368523][ T8151] EXT4-fs (loop6): orphan cleanup on readonly fs [ 235.383560][ T8151] EXT4-fs warning (device loop6): dx_probe:859: inode #2: comm syz.6.703: dx entry: limit 1024 != root limit 124 [ 235.397185][ T8151] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.703: Corrupt directory, running e2fsck is recommended [ 235.436587][ T8151] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 235.461965][ T978] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 235.497771][ T8151] EXT4-fs error (device loop6): ext4_iget_extra_inode:5072: inode #15: comm syz.6.703: corrupted in-inode xattr: invalid ea_ino [ 235.535934][ T8151] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.703: couldn't read orphan inode 15 (err -117) [ 235.573976][ T8151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.639335][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.672605][ T978] usb 8-1: Using ep0 maxpacket: 8 [ 235.679737][ T978] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 235.693522][ T978] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 235.709066][ T978] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.730856][ T978] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.746083][ T978] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.755324][ T978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.770249][ T7248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.794716][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.016285][ T978] usb 8-1: usb_control_msg returned -32 [ 236.022286][ T978] usbtmc 8-1:16.0: can't read capabilities [ 236.511845][ T5838] Bluetooth: hci5: command tx timeout [ 236.676191][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.713809][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.188577][ T975] usb 8-1: USB disconnect, device number 2 [ 238.591949][ T5838] Bluetooth: hci5: command tx timeout [ 238.603109][ T8186] netlink: 240 bytes leftover after parsing attributes in process `syz.2.695'. [ 238.651975][ T5944] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 238.701813][ T791] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 238.752868][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.838185][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 238.845622][ T5944] usb 6-1: config 0 has an invalid interface number: 108 but max is 0 [ 238.855643][ T5944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.867624][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.876776][ T5944] usb 6-1: config 0 has no interface number 0 [ 238.883609][ T5944] usb 6-1: config 0 interface 108 has no altsetting 0 [ 238.891861][ T791] usb 7-1: Using ep0 maxpacket: 32 [ 238.899823][ T5944] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 238.909655][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 238.919308][ T791] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 238.927666][ T791] usb 7-1: config 0 has no interface number 0 [ 238.933962][ T5944] usb 6-1: Product: syz [ 238.938255][ T5944] usb 6-1: Manufacturer: syz [ 238.943178][ T5944] usb 6-1: SerialNumber: syz [ 238.950227][ T791] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 238.962562][ T5944] usb 6-1: config 0 descriptor?? [ 238.973909][ T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.987161][ T791] usb 7-1: Product: syz [ 238.994694][ T791] usb 7-1: Manufacturer: syz [ 238.999404][ T791] usb 7-1: SerialNumber: syz [ 239.008376][ T8191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.037287][ T791] usb 7-1: config 0 descriptor?? [ 239.047879][ T791] smsc95xx v2.0.0 [ 239.179988][ T975] usb 6-1: USB disconnect, device number 14 [ 239.474547][ T791] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 239.511747][ T791] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 239.559264][ T8201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.745121][ T791] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 239.785820][ T791] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -61 [ 240.026334][ T791] usb 7-1: USB disconnect, device number 4 [ 240.255399][ T8216] loop3: detected capacity change from 0 to 1024 [ 240.427952][ T31] audit: type=1800 audit(863271024.399:14): pid=8216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.716" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 240.599077][ T3026] hfsplus: b-tree write err: -5, ino 4 [ 241.337295][ T8237] loop3: detected capacity change from 0 to 512 [ 241.386006][ T8237] EXT4-fs (loop3): Test dummy encryption mode enabled [ 241.441732][ T8237] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 241.509429][ T8245] loop4: detected capacity change from 0 to 512 [ 241.522172][ T8237] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.725: bad orphan inode 131083 [ 241.534690][ T8245] EXT4-fs: Ignoring removed orlov option [ 241.544959][ T8237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.592451][ T8245] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 241.692355][ T8245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 241.733996][ T8237] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 241.742902][ T8245] EXT4-fs error (device loop4): ext4_iget_extra_inode:5072: inode #15: comm syz.4.729: corrupted in-inode xattr: e_value size too large [ 241.786580][ T8245] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.729: couldn't read orphan inode 15 (err -117) [ 241.824177][ T31] audit: type=1326 audit(863271025.799:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.7.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7999aeb9 code=0x7fc00000 [ 241.864129][ T8245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.002756][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.258668][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.430848][ T8268] loop4: detected capacity change from 0 to 512 [ 242.443818][ T8268] EXT4-fs: Ignoring removed i_version option [ 242.452601][ T791] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 242.460319][ T31] audit: type=1326 audit(863271026.419:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.7.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d7993c2d9 code=0x7fc00000 [ 242.520320][ T8268] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 242.531975][ T8268] System zones: 0-2, 18-18, 34-35 [ 242.557449][ T8268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.653103][ T791] usb 4-1: Using ep0 maxpacket: 32 [ 242.666236][ T791] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 242.708616][ T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.759864][ T791] usb 4-1: config 0 descriptor?? [ 242.922713][ T8268] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz.4.735: directory missing '.' [ 242.970983][ T8280] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.740'. [ 243.019957][ T791] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 243.046877][ T791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 243.109717][ T791] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 243.132078][ T791] usb 4-1: media controller created [ 243.153065][ T791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.225882][ T791] az6027: usb out operation failed. (-71) [ 243.232152][ T791] az6027: usb out operation failed. (-71) [ 243.233489][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.237898][ T791] stb0899_attach: Driver disabled by Kconfig [ 243.250153][ T8284] loop6: detected capacity change from 0 to 4096 [ 243.272747][ T791] az6027: no front-end attached [ 243.272747][ T791] [ 243.284212][ T791] az6027: usb out operation failed. (-71) [ 243.307113][ T791] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 243.360446][ T791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 243.422568][ T791] dvb-usb: schedule remote query interval to 400 msecs. [ 243.469016][ T791] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 243.557807][ T791] usb 4-1: USB disconnect, device number 9 [ 243.853751][ T791] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 244.408035][ T8313] input: syz1 as /devices/virtual/input/input16 [ 244.580930][ T8319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.588243][ T8319] IPv6: NLM_F_CREATE should be set when creating new route [ 244.662096][ T5944] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 244.846554][ T5944] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.881741][ T5944] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.928583][ T5944] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 244.958479][ T5944] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.006017][ T5944] usb 8-1: config 0 descriptor?? [ 245.493305][ T5944] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 245.564399][ T5944] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 245.724194][ T5944] cp2112 0003:10C4:EA90.000E: Part Number: 0x82 Device Version: 0xFE [ 245.941764][ T978] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 246.112045][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 246.128806][ T978] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 246.143360][ T5944] cp2112 0003:10C4:EA90.000E: error setting SMBus config [ 246.166358][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.174282][ T5944] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -71 [ 246.227901][ T978] usb 3-1: config 0 descriptor?? [ 246.275545][ T5944] usb 8-1: USB disconnect, device number 3 [ 246.481213][ T978] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 246.525235][ T978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.582395][ T978] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 246.612239][ T978] usb 3-1: media controller created [ 246.661170][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.785749][ T978] az6027: usb out operation failed. (-71) [ 246.809818][ T978] az6027: usb out operation failed. (-71) [ 246.834713][ T978] stb0899_attach: Driver disabled by Kconfig [ 246.871368][ T978] az6027: no front-end attached [ 246.871368][ T978] [ 246.890444][ T8367] input: syz1 as /devices/virtual/input/input17 [ 246.919006][ T978] az6027: usb out operation failed. (-71) [ 246.943111][ T978] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 246.994382][ T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 247.124234][ T978] dvb-usb: schedule remote query interval to 400 msecs. [ 247.142088][ T978] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 247.228760][ T978] usb 3-1: USB disconnect, device number 8 [ 247.453206][ T978] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 247.510839][ T8385] loop6: detected capacity change from 0 to 64 [ 247.578154][ T8388] loop5: detected capacity change from 0 to 128 [ 247.794460][ T8388] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.059327][ T8392] loop4: detected capacity change from 0 to 4096 [ 248.164597][ T5824] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 248.295447][ T8392] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 248.424678][ T8392] ntfs3(loop4): ino=1e, "file1" attr_set_size [ 248.476282][ T8390] ntfs3(loop4): ino=1e, "file1" attr_set_size [ 248.935271][ T8407] loop5: detected capacity change from 0 to 4096 [ 249.142943][ T8414] loop4: detected capacity change from 0 to 1024 [ 249.426373][ T31] audit: type=1800 audit(863271033.389:17): pid=8414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.787" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 249.587160][ T8396] loop7: detected capacity change from 0 to 32768 [ 249.649485][ T8424] loop6: detected capacity change from 0 to 512 [ 249.709636][ T8396] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.784 (8396) [ 249.752907][ T8424] EXT4-fs: Ignoring removed i_version option [ 249.783601][ T1163] hfsplus: b-tree write err: -5, ino 4 [ 249.830364][ T8396] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.888783][ T8396] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 249.897757][ T8424] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 249.930639][ T8431] loop3: detected capacity change from 0 to 64 [ 249.951959][ T8424] System zones: 0-2, 18-18, 34-35 [ 250.022542][ T5910] IPVS: starting estimator thread 0... [ 250.037401][ T8438] IPVS: sed: FWM 3 0x00000003 - no destination available [ 250.134112][ T8439] IPVS: using max 23 ests per chain, 55200 per kthread [ 250.216165][ T8424] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.353896][ T8396] BTRFS info (device loop7): rebuilding free space tree [ 250.459957][ T8396] BTRFS info (device loop7): disabling free space tree [ 250.518229][ T8396] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 250.563958][ T8424] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz.6.790: directory missing '.' [ 250.595819][ T8396] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 250.682376][ T8396] BTRFS info (device loop7): enabling ssd optimizations [ 250.689487][ T8396] BTRFS info (device loop7): force clearing of disk cache [ 250.701764][ T8459] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 250.751673][ T8396] BTRFS info (device loop7): enabling auto defrag [ 250.791731][ T8396] BTRFS info (device loop7): max_inline set to 4096 [ 250.852580][ T7248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.003743][ T8062] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.081815][ T5910] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 251.124542][ T8470] loop6: detected capacity change from 0 to 128 [ 251.211402][ T8470] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.261692][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 251.269010][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.280142][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 251.293606][ T5910] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 251.303195][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.320002][ T5910] usb 4-1: config 0 descriptor?? [ 251.572259][ T5809] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 251.647160][ T7248] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.801406][ T5809] usb 5-1: Using ep0 maxpacket: 8 [ 251.834162][ T5809] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 251.846084][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 251.861715][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.873482][ T5809] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.887309][ T5809] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.896953][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.018134][ T5910] usb 4-1: string descriptor 0 read error: -71 [ 252.037046][ T5910] uclogic 0003:256C:006E.000F: failed retrieving string descriptor #200: -71 [ 252.066494][ T5910] uclogic 0003:256C:006E.000F: failed retrieving pen parameters: -71 [ 252.101028][ T5910] uclogic 0003:256C:006E.000F: failed probing pen v2 parameters: -71 [ 252.141850][ T5910] uclogic 0003:256C:006E.000F: failed probing parameters: -71 [ 252.149570][ T5910] uclogic 0003:256C:006E.000F: probe with driver uclogic failed with error -71 [ 252.168761][ T5809] usb 5-1: usb_control_msg returned -32 [ 252.185381][ T5809] usbtmc 5-1:16.0: can't read capabilities [ 252.223195][ T5910] usb 4-1: USB disconnect, device number 10 [ 252.315401][ T8489] loop7: detected capacity change from 0 to 1024 [ 252.438101][ T31] audit: type=1800 audit(863271036.409:18): pid=8489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.807" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 252.539652][ T50] hfsplus: b-tree write err: -5, ino 4 [ 253.248074][ T8513] loop5: detected capacity change from 0 to 64 [ 253.357365][ T8517] loop3: detected capacity change from 0 to 512 [ 253.397246][ T8518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.412976][ T8517] EXT4-fs: Ignoring removed i_version option [ 253.514611][ T8517] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 253.591377][ T8517] System zones: 0-2, 18-18, 34-35 [ 253.601810][ T5938] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 253.665356][ T8517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.774205][ T5938] usb 7-1: Using ep0 maxpacket: 32 [ 253.793812][ T5938] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 253.831848][ T5938] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.868405][ T5938] usb 7-1: config 0 descriptor?? [ 253.885592][ T8517] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #12: comm syz.3.815: directory missing '.' [ 254.065575][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.112212][ T5938] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 254.146885][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.174284][ T5938] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 254.197917][ T5938] usb 7-1: media controller created [ 254.280235][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.435039][ T5938] az6027: usb out operation failed. (-71) [ 254.473746][ T978] usb 5-1: USB disconnect, device number 6 [ 254.489014][ T5938] az6027: usb out operation failed. (-71) [ 254.532006][ T5938] stb0899_attach: Driver disabled by Kconfig [ 254.570506][ T5938] az6027: no front-end attached [ 254.570506][ T5938] [ 254.621930][ T5938] az6027: usb out operation failed. (-71) [ 254.629859][ T8541] loop3: detected capacity change from 0 to 32768 [ 254.648147][ T5938] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 254.715467][ T8541] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 254.744259][ T5938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input19 [ 254.789942][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.823'. [ 254.858164][ T5938] dvb-usb: schedule remote query interval to 400 msecs. [ 254.912067][ T8541] XFS (loop3): Ending clean mount [ 254.922450][ T5938] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 255.016338][ T5938] usb 7-1: USB disconnect, device number 5 [ 255.189738][ T5827] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 255.335989][ T8534] loop2: detected capacity change from 0 to 32768 [ 255.375669][ T5938] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 255.454739][ T8534] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 255.526842][ T8572] loop5: detected capacity change from 0 to 2048 [ 255.642425][ T8534] XFS (loop2): Ending clean mount [ 255.709232][ T8569] loop6: detected capacity change from 0 to 4096 [ 255.743851][ T8572] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.784007][ T8569] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 255.921830][ T5910] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 255.975081][ T8586] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 256.042213][ T5938] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 256.067287][ T8569] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 256.110556][ T5826] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 256.130001][ T8569] ntfs3(loop6): ino=5, mi_enum_attr [ 256.175472][ T5910] usb 8-1: Using ep0 maxpacket: 16 [ 256.185189][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.243679][ T5938] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 256.264417][ T5938] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.275218][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.304111][ T5938] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.320737][ T5910] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 256.384225][ T5938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 256.386379][ T5910] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 256.455156][ T5938] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.466902][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.497460][ T5938] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.518188][ T5910] usb 8-1: config 0 descriptor?? [ 256.570391][ T5938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 256.610074][ T5938] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.635207][ T5938] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.672530][ T5938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 256.699058][ T5938] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.746462][ T5938] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.799671][ T5938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 256.829674][ T5938] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.872664][ T5938] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.903098][ T5938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 256.971863][ T5938] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.998399][ T5938] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.025012][ T5938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.036543][ T5910] input: HID 0955:7214 Haptics as /devices/virtual/input/input20 [ 257.043312][ T5938] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.091752][ T5938] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.128630][ T5910] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 257.161821][ T5938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.183873][ T5938] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.209614][ T5938] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.220620][ T5910] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 257.223829][ T5938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.258587][ T5938] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 257.275643][ T5938] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 257.302125][ T5938] usb 4-1: Product: syz [ 257.316594][ T5938] usb 4-1: Manufacturer: syz [ 257.321237][ T5938] usb 4-1: SerialNumber: syz [ 257.332997][ T5944] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 257.344922][ T5938] usb 4-1: config 0 descriptor?? [ 257.350973][ T5910] usb 8-1: USB disconnect, device number 4 [ 257.372640][ T5938] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 257.375330][ T5944] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 257.467330][ T5944] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 257.516532][ T5944] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 257.642271][ T5938] usb 4-1: USB disconnect, device number 11 [ 257.689999][ T5938] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 257.899212][ T5903] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 258.018188][ T8614] loop4: detected capacity change from 0 to 1024 [ 258.083937][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.119993][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.153839][ T5903] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.201972][ T5903] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.226132][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.262962][ T5903] usb 7-1: config 0 descriptor?? [ 258.394621][ T8618] loop2: detected capacity change from 0 to 4096 [ 258.628035][ T8618] ntfs3(loop2): ino=21, "bus" direct i/o + compressed not supported [ 258.718967][ T5903] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x6 [ 258.802855][ T5903] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 259.531927][ T5903] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 259.549485][ T8650] netlink: 80 bytes leftover after parsing attributes in process `syz.7.855'. [ 259.716290][ T5903] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 259.730405][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.751454][ T5903] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 259.783197][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 259.799648][ T5903] usb 5-1: Product: syz [ 259.811788][ T5903] usb 5-1: Manufacturer: syz [ 259.818736][ T5903] usb 5-1: SerialNumber: syz [ 259.835346][ T5903] usb 5-1: config 0 descriptor?? [ 259.864179][ T5903] usb 5-1: selecting invalid altsetting 0 [ 259.887003][ T8657] loop5: detected capacity change from 0 to 4096 [ 259.922388][ T5938] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 260.091766][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 260.116523][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.137276][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.150901][ T5903] usb 5-1: USB disconnect, device number 7 [ 260.168592][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 260.188687][ T5938] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 260.206903][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.258224][ T5938] usb 4-1: config 0 descriptor?? [ 260.484080][ T978] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 260.585857][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.7.865'. [ 260.653853][ T978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.679278][ T978] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 260.719645][ T5938] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 260.742994][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 260.775812][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 260.813385][ T5944] usb 7-1: USB disconnect, device number 6 [ 260.844630][ T978] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 260.869444][ T5938] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 260.912163][ T5938] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 260.945458][ T978] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 260.976752][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 261.025104][ T8676] loop6: detected capacity change from 0 to 512 [ 261.033818][ T978] usb 6-1: Product: syz [ 261.038019][ T978] usb 6-1: Manufacturer: syz [ 261.070151][ T5903] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 261.083932][ T5938] usb 4-1: USB disconnect, device number 12 [ 261.121758][ T978] usb 6-1: SerialNumber: syz [ 261.168438][ T5903] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 261.214351][ T8674] loop7: detected capacity change from 0 to 40427 [ 261.222830][ T8674] F2FS-fs: heap/no_heap options were deprecated [ 261.225415][ T978] usb 6-1: config 0 descriptor?? [ 261.239557][ T8674] F2FS-fs (loop7): Wrong SIT boundary, start(1536) end(2560) blocks(32256) [ 261.248681][ T8674] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 261.256908][ T8674] F2FS-fs (loop7): Image doesn't support compression [ 261.275278][ T5903] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 261.286358][ T8674] F2FS-fs (loop7): invalid crc value [ 261.338016][ T5903] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 261.390782][ T8674] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 261.404338][ T8674] F2FS-fs (loop7): Start checkpoint disabled! [ 261.419674][ T8674] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 261.435191][ T8674] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 261.442331][ T8674] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 261.544958][ T978] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 261.570502][ T978] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 261.758107][ T978] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 261.805324][ T978] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 261.860762][ T978] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 261.952224][ T5142] Bluetooth: hci5: command 0x0405 tx timeout [ 261.959352][ T978] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 262.393222][ T5944] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 262.401301][ T978] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 262.418904][ T8697] loop7: detected capacity change from 0 to 2048 [ 262.444731][ T978] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 262.479373][ T8697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.489704][ T978] usb 6-1: USB disconnect, device number 15 [ 262.558501][ T8697] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 262.616781][ T5944] usb 3-1: unable to get BOS descriptor or descriptor too short [ 262.633249][ T5944] usb 3-1: config 6 has an invalid interface number: 200 but max is 0 [ 262.657816][ T5944] usb 3-1: config 6 has no interface number 0 [ 262.677260][ T5944] usb 3-1: config 6 interface 200 has no altsetting 0 [ 262.694145][ T5944] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 262.704290][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.712787][ T5944] usb 3-1: Product: syz [ 262.721714][ T5910] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 262.754069][ T5944] usb 3-1: Manufacturer: syz [ 262.762294][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 262.778292][ T5944] usb 3-1: SerialNumber: syz [ 262.834167][ T8706] chnl_net:caif_netlink_parms(): no params data found [ 262.903816][ T5910] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 262.920461][ T5910] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 262.932616][ T5910] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.957377][ T5910] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 262.974784][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.996172][ T5910] usb 7-1: Product: syz [ 263.000607][ T5910] usb 7-1: Manufacturer: syz [ 263.035560][ T5910] usb 7-1: SerialNumber: syz [ 263.069606][ T5910] hub 7-1:1.0: bad descriptor, ignoring hub [ 263.095445][ T5910] hub 7-1:1.0: probe with driver hub failed with error -5 [ 263.301548][ T5910] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 263.512130][ T975] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 263.563524][ T8717] loop7: detected capacity change from 0 to 4096 [ 263.590568][ T8717] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 263.622343][ T5944] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 263.632342][ T5910] usb 7-1: USB disconnect, device number 7 [ 263.665585][ T5944] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 263.676351][ T5910] usblp0: removed [ 263.685674][ T5944] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 263.720509][ T5944] usb 3-1: media controller created [ 263.724585][ T975] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 263.743003][ T975] usb 4-1: config 0 interface 0 has no altsetting 0 [ 263.758791][ T975] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 263.771938][ T975] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 263.780374][ T975] usb 4-1: Product: syz [ 263.785669][ T975] usb 4-1: Manufacturer: syz [ 263.791302][ T975] usb 4-1: SerialNumber: syz [ 263.807979][ T975] usb 4-1: config 0 descriptor?? [ 263.819607][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.841172][ T975] usb 4-1: selecting invalid altsetting 0 [ 263.905900][ T5944] dvb-usb: recv bulk message failed: -22 [ 263.937061][ T8717] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 263.987786][ T8717] ntfs3(loop7): ino=5, mi_enum_attr [ 264.111466][ T5944] dvb-usb: bulk message failed: -71 (6/0) [ 264.151215][ T5944] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 264.176672][ T975] usb 4-1: USB disconnect, device number 13 [ 264.187429][ T5944] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 264.243752][ T5944] dvb-usb: schedule remote query interval to 150 msecs. [ 264.256827][ T5944] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 264.277520][ T5944] usb 3-1: USB disconnect, device number 9 [ 264.512194][ T5944] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 264.728486][ T8722] loop4: detected capacity change from 0 to 32768 [ 264.805084][ T8735] netlink: 'syz.7.890': attribute type 1 has an invalid length. [ 264.855240][ T8722] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 4 [ 264.855240][ T8722] [ 264.864377][ T8735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.873931][ T8735] IPv6: NLM_F_CREATE should be set when creating new route [ 264.881208][ T8735] IPv6: NLM_F_CREATE should be set when creating new route [ 264.931370][ T8737] netlink: 'syz.7.890': attribute type 1 has an invalid length. [ 264.973132][ T8722] ERROR: (device loop4): remounting filesystem as read-only [ 265.006325][ T8737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.027535][ T8736] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 4 [ 265.027535][ T8736] [ 265.486932][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.502124][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.645866][ T8744] loop2: detected capacity change from 0 to 40427 [ 265.653683][ T8744] F2FS-fs: heap/no_heap options were deprecated [ 265.673175][ T8744] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(2560) blocks(32256) [ 265.682298][ T8744] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 265.690649][ T8744] F2FS-fs (loop2): Image doesn't support compression [ 265.718696][ T8744] F2FS-fs (loop2): invalid crc value [ 265.816143][ T8744] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 265.849233][ T8744] F2FS-fs (loop2): Start checkpoint disabled! [ 265.856350][ T8744] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 265.871860][ T8744] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 265.888522][ T8744] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 266.642574][ T975] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 266.671042][ T8765] loop2: detected capacity change from 0 to 4096 [ 266.702166][ T8765] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 266.813622][ T8765] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 266.816507][ T975] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 266.831421][ T8765] ntfs3(loop2): ino=5, mi_enum_attr [ 266.839166][ T975] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 266.878712][ T975] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.924549][ T975] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 266.937106][ T975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.960545][ T975] usb 8-1: Product: syz [ 266.982270][ T975] usb 8-1: Manufacturer: syz [ 266.995498][ T8770] loop5: detected capacity change from 0 to 512 [ 266.995835][ T975] usb 8-1: SerialNumber: syz [ 267.095927][ T975] hub 8-1:1.0: bad descriptor, ignoring hub [ 267.126217][ T975] hub 8-1:1.0: probe with driver hub failed with error -5 [ 267.322105][ T975] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 267.363710][ T8757] loop3: detected capacity change from 0 to 32768 [ 267.450212][ T8757] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 267.485506][ T8757] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 267.598290][ T5809] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 267.728255][ T8757] XFS (loop3): Ending clean mount [ 267.783169][ T8757] XFS (loop3): Quotacheck needed: Please wait. [ 267.813199][ T975] usb 8-1: USB disconnect, device number 5 [ 267.823626][ T5809] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 267.834696][ T975] usblp0: removed [ 267.865389][ T5809] usb 7-1: config 0 interface 0 has no altsetting 0 [ 267.867200][ T8757] XFS (loop3): Quotacheck: Done. [ 267.878203][ T5809] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 267.887816][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 267.897174][ T5809] usb 7-1: Product: syz [ 267.901448][ T5809] usb 7-1: Manufacturer: syz [ 267.906371][ T5809] usb 7-1: SerialNumber: syz [ 267.926091][ T5809] usb 7-1: config 0 descriptor?? [ 267.962550][ T5809] usb 7-1: selecting invalid altsetting 0 [ 267.975014][ T8791] netlink: 'syz.5.908': attribute type 1 has an invalid length. [ 268.029315][ T8791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.036635][ T8791] IPv6: NLM_F_CREATE should be set when creating new route [ 268.043912][ T8791] IPv6: NLM_F_CREATE should be set when creating new route [ 268.052157][ T5827] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 268.108917][ T8795] loop2: detected capacity change from 0 to 2048 [ 268.120189][ T8796] netlink: 'syz.5.908': attribute type 1 has an invalid length. [ 268.168546][ T8795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.225120][ T8796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.249843][ T975] usb 7-1: USB disconnect, device number 8 [ 268.416042][ T8795] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.909: bg 0: block 234: padding at end of block bitmap is not set [ 268.488165][ T8795] EXT4-fs (loop2): Remounting filesystem read-only [ 268.789459][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.875232][ T8813] sctp: [Deprecated]: syz.3.924 (pid 8813) Use of int in max_burst socket option. [ 268.875232][ T8813] Use struct sctp_assoc_value instead [ 269.200867][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 269.237010][ T8828] loop7: detected capacity change from 0 to 512 [ 269.243471][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 269.291730][ T8828] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 269.360555][ T8828] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 269.418924][ T8828] EXT4-fs (loop7): 1 truncate cleaned up [ 269.471203][ T8828] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.592750][ T31] audit: type=1800 audit(863271053.559:19): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.921" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 269.771183][ T5910] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 269.819078][ T8062] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.943963][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 269.956212][ T8842] loop3: detected capacity change from 0 to 2048 [ 269.987589][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 270.036018][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 270.080741][ T5910] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 270.084015][ T8842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.100122][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.146425][ T5910] usb 5-1: Product: syz [ 270.179185][ T5910] usb 5-1: Manufacturer: syz [ 270.201014][ T8850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.216678][ T5910] usb 5-1: SerialNumber: syz [ 270.246532][ T5910] usb 5-1: config 0 descriptor?? [ 270.270987][ T5910] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 270.308549][ T5910] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 270.316704][ T8842] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.930: bg 0: block 234: padding at end of block bitmap is not set [ 270.367153][ T8842] EXT4-fs (loop3): Remounting filesystem read-only [ 270.367254][ T5944] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 270.506149][ T8859] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.935'. [ 270.577131][ T5944] usb 8-1: Using ep0 maxpacket: 32 [ 270.597199][ T5944] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.642840][ T5944] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 270.665143][ T5944] usb 8-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 270.677607][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.690522][ T5944] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.727886][ T5944] usb 8-1: config 0 descriptor?? [ 270.876608][ T5910] em28xx 5-1:0.0: unknown em28xx chip ID (152) [ 270.904143][ T8865] netlink: 'syz.3.939': attribute type 4 has an invalid length. [ 270.926591][ T8865] netlink: 'syz.3.939': attribute type 8 has an invalid length. [ 270.969177][ T8865] netlink: 'syz.3.939': attribute type 1 has an invalid length. [ 271.009021][ T8865] netlink: 188 bytes leftover after parsing attributes in process `syz.3.939'. [ 271.061948][ T8865] NCSI netlink: No device for ifindex 0 [ 271.084435][ T5910] em28xx 5-1:0.0: Config register raw data: 0x98 [ 271.176802][ T8861] loop5: detected capacity change from 0 to 32768 [ 271.272931][ T8861] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 271.285163][ T5910] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 271.306896][ T5910] em28xx 5-1:0.0: No AC97 audio processor [ 271.327557][ T5910] usb 5-1: USB disconnect, device number 8 [ 271.335430][ T5910] em28xx 5-1:0.0: Disconnecting em28xx [ 271.347047][ T5910] em28xx 5-1:0.0: Freeing device [ 271.364504][ T5944] usb 8-1: string descriptor 0 read error: -71 [ 271.371289][ T5944] uclogic 0003:256C:006E.0013: failed retrieving string descriptor #200: -71 [ 271.380730][ T5944] uclogic 0003:256C:006E.0013: failed retrieving pen parameters: -71 [ 271.392810][ T5944] uclogic 0003:256C:006E.0013: failed probing pen v2 parameters: -71 [ 271.410298][ T5944] uclogic 0003:256C:006E.0013: failed probing parameters: -71 [ 271.420877][ T5944] uclogic 0003:256C:006E.0013: probe with driver uclogic failed with error -71 [ 271.435429][ T5944] usb 8-1: USB disconnect, device number 6 [ 271.626894][ T5824] ocfs2: Unmounting device (7,5) on (node local) [ 271.957247][ T8883] sctp: [Deprecated]: syz.4.942 (pid 8883) Use of int in max_burst socket option. [ 271.957247][ T8883] Use struct sctp_assoc_value instead [ 272.532121][ T5944] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 272.641719][ T5809] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 272.712419][ T5944] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 272.750526][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.760046][ T791] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 272.785905][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.808880][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 272.817894][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.828229][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.850860][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 272.871411][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.881657][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.893197][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 272.907759][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.918861][ T5809] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.929518][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.942437][ T5809] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.955760][ T791] usb 5-1: Using ep0 maxpacket: 32 [ 272.970852][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 272.979163][ T791] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.986630][ T5809] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.988582][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.009631][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.025938][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 273.038354][ T791] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 273.049973][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.059419][ T791] usb 5-1: Product: syz [ 273.064053][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 273.070961][ T791] usb 5-1: Manufacturer: syz [ 273.083579][ T791] usb 5-1: SerialNumber: syz [ 273.089535][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.121228][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 273.143874][ T791] usb 5-1: config 0 descriptor?? [ 273.163047][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 273.175214][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.222215][ T8910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.248329][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 273.270937][ T5809] usb 4-1: usb_control_msg returned -32 [ 273.276813][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 273.283879][ T5809] usbtmc 4-1:16.0: can't read capabilities [ 273.305582][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.347390][ T5944] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 273.397099][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 273.417330][ T5944] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 273.429486][ T5944] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 273.452180][ T5944] usb 6-1: Product: syz [ 273.456419][ T5944] usb 6-1: Manufacturer: syz [ 273.461077][ T5944] usb 6-1: SerialNumber: syz [ 273.506605][ T5944] usb 6-1: config 0 descriptor?? [ 273.538227][ T5944] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1 [ 273.607722][ T791] gs_usb 5-1:0.0: Configuring for 80 interfaces [ 273.720490][ T8917] loop6: detected capacity change from 0 to 1024 [ 273.796689][ T8917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.964305][ T5809] usb 6-1: USB disconnect, device number 16 [ 273.999218][ T5809] yurex 6-1:0.0: USB YUREX #1 now disconnected [ 274.231930][ T791] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 274.243861][ T8924] netlink: 703 bytes leftover after parsing attributes in process `syz.7.960'. [ 274.402296][ T791] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 274.452259][ T791] usb 5-1: USB disconnect, device number 9 [ 274.963331][ T8937] hub 1-0:1.0: USB hub found [ 274.969272][ T8937] hub 1-0:1.0: 1 port detected [ 275.168626][ T8944] loop4: detected capacity change from 0 to 512 [ 275.258891][ T8948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.452531][ T8944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.492242][ T5938] usb 4-1: USB disconnect, device number 14 [ 275.838919][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.379776][ T8971] loop4: detected capacity change from 0 to 64 [ 276.769420][ T8961] loop7: detected capacity change from 0 to 32768 [ 276.789167][ T8961] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.973 (8961) [ 276.865052][ T8961] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 276.894244][ T8961] BTRFS info (device loop7): using blake2b (blake2b-256-lib) checksum algorithm [ 276.973902][ T8988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.075756][ T8961] BTRFS info (device loop7): enabling ssd optimizations [ 277.081674][ T5910] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 277.109745][ T8961] BTRFS info (device loop7): turning on async discard [ 277.130329][ T8961] BTRFS info (device loop7): enabling free space tree [ 277.155324][ T8961] BTRFS info (device loop7): use zstd compression, level 3 [ 277.257189][ T5910] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 277.274017][ T5910] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.301741][ T5910] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.322196][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0 [ 277.343157][ T5910] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.373889][ T5910] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.406934][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0 [ 277.415687][ T5910] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.427690][ T5910] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.440227][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0 [ 277.477614][ T5910] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.492598][ T5910] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.516149][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0 [ 277.578792][ T5910] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.587323][ T8062] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 277.605350][ T5910] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.640958][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0 [ 277.665805][ T5910] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.683794][ T5910] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.739976][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0 [ 277.777030][ T5910] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.801705][ T5910] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.854745][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0 [ 277.887879][ T5910] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 277.902186][ T5910] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 277.931683][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0 [ 277.961853][ T5910] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 277.991175][ T5910] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 278.010118][ T5910] usb 5-1: Product: syz [ 278.021939][ T5910] usb 5-1: Manufacturer: syz [ 278.051341][ T5910] usb 5-1: SerialNumber: syz [ 278.078360][ T5910] usb 5-1: config 0 descriptor?? [ 278.116707][ T5910] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 278.533391][ T5924] usb 5-1: USB disconnect, device number 10 [ 278.605115][ T5924] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 278.893455][ T9028] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.993'. [ 278.997346][ T9030] loop6: detected capacity change from 0 to 2048 [ 279.117883][ T9030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.268532][ T9030] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.994: bg 0: block 234: padding at end of block bitmap is not set [ 279.356683][ T9030] EXT4-fs (loop6): Remounting filesystem read-only [ 279.771388][ T7248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.019736][ T9025] loop7: detected capacity change from 0 to 32768 [ 280.214864][ T9025] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 280.323063][ T5809] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 280.492178][ T5809] usb 3-1: Using ep0 maxpacket: 8 [ 280.499850][ T5809] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 280.518421][ T5809] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.548851][ T5809] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.582697][ T5809] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 280.598131][ T5809] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.644892][ T8062] ocfs2: Unmounting device (7,7) on (node local) [ 280.646282][ T5809] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 280.691818][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.990533][ T5809] usb 3-1: usb_control_msg returned -32 [ 281.013821][ T5809] usbtmc 3-1:16.0: can't read capabilities [ 281.262619][ T791] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 281.340286][ T9049] loop6: detected capacity change from 0 to 32768 [ 281.374732][ T9049] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1001 (9049) [ 281.432650][ T791] usb 4-1: Using ep0 maxpacket: 16 [ 281.449726][ T791] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 281.464417][ T9072] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 281.478740][ T5910] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 281.484876][ T5924] usb 3-1: USB disconnect, device number 10 [ 281.500645][ T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 281.540935][ T9049] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 281.567050][ T9049] BTRFS info (device loop6): using blake2b (blake2b-256-lib) checksum algorithm [ 281.576893][ T791] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 281.594432][ T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.617577][ T791] usb 4-1: Product: syz [ 281.627326][ T791] usb 4-1: Manufacturer: syz [ 281.646212][ T791] usb 4-1: SerialNumber: syz [ 281.666088][ T791] usb 4-1: config 0 descriptor?? [ 281.683166][ T5910] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 281.695257][ T791] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 281.715171][ T5910] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.727110][ T9049] BTRFS info (device loop6): enabling ssd optimizations [ 281.735369][ T5910] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.751686][ T791] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 281.760890][ T9049] BTRFS info (device loop6): turning on async discard [ 281.783544][ T9049] BTRFS info (device loop6): enabling free space tree [ 281.790526][ T5910] usb 8-1: config 0 interface 0 has no altsetting 0 [ 281.799783][ T9049] BTRFS info (device loop6): use zstd compression, level 3 [ 281.813373][ T5910] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.823037][ T5910] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.860753][ T5910] usb 8-1: config 0 interface 0 has no altsetting 0 [ 281.886927][ T5910] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.916690][ T5910] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.951924][ T5910] usb 8-1: config 0 interface 0 has no altsetting 0 [ 281.963159][ T5910] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.981693][ T5910] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 282.008257][ T5910] usb 8-1: config 0 interface 0 has no altsetting 0 [ 282.019517][ T5910] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 282.029021][ T5910] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 282.041220][ T5910] usb 8-1: config 0 interface 0 has no altsetting 0 [ 282.049998][ T5910] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 282.060334][ T5910] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 282.074680][ T5910] usb 8-1: config 0 interface 0 has no altsetting 0 [ 282.086091][ T5910] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 282.095182][ T5910] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 282.152253][ T5910] usb 8-1: config 0 interface 0 has no altsetting 0 [ 282.160428][ T5910] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 282.175002][ T5910] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 282.196219][ T5910] usb 8-1: config 0 interface 0 has no altsetting 0 [ 282.201260][ T7248] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 282.217913][ T5910] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 282.230263][ T5910] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 282.243241][ T5910] usb 8-1: Product: syz [ 282.253380][ T5910] usb 8-1: Manufacturer: syz [ 282.258102][ T5910] usb 8-1: SerialNumber: syz [ 282.268517][ T5910] usb 8-1: config 0 descriptor?? [ 282.289052][ T5910] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 282.335867][ T791] em28xx 4-1:0.0: unknown em28xx chip ID (152) [ 282.372624][ T31] audit: type=1326 audit(863271066.349:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6139aeb9 code=0x7fc00000 [ 282.545037][ T791] em28xx 4-1:0.0: Config register raw data: 0x98 [ 282.581190][ T5910] usb 8-1: USB disconnect, device number 7 [ 282.637736][ T5910] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 282.747451][ T791] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 282.767459][ T791] em28xx 4-1:0.0: No AC97 audio processor [ 282.810017][ T791] usb 4-1: USB disconnect, device number 15 [ 282.841491][ T791] em28xx 4-1:0.0: Disconnecting em28xx [ 282.866104][ T791] em28xx 4-1:0.0: Freeing device [ 283.032871][ T31] audit: type=1326 audit(863271066.999:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.4.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f6139aeb9 code=0x7fc00000 [ 283.671204][ T9125] loop4: detected capacity change from 0 to 512 [ 283.732228][ T9125] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1029: inode has both inline data and extents flags [ 283.745604][ T975] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 283.782838][ T9125] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1029: couldn't read orphan inode 15 (err -117) [ 283.891528][ T9125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.983897][ T975] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.019473][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 284.062149][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 284.097191][ T975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.177103][ T975] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.211230][ T9138] loop5: detected capacity change from 0 to 64 [ 284.230064][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.265557][ T975] usb 3-1: config 0 descriptor?? [ 284.533365][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.698551][ T9146] loop5: detected capacity change from 0 to 128 [ 284.749934][ T975] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 284.781105][ T975] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 284.843700][ T9151] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1040'. [ 284.905932][ T975] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 285.088764][ T791] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 285.090299][ T975] usb 3-1: USB disconnect, device number 11 [ 285.261732][ T791] usb 8-1: Using ep0 maxpacket: 16 [ 285.277706][ T9154] fido_id[9154]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 285.302204][ T791] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 285.361794][ T791] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 285.412204][ T791] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 285.428028][ T791] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.436159][ T791] usb 8-1: Product: syz [ 285.440427][ T791] usb 8-1: Manufacturer: syz [ 285.445080][ T791] usb 8-1: SerialNumber: syz [ 285.457927][ T791] usb 8-1: config 0 descriptor?? [ 285.475840][ T791] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 285.509869][ T791] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 285.722820][ T9170] loop6: detected capacity change from 0 to 512 [ 285.835563][ T9170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.925929][ T31] audit: type=1800 audit(863271069.899:22): pid=9170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1063" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 286.087599][ T791] em28xx 8-1:0.0: unknown em28xx chip ID (152) [ 286.116589][ T7248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.290589][ T791] em28xx 8-1:0.0: Config register raw data: 0x98 [ 286.490472][ T791] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 286.513097][ T791] em28xx 8-1:0.0: No AC97 audio processor [ 286.606382][ T791] usb 8-1: USB disconnect, device number 8 [ 286.637652][ T791] em28xx 8-1:0.0: Disconnecting em28xx [ 286.696482][ T791] em28xx 8-1:0.0: Freeing device [ 287.002473][ T5809] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 287.161706][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 287.211980][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.231924][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.319256][ T5809] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.361020][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.419264][ T5809] usb 4-1: config 0 descriptor?? [ 287.747076][ T9184] loop6: detected capacity change from 0 to 40427 [ 287.786225][ T9184] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 287.794520][ T9184] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 287.807953][ T9184] F2FS-fs (loop6): invalid crc value [ 287.849159][ T9187] raw-gadget.0 gadget.3: fail, usb_ep_set_halt returned -11 [ 287.906986][ T5809] usbhid 4-1:0.0: can't add hid device: -71 [ 287.936882][ T5809] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 287.972980][ T9184] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 287.984452][ T9212] bond1 (unregistering): Released all slaves [ 287.990568][ T5809] usb 4-1: USB disconnect, device number 16 [ 288.012552][ T9184] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 288.032896][ T9184] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 288.091775][ T975] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 288.162688][ T31] audit: type=1800 audit(863271072.139:23): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1051" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 288.165029][ T9184] syz.6.1051: attempt to access beyond end of device [ 288.165029][ T9184] loop6: rw=8423425, sector=77824, nr_sectors = 8 limit=40427 [ 288.231494][ T9184] syz.6.1051: attempt to access beyond end of device [ 288.231494][ T9184] loop6: rw=524288, sector=77824, nr_sectors = 8 limit=40427 [ 288.262133][ T9184] syz.6.1051: attempt to access beyond end of device [ 288.262133][ T9184] loop6: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 288.287540][ T31] audit: type=1800 audit(863271072.259:24): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1051" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 288.328197][ T975] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.338271][ T975] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.366501][ T9222] loop7: detected capacity change from 0 to 2048 [ 288.372989][ T975] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.373037][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.419397][ T9222] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 288.435707][ T9222] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.494077][ T9222] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 288.663766][ T975] usb 5-1: usb_control_msg returned -32 [ 288.663996][ T9222] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 288.681713][ T975] usbtmc 5-1:16.0: can't read capabilities [ 289.257114][ T10] hid-generic 0000:0D17:0000.0015: unknown main item tag 0x0 [ 289.281485][ T10] hid-generic 0000:0D17:0000.0015: unknown main item tag 0x0 [ 289.295835][ T10] hid-generic 0000:0D17:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 289.446901][ T9245] fido_id[9245]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 289.462960][ T9249] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1070'. [ 289.732236][ T9259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.006955][ T9264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.666989][ T9282] loop3: detected capacity change from 0 to 2048 [ 290.699798][ T9289] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1093'. [ 290.710797][ T9282] EXT4-fs: Ignoring removed bh option [ 290.770817][ T9282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.867491][ T9282] EXT4-fs (loop3): shut down requested (0) [ 290.972093][ T5809] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 291.009428][ T791] usb 5-1: USB disconnect, device number 11 [ 291.073848][ T9297] loop6: detected capacity change from 0 to 512 [ 291.124078][ T9299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.176210][ T9301] loop4: detected capacity change from 0 to 256 [ 291.182814][ T5809] usb 8-1: Using ep0 maxpacket: 32 [ 291.193480][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.231539][ T5809] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 291.260481][ T5809] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 291.317954][ T5809] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 291.351647][ T5809] usb 8-1: config 1 has no interface number 0 [ 291.363119][ T5809] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.397348][ T5809] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 291.428387][ T5809] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 291.513946][ T5809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.537581][ T9307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.585267][ T5809] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 291.800001][ T5809] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 291.966288][ T9311] loop4: detected capacity change from 0 to 4096 [ 292.022291][ T9311] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 292.095004][ T9311] ntfs3(loop4): ino=3, mi_enum_attr [ 292.145174][ T9321] loop6: detected capacity change from 0 to 128 [ 292.212951][ T9311] ntfs3(loop4): ino=19, mi_enum_attr [ 292.252634][ T9311] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 292.317609][ T5924] usb 8-1: USB disconnect, device number 9 [ 292.325510][ T5924] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 293.441986][ T975] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 293.570332][ T9353] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input23 [ 293.601695][ T975] usb 8-1: Using ep0 maxpacket: 32 [ 293.623405][ T975] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 293.638946][ T975] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.696598][ T975] usb 8-1: config 0 descriptor?? [ 293.901819][ T9334] loop4: detected capacity change from 0 to 32768 [ 293.931328][ T975] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 293.979218][ T975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.004775][ T9361] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 294.041875][ T975] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 294.059436][ T975] usb 8-1: media controller created [ 294.148652][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 294.334938][ T9369] loop2: detected capacity change from 0 to 2048 [ 294.389570][ T9369] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 294.458766][ T9369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.506109][ T975] DVB: Unable to find symbol dib7000p_attach() [ 294.533104][ T975] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 294.596699][ T9369] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 294.735037][ T9369] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 294.826948][ T975] rc_core: IR keymap rc-dib0700-rc5 not found [ 294.851755][ T975] Registered IR keymap rc-empty [ 294.882179][ T975] dvb-usb: could not initialize remote control. [ 294.915245][ T975] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 294.974858][ T975] usb 8-1: USB disconnect, device number 10 [ 295.146333][ T975] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 295.708202][ T9398] loop6: detected capacity change from 0 to 256 [ 295.822723][ T9398] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 296.026899][ T9400] loop2: detected capacity change from 0 to 4096 [ 296.062684][ T9400] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 296.117796][ T9400] ntfs3(loop2): ino=3, mi_enum_attr [ 296.238014][ T9400] ntfs3(loop2): ino=19, mi_enum_attr [ 296.262382][ T9400] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 296.308106][ T9410] tipc: Started in network mode [ 296.326318][ T9410] tipc: Node identity ac14142f, cluster identity 4711 [ 296.374946][ T9413] loop3: detected capacity change from 0 to 256 [ 296.382788][ T9410] tipc: New replicast peer: 0.0.0.0 [ 296.398759][ T9410] tipc: Enabled bearer , priority 10 [ 296.523176][ T9412] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 297.279620][ T9432] ªªªªªª: renamed from wg2 (while UP) [ 297.415948][ T5809] tipc: Node number set to 2886997039 [ 297.726779][ T9440] loop2: detected capacity change from 0 to 4096 [ 297.759918][ T9440] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 297.814824][ T9440] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 297.895356][ T9449] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.945681][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 297.947324][ T9448] loop5: detected capacity change from 0 to 2048 [ 297.964109][ T5809] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 298.017814][ T9440] Remounting filesystem read-only [ 298.027405][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.041330][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.054527][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.067542][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.077699][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.087836][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.097994][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.102817][ T9448] EXT4-fs: Ignoring removed bh option [ 298.108613][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.125105][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.135062][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.144958][ T5809] usb 8-1: Using ep0 maxpacket: 8 [ 298.153089][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.163712][ T5809] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 298.172258][ T5809] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.182284][ T5809] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.192508][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.202263][ T5809] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.220726][ T9451] bond1 (unregistering): Released all slaves [ 298.221865][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.236565][ T5809] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.270265][ T5809] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 298.304086][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.316409][ T5809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.350338][ T9440] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 298.379884][ T9448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.582110][ T5809] usb 8-1: usb_control_msg returned -32 [ 298.588276][ T5809] usbtmc 8-1:16.0: can't read capabilities [ 298.606350][ T9448] EXT4-fs (loop5): shut down requested (0) [ 298.646246][ T5826] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 298.728842][ T9460] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1162'. [ 299.039063][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.213114][ T10] usb 8-1: USB disconnect, device number 11 [ 300.117528][ T9495] loop6: detected capacity change from 0 to 1024 [ 300.248108][ T9495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.775087][ T7248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.852255][ T9485] loop2: detected capacity change from 0 to 131072 [ 300.883179][ T9485] F2FS-fs (loop2): Test dummy encryption mode enabled [ 300.893773][ T9485] F2FS-fs (loop2): invalid crc value [ 301.047294][ T9485] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 301.058842][ T9485] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 301.112096][ T9485] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 301.162495][ T31] audit: type=1800 audit(863271085.109:25): pid=9485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1172" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 301.220463][ T9514] loop6: detected capacity change from 0 to 2048 [ 301.312187][ T975] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 301.328633][ T8544] GPT:first_usable_lbas don't match. [ 301.360165][ T8544] GPT:34 != 290 [ 301.386151][ T8544] GPT: Use GNU Parted to correct GPT errors. [ 301.400771][ T8544] loop6: p1 p2 p3 [ 301.476443][ T975] usb 6-1: config 17 has an invalid interface number: 255 but max is 0 [ 301.510940][ T975] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 301.547456][ T975] usb 6-1: config 17 has no interface number 0 [ 301.565767][ T9514] GPT:first_usable_lbas don't match. [ 301.571278][ T975] usb 6-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 301.597251][ T9514] GPT:34 != 290 [ 301.605664][ T9514] GPT: Use GNU Parted to correct GPT errors. [ 301.621024][ T975] usb 6-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 301.642948][ T9514] loop6: p1 p2 p3 [ 301.682347][ T975] usb 6-1: config 17 interface 255 has no altsetting 0 [ 301.689543][ T975] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 301.700624][ T9520] pim6reg1: entered allmulticast mode [ 301.731717][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.765747][ T975] aiptek 6-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 301.883664][ T9517] loop6: detected capacity change from 0 to 256 [ 302.180698][ T31] audit: type=1326 audit(863271086.149:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7719aeb9 code=0x7ffc0000 [ 302.349000][ T31] audit: type=1326 audit(863271086.199:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7719aeb9 code=0x7ffc0000 [ 302.466141][ T31] audit: type=1326 audit(863271086.199:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcc7719aeb9 code=0x7ffc0000 [ 302.552935][ T31] audit: type=1326 audit(863271086.209:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7719aeb9 code=0x7ffc0000 [ 302.664957][ T31] audit: type=1326 audit(863271086.209:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7719aeb9 code=0x7ffc0000 [ 302.790460][ T31] audit: type=1326 audit(863271086.209:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcc7719aeb9 code=0x7ffc0000 [ 302.905816][ T5814] udevd[5814]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 302.936058][ T6565] udevd[6565]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 302.961415][ T31] audit: type=1326 audit(863271086.209:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7719aeb9 code=0x7ffc0000 [ 303.115000][ T31] audit: type=1326 audit(863271086.209:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7719aeb9 code=0x7ffc0000 [ 303.142837][ T6565] udevd[6565]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 303.170001][ T5814] udevd[5814]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 303.251562][ T31] audit: type=1326 audit(863271086.229:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fcc7719aeb9 code=0x7ffc0000 [ 304.228087][ T975] usb 6-1: USB disconnect, device number 17 [ 304.397800][ T9563] netlink: 'syz.7.1201': attribute type 1 has an invalid length. [ 304.582174][ T9563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.862865][ T9574] loop6: detected capacity change from 0 to 1024 [ 304.870348][ T9574] EXT4-fs: inline encryption not supported [ 304.931004][ T9579] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 304.942452][ T791] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 304.976677][ T9574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.125605][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 305.135936][ T9574] EXT4-fs error (device loop6): mb_free_blocks:2034: group 0, inode 16: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 305.155136][ T791] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 305.191673][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.224209][ T791] usb 5-1: config 0 descriptor?? [ 305.237855][ T9574] EXT4-fs (loop6): Remounting filesystem read-only [ 305.242130][ T9571] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 305.407622][ T7248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.430054][ T9592] netlink: 'syz.5.1212': attribute type 1 has an invalid length. [ 305.551878][ T5924] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 305.622804][ T9592] bond1: entered promiscuous mode [ 305.635894][ T9592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.738379][ T5924] usb 8-1: Using ep0 maxpacket: 32 [ 305.747249][ T791] elan 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 305.760294][ T5924] usb 8-1: config 0 has an invalid interface number: 126 but max is 0 [ 305.770999][ T9594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.799319][ T5924] usb 8-1: config 0 has no interface number 0 [ 305.810314][ T9594] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 305.830836][ T5924] usb 8-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 305.873160][ T9594] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 305.882577][ T5924] usb 8-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 305.903432][ T9594] bond1: (slave gre1): Opening slave failed [ 305.909505][ T5924] usb 8-1: config 0 interface 126 has no altsetting 0 [ 305.976666][ T5924] usb 8-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 306.002409][ T5938] usb 5-1: USB disconnect, device number 12 [ 306.020583][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.080749][ T9599] fido_id[9599]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 306.096616][ T5924] usb 8-1: Product: syz [ 306.132993][ T5924] usb 8-1: Manufacturer: syz [ 306.152173][ T5924] usb 8-1: SerialNumber: syz [ 306.174783][ T5924] usb 8-1: config 0 descriptor?? [ 306.197146][ T9590] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 306.240583][ T9590] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 306.409284][ T9603] loop2: detected capacity change from 0 to 2048 [ 306.660056][ T9606] loop5: detected capacity change from 0 to 2048 [ 306.670666][ T9577] loop3: detected capacity change from 0 to 40427 [ 306.708335][ T9608] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.755290][ T5924] ir_usb 8-1:0.126: IR Dongle converter detected [ 306.801131][ T9577] F2FS-fs (loop3): build fault injection rate: 25 [ 306.811259][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 306.811292][ T31] audit: type=1800 audit(863271090.789:40): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1216" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 306.897262][ T9577] F2FS-fs (loop3): build fault injection type: 0x7698c [ 306.918018][ T9606] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 306.961081][ T9606] UDF-fs: Scanning with blocksize 512 failed [ 306.977020][ T9577] F2FS-fs (loop3): invalid crc value [ 307.044897][ T5924] usb 8-1: IR Dongle converter now attached to ttyUSB0 [ 307.139106][ T9577] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_build_segment_manager+0x36c4/0xa1b0 [ 307.200911][ T9606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.306612][ T5924] usb 8-1: USB disconnect, device number 12 [ 307.385192][ T9577] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x1fe/0x1060 [ 307.447037][ T5924] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 307.532834][ T5924] ir_usb 8-1:0.126: device disconnected [ 307.642311][ T9607] loop6: detected capacity change from 0 to 131072 [ 307.657669][ T9607] F2FS-fs (loop6): Test dummy encryption mode enabled [ 307.669212][ T9607] F2FS-fs (loop6): invalid crc value [ 307.738987][ T9608] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 307.760667][ T9608] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 307.808380][ T9607] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 307.830697][ T9607] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 307.868675][ T9608] Remounting filesystem read-only [ 307.888672][ T5826] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 308.031082][ T9577] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 308.269146][ T9625] syz_tun: entered allmulticast mode [ 308.347314][ T9625] dvmrp8: entered allmulticast mode [ 308.393214][ T9624] syz_tun: entered promiscuous mode [ 308.436231][ T9622] syz_tun: left allmulticast mode [ 308.513551][ T5142] Bluetooth: hci1: command 0x0405 tx timeout [ 308.745559][ T9630] loop6: detected capacity change from 0 to 512 [ 308.862308][ T9610] loop4: detected capacity change from 0 to 32768 [ 308.864298][ T9630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.909995][ T9610] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1219 (9610) [ 308.941803][ T9630] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.1223: iget: bad i_size value: 2533274857506816 [ 309.040772][ T9610] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 309.069417][ T9610] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 309.255067][ T7248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.387851][ T9610] BTRFS info (device loop4): enabling ssd optimizations [ 309.426162][ T9610] BTRFS info (device loop4): turning on async discard [ 309.457061][ T9610] BTRFS info (device loop4): enabling free space tree [ 309.549032][ T9662] loop6: detected capacity change from 0 to 256 [ 309.605617][ T9662] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 309.629351][ T9610] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 309.631962][ T5924] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 309.811048][ T9662] exFAT-fs (loop6): valid_size(150994954) is greater than size(10) [ 309.831815][ T5924] usb 8-1: Using ep0 maxpacket: 16 [ 309.857838][ T9662] exFAT-fs (loop6): failed to test cluster bit(11) [ 309.866446][ T5924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.887994][ T5924] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 309.931714][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.013470][ T5924] usb 8-1: config 0 descriptor?? [ 310.077029][ T5828] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 310.499482][ T5924] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 310.671819][ T5142] Bluetooth: hci5: command 0x0405 tx timeout [ 310.846925][ T5924] usb 8-1: USB disconnect, device number 13 [ 311.465972][ T975] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 311.686015][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 311.751807][ T975] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 311.761133][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.862278][ T975] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 311.963854][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1250'. [ 311.990357][ T9710] netlink: 'syz.6.1250': attribute type 30 has an invalid length. [ 312.014440][ T9711] loop5: detected capacity change from 0 to 128 [ 312.021374][ T9708] loop3: detected capacity change from 0 to 2048 [ 312.074368][ T9711] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.127100][ T3026] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.127242][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1250'. [ 312.153372][ T3026] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.166402][ T3026] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.176434][ T3026] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.201918][ T9708] GPT:first_usable_lbas don't match. [ 312.207506][ T9708] GPT:34 != 290 [ 312.211229][ T9708] GPT: Use GNU Parted to correct GPT errors. [ 312.217801][ T9708] loop3: p1 p2 p3 [ 312.241768][ T9710] netlink: 'syz.6.1250': attribute type 30 has an invalid length. [ 312.418358][ T5824] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.537173][ T9708] loop3: detected capacity change from 0 to 256 [ 312.705729][ T9724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.818121][ T5924] IPVS: starting estimator thread 0... [ 312.841239][ T6565] udevd[6565]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 312.879139][ T975] gspca_nw80x: reg_w err -71 [ 312.901542][ T975] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 312.934578][ T5811] udevd[5811]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 312.962539][ T975] usb 5-1: USB disconnect, device number 13 [ 312.982647][ T9732] IPVS: using max 27 ests per chain, 64800 per kthread [ 313.045519][ T5924] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 313.084120][ T5924] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 313.688817][ T9747] netlink: 'syz.3.1264': attribute type 1 has an invalid length. [ 313.911827][ T9747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.257044][ T9762] input: syz1 as /devices/virtual/input/input26 [ 314.280926][ T9762] input: failed to attach handler leds to device input26, error: -6 [ 314.475147][ T9768] loop7: detected capacity change from 0 to 2048 [ 314.557501][ T5814] GPT:first_usable_lbas don't match. [ 314.566599][ T5814] GPT:34 != 290 [ 314.578460][ T5814] GPT: Use GNU Parted to correct GPT errors. [ 314.596401][ T5814] loop7: p1 p2 p3 [ 314.640412][ T9768] GPT:first_usable_lbas don't match. [ 314.671747][ T9768] GPT:34 != 290 [ 314.692387][ T9768] GPT: Use GNU Parted to correct GPT errors. [ 314.698634][ T9768] loop7: p1 p2 p3 [ 314.912617][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 314.923760][ T5814] udevd[5814]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 314.925766][ T5811] udevd[5811]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 314.933860][ T8544] udevd[8544]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 315.013593][ T9768] loop7: detected capacity change from 0 to 256 [ 315.112840][ T5811] udevd[5811]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 315.125581][ T9785] loop2: detected capacity change from 0 to 128 [ 315.128356][ T10] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 315.143104][ T10] usb 6-1: config 0 has no interface number 0 [ 315.149422][ T10] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 7 [ 315.170557][ T8544] udevd[8544]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 315.171432][ T10] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 315.201034][ T10] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 315.211501][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.290694][ T10] usb 6-1: config 0 descriptor?? [ 315.318729][ T10] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input27 [ 315.342079][ T791] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 315.435474][ T9791] loop6: detected capacity change from 0 to 512 [ 315.448207][ T31] audit: type=1326 audit(863271099.419:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.7.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7999aeb9 code=0x7ffc0000 [ 315.554147][ T791] usb 5-1: Using ep0 maxpacket: 32 [ 315.561770][ T31] audit: type=1326 audit(863271099.449:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.7.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7999aeb9 code=0x7ffc0000 [ 315.562665][ T791] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 315.664912][ T31] audit: type=1326 audit(863271099.459:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.7.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7d7999aeb9 code=0x7ffc0000 [ 315.664994][ T9796] netlink: 'syz.2.1286': attribute type 1 has an invalid length. [ 315.734477][ T791] usb 5-1: config 0 has no interface number 0 [ 315.740653][ T791] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 315.947316][ T31] audit: type=1326 audit(863271099.459:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.7.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7999aeb9 code=0x7ffc0000 [ 315.970454][ T5142] Bluetooth: hci5: command 0x0405 tx timeout [ 315.976699][ T31] audit: type=1326 audit(863271099.459:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.7.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7999aeb9 code=0x7ffc0000 [ 316.001848][ T31] audit: type=1326 audit(863271099.459:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.7.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7d7999aeb9 code=0x7ffc0000 [ 316.018290][ T5809] usb 6-1: USB disconnect, device number 18 [ 316.024523][ T31] audit: type=1326 audit(863271099.459:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.7.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7999aeb9 code=0x7ffc0000 [ 316.054387][ T31] audit: type=1326 audit(863271099.459:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.7.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7999aeb9 code=0x7ffc0000 [ 316.065488][ T791] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 316.077159][ T31] audit: type=1326 audit(863271099.469:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.7.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f7d7999aeb9 code=0x7ffc0000 [ 316.109824][ T31] audit: type=1326 audit(863271099.469:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.7.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7999aeb9 code=0x7ffc0000 [ 316.228507][ T791] usb 5-1: config 0 interface 126 has no altsetting 0 [ 316.245747][ T9796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.254461][ T791] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 316.278971][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.311130][ T791] usb 5-1: Product: syz [ 316.318007][ T791] usb 5-1: Manufacturer: syz [ 316.353484][ T791] usb 5-1: SerialNumber: syz [ 316.405654][ T791] usb 5-1: config 0 descriptor?? [ 316.448482][ T9783] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 316.482126][ T9783] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 316.930222][ T791] ir_usb 5-1:0.126: IR Dongle converter detected [ 317.321726][ T5924] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 317.368404][ T791] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 317.414988][ T9810] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807b398000 pfn:0x7b398 [ 317.432964][ T791] usb 5-1: USB disconnect, device number 14 [ 317.460978][ T791] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 317.493796][ T791] ir_usb 5-1:0.126: device disconnected [ 317.522146][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 317.532344][ T9810] memcg:ffff88801d6bcf80 [ 317.536827][ T9810] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 317.544698][ T5924] usb 4-1: config 0 has no interfaces? [ 317.552813][ T5924] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 317.592178][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.615966][ T5924] usb 4-1: Product: syz [ 317.619348][ T9810] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 317.629959][ T5924] usb 4-1: Manufacturer: syz [ 317.644724][ T5924] usb 4-1: SerialNumber: syz [ 317.685257][ T5924] usb 4-1: config 0 descriptor?? [ 317.701975][ T9810] raw: ffff88807b398000 0000000000000000 00000001ffffffff ffff88801d6bcf80 [ 317.733182][ T9810] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 317.837683][ T9810] page_owner tracks the page as allocated [ 317.888235][ T9810] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9810, tgid 9804 (syz.6.1289), ts 317414935779, free_ts 313477912053 [ 317.979752][ T978] usb 4-1: USB disconnect, device number 17 [ 318.030659][ T9810] post_alloc_hook+0x1e1/0x250 [ 318.101791][ T9810] get_page_from_freelist+0xe3d/0x2e10 [ 318.107756][ T9810] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 318.145304][ T9833] loop5: detected capacity change from 0 to 2048 [ 318.183662][ T9810] alloc_pages_mpol+0x1fb/0x550 [ 318.209196][ T9810] folio_alloc_noprof+0x22/0x330 [ 318.239892][ T9810] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 318.311725][ T9810] filemap_alloc_folio_noprof+0x5e/0x80 [ 318.341775][ T9810] page_cache_ra_order+0x54b/0xfe0 [ 318.360409][ T9810] filemap_fault+0x1b56/0x37c0 [ 318.386271][ T9810] __do_fault+0x10d/0x550 [ 318.398920][ T9810] do_fault+0xaf9/0x1990 [ 318.420367][ T9810] __handle_mm_fault+0x1807/0x2b50 [ 318.438550][ T9810] handle_mm_fault+0x36d/0xa20 [ 318.455564][ T9810] __get_user_pages+0xf9c/0x34d0 [ 318.473974][ T9810] populate_vma_page_range+0x267/0x3f0 [ 318.504166][ T9810] __mm_populate+0x107/0x3a0 [ 318.530648][ T9810] page last free pid 23 tgid 23 stack trace: [ 318.567487][ T9810] __free_frozen_pages+0x822/0x1130 [ 318.621929][ T9810] rcu_core+0x7c0/0x15c0 [ 318.627103][ T9810] handle_softirqs+0x1ea/0x910 [ 318.643890][ T9810] run_ksoftirqd+0x38/0x60 [ 318.652687][ T9845] syz_tun: entered allmulticast mode [ 318.658606][ T9810] smpboot_thread_fn+0x3d3/0xaa0 [ 318.674559][ T9810] kthread+0x3b3/0x730 [ 318.678664][ T9810] ret_from_fork+0x754/0xaf0 [ 318.688045][ T9810] ret_from_fork_asm+0x1a/0x30 [ 318.699461][ T9810] ------------[ cut here ]------------ [ 318.705960][ T9810] kernel BUG at mm/filemap.c:858! [ 318.709761][ T9845] dvmrp8: entered allmulticast mode [ 318.742177][ T9810] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 318.750278][ T9810] CPU: 1 UID: 0 PID: 9810 Comm: syz.6.1289 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.761291][ T9810] Tainted: [L]=SOFTLOCKUP [ 318.765784][ T9810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 318.776034][ T9810] RIP: 0010:__filemap_add_folio+0xf7f/0x1220 [ 318.779927][ T5811] GPT:first_usable_lbas don't match. [ 318.782069][ T9810] Code: c0 c7 ff 48 c7 c6 a0 10 9d 8b 4c 89 ef e8 29 0e 12 00 90 0f 0b e8 a1 c0 c7 ff 48 c7 c6 00 11 9d 8b 4c 89 ef e8 12 0e 12 00 90 <0f> 0b e8 8a c0 c7 ff 90 0f 0b 90 e9 9b fe ff ff e8 7c c0 c7 ff 90 [ 318.782112][ T9810] RSP: 0018:ffffc9000dd87458 EFLAGS: 00010246 [ 318.787491][ T5811] GPT:34 != 290 [ 318.806996][ T9810] [ 318.807021][ T9810] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc9000cf6c000 [ 318.807053][ T9810] RDX: 0000000000080000 RSI: ffffffff82512848 RDI: ffff888030f7c184 [ 318.807081][ T9810] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 318.807104][ T9810] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 318.807125][ T9810] R13: ffffea0001ece600 R14: 0000000000000000 R15: 1ffff92001bb0eb5 [ 318.807164][ T9810] FS: 00007f8e39fd56c0(0000) GS:ffff8881246dc000(0000) knlGS:0000000000000000 [ 318.807200][ T9810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.807226][ T9810] CR2: 00007fcc77f45690 CR3: 0000000051043000 CR4: 0000000000350ef0 [ 318.830229][ T9844] syz_tun: left allmulticast mode [ 318.835135][ T9810] Call Trace: [ 318.835149][ T9810] [ 318.835167][ T9810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.835222][ T9810] ? __pfx___filemap_add_folio+0x10/0x10 [ 318.835261][ T9810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.835310][ T9810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.874796][ T5811] GPT: Use GNU Parted to correct GPT errors. [ 318.875019][ T9810] filemap_add_folio+0x1d8/0x690 [ 318.900741][ T5811] loop5: p1 p2 p3 [ 318.905671][ T9810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.905726][ T9810] ? __pfx_filemap_add_folio+0x10/0x10 [ 318.911867][ T5944] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 318.917062][ T9810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.917188][ T9810] page_cache_ra_order+0x614/0xfe0 [ 318.961390][ T9810] filemap_fault+0x1b56/0x37c0 [ 318.966375][ T9810] ? __lock_acquire+0x4a5/0x2630 [ 318.971371][ T9810] ? __pfx_filemap_fault+0x10/0x10 [ 318.976514][ T9810] ? __pfx_filemap_map_pages+0x10/0x10 [ 318.982115][ T9810] __do_fault+0x10d/0x550 [ 318.986642][ T9810] do_fault+0xaf9/0x1990 [ 318.990915][ T9810] __handle_mm_fault+0x1807/0x2b50 [ 318.996089][ T9810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.001758][ T9810] ? mt_find+0x45e/0x8e0 [ 319.006034][ T9810] ? __pfx___handle_mm_fault+0x10/0x10 [ 319.011719][ T9810] ? __pfx_mt_find+0x10/0x10 [ 319.016398][ T9810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.022103][ T9810] handle_mm_fault+0x36d/0xa20 [ 319.026914][ T9810] __get_user_pages+0xf9c/0x34d0 [ 319.031999][ T9810] ? __pfx___get_user_pages+0x10/0x10 [ 319.037400][ T9810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.043087][ T9810] populate_vma_page_range+0x267/0x3f0 [ 319.048605][ T9810] ? __pfx_populate_vma_page_range+0x10/0x10 [ 319.054625][ T9810] ? __pfx_find_vma_intersection+0x10/0x10 [ 319.060557][ T9810] ? do_mmap+0x93f/0x12f0 [ 319.064923][ T9810] __mm_populate+0x107/0x3a0 [ 319.069558][ T9810] ? __pfx___mm_populate+0x10/0x10 [ 319.074878][ T9810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.080541][ T9810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.086211][ T9810] ? up_write+0x290/0x4f0 [ 319.090570][ T9810] vm_mmap_pgoff+0x37f/0x470 [ 319.095232][ T9810] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 319.100455][ T9810] ? __fget_files+0x215/0x3d0 [ 319.105152][ T9810] ? __fget_files+0x21f/0x3d0 [ 319.109847][ T9810] ksys_mmap_pgoff+0x328/0x5b0 [ 319.114638][ T9810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.120392][ T9810] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.126056][ T9810] __x64_sys_mmap+0x125/0x190 [ 319.130801][ T9810] do_syscall_64+0xc9/0xf80 [ 319.135354][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.141280][ T9810] RIP: 0033:0x7f8e3bd9aeb9 [ 319.145719][ T9810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.165355][ T9810] RSP: 002b:00007f8e39fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 319.173899][ T9810] RAX: ffffffffffffffda RBX: 00007f8e3c016090 RCX: 00007f8e3bd9aeb9 [ 319.181906][ T9810] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 319.189998][ T9810] RBP: 00007f8e3be08c1f R08: 0000000000000004 R09: 000000002c93a000 [ 319.198187][ T9810] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 319.206704][ T9810] R13: 00007f8e3c016128 R14: 00007f8e3c016090 R15: 00007fff7cd8ba18 [ 319.214713][ T9810] [ 319.217744][ T9810] Modules linked in: [ 319.222598][ T9810] ---[ end trace 0000000000000000 ]--- [ 319.281271][ T9833] GPT:first_usable_lbas don't match. [ 319.286767][ T9833] GPT:34 != 290 [ 319.290379][ T9810] RIP: 0010:__filemap_add_folio+0xf7f/0x1220 [ 319.290424][ T9833] GPT: Use GNU Parted to correct GPT errors. [ 319.290566][ T9833] loop5: p1 p2 p3 [ 319.320950][ T9810] Code: c0 c7 ff 48 c7 c6 a0 10 9d 8b 4c 89 ef e8 29 0e 12 00 90 0f 0b e8 a1 c0 c7 ff 48 c7 c6 00 11 9d 8b 4c 89 ef e8 12 0e 12 00 90 <0f> 0b e8 8a c0 c7 ff 90 0f 0b 90 e9 9b fe ff ff e8 7c c0 c7 ff 90 [ 319.384815][ T9810] RSP: 0018:ffffc9000dd87458 EFLAGS: 00010246 [ 319.393876][ T9810] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc9000cf6c000 [ 319.414624][ T5811] udevd[5811]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 319.422096][ T8544] udevd[8544]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 319.426082][ T5814] udevd[5814]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 319.447590][ T9810] RDX: 0000000000080000 RSI: ffffffff82512848 RDI: ffff888030f7c184 [ 319.470593][ T9833] loop5: detected capacity change from 0 to 256 [ 319.476780][ T9810] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 319.486698][ T9810] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 319.491994][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 319.495223][ T9810] R13: ffffea0001ece600 R14: 0000000000000000 R15: 1ffff92001bb0eb5 [ 319.502203][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.508292][ T9810] FS: 00007f8e39fd56c0(0000) GS:ffff8881246dc000(0000) knlGS:0000000000000000 [ 319.530059][ T5944] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 319.535805][ T5811] udevd[5811]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 319.542174][ T8544] udevd[8544]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 319.550074][ T9810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.589761][ T9810] CR2: 00007f828d14a000 CR3: 0000000051043000 CR4: 0000000000350ef0 [ 319.590715][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.598419][ T9810] Kernel panic - not syncing: Fatal exception [ 319.606590][ T9810] Kernel Offset: disabled