last executing test programs: 57.667241838s ago: executing program 0 (id=1980): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x6c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)=@report={0x29c, 0x20, 0x200, 0x70bd27, 0x25dfdbfc, {0x2b, {@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e21, 0x0, 0x8, 0x0, 0x20, 0x4, r4, r5}}, [@algo_auth={0x11b, 0x1, {{'blake2s-128-x86\x00'}, 0x698, "ae8fc6f87966ea7facad9ebe0854e6a1e3b4eb631aab0d3a704ab805ef2e39e391097476410453a61e19a2ec52275cbcb6c37a4bc917b80283921aecf46d7752a534acf095daf59c2c19d427c45f539cc3d7c66129eb36ce39faa9b8d896206282d82541cfdfc3c78917144e20d5eaa38eff53e634cc0dc198b4116b22dafee4e26a20c0d2140a4e328d9175c7a2c055597f13112488fe60feae92a81880ba9e44b7f61874ce0e15ba83dc4d628aafe45984236e6a33ce576209a0a4107b442092c762bad9a56f168594134a676f5c516a7e05"}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x19}}}, @algo_auth={0x117, 0x1, {{'blake2s-256-x86\x00'}, 0x678, "9f15307f7d989ecd3ee9165384c9f1f47dbc3507a6ea0d6a290b43c17b805da6084b47ba8cb4e326914a87f3e1893ec0ebef7e0f277a0516afeaf259eb7bdd1cc98298e974ce6fa8a1f9677304d8b47366429f6e9986ebafd540e519754aa2a384ac9e50fc1786ea6569895a8e07259ff035dfd2613ecd3c9f3936004883aed1ffb40a0827a7d7a2eb732a994af05fd2ca3d051540d323270a250fe98997f7fd5c5959206dc83f037cb7abe2a8f8af6c2cc45312644795683e150b3ec688f67498bf11dcba628b792cb352c7867fb2"}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0x1194, 0x5, 0xa, 0x401, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0xc2}, @generic="bd4f90d5780f2d74dd21e9b3c0f1aadccc6dbafa087f299943fa8f30024bc220a6262b5214db2e30ec48a17083513dda37cb7d2e393aa1a5538470e7547f0f0e40de2b8de1a7a28637ad6bee713e7bfe03ab0dcebe9e3967bad4d62c025d8ac43f06efedfe17d17d6376ed4454e8550d854bea520251ceaed49d5aa7db6dd7001b71fc98d64ecd8590cfde4422d3094943f7698063b1f3f5a383949e58", @generic="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", @nested={0x79, 0x113, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x120}, @generic="fcb376aaec9482998bd62d69ec52d6fbd15c5c6af3139aec1777a56ee4f24ddfcfd9992e8512e0e25cbc715843a2e373f2dd6fcd42cad248147b24786608d73939aef8edff3adb021a1a643e9c1c4eaa264e56982a98fe39cea5aee5602af9498d", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r6}]}, @generic="9dce6e9f7409b02246c1ee83aecac7264eb671ad9fac787db13ee066545976ea2fe8", @nested={0x29, 0x1e, 0x0, 0x1, [@generic="794cc00c7ce2025d648aa0529fcff78e917da29ab521a7367f51df567ad100500116d27ae2"]}, @generic="e099e37f33", @typed={0x9, 0x152, 0x0, 0x0, @str='(.{,\x00'}]}, 0x1194}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$netlink(0x10, 0x3, 0x0) 57.468809414s ago: executing program 0 (id=1982): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}]}}]}, 0x6c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)=@report={0x29c, 0x20, 0x200, 0x70bd27, 0x25dfdbfc, {0x2b, {@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e21, 0x0, 0x8, 0x0, 0x20, 0x4, r4, r5}}, [@algo_auth={0x11b, 0x1, {{'blake2s-128-x86\x00'}, 0x698, "ae8fc6f87966ea7facad9ebe0854e6a1e3b4eb631aab0d3a704ab805ef2e39e391097476410453a61e19a2ec52275cbcb6c37a4bc917b80283921aecf46d7752a534acf095daf59c2c19d427c45f539cc3d7c66129eb36ce39faa9b8d896206282d82541cfdfc3c78917144e20d5eaa38eff53e634cc0dc198b4116b22dafee4e26a20c0d2140a4e328d9175c7a2c055597f13112488fe60feae92a81880ba9e44b7f61874ce0e15ba83dc4d628aafe45984236e6a33ce576209a0a4107b442092c762bad9a56f168594134a676f5c516a7e05"}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x19}}}, @algo_auth={0x117, 0x1, {{'blake2s-256-x86\x00'}, 0x678, "9f15307f7d989ecd3ee9165384c9f1f47dbc3507a6ea0d6a290b43c17b805da6084b47ba8cb4e326914a87f3e1893ec0ebef7e0f277a0516afeaf259eb7bdd1cc98298e974ce6fa8a1f9677304d8b47366429f6e9986ebafd540e519754aa2a384ac9e50fc1786ea6569895a8e07259ff035dfd2613ecd3c9f3936004883aed1ffb40a0827a7d7a2eb732a994af05fd2ca3d051540d323270a250fe98997f7fd5c5959206dc83f037cb7abe2a8f8af6c2cc45312644795683e150b3ec688f67498bf11dcba628b792cb352c7867fb2"}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0x11f0, 0x5, 0xa, 0x401, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0xc2}, @generic="bd4f90d5780f2d74dd21e9b3c0f1aadccc6dbafa087f299943fa8f30024bc220a6262b5214db2e30ec48a17083513dda37cb7d2e393aa1a5538470e7547f0f0e40de2b8de1a7a28637ad6bee713e7bfe03ab0dcebe9e3967bad4d62c025d8ac43f06efedfe17d17d6376ed4454e8550d854bea520251ceaed49d5aa7db6dd7001b71fc98d64ecd8590cfde4422d3094943f7698063b1f3f5a383949e58", @generic="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", @nested={0xd6, 0x113, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x120}, @generic="fcb376aaec9482998bd62d69ec52d6fbd15c5c6af3139aec1777a56ee4f24ddfcfd9992e8512e0e25cbc715843a2e373f2dd6fcd42cad248147b24786608d73939aef8edff3adb021a1a643e9c1c4eaa264e56982a98fe39cea5aee5602af9498d23b8e81a4459fa14511c5a8b46ac14658c59047d6db19bf91dae4c11d01f688fd587bf0c8678401efccb998970053ac1eeabd05837e2b247a1517c7ef4c429d8fed049dce04d1bd54597071ba0c4e7f8ab4355dc811d75cd9769822b55", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r6}]}, @generic="9dce6e9f7409b02246c1ee83aecac7264eb671ad9fac787db13ee066545976ea2fe8", @nested={0x29, 0x1e, 0x0, 0x1, [@generic="794cc00c7ce2025d648aa0529fcff78e917da29ab521a7367f51df567ad100500116d27ae2"]}, @generic="e099e37f33", @typed={0x9, 0x152, 0x0, 0x0, @str='(.{,\x00'}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:locale_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$netlink(0x10, 0x3, 0x0) 57.354516877s ago: executing program 0 (id=1983): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) signalfd(r0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002000000000b82100"}) 57.275461039s ago: executing program 0 (id=1984): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 57.031430105s ago: executing program 0 (id=1985): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0002"], 0x24}}, 0x0) 56.419216301s ago: executing program 0 (id=1991): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x4000001) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYBLOB="bf8170c130887ef9943a3d26"]) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000140)=0x5) 56.320773383s ago: executing program 32 (id=1991): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x4000001) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYBLOB="bf8170c130887ef9943a3d26"]) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000140)=0x5) 5.417778523s ago: executing program 2 (id=2378): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0}) 4.617565954s ago: executing program 3 (id=2387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000240)={{0xeeee8000, 0x404f000, 0x10, 0x33, 0x4, 0x7f, 0x4, 0x5, 0x7f, 0x0, 0x2, 0x7}, {0x80d4004, 0xeeee8000, 0xd, 0x2, 0x1, 0xd, 0x9, 0xd, 0x6, 0x3, 0x8, 0xb}, {0xe000, 0xc66380e3e1aa9acf, 0xc, 0xb, 0x50, 0x4, 0x3, 0x8, 0x1, 0x8, 0x2, 0xf}, {0x1000, 0x50000, 0x8, 0x1, 0x2, 0x5, 0x1, 0xf0, 0x94, 0x3, 0xfa, 0x6b}, {0x100000, 0x6000, 0xa, 0x1, 0x7, 0x4, 0xff, 0x7, 0x1, 0x1, 0xf, 0xfe}, {0x0, 0xdddd1000, 0xc, 0x2, 0x6, 0x4, 0x7, 0x81, 0x1e, 0xaf, 0x1, 0x3}, {0x2, 0xeeef0000, 0x9, 0x3, 0x0, 0x0, 0x3, 0x1, 0x86, 0xfe, 0x7f, 0x1}, {0x0, 0x60000, 0xf, 0x6, 0x52, 0x9, 0x3, 0x3, 0x14, 0xfe, 0x6, 0x9}, {0x25000, 0x5}, {0x1000}, 0x4, 0x0, 0x4, 0x40248, 0x9, 0x400, 0xeeef0002, 0x1, [0x4, 0xfffffffffffffffb, 0x8000, 0xfffffffffffffff9]}) 4.527548666s ago: executing program 3 (id=2388): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) 4.389093309s ago: executing program 5 (id=2390): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x7c, r2, 0x1, 0x70bd27, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x4e, 0x1, '\x03\xdf\xe4\xdd\x9en\xfa\x9er\xe4\x06^\x1d\xd0\xabL?\x17V\x84\x92\xfa\x01\x92%\xf4\xf5W$\xdb\xd9\xd7&H\x80\xef|\xefM\xa0\x8at\xe9G\xa3\x1c\xe6u\x0f\x9a\x05\xe4K\xd9]zn\xda\b;\xb4\x0e\xa3\xd6>\f\x00\x00\xdd\xd4\xa0\xc6\xf5\xe4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.34520028s ago: executing program 5 (id=2391): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000640)=ANY=[@ANYRESDEC], 0x8) 4.227398843s ago: executing program 5 (id=2392): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='F', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000840), &(0x7f0000001f00)={'syz', 0x0}, &(0x7f00000003c0)="01", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 4.200510014s ago: executing program 5 (id=2393): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000700)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.678550287s ago: executing program 4 (id=2397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000300)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xefffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x65, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffeff, 0xffffffffffffffff, 0x6c09, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa9dc, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x93f8, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x7, 0xa8b, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfdffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1000003, 0x8]}) 3.615425649s ago: executing program 3 (id=2398): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x300, 0x0, 0xff, 0x9, 0x3fe, 0x16}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x300, 0x2, 0x1, 0x6, 0x6, 0xbf}, 0x20) 3.58065185s ago: executing program 4 (id=2399): syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x2, 0x2, 0x2, 0xff, 0x7, [], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0x4, 0xc0, 0x1}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x4, 0x3e, 0xfd}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 3.54472139s ago: executing program 3 (id=2400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000000580)) 3.543139141s ago: executing program 5 (id=2401): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000140)={0x10, &(0x7f00000002c0)={0x20, 0x13}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.455425293s ago: executing program 3 (id=2402): syz_usb_connect(0x2, 0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c00010100807f0904000006ff0000000705810240000007050102bc"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) 3.383752964s ago: executing program 2 (id=2403): r0 = syz_io_uring_setup(0x3e3, &(0x7f00000020c0)={0x0, 0xe138, 0x2, 0x1200001, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000002080)=0x0, &(0x7f0000002140)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7649, 0xecb2, 0x1, 0x0, 0x0) 2.528998536s ago: executing program 2 (id=2404): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x0, 0x16, 0x3, '@B3'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.831913574s ago: executing program 3 (id=2405): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000380)={0x1, 0x10, 0x0, 0x0}) 1.773635195s ago: executing program 4 (id=2406): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xfffffe04, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xa, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0xec, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0xb8, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x3c, 0x2, [@m_ctinfo={0x38, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0xa, 0x6, "6a0aa35aad4f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x0, 0x1, {0x2, 0x1}}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20041090}, 0x20000000) 1.706411747s ago: executing program 4 (id=2407): unshare(0x400) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x754, 0x0) 1.659919938s ago: executing program 4 (id=2409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0xb7, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x3, 0x4, 0xa1, 0x66, 0x0, 0x7, 0x21, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x6, 0x3}]}}, {{0x4e24, 0x4e20, 0x4, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2, "0ab1d3", 0x7, "cad067"}, "66008872322354bae485381d8e6f47881f9084ffc82ada837a419d5d95b64df83db8ca64cbfd7a7450bceb0b724ed6915a0f79db23b0b428b592d3df5e7feb4bdbd5e4cafc061d9ee2eef894a7edfc734d277c124c92116ea36859ba4dedbf71eaa283d08d0a9db4a39af13c6f3c936ea1e3b91907"}}}}}, 0x0) 1.5793637s ago: executing program 1 (id=2411): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/195, 0xc3) 1.57916975s ago: executing program 4 (id=2412): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) 1.562974911s ago: executing program 1 (id=2413): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x4000001) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYBLOB="bf8170c130887ef9943a3d26"]) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r0}) 954.933136ms ago: executing program 5 (id=2414): syz_open_procfs(0x0, &(0x7f0000000400)='net/sockstat\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588"], 0x0) 527.717207ms ago: executing program 1 (id=2415): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x3) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x121002, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000280)={0xe000003, 0x40000000000001b6, &(0x7f0000000080), 0x0, 0x4000007}) 447.375129ms ago: executing program 1 (id=2416): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 434.78588ms ago: executing program 1 (id=2417): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 348.277892ms ago: executing program 2 (id=2418): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 267.416624ms ago: executing program 2 (id=2419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x33, 0x0, @local, @loopback, [@fragment={0x84, 0x0, 0x2, 0x0, 0x0, 0x1f, 0x64}], "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"}}}}}}, 0xfce) 143.376057ms ago: executing program 2 (id=2420): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x1, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0x8, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x3, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x7fffffc, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 0s ago: executing program 1 (id=2421): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x183, &(0x7f0000000500)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000002c0)=""/44, 0x2c) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): 2.1901'. [ 448.203017][T10316] loop1: detected capacity change from 0 to 128 [ 448.251866][T10320] loop2: detected capacity change from 0 to 256 [ 448.284963][T10316] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 448.329056][T10316] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 448.333814][T10324] netlink: 'syz.0.1904': attribute type 4 has an invalid length. [ 448.338250][T10320] exfat: Deprecated parameter 'namecase' [ 448.375821][T10320] exfat: Deprecated parameter 'namecase' [ 448.422837][T10326] netlink: 'syz.4.1905': attribute type 4 has an invalid length. [ 448.428197][T10320] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 448.612625][T10308] loop3: detected capacity change from 0 to 40427 [ 448.651606][T10308] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 448.695231][T10308] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 448.809079][T10308] F2FS-fs (loop3): Found nat_bits in checkpoint [ 448.872178][T10338] fuse: Unknown parameter '0xffffffffffffffff' [ 448.995531][T10341] loop2: detected capacity change from 0 to 1024 [ 449.005033][T10308] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 449.022742][T10308] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 449.061626][T10347] netlink: 'syz.4.1911': attribute type 4 has an invalid length. [ 449.107069][T10349] fuse: Unknown parameter '0xffffffffffffffff' [ 449.373083][T10353] fuse: Unknown parameter '0xffffffffffffffff' [ 449.385118][T10341] hfsplus: can't free extent [ 449.432158][ T26] audit: type=1800 audit(1785769335.877:71): pid=10341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1910" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 449.452627][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.465675][T10341] hfsplus: can't free extent [ 449.499589][T10341] hfsplus: can't free extent [ 449.694179][T10360] loop1: detected capacity change from 0 to 4096 [ 449.741745][T10363] loop3: detected capacity change from 0 to 1024 [ 449.816645][T10363] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 449.881286][T10364] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 450.075807][T10374] netlink: 'syz.1.1920': attribute type 4 has an invalid length. [ 450.078891][T10372] loop0: detected capacity change from 0 to 1024 [ 450.162212][T10377] netlink: 'syz.3.1921': attribute type 4 has an invalid length. [ 450.483678][T10389] netlink: 'syz.2.1926': attribute type 4 has an invalid length. [ 450.726995][T10398] fuse: Unknown parameter '0xffffffffffffffff' [ 450.736144][ T2856] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 451.020358][ T2856] usb 1-1: Using ep0 maxpacket: 8 [ 451.089514][ T7705] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 451.175487][T10392] loop4: detected capacity change from 0 to 32768 [ 451.182556][ T2856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 451.215267][ T2856] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 451.257855][ T2856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.292494][ T2856] usb 1-1: config 0 descriptor?? [ 451.314482][T10392] XFS (loop4): Mounting V5 Filesystem [ 451.379368][ T7705] usb 4-1: Using ep0 maxpacket: 32 [ 451.398933][T10392] XFS (loop4): Starting recovery (logdev: internal) [ 451.418886][T10392] XFS (loop4): Ending recovery (logdev: internal) [ 451.459385][ T7698] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 451.491082][ T4191] XFS (loop4): Unmounting Filesystem [ 451.569387][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.576083][ T7705] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 451.604519][ T2856] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 451.706392][T10418] loop1: detected capacity change from 0 to 256 [ 451.714575][T10418] exfat: Deprecated parameter 'utf8' [ 451.722432][T10418] exfat: Deprecated parameter 'namecase' [ 451.775596][T10418] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 451.819849][ T7705] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 451.840311][T10420] loop4: detected capacity change from 0 to 64 [ 451.853595][ T7705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.873240][T10275] usb 1-1: USB disconnect, device number 29 [ 451.881979][ T26] audit: type=1800 audit(1785769338.337:72): pid=10420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1935" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 451.902434][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.914283][ T7705] usb 4-1: Product: syz [ 451.918527][ T7705] usb 4-1: Manufacturer: syz [ 451.944503][ T7705] usb 4-1: SerialNumber: syz [ 451.957858][ T7705] usb 4-1: config 0 descriptor?? [ 451.963272][ T7698] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 451.973173][ T7698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.991858][ T7698] usb 3-1: config 0 descriptor?? [ 452.019364][T10400] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 452.072826][T10428] netlink: 'syz.4.1940': attribute type 4 has an invalid length. [ 452.185787][T10432] netlink: 'syz.1.1941': attribute type 4 has an invalid length. [ 452.284188][ T7705] usb 4-1: USB disconnect, device number 31 [ 452.321172][T10435] netlink: 'syz.4.1942': attribute type 4 has an invalid length. [ 452.435865][T10440] fuse: Unknown parameter '0xffffffffffffffff' [ 452.479502][ T7698] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 452.582185][ T7698] hackrf 3-1:0.0: Could not detect board [ 452.587926][ T7698] hackrf: probe of 3-1:0.0 failed with error -71 [ 452.668893][ T7698] usb 3-1: USB disconnect, device number 26 [ 452.685131][T10443] netlink: 'syz.1.1955': attribute type 4 has an invalid length. [ 452.956558][T10458] loop3: detected capacity change from 0 to 256 [ 452.973453][T10458] exfat: Deprecated parameter 'utf8' [ 452.985542][T10458] exfat: Deprecated parameter 'namecase' [ 453.009557][T10458] exfat: Deprecated parameter 'namecase' [ 453.060693][T10458] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 453.095085][T10464] netlink: 'syz.1.1953': attribute type 4 has an invalid length. [ 453.124435][T10466] netlink: 'syz.2.1952': attribute type 4 has an invalid length. [ 453.371482][T10475] loop4: detected capacity change from 0 to 1024 [ 453.447753][T10475] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 453.499476][T10475] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 453.612307][T10492] fuse: Unknown parameter '0xffffffffffffffff' [ 453.617950][T10475] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,quota,journal_dev=0x0000000000000007,nouid32,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 453.657749][T10475] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.879416][T10275] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 453.962692][T10507] fuse: Unknown parameter '0xffffffffffffffff' [ 453.995960][T10502] loop1: detected capacity change from 0 to 8192 [ 454.040481][T10502] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 454.058820][T10502] REISERFS (device loop1): using ordered data mode [ 454.067531][T10502] reiserfs: using flush barriers [ 454.093345][T10502] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 454.124121][T10502] REISERFS (device loop1): checking transaction log (loop1) [ 454.149263][T10275] usb 4-1: Using ep0 maxpacket: 16 [ 454.172281][T10515] validate_nla: 2 callbacks suppressed [ 454.172394][T10515] netlink: 'syz.0.1970': attribute type 4 has an invalid length. [ 454.205980][T10502] REISERFS (device loop1): Using r5 hash to sort names [ 454.243798][T10502] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 454.268092][T10502] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 454.269375][T10275] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 454.322064][T10275] usb 4-1: config 0 has no interface number 0 [ 454.348179][T10502] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 454.391012][T10502] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 454.427892][T10502] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 454.499489][T10275] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 454.517317][T10275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.537413][T10275] usb 4-1: Product: syz [ 454.546562][T10275] usb 4-1: Manufacturer: syz [ 454.547723][T10523] netlink: 'syz.0.1973': attribute type 4 has an invalid length. [ 454.556118][T10275] usb 4-1: SerialNumber: syz [ 454.584933][T10275] usb 4-1: config 0 descriptor?? [ 454.630167][T10275] hub 4-1:0.132: bad descriptor, ignoring hub [ 454.638373][T10275] hub: probe of 4-1:0.132 failed with error -5 [ 454.657608][T10275] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input26 [ 454.942066][T10530] fuse: Unknown parameter '0xffffffffffffffff' [ 455.004275][T10537] netlink: 'syz.0.1980': attribute type 4 has an invalid length. [ 455.110635][ T7706] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 455.245034][T10546] netlink: 'syz.0.1982': attribute type 4 has an invalid length. [ 455.352231][ T7698] usb 4-1: USB disconnect, device number 32 [ 455.396260][T10551] loop0: detected capacity change from 0 to 512 [ 455.419338][ T7705] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 455.456542][T10551] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 455.472869][T10551] ext4 filesystem being mounted at /369/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.527575][T10551] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 455.540834][ T7706] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 455.551684][T10551] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 455.553382][T10555] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 455.566150][ T7706] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.591853][T10551] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1984: Failed to acquire dquot type 0 [ 455.596809][ T7706] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 455.616020][T10551] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 455.617052][ T7706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.623511][T10551] overlayfs: failed to verify upper root origin [ 455.662060][ T4188] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 455.675836][ T4188] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 455.686089][ T7705] usb 5-1: Using ep0 maxpacket: 32 [ 455.694265][ T4188] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz-executor: Failed to acquire dquot type 0 [ 455.849357][ T7705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 455.915638][ T7706] usb 3-1: GET_CAPABILITIES returned 0 [ 455.931574][ T7706] usbtmc 3-1:16.0: can't read capabilities [ 455.954420][T10559] fuse: Unknown parameter '0xffffffffffffffff' [ 456.023842][T10561] netlink: 'syz.1.1988': attribute type 4 has an invalid length. [ 456.059349][ T7705] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 456.072193][ T7705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.083307][ T7705] usb 5-1: Product: syz [ 456.087945][ T7705] usb 5-1: Manufacturer: syz [ 456.096262][ T7705] usb 5-1: SerialNumber: syz [ 456.110149][ T7705] usb 5-1: config 0 descriptor?? [ 456.153632][ T7705] hub 5-1:0.0: bad descriptor, ignoring hub [ 456.173015][ T7705] hub: probe of 5-1:0.0 failed with error -5 [ 456.193473][ T7706] usb 3-1: USB disconnect, device number 27 [ 456.329557][ T4369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.388879][T10571] netlink: 'syz.1.1993': attribute type 4 has an invalid length. [ 456.425420][ T4369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.470795][ T2856] usb 5-1: USB disconnect, device number 24 [ 456.517738][ T4369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.597105][ T4369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.631282][T10573] lo speed is unknown, defaulting to 1000 [ 456.926430][T10584] loop3: detected capacity change from 0 to 256 [ 457.002480][ T4369] tipc: Left network mode [ 457.086719][T10593] netlink: 'syz.2.1999': attribute type 4 has an invalid length. [ 457.440643][T10601] loop3: detected capacity change from 0 to 1024 [ 457.471015][T10601] hfsplus: bad catalog entry type [ 458.268918][T10613] netlink: 'syz.4.2003': attribute type 4 has an invalid length. [ 458.278078][T10618] fuse: Unknown parameter '0xffffffffffffffff' [ 458.366246][T10573] chnl_net:caif_netlink_parms(): no params data found [ 458.569321][ T7706] Bluetooth: hci1: command 0x0409 tx timeout [ 458.582545][T10573] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.604600][T10573] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.618864][T10573] device bridge_slave_0 entered promiscuous mode [ 458.645447][T10635] tipc: Started in network mode [ 458.651792][T10635] tipc: Node identity , cluster identity 4711 [ 458.699233][T10573] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.711945][T10573] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.754283][T10623] loop2: detected capacity change from 0 to 32768 [ 458.761113][T10573] device bridge_slave_1 entered promiscuous mode [ 458.835731][T10623] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 458.936400][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 458.945256][T10646] fuse: Unknown parameter '0xffffffffffffffff' [ 459.941008][T10573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.050962][T10573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.207249][T10674] netlink: 'syz.3.2019': attribute type 4 has an invalid length. [ 460.262593][T10573] team0: Port device team_slave_0 added [ 460.314374][T10573] team0: Port device team_slave_1 added [ 460.374826][T10681] loop2: detected capacity change from 0 to 512 [ 460.461610][T10573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.465632][T10681] EXT4-fs (loop2): Ignoring removed oldalloc option [ 460.468621][T10573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.501336][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.525604][T10573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.536456][T10671] loop1: detected capacity change from 0 to 8192 [ 460.539835][T10681] EXT4-fs (loop2): Ignoring removed oldalloc option [ 460.554881][T10573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.568500][T10573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.594950][T10573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.618141][T10671] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 460.631366][T10681] EXT4-fs (loop2): Ignoring removed oldalloc option [ 460.638053][T10681] EXT4-fs (loop2): filesystem is read-only [ 460.649346][T10671] REISERFS (device loop1): using ordered data mode [ 460.656306][T10671] reiserfs: using flush barriers [ 460.673222][T10681] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 460.695227][T10671] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 460.713514][T10573] device hsr_slave_0 entered promiscuous mode [ 460.723461][T10671] REISERFS (device loop1): checking transaction log (loop1) [ 460.737827][ T7698] Bluetooth: hci1: command 0x041b tx timeout [ 460.759929][T10573] device hsr_slave_1 entered promiscuous mode [ 460.809553][T10671] REISERFS (device loop1): Using tea hash to sort names [ 460.822416][T10671] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 460.841167][T10573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.841778][T10681] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=9816c018, mo2=0002] [ 460.848798][T10573] Cannot create hsr debugfs directory [ 460.934594][T10695] fuse: Unknown parameter '0xffffffffffffffff' [ 460.949524][T10671] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 460.960131][T10681] EXT4-fs (loop2): filesystem is read-only [ 461.002073][T10681] EXT4-fs (loop2): orphan cleanup on readonly fs [ 461.150787][T10681] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2023: bg 0: block 64: padding at end of block bitmap is not set [ 461.480009][T10681] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 461.506131][ T4369] device hsr_slave_0 left promiscuous mode [ 461.653192][ T4369] device hsr_slave_1 left promiscuous mode [ 461.675428][T10681] EXT4-fs (loop2): 1 orphan inode deleted [ 461.752640][T10681] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,data_err=abort,debug,stripe=0x0000000000000002,stripe=0x0000000000000009,noblock_validity,grpquota,journal_ioprio=0x0000000000000002,dioread_lock,oldalloc,oldalloc,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 461.758718][T10671] REISERFS error (device loop1): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 461.797999][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.810539][T10671] REISERFS (device loop1): Remounting filesystem read-only [ 461.839609][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.881186][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.888638][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.893642][T10701] fuse: Unknown parameter '0xffffffffffffffff' [ 461.902806][ T4369] device bridge_slave_1 left promiscuous mode [ 461.916122][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.961111][ T4369] device bridge_slave_0 left promiscuous mode [ 461.977269][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.028935][ T4369] device veth1_macvtap left promiscuous mode [ 462.040554][ T4369] device veth0_macvtap left promiscuous mode [ 462.047489][ T4369] device veth1_vlan left promiscuous mode [ 462.063915][ T4369] device veth0_vlan left promiscuous mode [ 462.419476][T10710] loop1: detected capacity change from 0 to 32768 [ 462.467202][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 462.473571][T10710] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2028 (10710) [ 462.503052][T10710] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 462.513712][T10710] BTRFS info (device loop1): enabling auto defrag [ 462.520459][T10710] BTRFS info (device loop1): force clearing of disk cache [ 462.522627][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 462.527980][T10710] BTRFS info (device loop1): ignoring data csums [ 462.542130][T10710] BTRFS info (device loop1): turning on async discard [ 462.549169][T10710] BTRFS info (device loop1): setting nodatacow, compression disabled [ 462.558200][T10710] BTRFS info (device loop1): turning off async discard [ 462.565319][T10710] BTRFS info (device loop1): using free space tree [ 462.572209][T10710] BTRFS info (device loop1): has skinny extents [ 462.593046][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.609000][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.842020][ T4369] bond0 (unregistering): Released all slaves [ 462.879257][ T7698] Bluetooth: hci1: command 0x040f tx timeout [ 463.541527][T10744] loop1: detected capacity change from 0 to 512 [ 463.659539][ T4176] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 464.091219][ T4176] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 464.150502][ T4176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.318468][ T4176] usb 5-1: config 0 descriptor?? [ 464.349288][ T13] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 464.366824][T10573] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 464.394877][T10573] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 464.430877][ T4176] cp210x 5-1:0.0: cp210x converter detected [ 464.480238][T10573] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 464.530421][T10573] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 464.589682][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 464.602054][T10759] fuse: Unknown parameter '0xffffffffffffffff' [ 464.695941][T10573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.728329][T10573] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.741291][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 464.754408][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 464.763039][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 464.790864][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 464.810339][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.822705][ T7] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 464.830068][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.837352][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.849536][ T13] usb 4-1: config 5 has an invalid interface number: 248 but max is 0 [ 464.853348][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 464.869614][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 464.877303][ T13] usb 4-1: config 5 has no interface number 0 [ 464.888245][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.891954][ T13] usb 4-1: config 5 interface 248 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 464.896934][ T4176] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 464.925709][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.932924][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.947174][ T13] usb 4-1: config 5 interface 248 has no altsetting 0 [ 464.959249][ T2856] Bluetooth: hci1: command 0x0419 tx timeout [ 464.965732][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 464.983050][ T4176] usb 5-1: cp210x converter now attached to ttyUSB0 [ 464.993609][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 465.034191][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 465.064409][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 465.074772][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 465.090281][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 465.099809][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 465.127455][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 465.141943][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 465.157456][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 465.168721][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 465.187702][T10573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 465.195479][ T7] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 465.212192][ T7] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 465.223791][ T13] usb 4-1: string descriptor 0 read error: -22 [ 465.235791][ T13] usb 4-1: New USB device found, idVendor=2304, idProduct=022e, bcdDevice=32.6b [ 465.247070][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 465.257467][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.266085][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 465.278438][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 465.295442][ T4340] usb 5-1: USB disconnect, device number 25 [ 465.308727][ T4340] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 465.359821][ T4340] cp210x 5-1:0.0: device disconnected [ 465.411437][ T7] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 465.431408][ T7] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 465.449285][ T7] usb 3-1: Product: syz [ 465.453617][ T7] usb 3-1: Manufacturer: syz [ 465.485649][T10777] loop1: detected capacity change from 0 to 4096 [ 465.505039][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 465.518653][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 465.545659][ T7] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 465.555043][ T13] dvb-usb: found a 'Pinnacle Expresscard 320cx' in warm state. [ 465.570106][T10781] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 465.582154][ T7] cdc_wdm 3-1:1.0: Unknown control protocol [ 465.592401][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 465.597644][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 465.645939][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 465.650892][ T13] dvbdev: DVB: registering new adapter (Pinnacle Expresscard 320cx) [ 465.666493][ T26] audit: type=1800 audit(1785769352.117:73): pid=10777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2041" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 465.690105][ T13] usb 4-1: media controller created [ 465.695570][T10573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.736712][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 465.784202][ T4326] usb 3-1: USB disconnect, device number 28 [ 465.838474][T10788] loop4: detected capacity change from 0 to 256 [ 465.937080][T10794] loop1: detected capacity change from 0 to 512 [ 465.954292][ T13] DVB: Unable to find symbol dib7000p_attach() [ 465.963390][ T13] dvb-usb: no frontend was attached by 'Pinnacle Expresscard 320cx' [ 466.039733][T10788] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 466.080212][T10794] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 466.099297][ T13] rc_core: IR keymap rc-dib0700-rc5 not found [ 466.109249][ T13] Registered IR keymap rc-empty [ 466.114441][ T13] dvb-usb: could not initialize remote control. [ 466.131336][ T13] dvb-usb: Pinnacle Expresscard 320cx successfully initialized and connected. [ 466.179785][ T13] dib0700: There's no endpoint for remote controller [ 466.259794][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 466.298734][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 466.375671][T10809] loop2: detected capacity change from 0 to 256 [ 466.400005][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 466.421871][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 466.448474][T10809] exfat: Deprecated parameter 'utf8' [ 466.455177][T10809] exfat: Deprecated parameter 'namecase' [ 466.456454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 466.472067][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 466.483953][T10809] exfat: Deprecated parameter 'namecase' [ 466.489974][T10809] exfat: Deprecated parameter 'utf8' [ 466.540864][T10573] device veth0_vlan entered promiscuous mode [ 466.565134][T10809] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 466.604798][T10813] loop1: detected capacity change from 0 to 1024 [ 466.612158][ T13] usb 4-1: USB disconnect, device number 33 [ 466.615172][T10573] device veth1_vlan entered promiscuous mode [ 466.679248][T10813] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 466.683314][ T13] dvb-usb: Pinnacle Expresscard 320cx successfully deinitialized and disconnected. [ 466.721133][T10813] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 466.736434][T10813] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 466.752511][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 466.771895][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 466.797617][T10813] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 466.837586][T10573] device veth0_macvtap entered promiscuous mode [ 466.871383][T10813] System zones: 0-1, 3-36 [ 466.878126][T10573] device veth1_macvtap entered promiscuous mode [ 466.896359][T10813] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noquota,,errors=continue. Quota mode: writeback. [ 466.936851][T10573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.956849][T10573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.010100][T10573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.037593][T10573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.059561][T10573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.074967][T10573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.106437][T10573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.120060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 467.131302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 467.140128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 467.175248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 467.207326][T10573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.241878][T10573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.257057][T10573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.273799][T10573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.297574][T10573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.308729][T10826] fuse: Unknown parameter '0xffffffffffffffff' [ 467.318037][T10573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.338805][T10573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.377920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 467.398207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 467.426464][T10573] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.438371][T10573] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.473331][T10573] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.506042][T10573] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.787188][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.804115][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.819405][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 467.858490][ T4540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.882410][ T4540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.905779][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 468.067523][T10850] netlink: 'syz.5.1992': attribute type 4 has an invalid length. [ 468.421883][T10840] loop1: detected capacity change from 0 to 32768 [ 468.440639][ T7698] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 468.518675][T10847] loop2: detected capacity change from 0 to 32768 [ 468.574417][T10840] XFS (loop1): Mounting V5 Filesystem [ 468.711947][T10847] JBD2: Ignoring recovery information on journal [ 468.725086][T10840] XFS (loop1): Ending clean mount [ 468.795185][T10847] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 468.810210][ T7705] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 468.838076][ T4187] XFS (loop1): Unmounting Filesystem [ 468.849362][ T7698] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 468.857565][ T7698] usb 4-1: config 0 has no interface number 0 [ 468.874030][ T26] audit: type=1800 audit(1785769355.327:74): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2055" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 468.975645][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 469.051648][ T7698] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 469.074662][ T7698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.089174][ T7698] usb 4-1: Product: syz [ 469.093385][ T7698] usb 4-1: Manufacturer: syz [ 469.097988][ T7698] usb 4-1: SerialNumber: syz [ 469.119232][ T7705] usb 5-1: Using ep0 maxpacket: 8 [ 469.133273][ T7698] usb 4-1: config 0 descriptor?? [ 469.171582][T10870] loop5: detected capacity change from 0 to 32768 [ 469.239812][T10886] loop2: detected capacity change from 0 to 64 [ 469.280757][ T7705] usb 5-1: config 0 interface 0 has no altsetting 0 [ 469.310863][ T7705] usb 5-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 469.349225][ T7705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.412378][ T7705] usb 5-1: config 0 descriptor?? [ 469.570542][T10894] loop1: detected capacity change from 0 to 256 [ 469.781041][T10903] loop1: detected capacity change from 0 to 128 [ 469.859464][ T7698] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 469.859805][T10903] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 469.893461][ T7705] wacom 0003:056A:0057.001C: unknown main item tag 0x6 [ 469.901037][ T7698] asix: probe of 4-1:0.251 failed with error -524 [ 469.920106][ T7705] wacom 0003:056A:0057.001C: ignoring exceeding usage max [ 469.969305][ T7705] wacom 0003:056A:0057.001C: hidraw0: USB HID v0.81 Device [HID 056a:0057] on usb-dummy_hcd.4-1/input0 [ 470.062595][ T7705] usb 4-1: USB disconnect, device number 34 [ 470.123934][T10275] usb 5-1: USB disconnect, device number 26 [ 470.197144][T10909] fido_id[10909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 470.421802][T10916] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 470.434778][T10916] NILFS (loop1): mounting unchecked fs [ 470.444349][T10890] F2FS-fs (loop2): invalid crc value [ 470.465512][ T4206] udevd[4206]: incorrect nilfs2 checksum on /dev/loop1 [ 470.493307][T10890] F2FS-fs (loop2): Found nat_bits in checkpoint [ 470.504248][T10916] NILFS (loop1): recovery complete [ 470.536366][T10927] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 470.685147][T10890] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 470.696556][T10931] netlink: 'syz.3.2066': attribute type 4 has an invalid length. [ 470.898175][ T4196] attempt to access beyond end of device [ 470.898175][ T4196] loop2: rw=2049, want=45104, limit=40427 [ 471.226248][T10945] set_capacity_and_notify: 3 callbacks suppressed [ 471.226293][T10945] loop5: detected capacity change from 0 to 128 [ 471.351517][T10945] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 471.670937][T10936] loop4: detected capacity change from 0 to 32768 [ 471.672862][T10953] netlink: 'syz.2.2068': attribute type 4 has an invalid length. [ 471.791875][T10956] loop1: detected capacity change from 0 to 4096 [ 471.838790][T10936] XFS (loop4): Mounting V5 Filesystem [ 471.894112][T10967] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 472.018705][T10936] XFS (loop4): Ending clean mount [ 472.032185][ T26] audit: type=1800 audit(1785769358.487:75): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2069" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 472.056437][T10936] XFS (loop4): Quotacheck needed: Please wait. [ 472.263743][T10936] XFS (loop4): Quotacheck: Done. [ 472.409866][T10974] loop5: detected capacity change from 0 to 7 [ 472.465091][T10974] Dev loop5: unable to read RDB block 7 [ 472.473407][T10974] loop5: unable to read partition table [ 472.480357][T10974] loop5: partition table beyond EOD, truncated [ 472.492864][ T4191] XFS (loop4): Unmounting Filesystem [ 472.500644][T10974] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 472.955997][T10978] loop3: detected capacity change from 0 to 32768 [ 473.039315][ T7705] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 473.075000][T10992] loop5: detected capacity change from 0 to 1024 [ 473.107090][T10978] XFS (loop3): Mounting V5 Filesystem [ 473.254179][T10978] XFS (loop3): Ending clean mount [ 473.257068][T11002] netlink: 'syz.2.2081': attribute type 4 has an invalid length. [ 473.274850][T10978] XFS (loop3): Quotacheck needed: Please wait. [ 473.349186][ T7705] usb 2-1: Using ep0 maxpacket: 8 [ 473.369163][ T13] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 473.469446][ T7705] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 473.475710][T10978] XFS (loop3): Quotacheck: Done. [ 473.521395][ T4368] hfsplus: bad catalog folder entry [ 473.526719][ T4368] hfsplus: bad catalog file entry [ 473.654225][T11008] loop5: detected capacity change from 0 to 512 [ 473.668609][T11008] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 473.679446][ T7705] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 473.703086][ T7705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.722128][ T7705] usb 2-1: Product: syz [ 473.726500][ T7705] usb 2-1: Manufacturer: syz [ 473.729363][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.733858][ T7705] usb 2-1: SerialNumber: syz [ 473.743656][T11008] EXT4-fs (loop5): 1 truncate cleaned up [ 473.748115][ T7705] usb 2-1: config 0 descriptor?? [ 473.759222][T10275] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 473.761977][T11008] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 473.778449][ T13] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 473.792143][ T13] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 473.801330][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.813672][ T7705] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 473.849890][ T7705] usb 2-1: setting power ON [ 473.879033][ T7705] dvb-usb: bulk message failed: -22 (2/0) [ 473.901155][ T7705] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 473.929391][ T7705] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 473.938127][ T7705] usb 2-1: media controller created [ 473.948405][ T4193] XFS (loop3): Unmounting Filesystem [ 473.957394][ T7705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.995312][ T7705] usb 2-1: selecting invalid altsetting 6 [ 474.005454][ T7705] usb 2-1: digital interface selection failed (-22) [ 474.009318][T10275] usb 3-1: Using ep0 maxpacket: 16 [ 474.012558][ T7705] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 474.043462][T10982] dvb-usb: bulk message failed: -22 (3/0) [ 474.079240][ T7705] usb 2-1: setting power OFF [ 474.089437][ T13] ttusb-dec: probe of 5-1:1.0 failed with error -2 [ 474.092372][T10982] dvb-usb: bulk message failed: -22 (3/0) [ 474.127147][ T7705] dvb-usb: bulk message failed: -22 (2/0) [ 474.140132][T10982] dvb-usb: bulk message failed: -22 (3/0) [ 474.146002][ T7705] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 474.159042][ T7705] (NULL device *): no alternate interface [ 474.174203][ T7705] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 474.192022][T10275] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 474.198646][ T7705] usb 2-1: USB disconnect, device number 26 [ 474.204395][T10275] usb 3-1: config 0 has no interface number 0 [ 474.211724][T11017] netlink: 'syz.5.2087': attribute type 4 has an invalid length. [ 474.212383][T10275] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.240355][T10275] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.251626][T10275] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 474.261127][T10275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.289891][T10275] usb 3-1: config 0 descriptor?? [ 474.319052][ T4176] usb 5-1: USB disconnect, device number 27 [ 474.654940][T11029] loop3: detected capacity change from 0 to 4096 [ 474.675540][T11029] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 474.760566][ T7698] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 474.815053][T11038] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 474.904928][T11044] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 475.002330][T10275] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.001D/input/input31 [ 475.037584][T11050] program syz.1.2094 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.113685][T10275] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.001D/input/input32 [ 475.154532][ T7698] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 475.175185][ T7698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.183739][T10275] uclogic 0003:28BD:0071.001D: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1 [ 475.220930][ T7698] usb 6-1: config 0 descriptor?? [ 475.225802][T10275] usb 3-1: USB disconnect, device number 29 [ 475.287422][ T7698] cp210x 6-1:0.0: cp210x converter detected [ 475.333813][T11065] netlink: 'syz.4.2099': attribute type 4 has an invalid length. [ 475.364826][T11062] fido_id[11062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 475.509420][ T7705] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 475.547582][T11075] loop4: detected capacity change from 0 to 512 [ 475.549446][ T4176] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 475.584888][T11075] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 475.620849][T11075] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2100: bg 0: block 5: invalid block bitmap [ 475.638155][T11075] EXT4-fs (loop4): Remounting filesystem read-only [ 475.644995][T11075] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 475.654148][T11075] EXT4-fs (loop4): Remounting filesystem read-only [ 475.661356][T11075] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2100: invalid indirect mapped block 3 (level 2) [ 475.675234][T11075] EXT4-fs (loop4): Remounting filesystem read-only [ 475.682240][T11075] EXT4-fs (loop4): 2 truncates cleaned up [ 475.688285][T11075] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,grpquota,. Quota mode: writeback. [ 475.720318][ T7698] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 475.767808][ T7705] usb 2-1: Using ep0 maxpacket: 16 [ 475.779406][ T7698] usb 6-1: cp210x converter now attached to ttyUSB0 [ 475.870227][T11081] program syz.4.2101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.911905][T11083] netlink: 'syz.4.2103': attribute type 4 has an invalid length. [ 475.929672][ T7705] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 475.938804][ T7705] usb 2-1: config 0 has no interface number 0 [ 475.982429][ T4270] usb 6-1: USB disconnect, device number 2 [ 475.989490][ T4176] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 476.001106][ T4176] usb 4-1: config 0 has no interface number 0 [ 476.007247][ T4176] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.022838][ T4270] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 476.038603][ T4270] cp210x 6-1:0.0: device disconnected [ 476.062770][ T4176] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.082187][ T4176] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.095913][ T4176] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 476.105952][ T4176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.114088][ T2856] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 476.122086][ T7705] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 476.138713][ T4176] usb 4-1: config 0 descriptor?? [ 476.147893][ T7705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.156301][ T7705] usb 2-1: Product: syz [ 476.160835][ T7705] usb 2-1: Manufacturer: syz [ 476.165450][ T7705] usb 2-1: SerialNumber: syz [ 476.185612][ T7705] usb 2-1: config 0 descriptor?? [ 476.239954][ T7705] hub 2-1:0.132: bad descriptor, ignoring hub [ 476.246083][ T7705] hub: probe of 2-1:0.132 failed with error -5 [ 476.255349][ T7705] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input33 [ 476.333152][T11087] loop4: detected capacity change from 0 to 32768 [ 476.387224][T11087] XFS (loop4): Mounting V5 Filesystem [ 476.457086][T11087] XFS (loop4): Ending clean mount [ 476.539471][ T2856] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 476.556521][ T2856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.571270][ T2856] usb 3-1: config 0 descriptor?? [ 476.577260][ T4191] XFS (loop4): Unmounting Filesystem [ 476.644355][ T4176] hid (null): global environment stack underflow [ 476.743182][T11108] loop5: detected capacity change from 0 to 256 [ 476.851880][ T4176] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.001E/input/input34 [ 476.903380][ T4176] uclogic 0003:28BD:0042.001E: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 476.934682][ T4270] usb 2-1: USB disconnect, device number 27 [ 477.071898][ T4176] usb 4-1: USB disconnect, device number 35 [ 477.092081][ T2856] samsung 0003:0419:0001.001F: hidraw1: USB HID vf0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 477.139197][T10275] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 477.157119][T11113] loop4: detected capacity change from 0 to 1024 [ 477.203568][T11113] hfsplus: failed to load catalog file [ 477.283172][ T7] usb 3-1: USB disconnect, device number 30 [ 477.356144][T11121] fuse: Unknown parameter '0xffffffffffffffff' [ 477.466947][T11127] loop1: detected capacity change from 0 to 164 [ 477.499523][T10275] usb 6-1: config 0 has an invalid interface number: 102 but max is 8 [ 477.518585][T10275] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 477.556319][T10275] usb 6-1: config 0 has no interface number 0 [ 477.562932][T10275] usb 6-1: too many endpoints for config 0 interface 102 altsetting 108: 111, using maximum allowed: 30 [ 477.576732][T10275] usb 6-1: config 0 interface 102 altsetting 108 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 477.593048][T10275] usb 6-1: config 0 interface 102 has no altsetting 0 [ 477.600246][T10275] usb 6-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.bb [ 477.615754][T10275] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.634920][T10275] usb 6-1: config 0 descriptor?? [ 477.886340][T11143] ubi31: attaching mtd0 [ 477.901662][T11143] ubi31 error: ubi_attach_mtd_dev: bad VID header (49152) or data offsets (49216) [ 477.919392][T10275] usb 6-1: string descriptor 0 read error: -71 [ 477.933745][T11145] netlink: 'syz.2.2122': attribute type 12 has an invalid length. [ 477.942558][T10275] usb-storage 6-1:0.102: USB Mass Storage device detected [ 477.953591][T11145] netlink: 'syz.2.2122': attribute type 29 has an invalid length. [ 477.992180][T11145] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2122'. [ 478.002371][T10275] usb-storage 6-1:0.102: Quirks match for vid 04cb pid 0100: 9 [ 478.028643][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'. [ 478.077870][T10275] usb 6-1: USB disconnect, device number 3 [ 478.275806][T11164] fuse: Unknown parameter '0xffffffffffffffff' [ 478.364481][T11173] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2127'. [ 478.463577][T11180] loop2: detected capacity change from 0 to 512 [ 478.524942][T11180] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 478.554656][T11180] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 478.565782][T11180] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 478.583153][T11180] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.2129: bad orphan inode 15 [ 478.613152][T11180] EXT4-fs (loop2): Remounting filesystem read-only [ 478.629141][T10275] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 478.679467][T11180] ext4_test_bit(bit=14, block=4) = 1 [ 478.685040][T11180] is_bad_inode(inode)=0 [ 478.693971][T11180] NEXT_ORPHAN(inode)=0 [ 478.699862][T11180] max_ino=32 [ 478.706619][T11180] i_nlink=1 [ 478.723124][T11180] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,journal_ioprio=0x0000000000000004,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 478.817401][T11180] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 4: comm syz.2.2129: lblock 0 mapped to illegal pblock 4 (length 1) [ 478.879676][T11180] EXT4-fs (loop2): Remounting filesystem read-only [ 478.889368][T10275] usb 5-1: Using ep0 maxpacket: 16 [ 478.900697][T11196] loop5: detected capacity change from 0 to 4096 [ 478.916715][T11197] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 4: comm syz.2.2129: lblock 0 mapped to illegal pblock 4 (length 1) [ 478.946199][T11197] EXT4-fs (loop2): Remounting filesystem read-only [ 478.971132][T11196] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 479.010077][T10275] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 479.018332][T10275] usb 5-1: config 0 has no interface number 0 [ 479.019451][T11190] loop3: detected capacity change from 0 to 32768 [ 479.052259][T11190] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.2133 (11190) [ 479.123120][T11190] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 479.163204][T11190] BTRFS info (device loop3): use zlib compression, level 3 [ 479.204701][T11190] BTRFS info (device loop3): using free space tree [ 479.219398][T10275] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 479.239470][T10275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.251627][T11190] BTRFS info (device loop3): has skinny extents [ 479.266167][T10275] usb 5-1: Product: syz [ 479.282631][T10275] usb 5-1: Manufacturer: syz [ 479.287315][T10275] usb 5-1: SerialNumber: syz [ 479.300829][T10275] usb 5-1: config 0 descriptor?? [ 479.344498][T10275] hub 5-1:0.132: bad descriptor, ignoring hub [ 479.372847][T10275] hub: probe of 5-1:0.132 failed with error -5 [ 479.403346][T10275] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input35 [ 479.415332][T11190] BTRFS info (device loop3): enabling ssd optimizations [ 479.475811][T11232] netlink: 'syz.2.2145': attribute type 4 has an invalid length. [ 479.509977][T11234] netlink: 'syz.1.2146': attribute type 4 has an invalid length. [ 479.639290][ T7] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 479.945788][T11240] loop1: detected capacity change from 0 to 2048 [ 480.041633][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 480.048427][ T7] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 480.057726][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.060302][T11240] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.068148][ T7] usb 6-1: config 0 descriptor?? [ 480.156827][T11252] loop3: detected capacity change from 0 to 512 [ 480.185383][T11252] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 480.199397][ T2856] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 480.209843][T11252] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.2147: bad orphan inode 131083 [ 480.225731][T11252] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 480.465114][T11260] fuse: Unknown parameter '0xffffffffffffffff' [ 480.560892][ T7] cypress 0003:04B4:0001.0020: unknown main item tag 0x1 [ 480.573115][ T7] cypress 0003:04B4:0001.0020: unknown main item tag 0x5 [ 480.587885][ T7] cypress 0003:04B4:0001.0020: unknown main item tag 0x6 [ 480.599478][ T2856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 480.612769][ T7] cypress 0003:04B4:0001.0020: unknown main item tag 0x0 [ 480.616353][ T2856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.632352][ T7] cypress 0003:04B4:0001.0020: unknown main item tag 0x0 [ 480.643201][ T2856] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 480.648538][T11255] loop1: detected capacity change from 0 to 32768 [ 480.653003][ T2856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.664711][ T7] cypress 0003:04B4:0001.0020: unknown main item tag 0x0 [ 480.694081][ T2856] usb 3-1: config 0 descriptor?? [ 480.710351][ T7] cypress 0003:04B4:0001.0020: unknown main item tag 0x0 [ 480.728652][T11255] JBD2: Ignoring recovery information on journal [ 480.735796][ T7] cypress 0003:04B4:0001.0020: unknown main item tag 0x0 [ 480.773504][ T7] cypress 0003:04B4:0001.0020: unknown main item tag 0x0 [ 480.796517][ T7] cypress 0003:04B4:0001.0020: unknown main item tag 0x0 [ 480.822228][T11255] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 480.839555][ T7] cypress 0003:04B4:0001.0020: hidraw0: USB HID vff.fe Device [HID 04b4:0001] on usb-dummy_hcd.5-1/input0 [ 480.875576][ T7] usb 6-1: USB disconnect, device number 4 [ 480.898233][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 480.943015][T11275] fido_id[11275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 481.201907][ T2856] elan 0003:04F3:0755.0021: unknown main item tag 0x0 [ 481.210378][ T2856] elan 0003:04F3:0755.0021: unknown main item tag 0x0 [ 481.217626][ T2856] elan 0003:04F3:0755.0021: failed to start in urb: -90 [ 481.227667][ T2856] elan 0003:04F3:0755.0021: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 481.474417][ T7] usb 3-1: USB disconnect, device number 31 [ 481.517895][T11292] netlink: 'syz.3.2159': attribute type 4 has an invalid length. [ 481.669184][ T4270] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 481.735200][T11290] loop5: detected capacity change from 0 to 32768 [ 481.824910][T11290] XFS (loop5): Mounting V5 Filesystem [ 481.911273][T11290] XFS (loop5): Ending clean mount [ 482.069455][ T4270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.131689][ T4270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.178126][ T4270] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.221641][ T4270] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.237129][T11334] netlink: 'syz.4.2170': attribute type 4 has an invalid length. [ 482.243488][ T4270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.270508][ T4270] usb 2-1: config 0 descriptor?? [ 482.277934][T10573] XFS (loop5): Unmounting Filesystem [ 482.484782][T11343] loop4: detected capacity change from 0 to 512 [ 482.491349][ T7] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 482.549294][ T4176] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 482.595642][T11343] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 482.614924][T11343] EXT4-fs warning (device loop4): ext4_begin_enable_verity:136: inode #13: comm syz.4.2171: verity is only allowed on extent-based files [ 482.739176][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 482.751545][ T4270] plantronics 0003:047F:FFFF.0022: unbalanced delimiter at end of report description [ 482.751848][ T4270] plantronics 0003:047F:FFFF.0022: parse failed [ 482.751875][ T4270] plantronics: probe of 0003:047F:FFFF.0022 failed with error -22 [ 482.752673][T11352] Console: switching to colour VGA+ 80x25 [ 482.792946][T11355] fuse: Unknown parameter '0xffffffffffffffff' [ 482.859935][ T4176] usb 3-1: Using ep0 maxpacket: 16 [ 482.870715][ T7] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.884864][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 482.915676][ T7] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 482.930106][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.967964][ T7] usb 4-1: config 0 descriptor?? [ 483.003542][ T4176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.015971][ T4176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.028760][ T4270] usb 2-1: USB disconnect, device number 28 [ 483.035760][ T4176] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 483.073874][ T4176] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 483.083436][ T4176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.100482][ T4176] usb 3-1: config 0 descriptor?? [ 483.110851][ T3544] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 483.159431][ T3544] usb 5-1: device reset changed ep0 maxpacket size! [ 483.175934][ T2856] usb 5-1: USB disconnect, device number 28 [ 483.309375][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 483.315520][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 483.333696][ T7] usb 4-1: USB disconnect, device number 36 [ 483.349467][ T2856] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 483.498848][T11391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2174'. [ 483.591147][ T4176] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 483.603777][ T4176] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 483.615431][ T4176] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 483.625559][ T2856] usb 5-1: Using ep0 maxpacket: 8 [ 483.630858][ T4176] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 483.638283][ T4176] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 483.648941][ T4176] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 483.656650][ T4176] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 483.664525][ T4176] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 483.672889][ T4176] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 483.722926][ T4176] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0023/input/input37 [ 483.759487][ T2856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 483.791200][ T2856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 483.837273][T11411] loop3: detected capacity change from 0 to 256 [ 483.837691][ T2856] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 483.884496][ T2856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 483.914672][ T2856] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 483.933231][T11416] netlink: 'syz.1.2181': attribute type 4 has an invalid length. [ 483.949436][ T2856] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 483.969228][ T2856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.012903][ T2856] usb 5-1: config 0 descriptor?? [ 484.037802][ T4176] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 484.082239][ T4176] usb 3-1: USB disconnect, device number 32 [ 484.100174][ T4202] Bluetooth: hci5: urb ffff888024e13c00 submission failed (90) [ 484.224291][T11427] kvm [11426]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x4 [ 484.251403][T11423] fido_id[11423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 484.403187][T11435] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2184'. [ 484.416502][ T2856] usb 5-1: USB disconnect, device number 29 [ 484.537318][T11440] fuse: Unknown parameter '0xffffffffffffffff' [ 484.608579][T11447] IPv6: addrconf: prefix option has invalid lifetime [ 485.057805][T11442] loop3: detected capacity change from 0 to 32768 [ 485.084807][T11442] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.2188 (11442) [ 485.147062][T11442] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 485.189904][T11442] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 485.224937][T11442] BTRFS info (device loop3): use zstd compression, level 3 [ 485.255097][T11442] BTRFS info (device loop3): using free space tree [ 485.288339][T11442] BTRFS info (device loop3): has skinny extents [ 485.802619][T11442] BTRFS info (device loop3): enabling ssd optimizations [ 485.832296][T11521] netlink: 'syz.4.2201': attribute type 4 has an invalid length. [ 486.014032][T11498] loop1: detected capacity change from 0 to 40427 [ 486.039838][ T4176] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 486.053546][T11498] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 486.077046][T11498] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 486.111791][T11516] loop5: detected capacity change from 0 to 32768 [ 486.120129][T11498] F2FS-fs (loop1): invalid crc value [ 486.191789][T11498] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 486.216147][T11516] JBD2: Ignoring recovery information on journal [ 486.296446][T11531] loop4: detected capacity change from 0 to 764 [ 486.313384][T11516] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 486.449395][ T4176] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 486.467671][ T4176] usb 3-1: config 0 has no interface number 0 [ 486.520968][ T4176] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 486.549352][ T4176] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.570610][T10573] ocfs2: Unmounting device (7,5) on (node local) [ 486.578721][ T4176] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.591931][ T4176] usb 3-1: config 0 interface 1 has no altsetting 0 [ 486.598571][ T4176] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 486.613097][T11498] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 486.621648][ T4176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.631423][T11498] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 486.640961][ T4176] usb 3-1: config 0 descriptor?? [ 486.786194][ T4187] attempt to access beyond end of device [ 486.786194][ T4187] loop1: rw=2049, want=40976, limit=40427 [ 487.254621][T11535] loop4: detected capacity change from 0 to 32768 [ 487.278757][T11535] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2206 (11535) [ 487.340953][T11535] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 487.368691][T11535] BTRFS info (device loop4): use zlib compression, level 3 [ 487.395219][T11535] BTRFS info (device loop4): using free space tree [ 487.429729][T11535] BTRFS info (device loop4): has skinny extents [ 487.541426][ T7701] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 487.575563][T11559] fuse: Unknown parameter '0xffffffffffffffff' [ 487.635537][T11564] ip_tables: iptables: counters copy to user failed while replacing table [ 487.654357][T11535] BTRFS info (device loop4): enabling ssd optimizations [ 487.716981][T11535] BTRFS warning (device loop4): this kernel does not support the compat:0 feature bit [ 487.745699][T11574] netlink: 'syz.3.2214': attribute type 4 has an invalid length. [ 487.753829][ T4176] uclogic 0003:145F:0212.0024: failed retrieving string descriptor #100: -71 [ 487.764636][ T4176] uclogic 0003:145F:0212.0024: failed retrieving pen parameters: -71 [ 487.779195][ T4176] uclogic 0003:145F:0212.0024: pen probing failed: -71 [ 487.797251][ T4176] uclogic 0003:145F:0212.0024: failed probing parameters: -71 [ 487.826104][ T4206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4206) [ 487.827449][ T4176] uclogic: probe of 0003:145F:0212.0024 failed with error -71 [ 487.865527][ T4176] usb 3-1: USB disconnect, device number 33 [ 488.023979][ T7701] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 488.036550][ T7701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.055886][ T7701] usb 6-1: config 0 descriptor?? [ 488.121350][ T7701] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 488.424489][T11582] loop4: detected capacity change from 0 to 2048 [ 488.509736][T11584] udc dummy_udc.0: soft-connect without a gadget driver [ 488.558613][T11582] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 488.570407][ T7701] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 488.597202][T11582] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.650407][T11598] loop1: detected capacity change from 0 to 64 [ 488.876358][T11608] program syz.1.2227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.889281][ T7] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 488.989417][ T7697] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 488.997461][ T7701] gspca_cpia1: usb_control_msg 02, error -71 [ 489.003718][ T7701] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 489.014062][ T7701] usb 6-1: USB disconnect, device number 5 [ 489.079256][ T7702] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 489.249361][ T7697] usb 4-1: Using ep0 maxpacket: 8 [ 489.249417][ T7] usb 5-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 489.264952][T11248] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 489.389601][ T7697] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 489.398861][ T7697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.429357][ T7] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 489.438514][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.446801][ T7] usb 5-1: Product: syz [ 489.451560][ T7] usb 5-1: Manufacturer: syz [ 489.452217][ T7697] pvrusb2: Hardware description: Terratec Grabster AV400 [ 489.456171][ T7] usb 5-1: SerialNumber: syz [ 489.468541][ T7697] pvrusb2: ********** [ 489.472578][ T7697] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 489.482735][ T7697] pvrusb2: Important functionality might not be entirely working. [ 489.492233][ T7697] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 489.509291][ T7702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 489.521200][ T7697] pvrusb2: ********** [ 489.527288][ T7702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.537438][ T7702] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 489.546828][ T7702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.556563][ T7702] usb 3-1: config 0 descriptor?? [ 489.629334][T11248] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 489.638323][T11248] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.648636][T11248] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 489.657709][T11248] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.673231][ T2424] pvrusb2: Invalid write control endpoint [ 489.734973][ T2424] pvrusb2: Invalid write control endpoint [ 489.744144][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 489.756279][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 489.765831][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 489.776161][ T2424] pvrusb2: Device being rendered inoperable [ 489.779474][T11248] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 489.791888][T11248] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 489.792398][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 489.807352][T11248] usb 2-1: Product: syz [ 489.811166][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 489.812703][T11248] usb 2-1: Manufacturer: syz [ 489.824697][ T2424] pvrusb2: Attached sub-driver cx25840 [ 489.825117][ T7] usb 5-1: unit 1 not found! [ 489.831169][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 489.836723][ T13] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 489.845837][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 489.864125][ T7] usb 5-1: unit 108 not found! [ 489.879505][ T7697] usb 4-1: USB disconnect, device number 37 [ 489.895209][ T7] usb 5-1: USB disconnect, device number 30 [ 489.916613][T11248] cdc_wdm 2-1:1.0: skipping garbage [ 489.923565][T11248] cdc_wdm 2-1:1.0: skipping garbage [ 489.950289][ T5232] udevd[5232]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.966765][T11248] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 489.973407][T11248] cdc_wdm 2-1:1.0: Unknown control protocol [ 490.159693][ T2856] usb 2-1: USB disconnect, device number 30 [ 490.229284][ T13] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 490.243252][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.255216][ T7702] usb 3-1: language id specifier not provided by device, defaulting to English [ 490.269248][ T13] usb 6-1: config 0 descriptor?? [ 490.314177][ T13] cp210x 6-1:0.0: cp210x converter detected [ 490.347843][T11615] fuse: Unknown parameter '0xffffffffffffffff' [ 490.489306][ T7702] uclogic 0003:256C:006D.0025: failed retrieving Huion firmware version: -71 [ 490.502847][ T7702] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 490.512108][ T7702] uclogic: probe of 0003:256C:006D.0025 failed with error -71 [ 490.522560][ T7702] usb 3-1: USB disconnect, device number 34 [ 490.733256][T11627] loop1: detected capacity change from 0 to 512 [ 490.778918][T11627] EXT4-fs (loop1): 1 truncate cleaned up [ 490.784978][T11627] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 490.811005][T11625] loop3: detected capacity change from 0 to 32768 [ 490.977734][ T13] usb 6-1: cp210x converter now attached to ttyUSB0 [ 491.027394][T11625] XFS (loop3): Mounting V5 Filesystem [ 491.157479][T11625] XFS (loop3): Ending clean mount [ 491.208009][ T13] usb 6-1: USB disconnect, device number 6 [ 491.222043][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 491.231710][ T13] cp210x 6-1:0.0: device disconnected [ 491.343259][T11650] netlink: 'syz.4.2242': attribute type 4 has an invalid length. [ 491.375360][ T4193] XFS (loop3): Unmounting Filesystem [ 491.673548][T11646] loop1: detected capacity change from 0 to 32768 [ 491.836755][T11646] XFS (loop1): Mounting V5 Filesystem [ 491.884363][T11648] loop2: detected capacity change from 0 to 32768 [ 491.946489][T11646] XFS (loop1): Ending clean mount [ 491.955821][T11646] XFS (loop1): Quotacheck needed: Please wait. [ 492.052601][T11646] XFS (loop1): Quotacheck: Done. [ 492.129189][ T7] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 492.419216][ T7702] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 492.499325][ T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 492.521294][ T7] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 492.535456][ T7] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 492.549102][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 492.561283][ T7] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 492.584632][ T4187] XFS (loop1): Unmounting Filesystem [ 492.603415][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.650380][ T7] usb 5-1: config 0 descriptor?? [ 492.669406][T11663] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 492.689282][ T7702] usb 6-1: Using ep0 maxpacket: 16 [ 492.819271][ T7702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.830312][ T7702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.864955][ T7702] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 492.878094][ T7702] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 492.898825][ T7702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.908385][ T7702] usb 6-1: config 0 descriptor?? [ 493.130875][ T7] belkin 0003:1020:0006.0026: ignoring exceeding usage max [ 493.143964][ T7] belkin 0003:1020:0006.0026: unbalanced delimiter at end of report description [ 493.163960][ T7] belkin 0003:1020:0006.0026: parse failed [ 493.178100][ T7] belkin: probe of 0003:1020:0006.0026 failed with error -22 [ 493.257530][T11692] loop1: detected capacity change from 0 to 1024 [ 493.299249][T11692] EXT4-fs (loop1): Ignoring removed oldalloc option [ 493.334487][ T2856] usb 5-1: USB disconnect, device number 31 [ 493.354737][T11692] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,nodioread_nolock,sb=0x00000000000007ff,bsddf,journal_dev=0x0000000000000005,grpjquota=,noquota,,errors=continue. Quota mode: none. [ 493.381782][T11692] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.411655][ T7702] microsoft 0003:045E:07DA.0027: No inputs registered, leaving [ 493.421015][ T7702] microsoft 0003:045E:07DA.0027: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 493.439934][ T7702] microsoft 0003:045E:07DA.0027: no inputs found [ 493.449380][ T7702] microsoft 0003:045E:07DA.0027: could not initialize ff, continuing anyway [ 493.671584][ T2856] usb 6-1: USB disconnect, device number 7 [ 494.039280][ T7701] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 494.047212][ T7702] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 494.118438][T11709] loop9: detected capacity change from 0 to 7 [ 494.133578][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.144685][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.154317][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.165287][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.179179][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.190283][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.224220][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.235448][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.251446][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.262418][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.274822][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.285886][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.294197][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.305249][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.313631][T11709] ldm_validate_partition_table(): Disk read failed. [ 494.342734][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.353855][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.364939][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.376042][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.384520][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.395495][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.399793][ T7701] usb 2-1: Using ep0 maxpacket: 8 [ 494.408539][ T7702] usb 3-1: Using ep0 maxpacket: 32 [ 494.414821][T11709] Dev loop9: unable to read RDB block 0 [ 494.421835][T11709] loop9: unable to read partition table [ 494.427906][T11709] loop9: partition table beyond EOD, truncated [ 494.438790][T11709] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰•¾Sêj̳–¢P=Ãë?ã}X‹ºÐ œëÜ5õ`ÉæÖã«…ˆ) failed (rc=-5) [ 494.551531][ T7701] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 494.560159][ T7702] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 494.568521][ T7702] usb 3-1: config 0 has no interface number 0 [ 494.589196][ T7701] usb 2-1: config 179 has no interface number 0 [ 494.599485][ T7] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 494.612550][ T7702] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 494.622806][ T7701] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 494.654885][ T7702] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 494.666447][ T7701] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 494.681952][ T7702] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 494.692000][ T7701] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 494.703455][ T7702] usb 3-1: config 0 interface 196 has no altsetting 0 [ 494.710923][ T7701] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 494.722659][ T7701] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 494.736113][ T7701] usb 2-1: config 179 interface 65 has no altsetting 0 [ 494.743281][ T7701] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 494.752593][ T7701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.767280][T11722] fuse: Unknown parameter '0xffffffffffffffff' [ 494.826906][ T7701] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input39 [ 494.849271][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 494.919466][ T7702] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 494.937621][ T7702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.952486][ T7702] usb 3-1: Product: syz [ 494.958324][ T7702] usb 3-1: Manufacturer: syz [ 494.965548][ T7702] usb 3-1: SerialNumber: syz [ 494.969812][ T7] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 494.979791][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.981047][ T7702] usb 3-1: config 0 descriptor?? [ 495.010858][T11701] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 495.034020][ T7] pvrusb2: Hardware description: Terratec Grabster AV400 [ 495.041566][ T7] pvrusb2: ********** [ 495.045688][ T7] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 495.056136][ T7] pvrusb2: Important functionality might not be entirely working. [ 495.064166][ T7] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 495.064799][ T7698] usb 2-1: USB disconnect, device number 31 [ 495.075747][ T7] pvrusb2: ********** [ 495.075766][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 495.095655][ T7698] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 495.132380][ T7697] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 495.220188][T11249] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 495.249881][ T2424] pvrusb2: Invalid write control endpoint [ 495.272101][ T7702] ipheth 3-1:0.196: Unable to find endpoints [ 495.289653][ T2424] pvrusb2: Invalid write control endpoint [ 495.295416][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 495.305346][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 495.308538][ T7702] usb 3-1: USB disconnect, device number 35 [ 495.319406][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 495.334568][ T2424] pvrusb2: Device being rendered inoperable [ 495.341350][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 495.348702][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 495.371351][ T2424] pvrusb2: Attached sub-driver cx25840 [ 495.376946][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 495.387235][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 495.396508][ T7697] usb 5-1: Using ep0 maxpacket: 32 [ 495.466049][T11714] pvrusb2: Attempted to execute control transfer when device not ok [ 495.478021][ T13] usb 6-1: USB disconnect, device number 8 [ 495.569340][ T7697] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 495.577744][ T7697] usb 5-1: config 0 has no interface number 0 [ 495.579313][T11249] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 495.584951][ T7697] usb 5-1: config 0 interface 12 has no altsetting 0 [ 495.598065][T11249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.624424][T11249] usb 4-1: config 0 descriptor?? [ 495.670419][T11249] cp210x 4-1:0.0: cp210x converter detected [ 495.809257][ T7697] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 495.818627][ T7697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.826746][ T7697] usb 5-1: Product: syz [ 495.831226][ T7697] usb 5-1: Manufacturer: syz [ 495.836228][ T7697] usb 5-1: SerialNumber: syz [ 495.844048][ T7697] usb 5-1: config 0 descriptor?? [ 495.949262][ T7702] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 496.081315][ T13] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 496.109511][T11249] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 496.162877][T11249] usb 4-1: cp210x converter now attached to ttyUSB0 [ 496.219222][ T7702] usb 2-1: Using ep0 maxpacket: 32 [ 496.245740][T11748] netlink: 'syz.5.2280': attribute type 4 has an invalid length. [ 496.329173][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 496.375354][T11249] usb 4-1: USB disconnect, device number 38 [ 496.389403][ T7702] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 496.391509][T11249] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 496.401563][ T7702] usb 2-1: config 0 has no interface number 0 [ 496.410756][T11249] cp210x 4-1:0.0: device disconnected [ 496.449378][ T13] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 496.458434][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.469061][ T13] usb 3-1: config 0 descriptor?? [ 496.579307][ T7702] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 496.588625][ T7702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.596704][ T7702] usb 2-1: Product: syz [ 496.601141][ T7702] usb 2-1: Manufacturer: syz [ 496.605753][ T7702] usb 2-1: SerialNumber: syz [ 496.612292][ T7702] usb 2-1: config 0 descriptor?? [ 496.654099][ T7702] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 496.709221][ T7] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 496.729560][ T13] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 496.738069][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 496.760636][ T13] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 496.767916][ T13] usb 3-1: media controller created [ 496.779235][ T7697] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 496.783413][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 496.788270][ T7697] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 496.803623][ T7697] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 496.811407][ T7697] f81534: probe of 5-1:0.12 failed with error -71 [ 496.827891][ T7697] usb 5-1: USB disconnect, device number 32 [ 496.871261][ T7702] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 496.885723][ T7702] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 496.951505][ T13] az6027: usb out operation failed. (-71) [ 496.959805][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 496.971588][ T13] az6027: usb out operation failed. (-71) [ 496.977695][ T13] stb0899_attach: Driver disabled by Kconfig [ 496.984501][ T13] az6027: no front-end attached [ 496.984501][ T13] [ 497.019356][ T13] az6027: usb out operation failed. (-71) [ 497.025318][ T13] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 497.033872][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 497.046381][ T13] dvb-usb: schedule remote query interval to 400 msecs. [ 497.053672][ T13] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 497.065220][ T13] usb 3-1: USB disconnect, device number 36 [ 497.108775][ T13] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 497.119329][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 170 [ 497.249336][ T7] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 497.258607][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.267328][ T7] usb 6-1: Product: syz [ 497.271787][ T7] usb 6-1: Manufacturer: syz [ 497.276389][ T7] usb 6-1: SerialNumber: syz [ 497.282970][ T7] usb 6-1: config 0 descriptor?? [ 497.289840][ T7702] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 497.331930][ T7698] usb 2-1: USB disconnect, device number 32 [ 497.349165][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 497.359265][ T7698] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 497.381978][ T7698] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 497.400217][ T7698] quatech2 2-1:0.51: device disconnected [ 497.479311][ T7697] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 497.709419][ T7702] usb 4-1: unable to get BOS descriptor or descriptor too short [ 497.749257][ T7697] usb 5-1: Using ep0 maxpacket: 8 [ 497.754502][ T7702] usb 4-1: not running at top speed; connect to a high speed hub [ 497.789223][ T13] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 497.839422][ T7702] usb 4-1: config 1 has an invalid interface number: 93 but max is 0 [ 497.857155][ T7702] usb 4-1: config 1 has no interface number 0 [ 497.867079][ T7702] usb 4-1: config 1 interface 93 has no altsetting 0 [ 497.879352][ T7697] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 497.888986][ T7697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.943889][ T7697] pvrusb2: Hardware description: Terratec Grabster AV400 [ 497.951306][ T7697] pvrusb2: ********** [ 497.955306][ T7697] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 497.968010][ T7697] pvrusb2: Important functionality might not be entirely working. [ 497.975980][ T7697] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 497.979261][ T7] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 497.992587][ T7697] pvrusb2: ********** [ 498.039556][ T7] peak_usb: probe of 6-1:0.0 failed with error -71 [ 498.049536][ T7] usb 6-1: USB disconnect, device number 9 [ 498.059313][ T7702] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 498.074599][ T7702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.083321][ T7702] usb 4-1: Product: syz [ 498.088102][ T7702] usb 4-1: Manufacturer: syz [ 498.092980][ T7702] usb 4-1: SerialNumber: syz [ 498.149422][ T2424] pvrusb2: Invalid write control endpoint [ 498.150795][ T7698] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 498.194531][ T2424] pvrusb2: Invalid write control endpoint [ 498.202872][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 498.213138][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 498.221736][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 498.231887][ T2424] pvrusb2: Device being rendered inoperable [ 498.237842][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 498.245361][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 498.253491][ T2424] pvrusb2: Attached sub-driver cx25840 [ 498.258958][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 498.269128][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 498.319740][ T13] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 498.329346][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.337356][ T13] usb 3-1: Product: syz [ 498.341679][ T13] usb 3-1: Manufacturer: syz [ 498.346327][ T13] usb 3-1: SerialNumber: syz [ 498.360818][ T13] usb 3-1: config 0 descriptor?? [ 498.366136][T11248] usb 5-1: USB disconnect, device number 33 [ 498.404204][ T13] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 037 [ 498.424082][ T7702] usb 4-1: USB disconnect, device number 39 [ 498.430186][ T7698] usb 2-1: Using ep0 maxpacket: 16 [ 498.560112][ T7698] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 498.569311][ T7698] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 498.578969][ T7698] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 498.589255][ T7698] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 498.604555][ T7698] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 498.614783][ T7698] usb 2-1: config 1 interface 0 has no altsetting 0 [ 498.621851][ T7698] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 498.631185][ T7698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.681558][ T7698] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 498.697101][T11771] loop5: detected capacity change from 0 to 32768 [ 498.751291][T11771] JBD2: Ignoring recovery information on journal [ 498.777647][T11771] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 498.847324][T10573] ocfs2: Unmounting device (7,5) on (node local) [ 498.930924][T11777] netlink: 'syz.3.2292': attribute type 4 has an invalid length. [ 498.964406][ T7698] ums-sddr09: probe of 2-1:1.0 failed with error -22 [ 499.000957][ T7698] usb 2-1: USB disconnect, device number 33 [ 499.039451][ T13] i2c i2c-1: failure reading functionality [ 499.052954][ T13] i2c i2c-1: connected i2c-tiny-usb device [ 499.089294][ T13] usb 3-1: USB disconnect, device number 37 [ 499.229528][T11788] fuse: Unknown parameter '0xffffffffffffffff' [ 499.329270][ T7697] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 499.388768][T11792] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2297'. [ 499.420335][T11250] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 499.699329][ T7702] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 499.719348][ T13] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 499.719515][ T7697] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 499.738534][ T7697] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 499.752085][ T7697] usb 5-1: config 0 interface 0 has no altsetting 0 [ 499.758714][ T7697] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 499.767795][ T7697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.777295][ T7697] usb 5-1: config 0 descriptor?? [ 499.799527][T11782] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 499.819309][T11250] usb 6-1: unable to get BOS descriptor or descriptor too short [ 499.849280][ T7] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 499.899384][T11250] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.909755][T11250] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 499.918714][T11250] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 499.930314][T11250] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 499.943735][T11250] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 499.954597][T11250] usb 6-1: config 1 interface 1 has no altsetting 0 [ 499.969290][ T7702] usb 2-1: Using ep0 maxpacket: 16 [ 500.079360][ T13] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 500.087429][ T13] usb 4-1: config 0 has no interface number 0 [ 500.093777][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 500.099727][ T7702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 500.112758][ T7702] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 500.122283][ T7702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.132034][ T7702] usb 2-1: config 0 descriptor?? [ 500.209434][T11250] usb 6-1: string descriptor 0 read error: -22 [ 500.215794][ T7] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 500.226701][T11250] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 500.236082][T11250] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.259294][ T13] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 500.268466][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.271015][ T7697] logitech 0003:046D:C50C.0028: unknown main item tag 0x7 [ 500.276797][ T13] usb 4-1: Product: syz [ 500.287871][ T13] usb 4-1: Manufacturer: syz [ 500.290976][ T7697] logitech 0003:046D:C50C.0028: hidraw0: USB HID v0.0c Device [HID 046d:c50c] on usb-dummy_hcd.4-1/input0 [ 500.295532][ T13] usb 4-1: SerialNumber: syz [ 500.323425][ T13] usb 4-1: config 0 descriptor?? [ 500.360425][ T13] usb 4-1: selecting invalid altsetting 1 [ 500.366366][ T13] dvb_ttusb_budget: ttusb_init_controller: error [ 500.382000][ T13] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 500.390834][ T7] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 500.400082][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.408121][ T7] usb 3-1: Product: syz [ 500.418683][ T7] usb 3-1: Manufacturer: syz [ 500.423724][ T7] usb 3-1: SerialNumber: syz [ 500.430578][ T7] usb 3-1: config 0 descriptor?? [ 500.444047][ T13] DVB: Unable to find symbol stv0299_attach() [ 500.467788][ T13] DVB: Unable to find symbol tda8083_attach() [ 500.475269][ T7] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 500.482385][ T13] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 500.490773][ T7] pegasus_notetaker: probe of 3-1:0.0 failed with error -22 [ 500.498805][ T7697] usb 5-1: USB disconnect, device number 34 [ 500.509631][T11250] usb 6-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 500.519402][T11250] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 500.598247][ T7] usb 4-1: USB disconnect, device number 40 [ 500.629886][ T7702] hid (null): report_id 0 is invalid [ 500.637166][ T7702] nzxt-kraken2 0003:1E71:170E.0029: unknown main item tag 0xd [ 500.645398][ T7702] nzxt-kraken2 0003:1E71:170E.0029: unknown main item tag 0x0 [ 500.653800][ T7702] nzxt-kraken2 0003:1E71:170E.0029: unknown main item tag 0x0 [ 500.661740][ T7702] nzxt-kraken2 0003:1E71:170E.0029: unknown main item tag 0x0 [ 500.669530][ T7702] nzxt-kraken2 0003:1E71:170E.0029: unknown main item tag 0x0 [ 500.677140][ T7702] nzxt-kraken2 0003:1E71:170E.0029: unknown main item tag 0x0 [ 500.685064][ T7702] nzxt-kraken2 0003:1E71:170E.0029: report_id 0 is invalid [ 500.697330][ T7702] nzxt-kraken2 0003:1E71:170E.0029: item 0 0 1 8 parsing failed [ 500.697877][ T13] usb 3-1: USB disconnect, device number 38 [ 500.705737][ T7702] nzxt-kraken2 0003:1E71:170E.0029: hid parse failed with -22 [ 500.719821][ T7702] nzxt-kraken2: probe of 0003:1E71:170E.0029 failed with error -22 [ 500.847461][ T7702] usb 2-1: USB disconnect, device number 34 [ 501.033523][T11250] usb 6-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 501.069432][T11250] usb 6-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 501.089629][T11250] usb 6-1: USB disconnect, device number 10 [ 501.289211][ T13] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 501.327158][T11817] netlink: 'syz.3.2306': attribute type 4 has an invalid length. [ 501.521411][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.527780][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.529197][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 501.629203][T11249] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 501.699181][ T13] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 501.749242][ T13] usb 3-1: language id specifier not provided by device, defaulting to English [ 501.859247][ T7702] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 501.879464][T11250] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 502.000127][T11249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 502.011373][T11249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.049285][ T7] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 502.079468][ T13] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 502.089547][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.097579][ T13] usb 3-1: Product: syz [ 502.102174][ T13] usb 3-1: SerialNumber: syz [ 502.108223][ T13] usb 3-1: config 0 descriptor?? [ 502.150562][ T13] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 502.157737][ T13] pegasus_notetaker: probe of 3-1:0.0 failed with error -22 [ 502.181926][T11249] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 502.191261][T11249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.199410][T11249] usb 5-1: Product: syz [ 502.203584][T11249] usb 5-1: Manufacturer: syz [ 502.208178][T11249] usb 5-1: SerialNumber: syz [ 502.214412][T11249] usb 5-1: config 0 descriptor?? [ 502.249412][ T7702] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 502.249424][T11250] usb 2-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 502.249454][T11250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 502.258486][ T7702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.273842][T11249] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 502.286486][ T7702] usb 4-1: config 0 descriptor?? [ 502.297969][T11250] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 502.307249][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 502.312499][T11249] usb 5-1: No valid video chain found. [ 502.319350][T11250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.325956][ T7702] cp210x 4-1:0.0: cp210x converter detected [ 502.335168][T11250] usb 2-1: config 0 descriptor?? [ 502.376214][ T7697] usb 3-1: USB disconnect, device number 39 [ 502.495012][T11249] usb 5-1: USB disconnect, device number 35 [ 502.589501][ T7] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 502.598834][ T7] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 502.607322][ T7] usb 6-1: Product: syz [ 502.611585][ T7] usb 6-1: Manufacturer: syz [ 502.616179][ T7] usb 6-1: SerialNumber: syz [ 502.622707][ T7] usb 6-1: config 0 descriptor?? [ 502.660668][ T7] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 502.749317][ T7702] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 502.802233][ T7702] usb 4-1: cp210x converter now attached to ttyUSB0 [ 502.821898][T11250] magicmouse 0003:05AC:0265.002A: unknown main item tag 0x0 [ 502.833732][T11250] magicmouse 0003:05AC:0265.002A: unknown main item tag 0x0 [ 502.841328][T11250] magicmouse 0003:05AC:0265.002A: item fetching failed at offset 2/44 [ 502.852325][T11250] magicmouse 0003:05AC:0265.002A: magicmouse hid parse failed [ 502.860028][T11250] magicmouse: probe of 0003:05AC:0265.002A failed with error -22 [ 502.949923][T11849] netlink: 'syz.2.2321': attribute type 4 has an invalid length. [ 503.058953][T11852] loop4: detected capacity change from 0 to 128 [ 503.081414][T11250] usb 4-1: USB disconnect, device number 41 [ 503.095066][T11250] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 503.095198][ T7702] usb 2-1: USB disconnect, device number 35 [ 503.104491][T11250] cp210x 4-1:0.0: device disconnected [ 503.135724][ T26] audit: type=1326 audit(1785769389.587:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.2.2323" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1e294019 code=0x7ffc0000 [ 503.188317][T11854] loop2: detected capacity change from 0 to 1024 [ 503.205226][ T26] audit: type=1326 audit(1785769389.617:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.2.2323" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1e294019 code=0x7ffc0000 [ 503.231761][ T26] audit: type=1326 audit(1785769389.617:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.2.2323" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1e294019 code=0x7ffc0000 [ 503.256526][ T26] audit: type=1326 audit(1785769389.617:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.2.2323" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fdb1e294019 code=0x7ffc0000 [ 503.282124][ T26] audit: type=1326 audit(1785769389.617:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.2.2323" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1e294019 code=0x7ffc0000 [ 503.306389][ T26] audit: type=1326 audit(1785769389.617:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.2.2323" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1e294019 code=0x7ffc0000 [ 503.335987][ T7] input: gspca_zc3xx as /devices/platform/dummy_hcd.5/usb6/6-1/input/input41 [ 503.357475][ T26] audit: type=1326 audit(1785769389.617:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.2.2323" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1e294019 code=0x7ffc0000 [ 503.405139][T11854] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nogrpid,noinit_itable,nogrpid,block_validity,max_dir_size_kb=0x00000000000007b1,nojournal_checksum,errors=remount-ro,jqfmt=vfsold,jqfmt=vfsv0,data_err=ignore,. Quota mode: none. [ 503.455435][T11854] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.2323: inode #12: comm syz.2.2323: iget: illegal inode # [ 503.468718][ T26] audit: type=1326 audit(1785769389.617:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.2.2323" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdb1e294019 code=0x7ffc0000 [ 503.493089][T11854] EXT4-fs (loop2): Remounting filesystem read-only [ 503.556389][ T26] audit: type=1326 audit(1785769389.617:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.2.2323" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdb1e293d82 code=0x7ffc0000 [ 503.564328][ T7702] usb 6-1: USB disconnect, device number 11 [ 503.586744][ T26] audit: type=1326 audit(1785769389.617:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.2.2323" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdb1e25484e code=0x7ffc0000 [ 503.923502][T11882] netlink: 'syz.2.2334': attribute type 4 has an invalid length. [ 503.927073][T11884] loop4: detected capacity change from 0 to 1024 [ 504.229172][ T7697] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 504.249395][ T4369] hfsplus: b-tree write err: -5, ino 25 [ 504.269714][ T4369] hfsplus: b-tree write err: -5, ino 4 [ 504.309844][ T4369] hfsplus: b-tree write err: -5, ino 2 [ 504.353326][ T4369] hfsplus: b-tree write err: -5, ino 26 [ 504.489315][ T7697] usb 4-1: Using ep0 maxpacket: 32 [ 504.605559][T11915] netlink: 'syz.1.2346': attribute type 4 has an invalid length. [ 504.619369][ T7697] usb 4-1: config 0 has no interfaces? [ 504.625217][ T7697] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 504.645634][ T7697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.676944][ T7697] usb 4-1: config 0 descriptor?? [ 504.879398][T11250] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 504.995285][ T7697] usb 4-1: USB disconnect, device number 42 [ 505.019422][ T13] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 505.121283][T11250] usb 5-1: Using ep0 maxpacket: 8 [ 505.201633][T11946] loop1: detected capacity change from 0 to 2048 [ 505.249328][T11250] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.269163][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 505.274452][T11250] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 505.289478][T11250] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 505.289714][T11946] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 505.389423][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.418965][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.434098][ T13] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 505.460149][ T13] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 505.479466][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.492421][T11250] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 505.512926][ T13] usb 6-1: config 0 descriptor?? [ 505.518028][T11250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.530856][T11250] usb 5-1: Product: syz [ 505.535060][T11250] usb 5-1: Manufacturer: syz [ 505.592306][T11250] usb 5-1: SerialNumber: syz [ 505.686419][T11960] loop1: detected capacity change from 0 to 2048 [ 505.725370][T11960] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 505.751339][T11960] UDF-fs: Scanning with blocksize 512 failed [ 505.778980][T11960] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 505.990992][ T13] microsoft 0003:045E:07DA.002B: ignoring exceeding usage max [ 506.010392][ T13] microsoft 0003:045E:07DA.002B: ignoring exceeding usage max [ 506.032112][ T13] microsoft 0003:045E:07DA.002B: No inputs registered, leaving [ 506.074846][ T13] microsoft 0003:045E:07DA.002B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 506.106136][ T13] microsoft 0003:045E:07DA.002B: no inputs found [ 506.120826][ T13] microsoft 0003:045E:07DA.002B: could not initialize ff, continuing anyway [ 506.279656][ T7698] usb 6-1: USB disconnect, device number 12 [ 506.320964][T11975] fido_id[11975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 506.324568][T11977] loop1: detected capacity change from 0 to 4096 [ 506.380592][T11977] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 506.434229][T11977] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 506.453264][T11977] ntfs3: loop1: Failed to load $Extend. [ 506.508193][T11968] loop3: detected capacity change from 0 to 32768 [ 506.542489][T11250] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 506.555988][T11981] vxcan0: tx address claim with dest, not broadcast [ 506.572008][T11250] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 506.693251][T11986] loop2: detected capacity change from 0 to 128 [ 506.706440][T11250] usb 5-1: USB disconnect, device number 36 [ 506.738487][T11986] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 506.762184][T11986] hpfs: filesystem error: improperly stopped [ 506.768423][T11986] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 506.780145][T11986] hpfs: You really don't want any checks? You are crazy... [ 506.787844][T11986] hpfs: hpfs_map_sector(): read error [ 506.797085][T11986] hpfs: code page support is disabled [ 506.803613][T11986] hpfs: hpfs_map_4sectors(): unaligned read [ 506.822644][T11986] hpfs: hpfs_map_4sectors(): unaligned read [ 506.838969][T11986] hpfs: filesystem error: unable to find root dir [ 507.071727][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.219584][ T7698] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 507.326192][T11989] loop5: detected capacity change from 0 to 32768 [ 507.385549][T11989] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 507.405900][T11989] JBD2: Ignoring recovery information on journal [ 507.439554][ T7702] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 507.443824][T11989] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 507.523623][T12013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2379'. [ 507.583476][T11250] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 507.609546][T10573] ocfs2: Unmounting device (7,5) on (node local) [ 507.659279][ T7698] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 507.678185][ T7698] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 507.699386][ T7698] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 507.725095][T12018] netlink: 'syz.3.2382': attribute type 4 has an invalid length. [ 507.732960][ T7702] usb 5-1: Using ep0 maxpacket: 16 [ 507.749342][ T7698] usb 2-1: config 220 interface 0 has no altsetting 0 [ 507.756163][ T7698] usb 2-1: config 220 interface 1 has no altsetting 0 [ 507.831013][T12021] block2mtd: illegal erase size [ 507.839502][T11250] usb 3-1: Using ep0 maxpacket: 32 [ 507.934441][ T7698] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 507.946697][ T7698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.959310][T11250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.967715][ T7698] usb 2-1: Product: syz [ 507.974429][ T7698] usb 2-1: Manufacturer: syz [ 507.979033][ T7698] usb 2-1: SerialNumber: syz [ 507.996610][T11250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.025798][T11250] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 508.036658][T11250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.043594][ T7702] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 508.058898][T11250] usb 3-1: config 0 descriptor?? [ 508.065454][ T7702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.074380][T12029] fuse: Unknown parameter '0xffffffffffffffff' [ 508.076905][ T7702] usb 5-1: Product: syz [ 508.084826][ T7702] usb 5-1: Manufacturer: syz [ 508.099880][ T7702] usb 5-1: SerialNumber: syz [ 508.100365][T11250] hub 3-1:0.0: USB hub found [ 508.106253][ T7702] usb 5-1: config 0 descriptor?? [ 508.160442][ T7702] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 508.188505][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 508.188597][ T26] audit: type=1326 audit(1785769395.642:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12035 comm="syz.3.2388" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3326621019 code=0x0 [ 508.309455][T11250] hub 3-1:0.0: 1 port detected [ 508.369761][ T7698] usb 2-1: selecting invalid altsetting 0 [ 508.388675][ T13] usb 5-1: USB disconnect, device number 37 [ 508.430421][ T7698] usb 2-1: selecting invalid altsetting 0 [ 508.436194][ T7698] usbtest: probe of 2-1:220.1 failed with error -22 [ 508.456914][ T7698] usb 2-1: USB disconnect, device number 36 [ 508.791942][T11250] usb 3-1: USB disconnect, device number 40 [ 509.130345][ T7698] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 509.399212][ T7698] usb 2-1: Using ep0 maxpacket: 32 [ 509.404527][ T7702] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 509.419237][T11250] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 509.469168][ T13] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 509.540043][ T7698] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 509.549583][ T7698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.602079][ T7698] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 509.659218][T11250] usb 6-1: Using ep0 maxpacket: 8 [ 509.789303][ T13] usb 4-1: not running at top speed; connect to a high speed hub [ 509.809430][ T7702] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 509.818124][ T7702] usb 5-1: config 255 has no interface number 0 [ 509.824988][ T7702] usb 5-1: config 255 interface 97 has no altsetting 0 [ 509.869340][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.880045][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 188, setting to 64 [ 509.890931][ T13] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 509.904386][ T13] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 509.913533][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.939621][T12070] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 509.946811][T11250] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 509.956095][T11250] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.965729][ T13] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 509.973527][T11250] usb 6-1: Product: syz [ 509.977707][T11250] usb 6-1: Manufacturer: syz [ 509.983489][ T13] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 509.991225][T11250] usb 6-1: SerialNumber: syz [ 509.996337][ T13] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 510.005422][T11250] usb 6-1: config 0 descriptor?? [ 510.011941][ T13] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 510.019530][ T7702] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 510.021558][ T13] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 510.034264][ T7702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.036881][ T13] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 510.045949][ T7702] usb 5-1: Product: syz [ 510.055132][T11250] gspca_main: sq930x-2.14.0 probing 2770:930c [ 510.062225][ T7702] usb 5-1: Manufacturer: syz [ 510.069965][ T13] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 510.073570][ T7702] usb 5-1: SerialNumber: syz [ 510.324357][ T7] usb 4-1: USB disconnect, device number 43 [ 510.342856][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 510.355031][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 510.366948][ T7] keyspan 4-1:1.0: device disconnected [ 510.407908][ T7702] usb 5-1: bad CDC descriptors [ 510.415336][ T7702] usb 5-1: bad CDC descriptors [ 510.429272][ T7702] usb 5-1: USB disconnect, device number 38 [ 510.459362][ T7698] gspca_nw80x: reg_r err -71 [ 510.459446][ T13] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 510.464045][ T7698] nw80x: probe of 2-1:3.0 failed with error -71 [ 510.470019][ T7698] usb 2-1: USB disconnect, device number 37 [ 510.919198][T11250] gspca_sq930x: ucbus_write failed -71 [ 510.932456][T12082] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2406'. [ 511.014012][ T13] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 511.033249][ T13] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 511.053590][ T13] usb 3-1: Product: syz [ 511.057808][ T13] usb 3-1: Manufacturer: syz [ 511.095675][ T13] usb 3-1: SerialNumber: syz [ 511.114945][ T13] usb 3-1: config 0 descriptor?? [ 511.139533][ T7] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 511.158210][T12096] fuse: Unknown parameter '0xffffffffffffffff' [ 511.159604][T11250] gspca_sq930x: Sensor ov9630 not yet treated [ 511.174340][T11250] sq930x: probe of 6-1:0.0 failed with error -22 [ 511.184636][T11250] usb 6-1: USB disconnect, device number 13 [ 511.369468][ T13] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 511.379160][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 511.519338][ T7702] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 511.589780][ T13] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 511.606920][ T13] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 511.649793][ T13] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 511.669802][ T7] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 511.694490][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.751186][ T7] usb 4-1: Product: syz [ 511.795893][ T7] usb 4-1: Manufacturer: syz [ 511.840412][ T7] usb 4-1: SerialNumber: syz [ 511.932464][ T7] usb 4-1: config 0 descriptor?? [ 512.219265][ T13] peak_usb: probe of 3-1:0.0 failed with error -22 [ 512.237702][ T7] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 044 [ 512.280418][ T13] usb 3-1: USB disconnect, device number 41 [ 512.281429][T12106] loop1: detected capacity change from 0 to 128 [ 512.394109][T12110] syz.2.2419 uses obsolete (PF_INET,SOCK_PACKET) [ 512.447762][T12106] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 512.465120][T12080] i2c i2c-1: adapter quirk: no zero length (addr 0x0000, size 0, read) [ 512.489164][T11248] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 512.528827][T12106] ext4 filesystem being mounted at /515/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 512.541213][T11249] usb 4-1: USB disconnect, device number 44 [ 512.567638][T12114] input: syz0 as /devices/virtual/input/input43 [ 512.589237][ T7702] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.615072][ T7702] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 512.627203][ T7702] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 512.785270][T12122] loop1: detected capacity change from 0 to 8 [ 512.785352][ T2856] [ 512.793707][ T2856] ====================================================== [ 512.800733][ T2856] WARNING: possible circular locking dependency detected [ 512.807774][ T2856] syzkaller #0 Not tainted [ 512.812195][ T2856] ------------------------------------------------------ [ 512.819310][ T2856] kworker/1:2/2856 is trying to acquire lock: [ 512.825370][ T2856] ffff888061eed028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 512.836552][ T2856] [ 512.836552][ T2856] but task is already holding lock: [ 512.843923][ T2856] ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 512.853104][ T2856] [ 512.853104][ T2856] which lock already depends on the new lock. [ 512.853104][ T2856] [ 512.859302][T11248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 512.863507][ T2856] [ 512.863507][ T2856] the existing dependency chain (in reverse order) is: [ 512.863518][ T2856] [ 512.863518][ T2856] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 512.863546][ T2856] __mutex_lock_common+0x1e5/0x2400 [ 512.895940][ T2856] mutex_lock_nested+0x17/0x20 [ 512.901233][ T2856] rfkill_register+0x2f/0x970 [ 512.906435][ T2856] hci_register_dev+0x459/0x980 [ 512.911939][ T2856] vhci_create_device+0x32e/0x5c0 [ 512.917571][ T2856] vhci_write+0x389/0x440 [ 512.922451][ T2856] vfs_write+0x748/0xd70 [ 512.927271][ T2856] ksys_write+0x153/0x260 [ 512.932114][ T2856] do_syscall_64+0x4c/0xa0 [ 512.937185][ T2856] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 512.943594][ T2856] [ 512.943594][ T2856] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 512.951402][ T2856] __mutex_lock_common+0x1e5/0x2400 [ 512.957135][ T2856] mutex_lock_nested+0x17/0x20 [ 512.962497][ T2856] vhci_send_frame+0x88/0x100 [ 512.967692][ T2856] hci_send_frame+0x1a9/0x2e0 [ 512.972886][ T2856] hci_tx_work+0x9b5/0x16d0 [ 512.977902][ T2856] process_one_work+0x867/0xff0 [ 512.983369][ T2856] worker_thread+0xad7/0x12a0 [ 512.988568][ T2856] kthread+0x42e/0x520 [ 512.993221][ T2856] ret_from_fork+0x1f/0x30 [ 512.998194][ T2856] [ 512.998194][ T2856] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 513.007384][ T2856] __flush_work+0x116/0x210 [ 513.012421][ T2856] hci_dev_do_close+0x201/0x1020 [ 513.017900][ T2856] hci_unregister_dev+0x2eb/0x590 [ 513.023458][ T2856] vhci_release+0x73/0xc0 [ 513.028391][ T2856] __fput+0x212/0x8c0 [ 513.029302][T11248] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 513.032908][ T2856] task_work_run+0x125/0x1a0 [ 513.032935][ T2856] do_exit+0x635/0x2110 [ 513.051714][ T2856] do_group_exit+0x12c/0x2f0 [ 513.054371][T11248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.056833][ T2856] get_signal+0x7eb/0x12e0 [ 513.067141][T11248] usb 6-1: Product: syz [ 513.070016][ T2856] arch_do_signal_or_restart+0xe6/0x12a0 [ 513.074523][T11248] usb 6-1: Manufacturer: syz [ 513.080356][ T2856] exit_to_user_mode_loop+0x9e/0x130 [ 513.085381][T11248] usb 6-1: SerialNumber: syz [ 513.090812][ T2856] exit_to_user_mode_prepare+0xee/0x180 [ 513.090837][ T2856] syscall_exit_to_user_mode+0x16/0x40 [ 513.090854][ T2856] do_syscall_64+0x58/0xa0 [ 513.090866][ T2856] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 513.090882][ T2856] [ 513.090882][ T2856] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 513.090906][ T2856] __mutex_lock_common+0x1e5/0x2400 [ 513.119849][T11248] usb 6-1: config 0 descriptor?? [ 513.126379][ T2856] mutex_lock_nested+0x17/0x20 [ 513.126408][ T2856] bg_scan_update+0x44/0x3b0 [ 513.147440][ T2856] process_one_work+0x867/0xff0 [ 513.152889][ T2856] worker_thread+0xad7/0x12a0 [ 513.158113][ T2856] kthread+0x42e/0x520 [ 513.162712][ T2856] ret_from_fork+0x1f/0x30 [ 513.167674][ T2856] [ 513.167674][ T2856] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 513.177502][ T2856] __lock_acquire+0x2c66/0x7b50 [ 513.182988][ T2856] lock_acquire+0x19e/0x400 [ 513.188008][ T2856] __flush_work+0x116/0x210 [ 513.193028][ T2856] __cancel_work_timer+0x3f4/0x560 [ 513.198673][ T2856] hci_request_cancel_all+0xcc/0x300 [ 513.204506][ T2856] hci_dev_do_close+0x4e/0x1020 [ 513.209897][ T2856] hci_rfkill_set_block+0x101/0x180 [ 513.215635][ T2856] rfkill_set_block+0x1c1/0x3c0 [ 513.221020][ T2856] rfkill_epo+0x75/0x170 [ 513.225806][ T2856] rfkill_op_handler+0x76/0x220 [ 513.231191][ T2856] process_one_work+0x867/0xff0 [ 513.236554][ T2856] worker_thread+0xad7/0x12a0 [ 513.241739][ T2856] kthread+0x42e/0x520 [ 513.246317][ T2856] ret_from_fork+0x1f/0x30 [ 513.249127][T11250] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 513.251245][ T2856] [ 513.251245][ T2856] other info that might help us debug this: [ 513.251245][ T2856] [ 513.251253][ T2856] Chain exists of: [ 513.251253][ T2856] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 513.251253][ T2856] [ 513.284695][ T2856] Possible unsafe locking scenario: [ 513.284695][ T2856] [ 513.292141][ T2856] CPU0 CPU1 [ 513.297499][ T2856] ---- ---- [ 513.302848][ T2856] lock(rfkill_global_mutex); [ 513.307707][ T2856] lock(&data->open_mutex); [ 513.314805][ T2856] lock(rfkill_global_mutex); [ 513.322081][ T2856] lock((work_completion)(&hdev->bg_scan_update)); [ 513.328699][ T2856] [ 513.328699][ T2856] *** DEADLOCK *** [ 513.328699][ T2856] [ 513.336838][ T2856] 3 locks held by kworker/1:2/2856: [ 513.342027][ T2856] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 513.352314][ T2856] #1: ffffc9000c3dfd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 513.362607][ T2856] #2: ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 513.372080][ T2856] [ 513.372080][ T2856] stack backtrace: [ 513.377976][ T2856] CPU: 1 PID: 2856 Comm: kworker/1:2 Not tainted syzkaller #0 [ 513.385442][ T2856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.395513][ T2856] Workqueue: events rfkill_op_handler [ 513.400960][ T2856] Call Trace: [ 513.404327][ T2856] [ 513.407364][ T2856] dump_stack_lvl+0x188/0x250 [ 513.412171][ T2856] ? load_image+0x410/0x410 [ 513.416038][T11248] usb 6-1: USB disconnect, device number 14 [ 513.416769][ T2856] ? show_regs_print_info+0x20/0x20 [ 513.427845][ T2856] ? print_circular_bug+0x12b/0x1a0 [ 513.433071][ T2856] check_noncircular+0x296/0x330 [ 513.438033][ T2856] ? look_up_lock_class+0x71/0x110 [ 513.443140][ T2856] ? add_chain_block+0x9b0/0x9b0 [ 513.448076][ T2856] ? lockdep_lock+0xf1/0x1f0 [ 513.452664][ T2856] ? __lock_acquire+0x1305/0x7b50 [ 513.457706][ T2856] ? mark_lock+0x94/0x320 [ 513.462028][ T2856] ? _find_first_zero_bit+0xd1/0xf0 [ 513.467312][ T2856] __lock_acquire+0x2c66/0x7b50 [ 513.472183][ T2856] ? verify_lock_unused+0x140/0x140 [ 513.477411][ T2856] ? verify_lock_unused+0x140/0x140 [ 513.482616][ T2856] lock_acquire+0x19e/0x400 [ 513.487110][ T2856] ? __flush_work+0xfa/0x210 [ 513.489130][T11250] usb 3-1: Using ep0 maxpacket: 32 [ 513.491692][ T2856] ? __lock_acquire+0x7b50/0x7b50 [ 513.491722][ T2856] ? read_lock_is_recursive+0x10/0x10 [ 513.507199][ T2856] ? start_flush_work+0x784/0x830 [ 513.512232][ T2856] ? __lock_acquire+0x13dc/0x7b50 [ 513.517269][ T2856] __flush_work+0x116/0x210 [ 513.521924][ T2856] ? __flush_work+0xfa/0x210 [ 513.526533][ T2856] ? flush_work+0x20/0x20 [ 513.530887][ T2856] ? try_to_grab_pending+0xfb/0x820 [ 513.536108][ T2856] ? mark_lock+0x94/0x320 [ 513.540670][ T2856] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 513.546656][ T2856] ? lock_chain_count+0x20/0x20 [ 513.551503][ T2856] ? mark_lock+0x94/0x320 [ 513.556130][ T2856] ? __cancel_work_timer+0x36a/0x560 [ 513.561563][ T2856] __cancel_work_timer+0x3f4/0x560 [ 513.566716][ T2856] ? cancel_work_sync+0x20/0x20 [ 513.571683][ T2856] ? __cancel_work+0x1f9/0x2e0 [ 513.576470][ T2856] ? lockdep_hardirqs_on+0x94/0x140 [ 513.581668][ T2856] ? __cancel_work+0x27b/0x2e0 [ 513.586451][ T2856] ? cancel_work+0x20/0x20 [ 513.590885][ T2856] ? __rwlock_init+0x140/0x140 [ 513.595749][ T2856] hci_request_cancel_all+0xcc/0x300 [ 513.601057][ T2856] hci_dev_do_close+0x4e/0x1020 [ 513.605931][ T2856] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 513.609290][T11250] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.611856][ T2856] ? _raw_spin_unlock+0x40/0x40 [ 513.626862][ T2856] hci_rfkill_set_block+0x101/0x180 [ 513.632088][ T2856] ? rcu_lock_release+0x20/0x20 [ 513.632859][T11250] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 513.636951][ T2856] rfkill_set_block+0x1c1/0x3c0 [ 513.636984][ T2856] rfkill_epo+0x75/0x170 [ 513.655149][ T2856] rfkill_op_handler+0x76/0x220 [ 513.659229][T11250] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 513.660009][ T2856] process_one_work+0x867/0xff0 [ 513.671377][T11250] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 513.675766][ T2856] ? worker_detach_from_pool+0x240/0x240 [ 513.675795][ T2856] ? lockdep_hardirqs_off+0x70/0x100 [ 513.689517][T11250] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 513.694594][ T2856] ? _raw_spin_lock_irq+0xb7/0xf0 [ 513.694621][ T2856] ? _raw_spin_lock_irqsave+0x100/0x100 [ 513.700328][T11250] usb 3-1: config 1 interface 1 has no altsetting 0 [ 513.709720][ T2856] ? wq_worker_running+0x97/0x170 [ 513.709754][ T2856] worker_thread+0xad7/0x12a0 [ 513.709782][ T2856] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 513.709807][ T2856] kthread+0x42e/0x520 [ 513.709824][ T2856] ? rcu_lock_release+0x20/0x20 [ 513.751411][ T2856] ? kthread_blkcg+0xd0/0xd0 [ 513.755994][ T2856] ret_from_fork+0x1f/0x30 [ 513.760420][ T2856] [ 513.840089][ T7702] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 513.860722][ T7702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 513.868838][ T7702] usb 5-1: Product: syz [ 513.870522][T11250] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 513.901721][T11250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.909797][ T7702] usb 5-1: Manufacturer: syz [ 513.909819][ T7702] usb 5-1: SerialNumber: syz [ 513.925663][ T7702] usb 5-1: config 0 descriptor?? [ 513.947985][T11250] usb 3-1: Product: syz [ 513.959141][T11250] usb 3-1: Manufacturer: syz [ 513.963858][T11250] usb 3-1: SerialNumber: syz [ 513.996665][ T7702] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 514.008995][ T7702] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 514.016233][ T7702] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 514.095338][ T7702] usb 5-1: USB disconnect, device number 39 [ 514.241356][T11250] usb 3-1: selecting invalid altsetting 0 [ 514.459277][T11250] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 514.719270][T11250] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -2095252306 [ 514.927881][ T7702] usb 3-1: USB disconnect, device number 42