last executing test programs: 3.862765636s ago: executing program 2 (id=1327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.826157227s ago: executing program 2 (id=1328): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x3, 0x1, &(0x7f0000000040)={0x12, "cc9efc7ddb01702fa9a7ff7d040b00000000000700"}}) 3.54240121s ago: executing program 1 (id=1334): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606fb7a9f3e0200000400000002003e00cd000000b80100000000000040000000000000009501000000000000cd0b00000500380001000400b106040403"], 0x107) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.416838361s ago: executing program 1 (id=1338): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8042, 0x2a) fcntl$setlease(r0, 0x400, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x21, 0x3, 0x0, {0x3}}, 0x21) 2.585594081s ago: executing program 1 (id=1352): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r1, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) 2.555870051s ago: executing program 4 (id=1343): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88400, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r0], 0x0) 2.518445332s ago: executing program 1 (id=1344): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x14052, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=cp861,umask=00000000000000000000006,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,iocharset=cp865,umask=00000000000000006000000,uid=', @ANYRESHEX=0x0, @ANYBLOB="0045c7c228815555c029b2e6dafc085bb0b34d7f6e40e53c710e5b231d4c7595747fefe9d8ce4f7cc02443006c1ca70ac86dedd295a9c121f417faeb"], 0x1, 0x1521, &(0x7f0000000880)="$eJzs3AuYT9XaAPD3XWvtMST9m+QyrLXezT+5LJMkuSTJJUmSJMktIWmSIwmJIbekIQnJZUguQ0guE5PG/X6XhCRpkiQkt2R9z4TP6dT5Tuc7fcf3nHl/z/N/rHf2ftd+935nz75gvu0ytGbjWtUaEhH8S/DCH0kAEAsAAwHgGgAIAKBcXLm4rOU5JSb9axthf66HUq90BexK4v5nb9z/7I37n71x/7M37n/2xv3P3rj/2Rv3n7HsbPP0gtfyJ/t++P1/dsbX//8MF08++HJt6eu7AsT80Tzuf/bG/f+PFfyRlbj/2Rv3P7uKvdIFsP8H+PzPDnL83SXc/+yN+89Ydnal3z9f6Q9EsvcxuNLff4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGsofT/jIFAJfGV7ouxhhjjDHGGGOM/Xl8jitdAWOMMcYYY4wxxv7vIQiQoCCAGMgBsZATcoEAgKshD1wDEbgW4uA6yAvXQz7IDwWgIMRDISgMGgzEAEEIRaAoROEGKAY3QnEoASWhFDgoDQlwE5SBm6Es3ALl4FYoD7dBBagIlaAy3A5V4A6oCndCNbgLqkMNqAm14G6oDfdAHbgX6sJ9UA/uh/rwADSAB6EhPASN4GFoDI9AE3gUmkIzaA4toOX/Kv8F6AEvQk/oBUnQG/rAS9AX+kF/GAAD4WUYBK/AYHgVkmEIDIXXYBi8DsPhDRgBI2EUvAmj4S0YA2NhHIyHFJgAE+FtmATvwGSYAlNhGqTCdJgB78JMmAWz4T2YA+/DXJgH82EBpMEHsBAWQTp8CIvhI8iAJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATPoVdsBv2wGewFz7/J/NP/U1+VwQEFChQocIYjMFYzIm5MBfmxtyYB/NgBCMYh3GYF/NiPsyHBbAAxmM8FsbCaNAgIWERLIJRjGIxLIbFsTiWxJLo0GECJmAZvBnLYlksh+WwPJbHClgRK2JlrIxVsApWxapYDathdayONbEm3o13Y2+sg3WwLtbFeljv0uspbIgNsRE2wsbYGJtgE2yKTbE5NseW2BJbYStsja2xLbbFdtgO22N7TMRE7IAdsCN2xE7YCTtjZ+yCXbArdsNumS/kAHwRX8ReWF30xj7YB/tico7+OAAH4Ms4CF/BV/BVTMYhOBRfw9fwdRyOJ3EEjsRROAqriLdwDI5FEuMxBVNwIk7ESTgJJ+MUnILTMBWn4wycgTNxFs7C93AOvo/v4zychwswDdNwIS7CdEzHxXgKM3AJLsVluBxX4HJchatxFa7FdbgWN+AG3ISbcAtuwW24DT/Gj/ETVAD4Ke7G3ZiMe3Ev7sN9uB/34wE8gJmYiQfxIB7CQ3gYD+MRPIJH8Rgex2N4Ak/gSTyFp/E0nsWzeA6fi/+60Scl1iSDyKKEEjEiRsSKWJFL5BK5RW6RR+QRERERcSJO5BV5RT6RTxQQBUS8iBeFRWFhhBEkwhgAEFERFcVEMVFcFBclRUnhhBMJIkGUEWVEWVFWlBO3ivLiNlFBVBRtXGVRWVQRbV1VcaeoJqqJ6qKGqClqiVqitqgt6og6oq6oK+qJeqK+eEA0EL2xPz4ksjrTWAzBJmIoNhXNhLz4E6yVGI6tRRvRVjwhRuIIbC9auUTxtOggxmBH8RcxFp8VncV47CKeF11FN9FdvCB6iNaup+glJmNv0UdMw76in+gvBoiZWEO8h3Ny1hSvimQxRAwVr4kF+LoYLt4QI8RIMUq8KUaLt8QYMVaME+NFipggJoq3xSTxjpgspoipYppIFdPFDPGumClmidniPTFHvC/minlivlgg0sQHYqFYJNLFh2Kx+EhkiCViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLj8UO8YnYKT4Vu8RusUd8JvaKz8U+8YXYL74UB8RXIlN8LQ6Kb8Qh8a04LL4TR8T34qg4Jo6LH8QJ8aM4KU6J0+KMOCt+EufEz+K88AIkSiGlVDKQMTKHjJU5ZS55lcwtg4tH91oZJ6+TeeX1Mp/MLwvIgjJeFpKFpZZGWkkylEVkURmVN8hi8kZZXJaQJWUp6WRpmSBvkmXkzbKsvEWWk7fK8vI2WUFWlJVkZXm7rCLvkBC5sI3qsoasKWvJu2US3CPryHtlXXmfrCfvl/XlA7KBfFA2lA/JRvJh2Vg+IpvIR2VT2Uw2ly1kS/mYbCUfl61lG9lWPiHbySdle/mUTJRPyw7SX/wWeVZ2ls/JLvJ52VV2k93lz/K89LKn7CWhN8g+8iXZV/aT/eUAOVC+LAfJV+Rg+apMlkPkUPmaHCZfl8PlG3KEHClHyTflaPmWHCPHynFyvEyRE+RE+bacJN+Rk+UUOVVOk4GcLvtfnGm2lP8w/+2/yU+V0+XgX7a+SW6WW+RWvNgK+YncKXfKXXKX3CP3yL1yr9wn98n9cr88IA/ITJkpD8qD8pA8JA/Lw/KIPCKPymPyjPxBnpA/ypPylDwlz8iz8qw8d/EYgEIllFRKBSpG5VCxKqfKpa5SudXVKo+6RkXUtSpOXafyqutVPpVfFVAFVbwqpAorrYyyilSoiqiiKqpuuFSlKqlKKadKqwR10z+Tr4qpG1VxVeJX+ZfqS/o79bVULVUr1Uq1Vq1VW9VWtVPtVHvVXiWqRNVBdVAdVUfVSXVSnVVn1UV1UV1VV9VddVc9VA/VU/VUSSpJ9VEvqb6qn+qvBqiB6mU1SMVc3JVkNVQNVcPUMDVcDVcj1Ag1So1So9VoNUaNUePUOJWiUtRENVFNUpPUZDVZTVVTVapKVTPUDDVTzVSz1Ww1R81Rc9VcNV/NV2kqTS1UC1W6SleL1WKVoZaoJWqZWqZWqBVqlVql1qg1ap1apzaoDSpDbVab1Va1VW1X29UOtUPtVDvVLrVL7VF71F61V+1T+9R+tV8dUAdUpspUB9VBdUgdUofVYXVEHVFH1VF1XB1XJ9QJdVKdVKfVaXVWnVXn1Dl1Xp3Puu0LRCACFWRdaWOC2CA2yBXkCnIHuYM8QZ4gEkSCuCAuyBtcH+QL8gcFgoJBfFAoKBzowAQ2EBePVDS4ISgW3BgUD0oEJYNSgQtKBwnBTUGZ4OagbHBLUC64NSgf3BZUCCoGlYLKwe1BleCOoGpwZ1AtuCuoHtQIaga1gruD2sE9QZ3g3qBucF9QL7g/qB88EDQIHgwaBg8FjYKHg8bBI0GT4NGgadAsaB60CFr+qfN7fzL/426T7qWTdG/dR7+k++p+ur8eoAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erKeoqfqaTpVT9cz9Lt6pp6lZ+v39Bz9vp6r5+n5eoFO0x/ohXqRTtcf6sX6I52hl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q4/1jv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ93cZ13ejTLKxJgYE2tiTS6Ty+Q2uU0ek8dETMTEmTiT1+Q1+Uw+U8AUMPEm3hQ2hU0WMmSKmCImaqKmmClmipvipqQpaZxxJsEkmDKmjClryppyppwpb8qbCqaCqWQqmdvN7eYOc4e509xp7jJ3mRqmhqllapnaprapY+qYuqauqWfqmfqmvmlgGpiGpqFpZBqZxqaxaWKamKamqWlumpuWpqVpZVqZ1qa1aWvamnamnWlv2ptEk2g6mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJskkmT6mj+lr+pr+pr8ZaAaaQWaQGWwGm2STbIaaoWaYGWaGm+FmhBlpRmWdPuYtM8aMNePMeJNiUsxEM9FMMpPMZDPZTDVTTapJNTPMDDPTzDSzzWwzx8wxc81cM9/MN2kmzSw0C026STeLzWKTYTLMUrPULDfLzUqz0qw2q81as9ash/Vmo9loNpvNZqvZarab7WaH2WF2mp1ml9ll9pg9Zq/Za/aZfWa/2W8OmAMm02Sag+agOWQOmcPmsDlijpij5qg5bo6bE+aEOWlOmtPmtDlr8l+8XnoTa3PaXPYqm9tebfPYa+zfxgVsQRtvC9nCVtt8Nv+vYmOtLW5L2JK2lHW2tE2wN/0mrmAr2kq2sr3dVrF32Kq/iWvbe2wde6+ta++ztezdv4rr2fttffuIbYAIYJvZRraFbWwfsU3so7apbWab2xa2nX3StrdP2UT7tO1gn/lNvNAusqvtGrvWrrO77G572p6xh+y39qz9yfa0vexA+7IdZF+xg+2rNtkO+U08yr5pR9u37Bg71o6z438TT7XTbKqdbmfYd+1MO+s3cZr9wM6x6XaunWfn2wW/xFk1pdsP7WL7kc2wASy1y+xyu8KutKv+u9ZldoPdaDfZnfZTu9Vus9vtx3bHpRthu9vusZ/ZvfZze9B+Y/fbL+0Be9hm2q9/ibP277D9zh6x39uj9pg9bn+wJ+yP6lJ21r7/YH+25623QEhAkhQFFEM5KJZyUi66inLT1ZSHrqEIXUtxdB3lpespH+WnAlSQ4qkQFSZNhiwRhVSEilKUbqBL5ZWkUuSoNCXQTVSGbqaydAuVo1upPN1GFagiVaLKdDtVoTuoKt1J1eguqk41qCbVorupNt1Ddeheqgv3UT26n+rTA9SAHqSG9BA1ooepMT1CTehRakrNqDm1oJb0GLWix6k1taG29AS1oyepPT1FifQ0daBnqCP9hTrRs9SZnqMu9Dx1pW7UnV6gHvQi9aRelES9qQ+9RH2pH/WnATSQXqZB9AoNplcpmYbQUHqNhtHrNJzeoBE0kkbRmzSa3qIxNJbG0XhKoQk0kd6mSfQOTaYpNJWmUSpNpxn0Ls2kWTSb3qM59D7NpXk0nxZQGn1AC2kRpdOHtJg+ogxaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbaePaQd9QjvpU9pFu2kPfUZ76XPaR1/QfvqSDtBXlElf00H6hg7Rt3SYvvO96Hs6SsfoOP1AJ+hHOkmn6DSdobP0E52jn+k8eYIQQxHKUIVBGBPmCGPDnGGu8Kowd3h1mCe8JoyE14Zx4XVh3vD6MF+YPywQFgzjw0Jh4VCHJrQhhWFYJCwaRsMbwmLhjWHxsERYMiwVurB0mBDeFJYJbw7LhreE5cJbw/LhbWGFsGL4yH2Vw9vDKuEdYdXwzrBaeFdYPawR1gxrhXeHtcN7wjrhvWHd8L6wbHh/WD98IGwQPhg2DB8KG4UPh43DR8Im4aNh07BZ2DxsEbYMHwtbhY+HrcM2YdvwibBd+GTYPnwqTAyfDjuEz/yy/P5Ff395Utg77BO+FL4Uen+vnB9dEE2LfhBdGF0UTY9+GF0c/SiaEV0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3RjdFPW+Vg5w6ISTTrnAxbgcLtbldLncVS63u9rlcde4iLvWxbnrXF53vcvn8rsCrqCLd4VcYaedcdaRC10RV9RF3Q2umLvRFXclXElXyjlX2iW4Fq6la+laucdda9fGtXVPuCfck+5J95R7yj3tOrhnXEf3F9fJPes6u+fcc+5519V1c93dC66Hm5DnwjmZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrMubGWum+vmu/kuzaW5hS7rnjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt9PtdLv8NRcmdXvdPrfP7Xf73QH3lct0X7uD7ht3yH3rDrvv3BH3vTvqjrnj7gd3wv3oTrpT7rQ74866n9w597M777xLiUyITIy8HZkUeScyOTIlMjUyLZIamR6ZEXk3MjMyKzI78l5kTuT9yNzIvMj8yIJIWuSDyMLIokh65MPI4shHkYzIksjSyLLI8siKiPeFtoa+iC/qo/4GX8zf6Iv7Er6kL+WdL+0T/E2+jL/Zl/W3+HL+Vl/e3+Yr+Iq+kn/UN/XNfHPfwrf0j/lW/nHf2rfxbf0Tvp1/0rf3T/lE/7Tv4J/xHf1ffCf/rO/sn/Nd/PO+q+/mu/sXfA//ou/pe/kk39v38S/5vr6f7+8H+IH+ZT/Iv+IH+1d9sh/ih/rX/DD/uh/u3/Aj/Eg/KuZNP/rSIzKM9yl+gp/o3/aT/Dtwp5/ip/ppPtVP9zP8u36mn+Vn+/f8HP++n+vn+fl+gU/zH/iFfpFP9x/6xf4jn+GXXHqp7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX67/9jv8J/4nf5Tv8vv9nv8Z36v/9zv81/4/f5Lf8B/5TP91/6g/8Yf8t/6w/47f8R/74/6Y/64/8Gf8D/6k/6UP+3P+LP+J3/O/+zP8/9ZY4wxxhj7QyZcHopfL7nwOr/37+SIv1q5DwBcva1g5l8vz7qjXJ/vwrifiG8XAQlP9+ry0KVP9epJSUkX182QEBSdB3Dpb4Ky/PL2/WK8BNrCk5AIbaDM79bfT3Q7SwD/4/zRWwFy/VVOLFyOL8//BQAm/c78jz0xamH58HTc/zD/PIDiRS/n5ITL8RJo+8v7lTZQ9u/Un7/VP6g/55cpAK3/Kic3XI4v158Aj8MzkPirNRljjDHGGGOMsQv6iUqdLj1/XvoXn7/3fB6vLufkKPXpf8f/6PmcMcYYY4wxxhhjV96z3bo/9VhiYptO//yg6v8q6w8PmsD/1cw8+N2B9wCXvqIA4F+cECBrIP+de7Hl37Kt5Iunzt8uWn7GB/D/o5V/xuAK/2BijDHGGGOM/eku3/T/+uvqShXEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+OXyd2pfeRMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+KwAA//+g6vrt") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1f, 0x3, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}}, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x802, 0x0) 2.354738324s ago: executing program 1 (id=1345): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x1000008, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x0, 0x0) 2.211833685s ago: executing program 1 (id=1346): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x18, &(0x7f0000000400)={0x0, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x10, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) 1.942275398s ago: executing program 2 (id=1348): socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.471566103s ago: executing program 2 (id=1350): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) 1.382260544s ago: executing program 2 (id=1351): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x9730, &(0x7f0000009800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000c000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000f9ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1.043190358s ago: executing program 3 (id=1357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f00000013c0)={@val={0x0, 0x8864}, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x6}, {0x8100, 0x1, 0x1, 0xa86}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "8f3889", 0x52, 0x21, 0x0, @private1, @private0, {[], {{0x4e22, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x0, "581ed9", 0x1, "b52f55"}, "2227a92d93fb2a036e7d186d99716089629387b2984dae9532e54cfe17d14fff44f30e3e00cb5c64bc549febefd7034f1de0d09aa066d790944959d784ab3a65c64f"}}}}}}}, 0x94) 930.13286ms ago: executing program 3 (id=1359): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x12c, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x74, 0x1, [@m_simple={0x70, 0x18, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\t\x00\x00\x00\x00'}]}, {0x35, 0x6, "c92acebef543cf5eac95ff99fd6f0f8ca3945cf1e27303fef4d7edee9dc07b8c204234f1518f815a1e6f9900be2053c30e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xa4, 0x1, [@m_simple={0x58, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0xa, 0x3, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @TCA_DEF_DATA={0xd, 0x3, 'trans=fd,'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x48, 0x17, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 787.325431ms ago: executing program 3 (id=1361): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x40}}, 0x0) 784.986741ms ago: executing program 4 (id=1362): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r0, 0x108000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) syz_clone(0x205040, 0x0, 0x0, 0x0, 0x0, 0x0) 722.211312ms ago: executing program 3 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x1, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x4) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) 591.367443ms ago: executing program 0 (id=1365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000300), 0xe918, r0}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 547.227824ms ago: executing program 2 (id=1366): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close(0x3) 546.706324ms ago: executing program 0 (id=1367): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @broadcast}}}, 0x108) 541.321684ms ago: executing program 3 (id=1368): syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f00000001c0)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$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") syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaadd"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) 516.245625ms ago: executing program 4 (id=1369): r0 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x40000, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 453.551635ms ago: executing program 0 (id=1370): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xefffffff, 0x0, 0xd]}]}]}, 0x38}}, 0x0) 398.157895ms ago: executing program 4 (id=1371): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x14000000, 0xffffffff}) read$FUSE(r1, 0x0, 0x0) 376.352466ms ago: executing program 0 (id=1372): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x8) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) 185.718938ms ago: executing program 4 (id=1373): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) mprotect(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 175.298008ms ago: executing program 3 (id=1374): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) 131.292408ms ago: executing program 0 (id=1375): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000004c0)={r1, 0x1}, &(0x7f0000000500)=0x8) 11.96636ms ago: executing program 0 (id=1376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x8c, r1, 0x1, 0x70bc27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @device_a, @initial, {0x6, 0x2}}, 0x627, @default, 0x1000, @val, @val, @void, @val={0x4, 0x6, {0xf, 0xab, 0x1, 0x6}}, @void, @val={0x5, 0x3, {0x3, 0x56}}, @val={0x25, 0x3, {0x1, 0x34, 0x4}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x1000, 0x0, 0x1, 0x0, {0x0, 0x84f, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0x1, 0x8}}, @void, @void, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40005}, 0x40810) 0s ago: executing program 4 (id=1377): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@newtaction={0x134, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x68, 0x1, [@m_bpf={0x64, 0xe, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0xa6, 0x2, 0x8, 0x3ad}, {0x43f, 0x5, 0x33, 0x2000200}, {0xfffd, 0xe2, 0xc0, 0x2}, {0xe, 0xe0, 0xa, 0x1ff}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0xb8, 0x1, [@m_nat={0x5c, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x31, 0x6, "dfa2e46668bdfeb90a1f19baf8f88d4bce8a9ffaab1356402d505c36607f09166862341b38d61f52d18d130149"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x58, 0xd, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x20000000, 0xcf4e, 0x2e4f7af}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15c3, 0x20000000}}]}, {0x6, 0x6, "f1f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): 8.208604][ T4708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.216935][ T4231] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 98.228063][ T4708] usb 4-1: Product: syz [ 98.232269][ T4708] usb 4-1: Manufacturer: syz [ 98.237451][ T4708] usb 4-1: SerialNumber: syz [ 98.242998][ T4231] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.262794][ T4708] usb 4-1: config 0 descriptor?? [ 98.268254][ T4231] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 98.279637][ T4231] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 98.291817][ T4260] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.308067][ T5005] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 98.315624][ T5005] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 98.366231][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 98.448280][ T4231] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.461009][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.478404][ T4231] usb 3-1: Product: syz [ 98.487351][ T4231] usb 3-1: Manufacturer: syz [ 98.528097][ T4260] usb 2-1: Using ep0 maxpacket: 8 [ 98.537584][ T5005] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 98.550113][ T4231] cdc_wdm 3-1:1.0: skipping garbage [ 98.560582][ T5005] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 98.590545][ T4231] cdc_wdm 3-1:1.0: skipping garbage [ 98.600433][ T4231] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 98.606619][ T4231] cdc_wdm 3-1:1.0: Unknown control protocol [ 98.648032][ T4260] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.680108][ T4260] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.690542][ T4260] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.700833][ T4260] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.715206][ T4260] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.724661][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.763810][ T5036] set_capacity_and_notify: 3 callbacks suppressed [ 98.763826][ T5036] loop4: detected capacity change from 0 to 256 [ 98.785881][ T5036] exfat: Deprecated parameter 'utf8' [ 98.791655][ T5036] exfat: Deprecated parameter 'namecase' [ 98.797345][ T5036] exfat: Deprecated parameter 'utf8' [ 98.813187][ T5036] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 98.843910][ T5036] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 98.864353][ T5036] exFAT-fs (loop4): hint_cluster is invalid (1) [ 98.874794][ T5036] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 98.884617][ T5036] exFAT-fs (loop4): error, failed to bmap (inode : ffff888060f98160 iblock : 9, err : -5) [ 98.895722][ T5036] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 98.903403][ T7] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 98.911182][ T5036] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 98.933295][ T4231] usb 3-1: USB disconnect, device number 4 [ 98.990741][ T144] attempt to access beyond end of device [ 98.990741][ T144] loop4: rw=1, want=34359738496, limit=256 [ 99.029049][ T4708] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 99.055565][ T4708] asix: probe of 4-1:0.251 failed with error -524 [ 99.058476][ T4260] usb 2-1: GET_CAPABILITIES returned 0 [ 99.081804][ T4260] usbtmc 2-1:16.0: can't read capabilities [ 99.140732][ T5040] loop4: detected capacity change from 0 to 256 [ 99.232040][ T4260] usb 4-1: USB disconnect, device number 3 [ 99.279072][ T7] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 99.299390][ T7] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 99.307546][ T7] usb 1-1: config 0 has no interface number 0 [ 99.316866][ T7] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 99.328589][ T7] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.344932][ T5044] loop4: detected capacity change from 0 to 512 [ 99.351396][ T7] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 99.351426][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.374915][ T4632] usb 2-1: USB disconnect, device number 3 [ 99.383452][ T7] usb 1-1: config 0 descriptor?? [ 99.416852][ T5046] loop2: detected capacity change from 0 to 512 [ 99.493843][ T5044] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.516969][ T5044] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.531916][ T5044] EXT4-fs (loop4): 1 truncate cleaned up [ 99.537739][ T5044] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 99.612608][ T5044] EXT4-fs (loop4): shut down requested (2) [ 99.650726][ T7] usb 1-1: USB disconnect, device number 2 [ 99.787534][ T5051] netlink: 'syz.4.281': attribute type 1 has an invalid length. [ 99.856221][ T5053] loop3: detected capacity change from 0 to 512 [ 99.955995][ T5053] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.025443][ T5053] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.112103][ T5049] loop2: detected capacity change from 0 to 32768 [ 100.172708][ T5049] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.280 (5049) [ 100.251208][ T5053] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 100.304925][ T5053] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.282: corrupted inode contents [ 100.317499][ T5049] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 100.317554][ T5049] BTRFS info (device loop2): setting nodatasum [ 100.317572][ T5049] BTRFS info (device loop2): enabling auto defrag [ 100.317620][ T5049] BTRFS info (device loop2): disabling tree log [ 100.317636][ T5049] BTRFS info (device loop2): using free space tree [ 100.317651][ T5049] BTRFS info (device loop2): has skinny extents [ 100.351693][ T5064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 100.370493][ T5053] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #12: comm syz.3.282: mark_inode_dirty error [ 100.458266][ T5053] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.282: corrupted inode contents [ 100.493558][ T5053] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.282: mark_inode_dirty error [ 100.506182][ T5053] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.282: corrupted inode contents [ 100.522693][ T5053] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 100.533863][ T5053] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.282: corrupted inode contents [ 100.546307][ T5053] EXT4-fs error (device loop3): ext4_truncate:4286: inode #12: comm syz.3.282: mark_inode_dirty error [ 100.558610][ T5053] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 100.568726][ T5053] EXT4-fs (loop3): 1 truncate cleaned up [ 100.577641][ T5053] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,nolazytime,auto_da_alloc=0x0000000000000005,minixdf,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2,errors=continue. Quota mode: writeback. [ 100.654706][ T5049] BTRFS info (device loop2): enabling ssd optimizations [ 100.665102][ T5053] EXT4-fs (loop3): shut down requested (2) [ 100.676916][ T5053] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 100.715409][ T5053] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 100.823107][ T5099] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.936150][ T5102] loop4: detected capacity change from 0 to 256 [ 101.069764][ T5111] loop1: detected capacity change from 0 to 128 [ 101.426653][ T5011] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (5011) [ 101.730549][ T5139] loop0: detected capacity change from 0 to 1024 [ 101.778590][ T5137] loop3: detected capacity change from 0 to 128 [ 101.872846][ T5139] EXT4-fs (loop0): Ignoring removed bh option [ 102.032064][ T5139] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000000,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 102.137621][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 102.557332][ T5180] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.571308][ T5179] netlink: 104 bytes leftover after parsing attributes in process `syz.1.327'. [ 102.937158][ T5182] ntfs: volume version 3.1. [ 103.755889][ T5219] XFS (loop0): Mounting V5 Filesystem [ 103.852164][ T5219] XFS (loop0): Ending clean mount [ 103.886072][ T5238] set_capacity_and_notify: 3 callbacks suppressed [ 103.886087][ T5238] loop4: detected capacity change from 0 to 512 [ 103.933533][ T4188] XFS (loop0): Unmounting Filesystem [ 103.949013][ T5238] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.991787][ T5238] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.349: bad orphan inode 131083 [ 104.005016][ T5238] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.296701][ T5248] device batadv_slave_0 entered promiscuous mode [ 104.319921][ T5248] device batadv_slave_0 left promiscuous mode [ 104.528262][ T5140] Bluetooth: hci4: command 0x0407 tx timeout [ 104.746136][ T5264] loop0: detected capacity change from 0 to 512 [ 104.798183][ T5264] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.860092][ T5264] EXT4-fs (loop0): 1 truncate cleaned up [ 104.876096][ T5264] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 105.085263][ T4230] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.204572][ T5278] program syz.0.364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.488524][ T4230] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 105.510930][ T4230] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.546548][ T4230] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.587355][ T5260] loop4: detected capacity change from 0 to 40427 [ 105.588241][ T4230] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 105.622267][ T4230] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 105.633495][ T4230] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.646845][ T4230] usb 3-1: config 1 interface 1 has no altsetting 0 [ 105.656848][ T5260] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 105.687061][ T5260] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 105.701883][ T5260] F2FS-fs (loop4): invalid crc value [ 105.734275][ T5260] F2FS-fs (loop4): Found nat_bits in checkpoint [ 105.748542][ T5291] loop3: detected capacity change from 0 to 4096 [ 105.848066][ T4230] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.860133][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.872150][ T4230] usb 3-1: Product: syz [ 105.876660][ T5260] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 105.885208][ T5260] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 105.893455][ T4230] usb 3-1: Manufacturer: syz [ 105.905087][ T4230] usb 3-1: SerialNumber: syz [ 105.911566][ T5296] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.923918][ T5275] loop1: detected capacity change from 0 to 32768 [ 105.979816][ T4230] cdc_mbim 3-1:1.0: skipping garbage [ 105.995649][ T4230] cdc_mbim 3-1:1.0: skipping garbage [ 106.008404][ T4230] cdc_mbim 3-1:1.0: skipping garbage [ 106.018493][ T4230] cdc_mbim 3-1:1.0: MBIM functional descriptor missing [ 106.043669][ T4230] cdc_mbim 3-1:1.0: bind() failure [ 106.065685][ T5275] XFS (loop1): Mounting V5 Filesystem [ 106.172670][ T4205] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 106.200393][ T5275] XFS (loop1): Ending clean mount [ 106.207924][ T4205] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 106.268166][ T5275] XFS (loop1): Quotacheck needed: Please wait. [ 106.346437][ T5275] XFS (loop1): Quotacheck: Done. [ 106.536062][ T4192] XFS (loop1): Unmounting Filesystem [ 106.881816][ T5325] loop3: detected capacity change from 0 to 64 [ 107.051919][ T5325] Trying to free block not in datazone [ 107.157919][ T5140] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.199810][ T5319] loop0: detected capacity change from 0 to 40427 [ 107.241927][ T5331] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 107.273719][ T5331] netlink: 'syz.3.382': attribute type 2 has an invalid length. [ 107.285234][ T5319] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 107.294684][ T5319] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 107.338013][ T4706] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.348863][ T5319] F2FS-fs (loop0): invalid crc value [ 107.395592][ T5319] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 107.415811][ T5336] loop3: detected capacity change from 0 to 512 [ 107.421960][ T5140] usb 5-1: Using ep0 maxpacket: 16 [ 107.481285][ T5319] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 107.488778][ T5319] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.512937][ T5336] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.548128][ T5140] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 107.560682][ T5140] usb 5-1: config 0 has no interface number 0 [ 107.574882][ T5140] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.597963][ T4706] usb 2-1: Using ep0 maxpacket: 16 [ 107.625275][ T5336] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.383: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 129, max 4(4), depth 0(0) [ 107.663459][ T5336] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.383: couldn't read orphan inode 13 (err -117) [ 107.678984][ T4188] attempt to access beyond end of device [ 107.678984][ T4188] loop0: rw=2049, want=45104, limit=40427 [ 107.685630][ T5336] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.718209][ T5140] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 107.741522][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 107.749361][ T4706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.784487][ T4706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.795178][ T5140] usb 5-1: Product: syz [ 107.809577][ T5140] usb 5-1: SerialNumber: syz [ 107.815381][ T4706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.835722][ T5140] usb 5-1: config 0 descriptor?? [ 107.889590][ T5133] usb 3-1: USB disconnect, device number 5 [ 107.896394][ T4706] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.907753][ T5140] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 107.921709][ T4706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.937284][ T5140] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input7 [ 107.983253][ T4706] usb 2-1: config 0 descriptor?? [ 108.143536][ T5133] usb 5-1: USB disconnect, device number 2 [ 108.158088][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 108.165870][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 108.216761][ T5133] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 108.457668][ T5357] loop2: detected capacity change from 0 to 256 [ 108.492334][ T4706] microsoft 0003:045E:07DA.0001: unbalanced collection at end of report description [ 108.518889][ T4706] microsoft 0003:045E:07DA.0001: parse failed [ 108.525040][ T4706] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 108.547044][ T5360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.392'. [ 108.566570][ T5360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.392'. [ 108.591738][ T5360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.392'. [ 108.629349][ T5360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.392'. [ 108.638587][ T5357] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x726cdf83, utbl_chksum : 0xe619d30d) [ 108.640165][ T5342] loop3: detected capacity change from 0 to 32768 [ 108.722227][ T26] audit: type=1800 audit(1777886860.324:7): pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.390" name="file1" dev="loop2" ino=1048609 res=0 errno=0 [ 108.750353][ T7] usb 2-1: USB disconnect, device number 4 [ 108.800676][ T5357] exFAT-fs (loop2): invalid start cluster (17) [ 109.034100][ T4230] kernel write not supported for file /146/clear_refs (pid: 4230 comm: kworker/1:5) [ 109.131406][ T5368] loop0: detected capacity change from 0 to 8192 [ 109.237434][ T5374] loop3: detected capacity change from 0 to 128 [ 109.280080][ T5374] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.312628][ T5374] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.533783][ T4205] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.737888][ T5133] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.825695][ T5384] loop0: detected capacity change from 0 to 8192 [ 109.856950][ T5386] Â: renamed from pim6reg1 [ 109.875194][ T5372] loop2: detected capacity change from 0 to 32768 [ 109.891626][ T5384] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 109.916892][ T5384] REISERFS (device loop0): using ordered data mode [ 109.965754][ T5384] reiserfs: using flush barriers [ 109.987893][ T5133] usb 2-1: Using ep0 maxpacket: 32 [ 109.992145][ T5372] XFS (loop2): Mounting V5 Filesystem [ 110.004515][ T5384] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.023118][ T5384] REISERFS (device loop0): checking transaction log (loop0) [ 110.068565][ T5384] REISERFS (device loop0): Using r5 hash to sort names [ 110.082521][ T5384] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 110.118062][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 110.135271][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 110.196649][ T5382] loop3: detected capacity change from 0 to 32768 [ 110.268045][ T5133] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 110.277143][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 110.293545][ T5382] JBD2: Ignoring recovery information on journal [ 110.392680][ T5133] usb 2-1: Product: syz [ 110.401365][ T5382] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 110.426556][ T5133] usb 2-1: SerialNumber: syz [ 110.457584][ T5133] usb 2-1: config 0 descriptor?? [ 110.484648][ T5372] XFS (loop2): Ending clean mount [ 110.667969][ T4194] ocfs2: Unmounting device (7,3) on (node local) [ 110.695231][ T5396] loop4: detected capacity change from 0 to 32768 [ 110.704853][ T4196] XFS (loop2): Unmounting Filesystem [ 110.714697][ T5140] usb 2-1: USB disconnect, device number 5 [ 110.835596][ T5403] netlink: 27 bytes leftover after parsing attributes in process `syz.0.407'. [ 110.905133][ T5396] XFS (loop4): Mounting V5 Filesystem [ 110.957986][ T5409] loop0: detected capacity change from 0 to 1024 [ 111.000138][ T5409] EXT4-fs (loop0): Ignoring removed orlov option [ 111.006655][ T5409] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.048205][ T5409] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,dioread_nolock,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 111.081006][ T5396] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 111.186482][ T5396] XFS (loop4): Starting recovery (logdev: internal) [ 111.292669][ T5396] XFS (loop4): Ending recovery (logdev: internal) [ 111.346565][ T5396] XFS (loop4): User initiated shutdown received. [ 111.409759][ T5396] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 111.528552][ T5396] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 111.579498][ T5426] loop2: detected capacity change from 0 to 1024 [ 111.601866][ T4195] XFS (loop4): Unmounting Filesystem [ 111.638386][ T5426] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 111.716430][ T5426] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,resgid=0x0000000000000000,. Quota mode: writeback. [ 111.916309][ T5426] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz.2.409: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 112.288588][ T5431] loop1: detected capacity change from 0 to 40427 [ 112.299027][ T5416] loop3: detected capacity change from 0 to 40427 [ 112.324861][ T5431] F2FS-fs (loop1): invalid crc value [ 112.352862][ T5431] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.395281][ T5416] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 112.458119][ T5416] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 112.528335][ T5416] F2FS-fs (loop3): invalid crc value [ 112.566679][ T5416] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.680170][ T5431] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.885200][ T5416] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 112.897128][ T5416] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 112.915861][ T26] audit: type=1800 audit(1777886864.514:8): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.416" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 112.996965][ T4192] attempt to access beyond end of device [ 112.996965][ T4192] loop1: rw=2049, want=45104, limit=40427 [ 113.188095][ T4706] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.488040][ T4706] usb 3-1: Using ep0 maxpacket: 32 [ 113.508234][ T4231] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.624343][ T4706] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 113.643570][ T4706] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 113.661603][ T5488] netlink: set zone limit has 4 unknown bytes [ 113.700066][ T4706] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 113.741378][ T4706] usb 3-1: config 1 has no interface number 0 [ 113.747560][ T4706] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.818947][ T4706] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 113.862455][ T4706] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 113.888538][ T4706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.938327][ T4231] usb 1-1: config 32 has an invalid interface number: 97 but max is 0 [ 113.955387][ T4231] usb 1-1: config 32 has no interface number 0 [ 113.971680][ T4231] usb 1-1: too many endpoints for config 32 interface 97 altsetting 97: 39, using maximum allowed: 30 [ 113.984165][ T4231] usb 1-1: config 32 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 114.001870][ T4706] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 114.012943][ T4231] usb 1-1: config 32 interface 97 has no altsetting 0 [ 114.021013][ T4231] usb 1-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 114.031008][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.219249][ T4706] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 114.293190][ T9] hfsplus: b-tree write err: -5, ino 25 [ 114.313804][ T9] hfsplus: b-tree write err: -5, ino 4 [ 114.343912][ T9] hfsplus: b-tree write err: -5, ino 2 [ 114.368108][ T4231] usb 1-1: string descriptor 0 read error: -71 [ 114.382490][ T4231] usb-storage 1-1:32.97: USB Mass Storage device detected [ 114.467569][ T4231] usb-storage 1-1:32.97: Quirks match for vid 057b pid 0000: 1 [ 114.483709][ T4231] usb-storage 1-1:32.97: This device (057b,0000,0000 S 79 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 114.483709][ T4231] Please send a copy of this message to and [ 114.896040][ T5504] set_capacity_and_notify: 1 callbacks suppressed [ 114.896055][ T5504] loop3: detected capacity change from 0 to 131072 [ 114.949624][ T5504] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 114.959182][ T5504] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.008305][ T5504] F2FS-fs (loop3): invalid crc value [ 115.024950][ T4231] usb 1-1: USB disconnect, device number 3 [ 115.085541][ T5504] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.153305][ T5504] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 115.160539][ T5504] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 115.250478][ T4709] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 115.266962][ T5504] F2FS-fs (loop3): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 115.384641][ T5530] loop0: detected capacity change from 0 to 512 [ 115.413597][ T5516] loop4: detected capacity change from 0 to 32768 [ 115.516308][ T5530] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.455: invalid indirect mapped block 4294967295 (level 1) [ 115.564817][ T5516] XFS (loop4): Mounting V5 Filesystem [ 115.571407][ T5530] EXT4-fs (loop0): Remounting filesystem read-only [ 115.578650][ T5530] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.455: invalid indirect mapped block 4294967295 (level 1) [ 115.595468][ T5530] EXT4-fs (loop0): Remounting filesystem read-only [ 115.669818][ T5530] EXT4-fs (loop0): 2 truncates cleaned up [ 115.678689][ T5530] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 115.833352][ T5516] XFS (loop4): Ending clean mount [ 115.840931][ T5530] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.455: bg 0: block 5: invalid block bitmap [ 115.928942][ T5133] usb 3-1: USB disconnect, device number 6 [ 115.956340][ T5530] EXT4-fs (loop0): Remounting filesystem read-only [ 115.963925][ T5133] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 116.052727][ T4195] XFS (loop4): Unmounting Filesystem [ 116.252046][ T5561] loop1: detected capacity change from 0 to 512 [ 116.406226][ T5561] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.453133][ T5561] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.474810][ T5548] syz.3.457 (5548) used greatest stack depth: 19184 bytes left [ 116.587970][ T4706] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.601638][ T5561] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.465: corrupted inode contents [ 116.622853][ T5573] openvswitch: netlink: Actions may not be safe on all matching packets [ 116.642774][ T5561] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #2: comm syz.1.465: mark_inode_dirty error [ 116.670746][ T5572] loop2: detected capacity change from 0 to 512 [ 116.683064][ T5561] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.465: corrupted inode contents [ 116.750646][ T5572] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.766310][ T5574] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.465: corrupted inode contents [ 116.853269][ T5572] EXT4-fs (loop2): 1 truncate cleaned up [ 116.868409][ T4706] usb 1-1: Using ep0 maxpacket: 16 [ 116.876924][ T5572] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,user_xattr,. Quota mode: none. [ 116.896446][ T5574] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #2: comm syz.1.465: mark_inode_dirty error [ 116.957729][ T5574] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.465: corrupted inode contents [ 116.983346][ T5574] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.465: mark_inode_dirty error [ 116.997969][ T4706] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 117.083088][ T5574] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.465: corrupted inode contents [ 117.115199][ T5574] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #2: comm syz.1.465: mark_inode_dirty error [ 117.148054][ T5589] vivid-008: disconnect [ 117.171859][ T5584] vivid-008: reconnect [ 117.207989][ T5591] program syz.3.475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.263014][ T4706] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 117.284538][ T4706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.293502][ T4706] usb 1-1: Product: syz [ 117.298634][ T4706] usb 1-1: Manufacturer: syz [ 117.303300][ T4706] usb 1-1: SerialNumber: syz [ 117.334815][ T5594] loop4: detected capacity change from 0 to 64 [ 117.341497][ T4706] r8152-cfgselector 1-1: config 0 descriptor?? [ 117.465098][ T5601] loop1: detected capacity change from 0 to 128 [ 117.494359][ T26] audit: type=1800 audit(1777886869.094:9): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.477" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 117.528391][ T5601] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 117.613118][ T5601] hpfs: filesystem error: improperly stopped [ 117.619740][ T4706] r8152-cfgselector 1-1: Unknown version 0x0000 [ 117.636875][ T5601] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 117.648005][ T5604] program syz.3.481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.658459][ T4706] r8152-cfgselector 1-1: Unknown version 0x0000 [ 117.668435][ T5601] hpfs: You really don't want any checks? You are crazy... [ 117.676126][ T5601] hpfs: hpfs_map_sector(): read error [ 117.688021][ T4706] r8152-cfgselector 1-1: bad CDC descriptors [ 117.711791][ T5601] hpfs: code page support is disabled [ 117.774062][ T5601] hpfs: hpfs_map_4sectors(): unaligned read [ 117.781510][ T4706] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 117.804743][ T5601] hpfs: hpfs_map_4sectors(): unaligned read [ 117.818450][ T5609] tap0: tun_chr_ioctl cmd 1074025677 [ 117.823944][ T5601] hpfs: filesystem error: unable to find root dir [ 117.834707][ T5609] tap0: linktype set to 776 [ 117.889578][ T5601] hpfs: hpfs_map_4sectors(): unaligned read [ 117.922210][ T5601] hpfs: hpfs_map_sector(): read error [ 117.994890][ T4706] usb 1-1: USB disconnect, device number 4 [ 118.417678][ T5639] loop1: detected capacity change from 0 to 1024 [ 118.450000][ T5641] loop4: detected capacity change from 0 to 1024 [ 118.527934][ T5639] EXT4-fs (loop1): Ignoring removed orlov option [ 118.535183][ T5639] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.658947][ T5639] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,dioread_nolock,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 119.204781][ T5669] Zero length message leads to an empty skb [ 119.398264][ T4706] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.603699][ T5655] loop4: detected capacity change from 0 to 40427 [ 119.631659][ T5655] F2FS-fs (loop4): invalid crc value [ 119.660156][ T5655] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.794044][ T5655] F2FS-fs (loop4): Start checkpoint disabled! [ 119.825014][ T5655] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 119.878690][ T4706] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.968170][ T4706] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 119.989837][ T4706] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 120.076744][ T5692] sp0: Synchronizing with TNC [ 120.097062][ T5695] sp0: Found TNC [ 120.169652][ T5697] loop4: detected capacity change from 0 to 512 [ 120.280312][ T5697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 120.294087][ T5697] System zones: 1-12 [ 120.307511][ T5697] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.520: missing EA_INODE flag [ 120.326540][ T5697] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.520: error while reading EA inode 12 err=-117 [ 120.329459][ T4706] usb 4-1: string descriptor 0 read error: -22 [ 120.350160][ T5697] EXT4-fs (loop4): 1 orphan inode deleted [ 120.357357][ T5697] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 120.366734][ T4706] usb 4-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 120.447098][ T4706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.508113][ T5710] loop2: detected capacity change from 0 to 256 [ 120.728133][ T5133] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.967859][ T5133] usb 2-1: Using ep0 maxpacket: 32 [ 121.034995][ T5725] loop4: detected capacity change from 0 to 4096 [ 121.059662][ T5725] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 121.087578][ T4706] usb 4-1: USB disconnect, device number 4 [ 121.123088][ T5725] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 121.140171][ T5133] usb 2-1: unable to get BOS descriptor or descriptor too short [ 121.160257][ T5725] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 121.211728][ T5725] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 121.218484][ T5133] usb 2-1: config 128 has an invalid interface number: 207 but max is 1 [ 121.230224][ T5725] ntfs: volume version 3.1. [ 121.246309][ T5133] usb 2-1: config 128 has an invalid interface number: 207 but max is 1 [ 121.264038][ T5133] usb 2-1: config 128 has an invalid interface number: 63 but max is 1 [ 121.290150][ T5133] usb 2-1: config 128 has no interface number 0 [ 121.305965][ T5133] usb 2-1: config 128 has no interface number 1 [ 121.319321][ T5133] usb 2-1: config 128 interface 207 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.335452][ T5133] usb 2-1: config 128 interface 207 has no altsetting 0 [ 121.342809][ T5133] usb 2-1: config 128 interface 207 has no altsetting 1 [ 121.352095][ T5133] usb 2-1: config 128 interface 63 has no altsetting 0 [ 121.395466][ T4195] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 121.525607][ T5133] usb 2-1: New USB device found, idVendor=12d1, idProduct=04bd, bcdDevice=fc.d2 [ 121.552865][ T5133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.562082][ T5133] usb 2-1: Product: syz [ 121.566302][ T5133] usb 2-1: Manufacturer: syz [ 121.571426][ T5133] usb 2-1: SerialNumber: syz [ 121.718194][ T4709] kernel write not supported for file /sequencer (pid: 4709 comm: kworker/1:19) [ 121.780828][ T4706] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.837628][ T5737] loop4: detected capacity change from 0 to 8192 [ 121.888890][ T5737] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 121.908001][ T5737] REISERFS (device loop4): using ordered data mode [ 121.919289][ T5133] option 2-1:128.207: GSM modem (1-port) converter detected [ 121.927314][ T5737] reiserfs: using flush barriers [ 121.939855][ T5737] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.972451][ T5737] REISERFS (device loop4): checking transaction log (loop4) [ 122.007235][ T5133] usb 2-1: USB disconnect, device number 6 [ 122.083113][ T5133] option 2-1:128.207: device disconnected [ 122.184351][ T4706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.194322][ T5749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'. [ 122.208531][ T4706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.221722][ T5737] REISERFS (device loop4): Using tea hash to sort names [ 122.229651][ T5751] loop3: detected capacity change from 0 to 64 [ 122.237219][ T5737] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 122.252454][ T4706] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 122.261873][ T4706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.270432][ T5737] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 122.282298][ T4706] usb 1-1: config 0 descriptor?? [ 122.376810][ T5737] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 122.762860][ T4706] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 122.922768][ T5776] loop4: detected capacity change from 0 to 512 [ 122.953938][ T4706] playstation 0003:054C:0DF2.0002: Invalid byte count transferred, expected 20 got 0 [ 122.974645][ T4706] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -22 [ 123.000086][ T4706] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 123.026038][ T4706] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 123.061801][ T4706] playstation: probe of 0003:054C:0DF2.0002 failed with error -22 [ 123.124843][ T5776] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.550: corrupted inode contents [ 123.214623][ T5776] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #16: comm syz.4.550: mark_inode_dirty error [ 123.264426][ T7] usb 1-1: USB disconnect, device number 5 [ 123.274462][ T5776] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.550: corrupted inode contents [ 123.333931][ T5776] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.550: mark_inode_dirty error [ 123.379433][ T5776] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.550: corrupted inode contents [ 123.427890][ T5776] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 123.433279][ T5788] fido_id[5788]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 123.464662][ T5776] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #16: comm syz.4.550: corrupted inode contents [ 123.487591][ T5776] EXT4-fs error (device loop4): ext4_truncate:4286: inode #16: comm syz.4.550: mark_inode_dirty error [ 123.525729][ T5792] loop3: detected capacity change from 0 to 8192 [ 123.534714][ T5776] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 123.545402][ T5776] EXT4-fs (loop4): 1 truncate cleaned up [ 123.580806][ T5800] netlink: 'syz.2.566': attribute type 10 has an invalid length. [ 123.597440][ T5776] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,block_validity,inode_readahead_blks=0x0000000000001000,resgid=0x0000000000000000,resgid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 123.624576][ T5776] ext4 filesystem being mounted at /107/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.667978][ T5792] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 123.704992][ T5792] REISERFS (device loop3): using ordered data mode [ 123.732424][ T5792] reiserfs: using flush barriers [ 123.805206][ T5792] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.864192][ T5808] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.883443][ T5792] REISERFS (device loop3): checking transaction log (loop3) [ 123.941964][ T5133] kernel write not supported for file /sequencer (pid: 5133 comm: kworker/0:15) [ 124.237265][ T5792] REISERFS (device loop3): Using tea hash to sort names [ 124.269853][ T5792] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 124.292282][ T5792] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 124.468848][ T5836] loop4: detected capacity change from 0 to 16 [ 124.531571][ T5792] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 124.587363][ T5842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.585'. [ 124.613261][ T5836] erofs: (device loop4): mounted with root inode @ nid 36. [ 124.684949][ T5842] device bond0 entered promiscuous mode [ 124.748372][ T5842] device bond_slave_0 entered promiscuous mode [ 124.795098][ T5842] device bond0 left promiscuous mode [ 124.815420][ T5842] device bond_slave_0 left promiscuous mode [ 125.233880][ T5838] loop2: detected capacity change from 0 to 32768 [ 125.375174][ T5838] XFS (loop2): Mounting V5 Filesystem [ 125.380781][ T4706] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.516208][ T5838] XFS (loop2): Ending clean mount [ 125.533347][ T5873] loop1: detected capacity change from 0 to 512 [ 125.598721][ T5873] FAT-fs (loop1): Directory bread(block 199916) failed [ 125.625858][ T5838] XFS (loop2): Quotacheck needed: Please wait. [ 125.649540][ T5873] FAT-fs (loop1): Directory bread(block 199917) failed [ 125.678350][ T5873] FAT-fs (loop1): Directory bread(block 199918) failed [ 125.688198][ T5873] FAT-fs (loop1): Directory bread(block 199919) failed [ 125.703183][ T5873] FAT-fs (loop1): Directory bread(block 199920) failed [ 125.721226][ T5873] FAT-fs (loop1): Directory bread(block 199921) failed [ 125.762308][ T5873] FAT-fs (loop1): Directory bread(block 199922) failed [ 125.779840][ T5838] XFS (loop2): Quotacheck: Done. [ 125.809613][ T5873] FAT-fs (loop1): Directory bread(block 199923) failed [ 125.887447][ T4706] usb 1-1: unable to get BOS descriptor or descriptor too short [ 125.972122][ T5878] nbd1: detected capacity change from 0 to 549764202496 [ 126.006802][ T4196] XFS (loop2): Unmounting Filesystem [ 126.014637][ T4706] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 126.065133][ T146] block nbd1: Receive control failed (result -104) [ 126.073480][ T4706] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 126.226372][ T5886] loop3: detected capacity change from 0 to 512 [ 126.265336][ T5887] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 126.293696][ T5889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.605'. [ 126.317703][ T5889] netem: change failed [ 126.358068][ T4706] usb 1-1: string descriptor 0 read error: -22 [ 126.364380][ T4706] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 126.398869][ T5886] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.416223][ T4706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.420917][ T5886] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.443916][ T5886] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.601: corrupted inode contents [ 126.457728][ T5886] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.601: mark_inode_dirty error [ 126.470330][ T5886] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.601: corrupted inode contents [ 126.486722][ T5886] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.601: corrupted inode contents [ 126.500530][ T5886] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.601: mark_inode_dirty error [ 126.512512][ T5886] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.601: corrupted inode contents [ 126.526413][ T5886] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.601: mark_inode_dirty error [ 126.553145][ T5886] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.601: corrupted inode contents [ 126.566524][ T5886] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.601: mark_inode_dirty error [ 127.130808][ T5912] loop2: detected capacity change from 0 to 2048 [ 127.141287][ T4231] usb 1-1: USB disconnect, device number 6 [ 127.229396][ T5912] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 127.272465][ T5912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.490579][ T5902] loop1: detected capacity change from 0 to 32768 [ 127.501887][ T5917] nbd2: detected capacity change from 0 to 549764202496 [ 127.526811][ T146] block nbd2: Receive control failed (result -104) [ 127.612248][ T5902] XFS (loop1): Mounting V5 Filesystem [ 127.721746][ T5902] XFS (loop1): Ending clean mount [ 127.740856][ T5902] XFS (loop1): Quotacheck needed: Please wait. [ 127.863697][ T5929] input: syz0 as /devices/virtual/input/input9 [ 127.927897][ T5902] XFS (loop1): Quotacheck: Done. [ 128.056418][ T4192] XFS (loop1): Unmounting Filesystem [ 128.337676][ T5944] loop0: detected capacity change from 0 to 1024 [ 128.437643][ T5950] loop2: detected capacity change from 0 to 128 [ 128.593993][ T5944] hfsplus: bad catalog entry type [ 128.607080][ T5950] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 128.630437][ T5950] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.691415][ T155] hfsplus: b-tree write err: -5, ino 25 [ 128.704185][ T155] hfsplus: b-tree write err: -5, ino 4 [ 128.721746][ T155] hfsplus: b-tree write err: -5, ino 2 [ 128.746691][ T155] hfsplus: b-tree write err: -5, ino 26 [ 129.158760][ T5969] loop3: detected capacity change from 0 to 256 [ 129.188344][ T4708] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.200487][ T5969] exfat: Deprecated parameter 'utf8' [ 129.205892][ T5969] exfat: Deprecated parameter 'namecase' [ 129.247974][ T5969] exfat: Deprecated parameter 'utf8' [ 129.281145][ T5969] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 129.333217][ T5969] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 129.355437][ T5969] exFAT-fs (loop3): hint_cluster is invalid (1) [ 129.372257][ T5969] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 129.384219][ T5969] exFAT-fs (loop3): error, failed to bmap (inode : ffff888060f98e60 iblock : 9, err : -5) [ 129.403073][ T5969] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 129.410750][ T5969] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 129.512898][ T5973] EXT4-fs (loop4): Ignoring removed orlov option [ 129.553433][ T5973] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.574581][ T4205] attempt to access beyond end of device [ 129.574581][ T4205] loop3: rw=1, want=34359738496, limit=256 [ 129.663055][ T4708] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.676783][ T5973] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,dioread_nolock,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 129.708096][ T4708] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 129.769446][ T4708] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.784329][ T5965] [ 129.784329][ T5965] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.784329][ T5965] [ 129.845085][ T4708] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 129.887842][ T4708] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 129.937535][ T4188] [ 129.937535][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.937535][ T4188] [ 129.981192][ T4188] [ 129.981192][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.981192][ T4188] [ 130.058467][ T4708] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.078014][ T4708] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.095848][ T4708] usb 3-1: Product: syz [ 130.101382][ T4708] usb 3-1: Manufacturer: syz [ 130.159420][ T4708] cdc_wdm 3-1:1.0: skipping garbage [ 130.164736][ T4708] cdc_wdm 3-1:1.0: skipping garbage [ 130.187429][ T4708] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 130.214910][ T4708] cdc_wdm 3-1:1.0: Unknown control protocol [ 130.395990][ T4708] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.668196][ T4708] usb 1-1: Using ep0 maxpacket: 8 [ 130.808445][ T4708] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.818385][ T4708] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.828675][ T4708] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.839301][ T4708] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.852933][ T4708] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.862282][ T4708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.976267][ T5133] usb 3-1: USB disconnect, device number 7 [ 131.022880][ T5997] netlink: 72 bytes leftover after parsing attributes in process `syz.3.655'. [ 131.049936][ T6000] set_capacity_and_notify: 2 callbacks suppressed [ 131.049951][ T6000] loop4: detected capacity change from 0 to 128 [ 131.051914][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 131.079422][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.655'. [ 131.098283][ T6000] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 131.111055][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.655'. [ 131.148371][ T4708] usb 1-1: GET_CAPABILITIES returned 0 [ 131.154166][ T4708] usbtmc 1-1:16.0: can't read capabilities [ 131.189580][ T6000] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.277298][ T7] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 131.357201][ T5140] usb 1-1: USB disconnect, device number 7 [ 131.579527][ T4708] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.668334][ T7] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 131.684592][ T7] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.711780][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.719253][ T7] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 131.730614][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.754269][ T7] usb 2-1: config 0 descriptor?? [ 131.778349][ T5995] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.827938][ T4708] usb 4-1: Using ep0 maxpacket: 32 [ 131.978541][ T4708] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.001576][ T4708] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.148028][ T4708] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 132.169150][ T4708] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 132.188217][ T4708] usb 4-1: Product: syz [ 132.192532][ T4708] usb 4-1: Manufacturer: syz [ 132.289720][ T7] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 132.289725][ T4708] hub 4-1:4.0: USB hub found [ 132.316605][ T7] holtek_kbd 0003:04D9:A055.0003: unbalanced collection at end of report description [ 132.337728][ T7] holtek_kbd: probe of 0003:04D9:A055.0003 failed with error -22 [ 132.514829][ T4706] usb 2-1: USB disconnect, device number 7 [ 132.568224][ T4708] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 132.627874][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.637225][ T6031] loop4: detected capacity change from 0 to 40427 [ 132.667898][ T6031] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 132.676021][ T6031] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 132.713327][ T6031] F2FS-fs (loop4): invalid crc value [ 132.747198][ T6031] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 132.771404][ T6031] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 132.852001][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.858594][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.872770][ T4708] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 132.888461][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 132.901802][ T6031] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 132.914835][ T6031] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.928120][ T4708] usb 4-1: device reset changed ep0 maxpacket size! [ 132.978630][ T4708] usb 4-1: USB disconnect, device number 5 [ 133.008509][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.028672][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 133.168718][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.183982][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 133.192654][ T7] usb 3-1: SerialNumber: syz [ 133.251475][ T7] usb 3-1: bad CDC descriptors [ 133.388336][ T4708] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.478713][ T5133] usb 3-1: USB disconnect, device number 8 [ 133.805387][ T6074] loop4: detected capacity change from 0 to 2048 [ 133.883548][ T6074] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 133.899042][ T6074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.958118][ T4708] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 133.970322][ T4708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.988209][ T4231] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.003371][ T4708] usb 4-1: Product: syz [ 134.007626][ T4708] usb 4-1: Manufacturer: syz [ 134.012638][ T4708] usb 4-1: SerialNumber: syz [ 134.049764][ T6078] loop4: detected capacity change from 0 to 128 [ 134.268363][ T4708] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 134.313076][ T4708] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 134.348075][ T4708] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 134.367065][ T4708] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 134.395067][ T4708] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 134.409378][ T4708] lan78xx: probe of 4-1:1.0 failed with error -71 [ 134.418078][ T4231] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.457234][ T4231] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 134.468522][ T4708] usb 4-1: USB disconnect, device number 6 [ 134.486881][ T4231] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.526633][ T4231] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 134.542371][ T4231] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 134.688476][ T4231] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.708361][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.716428][ T4231] usb 1-1: Product: syz [ 134.727816][ T4231] usb 1-1: Manufacturer: syz [ 134.799379][ T4231] cdc_wdm 1-1:1.0: skipping garbage [ 134.810002][ T4231] cdc_wdm 1-1:1.0: skipping garbage [ 134.830283][ T4231] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 134.857891][ T4231] cdc_wdm 1-1:1.0: Unknown control protocol [ 135.068806][ T5133] usb 1-1: USB disconnect, device number 8 [ 135.103731][ T6088] loop2: detected capacity change from 0 to 32768 [ 135.220218][ T6088] XFS (loop2): Mounting V5 Filesystem [ 135.376575][ T6088] XFS (loop2): Ending clean mount [ 135.490338][ T4196] XFS (loop2): Unmounting Filesystem [ 135.619576][ T6099] loop1: detected capacity change from 0 to 32768 [ 135.693678][ T6096] loop3: detected capacity change from 0 to 32768 [ 135.745679][ T6099] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.690 (6099) [ 135.811483][ T6096] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.689 (6096) [ 135.849904][ T6099] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 135.883085][ T6096] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 135.890474][ T6099] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 135.932197][ T6096] BTRFS info (device loop3): using free space tree [ 135.962950][ T6099] BTRFS info (device loop1): use zstd compression, level 3 [ 135.980657][ T6096] BTRFS info (device loop3): has skinny extents [ 136.006279][ T6099] BTRFS info (device loop1): using free space tree [ 136.042601][ T6099] BTRFS info (device loop1): has skinny extents [ 136.133673][ T6096] BTRFS info (device loop3): enabling ssd optimizations [ 136.679615][ T6099] BTRFS info (device loop1): enabling ssd optimizations [ 136.917830][ T6175] program syz.0.704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.942350][ T6159] loop2: detected capacity change from 0 to 32768 [ 136.996976][ T6159] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.693 (6159) [ 137.048934][ T4230] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.236915][ T6159] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 137.276221][ T6159] BTRFS info (device loop2): using free space tree [ 137.292033][ T6159] BTRFS info (device loop2): has skinny extents [ 137.328239][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 137.493047][ T4230] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.509476][ T4230] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.534987][ T4178] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (4178) [ 137.638277][ T4230] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 137.648313][ T4230] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 137.656801][ T4230] usb 5-1: Product: syz [ 137.674349][ T6159] BTRFS info (device loop2): enabling ssd optimizations [ 137.687898][ T4230] usb 5-1: Manufacturer: syz [ 137.698780][ T6203] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 137.749563][ T4230] hub 5-1:4.0: USB hub found [ 138.672821][ T6210] netlink: 328 bytes leftover after parsing attributes in process `syz.2.708'. [ 138.762993][ T6207] loop1: detected capacity change from 0 to 131072 [ 138.828149][ T4230] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 138.846774][ T6207] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 138.854013][ T6207] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 138.870988][ T6207] F2FS-fs (loop1): invalid crc value [ 138.929974][ T6207] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.996217][ T6207] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 139.003771][ T6207] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 139.169947][ T4230] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 139.228018][ T4230] usb 5-1: device reset changed ep0 maxpacket size! [ 139.244633][ T4230] usb 5-1: USB disconnect, device number 3 [ 139.408422][ T4231] Bluetooth: hci5: command 0x1003 tx timeout [ 139.414582][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 139.687964][ T4230] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.896550][ T6227] loop1: detected capacity change from 0 to 4096 [ 139.917497][ T6230] device batadv_slave_0 entered promiscuous mode [ 139.955867][ T6230] device batadv_slave_0 left promiscuous mode [ 140.046709][ T6227] EXT4-fs (loop1): inline encryption not supported [ 140.077857][ T4231] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 140.168114][ T4230] usb 5-1: device not accepting address 4, error -71 [ 140.253519][ T6227] EXT4-fs (loop1): Test dummy encryption mode enabled [ 140.269745][ T6227] EXT4-fs (loop1): Ignoring removed bh option [ 140.288175][ T6227] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 140.345801][ T6227] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 140.358043][ T4231] usb 3-1: Using ep0 maxpacket: 16 [ 140.367903][ T6227] System zones: 0-5 [ 140.388563][ T6227] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,sysvgroups,inlinecrypt,test_dummy_encryption,grpjquota=,bh,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 140.504101][ T6227] EXT4-fs (loop1): shut down requested (2) [ 140.523683][ T4231] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 140.548276][ T4231] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 140.556530][ T4231] usb 3-1: config 0 has no interface number 0 [ 140.594871][ T4231] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 140.618326][ T4231] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 140.813713][ T4231] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 140.835976][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.854712][ T4231] usb 3-1: Product: syz [ 140.860091][ T4230] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.867980][ T4231] usb 3-1: Manufacturer: syz [ 140.872646][ T4231] usb 3-1: SerialNumber: syz [ 140.908759][ T4231] usb 3-1: config 0 descriptor?? [ 140.944623][ T6249] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 140.953108][ T6228] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 140.976595][ T6228] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 141.003964][ T6249] netlink: 'syz.1.720': attribute type 2 has an invalid length. [ 141.130369][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 141.230373][ T6228] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 141.237540][ T6228] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 141.248535][ T4230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.278200][ T4230] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 141.418021][ T4230] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.427139][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 141.458146][ T4230] usb 5-1: SerialNumber: syz [ 141.497915][ T4708] Bluetooth: hci5: command 0x1001 tx timeout [ 141.514444][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 141.522164][ T4230] usb 5-1: bad CDC descriptors [ 141.748131][ T4231] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 141.771425][ T4231] asix: probe of 3-1:0.251 failed with error -524 [ 141.799703][ T4231] usb 5-1: USB disconnect, device number 5 [ 141.966335][ T4708] usb 3-1: USB disconnect, device number 9 [ 142.074810][ T6274] netlink: 328 bytes leftover after parsing attributes in process `syz.1.734'. [ 142.179269][ T6278] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 142.187877][ T6278] netlink: 'syz.0.735': attribute type 2 has an invalid length. [ 143.111923][ T6319] loop2: detected capacity change from 0 to 2048 [ 143.161214][ T6319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.170502][ T6290] loop4: detected capacity change from 0 to 32768 [ 143.207864][ T6290] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.740 (6290) [ 143.218272][ T4708] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.277454][ T6290] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 143.286387][ T6290] BTRFS info (device loop4): using free space tree [ 143.323621][ T6290] BTRFS info (device loop4): has skinny extents [ 143.518539][ T4708] usb 1-1: Using ep0 maxpacket: 32 [ 143.548015][ T6290] BTRFS info (device loop4): enabling ssd optimizations [ 143.578103][ T4230] Bluetooth: hci5: command 0x1009 tx timeout [ 143.658544][ T4708] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.677831][ T4708] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.787410][ T4708] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.815044][ T4708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 143.834324][ T4708] usb 1-1: SerialNumber: syz [ 143.899343][ T4708] usb 1-1: bad CDC descriptors [ 143.948987][ T6349] loop2: detected capacity change from 0 to 8192 [ 143.972820][ T6349] FAT-fs (loop2): Unrecognized mount option "˙18446744073709551615˙˙˙˙˙˙˙˙18446744073709551615" or missing value [ 144.343774][ T1111] usb 1-1: USB disconnect, device number 9 [ 144.907210][ T6380] sctp: Trying to GSO but underlying device doesn't support it. [ 145.670750][ T6384] loop2: detected capacity change from 0 to 32768 [ 145.716691][ T6384] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.774 (6384) [ 145.800471][ T6384] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 145.851225][ T6384] BTRFS info (device loop2): using free space tree [ 145.881614][ T6384] BTRFS info (device loop2): has skinny extents [ 146.189889][ T6388] loop4: detected capacity change from 0 to 40427 [ 146.206409][ T6388] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 146.213312][ T6384] BTRFS info (device loop2): enabling ssd optimizations [ 146.232487][ T6388] F2FS-fs (loop4): invalid crc value [ 146.254691][ T6388] F2FS-fs (loop4): Found nat_bits in checkpoint [ 146.337291][ T6388] F2FS-fs (loop4): recover fsync data on readonly fs [ 146.355502][ T6388] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 146.365606][ T6388] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 146.415619][ T6388] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.541326][ T6388] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0 [ 146.924947][ T6426] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 147.742967][ T6428] loop2: detected capacity change from 0 to 32768 [ 147.752621][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 147.770768][ T6431] loop4: detected capacity change from 0 to 8192 [ 147.832066][ T6431] FAT-fs (loop4): Unrecognized mount option "˙18446744073709551615˙˙˙˙˙˙˙˙18446744073709551615" or missing value [ 148.739190][ T6462] netlink: set zone limit has 4 unknown bytes [ 149.082819][ T6444] loop3: detected capacity change from 0 to 40427 [ 149.143296][ T6444] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 149.185230][ T6444] F2FS-fs (loop3): invalid crc value [ 149.229987][ T6444] F2FS-fs (loop3): Found nat_bits in checkpoint [ 149.439289][ T6444] F2FS-fs (loop3): recover fsync data on readonly fs [ 149.446556][ T6444] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 149.526189][ T6444] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 149.588214][ T6444] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 149.754594][ T6444] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0 [ 150.546186][ T6497] loop3: detected capacity change from 0 to 64 [ 150.731677][ T6501] loop2: detected capacity change from 0 to 164 [ 151.005817][ T6491] loop4: detected capacity change from 0 to 32768 [ 152.208711][ T6508] loop2: detected capacity change from 0 to 32768 [ 152.321904][ T6508] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.818 (6508) [ 152.365860][ T6535] loop3: detected capacity change from 0 to 8192 [ 152.386448][ T6508] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 152.428067][ T6508] BTRFS info (device loop2): enabling auto defrag [ 152.451097][ T6535] FAT-fs (loop3): Unrecognized mount option "˙18446744073709551615˙˙˙˙˙˙˙˙18446744073709551615" or missing value [ 152.470112][ T6508] BTRFS info (device loop2): use no compression [ 152.520400][ T6508] BTRFS info (device loop2): max_inline at 4096 [ 152.571269][ T6508] BTRFS info (device loop2): using free space tree [ 152.608019][ T6508] BTRFS info (device loop2): has skinny extents [ 153.052840][ T6508] BTRFS info (device loop2): enabling ssd optimizations [ 153.784787][ T6555] loop3: detected capacity change from 0 to 32768 [ 154.215719][ T6555] XFS (loop3): Mounting V5 Filesystem [ 154.266082][ T6596] loop4: detected capacity change from 0 to 512 [ 154.420291][ T6555] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 154.472027][ T6596] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.846: invalid indirect mapped block 4294967295 (level 1) [ 154.568965][ T6596] EXT4-fs (loop4): Remounting filesystem read-only [ 154.570517][ T6555] XFS (loop3): Starting recovery (logdev: internal) [ 154.575558][ T6596] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.846: invalid indirect mapped block 4294967295 (level 1) [ 154.647885][ T6555] XFS (loop3): Ending recovery (logdev: internal) [ 154.729858][ T6596] EXT4-fs (loop4): Remounting filesystem read-only [ 154.736804][ T6596] EXT4-fs (loop4): 2 truncates cleaned up [ 154.749555][ T6555] XFS (loop3): User initiated shutdown received. [ 154.763332][ T6555] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 154.808111][ T6596] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 154.810643][ T6555] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 154.935751][ T6596] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.846: bg 0: block 5: invalid block bitmap [ 154.966955][ T6596] EXT4-fs (loop4): Remounting filesystem read-only [ 155.001290][ T4194] XFS (loop3): Unmounting Filesystem [ 155.639643][ T6642] loop4: detected capacity change from 0 to 8192 [ 156.073996][ T6657] loop4: detected capacity change from 0 to 512 [ 156.206383][ T6657] EXT4-fs error (device loop4): __ext4_iget:4919: inode #2: block 100663296: comm syz.4.872: invalid block [ 156.275211][ T6657] EXT4-fs (loop4): no journal found [ 156.460522][ T6665] loop3: detected capacity change from 0 to 1024 [ 156.527952][ T150] block nbd1: Possible stuck request ffff8880217b0000: control (read@0,4096B). Runtime 30 seconds [ 156.635181][ T6665] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 156.768835][ T6665] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 156.850364][ T6678] loop4: detected capacity change from 0 to 1024 [ 156.899602][ T6665] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 33: comm syz.3.875: bad entry in directory: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, size=1024 fake=0 [ 157.048128][ T4260] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 157.084389][ T6683] hfsplus: xattr searching failed [ 157.315611][ T4260] usb 2-1: Using ep0 maxpacket: 16 [ 157.442107][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 157.459157][ T4260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.492511][ T4260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.540869][ T4260] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.592868][ T4260] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.634392][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.659042][ T6694] loop3: detected capacity change from 0 to 512 [ 157.685114][ T4260] usb 2-1: config 0 descriptor?? [ 157.768043][ T6364] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 157.783893][ T6694] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 157.808011][ T150] block nbd2: Possible stuck request ffff888021c48000: control (read@0,4096B). Runtime 30 seconds [ 157.837591][ T6694] EXT4-fs (loop3): 1 truncate cleaned up [ 157.854237][ T6694] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.190159][ T4260] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 158.222257][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.268089][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.283373][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.302516][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.317602][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.336947][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.365541][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.378549][ T6364] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 158.395002][ T6364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.407978][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.424375][ T6364] usb 5-1: Product: syz [ 158.429665][ T6364] usb 5-1: Manufacturer: syz [ 158.448818][ T6364] usb 5-1: SerialNumber: syz [ 158.456462][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.465893][ T6364] usb 5-1: config 0 descriptor?? [ 158.507601][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.522266][ T6364] sierra 5-1:0.0: Sierra USB modem converter detected [ 158.536150][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.545042][ T6720] ax25_connect(): syz.3.896 uses autobind, please contact jreuter@yaina.de [ 158.545962][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.577914][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.595778][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.616783][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.637055][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.648770][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.667964][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.686831][ T4260] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 158.714550][ T4260] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input10 [ 158.732230][ T6364] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 158.752436][ T6364] usb 5-1: USB disconnect, device number 6 [ 158.766777][ T6364] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 158.778160][ T6364] sierra 5-1:0.0: device disconnected [ 158.885823][ T4260] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 158.969040][ T4260] usb 2-1: USB disconnect, device number 8 [ 159.139036][ T6733] fido_id[6733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 159.487972][ T4227] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.769283][ T4227] usb 1-1: Using ep0 maxpacket: 32 [ 159.892720][ T4228] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 159.908282][ T4227] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 159.937935][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.965396][ T4227] usb 1-1: config 0 descriptor?? [ 160.148005][ T4228] usb 4-1: Using ep0 maxpacket: 16 [ 160.220874][ T6783] loop2: detected capacity change from 0 to 164 [ 160.238330][ T4227] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 160.267400][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.269319][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.318273][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.318966][ T4227] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 160.361967][ T4227] usb 1-1: media controller created [ 160.375452][ T6783] rock: directory entry would overflow storage [ 160.383531][ T4228] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 160.410517][ T6783] rock: sig=0x4d4e, size=5, remaining=4 [ 160.431296][ T4228] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.434758][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.450803][ T6783] isofs: isofs_export_get_parent(): child directory not normalized! [ 160.477238][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.514954][ T4228] usb 4-1: config 0 descriptor?? [ 160.953353][ T6792] loop2: detected capacity change from 0 to 1024 [ 161.037050][ T4228] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 161.048235][ T4227] az6027: usb out operation failed. (-71) [ 161.066007][ T4227] stb0899_attach: Driver disabled by Kconfig [ 161.075719][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.097897][ T4227] az6027: no front-end attached [ 161.097897][ T4227] [ 161.118175][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.129221][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.150978][ T4227] az6027: usb out operation failed. (-71) [ 161.157141][ T4227] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 161.183666][ T4227] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 161.198753][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.206553][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.239090][ T4227] dvb-usb: schedule remote query interval to 400 msecs. [ 161.261912][ T4227] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 161.265037][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.300331][ T4227] usb 1-1: USB disconnect, device number 10 [ 161.327918][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.344052][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.352884][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.360603][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.368956][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.378331][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.386377][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.405089][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.454170][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.478094][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.485573][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.520685][ T6805] loop4: detected capacity change from 0 to 512 [ 161.536253][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.544789][ T4228] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 161.569526][ T4228] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input12 [ 161.610318][ T6805] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.934: inode has both inline data and extents flags [ 161.630820][ T6805] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.934: couldn't read orphan inode 15 (err -117) [ 161.658940][ T6805] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.777348][ T6811] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 161.803500][ T4227] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 161.879562][ T4228] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 161.967524][ T4228] usb 4-1: USB disconnect, device number 7 [ 162.108371][ T6822] fido_id[6822]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 162.271761][ T6832] loop4: detected capacity change from 0 to 1024 [ 162.767933][ T4228] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 162.803958][ T6852] loop3: detected capacity change from 0 to 512 [ 162.885786][ T6852] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.950: inode has both inline data and extents flags [ 162.900777][ T6852] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.950: couldn't read orphan inode 15 (err -117) [ 162.913824][ T6852] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.178083][ T4228] usb 2-1: unable to get BOS descriptor or descriptor too short [ 163.203453][ T6862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.958'. [ 163.218142][ T4228] usb 2-1: not running at top speed; connect to a high speed hub [ 163.299359][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.959'. [ 163.309086][ T4228] usb 2-1: config 3 has an invalid interface number: 104 but max is 0 [ 163.309117][ T4228] usb 2-1: config 3 has no interface number 0 [ 163.309144][ T4228] usb 2-1: config 3 interface 104 has no altsetting 0 [ 163.444291][ T6870] binder: BINDER_SET_CONTEXT_MGR already set [ 163.460048][ T6870] binder: 6869:6870 ioctl 4018620d 200000000140 returned -16 [ 163.474075][ T4228] usb 2-1: New USB device found, idVendor=06be, idProduct=0800, bcdDevice=c7.e9 [ 163.495647][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.524225][ T4228] usb 2-1: Product: syz [ 163.540495][ T4228] usb 2-1: Manufacturer: syz [ 163.556389][ T4228] usb 2-1: SerialNumber: syz [ 163.930234][ T4228] gspca_main: spca500-2.14.0 probing 06be:0800 [ 164.027990][ T4228] usb 2-1: USB disconnect, device number 9 [ 164.221838][ T6868] loop2: detected capacity change from 0 to 131072 [ 164.228972][ T4231] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 164.324840][ T6868] F2FS-fs (loop2): invalid crc value [ 164.361947][ T6868] F2FS-fs (loop2): Found nat_bits in checkpoint [ 164.408373][ T6868] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 164.431119][ T6868] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 164.500987][ T4231] usb 4-1: Using ep0 maxpacket: 16 [ 164.638478][ T4231] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.680661][ T4231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 164.701284][ T4231] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 164.727988][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.766791][ T4231] usb 4-1: config 0 descriptor?? [ 164.962952][ T6912] loop4: detected capacity change from 0 to 8 [ 165.002978][ T6758] udevd[6758]: incorrect cramfs checksum on /dev/loop4 [ 165.018042][ T4260] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 165.026463][ T6912] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 165.087363][ T6758] udevd[6758]: incorrect cramfs checksum on /dev/loop4 [ 165.272405][ T4231] mcp2221 0003:04D8:00DD.0006: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 165.278297][ T4260] usb 2-1: Using ep0 maxpacket: 8 [ 165.448202][ T4260] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.480325][ T4260] usb 2-1: config 0 interface 0 has no altsetting 0 [ 165.487047][ T4260] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 165.541151][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.576690][ T4260] usb 2-1: config 0 descriptor?? [ 165.736514][ T1108] usb 4-1: USB disconnect, device number 8 [ 166.059347][ T6908] udc-core: couldn't find an available UDC or it's busy [ 166.066520][ T6908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 166.197888][ T1111] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 166.468218][ T1111] usb 1-1: Using ep0 maxpacket: 16 [ 166.543553][ T6940] program syz.3.990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.615401][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.668692][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.726079][ T1111] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 166.774560][ T1111] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 166.801463][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.804400][ T6927] loop4: detected capacity change from 0 to 131072 [ 166.821406][ T4260] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 166.829285][ T4260] logitech 0003:046D:C295.0007: unknown main item tag 0x4 [ 166.836908][ T4260] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 166.845313][ T4260] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 166.852811][ T4260] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 166.860259][ T4260] logitech 0003:046D:C295.0007: unknown main item tag 0x2 [ 166.867635][ T4260] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 166.874944][ T4260] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 166.883198][ T4260] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 166.890661][ T4260] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 166.892670][ T1111] usb 1-1: config 0 descriptor?? [ 166.897928][ T4260] logitech 0003:046D:C295.0007: unknown main item tag 0x2 [ 166.897960][ T4260] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 166.897988][ T4260] logitech 0003:046D:C295.0007: item fetching failed at offset 40/41 [ 166.898879][ T4260] logitech 0003:046D:C295.0007: parse failed [ 166.932967][ T4260] logitech: probe of 0003:046D:C295.0007 failed with error -22 [ 166.944746][ T4260] usb 2-1: USB disconnect, device number 10 [ 166.992464][ T6927] F2FS-fs (loop4): invalid crc value [ 167.043707][ T6927] F2FS-fs (loop4): Found nat_bits in checkpoint [ 167.053305][ T6950] binder: BINDER_SET_CONTEXT_MGR already set [ 167.085902][ T6950] binder: 6948:6950 ioctl 4018620d 200000000140 returned -16 [ 167.096024][ T6927] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 167.122478][ T6927] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 167.378835][ T6942] loop2: detected capacity change from 0 to 32768 [ 167.463272][ T1111] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 167.482718][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.501908][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.518141][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.552360][ T6942] XFS (loop2): Mounting V5 Filesystem [ 167.566290][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.636048][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.707592][ T6942] XFS (loop2): Ending clean mount [ 167.720345][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.737346][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.780230][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.787566][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.830123][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.845397][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.859404][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.876683][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.885287][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.897878][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.905268][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.913430][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.921317][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.929022][ T1111] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 167.945147][ T1111] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0008/input/input13 [ 168.013319][ T4196] XFS (loop2): Unmounting Filesystem [ 168.045464][ T1111] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 168.111598][ T1111] usb 1-1: USB disconnect, device number 11 [ 168.365571][ T6982] fido_id[6982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 168.411652][ T6984] loop3: detected capacity change from 0 to 2048 [ 168.492204][ T6984] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 168.714030][ T6984] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback. [ 168.779887][ T6984] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.877460][ T6984] fs-verity (loop3, inode 13): Unknown hash algorithm number: 3 [ 169.709310][ T7027] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.731305][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 169.742945][ T7027] team0: Port device batadv1 added [ 170.513565][ T26] audit: type=1326 audit(1777886922.114:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.0.1035" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4211fdbdd9 code=0x50000 [ 170.602986][ T26] audit: type=1326 audit(1777886922.114:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.0.1035" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4211fdbdd9 code=0x50000 [ 170.694779][ T26] audit: type=1326 audit(1777886922.114:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.0.1035" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4211fdbdd9 code=0x50000 [ 170.795255][ T26] audit: type=1326 audit(1777886922.114:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.0.1035" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4211fdbdd9 code=0x50000 [ 170.824629][ T26] audit: type=1326 audit(1777886922.114:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.0.1035" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4211fdbdd9 code=0x50000 [ 170.862101][ T7082] program syz.3.1040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.938607][ T26] audit: type=1326 audit(1777886922.114:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.0.1035" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4211fdbdd9 code=0x50000 [ 171.023185][ T26] audit: type=1326 audit(1777886922.114:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.0.1035" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4211fdbdd9 code=0x50000 [ 171.147709][ T26] audit: type=1326 audit(1777886922.114:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.0.1035" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4211fdbdd9 code=0x50000 [ 171.197668][ T26] audit: type=1326 audit(1777886922.114:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.0.1035" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4211fdbdd9 code=0x50000 [ 171.230157][ T26] audit: type=1326 audit(1777886922.114:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.0.1035" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4211fdbdd9 code=0x50000 [ 171.291656][ T7094] loop3: detected capacity change from 0 to 4096 [ 171.389281][ T7105] input: syz0 as /devices/virtual/input/input14 [ 171.401227][ T7094] ntfs: volume version 3.1. [ 171.834976][ T7129] loop2: detected capacity change from 0 to 256 [ 171.880885][ T7131] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1064'. [ 171.939046][ T7129] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 172.292793][ T7148] user requested TSC rate below hardware speed [ 172.724671][ T7168] trusted_key: encrypted_key: keyword 'upäate' not recognized [ 172.747904][ T4260] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 173.120296][ T4260] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.141265][ T4260] usb 3-1: config 0 interface 0 has no altsetting 0 [ 173.308562][ T7206] tap0: tun_chr_ioctl cmd 2147767506 [ 173.318206][ T4260] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 173.335171][ T7208] program syz.3.1098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.346289][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.363487][ T4260] usb 3-1: Product: syz [ 173.368422][ T4260] usb 3-1: Manufacturer: syz [ 173.373338][ T4260] usb 3-1: SerialNumber: syz [ 173.400431][ T4260] usb 3-1: config 0 descriptor?? [ 173.450802][ T4260] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 173.518437][ T4260] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.564264][ T4260] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 173.579825][ T4260] usb 3-1: media controller created [ 173.614354][ T4260] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.759223][ T4260] DVB: Unable to find symbol tda10046_attach() [ 173.767242][ T4260] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 173.795280][ T4260] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 173.840736][ T7236] loop4: detected capacity change from 0 to 256 [ 173.864219][ T7236] exfat: Deprecated parameter 'utf8' [ 173.903204][ T7236] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf8a64500, utbl_chksum : 0xe619d30d) [ 174.214317][ T7243] loop4: detected capacity change from 0 to 8192 [ 174.221116][ T4260] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 174.229996][ T4260] usb 3-1: USB disconnect, device number 10 [ 174.255775][ T7243] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 174.301909][ T7243] REISERFS (device loop4): using ordered data mode [ 174.330953][ T7243] reiserfs: using flush barriers [ 174.362815][ T7243] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.478895][ T7243] REISERFS (device loop4): checking transaction log (loop4) [ 174.503167][ T7243] REISERFS (device loop4): Using rupasov hash to sort names [ 174.510963][ T7251] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1113'. [ 174.527885][ T7243] REISERFS (device loop4): using 3.5.x disk format [ 174.534674][ T7243] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 174.578269][ T7243] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 174.607929][ T7243] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 174.627141][ T7243] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 175.147928][ T4231] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 175.512268][ T4227] kernel read not supported for file /dsp1 (pid: 4227 comm: kworker/1:4) [ 175.556836][ T7288] loop4: detected capacity change from 0 to 512 [ 175.568180][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.587121][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.607445][ T4231] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 175.631715][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.654524][ T4231] usb 3-1: config 0 descriptor?? [ 175.678616][ T4227] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.968510][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 175.995850][ T7311] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 176.002952][ T7311] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 176.012042][ T7311] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 176.027029][ T7311] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 176.035532][ T7311] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 176.056446][ T7311] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 176.072067][ T7311] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 176.081412][ T7311] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 176.091362][ T7311] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 176.107971][ T7311] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 176.119767][ T4231] cp2112 0003:10C4:EA90.0009: unbalanced delimiter at end of report description [ 176.128924][ T7311] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 176.129007][ T7311] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 176.129044][ T7311] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 176.129079][ T7311] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 176.155470][ T4227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.167385][ T4227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.177130][ T4231] cp2112 0003:10C4:EA90.0009: parse failed [ 176.196950][ T4231] cp2112: probe of 0003:10C4:EA90.0009 failed with error -22 [ 176.320957][ T1111] usb 3-1: USB disconnect, device number 11 [ 176.348373][ T4227] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.357519][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.380912][ T4227] usb 4-1: Product: syz [ 176.385156][ T4227] usb 4-1: Manufacturer: syz [ 176.398290][ T4227] usb 4-1: SerialNumber: syz [ 176.440873][ T7323] loop4: detected capacity change from 0 to 4096 [ 176.595523][ T4195] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 176.605059][ T4195] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 176.774313][ T7338] overlayfs: failed to resolve './file0': -2 [ 176.898544][ T4227] usb 4-1: 0:2 : does not exist [ 176.933124][ T26] kauditd_printk_skb: 82 callbacks suppressed [ 176.933141][ T26] audit: type=1326 audit(1777886928.534:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.2.1158" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d0d8e5dd9 code=0x0 [ 177.286758][ T7354] loop4: detected capacity change from 0 to 256 [ 177.328134][ T4630] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 177.333448][ T7354] exfat: Deprecated parameter 'utf8' [ 177.341733][ T7354] exfat: Deprecated parameter 'utf8' [ 177.356716][ T4227] usb 4-1: USB disconnect, device number 9 [ 177.409178][ T7354] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x22bddf5f, utbl_chksum : 0xe619d30d) [ 177.467572][ T26] audit: type=1800 audit(1777886929.064:87): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1161" name="bus" dev="loop4" ino=1048617 res=0 errno=0 [ 177.577900][ T4630] usb 1-1: Using ep0 maxpacket: 8 [ 177.615113][ T6757] udevd[6757]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.698195][ T4630] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.717860][ T4630] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 177.878020][ T4630] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 177.887136][ T4630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.914661][ T4630] usb 1-1: Product: syz [ 177.923625][ T4630] usb 1-1: Manufacturer: syz [ 177.964047][ T4630] usb 1-1: SerialNumber: syz [ 177.989902][ T4630] usb 1-1: config 0 descriptor?? [ 178.096030][ T7371] loop4: detected capacity change from 0 to 4096 [ 178.218456][ T7371] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.279611][ T1108] usb 1-1: USB disconnect, device number 12 [ 178.418069][ T7382] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 363: padding at end of block bitmap is not set [ 178.706718][ T7372] loop2: detected capacity change from 0 to 32768 [ 178.826699][ T7408] syz.4.1181 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 178.851825][ T7372] XFS (loop2): Mounting V5 Filesystem [ 178.916739][ T7413] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1184'. [ 178.929832][ T7372] XFS (loop2): Ending clean mount [ 178.979783][ T4196] XFS (loop2): Unmounting Filesystem [ 179.058382][ T4227] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.271781][ T7426] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1191'. [ 179.323697][ T7427] input: syz0 as /devices/virtual/input/input15 [ 179.330715][ T4227] usb 2-1: Using ep0 maxpacket: 32 [ 179.478342][ T4227] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 179.505224][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.572063][ T4227] usb 2-1: config 0 descriptor?? [ 179.848465][ T4227] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 179.898815][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.950228][ T4227] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 179.986757][ T4227] usb 2-1: media controller created [ 180.001289][ T7446] loop4: detected capacity change from 0 to 40427 [ 180.010839][ T7450] mkiss: ax0: crc mode is auto. [ 180.031982][ T7453] loop3: detected capacity change from 0 to 256 [ 180.056870][ T7446] F2FS-fs (loop4): Invalid log blocks per segment (83886089) [ 180.064470][ T7446] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 180.085493][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.095313][ T7446] F2FS-fs (loop4): invalid crc value [ 180.100834][ T7446] F2FS-fs (loop4): Ignore s_resuid=570, s_resgid=0 w/o reserve_root [ 180.122615][ T7446] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.169983][ T7446] F2FS-fs (loop4): Start checkpoint disabled! [ 180.180748][ T7453] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0x41a8241b, utbl_chksum : 0xe619d30d) [ 180.197556][ T7453] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 180.218415][ T7446] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 180.225518][ T7446] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 180.238024][ T4227] az6027: usb out operation failed. (-71) [ 180.274912][ T4227] az6027: usb out operation failed. (-71) [ 180.308493][ T4227] stb0899_attach: Driver disabled by Kconfig [ 180.333297][ T4227] az6027: no front-end attached [ 180.333297][ T4227] [ 180.388214][ T4227] az6027: usb out operation failed. (-71) [ 180.394012][ T4227] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 180.451695][ T4227] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 180.525983][ T4227] dvb-usb: schedule remote query interval to 400 msecs. [ 180.555570][ T4227] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 180.651443][ T26] audit: type=1326 audit(1777886932.254:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.3.1210" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda5d307dd9 code=0x0 [ 180.666882][ T4227] usb 2-1: USB disconnect, device number 11 [ 180.840072][ T4227] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 180.925259][ T7476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.985051][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1214'. [ 181.092749][ T7476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.225257][ T7476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.301842][ T7476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.324340][ T7496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1221'. [ 181.434387][ T7476] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.454528][ T7476] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.472566][ T7476] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.511801][ T7476] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.694499][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 181.720646][ T7508] device bond0 entered promiscuous mode [ 181.755799][ T7508] device bond_slave_0 entered promiscuous mode [ 181.779047][ T7508] device bond_slave_1 entered promiscuous mode [ 181.807051][ T7508] device bond0 left promiscuous mode [ 181.818025][ T7508] device bond_slave_0 left promiscuous mode [ 181.867178][ T7508] device bond_slave_1 left promiscuous mode [ 182.206415][ T7528] loop2: detected capacity change from 0 to 2048 [ 182.221195][ T7502] loop3: detected capacity change from 0 to 32768 [ 182.254916][ T7502] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop3 scanned by syz.3.1224 (7502) [ 182.289911][ T1108] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 182.304364][ T7528] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 182.321370][ T7502] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 182.367304][ T7502] BTRFS info (device loop3): using free space tree [ 182.395976][ T7502] BTRFS info (device loop3): has skinny extents [ 182.405334][ T6756] udevd[6756]: incorrect nilfs2 checksum on /dev/loop2 [ 182.426111][ T7536] loop4: detected capacity change from 0 to 256 [ 182.434846][ T7535] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.483794][ T7536] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 182.708039][ T1108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.788158][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.808544][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.868647][ T7502] BTRFS info (device loop3): enabling ssd optimizations [ 182.978874][ T1108] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 182.997871][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.024961][ T1108] usb 1-1: Product: syz [ 183.040672][ T1108] usb 1-1: Manufacturer: syz [ 183.045398][ T1108] usb 1-1: SerialNumber: syz [ 183.102066][ T1108] usb 1-1: selecting invalid altsetting 1 [ 183.127935][ T1108] usb 1-1: unit 6 not found! [ 183.137457][ T7578] program syz.1.1249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.548710][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1253'. [ 183.562124][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.777914][ T4233] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 183.962010][ T7606] IPv6: Can't replace route, no match found [ 184.041202][ T1108] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 184.138408][ T4233] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 184.166103][ T1108] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 184.174876][ T4233] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.205373][ T1108] usb 1-1: USB disconnect, device number 13 [ 184.226374][ T6757] udevd[6757]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.238122][ T4233] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.287857][ T4233] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 184.301137][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 184.328010][ T4233] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 184.337125][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.370823][ T4233] usb 5-1: config 0 descriptor?? [ 184.420314][ T7597] loop2: detected capacity change from 0 to 40427 [ 184.438899][ T7597] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 184.445620][ T7597] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 184.502999][ T7597] F2FS-fs (loop2): Found nat_bits in checkpoint [ 184.628135][ T7597] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 184.635246][ T7597] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.762639][ T7597] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 184.836866][ T4196] attempt to access beyond end of device [ 184.836866][ T4196] loop2: rw=2049, want=45104, limit=40427 [ 184.851087][ T4233] ryos 0003:1E7D:3138.000A: unknown main item tag 0x5 [ 184.866473][ T4233] ryos 0003:1E7D:3138.000A: item fetching failed at offset 2/5 [ 184.898314][ T4233] ryos 0003:1E7D:3138.000A: parse failed [ 184.904043][ T4233] ryos: probe of 0003:1E7D:3138.000A failed with error -22 [ 185.063088][ T4227] usb 5-1: USB disconnect, device number 7 [ 185.278424][ T6363] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 185.444710][ T7660] loop2: detected capacity change from 0 to 2048 [ 185.538345][ T7660] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 185.567308][ T6757] udevd[6757]: incorrect nilfs2 checksum on /dev/loop2 [ 185.600907][ T7669] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.934626][ T6363] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 185.959032][ T6363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.968228][ T4227] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 185.987427][ T6363] usb 1-1: Product: syz [ 185.992011][ T6363] usb 1-1: Manufacturer: syz [ 186.002030][ T6363] usb 1-1: SerialNumber: syz [ 186.027951][ T7666] loop3: detected capacity change from 0 to 32768 [ 186.076721][ T6363] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 186.269120][ T7679] loop2: detected capacity change from 0 to 40427 [ 186.351279][ T7679] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 186.351945][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.358514][ T7679] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 186.456876][ T4227] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.486065][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.536386][ T4227] usb 5-1: config 0 descriptor?? [ 186.608150][ T150] block nbd1: Possible stuck request ffff8880217b0000: control (read@0,4096B). Runtime 60 seconds [ 186.929303][ T7701] loop2: detected capacity change from 0 to 1764 [ 186.958468][ T6363] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 187.049370][ T4227] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 187.077969][ T4227] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000B/input/input17 [ 187.148208][ T7590] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 187.277720][ T4227] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 187.530355][ T7590] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.557816][ T7590] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.570714][ T7590] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.577432][ T7590] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 187.592731][ T7590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.609092][ T4228] usb 1-1: USB disconnect, device number 14 [ 187.623328][ T7590] usb 2-1: config 0 descriptor?? [ 187.888190][ T150] block nbd2: Possible stuck request ffff888021c48000: control (read@0,4096B). Runtime 60 seconds [ 188.124931][ T7590] hid-steam 0003:28DE:1102.000C: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 188.152118][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 188.193495][ T7590] usb 5-1: USB disconnect, device number 8 [ 188.208135][ T6363] usb 1-1: Service connection timeout for: 256 [ 188.215745][ T6363] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 188.247523][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 188.258077][ T6363] ath9k_htc: Failed to initialize the device [ 188.266574][ T4228] usb 1-1: ath9k_htc: USB layer deinitialized [ 188.332472][ T4227] usb 2-1: USB disconnect, device number 12 [ 188.848091][ T7590] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 189.143458][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 189.166557][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 189.217997][ T7590] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.226820][ T7590] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.237603][ T7590] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.248930][ T7590] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 189.260386][ T7590] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 189.378190][ T6363] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 189.388175][ T7590] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.405715][ T7590] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.431258][ T7590] usb 4-1: Product: syz [ 189.452997][ T7590] usb 4-1: Manufacturer: syz [ 189.499993][ T7783] input: syz0 as /devices/virtual/input/input18 [ 189.509336][ T7590] cdc_wdm 4-1:1.0: skipping garbage [ 189.514602][ T7590] cdc_wdm 4-1:1.0: skipping garbage [ 189.536961][ T7590] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 189.551080][ T7590] cdc_wdm 4-1:1.0: Unknown control protocol [ 189.667901][ T6363] usb 3-1: Using ep0 maxpacket: 32 [ 189.798369][ T6363] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 189.828194][ T6363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.846371][ T6363] usb 3-1: config 0 descriptor?? [ 189.897881][ T5145] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 190.102188][ T7789] loop4: detected capacity change from 0 to 32768 [ 190.118112][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -75 [ 190.126986][ T6363] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 190.136445][ T6363] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.169369][ T6363] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 190.176590][ T6363] usb 3-1: media controller created [ 190.236447][ T6363] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.368989][ T6363] az6027: usb out operation failed. (-71) [ 190.380236][ T4227] usb 4-1: USB disconnect, device number 10 [ 190.408232][ T6363] az6027: usb out operation failed. (-71) [ 190.414278][ T6363] stb0899_attach: Driver disabled by Kconfig [ 190.428121][ T5145] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 190.445978][ T6363] az6027: no front-end attached [ 190.445978][ T6363] [ 190.449784][ T5145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.472048][ T5145] usb 1-1: Product: syz [ 190.476295][ T5145] usb 1-1: Manufacturer: syz [ 190.488034][ T6363] az6027: usb out operation failed. (-71) [ 190.492745][ T5145] usb 1-1: SerialNumber: syz [ 190.493835][ T6363] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 190.515435][ T5145] usb 1-1: config 0 descriptor?? [ 190.520869][ T6363] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 190.544981][ T6363] dvb-usb: schedule remote query interval to 400 msecs. [ 190.554664][ T6363] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 190.578903][ T6363] usb 3-1: USB disconnect, device number 12 [ 190.589824][ T5145] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 015 [ 190.618231][ T1111] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 190.696282][ T6363] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 190.890983][ T1111] usb 5-1: Using ep0 maxpacket: 16 [ 190.910062][ T7805] loop3: detected capacity change from 0 to 512 [ 190.963227][ T4228] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 190.977225][ T7805] FAT-fs (loop3): Directory bread(block 199916) failed [ 191.008403][ T5145] (null): failure reading functionality [ 191.022351][ T7805] FAT-fs (loop3): Directory bread(block 199917) failed [ 191.049730][ T7805] FAT-fs (loop3): Directory bread(block 199918) failed [ 191.061014][ T5145] i2c i2c-2: connected i2c-tiny-usb device [ 191.071120][ T7805] FAT-fs (loop3): Directory bread(block 199919) failed [ 191.087889][ T7805] FAT-fs (loop3): Directory bread(block 199920) failed [ 191.108624][ T7805] FAT-fs (loop3): Directory bread(block 199921) failed [ 191.134915][ T7805] FAT-fs (loop3): Directory bread(block 199922) failed [ 191.145855][ T7805] FAT-fs (loop3): Directory bread(block 199923) failed [ 191.158889][ T7805] FAT-fs (loop3): Directory bread(block 199916) failed [ 191.166785][ T7805] FAT-fs (loop3): Directory bread(block 199917) failed [ 191.228081][ T1111] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 191.246157][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.257846][ T1111] usb 5-1: Product: syz [ 191.266525][ T1111] usb 5-1: Manufacturer: syz [ 191.275312][ T1111] usb 5-1: SerialNumber: syz [ 191.283062][ T4227] Bluetooth: hci0: command 0x0406 tx timeout [ 191.299244][ T4227] Bluetooth: hci1: command 0x0406 tx timeout [ 191.306651][ T1111] usb 5-1: config 0 descriptor?? [ 191.315766][ T4227] Bluetooth: hci2: command 0x0406 tx timeout [ 191.325745][ T4227] Bluetooth: hci3: command 0x0406 tx timeout [ 191.336382][ T6363] usb 1-1: USB disconnect, device number 15 [ 191.357977][ T4228] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 191.361145][ T1111] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 191.387911][ T4228] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 191.564809][ T4227] usb 5-1: USB disconnect, device number 9 [ 191.581720][ T4228] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 191.597464][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.623295][ T4228] usb 2-1: Product: syz [ 191.636534][ T4228] usb 2-1: Manufacturer: syz [ 191.641801][ T4228] usb 2-1: SerialNumber: syz [ 191.659203][ T4228] usb 2-1: config 0 descriptor?? [ 191.700212][ T4228] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 192.006317][ T7816] loop2: detected capacity change from 0 to 32768 [ 192.120640][ T7816] XFS (loop2): Mounting V5 Filesystem [ 192.137294][ T7842] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 192.204551][ T7816] XFS (loop2): Ending clean mount [ 192.321317][ T4196] XFS (loop2): Unmounting Filesystem [ 192.413954][ T7859] loop3: detected capacity change from 0 to 128 [ 192.505724][ T7859] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 192.548116][ T4228] gspca_sunplus: reg_r err -71 [ 192.553043][ T4228] sunplus: probe of 2-1:0.0 failed with error -71 [ 192.563951][ T7859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.591359][ T4228] usb 2-1: USB disconnect, device number 13 [ 192.949954][ T6359] ------------[ cut here ]------------ [ 192.950102][ T6359] no supported rates for sta (null) (0xffffffff, band 1) in rate_mask 0x0 with flags 0x0 [ 192.950940][ T6359] WARNING: CPU: 0 PID: 6359 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 192.950989][ T6359] Modules linked in: [ 192.951013][ T6359] CPU: 0 PID: 6359 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 192.951036][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.951052][ T6359] Workqueue: phy7 ieee80211_roc_work [ 192.951084][ T6359] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 192.951112][ T6359] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 86 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 90 f3 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 192.951132][ T6359] RSP: 0018:ffffc90002fbf5c8 EFLAGS: 00010246 [ 192.951154][ T6359] RAX: 84974602eb1d6000 RBX: 0000000000000008 RCX: ffff88802459d940 [ 192.951178][ T6359] RDX: 0000000000000000 RSI: 0000000080000200 RDI: 0000000000000000 [ 192.951194][ T6359] RBP: 0000000000000054 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 192.951212][ T6359] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff8880790787a8 [ 192.951231][ T6359] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.951247][ T6359] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 192.951267][ T6359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.951284][ T6359] CR2: 0000001b32a13ff8 CR3: 000000005b7eb000 CR4: 00000000003506f0 [ 192.951305][ T6359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.951320][ T6359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 192.951336][ T6359] Call Trace: [ 192.951344][ T6359] [ 192.951369][ T6359] rate_control_send_low+0x194/0x790 [ 192.951402][ T6359] rate_control_get_rate+0x207/0x5c0 [ 192.951437][ T6359] ieee80211_tx_h_rate_ctrl+0xb02/0x1700 [ 192.951482][ T6359] ? ieee80211_tx_h_select_key+0x17f0/0x17f0 [ 192.951517][ T6359] ? sta_info_hash_lookup+0x53e/0x580 [ 192.951545][ T6359] ? ieee80211_queue_skb+0xbc/0x2060 [ 192.951576][ T6359] invoke_tx_handlers_late+0xaa/0x16a0 [ 192.951604][ T6359] ? ieee80211_tx_h_select_key+0x7a6/0x17f0 [ 192.951639][ T6359] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 192.951678][ T6359] ieee80211_tx+0x2d4/0x460 [ 192.951706][ T6359] ? ieee80211_skb_resize+0x630/0x630 [ 192.951748][ T6359] ? queue_delayed_work_on+0x19d/0x1f0 [ 192.951776][ T6359] ? ieee80211_xmit+0x34c/0x470 [ 192.951808][ T6359] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 192.951841][ T6359] ieee80211_handle_roc_started+0x270/0x3f0 [ 192.951871][ T6359] _ieee80211_start_next_roc+0x832/0xbd0 [ 192.951904][ T6359] ieee80211_roc_work+0x2b/0x40 [ 192.951928][ T6359] process_one_work+0x85f/0x1010 [ 192.951968][ T6359] ? worker_detach_from_pool+0x240/0x240 [ 192.951992][ T6359] ? lockdep_hardirqs_off+0x70/0x100 [ 192.952023][ T6359] ? _raw_spin_lock_irq+0xb7/0xf0 [ 192.952088][ T6359] ? _raw_spin_lock_irqsave+0x100/0x100 [ 192.952115][ T6359] ? wq_worker_running+0x97/0x170 [ 192.952141][ T6359] worker_thread+0xaa6/0x1290 [ 192.952186][ T6359] ? lockdep_hardirqs_on+0x94/0x140 [ 192.952213][ T6359] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 192.952250][ T6359] kthread+0x436/0x520 [ 192.952271][ T6359] ? rcu_lock_release+0x20/0x20 [ 192.952293][ T6359] ? kthread_blkcg+0xd0/0xd0 [ 192.952318][ T6359] ret_from_fork+0x1f/0x30 [ 192.952358][ T6359] [ 192.952374][ T6359] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.952385][ T6359] CPU: 0 PID: 6359 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 192.952405][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.952419][ T6359] Workqueue: phy7 ieee80211_roc_work [ 192.952440][ T6359] Call Trace: [ 192.952448][ T6359] [ 192.952456][ T6359] dump_stack_lvl+0x188/0x250 [ 192.952481][ T6359] ? show_regs_print_info+0x20/0x20 [ 192.952503][ T6359] ? load_image+0x400/0x400 [ 192.952539][ T6359] panic+0x2e5/0x810 [ 192.952570][ T6359] ? bpf_jit_dump+0xd0/0xd0 [ 192.952620][ T6359] ? ret_from_fork+0x1f/0x30 [ 192.952645][ T6359] ? __rate_control_send_low+0x630/0x880 [ 192.952671][ T6359] __warn+0x248/0x2b0 [ 192.952696][ T6359] ? __rate_control_send_low+0x630/0x880 [ 192.952723][ T6359] report_bug+0x1b7/0x2e0 [ 192.952755][ T6359] handle_bug+0x3a/0x70 [ 192.952776][ T6359] exc_invalid_op+0x16/0x40 [ 192.952799][ T6359] asm_exc_invalid_op+0x16/0x20 [ 192.952820][ T6359] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 192.952845][ T6359] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 86 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 90 f3 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 192.952865][ T6359] RSP: 0018:ffffc90002fbf5c8 EFLAGS: 00010246 [ 192.952884][ T6359] RAX: 84974602eb1d6000 RBX: 0000000000000008 RCX: ffff88802459d940 [ 192.952901][ T6359] RDX: 0000000000000000 RSI: 0000000080000200 RDI: 0000000000000000 [ 192.952915][ T6359] RBP: 0000000000000054 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 192.952932][ T6359] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff8880790787a8 [ 192.952949][ T6359] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.952980][ T6359] ? __rate_control_send_low+0x630/0x880 [ 192.953019][ T6359] rate_control_send_low+0x194/0x790 [ 192.953050][ T6359] rate_control_get_rate+0x207/0x5c0 [ 192.953084][ T6359] ieee80211_tx_h_rate_ctrl+0xb02/0x1700 [ 192.953126][ T6359] ? ieee80211_tx_h_select_key+0x17f0/0x17f0 [ 192.953159][ T6359] ? sta_info_hash_lookup+0x53e/0x580 [ 192.953191][ T6359] ? ieee80211_queue_skb+0xbc/0x2060 [ 192.953220][ T6359] invoke_tx_handlers_late+0xaa/0x16a0 [ 192.953247][ T6359] ? ieee80211_tx_h_select_key+0x7a6/0x17f0 [ 192.953280][ T6359] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 192.953318][ T6359] ieee80211_tx+0x2d4/0x460 [ 192.953345][ T6359] ? ieee80211_skb_resize+0x630/0x630 [ 192.953386][ T6359] ? queue_delayed_work_on+0x19d/0x1f0 [ 192.953413][ T6359] ? ieee80211_xmit+0x34c/0x470 [ 192.953443][ T6359] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 192.953474][ T6359] ieee80211_handle_roc_started+0x270/0x3f0 [ 192.953503][ T6359] _ieee80211_start_next_roc+0x832/0xbd0 [ 192.953534][ T6359] ieee80211_roc_work+0x2b/0x40 [ 192.953557][ T6359] process_one_work+0x85f/0x1010 [ 192.953596][ T6359] ? worker_detach_from_pool+0x240/0x240 [ 192.953619][ T6359] ? lockdep_hardirqs_off+0x70/0x100 [ 192.953647][ T6359] ? _raw_spin_lock_irq+0xb7/0xf0 [ 192.953668][ T6359] ? _raw_spin_lock_irqsave+0x100/0x100 [ 192.953694][ T6359] ? wq_worker_running+0x97/0x170 [ 192.953719][ T6359] worker_thread+0xaa6/0x1290 [ 192.953754][ T6359] ? lockdep_hardirqs_on+0x94/0x140 [ 192.953780][ T6359] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 192.953815][ T6359] kthread+0x436/0x520 [ 192.953834][ T6359] ? rcu_lock_release+0x20/0x20 [ 192.953855][ T6359] ? kthread_blkcg+0xd0/0xd0 [ 192.953879][ T6359] ret_from_fork+0x1f/0x30 [ 192.953917][ T6359] [ 192.954198][ T6359] Kernel Offset: disabled [ 193.626103][ T6359] Rebooting in 86400 seconds..