last executing test programs: 5m15.484732661s ago: executing program 2 (id=400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x18}]}]}], {0x14}}, 0x29c}}, 0x4048010) 5m15.353204784s ago: executing program 2 (id=402): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x20000005) 5m11.041118421s ago: executing program 2 (id=410): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x688f3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x15}, 0x0) 5m6.26378454s ago: executing program 2 (id=416): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1c040, &(0x7f00000004c0)={[{@namecase}, {@fmask={'fmask', 0x3d, 0x2}}, {@time_offset={'time_offset', 0x3d, 0x400}}, {@dmask={'dmask', 0x3d, 0x8}}, {@sys_tz}, {@umask={'umask', 0x3d, 0x400}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0x1, 0x1533, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) 5m5.840724071s ago: executing program 2 (id=421): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, "00334300049bb3c2ce00eda9cd3adb0101000000000000000800"}) 5m5.323041643s ago: executing program 2 (id=426): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100013f00000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240), 0xc30, r4}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 5m2.048637825s ago: executing program 32 (id=426): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100013f00000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240), 0xc30, r4}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 1m14.934944427s ago: executing program 1 (id=956): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 1m14.523979528s ago: executing program 1 (id=957): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000057c0)=ANY=[@ANYBLOB='alloc_mode=default,active_logs=4,mode=fragment:block,noinline_xattr,background_gc=sync,background_gc=off,noinline_xattr,fastboot,fsync_mode=strict,discard_unit=section,noquota,disable_ext_identify,extent_cache,resgid=', @ANYRESOCT, @ANYRES8], 0x21, 0x554e, &(0x7f00000058c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xe042, 0x0) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m10.814662137s ago: executing program 1 (id=964): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x103, 0x9, 0x0, 0xffff}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0}, 0x400c0c0) 1m9.17944407s ago: executing program 1 (id=970): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESDEC, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m8.519250068s ago: executing program 1 (id=976): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x148}], 0x1}}], 0x1, 0x2090) sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918", 0xcf}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{0x0}, {&(0x7f0000002240)="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", 0x227}], 0x2}}], 0x2, 0x0) 1m7.899141024s ago: executing program 1 (id=983): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 1m7.28838898s ago: executing program 33 (id=983): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 6.703124092s ago: executing program 3 (id=1267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="10040000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="f10333008000e100ffffffffffff080211000000080211000001000000000000000000003f0003480301b3060204000587"], 0x410}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 6.00955435s ago: executing program 5 (id=1268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100060000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000101010101010000080026006c0900000800270001"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 5.936093513s ago: executing program 4 (id=1270): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xe042, 0x0) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f0000000400)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.911892343s ago: executing program 3 (id=1271): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0xd0, 0x8801, 0x0, 0x0}, {0xd7, 0x2000, 0x0, 0x0}], 0x2}) 5.828652745s ago: executing program 5 (id=1272): sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="3df1", 0x2}, {&(0x7f0000000380)="1fece8605605f86ae5ed2f9d4a694a3c5efa1cee7653147e2455e6ed2e83c0518fe6", 0x22}, {&(0x7f0000000480)="fcf6b777a5376144c4", 0x9}], 0x3}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.726471168s ago: executing program 0 (id=1273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x142, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f0000001200)) 5.64704898s ago: executing program 5 (id=1274): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendto$inet(r0, 0x0, 0x0, 0x408a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}, {0xf, 0xf}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x28004004}, 0x90) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) 5.528890313s ago: executing program 0 (id=1275): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f0000001240)=[{0x0, 0x0, 0x1800}, {0x2, 0x0, 0x2000}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 5.365453148s ago: executing program 0 (id=1276): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x2282, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5.233307531s ago: executing program 0 (id=1277): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x148}], 0x1}}], 0x1, 0x2090) sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06ce3d14da5dc3ba35cac41c2fb97fe2618e", 0x7f}, {&(0x7f0000002240)="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", 0x227}], 0x2}}], 0x1, 0x0) 4.214728648s ago: executing program 0 (id=1278): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) sendto$inet(r0, 0x0, 0x0, 0x408a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0xfff1}, {0xf, 0xf}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x28004004}, 0x90) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) 3.985873214s ago: executing program 4 (id=1279): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000005080)={0x2020}, 0x2020) 3.607150334s ago: executing program 3 (id=1280): r0 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x800, 0x1, 0x100028c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./security/ima/policy\x00', 0x2000, 0x149) close_range(r0, 0xffffffffffffffff, 0x0) 3.334144252s ago: executing program 3 (id=1281): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.248662344s ago: executing program 3 (id=1282): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) sendto$inet(r0, 0x0, 0x0, 0x408a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0xfff1}, {0xf, 0xf}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x28004004}, 0x90) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) 3.103107288s ago: executing program 4 (id=1283): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.089710678s ago: executing program 4 (id=1284): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r0, &(0x7f0000000440)={0x4e, {"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", 0x1000}}, 0x1006) 2.947935112s ago: executing program 4 (id=1285): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000001c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000014) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x29) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x28000) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r6, 0x40044104, &(0x7f0000000080)=0xff) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) 670.103692ms ago: executing program 5 (id=1286): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 625.749403ms ago: executing program 4 (id=1287): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) write(r0, &(0x7f0000000700)='bind', 0x4) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 514.982057ms ago: executing program 0 (id=1288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000002a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="0fae4700c7442400d6000000c7442402be570000c7442406000000000f011424eac600000051000f01c9f73d000000009a953300002401f757c2c4c32949cb03f36f0fc79a05000000", 0x49}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 408.748049ms ago: executing program 5 (id=1289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@random="163e79baae36", @local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x67, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x4e22, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x1, 0x7, 0x0, @void}, "245ac175"}}}}}}}, 0x36) 46.842639ms ago: executing program 3 (id=1290): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 0s ago: executing program 5 (id=1291): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x148}], 0x1}}], 0x1, 0x2090) sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918", 0xcf}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06ce3d14da5dc3ba35cac41c2fb97fe261", 0x7e}, {&(0x7f0000002240)="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", 0x227}], 0x2}}], 0x2, 0x0) kernel console output (not intermixed with test programs): .794649][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 427.962888][ T9] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.159133][ T9] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.334644][ T9] usb 2-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 428.545480][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 428.688983][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 428.890908][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.201137][ T5762] usbhid 4-1:0.0: can't add hid device: -71 [ 429.272394][ T9] usb 2-1: config 0 descriptor?? [ 429.361359][ T5762] usbhid: probe of 4-1:0.0 failed with error -71 [ 429.795345][ T5762] usb 4-1: USB disconnect, device number 11 [ 429.802344][ T9] usb 2-1: can't set config #0, error -71 [ 429.872289][ T9] usb 2-1: USB disconnect, device number 12 [ 430.123428][ T5815] usb 1-1: string descriptor 0 read error: -71 [ 430.140834][ T5815] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 430.165112][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.884024][ T5815] usb 1-1: config 0 descriptor?? [ 430.890570][ T5815] usb 1-1: can't set config #0, error -71 [ 430.898426][ T5815] usb 1-1: USB disconnect, device number 11 [ 431.213409][ T8127] loop4: detected capacity change from 0 to 8 [ 431.266977][ T5815] Process accounting resumed [ 432.585815][ T9] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 432.801003][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 432.835066][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.865020][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.894871][ T9] usb 1-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 432.904004][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.928465][ T9] usb 1-1: config 0 descriptor?? [ 434.030037][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 435.362549][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 435.435120][ T5843] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 435.780694][ T5843] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 435.902194][ T5843] usb 4-1: config 0 has no interface number 0 [ 436.013354][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 436.022806][ T5843] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 436.027923][ T9] usb 1-1: USB disconnect, device number 12 [ 436.167866][ T5843] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 436.213583][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.238798][ T8165] loop0: detected capacity change from 0 to 2048 [ 436.264886][ T5843] usb 4-1: Product: syz [ 436.269131][ T5843] usb 4-1: Manufacturer: syz [ 436.290267][ T5843] usb 4-1: SerialNumber: syz [ 436.326584][ T8165] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.328763][ T5843] usb 4-1: config 0 descriptor?? [ 436.361001][ T8168] loop1: detected capacity change from 0 to 8 [ 436.386542][ T5843] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 437.145956][ T788] usb 4-1: USB disconnect, device number 12 [ 437.259781][ T788] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 438.124477][ T8185] Illegal XDP return value 106021695 on prog (id 23) dev N/A, expect packet loss! [ 438.183896][ T8187] loop0: detected capacity change from 0 to 8 [ 438.333507][ T7289] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 440.220739][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.286326][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.323093][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 440.464953][ T5085] Bluetooth: hci4: command 0x1003 tx timeout [ 440.472353][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 441.519479][ T8201] loop0: detected capacity change from 0 to 512 [ 441.976447][ T8204] ip_tables: iptables: counters copy to user failed while replacing table [ 442.106450][ T51] Bluetooth: hci1: unknown advertising packet type: 0x65 [ 442.134241][ T8201] bio_check_eod: 39 callbacks suppressed [ 442.134259][ T8201] syz.0.676: attempt to access beyond end of device [ 442.134259][ T8201] loop0: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 442.181686][ T8201] syz.0.676: attempt to access beyond end of device [ 442.181686][ T8201] loop0: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 442.198997][ T28] audit: type=1800 audit(1791459748.265:27): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.676" name="file2" dev="loop0" ino=1048684 res=0 errno=0 [ 442.221699][ T8201] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 442.231363][ T8201] FAT-fs (loop0): Filesystem has been set read-only [ 442.389660][ T8] Process accounting resumed [ 442.525707][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 442.834899][ T788] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 443.041425][ T8242] loop3: detected capacity change from 0 to 512 [ 443.059903][ T788] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 443.557503][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 444.074636][ T8242] syz.3.691: attempt to access beyond end of device [ 444.074636][ T8242] loop3: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 444.356284][ T8242] syz.3.691: attempt to access beyond end of device [ 444.356284][ T8242] loop3: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 444.834036][ T8242] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 444.869355][ T28] audit: type=1800 audit(1791459750.895:28): pid=8242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.691" name="file2" dev="loop3" ino=1048685 res=0 errno=0 [ 445.008404][ T8242] FAT-fs (loop3): Filesystem has been set read-only [ 445.023470][ T5085] Bluetooth: hci4: command 0x1003 tx timeout [ 445.028396][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 445.281756][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.586902][ T8242] syz.3.691 (8242) used greatest stack depth: 20168 bytes left [ 446.803891][ T788] usb 2-1: config 0 descriptor?? [ 446.883284][ T9] Process accounting resumed [ 446.907162][ T788] usb 2-1: can't set config #0, error -71 [ 446.916640][ T788] usb 2-1: USB disconnect, device number 13 [ 447.377421][ T2960] Bluetooth: hci4: Frame reassembly failed (-84) [ 447.455029][ T788] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 447.593942][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 448.909953][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 449.416440][ T5085] Bluetooth: hci4: command 0x1003 tx timeout [ 449.423025][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 450.158004][ T9] Process accounting resumed [ 450.942485][ T788] usb 4-1: device descriptor read/all, error -71 [ 451.271494][ T8312] loop0: detected capacity change from 0 to 256 [ 451.365432][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 451.405781][ T788] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 451.505380][ T5843] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 451.564953][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 451.572090][ T9] usb 2-1: config 8 has an invalid interface number: 161 but max is 0 [ 451.580431][ T9] usb 2-1: config 8 has no interface number 0 [ 451.589409][ T9] usb 2-1: config 8 interface 161 altsetting 9 endpoint 0xC has an invalid bInterval 127, changing to 10 [ 451.602239][ T9] usb 2-1: config 8 interface 161 has no altsetting 0 [ 451.612501][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=010b, bcdDevice= e.ee [ 451.622093][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.623003][ T788] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 451.631577][ T9] usb 2-1: Product: syz [ 451.644250][ T9] usb 2-1: Manufacturer: syz [ 451.649177][ T9] usb 2-1: SerialNumber: syz [ 451.651057][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.662292][ T5980] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 451.676318][ T788] usb 4-1: Product: syz [ 451.680591][ T788] usb 4-1: Manufacturer: syz [ 451.690662][ T788] usb 4-1: SerialNumber: syz [ 451.695480][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 451.711082][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.723543][ T788] usb 4-1: config 0 descriptor?? [ 451.732161][ T788] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 014 [ 451.740744][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.750853][ T5843] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 451.760054][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.772935][ T5843] usb 5-1: config 0 descriptor?? [ 451.864899][ T5980] usb 1-1: Using ep0 maxpacket: 32 [ 451.875848][ T5980] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 451.886554][ T9] keyspan 2-1:8.161: Keyspan - (without firmware) converter detected [ 451.905012][ T5980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.911679][ T9] usb 2-1: USB disconnect, device number 14 [ 451.936529][ T9] keyspan 2-1:8.161: device disconnected [ 451.945496][ T5980] usb 1-1: config 0 has no interface number 0 [ 451.951977][ T5980] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.978447][ T5980] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 452.001776][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.013629][ T5980] usb 1-1: Product: syz [ 452.018084][ T5980] usb 1-1: Manufacturer: syz [ 452.022795][ T5980] usb 1-1: SerialNumber: syz [ 452.031864][ T5980] usb 1-1: config 0 descriptor?? [ 452.043036][ T5980] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 452.052289][ T5980] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 452.207451][ T5843] savu 0003:1E7D:2D5A.0004: item fetching failed at offset 6/8 [ 452.217723][ T5843] savu 0003:1E7D:2D5A.0004: parse failed [ 452.223529][ T5843] savu: probe of 0003:1E7D:2D5A.0004 failed with error -22 [ 452.249595][ T5980] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 452.378381][ T788] i2c i2c-1: failure reading functionality [ 452.394397][ T788] i2c i2c-1: connected i2c-tiny-usb device [ 452.411205][ T788] usb 4-1: USB disconnect, device number 14 [ 452.430858][ T5843] usb 5-1: USB disconnect, device number 7 [ 452.476972][ T5980] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 452.745034][ T8] Process accounting resumed [ 452.790777][ T5843] usb 1-1: USB disconnect, device number 13 [ 452.797460][ T5843] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 452.980541][ T8323] comedi: valid board names for 8255 driver are: [ 452.987166][ T8323] 8255 [ 452.989984][ T8323] comedi: valid board names for vmk80xx driver are: [ 452.997862][ T8323] vmk80xx [ 453.000940][ T8323] comedi: valid board names for usbduxsigma driver are: [ 453.008441][ T8323] usbduxsigma [ 453.011862][ T8323] comedi: valid board names for usbduxfast driver are: [ 453.019639][ T8323] usbduxfast [ 453.022970][ T8323] comedi: valid board names for usbdux driver are: [ 453.030886][ T8323] usbdux [ 453.033884][ T8323] comedi: valid board names for ni6501 driver are: [ 453.041144][ T8323] ni6501 [ 453.044202][ T8323] comedi: valid board names for dt9812 driver are: [ 453.051278][ T8323] dt9812 [ 453.054329][ T8323] comedi: valid board names for ni_labpc_cs driver are: [ 453.061784][ T8323] ni_labpc_cs [ 453.065594][ T8323] comedi: valid board names for ni_daq_700 driver are: [ 453.072601][ T8323] ni_daq_700 [ 453.076521][ T8323] comedi: valid board names for labpc_pci driver are: [ 453.083442][ T8323] labpc_pci [ 453.087146][ T8323] comedi: valid board names for adl_pci9118 driver are: [ 453.094234][ T8323] pci9118dg [ 453.099152][ T8323] pci9118hg [ 453.102469][ T8323] pci9118hr [ 453.109381][ T8323] comedi: valid board names for 8255_pci driver are: [ 453.118633][ T8323] 8255_pci [ 453.121901][ T8323] comedi: valid board names for s526 driver are: [ 453.130964][ T8323] s526 [ 453.137984][ T8323] comedi: valid board names for multiq3 driver are: [ 453.144709][ T8323] multiq3 [ 453.150552][ T8323] comedi: valid board names for pcmuio driver are: [ 453.159722][ T8323] pcmuio48 [ 453.163002][ T8323] pcmuio96 [ 453.169064][ T8323] comedi: valid board names for pcmmio driver are: [ 453.178177][ T8323] pcmmio [ 453.181233][ T8323] comedi: valid board names for pcmda12 driver are: [ 453.190739][ T8323] pcmda12 [ 453.193874][ T8323] comedi: valid board names for pcmad driver are: [ 453.203140][ T8323] pcmad12 [ 453.209736][ T8323] pcmad16 [ 453.212922][ T8323] comedi: valid board names for ni_labpc driver are: [ 453.221670][ T8323] lab-pc-1200 [ 453.227153][ T8323] lab-pc-1200ai [ 453.230791][ T8323] lab-pc+ [ 453.233904][ T8323] comedi: valid board names for atmio16 driver are: [ 453.241462][ T8323] atmio16 [ 453.244566][ T8323] atmio16d [ 453.247849][ T5815] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 453.256872][ T8323] comedi: valid board names for ni_at_ao driver are: [ 453.263803][ T8323] at-ao-6 [ 453.269637][ T8323] at-ao-10 [ 453.272864][ T8323] comedi: valid board names for ni_at_a2150 driver are: [ 453.282651][ T8323] ni_at_a2150 [ 453.288695][ T8323] comedi: valid board names for adq12b driver are: [ 453.298140][ T8323] adq12b [ 453.301226][ T8323] comedi: valid board names for mpc624 driver are: [ 453.310853][ T8323] mpc624 [ 453.313882][ T8323] comedi: valid board names for c6xdigio driver are: [ 453.324588][ T8323] c6xdigio [ 453.328844][ T8323] comedi: valid board names for aio_iiro_16 driver are: [ 453.336374][ T8323] aio_iiro_16 [ 453.340568][ T8323] comedi: valid board names for aio_aio12_8 driver are: [ 453.350986][ T8323] aio_aio12_8 [ 453.354478][ T8323] aio_ai12_8 [ 453.358378][ T8323] aio_ao12_4 [ 453.361825][ T8323] comedi: valid board names for fl512 driver are: [ 453.368799][ T8323] fl512 [ 453.371758][ T8323] comedi: valid board names for dmm32at driver are: [ 453.378998][ T8323] dmm32at [ 453.383967][ T8323] comedi: valid board names for dt282x driver are: [ 453.392836][ T8323] dt2821 [ 453.398281][ T8323] dt2821-f [ 453.401447][ T8323] dt2821-g [ 453.406179][ T8323] dt2823 [ 453.418368][ T8323] dt2824-pgh [ 453.421687][ T8323] dt2824-pgl [ 453.426154][ T8323] dt2825 [ 453.429250][ T8323] dt2827 [ 453.432236][ T8323] dt2828 [ 453.439367][ T8323] dt2829 [ 453.442979][ T8323] dt21-ez [ 453.447363][ T5815] usb 2-1: Using ep0 maxpacket: 16 [ 453.452726][ T8323] dt23-ez [ 453.460590][ T8323] dt24-ez [ 453.464688][ T5815] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 453.473273][ T8323] dt24-ez-pgl [ 453.476915][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.487290][ T8323] comedi: valid board names for dt2817 driver are: [ 453.493842][ T8323] dt2817 [ 453.497132][ T5815] usb 2-1: config 0 has no interface number 0 [ 453.515662][ T8323] comedi: valid board names for dt2815 driver are: [ 453.522539][ T8323] dt2815 [ 453.526027][ T8323] comedi: valid board names for dt2814 driver are: [ 453.532848][ T8323] dt2814 [ 453.536883][ T8323] comedi: valid board names for dt2811 driver are: [ 453.544639][ T8323] dt2811-pgh [ 453.548490][ T5815] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 453.561483][ T8323] dt2811-pgl [ 453.571640][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.584906][ T8323] comedi: valid board names for dt2801 driver are: [ 453.591476][ T8323] dt2801 [ 453.594453][ T8323] comedi: valid board names for das6402 driver are: [ 453.613326][ T5815] usb 2-1: Product: syz [ 453.617777][ T5815] usb 2-1: Manufacturer: syz [ 453.622434][ T5815] usb 2-1: SerialNumber: syz [ 453.627205][ T8323] das6402-12 [ 453.630540][ T8323] das6402-16 [ 453.633872][ T8323] comedi: valid board names for das1800 driver are: [ 453.643251][ T5815] usb 2-1: config 0 descriptor?? [ 453.659466][ T5815] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 453.667655][ T8323] das-1701st [ 453.671026][ T8323] das-1701st-da [ 453.674620][ T8323] das-1702st [ 453.678139][ T5815] usb 2-1: No valid video chain found. [ 453.695527][ T28] audit: type=1326 audit(1791459759.765:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.0.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc07d9e199 code=0x7ffc0000 [ 453.695958][ T8323] das-1702st-da [ 453.744236][ T28] audit: type=1326 audit(1791459759.765:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.0.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc07d9e199 code=0x7ffc0000 [ 453.764966][ T8323] das-1702hr [ 453.774889][ T8323] das-1702hr-da [ 453.778498][ T8323] das-1701ao [ 453.781821][ T8323] das-1702ao [ 453.783122][ T28] audit: type=1326 audit(1791459759.795:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.0.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc07d9e199 code=0x7ffc0000 [ 453.812203][ T28] audit: type=1326 audit(1791459759.795:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.0.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc07d9e199 code=0x7ffc0000 [ 453.836790][ T28] audit: type=1326 audit(1791459759.795:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.0.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc07d9e199 code=0x7ffc0000 [ 453.862035][ T28] audit: type=1326 audit(1791459759.795:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.0.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcc07d9e199 code=0x7ffc0000 [ 453.877644][ T8323] das-1801st [ 453.887890][ T28] audit: type=1326 audit(1791459759.795:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.0.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc07d9e199 code=0x7ffc0000 [ 453.933748][ T8323] das-1801st-da [ 453.944934][ T8323] das-1802st [ 453.952971][ T9] usb 2-1: USB disconnect, device number 15 [ 453.977770][ T8323] das-1802st-da [ 453.981398][ T8323] das-1802hr [ 454.010549][ T8323] das-1802hr-da [ 454.071596][ T8323] das-1801hc [ 454.135237][ T8323] das-1802hc [ 454.145911][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.721'. [ 454.210174][ T8323] das-1801ao [ 454.293066][ T8323] das-1802ao [ 454.322333][ T8323] comedi: valid board names for das800 driver are: [ 454.391243][ T8323] das-800 [ 454.418728][ T8323] cio-das800 [ 454.450620][ T8323] das-801 [ 454.484642][ T8323] cio-das801 [ 454.529528][ T8323] das-802 [ 454.572654][ T8323] cio-das802 [ 454.616619][ T8323] cio-das802/16 [ 454.696306][ T8323] comedi: valid board names for isa-das08 driver are: [ 454.808433][ T8323] isa-das08 [ 454.849438][ T8323] das08-pgm [ 454.899261][ T8323] das08-pgh [ 454.940880][ T8323] das08-pgl [ 454.989562][ T8323] das08-aoh [ 455.033882][ T8323] das08-aol [ 455.074510][ T8323] das08-aom [ 455.128468][ T8323] das08/jr-ao [ 455.176199][ T8323] das08jr-16-ao [ 455.227234][ T8323] pc104-das08 [ 455.272403][ T8323] das08jr/16 [ 455.327487][ T8323] comedi: valid board names for das16m1 driver are: [ 455.417390][ T8323] das16m1 [ 455.467317][ T8323] comedi: valid board names for dac02 driver are: [ 455.563839][ T8323] dac02 [ 455.626461][ T8323] comedi: valid board names for rti802 driver are: [ 455.737953][ T8323] rti802 [ 455.788131][ T8323] comedi: valid board names for rti800 driver are: [ 455.914072][ T8323] rti800 [ 455.960095][ T8323] rti815 [ 455.975193][ T5085] Bluetooth: hci4: command 0x1003 tx timeout [ 455.975269][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 456.066298][ T8323] comedi: valid board names for pcm3724 driver are: [ 456.200014][ T8323] pcm3724 [ 456.263031][ T8323] comedi: valid board names for pcl818 driver are: [ 456.368943][ T8323] pcl818l [ 456.416866][ T8323] pcl818h [ 456.468366][ T8323] pcl818hd [ 456.522395][ T8323] pcl818hg [ 456.567785][ T8323] pcl818 [ 456.613459][ T8323] pcl718 [ 456.669784][ T8323] pcm3718 [ 456.723473][ T8323] comedi: valid board names for pcl816 driver are: [ 456.831898][ T8323] pcl816 [ 456.891720][ T8323] pcl814b [ 456.946013][ T8323] comedi: valid board names for pcl812 driver are: [ 457.045953][ T8323] pcl812 [ 457.079801][ T8323] pcl812pg [ 457.121242][ T8323] acl8112pg [ 457.608126][ T8323] acl8112dg [ 457.611418][ T8323] acl8112hg [ 457.614642][ T8323] a821pgl [ 457.639387][ T9] Process accounting resumed [ 457.664825][ T8323] a821pglnda [ 457.668228][ T8323] a821pgh [ 457.671290][ T8323] a822pgl [ 457.674322][ T8323] a822pgh [ 457.744851][ T8323] a823pgl [ 457.756130][ T8323] a823pgh [ 457.775885][ T8323] pcl813 [ 457.785139][ T8323] pcl813b [ 457.788231][ T8323] acl8113 [ 457.824939][ T8323] iso813 [ 457.827953][ T8323] acl8216 [ 457.831013][ T8323] a826pg [ 457.833981][ T8323] comedi: valid board names for pcl730 driver are: [ 457.893358][ T8323] pcl730 [ 457.902898][ T8323] iso730 [ 457.912822][ T8323] acl7130 [ 457.916673][ T8323] pcm3730 [ 457.922372][ T8323] pcl725 [ 457.928715][ T8323] p8r8dio [ 458.065100][ T8323] acl7225b [ 458.068295][ T8323] p16r16dio [ 458.076993][ T8323] pcl733 [ 458.079999][ T8323] pcl734 [ 458.124482][ T8323] opmm-1616-xt [ 458.136891][ T8323] pearl-mm-p [ 458.154961][ T8323] ir104-pbf [ 458.158238][ T8323] comedi: valid board names for pcl726 driver are: [ 458.183815][ T8323] pcl726 [ 458.187117][ T8323] pcl727 [ 458.190125][ T8323] pcl728 [ 458.193106][ T8323] acl6126 [ 458.196266][ T8323] acl6128 [ 458.199342][ T8323] comedi: valid board names for pcl724 driver are: [ 458.206421][ T8323] pcl724 [ 458.209418][ T8323] pcl722 [ 458.212396][ T8323] pcl731 [ 458.215723][ T8323] acl7122 [ 458.218823][ T8323] acl7124 [ 458.221888][ T8323] pet48dio [ 458.365009][ T8323] pcmio48 [ 458.418836][ T8323] onyx-mm-dio [ 458.486526][ T8323] comedi: valid board names for pcl711 driver are: [ 458.615459][ T8323] pcl711 [ 458.674749][ T8323] pcl711b [ 458.744875][ T8323] acl8112hg [ 458.748144][ T8323] acl8112dg [ 458.751375][ T8323] comedi: valid board names for amplc_pc263 driver are: [ 458.809805][ T8323] pc263 [ 458.812733][ T8323] comedi: valid board names for amplc_pc236 driver are: [ 458.867393][ T8323] pc36at [ 458.870416][ T8323] comedi: valid board names for amplc_dio200 driver are: [ 458.920913][ T8323] pc212e [ 458.924026][ T8323] pc214e [ 458.965306][ T8323] pc215e [ 458.968323][ T8323] pc218e [ 458.986952][ T8323] pc272e [ 458.989999][ T8323] comedi: valid board names for comedi_parport driver are: [ 458.997388][ T8323] comedi_parport [ 459.001064][ T8323] comedi: valid board names for comedi_test driver are: [ 459.008209][ T8323] comedi_test [ 459.011630][ T8323] comedi: valid board names for comedi_bond driver are: [ 459.018918][ T8323] comedi_bond [ 459.207262][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 462.063588][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 463.794081][ T8381] loop1: detected capacity change from 0 to 8 [ 465.959395][ T8370] Process accounting resumed [ 466.632507][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'. [ 466.695147][ T5980] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 466.982691][ T5980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.243128][ T5980] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 467.355496][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.467962][ T5980] usb 5-1: Product: syz [ 467.534162][ T5980] usb 5-1: Manufacturer: syz [ 467.599945][ T5980] usb 5-1: SerialNumber: syz [ 469.068821][ T5980] usb 5-1: cannot create comm data receiver. [ 469.180932][ T5980] snd-usb-6fire: probe of 5-1:1.0 failed with error -2 [ 469.379869][ T5980] usb 5-1: USB disconnect, device number 8 [ 469.884721][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.745'. [ 470.571660][ T8411] loop1: detected capacity change from 0 to 1024 [ 472.836760][ T8416] loop4: detected capacity change from 0 to 8 [ 472.936790][ T7339] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 474.422126][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 476.294931][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 476.294964][ T5085] Bluetooth: hci4: command 0x1003 tx timeout [ 476.364518][ T8431] loop3: detected capacity change from 0 to 256 [ 476.540904][ T8431] exfat: Deprecated parameter 'utf8' [ 476.700609][ T8431] exfat: Deprecated parameter 'namecase' [ 477.294181][ T8431] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 478.634847][ T788] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 478.696721][ T5775] Process accounting resumed [ 478.878199][ T788] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 478.905932][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.939744][ T788] usb 4-1: config 0 descriptor?? [ 478.958565][ T788] cp210x 4-1:0.0: cp210x converter detected [ 479.063089][ T8455] loop0: detected capacity change from 0 to 8 [ 479.775865][ T8437] loop1: detected capacity change from 0 to 32768 [ 479.846758][ T8437] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 480.036693][ T788] usb 4-1: cp210x converter now attached to ttyUSB0 [ 480.315134][ T5980] usb 4-1: USB disconnect, device number 15 [ 480.332875][ T7339] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 480.365708][ T5980] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 480.406879][ T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 480.470701][ T5980] cp210x 4-1:0.0: device disconnected [ 480.615863][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 480.638171][ T23] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 480.674816][ T23] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 480.721162][ T23] usb 1-1: Product: syz [ 480.729822][ T23] usb 1-1: Manufacturer: syz [ 480.734498][ T23] usb 1-1: SerialNumber: syz [ 480.785190][ T788] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 480.814467][ T23] usb 1-1: config 0 descriptor?? [ 481.033451][ T788] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 481.065181][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.165935][ T788] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 481.185304][ T8453] loop4: detected capacity change from 0 to 32768 [ 481.215265][ T8370] usb 1-1: USB disconnect, device number 14 [ 481.215306][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.240503][ T788] usb 2-1: Product: syz [ 481.259367][ T8453] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 481.272120][ T788] usb 2-1: Manufacturer: syz [ 481.287555][ T788] usb 2-1: SerialNumber: syz [ 481.373040][ T788] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9 [ 481.460954][ T8453] XFS (loop4): Ending clean mount [ 481.482633][ T2960] Bluetooth: hci4: Frame reassembly failed (-84) [ 481.687286][ T7197] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 481.707017][ T5124] bcm5974 2-1:1.0: could not read from device [ 481.732971][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'. [ 481.831723][ T5124] bcm5974 2-1:1.0: could not read from device [ 482.429077][ T788] bcm5974 2-1:1.0: could not read from device [ 483.495310][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 483.503440][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 484.773693][ T9] Process accounting resumed [ 484.935199][ T5124] bcm5974 2-1:1.0: could not read from device [ 484.978054][ T788] input: failed to attach handler mousedev to device input9, error: -5 [ 485.021995][ T5124] bcm5974 2-1:1.0: could not read from device [ 485.034659][ T788] usb 2-1: USB disconnect, device number 16 [ 485.052657][ T5124] bcm5974 2-1:1.0: could not read from device [ 485.122273][ T8487] loop0: detected capacity change from 0 to 256 [ 485.278368][ T8492] loop4: detected capacity change from 0 to 8 [ 486.697002][ T8502] loop0: detected capacity change from 0 to 256 [ 486.852637][ T5762] Process accounting resumed [ 487.316320][ T8500] loop3: detected capacity change from 0 to 32768 [ 487.382249][ T8500] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 487.430562][ T8500] XFS (loop3): Mounting V5 filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a in no-recovery mode. Filesystem will be inconsistent. [ 487.536624][ T8522] loop0: detected capacity change from 0 to 8 [ 488.007456][ T5782] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 488.246764][ T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 488.499597][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.542028][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 488.617391][ T23] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 488.688340][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.056016][ T5980] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 489.109698][ T23] ttusb_dec_init_stb: unknown model returned by firmware (00070000) - please report [ 489.136365][ T23] ttusb-dec: probe of 2-1:1.0 failed with error -2 [ 489.204995][ T788] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 489.286039][ T5980] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 489.300391][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.325155][ T5980] usb 1-1: Product: syz [ 489.329391][ T5980] usb 1-1: Manufacturer: syz [ 489.343299][ T5775] usb 2-1: USB disconnect, device number 17 [ 489.349526][ T5980] usb 1-1: SerialNumber: syz [ 489.386743][ T5980] usb 1-1: config 0 descriptor?? [ 489.409091][ T5980] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 489.430090][ T788] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 489.444716][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.458599][ T5980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 489.468267][ T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 489.487857][ T788] usb 5-1: Product: syz [ 489.492095][ T788] usb 5-1: Manufacturer: syz [ 489.502001][ T5980] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 489.513751][ T788] usb 5-1: SerialNumber: syz [ 489.522058][ T5980] usb 1-1: media controller created [ 489.535954][ T788] usb 5-1: config 0 descriptor?? [ 489.561174][ T788] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 489.606980][ T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 489.640657][ T5980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.658813][ T788] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 489.672343][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.692518][ T788] usb 5-1: media controller created [ 489.702585][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 489.725060][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 15104, setting to 1024 [ 489.751551][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.764947][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 489.780393][ T8532] dvb-usb: bulk message failed: -22 (7/0) [ 489.796932][ T23] usb 4-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 489.814594][ T5980] DVB: Unable to find symbol mt352_attach() [ 489.820701][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.830642][ T23] usb 4-1: Product: syz [ 489.835208][ T23] usb 4-1: Manufacturer: syz [ 489.839859][ T23] usb 4-1: SerialNumber: syz [ 489.861244][ T8534] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 489.938203][ T788] DVB: Unable to find symbol mt352_attach() [ 489.950379][ T5980] DVB: Unable to find symbol nxt6000_attach() [ 489.975235][ T5980] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 489.990500][ T5980] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 490.025479][ T5980] dvb-usb: schedule remote query interval to 1000 msecs. [ 490.032623][ T5980] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 490.054689][ T5980] dvb-usb: bulk message failed: -22 (7/0) [ 490.063067][ T5980] dvb-usb: bulk message failed: -22 (7/0) [ 490.104315][ T5980] usb 1-1: USB disconnect, device number 15 [ 490.125026][ T788] DVB: Unable to find symbol nxt6000_attach() [ 490.131211][ T788] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 490.196293][ T51] Bluetooth: hci4: unexpected event 0x01 length: 0 < 1 [ 490.206345][ T51] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 490.213232][ T51] Bluetooth: hci4: unexpected event 0x01 length: 0 < 1 [ 490.221138][ T51] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 490.228222][ T51] Bluetooth: hci4: unexpected event 0x18 length: 0 < 23 [ 490.235689][ T51] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 490.247021][ T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 490.321908][ T788] dvb-usb: schedule remote query interval to 1000 msecs. [ 490.343159][ T5980] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 490.375233][ T788] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 490.409344][ T788] dvb-usb: bulk message failed: -22 (7/0) [ 490.416542][ T8370] usb 4-1: USB disconnect, device number 16 [ 490.424991][ T5085] Bluetooth: hci4: CSR: Local version failed (-71) [ 490.444908][ T788] dvb-usb: bulk message failed: -22 (7/0) [ 490.481287][ T788] usb 5-1: USB disconnect, device number 9 [ 490.542040][ T23] Process accounting resumed [ 490.719675][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.787'. [ 490.862084][ T788] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 491.475435][ T788] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 491.698872][ T788] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 491.721003][ T788] usb 5-1: config 0 has no interface number 0 [ 491.731145][ T788] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.789910][ T788] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 491.854671][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.878186][ T788] usb 5-1: Product: syz [ 491.903391][ T788] usb 5-1: Manufacturer: syz [ 491.932019][ T788] usb 5-1: SerialNumber: syz [ 491.965816][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 492.026124][ T788] usb 5-1: config 0 descriptor?? [ 492.134005][ T788] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 492.234945][ T8370] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 492.257155][ T8561] loop3: detected capacity change from 0 to 32768 [ 492.283700][ T8561] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 492.344005][ T8561] XFS (loop3): Ending clean mount [ 492.418020][ T8370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 492.435938][ T8370] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 492.456988][ T8370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 492.471882][ T8370] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 492.510933][ T8370] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 492.529436][ T8370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.553991][ T8370] usb 1-1: Product: syz [ 492.575374][ T8370] usb 1-1: Manufacturer: syz [ 492.583271][ T8370] usb 1-1: SerialNumber: syz [ 492.607873][ T8370] usb 1-1: config 0 descriptor?? [ 492.628541][ T8370] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 492.637008][ T788] usb 5-1: USB disconnect, device number 10 [ 492.669375][ T5782] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 492.670415][ T788] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 492.841695][ T8370] scsi host1: usb-storage 1-1:0.0 [ 493.052850][ T8370] usb 1-1: USB disconnect, device number 16 [ 493.644031][ T788] Process accounting resumed [ 493.704898][ T5980] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 493.735105][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 493.742725][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 493.897306][ T5980] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 493.922387][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.956479][ T5980] usb 5-1: config 0 descriptor?? [ 493.989264][ T5980] cp210x 5-1:0.0: cp210x converter detected [ 494.431770][ T5980] usb 5-1: cp210x converter now attached to ttyUSB0 [ 494.468128][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 494.705166][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 494.767650][ T5762] usb 5-1: USB disconnect, device number 11 [ 494.875026][ T5762] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 494.886520][ T5762] cp210x 5-1:0.0: device disconnected [ 495.014985][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 495.214953][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 495.238275][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 495.251940][ T9] usb 2-1: config 0 has no interface number 0 [ 495.265061][ T9] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.281541][ T9] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.292019][ T9] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.306056][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 495.316441][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 495.334228][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.352125][ T9] usb 2-1: config 0 descriptor?? [ 495.371640][ T9] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 495.458816][ T8630] loop4: detected capacity change from 0 to 764 [ 495.470160][ T8628] loop3: detected capacity change from 0 to 32768 [ 495.485470][ T8628] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.813 (8628) [ 495.519175][ T8628] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 495.532958][ T8630] rock: directory entry would overflow storage [ 495.535999][ T8628] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 495.551930][ T8628] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 495.569642][ T8630] rock: sig=0x4654, size=5, remaining=4 [ 495.585781][ T8628] BTRFS info (device loop3): use zstd compression, level 3 [ 495.603608][ T8628] BTRFS info (device loop3): using free space tree [ 495.682857][ T8628] BTRFS info (device loop3): enabling ssd optimizations [ 495.690559][ T8628] BTRFS info (device loop3): auto enabling async discard [ 495.780806][ T28] audit: type=1800 audit(1791459801.835:36): pid=8628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.813" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 495.837686][ T9] elan 0003:04F3:074D.0005: failed to start in urb: -90 [ 495.912725][ T5782] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 496.016747][ T9] elan 0003:04F3:074D.0005: Set report error for parm 6: -71 [ 496.061404][ T9] elan 0003:04F3:074D.0005: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 496.089860][ T9] elan 0003:04F3:074D.0005: Input device is not registered [ 496.152861][ T9] elan: probe of 0003:04F3:074D.0005 failed with error -119 [ 496.205012][ T9] usb 2-1: USB disconnect, device number 18 [ 496.332155][ T8651] fido_id[8651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 496.534993][ T5781] Bluetooth: hci4: command 0x1003 tx timeout [ 496.535103][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 496.608111][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 497.009768][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 498.374872][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 498.375542][ T5781] Bluetooth: hci5: command 0x1003 tx timeout [ 499.634501][ T8671] loop0: detected capacity change from 0 to 4096 [ 499.821528][ T8677] netlink: 48 bytes leftover after parsing attributes in process `syz.3.824'. [ 500.588026][ T8671] ntfs: volume version 3.1. [ 501.188075][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 501.255214][ T5775] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 501.496358][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 501.505136][ T5775] usb 2-1: Using ep0 maxpacket: 32 [ 501.510423][ T5775] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 501.536151][ T5775] usb 2-1: config 0 has no interface number 0 [ 501.545809][ T5775] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 501.559396][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.568411][ T5775] usb 2-1: Product: syz [ 501.572767][ T5775] usb 2-1: Manufacturer: syz [ 501.584842][ T5775] usb 2-1: SerialNumber: syz [ 501.595050][ T5775] usb 2-1: config 0 descriptor?? [ 501.605188][ T5762] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 501.618561][ T5775] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 501.671188][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.677763][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.681423][ T5775] usb 2-1: selecting invalid altsetting 1 [ 501.834929][ T5762] usb 4-1: Using ep0 maxpacket: 32 [ 501.858226][ T5775] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 501.886873][ T5762] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 501.888166][ T5775] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 501.937533][ T5762] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.046311][ T5762] usb 4-1: config 0 interface 0 has no altsetting 0 [ 502.079480][ T5762] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 502.136524][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.655790][ T5775] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 502.665710][ T5775] usb 2-1: media controller created [ 502.693132][ T5775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 502.716180][ T5762] usb 4-1: config 0 descriptor?? [ 502.749363][ T5775] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 502.783263][ T5775] zl10353_read_register: readreg error (reg=127, ret==-71) [ 502.810577][ T5775] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 502.945824][ T5775] usb 2-1: USB disconnect, device number 19 [ 503.052630][ T8709] loop1: detected capacity change from 0 to 2048 [ 503.123743][ T8709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.201425][ T5762] input: HID 0419:0600 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0419:0600.0006/input/input14 [ 503.254974][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 503.255759][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 503.392205][ T5762] samsung 0003:0419:0600.0006: input,hidraw0: USB HID v80.00 Joystick [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 503.425015][ T8370] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 503.447132][ T5762] usb 4-1: USB disconnect, device number 17 [ 503.454175][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.627742][ T8716] fido_id[8716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 503.864214][ T8370] usb 1-1: unable to get BOS descriptor or descriptor too short [ 503.874280][ T8370] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 503.884954][ T8370] usb 1-1: can't read configurations, error -71 [ 504.063372][ T8725] loop4: detected capacity change from 0 to 512 [ 504.344638][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 504.353960][ T8721] loop1: detected capacity change from 0 to 32768 [ 504.381882][ T8721] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 504.573413][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.843'. [ 506.374996][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 506.742036][ T7289] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 507.105124][ T5775] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 507.550948][ T5775] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 507.695842][ T5775] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.866180][ T5775] usb 2-1: config 0 has no interface number 0 [ 507.979319][ T5775] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 508.119949][ T5775] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.181707][ T8740] nr0: tun_chr_ioctl cmd 1074025677 [ 508.202082][ T8740] nr0: linktype set to 805 [ 508.219275][ T5775] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 508.269665][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.310741][ T5775] usb 2-1: Product: syz [ 508.332033][ T5775] usb 2-1: Manufacturer: syz [ 508.349302][ T5775] usb 2-1: SerialNumber: syz [ 508.361273][ T5775] usb 2-1: config 0 descriptor?? [ 508.632668][ T8754] loop3: detected capacity change from 0 to 1024 [ 508.649624][ T8754] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 508.662209][ T8754] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 508.679909][ T8754] System zones: 0-1, 3-36 [ 508.684682][ T8754] EXT4-fs (loop3): orphan cleanup on readonly fs [ 508.705929][ T8754] EXT4-fs (loop3): 1 orphan inode deleted [ 508.740288][ T8754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 508.761613][ T8754] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 508.770112][ T5980] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 508.780050][ T8754] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 508.794133][ T8754] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.851: Block bitmap for bg 0 marked uninitialized [ 508.844558][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.874874][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 508.976454][ T5980] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 508.984631][ T5980] usb 1-1: config 0 has no interface number 0 [ 508.991374][ T5980] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 509.006614][ T5980] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 509.024921][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.040269][ T5980] usb 1-1: Product: syz [ 509.046531][ T5980] usb 1-1: Manufacturer: syz [ 509.051194][ T5980] usb 1-1: SerialNumber: syz [ 509.058169][ T5762] usb 2-1: USB disconnect, device number 20 [ 509.069841][ T5980] usb 1-1: config 0 descriptor?? [ 509.095626][ T5980] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 509.104680][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 509.130337][ T23] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 509.147716][ T23] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 509.161030][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 509.168229][ T23] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 509.177930][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.194367][ T23] usb 5-1: config 0 descriptor?? [ 509.214898][ T5775] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 509.311601][ T5762] usb 1-1: USB disconnect, device number 19 [ 509.321469][ T5762] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 509.430112][ T5775] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 509.439328][ T5775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.449275][ T5775] usb 4-1: Product: syz [ 509.455959][ T5775] usb 4-1: Manufacturer: syz [ 509.460640][ T5775] usb 4-1: SerialNumber: syz [ 509.471048][ T5775] usb 4-1: config 0 descriptor?? [ 509.644963][ T23] input: HID 0419:0600 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0419:0600.0007/input/input16 [ 509.707576][ T5775] cx82310_eth: probe of 4-1:0.0 failed with error -22 [ 509.777672][ T23] samsung 0003:0419:0600.0007: input,hidraw0: USB HID v80.00 Joystick [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 509.835036][ T23] usb 5-1: USB disconnect, device number 12 [ 509.950921][ T8766] fido_id[8766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 510.127838][ T5775] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 510.143288][ T5775] usb 4-1: USB disconnect, device number 18 [ 510.316287][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 512.134890][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 512.134974][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 513.361347][ T8787] pim6reg0: tun_chr_ioctl cmd 35111 [ 514.334272][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 515.115668][ T8811] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 516.134926][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 516.134970][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 518.400351][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'. [ 518.525067][ T5775] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 518.817334][ T5775] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 518.970227][ T5775] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 519.244371][ T5775] usb 5-1: string descriptor 0 read error: -22 [ 519.366672][ T5775] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 519.532458][ T5775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.957055][ T5775] etas_es58x 5-1:1.0: Starting (null) (null) (Serial Number (null)) [ 520.135754][ T5775] etas_es58x 5-1:1.0: could not retrieve the product info string [ 520.296433][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 520.302973][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 521.960987][ T8823] etas_es58x 5-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 522.065915][ C1] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 522.073904][ C1] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 522.083612][ C1] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 522.116608][ C1] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 522.147423][ C1] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 522.155230][ T8823] etas_es58x 5-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 522.245183][ T5762] usb 5-1: USB disconnect, device number 13 [ 522.288441][ T5762] etas_es58x 5-1:1.0: Disconnecting (null) (null) [ 522.735004][ T5775] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 522.949927][ T5775] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 522.964836][ T5775] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 522.979405][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.259276][ T5775] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 523.296298][ T5775] wwan wwan0: port wwan0qmi0 attached [ 523.395229][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 523.509341][ T5775] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 52:d8:44:1a:97:21 [ 523.618108][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 523.634949][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 523.644063][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.783037][ T5775] usb 4-1: USB disconnect, device number 19 [ 523.809817][ T5775] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 523.893972][ T5775] wwan wwan0: port wwan0qmi0 disconnected [ 524.161672][ T8] lg-g15 0003:046D:C222.0008: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 524.182457][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 524.264912][ T8] lg-g15 0003:046D:C222.0008: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 524.472882][ T23] usb 5-1: USB disconnect, device number 14 [ 524.915438][ T5775] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 525.695017][ T5775] usb 4-1: Using ep0 maxpacket: 32 [ 525.900233][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 525.908130][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 525.927761][ T5775] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 525.941184][ T5775] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 525.951414][ T5775] usb 4-1: config 0 interface 0 has no altsetting 0 [ 525.961232][ T5775] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 525.970667][ T5775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.979157][ T5775] usb 4-1: Product: syz [ 525.983391][ T5775] usb 4-1: Manufacturer: syz [ 525.988449][ T5775] usb 4-1: SerialNumber: syz [ 525.996870][ T5775] usb 4-1: config 0 descriptor?? [ 526.079869][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 526.326583][ T5762] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 526.362722][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'. [ 526.418310][ T5775] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 526.544089][ T5762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.576332][ T5762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.603172][ T5762] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 526.637702][ T5762] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 526.663629][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.683912][ T5762] usb 5-1: config 0 descriptor?? [ 526.850059][ T5775] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 526.889113][ T5775] usb 4-1: USB disconnect, device number 20 [ 527.122485][ T5762] plantronics 0003:047F:FFFF.0009: unbalanced delimiter at end of report description [ 527.143739][ T5762] plantronics 0003:047F:FFFF.0009: parse failed [ 527.152234][ T5762] plantronics: probe of 0003:047F:FFFF.0009 failed with error -22 [ 527.197871][ T8931] loop1: detected capacity change from 0 to 32768 [ 527.209176][ T8931] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.898 (8931) [ 527.229291][ T8931] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 527.243172][ T8931] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 527.255627][ T8931] BTRFS info (device loop1): using free space tree [ 527.311621][ T8931] BTRFS info (device loop1): enabling ssd optimizations [ 527.326679][ T8931] BTRFS info (device loop1): auto enabling async discard [ 527.374700][ T5775] usb 5-1: USB disconnect, device number 15 [ 527.611212][ T5783] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 527.794968][ T5762] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 528.002451][ T5762] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 528.012433][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.038585][ T5762] usb 4-1: config 0 descriptor?? [ 528.067975][ T5762] cp210x 4-1:0.0: cp210x converter detected [ 528.145306][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 528.153373][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 528.164915][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 528.379173][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 528.388511][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.400629][ T9] usb 2-1: config 0 descriptor?? [ 528.413731][ T9] cp210x 2-1:0.0: cp210x converter detected [ 528.465647][ T5762] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 528.482672][ T5762] usb 4-1: cp210x converter now attached to ttyUSB0 [ 528.575054][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 528.693922][ T5775] usb 4-1: USB disconnect, device number 21 [ 528.708005][ T5775] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 528.725281][ T5775] cp210x 4-1:0.0: device disconnected [ 528.777399][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 528.789210][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 528.799478][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 528.819216][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 528.832080][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 528.844922][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 528.854540][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 528.879931][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 528.888704][ T8] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 528.907847][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 528.925285][ T8] usb 5-1: Product: syz [ 528.930073][ T8] usb 5-1: Manufacturer: syz [ 528.944551][ T8960] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 528.953555][ T8960] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 528.963769][ T8960] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 528.974246][ T8960] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 528.981898][ T8960] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 528.997112][ T8960] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 529.009768][ T8] usb 5-1: USB2VGA dongle found at address 16 [ 529.032941][ T8] usb 5-1: Allocated 8 output buffers [ 529.044173][ T8] usb 5-1: Failed to early initialize device [ 529.090182][ T8] usb 2-1: USB disconnect, device number 21 [ 529.111728][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 529.131654][ T8] cp210x 2-1:0.0: device disconnected [ 529.175215][ T23] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 529.310482][ T8960] usb 5-1: Failed to initialize device [ 529.364992][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 529.372483][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 529.380623][ T23] usb 1-1: config 0 has no interface number 0 [ 529.406867][ T23] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 529.422429][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.432806][ T23] usb 1-1: Product: syz [ 529.438326][ T23] usb 1-1: Manufacturer: syz [ 529.444700][ T23] usb 1-1: SerialNumber: syz [ 529.452426][ T23] usb 1-1: config 0 descriptor?? [ 529.468609][ T23] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 529.485388][ T8] usb 5-1: USB disconnect, device number 16 [ 529.487845][ T23] usb 1-1: selecting invalid altsetting 1 [ 529.510234][ T23] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 529.541584][ T23] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 529.563043][ T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 529.574268][ T23] usb 1-1: media controller created [ 529.607261][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.984888][ T5762] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 530.695530][ T23] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 530.770458][ T23] zl10353_read_register: readreg error (reg=127, ret==-110) [ 530.810093][ T8962] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 531.024623][ T23] usb 1-1: USB disconnect, device number 20 [ 531.076283][ T5762] usb 2-1: not running at top speed; connect to a high speed hub [ 531.107980][ T5762] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.145510][ T5762] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 531.162317][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 531.196214][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.244976][ T5762] usb 2-1: Found UVC 1.00 device (046d:0825) [ 531.521502][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'. [ 532.212911][ T5762] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 533.094970][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 533.102890][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 534.804899][ T5762] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 535.080076][ T5762] usb 2-1: USB disconnect, device number 22 [ 535.123982][ T27] Process accounting resumed [ 535.267261][ T28] audit: type=1326 audit(1791459841.335:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.4.918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbf9e199 code=0x7ffc0000 [ 535.329375][ T28] audit: type=1326 audit(1791459841.335:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.4.918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbf9e199 code=0x7ffc0000 [ 535.384851][ T28] audit: type=1326 audit(1791459841.355:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.4.918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbf9e199 code=0x7ffc0000 [ 535.384906][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 535.433473][ T28] audit: type=1326 audit(1791459841.365:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.4.918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbf9e199 code=0x7ffc0000 [ 535.488218][ T9005] loop1: detected capacity change from 0 to 4096 [ 535.517508][ T28] audit: type=1326 audit(1791459841.365:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.4.918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbf9e199 code=0x7ffc0000 [ 535.597335][ T9005] ntfs3: loop1: Failed to load $Extend (-22). [ 535.603497][ T9005] ntfs3: loop1: Failed to initialize $Extend. [ 535.610001][ T28] audit: type=1326 audit(1791459841.365:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.4.918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd9bbf9e199 code=0x7ffc0000 [ 535.610053][ T28] audit: type=1326 audit(1791459841.365:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.4.918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbf9e199 code=0x7ffc0000 [ 535.610101][ T28] audit: type=1326 audit(1791459841.365:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.4.918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbf9e199 code=0x7ffc0000 [ 535.729270][ T9009] input: syz0 as /devices/virtual/input/input18 [ 535.746345][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 535.787251][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.834342][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.864878][ T28] audit: type=1326 audit(1791459841.365:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.4.918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bbf9e199 code=0x7ffc0000 [ 535.870053][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 535.910944][ T8997] loop0: detected capacity change from 0 to 32768 [ 535.934916][ T28] audit: type=1326 audit(1791459841.365:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.4.918" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fd9bbf9e199 code=0x7ffc0000 [ 535.990677][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 536.031988][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.060318][ T8997] jfs_create: dtInsert returned -EIO [ 536.073671][ T8] usb 4-1: config 0 descriptor?? [ 536.085994][ T8997] ERROR: (device loop0): jfs_create: [ 536.085994][ T8997] [ 536.148478][ T8997] ERROR: (device loop0): remounting filesystem as read-only [ 536.675028][ T23] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 536.752885][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.927'. [ 537.019293][ T23] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 537.138203][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.271894][ T23] usb 2-1: Product: syz [ 537.346665][ T23] usb 2-1: Manufacturer: syz [ 537.419656][ T23] usb 2-1: SerialNumber: syz [ 538.097560][ T5775] usb 4-1: USB disconnect, device number 22 [ 539.528540][ T23] rtl8150 2-1:1.0: couldn't reset the device [ 539.621721][ T23] rtl8150: probe of 2-1:1.0 failed with error -5 [ 539.665151][ T23] usb 2-1: USB disconnect, device number 23 [ 539.887387][ T9036] pimreg1: tun_chr_ioctl cmd 1074025677 [ 539.893477][ T9036] pimreg1: linktype set to 778 [ 540.061082][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'. [ 540.434876][ T23] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 540.523694][ T9045] loop0: detected capacity change from 0 to 32768 [ 540.554602][ T9045] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.932 (9045) [ 540.588300][ T9045] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 540.600431][ T9045] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 540.612379][ T9045] BTRFS info (device loop0): using free space tree [ 540.621695][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 540.641931][ T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 540.655292][ T23] usb 5-1: config 0 has no interface number 0 [ 540.684362][ T23] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 540.714366][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.728922][ T23] usb 5-1: Product: syz [ 540.733334][ T23] usb 5-1: Manufacturer: syz [ 540.738188][ T23] usb 5-1: SerialNumber: syz [ 540.746761][ T23] usb 5-1: config 0 descriptor?? [ 540.763208][ T23] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 540.772439][ T23] usb 5-1: selecting invalid altsetting 1 [ 540.778797][ T23] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 540.788595][ T9045] BTRFS info (device loop0): enabling ssd optimizations [ 540.796175][ T23] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 540.807090][ T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 540.815936][ T23] usb 5-1: media controller created [ 540.827270][ T9045] BTRFS info (device loop0): auto enabling async discard [ 540.849418][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 541.016563][ T5772] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 541.484290][ T9058] loop1: detected capacity change from 0 to 32768 [ 541.497755][ T9058] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.937 (9058) [ 541.533907][ T9058] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 541.560450][ T9058] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 541.588771][ T9058] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 541.622736][ T9058] BTRFS info (device loop1): use zstd compression, level 3 [ 541.638560][ T9058] BTRFS info (device loop1): using free space tree [ 541.955093][ T9058] BTRFS info (device loop1): enabling ssd optimizations [ 541.970066][ T9058] BTRFS info (device loop1): auto enabling async discard [ 541.977731][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 541.984502][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 542.004308][ T23] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 542.036119][ T23] zl10353_read_register: readreg error (reg=127, ret==-110) [ 542.071370][ T9049] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 542.715166][ T23] usb 5-1: USB disconnect, device number 17 [ 542.997904][ T5783] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 543.925072][ T5762] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 544.138342][ T5762] usb 5-1: unable to get BOS descriptor or descriptor too short [ 544.241109][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.955'. [ 544.294884][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 545.975204][ T5085] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 545.981923][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 546.077597][ T5762] usb 5-1: not running at top speed; connect to a high speed hub [ 547.234941][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 547.253391][ T5762] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 547.261444][ T5762] usb 5-1: can't read configurations, error -71 [ 547.285232][ T8] usb 1-1: device descriptor read/all, error -71 [ 547.529378][ T9150] loop0: detected capacity change from 0 to 512 [ 547.610381][ T9150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.639546][ T9150] ext4 filesystem being mounted at /259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 547.741232][ T9143] loop1: detected capacity change from 0 to 40427 [ 547.760102][ T9143] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 547.767307][ T9143] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 547.803049][ T9143] F2FS-fs (loop1): invalid crc value [ 547.819227][ T9143] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 547.829492][ T9150] EXT4-fs error (device loop0): ext4_empty_dir:3138: inode #12: comm syz.0.959: invalid size [ 547.860532][ T9143] F2FS-fs (loop1): Found nat_bits in checkpoint [ 547.877909][ T9150] EXT4-fs (loop0): Remounting filesystem read-only [ 547.941682][ T9143] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 547.952401][ T9143] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 547.960791][ T5762] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 548.002685][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.017622][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 548.017684][ T28] audit: type=1800 audit(1791459854.085:56): pid=9143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.957" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 548.047807][ T6331] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 548.074859][ T6331] Quota error (device loop0): write_blk: dquota write failed [ 548.092686][ T6331] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 548.163841][ T5783] syz-executor: attempt to access beyond end of device [ 548.163841][ T5783] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 548.194546][ T5762] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.219247][ T5783] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 548.227568][ T5762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 548.242656][ T5783] syz-executor: attempt to access beyond end of device [ 548.242656][ T5783] loop1: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 548.257658][ T5783] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 548.278042][ T5762] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 548.306368][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 548.335496][ T5762] usb 5-1: SerialNumber: syz [ 548.351789][ T5762] usb 5-1: config 0 descriptor?? [ 548.368674][ T5762] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 548.385272][ T5762] dvb-usb: bulk message failed: -22 (3/0) [ 548.406336][ T5762] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 548.426436][ T5762] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 548.433560][ T5762] usb 5-1: media controller created [ 548.669615][ T5762] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 548.691062][ T5762] dvb-usb: bulk message failed: -22 (6/0) [ 548.698677][ T5762] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 548.710801][ T5762] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 549.494346][ T5762] dvb-usb: schedule remote query interval to 150 msecs. [ 549.501794][ T5762] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 549.515074][ T5762] usb 5-1: USB disconnect, device number 19 [ 549.619981][ T5762] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 549.737458][ T9183] vivid-000: disconnect [ 549.761697][ T9178] vivid-000: reconnect [ 549.953217][ T9191] loop1: detected capacity change from 0 to 2048 [ 550.027129][ T9191] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 550.059771][ T9191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 550.190841][ T9191] overlayfs: upper fs needs to support d_type. [ 550.216902][ T9200] loop4: detected capacity change from 0 to 1024 [ 550.222135][ T9191] overlayfs: cleanup of 'work/#1' failed (-2) [ 550.245382][ T9200] EXT4-fs: Ignoring removed orlov option [ 550.292946][ T9191] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 550.307235][ T9191] overlayfs: failed to set xattr on upper [ 550.316200][ T9191] overlayfs: ...falling back to redirect_dir=nofollow. [ 550.323290][ T9191] overlayfs: ...falling back to index=off. [ 550.329773][ T9191] overlayfs: ...falling back to uuid=null. [ 550.366911][ T9200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.559977][ T5783] UDF-fs: error (device loop1): udf_read_inode: (ino 1347) failed !bh [ 550.574136][ T5783] UDF-fs: error (device loop1): udf_read_inode: (ino 1347) failed !bh [ 550.593756][ T7197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.715722][ T9217] capability: warning: `syz.0.977' uses 32-bit capabilities (legacy support in use) [ 550.760131][ T9217] program syz.0.977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.218649][ T6331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.303366][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'. [ 551.432265][ T6331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.578792][ T6331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.710468][ T9220] loop4: detected capacity change from 0 to 32768 [ 551.745649][ T9220] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 551.760987][ T6331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.791596][ T9220] overlayfs: overlapping lowerdir path [ 551.940372][ T28] audit: type=1400 audit(1791459858.005:57): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=9241 comm="syz.3.985" name="foo" offset=60 [ 552.030796][ T9148] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 552.818821][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 552.831417][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 552.848005][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 552.867576][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 552.877816][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 552.889460][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 552.983041][ T28] audit: type=1400 audit(1791459859.045:58): apparmor="STATUS" info="empty profile name" error=-71 profile="unconfined" name=":/o" pid=9263 comm="syz.4.991" name=":/o" offset=35 [ 553.104562][ T5085] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 553.111509][ T51] Bluetooth: hci3: command 0x1003 tx timeout [ 553.306166][ T9273] loop4: detected capacity change from 0 to 1024 [ 553.969472][ T9261] chnl_net:caif_netlink_parms(): no params data found [ 554.152736][ T5762] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 554.175447][ T28] audit: type=1400 audit(1791459860.235:59): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9302 comm="syz.0.999" name="unknown" offset=16 [ 554.257895][ T28] audit: type=1400 audit(1791459860.325:60): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=9304 comm="syz.4.1000" name="p" offset=48 [ 554.278215][ T9261] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.296230][ T9261] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.303528][ T9261] bridge_slave_0: entered allmulticast mode [ 554.322561][ T9261] bridge_slave_0: entered promiscuous mode [ 554.353470][ T5762] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 554.368675][ T5762] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 554.399881][ T9261] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.416042][ T5762] usb 4-1: string descriptor 0 read error: -22 [ 554.422347][ T9261] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.435889][ T5762] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 554.450395][ T9261] bridge_slave_1: entered allmulticast mode [ 554.458264][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.473947][ T9261] bridge_slave_1: entered promiscuous mode [ 554.504127][ T5762] etas_es58x 4-1:1.0: Starting (null) (null) (Serial Number (null)) [ 554.525748][ T5762] etas_es58x 4-1:1.0: could not retrieve the product info string [ 554.661911][ T9261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.678712][ T9261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.790054][ T9313] loop4: detected capacity change from 0 to 4096 [ 554.819185][ T9313] EXT4-fs: inline encryption not supported [ 554.828752][ T6331] hsr_slave_0: left promiscuous mode [ 554.873802][ T9313] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 554.905447][ T9313] EXT4-fs (loop4): Test dummy encryption mode enabled [ 554.914155][ T6331] hsr_slave_1: left promiscuous mode [ 554.932940][ T6331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.938433][ T5085] Bluetooth: hci4: command tx timeout [ 554.944367][ T6331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.953707][ T9313] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 554.962183][ T9313] System zones: 0-5 [ 554.970496][ T6331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.981259][ T9313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.025232][ T6331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.069513][ T6331] bridge_slave_1: left allmulticast mode [ 555.081455][ T6331] bridge_slave_1: left promiscuous mode [ 555.103140][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.137606][ T6331] bridge_slave_0: left allmulticast mode [ 555.147920][ T6331] bridge_slave_0: left promiscuous mode [ 555.167743][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.209444][ T7197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.302615][ T6331] veth1_macvtap: left promiscuous mode [ 555.318248][ T6331] veth0_macvtap: left promiscuous mode [ 555.334239][ T6331] veth1_vlan: left promiscuous mode [ 555.352728][ T6331] veth0_vlan: left promiscuous mode [ 556.775367][ T5781] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 557.020778][ T5781] Bluetooth: hci4: command tx timeout [ 558.188812][ T9355] Invalid input. Must be >= 4608 [ 558.189853][ T6331] team0 (unregistering): Port device team_slave_1 removed [ 558.289288][ T6331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.349410][ T6331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.599690][ T9357] loop4: detected capacity change from 0 to 32768 [ 558.616563][ T9357] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 558.635042][ T9357] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 558.661041][ T9357] BTRFS info (device loop4): setting nodatasum [ 558.667577][ T9357] BTRFS info (device loop4): disabling tree log [ 558.674401][ T9357] BTRFS info (device loop4): max_inline at 0 [ 558.691706][ T9357] BTRFS info (device loop4): using free space tree [ 558.855095][ T9357] BTRFS info (device loop4): enabling ssd optimizations [ 558.862214][ T9357] BTRFS info (device loop4): auto enabling async discard [ 559.096410][ T5781] Bluetooth: hci4: command tx timeout [ 559.127850][ T7197] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 559.163863][ T6331] bond0 (unregistering): Released all slaves [ 559.474006][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1005'. [ 559.501544][ T9296] etas_es58x 4-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 559.571369][ C1] etas_es58x 4-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 559.581072][ C1] etas_es58x 4-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 559.596604][ C1] etas_es58x 4-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 559.604391][ C1] etas_es58x 4-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 559.619893][ C1] etas_es58x 4-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 559.627575][ T9296] etas_es58x 4-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 559.769275][ T8] usb 4-1: USB disconnect, device number 23 [ 559.777270][ T8] etas_es58x 4-1:1.0: Disconnecting (null) (null) [ 560.369737][ T9261] team0: Port device team_slave_0 added [ 560.609789][ T9261] team0: Port device team_slave_1 added [ 560.709588][ T9261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.727495][ T28] audit: type=1400 audit(1791459866.795:61): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=9386 comm="syz.4.1017" name="foo" offset=60 [ 560.765127][ T9261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.844884][ T9261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.938307][ T9261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.974800][ T9261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.085322][ T9261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.179861][ T5781] Bluetooth: hci4: command tx timeout [ 561.242406][ T9397] typec_fusb302 0-0002: I2C/SMBus block functionality not supported! [ 561.296152][ T9397] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x02 [ 561.363822][ T9261] hsr_slave_0: entered promiscuous mode [ 561.450407][ T9261] hsr_slave_1: entered promiscuous mode [ 561.487290][ T9261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.517858][ T9261] Cannot create hsr debugfs directory [ 562.689498][ T9261] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 562.734012][ T9261] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 562.775934][ T9261] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 562.810719][ T9261] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 562.903061][ T9435] loop7: detected capacity change from 0 to 7 [ 562.948129][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.957413][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 562.983655][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.992949][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 563.004763][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.013985][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 563.030219][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.068252][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.077516][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 563.089961][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.099225][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 563.114124][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.120817][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.123425][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 563.139609][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.148858][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 563.157205][ T9435] ldm_validate_partition_table(): Disk read failed. [ 563.172634][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.181989][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 563.192483][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.201738][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 563.210630][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 563.224144][ T9435] Dev loop7: unable to read RDB block 0 [ 563.230917][ T9435] loop7: unable to read partition table [ 563.237475][ T9435] loop7: partition table beyond EOD, truncated [ 563.243806][ T9435] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 563.263789][ T9261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.357882][ T28] audit: type=1400 audit(1791459869.425:62): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=9438 comm="syz.0.1035" name="p" offset=48 [ 563.378782][ T9261] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.420253][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.427539][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.472067][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.479455][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.578016][ T9444] scsi_strcpy_devinfo: vendor string 'QT?]+,r' is too long [ 563.662897][ T9261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.237450][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 565.940886][ T9261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.534631][ T9512] loop4: detected capacity change from 0 to 128 [ 568.548375][ T9261] veth0_vlan: entered promiscuous mode [ 568.588154][ T9261] veth1_vlan: entered promiscuous mode [ 568.595304][ T9512] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 568.673512][ T9517] loop3: detected capacity change from 0 to 256 [ 568.751120][ T9261] veth0_macvtap: entered promiscuous mode [ 568.757881][ T9512] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 568.814365][ T9261] veth1_macvtap: entered promiscuous mode [ 568.903669][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.939480][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.964786][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.994958][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.006982][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.018520][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.030855][ T9261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.052711][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.115226][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.153872][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.164569][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.179021][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.191060][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.207783][ T9261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.243685][ T9261] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.265106][ T9261] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.273876][ T9261] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.283300][ T9261] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.444086][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.498106][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.542116][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.583211][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.042629][ T5814] kernel write not supported for file /snd/pcmC1D0p (pid: 5814 comm: kworker/0:4) [ 570.060685][ T9554] usbip-vudc usbip-vudc.0: gadget not bound [ 570.363641][ T9567] loop3: detected capacity change from 0 to 1024 [ 570.476158][ T9574] jffs2: notice: (9574) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 570.525629][ T9567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 570.545236][ T9567] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.700532][ T9567] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.1072: lblock 3 mapped to illegal pblock 3 (length 3) [ 570.752558][ T9567] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 570.801800][ T9567] EXT4-fs (loop3): This should not happen!! Data will be lost [ 570.801800][ T9567] [ 570.911778][ T9586] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 8: comm syz.3.1072: lblock 8 mapped to illegal pblock 8 (length 8) [ 570.968515][ T9586] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 571.070390][ T9586] EXT4-fs (loop3): This should not happen!! Data will be lost [ 571.070390][ T9586] [ 571.249302][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 571.367007][ T9598] rnbd_client L203: map_device: Unknown parameter or missing value 'se' [ 572.402371][ T9625] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.419333][ T9627] loop5: detected capacity change from 0 to 256 [ 572.498029][ T9627] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 572.580937][ T28] audit: type=1800 audit(1791459878.645:63): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1092" name="file1" dev="loop5" ino=1048707 res=0 errno=0 [ 572.616885][ T9627] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 572.635568][ T9627] FAT-fs (loop5): Filesystem has been set read-only [ 572.667981][ T9627] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 572.899681][ T1328] Bluetooth: hci3: Frame reassembly failed (-84) [ 573.284123][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1096'. [ 573.530933][ T788] Process accounting resumed [ 573.861240][ T9631] loop0: detected capacity change from 0 to 40427 [ 573.887345][ T9631] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 573.907374][ T9631] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 573.954614][ T9631] F2FS-fs (loop0): invalid crc value [ 574.260249][ T9631] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 574.290036][ T9631] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 574.382855][ T9681] loop3: detected capacity change from 0 to 2048 [ 574.410768][ T9681] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 574.430759][ T5772] syz-executor: attempt to access beyond end of device [ 574.430759][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 574.468544][ T9681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 574.478784][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 574.778732][ T23] Process accounting resumed [ 574.935043][ T5085] Bluetooth: hci3: command 0x1003 tx timeout [ 574.937124][ T5781] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 575.670604][ T5814] Process accounting resumed [ 575.901683][ T9736] loop0: detected capacity change from 0 to 1024 [ 576.805073][ T28] audit: type=1800 audit(1791459882.825:64): pid=9748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1121" name="file1" dev="loop0" ino=3 res=0 errno=0 [ 576.862625][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'. [ 577.042828][ T64] hfsplus: bad catalog file entry [ 577.053893][ T64] hfsplus: b-tree write err: -5, ino 3 [ 577.509362][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'. [ 577.878080][ T8834] Process accounting resumed [ 578.215220][ T5781] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 578.222207][ T51] Bluetooth: hci3: command 0x1003 tx timeout [ 578.369413][ T9792] loop5: detected capacity change from 0 to 1024 [ 578.464584][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 578.530719][ T9792] hfsplus: keylen 65060 too large [ 578.545950][ T9792] hfsplus: xattr searching failed [ 578.554370][ T28] audit: type=1800 audit(1791459884.615:65): pid=9792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1134" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 578.943597][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1135'. [ 579.265237][ T5085] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 579.568475][ T9801] team0: Port device team_slave_0 removed [ 579.691125][ T9811] loop3: detected capacity change from 0 to 4096 [ 579.701701][ T9811] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 579.759292][ T9811] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 580.282269][ T9827] kAFS: bad VL server IP address [ 580.375532][ T5085] Bluetooth: hci3: command 0x1003 tx timeout [ 580.383585][ T5781] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 580.430856][ T9832] program syz.0.1145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 580.624903][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 580.804910][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 580.813839][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.833229][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.846542][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 580.859883][ T9787] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 580.866717][ T5781] Bluetooth: hci6: command 0x1003 tx timeout [ 580.878968][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 580.888172][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.898739][ T9] usb 4-1: config 0 descriptor?? [ 581.182707][ T9852] loop0: detected capacity change from 0 to 128 [ 581.198474][ T9852] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 581.267877][ T28] audit: type=1800 audit(1791459887.335:66): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1154" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 581.354214][ T9] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 581.377014][ T9] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 581.384352][ T9] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 581.392174][ T9] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 581.399820][ T9] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 581.408080][ T9] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 581.436618][ T9] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 581.467158][ T9] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 581.474458][ T9] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 581.501981][ T9] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 581.509860][ T9] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 581.517584][ T9] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 581.526247][ T9] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 581.533530][ T9] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 581.579058][ T9] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 581.608662][ T9] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 581.637232][ T9] microsoft 0003:045E:07DA.000B: no inputs found [ 581.650555][ T9] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 581.828116][ T9867] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 581.828116][ T9867] The task syz.5.1158 (9867) triggered the difference, watch for misbehavior. [ 582.594507][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'. [ 582.662326][ T23] usb 4-1: USB disconnect, device number 24 [ 582.888722][ T64] Bluetooth: hci5: Frame reassembly failed (-84) [ 583.009812][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1161'. [ 583.550746][ T9898] erspan0: entered promiscuous mode [ 583.735077][ T5085] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 583.741676][ T5781] Bluetooth: hci3: command 0x1003 tx timeout [ 584.072130][ T9904] loop5: detected capacity change from 0 to 32768 [ 584.091816][ T9904] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 584.141382][ T9904] XFS (loop5): Ending clean mount [ 584.184471][ T9] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 584.210121][ T9] XFS (loop5): Unmount and run xfs_repair [ 584.224375][ T9] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 584.234659][ T9] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 584.245678][ T9] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 584.254607][ T9] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 584.269073][ T9] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 584.295021][ T9] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 584.319437][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 584.348040][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 584.369455][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 584.390440][ T9904] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 584.429906][ T9904] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 584.447984][ T9904] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 584.552254][ T9261] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 584.935454][ T5778] Bluetooth: hci5: command 0x1003 tx timeout [ 584.943379][ T9787] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 585.212369][ T64] Bluetooth: hci3: Frame reassembly failed (-84) [ 585.322828][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'. [ 585.388486][ T9952] loop5: detected capacity change from 0 to 256 [ 585.407137][ T9952] exfat: Deprecated parameter 'namecase' [ 585.425080][ T9952] exfat: Deprecated parameter 'namecase' [ 585.479548][ T9952] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 585.580335][ T9952] syz.5.1179: attempt to access beyond end of device [ 585.580335][ T9952] loop5: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 585.653336][ T9952] syz.5.1179: attempt to access beyond end of device [ 585.653336][ T9952] loop5: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 585.699563][ T9956] syz.5.1179: attempt to access beyond end of device [ 585.699563][ T9956] loop5: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 585.700056][ T28] audit: type=1800 audit(1791459891.765:67): pid=9952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1179" name="file1" dev="loop5" ino=1048708 res=0 errno=0 [ 585.778090][ T28] audit: type=1800 audit(1791459891.835:68): pid=9956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1179" name="file1" dev="loop5" ino=1048708 res=0 errno=0 [ 585.830389][ T9956] exFAT-fs (loop5): invalid start cluster (4278190088) [ 585.982878][ T9965] block2mtd: error: cannot open device Ta4Gg)_դEvr!4>=Z{By<0\i= [ 585.982878][ T9965] \!ug[ [ 586.042417][ T9941] loop3: detected capacity change from 0 to 32768 [ 586.167062][ T28] audit: type=1800 audit(1791459892.225:69): pid=9941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1177" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 586.209351][ T9941] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 586.209351][ T9941] [ 587.257745][ T5778] Bluetooth: hci3: command 0x1003 tx timeout [ 587.265089][ T9787] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 588.575092][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'. [ 588.804805][ T9973] loop5: detected capacity change from 0 to 32768 [ 588.858180][ T28] audit: type=1800 audit(1791459894.925:70): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1184" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 589.042948][T10002] loop0: detected capacity change from 0 to 256 [ 590.689364][T10031] loop5: detected capacity change from 0 to 256 [ 591.483955][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 591.548730][T10031] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 592.573959][T10045] loop4: detected capacity change from 0 to 512 [ 592.610716][T10045] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.1203: corrupted in-inode xattr: invalid ea_ino [ 592.615924][ T9787] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 592.699395][T10045] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1203: couldn't read orphan inode 15 (err -117) [ 592.733307][T10045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.885057][ T7197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.025926][T10061] loop4: detected capacity change from 0 to 1024 [ 593.416658][T10066] input: syz1 as /devices/virtual/input/input24 [ 594.062932][T10070] loop5: detected capacity change from 0 to 1024 [ 594.214446][T10076] loop4: detected capacity change from 0 to 256 [ 594.279738][T10070] hfsplus: invalid length 32517 has been corrected to 255 [ 594.658192][ T28] audit: type=1800 audit(1791459900.705:71): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1210" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 595.279504][T10087] loop3: detected capacity change from 0 to 1024 [ 595.306759][ T64] hfsplus: b-tree write err: -5, ino 20 [ 597.436803][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 598.694912][ T9787] Bluetooth: hci3: command 0x1003 tx timeout [ 598.703924][ T5778] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 598.766067][T10120] overlay: filesystem on ./file0 not supported as upperdir [ 599.255093][ T5815] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 600.034834][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 600.060725][ T5815] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 600.085498][ T5815] usb 5-1: config 179 has no interface number 0 [ 600.104826][ T5815] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 600.135579][ T5815] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 600.159523][ T5815] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 600.176206][ T5815] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 600.193057][ T5815] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 600.234885][ T5815] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 600.258135][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.288982][T10126] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 600.572565][T10130] loop5: detected capacity change from 0 to 32768 [ 600.635327][T10130] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.1227 (10130) [ 600.754909][T10130] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 600.794631][T10130] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 600.840187][T10130] BTRFS info (device loop5): enabling ssd optimizations [ 600.876822][T10130] BTRFS info (device loop5): not using ssd optimizations [ 600.928069][T10130] BTRFS info (device loop5): turning off barriers [ 600.956591][T10130] BTRFS info (device loop5): use no compression [ 600.998970][T10130] BTRFS info (device loop5): using free space tree [ 601.037726][T10152] loop3: detected capacity change from 0 to 1024 [ 601.178910][ T5815] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input25 [ 601.469947][ T9] usb 5-1: USB disconnect, device number 20 [ 601.469969][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 601.484786][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 601.926849][ T9] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 602.188488][ T9261] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 602.389062][ T8834] Process accounting resumed [ 603.140524][ T9518] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop5 scanned by udevd (9518) [ 604.453539][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 604.531947][T10211] program syz.4.1239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 605.014859][ T5814] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 605.205063][ T5814] usb 5-1: Using ep0 maxpacket: 16 [ 605.212774][ T5814] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 605.221533][ T5814] usb 5-1: config 1 has no interface number 0 [ 605.227963][ T5814] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 605.238360][ T5814] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 605.249083][ T5814] usb 5-1: config 1 interface 105 has no altsetting 0 [ 605.259589][ T5814] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 605.270406][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 605.280028][ T5814] usb 5-1: Product: syz [ 605.284425][ T5814] usb 5-1: Manufacturer: syz [ 605.292705][ T5814] usb 5-1: SerialNumber: syz [ 605.302464][T10220] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 605.312384][T10220] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 605.895130][ T5778] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 606.213140][T10220] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 606.496119][T10220] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 606.599587][T10245] loop5: detected capacity change from 0 to 1024 [ 606.640422][T10245] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 606.681395][T10245] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 606.713792][T10245] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.1243: Failed to acquire dquot type 0 [ 606.754046][T10245] EXT4-fs error (device loop5): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 606.781153][ T5814] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 606.812759][ T5814] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 606.831123][ T5814] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 606.856048][T10245] EXT4-fs (loop5): 1 truncate cleaned up [ 606.863827][T10245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.887321][ T5814] aqc111 5-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 0a:52:44:06:e9:6f [ 606.910991][ T5814] usb 5-1: USB disconnect, device number 21 [ 606.922232][ T5814] aqc111 5-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 606.989255][T10245] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 607.006039][ T5814] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 607.015805][ T5814] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 607.026034][T10245] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 607.036319][ T5814] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 607.112369][T10245] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.1243: Failed to acquire dquot type 0 [ 607.227324][ T9261] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.280399][T10261] loop3: detected capacity change from 0 to 512 [ 607.350851][T10261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.385169][T10261] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.414138][T10267] loop5: detected capacity change from 0 to 256 [ 607.479276][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.547738][T10267] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 607.718565][ T6974] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 607.758203][T10274] loop3: detected capacity change from 0 to 164 [ 608.145562][ T5775] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 608.305135][ T8834] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 608.347018][ T5775] usb 6-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 608.373930][ T5775] usb 6-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 608.393426][ T5775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.404171][ T5775] usb 6-1: Product: syz [ 608.413814][ T5775] usb 6-1: Manufacturer: syz [ 608.422025][ T5775] usb 6-1: SerialNumber: syz [ 608.450077][T10279] loop4: detected capacity change from 0 to 32768 [ 608.519805][ T8834] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 608.547840][ T8834] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 608.574930][ T8834] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 608.593933][ T8834] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 608.604485][ T8834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.619636][T10285] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 608.666005][ T8834] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 608.715169][ T5775] usb 6-1: USB disconnect, device number 2 [ 608.739148][ T8834] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 609.014233][ T788] usb 4-1: USB disconnect, device number 25 [ 609.072776][ T788] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 609.145667][ T788] cyberjack 4-1:1.0: device disconnected [ 609.949458][T10308] loop5: detected capacity change from 0 to 16 [ 609.993006][T10308] erofs: (device loop5): mounted with root inode @ nid 36. [ 610.060900][T10308] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 1050 @ nid 46 [ 610.081222][ T2960] Bluetooth: hci3: Frame reassembly failed (-84) [ 610.223298][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'. [ 610.340702][T10321] loop5: detected capacity change from 0 to 512 [ 610.349586][ T8370] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 610.399883][T10321] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 610.446703][T10321] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1257: invalid indirect mapped block 256 (level 1) [ 610.486060][T10321] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1257: invalid indirect mapped block 2683928664 (level 1) [ 610.521744][T10321] EXT4-fs (loop5): 1 truncate cleaned up [ 610.533629][T10321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.557450][ T8370] usb 5-1: config 0 has an invalid interface number: 4 but max is 3 [ 610.567758][ T8370] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 610.572081][T10321] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.1257: Invalid block bitmap block 3 in block_group 0 [ 610.592267][ T8370] usb 5-1: config 0 has no interface number 0 [ 610.598823][ T8370] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 610.608080][ T8370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.625386][ T8370] usb 5-1: config 0 descriptor?? [ 610.635089][T10321] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.1257: Invalid block bitmap block 3 in block_group 0 [ 610.643481][ T8370] ums-realtek 5-1:0.4: USB Mass Storage device detected [ 610.665766][T10325] program syz.3.1258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 610.676024][T10321] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.1257: Invalid block bitmap block 3 in block_group 0 [ 610.756586][ T9261] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.972068][ T8834] usb 5-1: USB disconnect, device number 22 [ 611.872366][T10339] block2mtd: Using custom MTD label '& [ 611.872366][T10339] ' for dev #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-%#!$([)^)} [ 611.899670][T10339] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-%#!$([)^)} [ 612.134917][ T5778] Bluetooth: hci3: command 0x1003 tx timeout [ 612.188298][ T9787] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 613.091705][T10354] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1268'. [ 613.425038][ T5762] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 613.537948][T10369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1274'. [ 613.623260][T10357] loop4: detected capacity change from 0 to 32768 [ 613.632324][ T5762] usb 4-1: Using ep0 maxpacket: 32 [ 613.664306][ T5762] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 613.678530][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.694939][ T5762] usb 4-1: config 0 descriptor?? [ 613.709448][T10357] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 613.823959][T10357] XFS (loop4): Ending clean mount [ 614.018011][ T5762] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 614.036708][ T5762] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 614.299275][ T28] audit: type=1800 audit(1791459920.365:72): pid=10357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1270" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 614.782078][ T5762] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 614.789790][ T5762] usb 4-1: media controller created [ 614.832799][ T5762] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 614.881343][ T5762] az6027: usb out operation failed. (-71) [ 614.890061][ T5762] az6027: usb out operation failed. (-71) [ 614.896673][ T5762] stb0899_attach: Driver disabled by Kconfig [ 614.902732][ T5762] az6027: no front-end attached [ 614.902732][ T5762] [ 614.915145][ T5762] az6027: usb out operation failed. (-71) [ 614.923632][ T5762] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 614.937840][ T5762] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 614.969854][ T5762] dvb-usb: schedule remote query interval to 400 msecs. [ 614.990651][ T5762] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 615.028294][ T5762] usb 4-1: USB disconnect, device number 26 [ 615.054478][ T7197] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd syzkaller syzkaller login: [ 615.160366][ T5762] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 615.421791][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 615.494937][ T5085] Bluetooth: hci3: command 0x1003 tx timeout [ 615.505199][ T9787] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 615.842343][ T2960] Bluetooth: hci3: Frame reassembly failed (-84) [ 615.979480][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 617.175028][ T5085] Bluetooth: hci5: command 0x1003 tx timeout [ 617.300814][ T5762] Process accounting resumed [ 617.351682][ T5778] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 617.894850][ T9787] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 618.558181][T10417] loop4: detected capacity change from 0 to 4096 [ 618.712912][T10417] EXT4-fs: Ignoring removed orlov option [ 618.730669][T10417] EXT4-fs (loop4): Test dummy encryption mode enabled [ 618.753805][T10417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.768256][T10424] syz.5.1289 uses obsolete (PF_INET,SOCK_PACKET) [ 618.945702][T10430] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 619.017117][T10417] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 619.050502][T10417] ------------[ cut here ]------------ [ 619.057157][T10417] WARNING: CPU: 0 PID: 10417 at fs/ext4/ext4_jbd2.c:73 ext4_journal_check_start+0x1eb/0x250 [ 619.067792][T10417] Modules linked in: [ 619.071768][T10417] CPU: 0 PID: 10417 Comm: syz.4.1287 Not tainted syzkaller #0 [ 619.079827][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 619.090047][T10417] RIP: 0010:ext4_journal_check_start+0x1eb/0x250 [ 619.096821][T10417] Code: 48 83 c4 08 41 bf e2 ff ff ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 42 7f 59 ff 41 bf fb ff ff ff eb e5 e8 35 7f 59 ff <0f> 0b eb d6 e8 2c 7f 59 ff 0f 0b 43 80 7c 25 00 00 0f 85 0b ff ff [ 619.116883][T10417] RSP: 0018:ffffc90011e9f658 EFLAGS: 00010287 [ 619.124101][T10417] RAX: ffffffff822e117b RBX: ffff888031c40000 RCX: 0000000000080000 [ 619.132391][T10417] RDX: ffffc900051a9000 RSI: 00000000000590d6 RDI: 00000000000590d7 [ 619.140557][T10417] RBP: 0000000000000bfe R08: ffff88807ad1c417 R09: 1ffff1100f5a3882 [ 619.148672][T10417] R10: dffffc0000000000 R11: ffffed100f5a3883 R12: dffffc0000000000 [ 619.156793][T10417] R13: 1ffff110063880c6 R14: ffff888031c40630 R15: 0000000000000001 [ 619.164865][T10417] FS: 00007fd9bcec16c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 619.173862][T10417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 619.180630][T10417] CR2: 00007f9d9b5556c8 CR3: 000000005e556000 CR4: 00000000003526f0 [ 619.188771][T10417] Call Trace: [ 619.192179][T10417] [ 619.195329][T10417] __ext4_journal_start_sb+0x147/0x560 [ 619.200910][T10417] __ext4_new_inode+0x13c7/0x3aa0 [ 619.206104][T10417] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 619.211948][T10417] ? dquot_initialize+0x20/0x20 [ 619.216966][T10417] ext4_mkdir+0x40b/0xc90 [ 619.221396][T10417] ? ext4_symlink+0x940/0x940 [ 619.227135][T10417] ? inode_permission+0xf3/0x480 [ 619.232148][T10417] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 619.237482][T10417] ? security_inode_mkdir+0xb7/0x100 [ 619.242870][T10417] vfs_mkdir+0x2a5/0x470 [ 619.247375][T10417] cachefiles_get_directory+0x231/0xa70 [ 619.253027][T10417] ? cachefiles_unmark_inode_in_use+0x1a0/0x1a0 [ 619.259457][T10417] ? vfs_statfs+0x195/0x2c0 [ 619.264044][T10417] cachefiles_add_cache+0xa88/0xd50 [ 619.269422][T10417] ? init_once+0x20/0x20 [ 619.273750][T10417] ? __asan_memcpy+0x40/0x70 [ 619.278507][T10417] ? kstrdup+0x65/0x80 [ 619.282670][T10417] ? cachefiles_daemon_bind+0x272/0x3a0 [ 619.288398][T10417] cachefiles_daemon_write+0x5f9/0x6b0 [ 619.293923][T10417] ? cachefiles_daemon_read+0x450/0x450 [ 619.299645][T10417] vfs_write+0x299/0x9a0 [ 619.303993][T10417] ? file_end_write+0x250/0x250 [ 619.309034][T10417] ? __fget_files+0x28/0x460 [ 619.313699][T10417] ? __fget_files+0x3fc/0x460 [ 619.318527][T10417] ? __fdget_pos+0x1d8/0x330 [ 619.323183][T10417] ? ksys_write+0x74/0x260 [ 619.328683][T10417] ksys_write+0x151/0x260 [ 619.333310][T10417] ? __ia32_sys_read+0x90/0x90 [ 619.338240][T10417] ? lockdep_hardirqs_on+0x98/0x150 [ 619.343584][T10417] do_syscall_64+0x55/0xb0 [ 619.348168][T10417] ? clear_bhb_loop+0x40/0x90 [ 619.352987][T10417] ? clear_bhb_loop+0x40/0x90 [ 619.357799][T10417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.363815][T10417] RIP: 0033:0x7fd9bbf9e199 [ 619.368399][T10417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.388166][T10417] RSP: 002b:00007fd9bcec1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 619.396725][T10417] RAX: ffffffffffffffda RBX: 00007fd9bc225fa0 RCX: 00007fd9bbf9e199 [ 619.404854][T10417] RDX: 0000000000000004 RSI: 0000200000000700 RDI: 0000000000000004 [ 619.412881][T10417] RBP: 00007fd9bc035888 R08: 0000000000000000 R09: 0000000000000000 [ 619.422358][T10417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.430755][T10417] R13: 00007fd9bc226038 R14: 00007fd9bc225fa0 R15: 00007ffce6b1d278 [ 619.439844][T10417] [ 619.442923][T10417] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 619.450235][T10417] CPU: 0 PID: 10417 Comm: syz.4.1287 Not tainted syzkaller #0 [ 619.457715][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 619.467791][T10417] Call Trace: [ 619.471101][T10417] [ 619.474057][T10417] dump_stack_lvl+0x18c/0x250 [ 619.478769][T10417] ? show_regs_print_info+0x20/0x20 [ 619.483989][T10417] ? load_image+0x420/0x420 [ 619.488599][T10417] panic+0x2ca/0x720 [ 619.492533][T10417] ? bpf_jit_dump+0xd0/0xd0 [ 619.497080][T10417] __warn+0x2e0/0x470 [ 619.501094][T10417] ? ext4_journal_check_start+0x1eb/0x250 [ 619.506853][T10417] ? ext4_journal_check_start+0x1eb/0x250 [ 619.512789][T10417] report_bug+0x2be/0x4f0 [ 619.517211][T10417] ? ext4_journal_check_start+0x1eb/0x250 [ 619.522965][T10417] ? ext4_journal_check_start+0x1eb/0x250 [ 619.528728][T10417] ? ext4_journal_check_start+0x1ed/0x250 [ 619.534483][T10417] handle_bug+0xcf/0x120 [ 619.538753][T10417] exc_invalid_op+0x1a/0x50 [ 619.543281][T10417] asm_exc_invalid_op+0x1a/0x20 [ 619.548159][T10417] RIP: 0010:ext4_journal_check_start+0x1eb/0x250 [ 619.554523][T10417] Code: 48 83 c4 08 41 bf e2 ff ff ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 42 7f 59 ff 41 bf fb ff ff ff eb e5 e8 35 7f 59 ff <0f> 0b eb d6 e8 2c 7f 59 ff 0f 0b 43 80 7c 25 00 00 0f 85 0b ff ff [ 619.574171][T10417] RSP: 0018:ffffc90011e9f658 EFLAGS: 00010287 [ 619.580265][T10417] RAX: ffffffff822e117b RBX: ffff888031c40000 RCX: 0000000000080000 [ 619.588266][T10417] RDX: ffffc900051a9000 RSI: 00000000000590d6 RDI: 00000000000590d7 [ 619.596280][T10417] RBP: 0000000000000bfe R08: ffff88807ad1c417 R09: 1ffff1100f5a3882 [ 619.604270][T10417] R10: dffffc0000000000 R11: ffffed100f5a3883 R12: dffffc0000000000 [ 619.612266][T10417] R13: 1ffff110063880c6 R14: ffff888031c40630 R15: 0000000000000001 [ 619.620263][T10417] ? ext4_journal_check_start+0x1eb/0x250 [ 619.626032][T10417] ? ext4_journal_check_start+0x1eb/0x250 [ 619.631786][T10417] __ext4_journal_start_sb+0x147/0x560 [ 619.637283][T10417] __ext4_new_inode+0x13c7/0x3aa0 [ 619.642357][T10417] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 619.648105][T10417] ? dquot_initialize+0x20/0x20 [ 619.653011][T10417] ext4_mkdir+0x40b/0xc90 [ 619.657388][T10417] ? ext4_symlink+0x940/0x940 [ 619.662123][T10417] ? inode_permission+0xf3/0x480 [ 619.667081][T10417] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 619.672126][T10417] ? security_inode_mkdir+0xb7/0x100 [ 619.677444][T10417] vfs_mkdir+0x2a5/0x470 [ 619.681717][T10417] cachefiles_get_directory+0x231/0xa70 [ 619.687296][T10417] ? cachefiles_unmark_inode_in_use+0x1a0/0x1a0 [ 619.693583][T10417] ? vfs_statfs+0x195/0x2c0 [ 619.698113][T10417] cachefiles_add_cache+0xa88/0xd50 [ 619.703370][T10417] ? init_once+0x20/0x20 [ 619.707660][T10417] ? __asan_memcpy+0x40/0x70 [ 619.712367][T10417] ? kstrdup+0x65/0x80 [ 619.716489][T10417] ? cachefiles_daemon_bind+0x272/0x3a0 [ 619.722073][T10417] cachefiles_daemon_write+0x5f9/0x6b0 [ 619.727571][T10417] ? cachefiles_daemon_read+0x450/0x450 [ 619.733148][T10417] vfs_write+0x299/0x9a0 [ 619.737432][T10417] ? file_end_write+0x250/0x250 [ 619.742331][T10417] ? __fget_files+0x28/0x460 [ 619.747038][T10417] ? __fget_files+0x3fc/0x460 [ 619.751773][T10417] ? __fdget_pos+0x1d8/0x330 [ 619.756395][T10417] ? ksys_write+0x74/0x260 [ 619.760842][T10417] ksys_write+0x151/0x260 [ 619.765226][T10417] ? __ia32_sys_read+0x90/0x90 [ 619.770027][T10417] ? lockdep_hardirqs_on+0x98/0x150 [ 619.775270][T10417] do_syscall_64+0x55/0xb0 [ 619.779796][T10417] ? clear_bhb_loop+0x40/0x90 [ 619.784496][T10417] ? clear_bhb_loop+0x40/0x90 [ 619.789195][T10417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.795142][T10417] RIP: 0033:0x7fd9bbf9e199 [ 619.799602][T10417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.819365][T10417] RSP: 002b:00007fd9bcec1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 619.827809][T10417] RAX: ffffffffffffffda RBX: 00007fd9bc225fa0 RCX: 00007fd9bbf9e199 [ 619.835802][T10417] RDX: 0000000000000004 RSI: 0000200000000700 RDI: 0000000000000004 [ 619.843814][T10417] RBP: 00007fd9bc035888 R08: 0000000000000000 R09: 0000000000000000 [ 619.851810][T10417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.859808][T10417] R13: 00007fd9bc226038 R14: 00007fd9bc225fa0 R15: 00007ffce6b1d278 [ 619.867817][T10417] [ 619.871433][T10417] Kernel Offset: disabled [ 619.875874][T10417] Rebooting in 86400 seconds..