last executing test programs: 52.53479741s ago: executing program 1 (id=570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000100)=0xb34f) 51.305653733s ago: executing program 1 (id=576): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x28c5, 0x4}}, 0x0, 0x0, 0x0, 0x0}) 48.239883945s ago: executing program 1 (id=588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) 48.048205168s ago: executing program 1 (id=589): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000000)={[{@showassoc}, {@nojoliet}, {@map_acorn}]}, 0x1, 0x566, &(0x7f0000000540)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x8) getdents(r0, &(0x7f0000000880)=""/232, 0xe8) 47.530081213s ago: executing program 1 (id=593): r0 = semget(0x3, 0x4, 0x69c) semop(r0, &(0x7f0000000080)=[{0x3, 0x8021, 0x1000}, {0x1, 0x9, 0x400}], 0x2) semop(r0, &(0x7f00000000c0)=[{0x0, 0x400, 0x800}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7fff]) 47.112370918s ago: executing program 1 (id=597): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x77ff, 0x75ea, 0x800004, 0x1}) 46.941291999s ago: executing program 32 (id=597): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x77ff, 0x75ea, 0x800004, 0x1}) 13.701959274s ago: executing program 4 (id=743): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000000c0)=[@acquire, @release], 0x0, 0x0, 0x0}) 13.441493177s ago: executing program 4 (id=746): syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x10004d0, &(0x7f0000000140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000001f80)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) pwrite64(r0, &(0x7f00000002c0)="63cc8c902e022de83371", 0xa, 0x80000000e0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 11.905261183s ago: executing program 4 (id=752): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000340)={[{@init_itable}, {@grpquota}, {@errors_remount}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) r1 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, r2, &(0x7f0000000140)={0x2, 0x8000000000000001, 0x5, 0x9a, 0x8000000000000000, 0x8, 0x5, 0x2, 0x3}) 11.730803295s ago: executing program 3 (id=753): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x0, 0xffffffff, {0x77359400}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x2, 0x1, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000) 11.402783779s ago: executing program 3 (id=754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x161c}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400000, {0x100, 0x2, 0x80, 0x1}}}]}, 0x40}}, 0x200000c0) 10.984862313s ago: executing program 3 (id=755): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203011b0000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) unshare(0x2c020400) r4 = msgget$private(0x0, 0x244) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r6) msgsnd(r4, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9"}, 0x52, 0x800) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffa) 10.615938707s ago: executing program 4 (id=757): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203011b0000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) unshare(0x2c020400) r4 = msgget$private(0x0, 0x244) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r6) msgsnd(r4, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf694425"}, 0x6a, 0x800) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffa) 9.530172348s ago: executing program 3 (id=761): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) syz_usb_connect(0x2, 0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="12011003013bea20110412003990010203010902340001f98050050904cbb80321d3ad010905020410006a088e07250117090044090581"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 6.326989083s ago: executing program 3 (id=769): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r1 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r1}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) unshare(0x6020400) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_disconnect(r3) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc0105b08, &(0x7f0000000340)={0x1, 0x200, 0x3cf3, 0x200000, 0x110001}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f00000000c0)=""/37, 0x25}], 0x2) 5.119807986s ago: executing program 5 (id=772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 4.66453735s ago: executing program 5 (id=774): syz_mount_image$udf(&(0x7f0000001880), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x1, 0x4ac, &(0x7f0000000500)="$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") openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/49, 0x31) getdents(r0, 0xfffffffffffffffd, 0x58) 4.282627154s ago: executing program 4 (id=776): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000064c0)='./bus\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x6180, &(0x7f0000000340)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) openat$cgroup_ro(r0, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 4.144802936s ago: executing program 5 (id=778): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x30e, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 3.603080502s ago: executing program 5 (id=779): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 3.420968304s ago: executing program 0 (id=780): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000280)='./file1\x00', 0x200400, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000001fc0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open(&(0x7f0000000140)='.\x00', 0x0, 0x112) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 3.117865077s ago: executing program 0 (id=781): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001280)={[{@test_dummy_encryption}, {@init_itable_val}, {@minixdf}, {@jqfmt_vfsv1}, {@prjquota}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@resuid}, {@user_xattr}, {@dax}]}, 0xdf, 0x475, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 2.668777572s ago: executing program 3 (id=784): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x40, 0x6, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0xfef4) 2.574509413s ago: executing program 0 (id=785): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x200010, &(0x7f0000000040)=ANY=[], 0x0, 0x663, &(0x7f0000000bc0)="$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") chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4002, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@init_itable}]}, 0x1, 0xbe4, &(0x7f0000003c00)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 2.334173585s ago: executing program 4 (id=787): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203011b0000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) unshare(0x2c020400) r4 = msgget$private(0x0, 0x244) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r6) msgsnd(r4, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf694425"}, 0x6a, 0x800) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffa) 2.054683198s ago: executing program 2 (id=788): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES32], 0x1, 0x36e, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') 1.852781741s ago: executing program 0 (id=789): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = getpid() process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) 1.710936292s ago: executing program 2 (id=790): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0, 0x0, r2}) 1.448098545s ago: executing program 2 (id=791): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r1, r1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0) 1.111967268s ago: executing program 0 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=ANY=[]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x10, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) pwrite64(r1, &(0x7f0000000e80)="a101c348a5a06e4b6e07651bde14ec4c7b482e6268ab136665237d1ce2cece5a1c71299e63655514b4516a9bf38bb7947d441b31bd55cdd4d6deb1b463764cd3c59a969a06e862929288f0feae5fa1483f78c7dd425a9ae8732f65dfec55cd1fb89bbeed1d85d8b99dc2265e675558a8bde9ecdd639b6260726137fe2b3ec8495559fa363b07be825990984cdff17f1cb7314ffb6848e8008edd628053b575026669b96b38df7d1c42b40db71c7ac0694621a50264c96d69adab7bc886e5105d8f1e546b083bb0458ed8cf9ed05a8331e6532aa9129126b8b8498ec9dbcd2f7dc54e3b5dd36318816bd04a9261e832e54d00302ba9cce864d74f010dd6c5926a5a9b156d9d0d3d585e55f38b5ee185a07f0a7e720de331d28381ac15d044a88a74a499e2fb1f90056c7865cdf2f675f041ffb6f73beef580f95ed1a057832d09c8fcc181e16d5f3227549062d0a2ad0cdfd8a6419600916e2e86915ef36038b8c4ea05ca36c99511e1aadc1508b9ec6d821b523cecac9dcef8f3ff94ebb4cc3c6dc0c8870c66ee3dcdf12df43a5bf99e38709f619d55323b450245b48776740a083eb7a3f52337ea3badc364c85589777dc85ad235a5f0714f87d46e09605de335fff07514ce3eacd9343be91c0f500e0a7e0fcd79857803b34d7847a66574ab84f8f2b54632597201aa0f7e3f1dbed30dcc8161d6534095fe5c7b3531346dfa6715a8cac4e2e3bf5db57176c1ba13d6344daccd04fcd927f05e2bb628648bdceadaa7ba23e46282a1ef3baff087a3a9d0f9db08bae8abb048299bab5baf63a86710e1f33573790522c64167112d6a2a680e504fa0095b1a7769957c86333f4f0ea2214be2054c007593a27072dfacb301f34d6e764a30fa355fc6bfe3d71408deabbab6a141c1521f638ff21fa3484a8088f185ddd93bc41c7fa6916a862fbe38ce0ba54a00e7c4c43601f41329beb383cf1bf9fd8f0caa1aa08cafb9967541133bb577580d5e8d3475e53cc361091acd22dd5310762eb00e11326628e559a56704b54ad43808d1934b9a583925822bdcd3f35bfe2e32e850642b6333b420243dc638b940546f83490c1398aff19eb41c0d170c93314c906ad87df85bd218a2f588b9b409b44267ffc0fdfc10ac9672301584ba4b4a9c1acb2fb8177d200568f70b57af6cd369168193bbfd948d95b1a8973b8abf1ed7515524d4182ca398c4c67e7bee5ddd62ba706bf4f35d0cd3bf598d152e2f13d7cf8122a972b51b6a21589ad5488d064f9d729a2db8b659c7550895a3f5a497c2bbb1f104e6764cac11464109d3f33c0b6319ace2763318930e96df10a2a6db6e164a5594f4544ce1839e889951c393a1ed54f6b59569a603f75d6578a224f6dc5781340ad1f08f9d76db95a9e9bafeb4fca23b066cc2218391150666529f06734dd3d8ff22cead308a699377e97f35196e9614c8f4b9bd2c9dec97996d5e31c5bf0a1e7a1cf80cd5d4b40c822cdad2dd26c4a6c19a08abe022210456333a81b8f5b57808a36184571a6a23cacaeca5bd9ec5dbaef8343bf31235796d2d02ac686873fcc8ed310287fdc75162ff6ca2dd3406c69a96d2407acd12724c80eb360553189b211d58e9e8bd9a01473912919679bebdd199f958c43a1a34a38f3138b798c60e46886819012f65e988d9681e9ce582f2581514e076151f9791aadd4e5782ccae2869aa7367a1b1b82af3a7f2dce3aaedc607d40100e276ebf70f9cf38dd64d1bb5996c7daee2a3171c1ae4e648fcba1027297439d91efecd1b87c3f5c3d07c48cd71f2f1dfbc6021acb05287cb3783d5cd134b8d61b45a848d75798be0330e23c3828a2efe40d9a20ff27bbdbef935f05b3d7d0127a3f6925f92a20982eb37f60ce97f61514827d64f2b6b42524b4150d041c9e3b034ee5e7ec9f91f8d0e03f13ee2ad556031d96d32ad81722fb274879577decfb7a30ade5df630b933470d84bff568ebe27055cc2655352d9e0513169831caee5b19d21ebb9283afac62a977d44ebaffc1bc4671e30f629a4f382b820bdb15fdcbaac7a07448f73f6ff109570a85b9ada53c949b85ee873f09c8eec1a286757d32c02ec6e759067fc15d0653607b223e22587d4b348416ec9100717ad46cf334d2b777470cc0b1a6a2f9edbef79d75214b205f08a00ec3ce58dc7d5ebf00898500769b71c3528cc09d168d18c9215f2d10003df3d650081a79352ac4b82d288d265ca6514434e85714402e3fc14bcc1b780238a07b1991570525273e62ce0a03f3674f8e29ef32df90262441739feffa6e1ac86547fdff138d2322cbe5f89fd9f24cc872db91df473139d1eea48d84b4a46bb08c0a38c80ddff8edce1ec7a1480d0475abff61d6ed23547e1bb9f9b62108c63c9de9a837414e723d576f088aae11f635b39fe5bccb03c335f36f3ddd9dfa92fb299fe0ebd47476b8a4edddc5347ab7aee01b70248d9321630fdffa705e3accc275fff9eb9df97f1ad7ed5ad4e7793d8d21da65bdcd84570eb7023c86f46338a0002074de4d8c25ec46d40b7eec366bb7f1b27d5d1b51248ba6c76973f027b12ec6646a4468a4470353209d225f0f87eb3403734495f1c651e05d25aad76fca73c26b281a3154cf5155683685a63976cf53273e0f5528826ef4af55c0eac05488fb3e7c77fd1614fbf154bf2c51aec89f55dbc189df479c46e54e70269e1accefd864564e9e41672a2c2c228fac579bfe0f1fad414bf917eefab89e28f29035dac4d76ba4283864a44e5c82dd6656f725ba66e2c7c54f51647c391c5eeadfea6468612058eb7e784aca6b4e0d94410471581fd09a1f1c81fa789a56c8a8a4cf83d535509ec293a638fb40a9e9cc770dea7d0883a998ffa2f6ef26a75995a3bfaf70303d000d05b0da1a92183a519f2bd8144817b44e3f967cf6cb8db82329ca063cdf3abd66e33fe62d2c3de7a6b1557815206bea06c6ab9b64cf42dc45b88dd21fb8195fd5966340254c50597d8ee71180821ccfbd2a428e48f2de57d0c6997f6f62eb0d6731a5e02df539dbc0605cc54b4dcb3c1513a32cc513b4ec3d51ebbc75a6e3dc02157260ff1277fe4cfac01d330c4dae62de6fa6ec78f93d07ae8f3b7929b0054770215551c8c3a11b59dfc304b3094a344e5da518ed4b7c4c801e5d6db865f655e9711d4a74d8f65137a85d3ff941688a255067ee58f002b100f1917c91e7de79170a50193f3b9ed6ac197b82370b3dc11711c1f1f5f6cbf292b3aad32540c4f70b3cf966f7b0556a8cd8734e56ed0903d03aa44a5770b534e49a5478f534ec29c4f83a69d491c132dad8ab22ac03c75088474ec5289d9c227273cb780f0c09e385e18388bea329558345aead8475e6e42da51a4362d245bdb52fe732f5616a5be21688625371cb8e3b7d8a31ecbf075f8cbd4ca897692a02718f222ab69233e15d17f74c633614fcc53c20c0e9ea79cec86652be24bd4e6e166e82895c277e02322fc40f23fe9f767e7ee363b839062dcade1605a788ad616fe1db01802a0661494a4ffad71a9d2a151f74382e42453ef130576bba9a77101d2680c19647dfa9f1507c9310e79d5a4cfe01b029d332d791060408b7682d2f0b87dd52eedb347626bb5f1e73d35d21e9b86e11b6ed0513486fb93382569b3455f141d56faed8877b1b0510986504f73955f374488f5309abbe70d4bf9c3965025eaee0734bc65af6c0438f6f1169132f5df1d4fbb9a508857cd0a9301839cd1432b6dfeb8483ec9407bfad5b9c24e4e88e442f4aaab0a9f25f0d54ef0b94f45942ba696ba926eb9e73ea79e67e0fdc58eaa54396a098fa8cf87bc78f3f7bcc89975bd8da48c00f31098b9f0f7e3add5528ee05a62ce5a944c077b7ee7acf6610fdee454fc6a138d3aa0c0b3e82490ebd352d29ccbd3f1a05750f62aec358ee16d1951a1c0a445ab0522f6ae2b8e771d13b5a8d0f44aabd18983cf58c4eef4bea88782a612e1aa3f9e658cdcc5883870fce8b915c381082d4ccd34d6af01fdd3f46252777ad43ef8566b92d0c79a7d2dcb2303a16d738fed7e30a5d009b1605e8cad2845c27096a13fbd7af105e73e57f7ee1e5ecb10ddd6cb8b239863a03fcc7d9301614c0b1b0457fe2c85a8583c5a688800cccf48853273852171d11d1087f3d06396336d374a22cc8e1e5b13e6fcc0465676d33faae32ed39131682a082502362b54f9f831edb0f813a6ab994ff123745e04ec12dedb44c4ced71543bef0d3c5ae4671088c7bfcd22cb28ba090ae49a2fdb0556252df51f53a3746984ba9de060e3bb009e9c31fcc27299c2c01d2a36927e0495d80dc0021053273126fee054c4b7b48d47dceddda85ff32cc56ecaceec3164675ce4810fecff5679baf369ebd00bbc629a59cd23c7ab68071b34fdb37f5469bdeb341fdcd174c8838ac4f85d74c682f6802a4e54761a449df66303e97afb578eff9a7018048f173e8e7e6c5cd1cfc020273399ccd7260ce35bedb436ebe7041ad4fa20feb2651ef5bad8b6e75defbaa57b046f2c48ea7c22080b5e73b24fc9b63f7f331201887e1e1640cd7be5d8b2338ef06f767da8248096cfdf41f75d6ef4a8089aabb9b153a387a931c8173065d1adc1f574f9a88a9639247e516ca48e17ba7a26cd2112d6bcae624d9e049a842c41c4a1df993a218445dca44323f68354fa2b95adc352b2158f49b5860f6cc7c4a50a164ca11fd1620f7b26ce5a6be399368c9c659497dac293d56cb8143bf7059f308f8d1a2b819f87782996149dc9fb7c9fcfdc86756ec0f5320692cd9b5eae179b864e47b42cb0f45b0053ea830b2cb399c28b49036934e9e0eb7c14db2a7232f881c8e6d0e79bc59e4df8ee2d08d0a3fc006d1942162cc19b34da5d629447095960da2cbedec5c7978ae72174c6f3a453e7798949869327f1d530f80e77d321537b0bc211e7f10395bfae60d189bf11faa921af03e2287c5da910580c1e20a5ed887c741337d6692d32b2d5e324ee25d4fa478c17b95b9eb962848bd0db628c5ca6efaf06c3152c7b67b20571cd7edb74b2daf3afbcc207950007f873960772d53b16e82e0c4614a281fa675e2df4b25a56633a13730d511cb881b3c17c6b61f659bf30bc51e3cd77709b9319921d339450e3318f94065a2559897acf9d6898ad9c924f1f382fde20699811d23037bcd89e97a26ee653afd4afc40a9f115208a1766aea3d2f2ea2b4aed8ad78428657b3076ec73c4aa28f2f891d04aa8fa2297020c71882493261be4fb32ec71f7f7b2836314ef541688ac0f5feaea46a471df2a75e93cee77cf72bda502c4f9d766e916b7f9ada4f767070f2907e20f1b1f3aac68147bbe73e16309495f85c26f21ac5ec3be29209f1ae201490a19089a0f394014332083ac266fd2c14d455871ae1c06fa7782d24da56f9f64c8ab8a55b6f4aea2f82182f5292e6d6f86467673e100c81f4c73bd293f0456b982acc30dab6a7ce500bc4a9ad32cf6e252541d936e688c37ad20779ff461b1675351846d4e1d474e91d5314dae3ff687c80fd2398932d5b60e40134c87893a67805d997d642d32540b674d0f5cfd5a30930ed3948dfa5060a01c500c3030f6cc213a47ee2b6e741229949dcd21ab8c59dbbcda60c42f84ca63d87433f6467511d4e8d75371b02767de67aa536c48a13df81b9d01ee0df7ef161fd03d15ce3a7ef2c56c2cf6ef05a515082761514bd68e0bd86f194adf318dfc35ee8a8d94a0af1f78ca32f4c7a9f18f9c058d1893808360468832df3da0d8b8cb89c61b33c2e24", 0x1000, 0x3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={r2, 0x3, 0x10000, 0x3}) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000180), 0x5100, 0x0) 796.243192ms ago: executing program 2 (id=793): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) read$FUSE(r1, &(0x7f0000000e00)={0x2020}, 0x2020) 744.301182ms ago: executing program 5 (id=794): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x1, r2, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000080)={0x0, r2, r1}) 551.670714ms ago: executing program 5 (id=795): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24040084) capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r1 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r1}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) unshare(0x6020400) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_disconnect(r3) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc0105b08, &(0x7f0000000340)={0x1, 0x200, 0x3cf3, 0x200000, 0x110001}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f00000000c0)=""/37, 0x25}], 0x2) 506.364945ms ago: executing program 2 (id=796): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001280)={[{@test_dummy_encryption}, {@init_itable_val}, {@minixdf}, {@jqfmt_vfsv1}, {@prjquota}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@resuid}, {@user_xattr}, {@dax}]}, 0xdf, 0x475, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 90.041649ms ago: executing program 0 (id=797): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000080)={[{@bh}, {@jqfmt_vfsv1}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x5) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000000000000000001fcffff00"]) 0s ago: executing program 2 (id=798): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) kernel console output (not intermixed with test programs): SB device number 7 using dummy_hcd [ 120.676622][ T5185] loop0: detected capacity change from 0 to 512 [ 120.686635][ T5184] loop2: detected capacity change from 0 to 128 [ 120.788363][ T5173] usb 5-1: Using ep0 maxpacket: 8 [ 120.860132][ T5184] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.872085][ T5184] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.895433][ T5190] loop3: detected capacity change from 0 to 2048 [ 120.945749][ T5190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.958196][ T5173] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 120.966689][ T5173] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 120.978083][ T5173] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.989665][ T5173] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.000297][ T5173] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 121.014112][ T5173] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.023860][ T5171] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 121.042316][ T5173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.194366][ T5193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 121.419627][ T5171] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.488259][ T5173] usb 5-1: can't set config #16, error -71 [ 121.517641][ T5173] usb 5-1: USB disconnect, device number 7 [ 121.545341][ T5171] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.606481][ T5171] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.875915][ T5171] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.883441][ T5171] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 121.893082][ T5171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.904325][ T5171] usb 2-1: config 0 descriptor?? [ 121.985051][ T5203] trusted_key: encrypted_key: insufficient parameters specified [ 122.297906][ C1] sched: RT throttling activated [ 122.616447][ T5205] loop3: detected capacity change from 0 to 512 [ 122.684372][ T5205] EXT4-fs (loop3): inline encryption not supported [ 122.704730][ T5205] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.277: bad orphan inode 15 [ 122.705224][ T5205] ext4_test_bit(bit=14, block=5) = 0 [ 122.705247][ T5205] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,inlinecrypt,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 122.769829][ T5205] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #11: block 14: comm syz.3.277: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=255, size=1024 fake=1 [ 123.035632][ T5171] elecom 0003:056E:00FD.0005: item 0 2 0 9 parsing failed [ 123.036186][ T5171] elecom: probe of 0003:056E:00FD.0005 failed with error -22 [ 124.760532][ T4545] usb 2-1: USB disconnect, device number 6 [ 125.044399][ T5230] loop0: detected capacity change from 0 to 128 [ 125.137227][ T5234] loop1: detected capacity change from 0 to 1024 [ 125.172602][ T5234] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.204311][ T5230] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.241301][ T5230] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.277534][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.330113][ T5234] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 125.388104][ T5171] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.553546][ T5249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 125.706541][ T5252] trusted_key: encrypted_key: insufficient parameters specified [ 126.538175][ T5171] usb 4-1: Using ep0 maxpacket: 8 [ 126.651799][ T5257] loop1: detected capacity change from 0 to 4096 [ 126.658637][ T5171] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 126.688023][ T5171] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.743414][ T5171] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.787833][ T5263] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.790227][ T5171] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 126.831221][ T5262] loop2: detected capacity change from 0 to 256 [ 126.864606][ T26] audit: type=1800 audit(1777942943.784:3): pid=5257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.291" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 126.888246][ T5171] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.928015][ T5171] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.939617][ T5262] exfat: Deprecated parameter 'namecase' [ 126.946597][ T5262] exfat: Deprecated parameter 'utf8' [ 126.962715][ T5171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.998334][ T5262] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 127.019167][ T5171] usbtmc 4-1:16.0: bulk endpoints not found [ 127.054478][ T5262] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 127.710469][ T5276] loop2: detected capacity change from 0 to 16 [ 127.758672][ T5276] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 128.048105][ T4649] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.338156][ T4649] usb 2-1: Using ep0 maxpacket: 8 [ 128.479619][ T4649] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 128.495095][ T4649] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 128.515753][ T4649] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.549081][ T4649] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.567948][ T4649] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 128.598059][ T4649] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.638016][ T4649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.720596][ T4649] usbtmc 2-1:16.0: bulk endpoints not found [ 128.838015][ T4548] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.104604][ T5296] device bridge_slave_1 left promiscuous mode [ 129.111111][ T4548] usb 3-1: Using ep0 maxpacket: 16 [ 129.129753][ T5296] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.149852][ T5296] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 129.174458][ T4553] usb 4-1: USB disconnect, device number 6 [ 129.420567][ T4548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.432922][ T4548] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.448523][ T4548] usb 3-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 129.459103][ T4548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.498150][ T5172] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.559280][ T4548] usb 3-1: config 0 descriptor?? [ 129.748107][ T5172] usb 1-1: Using ep0 maxpacket: 16 [ 129.764763][ T5294] loop4: detected capacity change from 0 to 32768 [ 129.868306][ T5172] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 129.898069][ T5172] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 129.965011][ T5172] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 129.979413][ T5172] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 129.989755][ T5172] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 130.001387][ T5172] usb 1-1: config 1 interface 0 has no altsetting 0 [ 130.021970][ T5172] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 130.032334][ T4548] holtek_mouse 0003:04D9:A0C2.0006: unknown global tag 0xd [ 130.039897][ T4548] holtek_mouse 0003:04D9:A0C2.0006: item 0 2 1 13 parsing failed [ 130.049903][ T4548] holtek_mouse 0003:04D9:A0C2.0006: hid parse failed: -22 [ 130.054928][ T5316] loop3: detected capacity change from 0 to 128 [ 130.057269][ T4548] holtek_mouse: probe of 0003:04D9:A0C2.0006 failed with error -22 [ 130.083183][ T5172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.101560][ T5294] XFS (loop4): Mounting V5 Filesystem [ 130.129240][ T5172] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 130.147074][ T5294] XFS (loop4): Ending clean mount [ 130.165604][ T5294] XFS (loop4): Quotacheck needed: Please wait. [ 130.221064][ T5316] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.251065][ T5316] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.257193][ T5294] XFS (loop4): Quotacheck: Done. [ 130.284030][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.289711][ T5171] usb 3-1: USB disconnect, device number 7 [ 130.574702][ T4198] XFS (loop4): Unmounting Filesystem [ 130.752280][ T4545] usb 2-1: USB disconnect, device number 7 [ 131.188730][ T5172] ums-sddr09: probe of 1-1:1.0 failed with error -22 [ 131.210285][ T5172] usb 1-1: USB disconnect, device number 5 [ 131.336287][ T5333] loop3: detected capacity change from 0 to 256 [ 131.618933][ T5333] FAT-fs (loop3): Directory bread(block 64) failed [ 131.672658][ T5333] FAT-fs (loop3): Directory bread(block 65) failed [ 131.724641][ T5333] FAT-fs (loop3): Directory bread(block 66) failed [ 131.790575][ T5333] FAT-fs (loop3): Directory bread(block 67) failed [ 131.837843][ T5333] FAT-fs (loop3): Directory bread(block 68) failed [ 131.876161][ T5333] FAT-fs (loop3): Directory bread(block 69) failed [ 131.883240][ T5333] FAT-fs (loop3): Directory bread(block 70) failed [ 131.889916][ T5333] FAT-fs (loop3): Directory bread(block 71) failed [ 131.896838][ T5333] FAT-fs (loop3): Directory bread(block 72) failed [ 131.903660][ T5333] FAT-fs (loop3): Directory bread(block 73) failed [ 131.931210][ T5171] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 132.493133][ T5346] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.323'. [ 133.043748][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.050324][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.162987][ T5356] loop3: detected capacity change from 0 to 128 [ 133.208246][ T5171] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.226471][ T5171] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.255962][ T5356] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.278314][ T5356] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.356446][ T5354] loop4: detected capacity change from 0 to 4096 [ 133.439546][ T5354] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 133.460680][ T5171] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 133.469859][ T5171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 133.510731][ T5171] usb 3-1: Product: syz [ 133.515140][ T5171] usb 3-1: Manufacturer: syz [ 133.540300][ T5171] usb 3-1: SerialNumber: syz [ 133.609562][ T5171] usb 3-1: config 0 descriptor?? [ 133.659414][ T5354] ntfs: volume version 3.1. [ 133.699099][ T5171] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 133.865766][ T5171] pctv452e: pctv452e_power_ctrl: 1 [ 133.865766][ T5171] [ 134.078248][ T5171] dvb-usb: bulk message failed: -22 (5/0) [ 134.102426][ T5171] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 134.191261][ T5171] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 134.200678][ T4772] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.307453][ T5171] usb 3-1: USB disconnect, device number 8 [ 134.396452][ T4681] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 134.459155][ T4772] usb 2-1: Using ep0 maxpacket: 8 [ 134.485203][ T5371] loop0: detected capacity change from 0 to 164 [ 134.581869][ T4772] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 134.600156][ T5371] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.618717][ T4772] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 134.656292][ T4772] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.678003][ T4772] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.714071][ T5371] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.754662][ T4772] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.845676][ T4772] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.921498][ T4772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.045055][ T4772] usbtmc 2-1:16.0: bulk endpoints not found [ 135.360585][ T5382] netlink: 44 bytes leftover after parsing attributes in process `syz.4.336'. [ 135.436292][ T5384] trusted_key: encrypted_key: insufficient parameters specified [ 135.748240][ T4772] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.160528][ T4772] usb 3-1: Using ep0 maxpacket: 16 [ 136.177847][ T5373] loop3: detected capacity change from 0 to 32768 [ 136.236462][ T5373] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.332 (5373) [ 136.481241][ T4772] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 136.495575][ T5171] usb 2-1: USB disconnect, device number 8 [ 136.504681][ T5373] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 136.545854][ T5373] BTRFS info (device loop3): using free space tree [ 136.657286][ T5373] BTRFS info (device loop3): has skinny extents [ 137.256969][ T5373] BTRFS info (device loop3): enabling ssd optimizations [ 137.378295][ T4772] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 137.387422][ T4772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.456550][ T4772] usb 3-1: Product: syz [ 137.475469][ T5420] loop4: detected capacity change from 0 to 128 [ 137.501817][ T4772] usb 3-1: Manufacturer: syz [ 137.506507][ T4772] usb 3-1: SerialNumber: syz [ 137.534333][ T5420] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.555489][ T5424] loop0: detected capacity change from 0 to 512 [ 137.583783][ T4772] usb 3-1: config 0 descriptor?? [ 137.589744][ T5420] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.818352][ T4772] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 137.884797][ T4772] usb 3-1: USB disconnect, device number 9 [ 137.891012][ T4602] usb 3-1: Failed to submit usb control message: -71 [ 137.912961][ T5424] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.199852][ T4602] usb 3-1: unable to send the bmi data to the device: -71 [ 138.383859][ T4602] usb 3-1: unable to get target info from device [ 138.499696][ T4602] usb 3-1: could not get target info (-71) [ 138.505586][ T4602] usb 3-1: could not probe fw (-71) [ 138.686568][ T5424] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz.0.343: Directory block failed checksum [ 138.743245][ T4178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4178) [ 138.878095][ T5440] loop2: detected capacity change from 0 to 256 [ 139.044538][ T5440] FAT-fs (loop2): Directory bread(block 64) failed [ 139.068777][ T5440] FAT-fs (loop2): Directory bread(block 65) failed [ 139.087273][ T5440] FAT-fs (loop2): Directory bread(block 66) failed [ 139.138122][ T5440] FAT-fs (loop2): Directory bread(block 67) failed [ 139.145214][ T5440] FAT-fs (loop2): Directory bread(block 68) failed [ 139.220385][ T5440] FAT-fs (loop2): Directory bread(block 69) failed [ 139.260018][ T5440] FAT-fs (loop2): Directory bread(block 70) failed [ 139.330193][ T5440] FAT-fs (loop2): Directory bread(block 71) failed [ 139.375353][ T5440] FAT-fs (loop2): Directory bread(block 72) failed [ 139.459557][ T5440] FAT-fs (loop2): Directory bread(block 73) failed [ 139.565431][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 139.672282][ T5451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 139.815701][ T5453] batman_adv: batadv0: Adding interface: gretap1 [ 139.856286][ T5453] batman_adv: batadv0: Interface activated: gretap1 [ 139.884677][ T5457] loop3: detected capacity change from 0 to 16 [ 139.945358][ T5457] erofs: (device loop3): mounted with root inode @ nid 36. [ 140.018054][ T26] audit: type=1800 audit(1777942956.934:4): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.353" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 140.570347][ T5465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.356'. [ 141.133024][ T5476] netlink: 'syz.0.361': attribute type 10 has an invalid length. [ 141.181829][ T5476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.210880][ T5476] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 141.227725][ T5483] netlink: 'syz.0.361': attribute type 10 has an invalid length. [ 141.251547][ T5483] netlink: 40 bytes leftover after parsing attributes in process `syz.0.361'. [ 141.262675][ T5483] device batadv0 entered promiscuous mode [ 141.293522][ T5483] bond0: (slave batadv0): Releasing backup interface [ 141.305286][ T5486] loop3: detected capacity change from 0 to 128 [ 141.312967][ T4771] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 141.357837][ T5483] bridge0: port 2(batadv0) entered blocking state [ 141.367127][ T5486] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.382633][ T5486] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.400567][ T5483] bridge0: port 2(batadv0) entered disabled state [ 141.428166][ T4545] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.717525][ T5494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 141.878718][ T4545] usb 5-1: config 6 has an invalid interface number: 83 but max is 0 [ 141.962499][ T4545] usb 5-1: config 6 has no interface number 0 [ 142.059253][ T4681] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 142.070129][ T4681] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 142.154066][ T4545] usb 5-1: config 6 interface 83 has no altsetting 0 [ 142.378314][ T4545] usb 5-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=f7.f4 [ 142.407988][ T4771] usb 2-1: Using ep0 maxpacket: 8 [ 142.528302][ T4771] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 142.557427][ T4771] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.568060][ T4545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.575368][ T5505] loop2: detected capacity change from 0 to 128 [ 142.577588][ T4545] usb 5-1: Product: syz [ 142.598179][ T4545] usb 5-1: Manufacturer: syz [ 142.603204][ T4545] usb 5-1: SerialNumber: syz [ 142.654267][ T4771] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.980653][ T4771] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.239786][ T4771] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.277671][ T5505] attempt to access beyond end of device [ 143.277671][ T5505] loop2: rw=0, want=2068, limit=128 [ 143.308208][ T26] audit: type=1800 audit(1777942960.184:5): pid=5505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.373" name="file2" dev="loop2" ino=1048666 res=0 errno=0 [ 143.382898][ T4771] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.445606][ T5510] loop3: detected capacity change from 0 to 256 [ 143.462580][ T4771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.514729][ T4545] usb 5-1: USB disconnect, device number 8 [ 143.604040][ T5516] loop0: detected capacity change from 0 to 512 [ 143.632816][ T5510] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 143.715826][ T5516] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 143.778133][ T4771] usb 2-1: usb_control_msg returned -32 [ 143.787638][ T5516] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.377: corrupted in-inode xattr [ 143.808229][ T4771] usbtmc 2-1:16.0: can't read capabilities [ 143.818129][ T4553] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 143.836755][ T5516] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.377: couldn't read orphan inode 15 (err -117) [ 143.853863][ T5523] bridge0: port 2(vlan2) entered blocking state [ 143.860996][ T5523] bridge0: port 2(vlan2) entered disabled state [ 143.895860][ T5516] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,quota,,errors=continue. Quota mode: writeback. [ 144.170829][ T5530] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.215002][ T4553] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 144.227937][ T4553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.266620][ T4553] usb 3-1: config 0 descriptor?? [ 144.322009][ T4553] cp210x 3-1:0.0: cp210x converter detected [ 144.368217][ T5529] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -71 [ 144.374532][ T4771] usb 2-1: USB disconnect, device number 9 [ 144.637283][ T5541] netlink: 'syz.3.386': attribute type 11 has an invalid length. [ 145.611721][ T4553] usb 3-1: cp210x converter now attached to ttyUSB0 [ 145.651630][ T4553] usb 3-1: USB disconnect, device number 10 [ 145.839115][ T4553] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 145.864853][ T4553] cp210x 3-1:0.0: device disconnected [ 145.928768][ T4781] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 146.168168][ T4781] usb 1-1: Using ep0 maxpacket: 16 [ 146.358995][ T4781] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.548351][ T4781] usb 1-1: config 1 has an invalid interface number: 237 but max is 0 [ 146.566724][ T4781] usb 1-1: config 1 has no interface number 0 [ 146.602758][ T4781] usb 1-1: config 1 interface 237 has no altsetting 0 [ 146.770787][ T5567] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 146.808265][ T4781] usb 1-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 146.818459][ T4766] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 146.848431][ T4781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.898054][ T4781] usb 1-1: Product: syz [ 146.902830][ T4781] usb 1-1: Manufacturer: syz [ 146.936608][ T5569] bridge0: port 2(syz_tun) entered blocking state [ 146.942548][ T4781] usb 1-1: SerialNumber: syz [ 146.948936][ T5569] bridge0: port 2(syz_tun) entered disabled state [ 147.003492][ T5569] device syz_tun entered promiscuous mode [ 147.037563][ T5574] loop1: detected capacity change from 0 to 1024 [ 147.044709][ T5569] bridge0: port 2(syz_tun) entered blocking state [ 147.051453][ T5569] bridge0: port 2(syz_tun) entered forwarding state [ 147.092406][ T5571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.397'. [ 147.118468][ T5571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.397'. [ 147.128274][ T5571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.397'. [ 147.178256][ T4766] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.202078][ T4766] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 147.240100][ T4766] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.278657][ T4766] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 147.300330][ T4766] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 147.319000][ T4781] ipaq 1-1:1.237: PocketPC PDA converter detected [ 147.348813][ T4781] ipaq: probe of 1-1:1.237 failed with error -71 [ 147.389687][ T4781] usb 1-1: USB disconnect, device number 6 [ 147.448490][ T4766] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.478116][ T4766] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.511077][ T4766] usb 4-1: Product: syz [ 147.516221][ T4766] usb 4-1: Manufacturer: syz [ 147.666968][ T4766] cdc_wdm 4-1:1.0: skipping garbage [ 147.760943][ T4766] cdc_wdm 4-1:1.0: skipping garbage [ 148.159141][ T4766] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 148.191804][ T4766] cdc_wdm 4-1:1.0: Unknown control protocol [ 148.267313][ T4766] usb 4-1: USB disconnect, device number 7 [ 148.609178][ T5595] raw_sendmsg: syz.2.407 forgot to set AF_INET. Fix it! [ 148.738016][ T13] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 148.840238][ T5602] dccp_invalid_packet: P.Data Offset(4) too small [ 148.858068][ T4766] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.988016][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 149.108293][ T13] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 149.117541][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.135381][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.147192][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.158249][ T13] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.172028][ T13] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.182655][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.238392][ T4766] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 149.257969][ T4766] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.257999][ T4548] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 149.418173][ T4766] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 149.427674][ T4766] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 149.447525][ T4766] usb 4-1: Product: syz [ 149.452559][ T13] usb 2-1: usb_control_msg returned -32 [ 149.468242][ T13] usbtmc 2-1:16.0: can't read capabilities [ 149.478042][ T4766] usb 4-1: Manufacturer: syz [ 149.482855][ T4766] usb 4-1: SerialNumber: syz [ 149.495445][ T4766] usb 4-1: config 0 descriptor?? [ 149.518054][ T4548] usb 3-1: Using ep0 maxpacket: 8 [ 149.542294][ T4766] usb 4-1: selecting invalid altsetting 0 [ 149.658172][ T4548] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 149.666790][ T4548] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.677132][ T4548] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.686950][ T4548] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.697779][ T4548] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.711026][ T4548] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.720436][ T4548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.770284][ T13] usb 4-1: USB disconnect, device number 8 [ 149.998116][ T4548] usb 3-1: usb_control_msg returned -32 [ 150.003977][ T4548] usbtmc 3-1:16.0: can't read capabilities [ 150.008502][ T13] usb 2-1: USB disconnect, device number 10 [ 150.028919][ T5587] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -71 [ 150.838348][ T4548] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 151.158415][ T4548] usb 4-1: Using ep0 maxpacket: 32 [ 151.311429][ T4548] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 151.328057][ T4548] usb 4-1: config 0 has no interface number 0 [ 151.411370][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 151.418355][ T146] Bluetooth: hci5: sending frame failed (-49) [ 151.538195][ T4548] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 151.547541][ T4548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.568012][ T4548] usb 4-1: Product: syz [ 151.572533][ T4548] usb 4-1: Manufacturer: syz [ 151.582186][ T4548] usb 4-1: SerialNumber: syz [ 151.608837][ T4548] usb 4-1: config 0 descriptor?? [ 151.659088][ T4548] smsc95xx v2.0.0 [ 151.748049][ T4766] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 151.921929][ T13] usb 3-1: USB disconnect, device number 11 [ 151.988112][ T4766] usb 5-1: Using ep0 maxpacket: 8 [ 152.108341][ T4766] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 152.123785][ T4766] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.134021][ T4766] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.144163][ T4766] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 152.154530][ T4766] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 152.175587][ T4766] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.196946][ T4766] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 152.196981][ T4766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.259240][ T4766] usbtmc: probe of 5-1:16.0 failed with error -22 [ 152.270834][ T5636] loop2: detected capacity change from 0 to 128 [ 152.335065][ T5636] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 152.348455][ T4548] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 152.369796][ T4548] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 152.381717][ T5636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.398568][ T4548] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 152.429245][ T4548] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 152.456056][ T4548] usb 4-1: USB disconnect, device number 9 [ 152.594095][ T5640] kvm [5639]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0xcd [ 152.710437][ T5648] binder: BINDER_SET_CONTEXT_MGR already set [ 152.717103][ T5648] binder: 5647:5648 ioctl 4018620d 200000000140 returned -16 [ 152.779806][ T5650] bond0: (slave bond_slave_1): Releasing backup interface [ 152.790800][ T5650] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 152.896422][ T5657] loop3: detected capacity change from 0 to 128 [ 152.917592][ T5657] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.931455][ T5657] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.118059][ T4650] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 153.158233][ T4545] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 153.408289][ T4650] usb 3-1: Using ep0 maxpacket: 8 [ 153.519033][ T4545] usb 2-1: Using ep0 maxpacket: 8 [ 153.558722][ T4650] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 153.583997][ T4650] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 153.659061][ T4545] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 153.673167][ T4650] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.693108][ T4545] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.750604][ T4650] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.762898][ T4545] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.778234][ T4650] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 153.796700][ T4545] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.809037][ T4545] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.828344][ T4650] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.844131][ T4650] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.855836][ T4545] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.885559][ T4545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.909127][ T4766] Bluetooth: hci5: command 0x1001 tx timeout [ 153.916154][ T146] Bluetooth: hci5: sending frame failed (-49) [ 153.952810][ T4650] usbtmc 3-1:16.0: bulk endpoints not found [ 154.012720][ T5664] loop3: detected capacity change from 0 to 256 [ 154.023120][ T5664] exfat: Deprecated parameter 'utf8' [ 154.028659][ T5664] exfat: Deprecated parameter 'utf8' [ 154.050097][ T5664] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 154.194403][ T4545] usb 2-1: usb_control_msg returned -32 [ 154.200983][ T4545] usbtmc 2-1:16.0: can't read capabilities [ 154.287268][ T5670] netlink: 204 bytes leftover after parsing attributes in process `syz.3.435'. [ 154.383600][ T5674] loop3: detected capacity change from 0 to 2048 [ 154.400187][ T5674] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 154.421039][ T5674] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback. [ 154.436286][ T5674] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.461759][ T4545] usb 5-1: USB disconnect, device number 9 [ 154.888025][ T4548] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 155.158084][ T4548] usb 4-1: Using ep0 maxpacket: 32 [ 155.298201][ T4548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 155.310026][ T4548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50557, setting to 1024 [ 155.322519][ T4548] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 155.331777][ T4548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.341992][ T4548] usb 4-1: config 0 descriptor?? [ 155.368293][ T5682] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 155.402587][ T4548] hub 4-1:0.0: USB hub found [ 155.618240][ T4548] hub 4-1:0.0: 1 port detected [ 155.789336][ T4545] usb 3-1: USB disconnect, device number 12 [ 155.838166][ T4548] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 155.845188][ T4548] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 155.871392][ T5686] bridge0: port 3(syz_tun) entered blocking state [ 155.892787][ T4553] usb 2-1: USB disconnect, device number 11 [ 155.909903][ T5686] bridge0: port 3(syz_tun) entered disabled state [ 155.942277][ T5686] device syz_tun entered promiscuous mode [ 155.948968][ T5686] bridge0: port 3(syz_tun) entered blocking state [ 155.955557][ T5686] bridge0: port 3(syz_tun) entered forwarding state [ 155.988653][ T4229] Bluetooth: hci5: command 0x1009 tx timeout [ 156.008241][ T4548] usbhid 4-1:0.0: can't add hid device: -71 [ 156.025313][ T4548] usbhid: probe of 4-1:0.0 failed with error -71 [ 156.070460][ T5695] loop2: detected capacity change from 0 to 128 [ 156.089413][ T4548] usb 4-1: USB disconnect, device number 10 [ 156.145386][ T5695] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.158152][ T5695] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.190842][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.537538][ T5689] loop4: detected capacity change from 0 to 32768 [ 157.490917][ T5689] JBD2: Ignoring recovery information on journal [ 157.519331][ T5689] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 157.519712][ T5689] JBD2: bad block at offset 32 [ 157.557567][ T5689] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 157.666609][ T5689] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 157.721789][ T5689] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 157.767855][ T5689] OCFS2: File system is now read-only. [ 157.797350][ T5689] (syz.4.442,5689,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 157.857926][ T5725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 157.865655][ T5689] (syz.4.442,5689,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 157.866760][ T5725] netlink: 'syz.1.454': attribute type 25 has an invalid length. [ 157.913283][ T5689] (syz.4.442,5689,0):ocfs2_fiemap:782 ERROR: status = -30 [ 157.921138][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 157.984271][ T4198] ocfs2: Unmounting device (7,4) on (node local) [ 158.168146][ T4545] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 158.301937][ T5739] loop3: detected capacity change from 0 to 128 [ 158.407418][ T5739] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.419584][ T5739] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.452872][ T4545] usb 3-1: Using ep0 maxpacket: 8 [ 158.602636][ T4545] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 158.901304][ T4545] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.198696][ T4229] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 159.453102][ T4545] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.463572][ T4545] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.473844][ T4545] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.487414][ T4545] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.498381][ T4545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.558224][ T4229] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.574198][ T4229] usb 5-1: config 0 has no interface number 0 [ 159.647709][ T5755] loop3: detected capacity change from 0 to 1024 [ 159.758793][ T4229] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 159.783154][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.867577][ T4229] usb 5-1: Product: syz [ 159.890331][ T4229] usb 5-1: Manufacturer: syz [ 159.898228][ T4781] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 159.934667][ T4229] usb 5-1: SerialNumber: syz [ 160.064987][ T4229] usb 5-1: config 0 descriptor?? [ 160.289177][ T4781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 160.325211][ T4229] usb 5-1: selecting invalid altsetting 1 [ 160.389829][ T4781] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 160.411245][ T4229] dvb_ttusb_budget: ttusb_init_controller: error [ 160.435180][ T4229] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 160.452989][ T4781] usb 1-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 160.480097][ T4545] usb 3-1: usb_control_msg returned -32 [ 160.485856][ T4545] usbtmc 3-1:16.0: can't read capabilities [ 160.527558][ T4781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.585173][ T4781] usb 1-1: config 0 descriptor?? [ 160.637141][ T4229] DVB: Unable to find symbol stv0299_attach() [ 160.644076][ T5753] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 160.703370][ T5770] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.742650][ T4229] DVB: Unable to find symbol tda8083_attach() [ 160.752336][ T4229] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 160.772704][ T4229] usb 5-1: USB disconnect, device number 10 [ 160.966172][ T5776] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 160.978527][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 161.163420][ T5753] udc-core: couldn't find an available UDC or it's busy [ 161.221310][ T5753] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 161.442153][ T4553] usb 3-1: USB disconnect, device number 13 [ 161.751176][ T5784] loop4: detected capacity change from 0 to 512 [ 161.815920][ T4781] lg-g15 0003:046D:C22D.0007: unknown main item tag 0x0 [ 161.823266][ T4781] lg-g15 0003:046D:C22D.0007: unknown main item tag 0x1 [ 161.830866][ T4781] lg-g15 0003:046D:C22D.0007: collection stack underflow [ 161.839294][ T4781] lg-g15 0003:046D:C22D.0007: item 0 2 0 12 parsing failed [ 161.848417][ T4781] lg-g15: probe of 0003:046D:C22D.0007 failed with error -22 [ 161.859462][ T4781] usb 1-1: USB disconnect, device number 7 [ 161.899716][ T5784] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 161.935896][ T5784] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 161.935924][ T5784] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 161.942201][ T5784] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 161.942227][ T5784] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8802c198, mo2=0000] [ 161.943326][ T5784] EXT4-fs (loop4): orphan cleanup on readonly fs [ 161.943390][ T5784] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.475: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 161.947194][ T5784] EXT4-fs error (device loop4): ext4_quota_enable:6447: comm syz.4.475: Bad quota inode: 4, type: 1 [ 161.947753][ T5784] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.947787][ T5784] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 161.947808][ T5784] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,bsddf,nodioread_nolock,acl,debug,noblock_validity,usrjquota=,minixdf,min_batch_time=0x0000000000000008,resgid=0x0000000000000000,sysvgroups,,errors=continue. Quota mode: writeback. [ 161.964479][ T5784] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.475: bg 0: block 34: padding at end of block bitmap is not set [ 163.099248][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 163.838463][ T4776] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 164.098073][ T4776] usb 1-1: Using ep0 maxpacket: 8 [ 164.218567][ T4776] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 164.264486][ T4776] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.468447][ T4776] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.654174][ T4776] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.815836][ T4776] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.885468][ T4776] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.934084][ T4776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.146623][ T5842] loop4: detected capacity change from 0 to 16 [ 165.164633][ T5842] erofs: (device loop4): mounted with root inode @ nid 36. [ 165.224979][ T5827] loop2: detected capacity change from 0 to 32768 [ 165.229589][ T5842] attempt to access beyond end of device [ 165.229589][ T5842] loop4: rw=0, want=40, limit=16 [ 165.278101][ T4776] usb 1-1: usb_control_msg returned -32 [ 165.284725][ T4776] usbtmc 1-1:16.0: can't read capabilities [ 165.313266][ T5846] loop3: detected capacity change from 0 to 128 [ 165.328936][ T5842] attempt to access beyond end of device [ 165.328936][ T5842] loop4: rw=0, want=40, limit=16 [ 165.373065][ T5827] JBD2: Ignoring recovery information on journal [ 165.381257][ T5842] attempt to access beyond end of device [ 165.381257][ T5842] loop4: rw=524288, want=48, limit=16 [ 165.407207][ T5842] attempt to access beyond end of device [ 165.407207][ T5842] loop4: rw=524288, want=40, limit=16 [ 165.421581][ T5827] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 165.447107][ T5827] JBD2: bad block at offset 32 [ 165.479776][ T5846] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.499201][ T5827] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 165.514285][ T5846] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 165.593938][ T5827] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 165.624047][ T5827] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 165.642745][ T5827] OCFS2: File system is now read-only. [ 165.651847][ T5827] (syz.2.489,5827,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 165.665195][ T5827] (syz.2.489,5827,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 165.676977][ T5827] (syz.2.489,5827,0):ocfs2_fiemap:782 ERROR: status = -30 [ 165.848225][ T4545] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 165.922778][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 165.982564][ T5856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 166.354589][ T4545] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.628371][ T4545] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 166.638505][ T4545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.646843][ T4545] usb 2-1: Product: syz [ 166.658841][ T4545] usb 2-1: Manufacturer: syz [ 166.664474][ T4545] usb 2-1: SerialNumber: syz [ 166.781633][ T5864] loop5: detected capacity change from 0 to 7 [ 166.804738][ T5862] netlink: 1 bytes leftover after parsing attributes in process `syz.3.502'. [ 166.839571][ T1217] loop: Write error at byte offset 36, length 3584. [ 166.846893][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 166.858229][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 166.868421][ T5864] Dev loop5: unable to read RDB block 7 [ 166.876494][ T5864] loop5: unable to read partition table [ 166.898410][ T13] usb 1-1: USB disconnect, device number 8 [ 166.900396][ T5864] loop5: partition table beyond EOD, truncated [ 166.972794][ T5864] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 167.039169][ T5867] loop3: detected capacity change from 0 to 4096 [ 167.099224][ T5867] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 167.178067][ T3561] Dev loop5: unable to read RDB block 7 [ 167.183839][ T3561] loop5: unable to read partition table [ 167.197630][ T3561] loop5: partition table beyond EOD, truncated [ 167.409116][ T4545] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 167.895736][ T4545] usb 2-1: USB disconnect, device number 12 [ 168.069921][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.088746][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 168.361083][ T5881] loop2: detected capacity change from 0 to 4096 [ 168.392197][ T1217] ntfs3: loop3: ino=1b, Internal error [ 168.428224][ T1217] ntfs3: loop3: ntfs3_write_inode r=1b failed, -22. [ 168.465698][ T4197] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 168.496494][ T4197] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 168.500519][ T5886] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.538936][ T4197] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 168.748073][ T5881] syz.2.508 (5881) used greatest stack depth: 19952 bytes left [ 169.024253][ T4545] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 169.378239][ T4550] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 169.538813][ T4545] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 169.644954][ T5885] loop0: detected capacity change from 0 to 32768 [ 169.651988][ T4545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.689422][ T4545] usb 4-1: config 0 descriptor?? [ 169.934528][ T5911] loop1: detected capacity change from 0 to 512 [ 169.950412][ T4545] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 170.008314][ T4550] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.040959][ T5911] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.115422][ T5911] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.520: iget: bad extra_isize 58 (inode size 256) [ 170.147247][ T5911] EXT4-fs (loop1): Remounting filesystem read-only [ 170.192816][ T5911] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.520: error while reading EA inode 18 err=-117 [ 170.243960][ T5911] EXT4-fs (loop1): Remounting filesystem read-only [ 170.284660][ T5911] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.520: iget: bad extra_isize 58 (inode size 256) [ 170.308319][ T4550] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 170.332449][ T4550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.356105][ T4550] usb 5-1: Product: syz [ 170.360688][ T4550] usb 5-1: Manufacturer: syz [ 170.366915][ T5911] EXT4-fs (loop1): Remounting filesystem read-only [ 170.388935][ T4550] usb 5-1: SerialNumber: syz [ 170.393149][ T5911] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.520: error while reading EA inode 11 err=-117 [ 170.466825][ T5911] EXT4-fs (loop1): Remounting filesystem read-only [ 170.486738][ T5911] EXT4-fs (loop1): 1 orphan inode deleted [ 170.492984][ T5911] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003a,min_batch_time=0x0000000000000003,jqfmt=vfsold,. Quota mode: none. [ 170.606839][ T5911] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.520: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 170.632726][ T5911] EXT4-fs (loop1): Remounting filesystem read-only [ 170.925711][ T4545] usb 4-1: USB disconnect, device number 11 [ 171.010207][ T5925] loop1: detected capacity change from 0 to 1024 [ 171.166373][ T4550] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 171.706912][ T4550] usb 5-1: USB disconnect, device number 11 [ 171.813497][ T5925] hfsplus: xattr searching failed [ 172.335053][ T5946] loop3: detected capacity change from 0 to 16 [ 172.396550][ T5946] erofs: (device loop3): mounted with root inode @ nid 36. [ 172.459710][ T5946] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 172.542388][ T5946] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 173.881294][ T4550] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 174.277681][ T5956] loop2: detected capacity change from 0 to 32768 [ 174.324765][ T5982] loop0: detected capacity change from 0 to 128 [ 174.358182][ T4550] usb 4-1: unable to get BOS descriptor or descriptor too short [ 174.394886][ T5956] XFS (loop2): Mounting V5 Filesystem [ 174.450748][ T5982] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.511544][ T5983] loop4: detected capacity change from 0 to 1024 [ 174.518288][ T5982] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.550627][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.602706][ T5956] XFS (loop2): Ending clean mount [ 174.683487][ T4550] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 174.703172][ T4550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.711856][ T4550] usb 4-1: Product: syz [ 174.716416][ T4550] usb 4-1: Manufacturer: syz [ 174.769605][ T4196] XFS (loop2): Unmounting Filesystem [ 174.887560][ T4550] usb 4-1: SerialNumber: syz [ 174.933378][ T5995] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 174.996477][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 175.915642][ T6007] netlink: 44 bytes leftover after parsing attributes in process `syz.4.549'. [ 176.320287][ T4550] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 176.433564][ T4550] usb 4-1: USB disconnect, device number 12 [ 176.785666][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.018700][ T6036] loop4: detected capacity change from 0 to 128 [ 177.097261][ T6038] loop3: detected capacity change from 0 to 128 [ 177.111263][ T6036] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.138127][ T6036] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 177.359569][ T6038] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.405908][ T6038] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 177.491274][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 177.580113][ T4550] kernel read not supported for file /dsp (pid: 4550 comm: kworker/1:15) [ 180.128108][ T4781] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 180.175416][ T6083] loop4: detected capacity change from 0 to 128 [ 180.239083][ T6083] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.258077][ T6083] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.368118][ T4781] usb 4-1: Using ep0 maxpacket: 32 [ 180.465186][ T4545] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 180.498185][ T4781] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.516317][ T4781] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.582371][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 180.758191][ T4781] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 180.781857][ T4781] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 180.808014][ T4781] usb 4-1: Product: syz [ 180.825011][ T4781] usb 4-1: Manufacturer: syz [ 180.844436][ T4781] usb 4-1: SerialNumber: syz [ 180.931135][ T4781] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6 [ 181.028545][ T4781] Bluetooth: hci0: command 0x0406 tx timeout [ 181.035437][ T4781] Bluetooth: hci3: command 0x0406 tx timeout [ 181.045980][ T6090] loop2: detected capacity change from 0 to 1024 [ 181.065827][ T4781] Bluetooth: hci4: command 0x0406 tx timeout [ 181.118551][ T4781] Bluetooth: hci2: command 0x0406 tx timeout [ 181.147299][ T4781] Bluetooth: hci1: command 0x0406 tx timeout [ 181.167813][ T6090] hfsplus: xattr searching failed [ 181.191491][ T4781] usb 4-1: USB disconnect, device number 13 [ 181.238367][ T4781] appletouch 4-1:1.0: input: appletouch disconnected [ 181.278645][ T4545] usb 1-1: Using ep0 maxpacket: 32 [ 181.384614][ T6096] loop2: detected capacity change from 0 to 128 [ 181.397961][ T4550] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 181.464893][ T6096] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.476524][ T6096] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.510165][ T4545] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.555094][ T4545] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.034871][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 182.505618][ T6107] loop3: detected capacity change from 0 to 4096 [ 182.518387][ T4550] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.535913][ T4550] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 182.545121][ T4550] usb 2-1: config 1 has no interface number 0 [ 182.552956][ T4550] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.564448][ T4550] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 182.568085][ T6107] EXT4-fs (loop3): Ignoring removed oldalloc option [ 182.575537][ T4550] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 182.591676][ T4550] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.601785][ T4550] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.620935][ T6107] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 182.629251][ T4545] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 182.639036][ T4545] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 182.648255][ T4545] usb 1-1: Product: syz [ 182.654626][ T4545] usb 1-1: Manufacturer: syz [ 182.664020][ T4553] kernel write not supported for file /amidi2 (pid: 4553 comm: kworker/1:18) [ 182.711317][ T6107] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,dioread_nolock,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,usrjquota=,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 182.849382][ T4545] hub 1-1:4.0: USB hub found [ 183.528488][ T6121] 9pnet: Insufficient options for proto=fd [ 183.685942][ T4550] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.702642][ T4550] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.711032][ T4550] usb 2-1: Product: syz [ 183.715321][ T4550] usb 2-1: Manufacturer: syz [ 183.720191][ T4550] usb 2-1: SerialNumber: syz [ 183.748094][ T4545] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 183.749492][ T6092] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 183.808664][ T4545] usb 1-1: USB disconnect, device number 9 [ 184.024200][ T4553] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 184.148255][ T4550] cdc_ncm 2-1:1.1: bind() failure [ 184.153691][ T6123] loop0: detected capacity change from 0 to 32768 [ 184.158390][ T4550] usb 2-1: USB disconnect, device number 13 [ 184.232613][ T6123] JBD2: Ignoring recovery information on journal [ 184.295905][ T6123] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 184.327777][ T6127] loop3: detected capacity change from 0 to 32768 [ 184.327947][ T4553] usb 5-1: Using ep0 maxpacket: 16 [ 184.375314][ T6135] loop1: detected capacity change from 0 to 736 [ 184.420606][ T6127] JBD2: Ignoring recovery information on journal [ 184.499164][ T6127] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 184.512300][ T4553] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 184.565519][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 184.623314][ T4197] ocfs2: Unmounting device (7,3) on (node local) [ 184.748183][ T4553] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 184.748305][ T4553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.748324][ T4553] usb 5-1: Product: syz [ 184.748339][ T4553] usb 5-1: Manufacturer: syz [ 184.748355][ T4553] usb 5-1: SerialNumber: syz [ 184.750343][ T4553] usb 5-1: config 0 descriptor?? [ 184.806631][ T4553] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 184.807399][ T4553] usb 5-1: Detected FT232RL [ 184.990440][ T6147] loop0: detected capacity change from 0 to 128 [ 185.028319][ T4553] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 185.045384][ T6147] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 185.109320][ T6147] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.178152][ T4650] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 185.187033][ T6147] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.590: checksumming directory block 0 [ 185.297571][ T6147] EXT4-fs warning (device loop0): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 185.328724][ T4553] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 185.384883][ T5548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.475696][ T4650] usb 4-1: Using ep0 maxpacket: 32 [ 185.557786][ T5548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.562800][ T4553] usb 5-1: USB disconnect, device number 12 [ 185.614609][ T4553] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 185.638338][ T4650] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.678427][ T4650] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.689032][ T4553] ftdi_sio 5-1:0.0: device disconnected [ 185.740606][ T5548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.776353][ T6162] loop2: detected capacity change from 0 to 4096 [ 185.811238][ T6162] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 185.840402][ T5548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.851602][ T4650] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 185.864785][ T4650] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 185.890107][ T4650] usb 4-1: Product: syz [ 185.894657][ T4650] usb 4-1: Manufacturer: syz [ 185.959499][ T4650] hub 4-1:4.0: USB hub found [ 186.135905][ T6164] chnl_net:caif_netlink_parms(): no params data found [ 186.248248][ T4650] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 186.492807][ T6181] loop4: detected capacity change from 0 to 128 [ 186.531660][ T4650] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 186.689468][ T4650] usb 4-1: device reset changed ep0 maxpacket size! [ 187.018549][ T4650] usb 4-1: USB disconnect, device number 14 [ 187.101142][ T6181] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.229410][ T6181] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 187.345410][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.411318][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.429822][ T6164] device bridge_slave_0 entered promiscuous mode [ 187.449813][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.481990][ T6192] loop0: detected capacity change from 0 to 1024 [ 187.488934][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.502957][ T6164] device bridge_slave_1 entered promiscuous mode [ 187.638125][ T4650] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 187.804115][ T6192] hfsplus: bad catalog entry type [ 187.833024][ T6164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.016973][ T6164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.052589][ T4580] hfsplus: b-tree write err: -5, ino 25 [ 188.064727][ T4580] hfsplus: b-tree write err: -5, ino 4 [ 188.073711][ T4781] Bluetooth: hci1: command 0x0409 tx timeout [ 188.103937][ T4580] hfsplus: b-tree write err: -5, ino 2 [ 188.114306][ T4580] hfsplus: b-tree write err: -5, ino 26 [ 188.148008][ T4771] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 188.163967][ T6204] loop3: detected capacity change from 0 to 128 [ 188.203339][ T4650] usb 4-1: device not accepting address 15, error -71 [ 188.243615][ T6204] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 188.271363][ T6210] loop0: detected capacity change from 0 to 128 [ 188.281266][ T6204] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.319807][ T6204] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.609: checksumming directory block 0 [ 188.325228][ T6164] team0: Port device team_slave_0 added [ 188.397399][ T6164] team0: Port device team_slave_1 added [ 188.403895][ T6204] EXT4-fs warning (device loop3): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 188.457298][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.471675][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.588248][ T6164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.611625][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.618966][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.656180][ T6164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.668176][ T4771] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 189.316319][ T6164] device hsr_slave_0 entered promiscuous mode [ 189.339080][ T6164] device hsr_slave_1 entered promiscuous mode [ 189.346045][ T6164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.369537][ T6164] Cannot create hsr debugfs directory [ 189.434449][ T4771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.455575][ T4771] usb 3-1: config 0 descriptor?? [ 189.579678][ T6220] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 189.742929][ T6224] loop0: detected capacity change from 0 to 8192 [ 189.841042][ T6224] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 189.858948][ T6224] REISERFS (device loop0): using ordered data mode [ 189.865556][ T6224] reiserfs: using flush barriers [ 189.896112][ T6224] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 189.916671][ T6224] REISERFS (device loop0): checking transaction log (loop0) [ 189.938187][ T4771] hackrf 3-1:0.0: Board ID: 00 [ 189.945106][ T4771] hackrf 3-1:0.0: Firmware version: [ 189.959726][ T6224] REISERFS (device loop0): Using r5 hash to sort names [ 189.980649][ T6224] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 189.998223][ T4771] hackrf 3-1:0.0: Registered as swradio24 [ 190.008565][ T6224] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 190.010649][ T4771] hackrf 3-1:0.0: Registered as swradio25 [ 190.063302][ T6224] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 190.076233][ T4771] hackrf 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 190.077822][ T4649] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 190.135180][ T6164] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 190.178057][ T4550] Bluetooth: hci1: command 0x041b tx timeout [ 190.188617][ T6224] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 190.209566][ T4771] usb 3-1: USB disconnect, device number 14 [ 190.219669][ T6237] loop4: detected capacity change from 0 to 4096 [ 190.338081][ T6237] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 190.370749][ T6164] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 190.398280][ T4649] usb 4-1: Using ep0 maxpacket: 8 [ 190.430578][ T6164] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 190.548448][ T4649] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 190.558334][ T4649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.648438][ T5548] device hsr_slave_0 left promiscuous mode [ 190.659248][ T5548] device hsr_slave_1 left promiscuous mode [ 190.680879][ T4649] pvrusb2: Hardware description: Terratec Grabster AV400 [ 190.692001][ T5548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.699251][ T4649] pvrusb2: ********** [ 190.703644][ T4649] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 190.746296][ T4649] pvrusb2: Important functionality might not be entirely working. [ 190.758065][ T5548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.790101][ T5548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.797635][ T5548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.818494][ T4649] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 190.838882][ T5548] device bridge_slave_1 left promiscuous mode [ 190.847537][ T5548] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.853672][ T4649] pvrusb2: ********** [ 190.949213][ T2425] pvrusb2: Invalid write control endpoint [ 190.979468][ T5548] device bridge_slave_0 left promiscuous mode [ 190.985825][ T5548] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.049772][ T6258] loop0: detected capacity change from 0 to 256 [ 191.093721][ T2425] pvrusb2: Invalid write control endpoint [ 191.116505][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 191.137061][ T6252] loop2: detected capacity change from 0 to 4096 [ 191.147174][ T5548] device veth1_macvtap left promiscuous mode [ 191.199593][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 191.213006][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 191.226920][ T2425] pvrusb2: Device being rendered inoperable [ 191.228580][ T5548] device veth0_macvtap left promiscuous mode [ 191.238545][ T6231] pvrusb2: Attempted to execute control transfer when device not ok [ 191.259834][ T5548] device veth1_vlan left promiscuous mode [ 191.260102][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 191.266132][ T5548] device veth0_vlan left promiscuous mode [ 191.278046][ T4550] usb 4-1: USB disconnect, device number 17 [ 191.290945][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 191.374716][ T2425] pvrusb2: Attached sub-driver cx25840 [ 191.399553][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 191.427466][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 191.593719][ T4196] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 191.625076][ T4196] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 192.086247][ T5548] team0 (unregistering): Port device team_slave_1 removed [ 192.104878][ T5548] team0 (unregistering): Port device team_slave_0 removed [ 192.153031][ T5548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.237999][ T4550] Bluetooth: hci1: command 0x040f tx timeout [ 192.391823][ T5548] bond0 (unregistering): Released all slaves [ 192.461070][ T6164] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 192.483989][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 192.907520][ T6164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.979227][ T6164] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.019067][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.027229][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.118215][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.127591][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.172797][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.180014][ T4580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.224425][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.282110][ T6305] netlink: 44 bytes leftover after parsing attributes in process `syz.3.635'. [ 193.292034][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.323758][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.331104][ T4580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.436364][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.450590][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.499880][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.515993][ T6315] loop4: detected capacity change from 0 to 256 [ 193.549343][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.624478][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.665262][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.705031][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.749957][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.810386][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.831196][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.848223][ T4650] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 193.925321][ T6164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.020742][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.039039][ T6328] loop4: detected capacity change from 0 to 128 [ 194.055569][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.079345][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.139610][ T6296] loop0: detected capacity change from 0 to 32768 [ 194.218836][ T6296] xfs: Unknown parameter 'smackfstransmute' [ 194.235391][ T6328] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 194.260597][ T6328] sysv_free_block: trying to free block not in datazone [ 194.311999][ T4545] Bluetooth: hci1: command 0x0419 tx timeout [ 194.313195][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.324444][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.338189][ T4650] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.358102][ T6328] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 194.498203][ T4650] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.555869][ T4650] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.567210][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.577482][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.643713][ T6164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.671545][ T6337] netlink: 'syz.4.640': attribute type 13 has an invalid length. [ 194.711815][ T6337] netlink: 'syz.4.640': attribute type 4 has an invalid length. [ 194.752832][ T6337] netlink: 14232 bytes leftover after parsing attributes in process `syz.4.640'. [ 194.769088][ T6308] loop2: detected capacity change from 0 to 40427 [ 194.798528][ T4650] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 194.818204][ T4650] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.857936][ T4650] usb 4-1: Product: syz [ 194.863904][ T4650] usb 4-1: Manufacturer: syz [ 194.882579][ T4650] usb 4-1: SerialNumber: syz [ 194.931941][ T6308] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x1ffff [ 194.962592][ T4650] usb 4-1: selecting invalid altsetting 1 [ 194.987552][ T6308] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x724 [ 194.999901][ T4650] usb 4-1: unit 6 not found! [ 195.037418][ T6308] F2FS-fs (loop2): invalid crc value [ 195.066620][ T6308] F2FS-fs (loop2): Found nat_bits in checkpoint [ 195.229104][ T6356] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 195.233409][ T6358] loop0: detected capacity change from 0 to 512 [ 195.256399][ T6308] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 195.379776][ T6358] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,user_xattr,,errors=continue. Quota mode: writeback. [ 195.411292][ T6308] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 195.430436][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.462697][ T6308] F2FS-fs (loop2) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6a4/0x1dc0 [ 195.469506][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.492431][ T6308] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_get_new_data_page+0xc1/0x680 [ 195.498170][ T6358] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.596861][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.620233][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.654472][ T6164] device veth0_vlan entered promiscuous mode [ 195.664346][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.678317][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.704908][ T6164] device veth1_vlan entered promiscuous mode [ 195.717983][ T4776] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 195.788691][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.801660][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.827574][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.841359][ T4650] usb 4-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 195.901509][ T4650] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 195.913662][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.930711][ T4650] usb 4-1: USB disconnect, device number 18 [ 195.965197][ T4776] usb 5-1: Using ep0 maxpacket: 16 [ 195.984375][ T6164] device veth0_macvtap entered promiscuous mode [ 196.042813][ T6164] device veth1_macvtap entered promiscuous mode [ 196.088279][ T4776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.104640][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.117963][ T4776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.119491][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.142742][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.144663][ T4776] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 196.153657][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.173206][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.186029][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.196683][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.196779][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.209556][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.237469][ T4776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.239408][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.258512][ T4776] usb 5-1: config 0 descriptor?? [ 196.305584][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.331501][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.353943][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.383992][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.428058][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.470596][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.517920][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.559902][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.587951][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.607909][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.649293][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.722014][ T6374] loop3: detected capacity change from 0 to 8192 [ 196.840261][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.848649][ T6381] loop0: detected capacity change from 0 to 16 [ 196.862191][ T4776] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 196.866820][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.904288][ T6381] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66700) [ 196.929017][ T6164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.961493][ T6164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.986197][ T6374] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 196.997977][ T6164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.024295][ T6374] REISERFS (device loop3): using ordered data mode [ 197.051560][ T6164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.090225][ T6374] reiserfs: using flush barriers [ 197.165848][ T6374] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 197.228862][ T4650] usb 5-1: USB disconnect, device number 13 [ 197.318905][ T6374] REISERFS (device loop3): checking transaction log (loop3) [ 197.391161][ T6374] REISERFS (device loop3): Using r5 hash to sort names [ 197.434644][ T6374] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 197.448065][ T6378] loop2: detected capacity change from 0 to 40427 [ 197.489142][ T1217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.517591][ T6374] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 197.536352][ T1217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.566742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.622467][ T6378] F2FS-fs (loop2): invalid crc value [ 197.624317][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.661046][ T6378] F2FS-fs (loop2): Found nat_bits in checkpoint [ 197.667663][ T6374] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 197.714813][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.757036][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.790777][ T6393] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 197.801129][ T6394] loop0: detected capacity change from 0 to 64 [ 197.915976][ T6378] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 198.168510][ T4188] hfs: request for non-existent node 131072 in B*Tree [ 198.246313][ T4196] attempt to access beyond end of device [ 198.246313][ T4196] loop2: rw=2049, want=45112, limit=40427 [ 198.420996][ T6408] loop4: detected capacity change from 0 to 2048 [ 198.771471][ T6420] IPv6: syztnl0: Disabled Multicast RS [ 198.912816][ T6408] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,noblock_validity,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 199.337258][ T6408] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.510193][ T6424] set_capacity_and_notify: 1 callbacks suppressed [ 199.510212][ T6424] loop3: detected capacity change from 0 to 4096 [ 199.562784][ T6423] netlink: 44 bytes leftover after parsing attributes in process `syz.0.658'. [ 199.629139][ T6429] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.717821][ T26] audit: type=1800 audit(1777943016.644:6): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.659" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 199.894005][ T6434] loop4: detected capacity change from 0 to 512 [ 199.986276][ T6434] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 200.074770][ T6434] System zones: 1-12 [ 200.176107][ T6434] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.661: missing EA_INODE flag [ 200.232659][ T6434] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.661: error while reading EA inode 12 err=-117 [ 200.376827][ T6434] EXT4-fs (loop4): 1 orphan inode deleted [ 200.398584][ T6434] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 200.537727][ T6455] loop5: detected capacity change from 0 to 4096 [ 200.888119][ T4776] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 200.907313][ T6455] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 201.139321][ T4776] usb 3-1: Using ep0 maxpacket: 8 [ 201.259002][ T4776] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 201.422995][ T4776] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.517121][ T6475] loop3: detected capacity change from 0 to 2048 [ 201.593114][ T4776] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.613089][ T6479] loop4: detected capacity change from 0 to 512 [ 201.697649][ T4776] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.711328][ T6475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.776050][ T6482] loop0: detected capacity change from 0 to 1024 [ 201.777980][ T4776] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.838447][ T4776] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 201.856307][ T6482] EXT4-fs (loop0): Ignoring removed bh option [ 201.889824][ T4776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.941222][ T9] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 201.956708][ T6482] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noblock_validity,delalloc,journal_dev=0x0000000000000002,commit=0x0000000000000000,barrier=0x000000000000701c,bh,,errors=continue. Quota mode: none. [ 201.979301][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.988802][ T6164] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 201.995105][ T6164] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 202.002757][ T6164] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 202.011353][ T4924] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 202.013225][ T6482] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.026103][ T6164] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 202.039072][ T6482] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.674: bg 0: block 112: padding at end of block bitmap is not set [ 202.073895][ T6482] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.674: Freeing blocks not in datazone - block = 0, count = 16 [ 202.169720][ T154] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 202.210474][ T4776] usb 3-1: usb_control_msg returned -32 [ 202.215029][ T6493] loop4: detected capacity change from 0 to 1024 [ 202.216125][ T4776] usbtmc 3-1:16.0: can't read capabilities [ 202.256010][ T154] EXT4-fs (loop0): This should not happen!! Data will be lost [ 202.256010][ T154] [ 202.281232][ T6491] loop3: detected capacity change from 0 to 4096 [ 202.306937][ T154] EXT4-fs (loop0): Total free blocks count 0 [ 202.324142][ T6496] netlink: 28 bytes leftover after parsing attributes in process `syz.5.675'. [ 202.340234][ T154] EXT4-fs (loop0): Free/Dirty block details [ 202.349036][ T6493] EXT4-fs (loop4): Ignoring removed bh option [ 202.370446][ T154] EXT4-fs (loop0): free_blocks=16 [ 202.402099][ T6493] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,auto_da_alloc,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 202.432665][ T6491] NILFS (loop3): invalid segment: Checksum error in segment payload [ 202.458192][ T154] EXT4-fs (loop0): dirty_blocks=16 [ 202.470347][ T154] EXT4-fs (loop0): Block reservation details [ 202.473716][ T6491] NILFS (loop3): trying rollback from an earlier position [ 202.501685][ T6493] tipc: Started in network mode [ 202.506633][ T6493] tipc: Node identity -norecov.., cluster identity 4711 [ 202.516133][ T6491] NILFS (loop3): recovery complete [ 202.528279][ T154] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 202.576365][ T6502] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.718105][ T4776] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 202.780026][ T13] usb 3-1: USB disconnect, device number 15 [ 202.798549][ T6460] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -71 [ 202.905507][ T6507] loop0: detected capacity change from 0 to 4096 [ 203.100914][ T6507] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 203.128021][ T4776] usb 6-1: Using ep0 maxpacket: 8 [ 203.682806][ T6507] ntfs3: loop0: Failed to load $Extend. [ 203.929693][ T6507] ntfs3: Cannot use different iocharset when remounting! [ 203.988288][ T4776] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 204.007765][ T4776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.012466][ T6527] loop2: detected capacity change from 0 to 256 [ 204.060343][ T4776] pvrusb2: Hardware description: Terratec Grabster AV400 [ 204.060363][ T4776] pvrusb2: ********** [ 204.060371][ T4776] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 204.060385][ T4776] pvrusb2: Important functionality might not be entirely working. [ 204.060397][ T4776] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 204.060409][ T4776] pvrusb2: ********** [ 204.165656][ T6527] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 204.270545][ T2425] pvrusb2: Invalid write control endpoint [ 204.456247][ T2425] pvrusb2: Invalid write control endpoint [ 204.456301][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 204.456332][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 204.456341][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 204.456352][ T2425] pvrusb2: Device being rendered inoperable [ 204.456393][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 204.456428][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 204.472991][ T2425] pvrusb2: Attached sub-driver cx25840 [ 204.520230][ T6541] loop2: detected capacity change from 0 to 2048 [ 204.553208][ T6501] pvrusb2: Attempted to execute control transfer when device not ok [ 204.553919][ T4650] usb 6-1: USB disconnect, device number 2 [ 204.554842][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 204.554858][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 204.593894][ T6525] loop3: detected capacity change from 0 to 40427 [ 204.643107][ T6541] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 204.680729][ T6544] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.734602][ T6525] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 204.734666][ T6525] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 205.011038][ T6525] F2FS-fs (loop3): Found nat_bits in checkpoint [ 205.608094][ T6525] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 205.608127][ T6525] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 205.795493][ T6560] loop2: detected capacity change from 0 to 256 [ 205.897462][ T6560] exfat: Deprecated parameter 'namecase' [ 205.958796][ T6560] exfat: Deprecated parameter 'utf8' [ 206.026697][ T6560] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 206.079760][ T6560] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 206.250180][ T6558] loop5: detected capacity change from 0 to 8192 [ 207.014317][ T6558] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 207.029242][ T6558] REISERFS (device loop5): using ordered data mode [ 207.035800][ T6558] reiserfs: using flush barriers [ 207.132641][ T6558] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 207.183850][ T6558] REISERFS (device loop5): checking transaction log (loop5) [ 207.236690][ T6587] loop4: detected capacity change from 0 to 128 [ 207.365321][ T6591] loop2: detected capacity change from 0 to 128 [ 207.463828][ T6591] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.463849][ T6587] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.463958][ T6587] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.495290][ T6591] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.517423][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.556264][ T4548] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 208.447267][ T4548] usb 1-1: Using ep0 maxpacket: 16 [ 208.491679][ T6558] REISERFS (device loop5): Using tea hash to sort names [ 208.534811][ T6558] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 208.601428][ T4548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.657980][ T4548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.772951][ T4548] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 208.851920][ T4548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.030947][ T4548] usb 1-1: config 0 descriptor?? [ 209.642198][ T4548] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 209.719307][ T6623] loop2: detected capacity change from 0 to 7 [ 209.833760][ T6620] loop3: detected capacity change from 0 to 4096 [ 209.840484][ T6623] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 209.847823][ T6623] loop2: partition table partially beyond EOD, truncated [ 209.901976][ T6623] loop2: p1 size 284998237 extends beyond EOD, truncated [ 209.950042][ T4548] usb 1-1: USB disconnect, device number 10 [ 210.733738][ T6632] input: syz0 as /devices/virtual/input/input7 [ 210.919116][ T4343] udevd[4343]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 210.975788][ T6640] loop4: detected capacity change from 0 to 4096 [ 210.987180][ T4197] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 211.016110][ T4197] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 211.052126][ T6644] loop5: detected capacity change from 0 to 256 [ 211.083408][ T6640] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 211.119965][ T6644] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 211.146740][ T6644] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.905160][ T6654] syz.0.713 uses obsolete (PF_INET,SOCK_PACKET) [ 213.213568][ T6673] loop0: detected capacity change from 0 to 128 [ 213.224241][ T6675] loop6: detected capacity change from 0 to 7 [ 213.261065][ T4178] Dev loop6: unable to read RDB block 7 [ 213.269014][ T4178] loop6: AHDI p3 p4 [ 213.278476][ T4178] loop6: partition table partially beyond EOD, truncated [ 213.307527][ T4178] loop6: p3 start 2427370299 is beyond EOD, truncated [ 213.326070][ T6675] Dev loop6: unable to read RDB block 7 [ 213.340376][ T6675] loop6: AHDI p3 p4 [ 213.345375][ T6675] loop6: partition table partially beyond EOD, truncated [ 213.366656][ T6675] loop6: p3 start 2427370299 is beyond EOD, truncated [ 213.633402][ T6673] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 213.824375][ T6684] loop4: detected capacity change from 0 to 128 [ 214.050277][ T6673] hpfs: filesystem error: improperly stopped [ 214.056340][ T6673] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 214.074032][ T6688] printk: syz.3.725 (6688): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 214.144344][ T6673] hpfs: You really don't want any checks? You are crazy... [ 214.168674][ T6689] IPv6: addrconf: prefix option has invalid lifetime [ 214.188384][ T6673] hpfs: hpfs_map_sector(): read error [ 214.193848][ T6673] hpfs: code page support is disabled [ 214.200101][ T6673] hpfs: hpfs_map_4sectors(): unaligned read [ 214.206340][ T6673] hpfs: hpfs_map_4sectors(): unaligned read [ 214.217731][ T6692] loop5: detected capacity change from 0 to 128 [ 214.218365][ T6673] hpfs: filesystem error: unable to find root dir [ 214.266144][ T6673] hpfs: hpfs_map_4sectors(): unaligned read [ 214.273520][ T6673] hpfs: hpfs_map_sector(): read error [ 214.298934][ T6684] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.331935][ T6684] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 214.343539][ T6692] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 214.364043][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.381176][ T4548] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 214.465496][ T6701] netlink: 'syz.0.727': attribute type 4 has an invalid length. [ 214.643928][ T6692] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 214.711295][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 215.362269][ T4548] usb 3-1: Using ep0 maxpacket: 8 [ 215.462627][ T6718] loop5: detected capacity change from 0 to 128 [ 215.480366][ T4548] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 215.497370][ T4548] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.524153][ T6718] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.544545][ T6718] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.566185][ T4548] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.578684][ T6718] fscrypt (loop5, inode 12): Unsupported encryption flags (0xbe) [ 215.754944][ T4548] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.765679][ T4548] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.778839][ T4548] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 215.792781][ T4548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.628093][ T4548] usb 3-1: usb_control_msg returned -32 [ 216.633741][ T4548] usbtmc 3-1:16.0: can't read capabilities [ 217.221109][ T4548] usb 3-1: USB disconnect, device number 16 [ 217.246912][ T6681] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -71 [ 217.718900][ T6758] loop3: detected capacity change from 0 to 128 [ 217.908922][ T6758] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.910482][ T6737] loop5: detected capacity change from 0 to 40427 [ 217.927966][ T4781] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 217.958107][ T6758] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 218.037956][ T6737] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 218.047942][ T6737] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 218.054861][ T6771] loop2: detected capacity change from 0 to 8192 [ 218.105077][ T6737] F2FS-fs (loop5): Found nat_bits in checkpoint [ 218.318239][ T4781] usb 1-1: Using ep0 maxpacket: 8 [ 218.326837][ T6737] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 218.385351][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 218.642046][ T6737] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 218.826857][ T6787] binder: 6785:6787 ioctl c0306201 200000000080 returned -14 [ 218.953003][ T6789] loop4: detected capacity change from 0 to 1024 [ 218.988299][ T4781] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 219.005219][ T4781] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.032706][ T4781] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.062712][ T4781] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.076655][ T6791] sp0: Synchronizing with TNC [ 219.082654][ T4781] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.112484][ T4781] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.124938][ T4781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.179939][ T6789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.398045][ T4781] usb 1-1: usb_control_msg returned -32 [ 219.404857][ T4781] usbtmc 1-1:16.0: can't read capabilities [ 220.468048][ T6801] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -71 [ 220.470173][ T4771] usb 1-1: USB disconnect, device number 11 [ 220.511162][ T6807] loop2: detected capacity change from 0 to 1024 [ 220.554187][ T6812] loop4: detected capacity change from 0 to 512 [ 220.708308][ T6807] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,journal_dev=0x0000000000000007,quota,noinit_itable,resuid=0x0000000000000000,nodiscard,jqfmt=vfsv0,noinit_itable,mb_optimize_scan=0x0000000000000000,usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 220.744607][ T6812] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,grpquota,errors=remount-ro,. Quota mode: writeback. [ 220.788864][ T6807] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.931019][ T6812] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.001564][ T6807] EXT4-fs (loop2): shut down requested (0) [ 221.075163][ T6825] trusted_key: encrypted_key: insufficient parameters specified [ 221.681938][ T6829] loop3: detected capacity change from 0 to 128 [ 221.857521][ T6831] loop0: detected capacity change from 0 to 2048 [ 221.895109][ T6831] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.898448][ T6829] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.938036][ T6829] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 221.970103][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.996146][ T6836] UDF-fs: error (device loop0): udf_rename: directory (ino 1345) has parent entry pointing to another inode (1376 != 1367) [ 222.185473][ T6839] loop4: detected capacity change from 0 to 128 [ 222.299168][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 222.558267][ T6839] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.638204][ T6839] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.114589][ T6846] loop2: detected capacity change from 0 to 8192 [ 223.214161][ T6846] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 223.372633][ T6846] UDF-fs: Scanning with blocksize 512 failed [ 223.867089][ T6846] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 223.896856][ T6846] UDF-fs: Scanning with blocksize 1024 failed [ 223.948418][ T6846] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 224.026937][ T6846] UDF-fs: Scanning with blocksize 2048 failed [ 224.053116][ T6846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.077996][ T4781] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 224.243836][ T6835] loop5: detected capacity change from 0 to 32768 [ 224.744227][ T6835] XFS (loop5): Mounting V5 Filesystem [ 225.140531][ T6835] XFS (loop5): log mount failed [ 225.348405][ T4781] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.398181][ T4781] usb 4-1: not running at top speed; connect to a high speed hub [ 225.447109][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 225.495679][ T4781] usb 4-1: config 249 has an invalid interface number: 203 but max is 0 [ 225.515753][ T4781] usb 4-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 225.545860][ T4781] usb 4-1: config 249 has no interface number 0 [ 225.568013][ T13] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 225.583609][ T4781] usb 4-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.611313][ T4781] usb 4-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.652197][ T4781] usb 4-1: config 249 interface 203 has no altsetting 0 [ 225.818095][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 225.829005][ T4781] usb 4-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 225.861304][ T4781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.890763][ T4781] usb 4-1: Product: syz [ 225.894990][ T4781] usb 4-1: Manufacturer: syz [ 225.931290][ T4781] usb 4-1: SerialNumber: syz [ 225.968154][ T13] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 225.977448][ T13] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.008076][ T4781] usb 4-1: can't set config #249, error -71 [ 226.038239][ T4781] usb 4-1: USB disconnect, device number 19 [ 226.063740][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.095248][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.117955][ T13] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.157976][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 226.167991][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.935301][ T13] usb 1-1: usb_control_msg returned -32 [ 226.941148][ T13] usbtmc 1-1:16.0: can't read capabilities [ 226.974050][ T6914] trusted_key: encrypted_key: insufficient parameters specified [ 227.355874][ T6920] loop2: detected capacity change from 0 to 7 [ 227.363162][ T4649] usb 1-1: USB disconnect, device number 12 [ 227.378055][ T6915] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -71 [ 227.388015][ T4781] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 227.435210][ T6920] Dev loop2: unable to read RDB block 7 [ 227.462207][ T6920] loop2: unable to read partition table [ 227.488074][ T6920] loop2: partition table beyond EOD, truncated [ 227.532882][ T6920] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 227.647983][ T4781] usb 4-1: Using ep0 maxpacket: 8 [ 227.683738][ T6929] loop2: detected capacity change from 0 to 512 [ 227.768252][ T4781] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 227.776532][ T4781] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.800041][ T6934] loop5: detected capacity change from 0 to 128 [ 227.832775][ T6929] EXT4-fs (loop2): 1 truncate cleaned up [ 227.847918][ T6929] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 227.891162][ T4781] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.920429][ T6934] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 228.001398][ T4781] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.024810][ T6934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.068075][ T4781] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.137998][ T4781] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 228.147099][ T4781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.187264][ T6940] loop0: detected capacity change from 0 to 4096 [ 228.330485][ T6940] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 228.481318][ T6948] loop5: detected capacity change from 0 to 64 [ 228.508090][ T4781] usb 4-1: usb_control_msg returned -32 [ 228.515554][ T4781] usbtmc 4-1:16.0: can't read capabilities [ 229.043143][ T6960] loop0: detected capacity change from 0 to 512 [ 229.104477][ T4776] usb 4-1: USB disconnect, device number 20 [ 229.110891][ T6903] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -71 [ 229.139625][ T4650] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 229.430956][ T6967] Illegal XDP return value 4294967274, expect packet loss! [ 229.453297][ T6970] loop0: detected capacity change from 0 to 512 [ 229.466616][ T6943] loop4: detected capacity change from 0 to 32768 [ 229.496555][ T6970] EXT4-fs (loop0): Test dummy encryption mode enabled [ 229.518603][ T6970] EXT4-fs (loop0): Test dummy encryption mode enabled [ 229.558175][ T4650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 229.609177][ T6970] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,noauto_da_alloc,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000000004,resuid=0x00. Quota mode: writeback. [ 229.660765][ T4650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 229.719338][ T6943] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 229.719338][ T6943] [ 229.749682][ T4650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 229.791509][ T6943] ERROR: (device loop4): remounting filesystem as read-only [ 229.810078][ T6943] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 229.810078][ T6943] [ 229.822004][ T4650] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 229.863464][ T6943] xtLookup: xtSearch returned -5 [ 229.877689][ T6943] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 229.877689][ T6943] [ 229.978247][ T13] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 229.997161][ T6983] loop0: detected capacity change from 0 to 1024 [ 230.038203][ T4650] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 230.062573][ T6983] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 230.096923][ T4650] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.125165][ T4650] usb 6-1: Product: syz [ 230.136857][ T4650] usb 6-1: Manufacturer: syz [ 230.182760][ T4650] usb 6-1: SerialNumber: syz [ 230.218794][ T4650] usb 6-1: config 0 descriptor?? [ 230.366553][ T6983] hfsplus: filesystem is marked journaled, leaving read-only. [ 230.375263][ T6994] loop2: detected capacity change from 0 to 128 [ 230.375291][ T13] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 230.420778][ T13] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 230.458016][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 230.498563][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 230.520399][ T4650] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 230.537581][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 230.589843][ T6996] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.619059][ T6996] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 230.686480][ T13] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 230.736030][ T13] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 230.745161][ T4650] usb 6-1: USB disconnect, device number 3 [ 230.799429][ T13] usb 4-1: Product: syz [ 230.807149][ T13] usb 4-1: Manufacturer: syz [ 230.919101][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 230.925095][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 230.952877][ T6958] adutux: No device or device unplugged -19 [ 230.961938][ T13] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 230.985705][ T13] cdc_wdm 4-1:1.0: Unknown control protocol [ 231.050812][ T7009] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.791: invalid indirect mapped block 4294967295 (level 1) [ 231.197479][ T7009] EXT4-fs (loop2): Remounting filesystem read-only [ 231.225249][ T7009] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.791: invalid indirect mapped block 4294967295 (level 1) [ 231.322816][ T7009] EXT4-fs (loop2): Remounting filesystem read-only [ 231.363324][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 231.398954][ T7009] EXT4-fs (loop2): 2 truncates cleaned up [ 231.406914][ T7009] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,mb_optimize_scan=0x0000000000000001,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 232.032155][ T7049] EXT4-fs (loop2): Test dummy encryption mode enabled [ 232.049911][ T7049] EXT4-fs (loop2): Test dummy encryption mode enabled [ 232.087125][ T7049] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,noauto_da_alloc,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000000004,resuid=0x00. Quota mode: writeback. [ 232.116321][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.133130][ T13] usb 4-1: USB disconnect, device number 21 [ 232.338014][ T4649] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 232.390268][ T7053] EXT4-fs (loop0): Ignoring removed bh option [ 232.412785][ T7053] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 232.434379][ T7053] EXT4-fs (loop0): 1 truncate cleaned up [ 232.468451][ T7053] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 232.522454][ T7053] [ 232.524842][ T7053] ====================================================== [ 232.531971][ T7053] WARNING: possible circular locking dependency detected [ 232.539211][ T7053] syzkaller #0 Not tainted [ 232.543641][ T7053] ------------------------------------------------------ [ 232.550810][ T7053] syz.0.797/7053 is trying to acquire lock: [ 232.556805][ T7053] ffff888060296478 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 232.566578][ T7053] [ 232.566578][ T7053] but task is already holding lock: [ 232.573970][ T7053] ffff88807e6c0c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 232.584105][ T7053] [ 232.584105][ T7053] which lock already depends on the new lock. [ 232.584105][ T7053] [ 232.594527][ T7053] [ 232.594527][ T7053] the existing dependency chain (in reverse order) is: [ 232.603559][ T7053] [ 232.603559][ T7053] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 232.612018][ T7053] percpu_down_read+0x46/0x1b0 [ 232.617337][ T7053] ext4_writepages+0x20f/0x2df0 [ 232.622992][ T7053] do_writepages+0x476/0x6e0 [ 232.628374][ T7053] __writeback_single_inode+0x153/0xda0 [ 232.634643][ T7053] writeback_single_inode+0x3cb/0x8e0 [ 232.640560][ T7053] write_inode_now+0x23b/0x2c0 [ 232.645865][ T7053] iput+0x5ab/0x8a0 [ 232.650225][ T7053] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 232.656493][ T7053] ext4_xattr_block_set+0x979/0x2d20 [ 232.662321][ T7053] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 232.668669][ T7053] __ext4_expand_extra_isize+0x301/0x3e0 [ 232.674869][ T7053] __ext4_mark_inode_dirty+0x469/0x700 [ 232.680868][ T7053] ext4_evict_inode+0xa8d/0x1090 [ 232.686351][ T7053] evict+0x4c9/0x8d0 [ 232.690794][ T7053] ext4_orphan_cleanup+0xad2/0x1320 [ 232.696537][ T7053] ext4_fill_super+0x8d6e/0x94f0 [ 232.702029][ T7053] mount_bdev+0x287/0x3c0 [ 232.706909][ T7053] legacy_get_tree+0xe6/0x180 [ 232.712131][ T7053] vfs_get_tree+0x88/0x270 [ 232.717089][ T7053] do_new_mount+0x24a/0xa40 [ 232.722139][ T7053] __se_sys_mount+0x2e3/0x3d0 [ 232.727373][ T7053] do_syscall_64+0x4c/0xa0 [ 232.732467][ T7053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.739102][ T7053] [ 232.739102][ T7053] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 232.746692][ T7053] __lock_acquire+0x2c42/0x7d10 [ 232.752089][ T7053] lock_acquire+0x19e/0x400 [ 232.757137][ T7053] down_write+0x38/0x60 [ 232.761834][ T7053] ext4_destroy_inline_data+0x24/0xe0 [ 232.767749][ T7053] ext4_writepages+0x670/0x2df0 [ 232.773154][ T7053] do_writepages+0x476/0x6e0 [ 232.778290][ T7053] filemap_fdatawrite_wbc+0x1eb/0x240 [ 232.784206][ T7053] file_write_and_wait_range+0x14d/0x220 [ 232.790395][ T7053] ext4_sync_file+0x1ff/0xae0 [ 232.795622][ T7053] ext4_buffered_write_iter+0x338/0x3b0 [ 232.801816][ T7053] ext4_file_write_iter+0x74d/0x1700 [ 232.807735][ T7053] vfs_write+0x745/0xd60 [ 232.812519][ T7053] __x64_sys_pwrite64+0x19a/0x220 [ 232.818276][ T7053] do_syscall_64+0x4c/0xa0 [ 232.823242][ T7053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.829949][ T7053] [ 232.829949][ T7053] other info that might help us debug this: [ 232.829949][ T7053] [ 232.840190][ T7053] Possible unsafe locking scenario: [ 232.840190][ T7053] [ 232.847665][ T7053] CPU0 CPU1 [ 232.853053][ T7053] ---- ---- [ 232.858432][ T7053] lock(&sbi->s_writepages_rwsem); [ 232.863649][ T7053] lock(&ei->xattr_sem); [ 232.870515][ T7053] lock(&sbi->s_writepages_rwsem); [ 232.878441][ T7053] lock(&ei->xattr_sem); [ 232.882880][ T7053] [ 232.882880][ T7053] *** DEADLOCK *** [ 232.882880][ T7053] [ 232.891038][ T7053] 2 locks held by syz.0.797/7053: [ 232.896174][ T7053] #0: ffff88802308e460 (sb_writers#5){++++}-{0:0}, at: vfs_write+0x295/0xd60 [ 232.905298][ T7053] #1: ffff88807e6c0c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 232.915963][ T7053] [ 232.915963][ T7053] stack backtrace: [ 232.921875][ T7053] CPU: 1 PID: 7053 Comm: syz.0.797 Not tainted syzkaller #0 [ 232.929274][ T7053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.939349][ T7053] Call Trace: [ 232.942651][ T7053] [ 232.945594][ T7053] dump_stack_lvl+0x188/0x250 [ 232.950300][ T7053] ? load_image+0x400/0x400 [ 232.954821][ T7053] ? show_regs_print_info+0x20/0x20 [ 232.960045][ T7053] ? print_circular_bug+0x12b/0x1a0 [ 232.965275][ T7053] check_noncircular+0x296/0x330 [ 232.970236][ T7053] ? add_chain_block+0x940/0x940 [ 232.975433][ T7053] ? lockdep_lock+0xf1/0x1f0 [ 232.980075][ T7053] ? mark_lock+0x94/0x320 [ 232.984432][ T7053] ? _find_first_zero_bit+0xce/0xf0 [ 232.989668][ T7053] __lock_acquire+0x2c42/0x7d10 [ 232.994592][ T7053] ? verify_lock_unused+0x140/0x140 [ 232.999812][ T7053] ? mark_lock+0x94/0x320 [ 233.004169][ T7053] ? verify_lock_unused+0x140/0x140 [ 233.009392][ T7053] ? __lock_acquire+0x12e8/0x7d10 [ 233.014625][ T7053] ? verify_lock_unused+0x140/0x140 [ 233.019950][ T7053] lock_acquire+0x19e/0x400 [ 233.024486][ T7053] ? ext4_destroy_inline_data+0x24/0xe0 [ 233.030079][ T7053] ? read_lock_is_recursive+0x10/0x10 [ 233.035484][ T7053] ? rcu_read_lock_any_held+0xb0/0x130 [ 233.040973][ T7053] ? ext4_journal_check_start+0x180/0x250 [ 233.046719][ T7053] down_write+0x38/0x60 [ 233.050902][ T7053] ? ext4_destroy_inline_data+0x24/0xe0 [ 233.056477][ T7053] ext4_destroy_inline_data+0x24/0xe0 [ 233.061880][ T7053] ext4_writepages+0x670/0x2df0 [ 233.066764][ T7053] ? verify_lock_unused+0x140/0x140 [ 233.071994][ T7053] ? mark_lock+0x94/0x320 [ 233.076358][ T7053] ? __might_sleep+0xf0/0xf0 [ 233.080977][ T7053] ? ext4_readpage+0x2e0/0x2e0 [ 233.085778][ T7053] ? __lock_acquire+0x7d10/0x7d10 [ 233.090838][ T7053] ? do_raw_spin_lock+0x128/0x2f0 [ 233.095894][ T7053] ? do_raw_spin_unlock+0x11d/0x230 [ 233.101270][ T7053] ? ext4_readpage+0x2e0/0x2e0 [ 233.106065][ T7053] do_writepages+0x476/0x6e0 [ 233.110677][ T7053] ? filemap_fdatawrite_wbc+0x1e0/0x240 [ 233.116242][ T7053] ? __writepage+0x130/0x130 [ 233.120851][ T7053] ? __lock_acquire+0x7d10/0x7d10 [ 233.125900][ T7053] ? __rwlock_init+0x140/0x140 [ 233.130685][ T7053] ? generic_write_end+0x24d/0x3d0 [ 233.135804][ T7053] ? do_raw_spin_unlock+0x11d/0x230 [ 233.141030][ T7053] filemap_fdatawrite_wbc+0x1eb/0x240 [ 233.146434][ T7053] file_write_and_wait_range+0x14d/0x220 [ 233.152088][ T7053] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 233.157478][ T7053] ext4_sync_file+0x1ff/0xae0 [ 233.162202][ T7053] ext4_buffered_write_iter+0x338/0x3b0 [ 233.167883][ T7053] ext4_file_write_iter+0x74d/0x1700 [ 233.173212][ T7053] ? rcu_read_lock_any_held+0xb0/0x130 [ 233.178676][ T7053] ? ext4_file_read_iter+0x700/0x700 [ 233.184058][ T7053] ? end_current_label_crit_section+0x14b/0x170 [ 233.190306][ T7053] ? memset+0x1e/0x40 [ 233.194291][ T7053] ? iov_iter_init+0xb4/0x170 [ 233.198979][ T7053] vfs_write+0x745/0xd60 [ 233.203313][ T7053] ? file_end_write+0x250/0x250 [ 233.208163][ T7053] ? __fget_files+0x40f/0x480 [ 233.212860][ T7053] ? __fdget+0x18b/0x210 [ 233.217106][ T7053] ? __x64_sys_pwrite64+0xf2/0x220 [ 233.222224][ T7053] __x64_sys_pwrite64+0x19a/0x220 [ 233.227252][ T7053] ? ksys_pwrite64+0x1c0/0x1c0 [ 233.232018][ T7053] ? lockdep_hardirqs_on+0x94/0x140 [ 233.237317][ T7053] do_syscall_64+0x4c/0xa0 [ 233.241731][ T7053] ? clear_bhb_loop+0x30/0x80 [ 233.246411][ T7053] ? clear_bhb_loop+0x30/0x80 [ 233.251085][ T7053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.256984][ T7053] RIP: 0033:0x7f3280261dd9 [ 233.261489][ T7053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.281103][ T7053] RSP: 002b:00007f327e4bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 233.289522][ T7053] RAX: ffffffffffffffda RBX: 00007f32804dafa0 RCX: 00007f3280261dd9 [ 233.297502][ T7053] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 233.305511][ T7053] RBP: 00007f32802f7d69 R08: 0000000000000000 R09: 0000000000000000 [ 233.313484][ T7053] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 233.321470][ T7053] R13: 00007f32804db038 R14: 00007f32804dafa0 R15: 00007ffe11465c08 [ 233.329452][ T7053] [ 233.342731][ T7053] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.797: bg 0: block 465: padding at end of block bitmap is not set [ 233.366991][ T7053] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 233.381244][ T7053] EXT4-fs (loop0): This should not happen!! Data will be lost [ 233.381244][ T7053] [ 233.391385][ T7053] EXT4-fs (loop0): Total free blocks count 0 [ 233.397453][ T7053] EXT4-fs (loop0): Free/Dirty block details [ 233.397900][ T4649] usb 6-1: Using ep0 maxpacket: 8 [ 233.404994][ T7053] EXT4-fs (loop0): free_blocks=0 [ 233.453334][ T7060] set_capacity_and_notify: 4 callbacks suppressed [ 233.453351][ T7060] loop3: detected capacity change from 0 to 32768 [ 233.458078][ T7053] EXT4-fs (loop0): dirty_blocks=66 [ 233.482915][ T7053] EXT4-fs (loop0): Block reservation details [ 233.489710][ T4550] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 233.498791][ T7053] EXT4-fs (loop0): i_reserved_data_blocks=66 [ 233.506191][ T7060] XFS (loop3): Mounting V5 Filesystem [ 233.512619][ T7063] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 233.525974][ T7063] EXT4-fs (loop0): This should not happen!! Data will be lost [ 233.525974][ T7063] [ 233.540767][ T7060] XFS (loop3): Ending clean mount [ 233.548114][ T4649] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 233.560811][ T4649] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.575768][ T4649] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.585794][ T4649] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.595952][ T4649] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.609306][ T4649] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.609747][ T4197] XFS (loop3): Unmounting Filesystem [ 233.618466][ T4649] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.768062][ T4545] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 233.888051][ T4649] usb 6-1: usb_control_msg returned -32 [ 233.893662][ T4649] usbtmc 6-1:16.0: can't read capabilities [ 233.899771][ T4550] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.909853][ T4550] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.923968][ T4550] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 233.937623][ T4550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.028036][ T4545] usb 5-1: Using ep0 maxpacket: 8 [ 234.148081][ T4545] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 234.156509][ T4545] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.166429][ T4545] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.176292][ T4545] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.186337][ T4545] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.199893][ T4550] usb 3-1: usb_control_msg returned -32 [ 234.205517][ T4550] usbtmc 3-1:16.0: can't read capabilities [ 234.211434][ T4545] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 234.220918][ T4545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.498017][ T4545] usb 5-1: usb_control_msg returned -32 [ 234.503706][ T4545] usbtmc 5-1:16.0: can't read capabilities [ 235.682140][ T4545] usb 6-1: USB disconnect, device number 4 [ 235.698002][ T7074] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -71 [ 235.728487][ T4649] usb 3-1: USB disconnect, device number 17 [ 236.724563][ T4550] usb 5-1: USB disconnect, device number 14