last executing test programs: 7.65145528s ago: executing program 0 (id=796): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 7.517101885s ago: executing program 0 (id=798): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.808541603s ago: executing program 2 (id=813): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x894b, &(0x7f00000000c0)) 5.697829952s ago: executing program 2 (id=815): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x1, 0x5, 0x0) close(r0) epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000300), 0xd, 0x5f1, &(0x7f0000001200)="$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") r3 = dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x5f, 0x20000000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid}], [], 0x6b}}) stat(&(0x7f0000002d80)='./file0\x00', 0x0) 4.191744927s ago: executing program 0 (id=818): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/28, 0x1c}], 0x1}, 0x2000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x9, 0xb, 0x8, 0x40, 0x42, 0x1, 0x40000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 3.813944848s ago: executing program 0 (id=823): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4a24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) 3.66206925s ago: executing program 3 (id=824): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000340)='./file0\x00', 0x3000010, &(0x7f0000000180)=ANY=[@ANYBLOB='unhide,noadinicb,iocharset=iso8859-2,umask=S0000000000000000000075,unhide,gid=forget,shortad,longad,adinicb,\x00'], 0x1, 0xc5f, &(0x7f0000000f40)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.642683546s ago: executing program 0 (id=825): timer_create(0x3, 0x0, &(0x7f0000044000)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x2, 0x7) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mlock(&(0x7f0000231000/0x2000)=nil, 0x2000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 3.572789414s ago: executing program 1 (id=826): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 2.538094755s ago: executing program 0 (id=827): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001adb1348f7b971f78"], 0x0, 0x0}) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f00000001c0)='\x00'}, {0x2, 0x4000, 0x0, 0x0}], 0x2}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.442183717s ago: executing program 1 (id=828): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 2.441922607s ago: executing program 3 (id=829): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond0\x00', 0x100}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 2.370963834s ago: executing program 1 (id=830): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x10040) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0xfffffffffffffed9, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.119462828s ago: executing program 3 (id=831): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000190000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) 2.01990151s ago: executing program 2 (id=832): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000001600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1.318055521s ago: executing program 3 (id=833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2ecf42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.317840581s ago: executing program 2 (id=834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c6000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) 1.278748354s ago: executing program 1 (id=835): timer_create(0x3, 0x0, &(0x7f0000044000)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x2, 0x7) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mlock(&(0x7f0000231000/0x2000)=nil, 0x2000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 1.156171081s ago: executing program 2 (id=836): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 466.282545ms ago: executing program 3 (id=837): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000000500000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x8, 0x10000, 0x3, 0x1, 0xffffffffffffffff, 0x2000000}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r0}, 0xc) 222.174391ms ago: executing program 1 (id=838): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 175.406202ms ago: executing program 2 (id=839): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) socket$rds(0x15, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 66.306202ms ago: executing program 3 (id=840): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x1, 0x5, 0x0) close(r0) epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000300), 0xd, 0x5f1, &(0x7f0000001200)="$eJzs3c9vVFUbAOD3zrSlpfC1kC/fJy6kiTGQKC0tYIhxAVtDGvwRN26stCBSoKE1WjShJLgxMW6MMXHlQvwvlMiWla5MdOPKkBA1LE0cc2fuLZ32TktLO7cyz5MMc+89c3veYfr2nDlzzp0AOtZQ+k8lYl9EzCQRA8nCYllXZIVDjcfd//PDM+ktiVrt1d+TSLJj+eOT7L4/O7k3In74Pom91ZX1zs5fvTAxPT11Jdsfmbs4MzI7f/XQ+YsT56bOTV0ae37s+LGjx46PHt7Q87pWcOzUjXfeG/h4/I2vv/wrGf3ml/EkTsRL2QOXPo/NMhRD9f+TZGVR//HNrqwk1ez3ZOlLnHSVGBDrkr9+3RHx/xiIajx48Qbio5dLDQ7YUrUkogZ0qET+Q4fK+wH5e/vl74MrpfRKgHa4d7IxALAy/7saY4PRWx8b2Hk/iaXDOklEbGxkrtmuiLhze/zG2dvjN2KLxuGAYgvXI+KJovxP6vk/GL0xWM//SlP+p/2C09l9evyVDda/fKhY/kP7NPK/d9X8jxb5/2Z6v7ux/9YG6x96sPl2X1P+923wJwIAAAAAAEDnunUyIp4r+vy/sjj/Jwrm//RHxIlNqH9o2f7Kz/8rdzehGqDAvZMRLxbO/63ks38Hq9nW7vp8gO7k7PnpqcMR8Z+IOBjdO9L90VXqOPTJ3i9alQ1l8//yW1r/nWwuYBbH3a4dzedMTsxNPOrzBiLuXY94snD+b7LY/icF7X/692DmIevY+8zN063K1s5/YKvUvoo4UNj+P7hqRbL69TlG6v2BkbxXkFmycOipDz79tlX9G81/l5iAR5e2/ztXz//BZOn1embXX8eR+a5aq7KN9v97ktfql5zpyY69PzE3d2U0oic5VU2PNh0fW3/M8DjK8yHPlzT/Dz69+vhfUf+/LyIWlv3s5I/mNcW5//3d/2urePT/oTxp/k+uq/1f/8bYzcHvWtX/cO3/0XpbfzA7YvwPGj7P07Sn+XhBOnYVFbU7XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4HFQiYlckleHF7UpleDiiPyL+Gzsr05dn5549e/ndS5NpWf37/yv5N/0ONPaT/Pv/B5fsjy3bPxIReyLis2pffX/4zOXpybKfPAAAAAAAAAAAAAAAAAAAAGwT/S3W/6d+q5YdHbDlusoOAChNQf7/WEYcQPtp/6FzyX/oXPIfOldx/v/c9jiA9tP+Q+eS/9C55D90LvkPAAAAAACPlT37b/2URMTCC331W6onK+suNTJgq1XKDgAoTeMSP7WywwBKYOoPdC7v8YFkjfLelietdeZqZs48wskAAAAAAAAAAAAA0HEO7LP+HzrVquv/T7cvDqD9qmUHAJQmX/+/v+Q4gPbzHh+INVbyF67/X/MsAAAAAAAAAAAAAGAzzc5fvTAxPT11xcbr2yOMdm7UarVr6W/BdonnX76RT4XfLvEs28jX+j3cWeX9TQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJr9EwAA//+Fxyb7") r3 = dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x5f, 0x20000000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid}], [], 0x6b}}) stat(&(0x7f0000002d80)='./file0\x00', 0x0) 0s ago: executing program 1 (id=841): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) kernel console output (not intermixed with test programs): h: hci0: invalid length 0, exp 2 for type 25 [ 121.601951][ T2131] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.805381][ T2131] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 121.815630][ T2131] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 121.861885][ T2131] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 121.873190][ T2131] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.894845][ T2131] usb 1-1: Product: syz [ 121.900235][ T2131] usb 1-1: Manufacturer: syz [ 121.905896][ T2131] usb 1-1: SerialNumber: syz [ 121.937741][ T2131] usb 1-1: config 0 descriptor?? [ 121.971017][ T2131] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 122.233145][ T6295] loop3: detected capacity change from 0 to 16 [ 122.259454][ T6295] erofs: (device loop3): mounted with root inode @ nid 36. [ 122.284858][ T6295] syz.3.121: attempt to access beyond end of device [ 122.284858][ T6295] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 122.310517][ T6295] syz.3.121: attempt to access beyond end of device [ 122.310517][ T6295] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 122.327183][ T6295] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 122.360312][ T6295] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 122.372590][ T6295] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 122.464235][ T28] audit: type=1800 audit(1773234590.948:7): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.121" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 123.270963][ T2131] gspca_sunplus: reg_r err -71 [ 123.276341][ T2131] sunplus: probe of 1-1:0.0 failed with error -71 [ 123.285648][ T2131] usb 1-1: USB disconnect, device number 2 [ 125.252135][ T5779] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 125.261239][ T5779] Bluetooth: hci0: Injecting HCI hardware error event [ 125.272271][ T5785] Bluetooth: hci0: hardware error 0x00 [ 125.714196][ T6330] loop0: detected capacity change from 0 to 16 [ 126.822124][ T6330] erofs: (device loop0): mounted with root inode @ nid 36. [ 126.838949][ T6328] syz.0.131: attempt to access beyond end of device [ 126.838949][ T6328] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 126.873566][ T6328] syz.0.131: attempt to access beyond end of device [ 126.873566][ T6328] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 126.889292][ T6328] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 126.921941][ T28] audit: type=1800 audit(1773234595.518:8): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.131" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 127.461916][ T5785] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 130.139727][ T6368] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 131.506790][ T6360] loop1: detected capacity change from 0 to 40427 [ 131.677682][ T6360] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 131.759347][ T6360] F2FS-fs (loop1): invalid crc value [ 132.203095][ T6360] F2FS-fs (loop1): Found nat_bits in checkpoint [ 132.226571][ T6380] loop3: detected capacity change from 0 to 2048 [ 132.318360][ T6380] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 132.388923][ T6380] NILFS (loop3): mounting unchecked fs [ 132.422049][ T6380] NILFS (loop3): recovery required for readonly filesystem [ 132.430009][ T6380] NILFS (loop3): write access will be enabled during recovery [ 132.456617][ T5784] udevd[5784]: incorrect nilfs2 checksum on /dev/loop3 [ 132.470370][ T6380] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 132.577065][ T5784] udevd[5784]: incorrect nilfs2 checksum on /dev/loop3 [ 133.205183][ T6394] loop0: detected capacity change from 0 to 512 [ 133.439487][ T6394] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.153: invalid block [ 133.477302][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.484594][ T6394] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.153: invalid indirect mapped block 4294967295 (level 1) [ 133.505916][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.559096][ T6394] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.153: invalid indirect mapped block 4294967295 (level 1) [ 133.633448][ T6394] EXT4-fs (loop0): 2 truncates cleaned up [ 133.641123][ T6394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.722097][ T5785] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 133.730978][ T5785] Bluetooth: hci1: Injecting HCI hardware error event [ 133.742126][ T5785] Bluetooth: hci1: hardware error 0x00 [ 134.981015][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.893236][ T5785] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 139.824712][ T6447] loop0: detected capacity change from 0 to 16 [ 139.912086][ T6447] erofs: (device loop0): mounted with root inode @ nid 36. [ 139.934189][ T6447] syz.0.166: attempt to access beyond end of device [ 139.934189][ T6447] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 139.960078][ T6447] syz.0.166: attempt to access beyond end of device [ 139.960078][ T6447] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 139.975659][ T6447] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 139.999018][ T6447] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 140.011248][ T6447] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 140.103609][ T28] audit: type=1800 audit(1773234608.598:9): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.166" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 141.000702][ T6443] loop2: detected capacity change from 0 to 32768 [ 141.145818][ T6443] [ 141.145818][ T6443] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.145818][ T6443] [ 141.444549][ T6443] read_mapping_page failed! [ 141.457946][ T6443] ERROR: (device loop2): txCommit: [ 141.457946][ T6443] [ 141.742817][ T6457] read_mapping_page failed! [ 141.747928][ T6457] ERROR: (device loop2): txCommit: [ 141.747928][ T6457] [ 141.921723][ T5780] [ 141.921723][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.921723][ T5780] [ 141.965393][ T5780] [ 141.965393][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.965393][ T5780] [ 141.985850][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 142.000605][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 142.250091][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c645000: rx timeout, send abort [ 142.750262][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c644c00: rx timeout, send abort [ 142.760523][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c645000: abort rx timeout. Force session deactivation [ 144.097278][ T6476] loop1: detected capacity change from 0 to 2048 [ 144.143015][ T6476] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 144.189849][ T6476] NILFS (loop1): mounting unchecked fs [ 144.223218][ T5784] udevd[5784]: incorrect nilfs2 checksum on /dev/loop1 [ 144.759675][ T6476] NILFS (loop1): recovery complete [ 144.806676][ T6481] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.196236][ T6485] loop2: detected capacity change from 0 to 1024 [ 145.294364][ T6485] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.179: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 145.308395][ T6474] loop3: detected capacity change from 0 to 32768 [ 145.335526][ T6474] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.175 (6474) [ 145.360000][ T6485] EXT4-fs error (device loop2): ext4_quota_enable:7143: comm syz.2.179: Bad quota inode: 4, type: 1 [ 145.375369][ T6485] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.384050][ T6489] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 4294967272. macoff=96 [ 145.393795][ T6485] EXT4-fs (loop2): mount failed [ 145.468008][ T6474] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 145.509237][ T6474] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 145.559990][ T6474] BTRFS info (device loop3): using free space tree [ 146.134787][ T6509] loop2: detected capacity change from 0 to 1024 [ 146.145734][ T6509] EXT4-fs: Ignoring removed i_version option [ 146.414424][ T6509] EXT4-fs: Mount option(s) incompatible with ext2 [ 147.070773][ T6515] tipc: Failed to remove unknown binding: 66,1,1/0:2296445527/2296445529 [ 147.073063][ T6474] BTRFS error (device loop3): open_ctree failed: -4 [ 147.096598][ T6515] tipc: Failed to remove unknown binding: 66,1,1/0:2296445527/2296445529 [ 147.356555][ T5787] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (5787) [ 147.402591][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 147.466007][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 147.630803][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.103047][ T6539] loop0: detected capacity change from 0 to 2048 [ 149.143689][ T6539] UDF-fs: bad mount option "umask=S0000000000000000000075" or missing value [ 149.198362][ T6544] tipc: Failed to remove unknown binding: 66,1,1/0:3927434531/3927434533 [ 149.207696][ T6544] tipc: Failed to remove unknown binding: 66,1,1/0:3927434531/3927434533 [ 149.277793][ T5784] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 150.368738][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 150.380599][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 150.825070][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 151.061840][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 151.079721][ T27] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 151.108593][ T27] usb 4-1: config 0 has no interface number 0 [ 151.126696][ T27] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 151.153887][ T27] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 151.182356][ T27] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.210874][ T27] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 151.227148][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.240274][ T27] usb 4-1: config 0 descriptor?? [ 151.250318][ T27] ldusb 4-1:0.55: Interrupt in endpoint not found [ 151.275119][ T6576] tipc: Failed to remove unknown binding: 66,1,1/0:1966202938/1966202940 [ 151.286933][ T6576] tipc: Failed to remove unknown binding: 66,1,1/0:1966202938/1966202940 [ 151.844018][ T6557] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 151.920818][ T6583] loop0: detected capacity change from 0 to 2048 [ 151.998130][ T6583] UDF-fs: bad mount option "umask=S0000000000000000000075" or missing value [ 152.133252][ T27] usb 4-1: USB disconnect, device number 2 [ 152.612128][ T6592] loop1: detected capacity change from 0 to 40427 [ 152.638113][ T6592] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 152.647732][ T6592] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 152.668570][ T6592] F2FS-fs (loop1): invalid crc value [ 152.682156][ T6592] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.744986][ T6592] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 152.754037][ T6592] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.984324][ T6607] loop2: detected capacity change from 0 to 2048 [ 154.066412][ T6607] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 154.091872][ T6607] NILFS (loop2): mounting unchecked fs [ 154.099637][ T6607] NILFS (loop2): recovery required for readonly filesystem [ 154.109652][ T6607] NILFS (loop2): write access will be enabled during recovery [ 154.172522][ T6607] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 154.262424][ T5784] udevd[5784]: incorrect nilfs2 checksum on /dev/loop2 [ 154.384645][ T5784] udevd[5784]: incorrect nilfs2 checksum on /dev/loop2 [ 154.496315][ T6615] loop0: detected capacity change from 0 to 2048 [ 154.519293][ T6615] UDF-fs: bad mount option "umask=S0000000000000000000075" or missing value [ 155.680873][ T6636] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 161.328575][ T6674] loop1: detected capacity change from 0 to 40427 [ 161.381160][ T6674] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 161.432046][ T6674] F2FS-fs (loop1): invalid crc value [ 161.460024][ T6674] F2FS-fs (loop1): Found nat_bits in checkpoint [ 161.643805][ T6674] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 161.763384][ T787] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 161.778926][ T5775] syz-executor: attempt to access beyond end of device [ 161.778926][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.804504][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 161.961728][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 161.977698][ T787] usb 3-1: unable to get BOS descriptor or descriptor too short [ 161.987645][ T787] usb 3-1: config 113 has an invalid interface number: 180 but max is 0 [ 162.000441][ T787] usb 3-1: config 113 has no interface number 0 [ 162.009953][ T787] usb 3-1: config 113 interface 180 altsetting 127 endpoint 0xD has an invalid bInterval 161, changing to 11 [ 162.041870][ T787] usb 3-1: config 113 interface 180 altsetting 127 has an invalid endpoint with address 0x0, skipping [ 162.062101][ T787] usb 3-1: config 113 interface 180 altsetting 127 endpoint 0x9 has an invalid bInterval 129, changing to 11 [ 162.078087][ T787] usb 3-1: config 113 interface 180 altsetting 127 has a duplicate endpoint with address 0x4, skipping [ 162.100501][ T787] usb 3-1: config 113 interface 180 altsetting 127 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 162.131782][ T787] usb 3-1: config 113 interface 180 altsetting 127 has an invalid endpoint with address 0x80, skipping [ 162.149941][ T787] usb 3-1: config 113 interface 180 altsetting 127 has a duplicate endpoint with address 0x4, skipping [ 162.174209][ T787] usb 3-1: config 113 interface 180 altsetting 127 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 162.209169][ T787] usb 3-1: config 113 interface 180 has no altsetting 0 [ 162.236501][ T787] usb 3-1: New USB device found, idVendor=04bb, idProduct=0913, bcdDevice=cf.a3 [ 162.254511][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.272382][ T787] usb 3-1: Product: syz [ 162.281381][ T787] usb 3-1: Manufacturer: syz [ 162.293790][ T787] usb 3-1: SerialNumber: syz [ 162.314112][ T787] usb 3-1: Interface #180 referenced by multiple IADs [ 162.337114][ T6699] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.349427][ T6699] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.598126][ T787] pegasus 3-1:113.180: Missing or invalid endpoints [ 162.654000][ T787] usb 3-1: USB disconnect, device number 3 [ 164.824024][ T6737] loop0: detected capacity change from 0 to 16 [ 164.852270][ T6737] erofs: (device loop0): mounted with root inode @ nid 36. [ 164.872176][ T6737] syz.0.256: attempt to access beyond end of device [ 164.872176][ T6737] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 164.900628][ T6737] syz.0.256: attempt to access beyond end of device [ 164.900628][ T6737] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 164.919352][ T6737] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 164.949919][ T6737] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 164.962118][ T6737] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 165.002522][ T28] audit: type=1800 audit(1773234633.548:10): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.256" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 165.383844][ T5785] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 165.394526][ T5785] Bluetooth: hci3: Injecting HCI hardware error event [ 165.407057][ T5779] Bluetooth: hci3: hardware error 0x00 [ 167.155172][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 167.193314][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 167.542849][ T5779] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 170.602019][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 170.659008][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 174.011923][ T787] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 174.068994][ T6827] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 174.245796][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.268348][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.285209][ T787] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 174.305738][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.319632][ T787] usb 2-1: config 0 descriptor?? [ 175.405274][ T787] hid-led 0003:1D34:000A.0001: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 175.459982][ T787] hid-led 0003:1D34:000A.0001: Dream Cheeky Webmail Notifier initialized [ 176.249616][ T5832] usb 2-1: USB disconnect, device number 4 [ 177.517340][ T787] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 178.262008][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 178.667757][ T787] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 178.988134][ T787] usb 1-1: config 0 has no interface number 0 [ 179.004477][ T787] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.358434][ T787] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.444143][ T787] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 179.454867][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.479444][ T787] usb 1-1: config 0 descriptor?? [ 179.523654][ T787] usb 1-1: can't set config #0, error -71 [ 179.570498][ T787] usb 1-1: USB disconnect, device number 3 [ 179.682105][ T6889] loop0: detected capacity change from 0 to 4096 [ 179.742458][ T6889] ntfs3: loop0: ino=3, Correct links count -> 2. [ 181.411190][ T6912] loop0: detected capacity change from 0 to 16 [ 181.432400][ T6912] erofs: (device loop0): mounted with root inode @ nid 36. [ 181.454083][ T6912] syz.0.309: attempt to access beyond end of device [ 181.454083][ T6912] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 181.483114][ T6912] syz.0.309: attempt to access beyond end of device [ 181.483114][ T6912] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 181.499243][ T6912] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 181.522656][ T6912] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 181.534840][ T6912] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 181.586264][ T28] audit: type=1800 audit(1773234650.128:11): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.309" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 182.462069][ T5833] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 182.665006][ T5833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.688457][ T5833] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.718506][ T5833] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 182.746228][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.759630][ T5833] usb 2-1: Product: syz [ 182.765414][ T5833] usb 2-1: Manufacturer: syz [ 182.770274][ T5833] usb 2-1: SerialNumber: syz [ 182.781781][ T5832] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.783670][ T5833] usb 2-1: config 0 descriptor?? [ 183.618343][ T6932] loop0: detected capacity change from 0 to 4096 [ 183.646622][ T6932] ntfs3: loop0: ino=3, Correct links count -> 2. [ 183.681794][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 183.770788][ T5832] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 183.805084][ T5832] usb 3-1: config 0 has no interface number 0 [ 183.816157][ T5832] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.838304][ T5832] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.849738][ T5832] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 183.866204][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.964856][ T5832] usb 3-1: config 0 descriptor?? [ 184.408250][ T6922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.444249][ T6922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.464971][ T5762] usb 2-1: USB disconnect, device number 5 [ 185.493418][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 185.878549][ T6954] loop0: detected capacity change from 0 to 16 [ 185.904828][ T6954] erofs: (device loop0): mounted with root inode @ nid 36. [ 185.920262][ T6954] syz.0.321: attempt to access beyond end of device [ 185.920262][ T6954] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 186.036084][ T6954] syz.0.321: attempt to access beyond end of device [ 186.036084][ T6954] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 186.052850][ T6954] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 186.093092][ T28] audit: type=1800 audit(1773234654.678:12): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.321" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 186.139680][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.196781][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.274724][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.338458][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.400991][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.593441][ T5832] usbhid 3-1:0.4: can't add hid device: -71 [ 186.600463][ T5832] usbhid: probe of 3-1:0.4 failed with error -71 [ 186.740820][ T27] usb 4-1: config 0 descriptor?? [ 186.758896][ T5832] usb 3-1: USB disconnect, device number 4 [ 186.882525][ T6962] loop1: detected capacity change from 0 to 2048 [ 186.890816][ T6962] UDF-fs: bad mount option "umask=S0000000000000000000075" or missing value [ 187.656142][ T27] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 187.663936][ T27] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 187.676211][ T27] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 187.751498][ T27] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 187.759299][ T27] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 187.767223][ T27] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 187.774740][ T27] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 187.783757][ T27] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 187.871557][ T27] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 187.903720][ T6962] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.326'. [ 187.996692][ T27] usb 4-1: USB disconnect, device number 3 [ 188.106411][ T6970] loop2: detected capacity change from 0 to 4096 [ 188.133009][ T6970] ntfs3: loop2: ino=3, Correct links count -> 2. [ 188.154018][ T6973] fido_id[6973]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 189.631612][ T6995] loop2: detected capacity change from 0 to 16 [ 189.703471][ T6995] erofs: (device loop2): mounted with root inode @ nid 36. [ 189.876331][ T6995] syz.2.334: attempt to access beyond end of device [ 189.876331][ T6995] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 189.934458][ T6995] syz.2.334: attempt to access beyond end of device [ 189.934458][ T6995] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 189.950355][ T6995] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 189.972446][ T6995] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 189.987019][ T6995] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 190.028773][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 190.038506][ T28] audit: type=1800 audit(1773234658.578:13): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.334" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 190.701825][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 190.761981][ T23] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 190.770306][ T23] usb 2-1: config 0 has no interface number 0 [ 190.806454][ T23] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.909034][ T23] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.003812][ T23] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 191.173769][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.251360][ T7006] loop2: detected capacity change from 0 to 2048 [ 191.395588][ T7006] UDF-fs: bad mount option "umask=S0000000000000000000075" or missing value [ 191.408687][ T23] usb 2-1: config 0 descriptor?? [ 191.575309][ T7006] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.337'. [ 192.167334][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.206881][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.943934][ T7036] loop2: detected capacity change from 0 to 16 [ 193.965326][ T7036] erofs: (device loop2): mounted with root inode @ nid 36. [ 193.991224][ T7036] syz.2.346: attempt to access beyond end of device [ 193.991224][ T7036] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 194.015356][ T7036] syz.2.346: attempt to access beyond end of device [ 194.015356][ T7036] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 194.031296][ T7036] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 194.054916][ T7036] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 194.068751][ T7036] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 194.121219][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 194.141320][ T28] audit: type=1800 audit(1773234662.658:14): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.346" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 194.397656][ T27] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 194.487011][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 194.738429][ T27] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 194.771466][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.783621][ T27] usb 1-1: Product: syz [ 194.892638][ T27] usb 1-1: Manufacturer: syz [ 194.897989][ T27] usb 1-1: SerialNumber: syz [ 194.913337][ T23] usbhid 2-1:0.4: can't add hid device: -71 [ 194.919722][ T23] usbhid: probe of 2-1:0.4 failed with error -71 [ 194.928765][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.938808][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.951590][ T23] usb 2-1: USB disconnect, device number 6 [ 194.963279][ T27] usb 1-1: config 0 descriptor?? [ 194.972818][ T27] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 195.113013][ T7043] loop2: detected capacity change from 0 to 2048 [ 195.121483][ T7043] UDF-fs: bad mount option "umask=S0000000000000000000075" or missing value [ 195.161899][ T7045] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 196.313782][ T27] gspca_sunplus: reg_r err -71 [ 196.319563][ T27] sunplus: probe of 1-1:0.0 failed with error -71 [ 196.356806][ T27] usb 1-1: USB disconnect, device number 4 [ 197.403368][ T7061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.414679][ T7061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 197.464031][ T7067] fuse: Bad value for 'fd' [ 197.721796][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 198.161770][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 198.172279][ T27] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 198.180714][ T27] usb 4-1: config 0 has no interface number 0 [ 198.212990][ T27] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.318177][ T27] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.547023][ T27] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 198.671881][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 198.852591][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.937938][ T7077] loop2: detected capacity change from 0 to 2048 [ 198.938659][ T27] usb 4-1: config 0 descriptor?? [ 198.946097][ T7077] UDF-fs: bad mount option "umask=S0000000000000000000075" or missing value [ 199.030501][ T5787] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.442712][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.802453][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.761822][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 201.464633][ T27] usbhid 4-1:0.4: can't add hid device: -71 [ 201.472991][ T27] usbhid: probe of 4-1:0.4 failed with error -71 [ 201.504131][ T27] usb 4-1: USB disconnect, device number 4 [ 202.041983][ T7104] loop3: detected capacity change from 0 to 16 [ 202.061047][ T7104] erofs: (device loop3): mounted with root inode @ nid 36. [ 202.085499][ T7104] syz.3.368: attempt to access beyond end of device [ 202.085499][ T7104] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 202.116951][ T7104] syz.3.368: attempt to access beyond end of device [ 202.116951][ T7104] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 202.133404][ T7104] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 202.158053][ T7104] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 202.170364][ T7104] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 202.219235][ T28] audit: type=1800 audit(1773234670.758:15): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.368" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 203.122708][ T7111] loop1: detected capacity change from 0 to 2048 [ 203.141333][ T7111] UDF-fs: bad mount option "umask=S0000000000000000000075" or missing value [ 205.156580][ T7129] usb usb9: usbfs: process 7129 (syz.2.375) did not claim interface 0 before use [ 206.425420][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 206.521944][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 206.522064][ T2131] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.641883][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 206.650309][ T27] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 206.664399][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.677242][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.701555][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 206.716593][ T27] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 206.726659][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.741326][ T27] usb 2-1: config 0 descriptor?? [ 206.751299][ T8] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 206.752442][ T2131] usb 3-1: Using ep0 maxpacket: 16 [ 206.776447][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.785790][ T2131] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 206.797080][ T2131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.799370][ T8] usb 4-1: Product: syz [ 206.807265][ T2131] usb 3-1: Product: syz [ 206.817248][ T2131] usb 3-1: Manufacturer: syz [ 206.828552][ T2131] usb 3-1: SerialNumber: syz [ 206.830231][ T8] usb 4-1: Manufacturer: syz [ 206.879470][ T8] usb 4-1: SerialNumber: syz [ 206.901501][ T8] usb 4-1: config 0 descriptor?? [ 207.106497][ T2131] usb 3-1: Fast Track Pro switching to config #2 [ 207.150349][ T2131] usb 3-1: USB disconnect, device number 5 [ 207.175730][ T27] kye 0003:0458:5013.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 207.187912][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.198304][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.205843][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.213615][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.220381][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.227732][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.236246][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.244000][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.251045][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.259409][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.267210][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.275649][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.283541][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.290990][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.299999][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.307466][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.315408][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.326450][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.334849][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.343957][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.354298][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.363643][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.372699][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.376514][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.380330][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.380399][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.380423][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.411274][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.413451][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.429594][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.437470][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.444788][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.451690][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.458943][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.466410][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.474272][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.481960][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.489050][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.497428][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.506158][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.513741][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.521255][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.528620][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.536355][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.547493][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.555597][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.563741][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.573335][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.582200][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.593306][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.601948][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.610076][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.617618][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.722628][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.729746][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.738191][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.746592][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.753850][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.761987][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.771106][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.778233][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.789944][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.797401][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.807046][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.815350][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.828954][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.837585][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.847916][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.864039][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.871824][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.881512][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.923473][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.946351][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.968313][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 207.989459][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.040500][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.570407][ T7164] usb usb9: usbfs: process 7164 (syz.2.386) did not claim interface 0 before use [ 208.799172][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.807422][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.819787][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.828336][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.841244][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.856617][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.866296][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.874719][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.883874][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.893955][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.901803][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.909161][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.917502][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.925572][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.936684][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.950961][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.959194][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.967117][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 208.998909][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.025958][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.074087][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.133059][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.161560][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.177588][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.195730][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.212076][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.223717][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.244409][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.254519][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.262296][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.269268][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.280492][ T8] usb 4-1: USB disconnect, device number 5 [ 209.313735][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.336511][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.371924][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.396372][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.426198][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.452481][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.473391][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.489982][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.507606][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.532893][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.559303][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.581723][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.601148][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.618539][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.631789][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.649331][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.661733][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.680261][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.711721][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.741754][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.748519][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.777035][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.804565][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.855114][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.892360][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.899438][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.912817][ T5779] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 209.922045][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.929778][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.938949][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.946141][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.953409][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.962918][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.969883][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.977516][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.984960][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.992290][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 209.999348][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.012648][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.019591][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.031772][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.040259][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.048574][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.057481][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.066989][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.076938][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.082892][ T7174] loop2: detected capacity change from 0 to 40427 [ 210.098806][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.107441][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.124432][ T7174] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 210.132849][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.141007][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.169875][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.179529][ T7174] F2FS-fs (loop2): invalid crc value [ 210.197207][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.226706][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.238203][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.247544][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.258112][ T27] kye 0003:0458:5013.0003: unknown main item tag 0x0 [ 210.339177][ T7174] F2FS-fs (loop2): Found nat_bits in checkpoint [ 210.395042][ T27] kye 0003:0458:5013.0003: hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 210.594779][ T27] kye 0003:0458:5013.0003: tablet-enabling feature report not found [ 211.068076][ T7174] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 211.206206][ T27] kye 0003:0458:5013.0003: tablet enabling failed [ 211.230268][ T27] usb 2-1: USB disconnect, device number 7 [ 211.324905][ T7174] syz.2.392: attempt to access beyond end of device [ 211.324905][ T7174] loop2: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 211.366698][ T7200] fido_id[7200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 211.478539][ T5780] syz-executor: attempt to access beyond end of device [ 211.478539][ T5780] loop2: rw=2049, sector=45184, nr_sectors = 8 limit=40427 [ 211.514220][ T5780] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 213.941947][ T5779] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 213.953564][ T5779] Bluetooth: hci2: Injecting HCI hardware error event [ 213.963323][ T5785] Bluetooth: hci2: hardware error 0x00 [ 214.366122][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 214.565531][ T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 214.577180][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.595088][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 214.605358][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 214.616709][ T27] usb 1-1: Product: syz [ 214.621071][ T27] usb 1-1: Manufacturer: syz [ 214.631730][ T27] usb 1-1: SerialNumber: syz [ 214.728769][ T7235] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 214.993841][ T27] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 215.183885][ T27] usb 1-1: USB disconnect, device number 5 [ 215.207201][ T27] usblp0: removed [ 215.771450][ T7251] loop2: detected capacity change from 0 to 40427 [ 215.805879][ T7251] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 215.881117][ T7251] F2FS-fs (loop2): invalid crc value [ 216.032863][ T5785] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 216.185952][ T7251] F2FS-fs (loop2): Found nat_bits in checkpoint [ 217.164280][ T7251] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 218.039939][ T7251] syz.2.416: attempt to access beyond end of device [ 218.039939][ T7251] loop2: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 218.172958][ T7270] loop3: detected capacity change from 0 to 4096 [ 218.181317][ T5780] syz-executor: attempt to access beyond end of device [ 218.181317][ T5780] loop2: rw=2049, sector=45184, nr_sectors = 8 limit=40427 [ 218.211904][ T7270] ntfs3: loop3: ino=3, Correct links count -> 2. [ 218.229713][ T5780] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 221.453013][ T7309] loop1: detected capacity change from 0 to 4096 [ 221.478860][ T7309] ntfs3: loop1: ino=3, Correct links count -> 2. [ 222.651883][ T5813] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 222.792027][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 222.827652][ T7303] loop3: detected capacity change from 0 to 40427 [ 222.892475][ T7303] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 222.916134][ T7303] F2FS-fs (loop3): invalid crc value [ 222.957257][ T7303] F2FS-fs (loop3): Found nat_bits in checkpoint [ 223.051898][ T5813] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.061098][ T5813] usb 1-1: config 0 has no interface number 0 [ 223.095108][ T5813] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 223.105551][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 223.751992][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.762036][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.780781][ T7303] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 223.786603][ T5813] usb 1-1: Product: syz [ 223.798705][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.810554][ T5813] usb 1-1: Manufacturer: syz [ 223.816406][ T5813] usb 1-1: SerialNumber: syz [ 223.828159][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.856291][ T5813] usb 1-1: config 0 descriptor?? [ 223.878317][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.955864][ T8] usb 3-1: Product: syz [ 223.965466][ T8] usb 3-1: Manufacturer: syz [ 223.974318][ T8] usb 3-1: SerialNumber: syz [ 223.980317][ T5773] syz-executor: attempt to access beyond end of device [ 223.980317][ T5773] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 224.003513][ T5773] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 224.083243][ T5813] dvb_usb_ec168: probe of 1-1:0.1 failed with error -32 [ 224.204289][ T8] usb 3-1: 0:2 : does not exist [ 224.236571][ T8] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 224.295410][ T8] usb 3-1: USB disconnect, device number 6 [ 224.386760][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.862917][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 225.064516][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 225.077152][ T8] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 225.087310][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.098320][ T8] usb 4-1: Product: syz [ 225.105028][ T8] usb 4-1: Manufacturer: syz [ 225.110128][ T8] usb 4-1: SerialNumber: syz [ 225.161812][ T5813] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 225.233921][ T5762] usb 1-1: USB disconnect, device number 6 [ 225.378720][ T7352] loop1: detected capacity change from 0 to 4096 [ 225.435229][ T7352] ntfs3: loop1: ino=3, Correct links count -> 2. [ 225.512871][ T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 225.521069][ T8] usb 4-1: MIDIStreaming interface descriptor not found [ 225.532536][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 225.567229][ T5813] usb 3-1: unable to get BOS descriptor or descriptor too short [ 226.299353][ T5813] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 226.342731][ T8] usb 4-1: USB disconnect, device number 6 [ 226.381739][ T5813] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 226.456004][ T5813] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 226.467439][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.467695][ T6171] udevd[6171]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.478057][ T5813] usb 3-1: Product: syz [ 226.543050][ T5813] usb 3-1: Manufacturer: syz [ 226.558645][ T5813] usb 3-1: SerialNumber: syz [ 226.683755][ T7361] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 227.066946][ T5813] usb 3-1: 1:1 : bogus bTerminalLink 6 [ 227.259066][ T5813] usb 3-1: USB disconnect, device number 7 [ 227.462095][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 227.484502][ T6856] udevd[6856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.510016][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 227.539377][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 227.692262][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 227.701412][ T8] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 227.712010][ T8] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1023 [ 227.722995][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 227.734023][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.749377][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.758200][ T8] usb 4-1: Product: syz [ 227.763064][ T8] usb 4-1: Manufacturer: syz [ 227.773833][ T8] usb 4-1: SerialNumber: syz [ 227.792181][ T7370] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 227.801212][ T7370] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 227.892220][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 228.027860][ T8] usb 4-1: bad CDC descriptors [ 228.039726][ T8] usb 4-1: USB disconnect, device number 7 [ 228.083617][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 228.091247][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.106004][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.119877][ T23] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 228.130021][ T2131] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 228.155189][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.166048][ T23] usb 1-1: config 0 descriptor?? [ 228.337390][ T2131] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.349649][ T2131] usb 3-1: config 0 has no interface number 0 [ 228.369747][ T2131] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 228.399938][ T2131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.410752][ T2131] usb 3-1: Product: syz [ 228.419395][ T2131] usb 3-1: Manufacturer: syz [ 228.426445][ T2131] usb 3-1: SerialNumber: syz [ 228.443094][ T2131] usb 3-1: config 0 descriptor?? [ 228.592842][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.611774][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.621981][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.629241][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.640162][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.649036][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.664272][ T2131] dvb_usb_ec168: probe of 3-1:0.1 failed with error -32 [ 228.672383][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.679582][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.690660][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.700257][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.708139][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.716650][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.724382][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.732481][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.740055][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.748782][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.756317][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.764017][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.772157][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.779722][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.788283][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.806799][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.820124][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.840343][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.848556][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.863997][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.878028][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.887937][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.901313][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.915890][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 228.928625][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.937169][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.945962][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.955120][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.964351][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.973073][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.980817][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.988851][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 228.996418][ T23] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x0 [ 229.011573][ T23] saitek 0003:06A3:0CFA.0004: hidraw0: USB HID v0.08 Device [HID 06a3:0cfa] on usb-dummy_hcd.0-1/input0 [ 229.031065][ T23] usb 1-1: USB disconnect, device number 7 [ 229.082058][ T7393] fido_id[7393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 229.114230][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 229.131990][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 229.148424][ T8] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 229.158492][ T8] usb 2-1: config 0 has no interface number 0 [ 229.167290][ T8] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 229.179656][ T8] usb 2-1: config 0 interface 88 has no altsetting 0 [ 229.194461][ T8] usb 2-1: string descriptor 0 read error: -22 [ 229.203190][ T8] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 229.215680][ T8] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 229.228426][ T8] usb 2-1: config 0 descriptor?? [ 229.242516][ T8] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input7 [ 229.450242][ T8] usb 2-1: USB disconnect, device number 8 [ 230.874052][ T5832] usb 3-1: USB disconnect, device number 8 [ 234.342032][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 234.554773][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.587265][ T8] usb 1-1: config 0 has no interface number 0 [ 234.606817][ T8] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 234.622314][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.643402][ T8] usb 1-1: Product: syz [ 234.655349][ T8] usb 1-1: Manufacturer: syz [ 234.663046][ T8] usb 1-1: SerialNumber: syz [ 234.676461][ T8] usb 1-1: config 0 descriptor?? [ 234.990111][ T8] dvb_usb_ec168: probe of 1-1:0.1 failed with error -32 [ 237.151165][ T8] usb 1-1: USB disconnect, device number 8 [ 237.368834][ T7481] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 238.242344][ T7499] loop0: detected capacity change from 0 to 1024 [ 238.411849][ T7499] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.492: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 238.445010][ T7499] EXT4-fs error (device loop0): ext4_quota_enable:7143: comm syz.0.492: Bad quota inode: 4, type: 1 [ 238.590425][ T7499] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 238.656159][ T7499] EXT4-fs (loop0): mount failed [ 239.423363][ T7515] loop0: detected capacity change from 0 to 1024 [ 239.434412][ T7515] EXT4-fs: Ignoring removed i_version option [ 239.502324][ T7515] EXT4-fs: Mount option(s) incompatible with ext2 [ 241.331811][ T5832] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 241.663532][ T5832] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 241.678835][ T5832] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 241.703847][ T5832] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 241.728778][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.756921][ T5832] usb 2-1: Product: syz [ 241.773833][ T5832] usb 2-1: Manufacturer: syz [ 241.796726][ T5832] usb 2-1: SerialNumber: syz [ 241.854012][ T5832] usb 2-1: config 0 descriptor?? [ 241.909983][ T5832] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 242.978546][ T7535] loop2: detected capacity change from 0 to 32768 [ 243.033443][ T7535] [ 243.033443][ T7535] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.033443][ T7535] [ 243.097498][ T7535] read_mapping_page failed! [ 243.102647][ T7535] ERROR: (device loop2): txCommit: [ 243.102647][ T7535] [ 243.189141][ T5780] [ 243.189141][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.189141][ T5780] [ 243.210865][ T7553] loop0: detected capacity change from 0 to 4096 [ 243.234260][ T5780] [ 243.234260][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 243.234260][ T5780] [ 243.262088][ T7553] ntfs3: loop0: ino=3, Correct links count -> 2. [ 243.414997][ T5813] usb 2-1: USB disconnect, device number 9 [ 245.011851][ T5813] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 245.235025][ T5813] usb 1-1: Using ep0 maxpacket: 16 [ 245.260253][ T5813] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 245.282499][ T5813] usb 1-1: config 0 has no interface number 0 [ 245.307376][ T5813] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.336280][ T5813] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.361523][ T5813] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 245.390758][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.405481][ T5813] usb 1-1: config 0 descriptor?? [ 245.856719][ T7573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.874878][ T7573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.522427][ T7591] binder: 7590:7591 ioctl c0306201 2000000003c0 returned -14 [ 248.024154][ T7594] loop1: detected capacity change from 0 to 1024 [ 248.035967][ T7598] loop2: detected capacity change from 0 to 1024 [ 248.072874][ T7594] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.519: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 248.094442][ T7594] EXT4-fs error (device loop1): ext4_quota_enable:7143: comm syz.1.519: Bad quota inode: 4, type: 1 [ 248.114595][ T7594] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 248.121419][ T7598] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.521: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 248.132123][ T7594] EXT4-fs (loop1): mount failed [ 248.169060][ T7598] EXT4-fs error (device loop2): ext4_quota_enable:7143: comm syz.2.521: Bad quota inode: 4, type: 1 [ 248.246814][ T7598] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 248.286403][ T7598] EXT4-fs (loop2): mount failed [ 248.301129][ T7597] loop3: detected capacity change from 0 to 4096 [ 248.320888][ T5813] usbhid 1-1:0.4: can't add hid device: -71 [ 248.333092][ T5813] usbhid: probe of 1-1:0.4 failed with error -71 [ 248.342935][ T5813] usb 1-1: USB disconnect, device number 9 [ 248.391761][ T7597] ntfs3: loop3: ino=3, Correct links count -> 2. [ 248.726339][ T7609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.525'. [ 248.886028][ T2131] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 249.401887][ T2131] usb 3-1: Using ep0 maxpacket: 16 [ 249.478733][ T2131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.493082][ T2131] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.512038][ T2131] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 249.525464][ T2131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.560729][ T2131] usb 3-1: config 0 descriptor?? [ 250.237408][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.247646][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.255346][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.262815][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.270180][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.282044][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.289784][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.298731][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.330356][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.395526][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.471834][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.481771][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.491790][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.499241][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.509517][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.521755][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.539861][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.562196][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.601811][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.608997][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.660477][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.688343][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.696515][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.711699][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.729181][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.746693][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.776610][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.802631][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.818663][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.830136][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.839464][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 250.884876][ T7630] loop2: detected capacity change from 0 to 1024 [ 251.037456][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 251.056349][ T7630] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.532: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 251.058329][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 251.083310][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 251.083375][ T7630] EXT4-fs error (device loop2): ext4_quota_enable:7143: comm syz.2.532: Bad quota inode: 4, type: 1 [ 251.090383][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 251.123748][ T7630] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 251.158804][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 251.165965][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 251.173420][ T2131] saitek 0003:06A3:0CFA.0005: unknown main item tag 0x0 [ 251.184399][ T7630] EXT4-fs (loop2): mount failed [ 251.205940][ T2131] saitek 0003:06A3:0CFA.0005: hidraw0: USB HID v0.08 Device [HID 06a3:0cfa] on usb-dummy_hcd.2-1/input0 [ 251.231887][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 251.289657][ T2131] usb 3-1: USB disconnect, device number 9 [ 251.530799][ T7637] fido_id[7637]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 251.541928][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 251.565291][ T23] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 251.574535][ T23] usb 2-1: config 0 has no interface number 0 [ 251.581188][ T23] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.628019][ T23] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.659807][ T23] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 251.696006][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.750831][ T23] usb 2-1: config 0 descriptor?? [ 251.852343][ T7643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.535'. [ 252.083960][ T7646] loop0: detected capacity change from 0 to 4096 [ 252.127038][ T7646] ntfs3: loop0: ino=3, Correct links count -> 2. [ 252.234299][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.272180][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.408594][ T23] usbhid 2-1:0.4: can't add hid device: -71 [ 254.527185][ T23] usbhid: probe of 2-1:0.4 failed with error -71 [ 254.537829][ T23] usb 2-1: USB disconnect, device number 10 [ 255.955806][ T7684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.544'. [ 256.359059][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.366102][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.561837][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 257.772360][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.788843][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.799588][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.817977][ T27] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.828610][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.875744][ T27] usb 3-1: config 0 descriptor?? [ 258.130563][ T7703] loop1: detected capacity change from 0 to 40427 [ 258.183957][ T7703] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 258.234067][ T7703] F2FS-fs (loop1): invalid crc value [ 258.272482][ T7703] F2FS-fs (loop1): Found nat_bits in checkpoint [ 258.325058][ T27] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 258.354905][ T27] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 258.382956][ T27] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 258.406902][ T27] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 258.448161][ T27] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 258.459993][ T7703] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 258.482230][ T27] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 258.514553][ T27] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 258.548775][ T5775] syz-executor: attempt to access beyond end of device [ 258.548775][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 258.596224][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 258.711215][ T27] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 258.719068][ T27] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 258.729178][ T27] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 258.745078][ T27] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 258.761022][ T27] usb 3-1: USB disconnect, device number 10 [ 258.935083][ T7717] fido_id[7717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 260.512398][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.557'. [ 260.662073][ T5813] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 260.670338][ T5832] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 260.868232][ T5813] usb 3-1: unable to get BOS descriptor or descriptor too short [ 260.876975][ T5832] usb 4-1: config 162 has an invalid interface number: 79 but max is 1 [ 260.886229][ T5813] usb 3-1: not running at top speed; connect to a high speed hub [ 260.901178][ T5832] usb 4-1: config 162 has an invalid interface number: 183 but max is 1 [ 260.912302][ T5832] usb 4-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 260.923931][ T5832] usb 4-1: config 162 has no interface number 0 [ 260.930574][ T5813] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.949976][ T5832] usb 4-1: config 162 has no interface number 1 [ 260.961224][ T5813] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.974467][ T5832] usb 4-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 260.992102][ T5832] usb 4-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 261.005398][ T5832] usb 4-1: config 162 interface 183 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 261.017926][ T5832] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 261.031392][ T5832] usb 4-1: config 162 interface 183 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 261.045402][ T5832] usb 4-1: config 162 interface 79 has no altsetting 0 [ 261.053237][ T5813] usb 3-1: string descriptor 0 read error: -22 [ 261.060618][ T5813] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.070311][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.082662][ T5832] usb 4-1: config 162 interface 183 has no altsetting 0 [ 261.118802][ T5832] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 261.129597][ T5813] usb 3-1: 0:2 : does not exist [ 261.138976][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.151309][ T5832] usb 4-1: Product: syz [ 261.169892][ T5832] usb 4-1: Manufacturer: syz [ 261.175448][ T5832] usb 4-1: SerialNumber: syz [ 261.413410][ T5832] pl2303 4-1:162.79: required endpoints missing [ 261.456650][ T5832] pl2303 4-1:162.183: required endpoints missing [ 261.501934][ T5832] usb 4-1: USB disconnect, device number 8 [ 261.867562][ T7742] loop0: detected capacity change from 0 to 40427 [ 261.883148][ T7742] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 261.903244][ T7742] F2FS-fs (loop0): invalid crc value [ 261.929174][ T7742] F2FS-fs (loop0): Found nat_bits in checkpoint [ 262.065227][ T7742] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 262.180074][ T5813] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 262.194643][ T5772] syz-executor: attempt to access beyond end of device [ 262.194643][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 262.220943][ T5813] usb 3-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 262.222087][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 262.246819][ T5813] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = -24635/-21600/-1271 [ 262.287183][ T5813] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 262.310160][ T5813] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 262.464295][ T5813] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 262.537721][ T5813] usb 3-1: USB disconnect, device number 11 [ 263.444712][ T7756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.571'. [ 265.676659][ T7783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.471772][ T5762] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 266.697220][ T5762] usb 2-1: unable to get BOS descriptor or descriptor too short [ 266.742282][ T5762] usb 2-1: not running at top speed; connect to a high speed hub [ 266.793417][ T5762] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.818672][ T5762] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.844784][ T5762] usb 2-1: string descriptor 0 read error: -22 [ 266.861915][ T5762] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.878237][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.909894][ T5762] usb 2-1: 0:2 : does not exist [ 266.971711][ T5832] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 267.141731][ T5832] usb 4-1: device descriptor read/64, error -71 [ 267.412158][ T5832] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 267.621839][ T5832] usb 4-1: device descriptor read/64, error -71 [ 268.522536][ T5832] usb usb4-port1: attempt power cycle [ 268.552912][ T5762] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 268.575522][ T5762] usb 2-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 268.601673][ T5762] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = -24635/-21600/-1271 [ 268.625168][ T5762] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 268.690672][ T5762] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 268.922104][ T5762] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 268.943877][ T5762] usb 2-1: USB disconnect, device number 11 [ 268.961697][ T5832] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 269.004230][ T5832] usb 4-1: device descriptor read/8, error -71 [ 269.301718][ T5832] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 269.343697][ T5832] usb 4-1: device descriptor read/8, error -71 [ 269.471892][ T5832] usb usb4-port1: unable to enumerate USB device [ 272.135654][ T7857] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 272.199544][ T7857] kvm: pic: level sensitive irq not supported [ 272.199967][ T7857] kvm: pic: non byte read [ 272.219316][ T7857] kvm: pic: level sensitive irq not supported [ 272.219433][ T7857] kvm: pic: non byte read [ 272.240523][ T7857] kvm: pic: level sensitive irq not supported [ 272.240642][ T7857] kvm: pic: non byte read [ 272.261770][ T2131] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 272.263730][ T7857] kvm: pic: level sensitive irq not supported [ 272.275627][ T7857] kvm: pic: non byte read [ 272.301328][ T7857] kvm: pic: level sensitive irq not supported [ 272.302283][ T7857] kvm: pic: non byte read [ 272.317494][ T7863] loop1: detected capacity change from 0 to 2048 [ 272.331556][ T7857] kvm: pic: level sensitive irq not supported [ 272.332294][ T7857] kvm: pic: non byte read [ 272.347020][ T7863] UDF-fs: bad mount option "umask=S0000000000000000000075" or missing value [ 272.359078][ T7857] kvm: pic: level sensitive irq not supported [ 272.359145][ T7857] kvm: pic: non byte read [ 272.411811][ T2131] usb 3-1: device descriptor read/64, error -71 [ 272.439027][ T7863] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.606'. [ 272.854590][ T2131] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 273.111817][ T2131] usb 3-1: device descriptor read/64, error -71 [ 273.952234][ T2131] usb usb3-port1: attempt power cycle [ 274.076814][ T7882] kvm: pic: non byte write [ 274.411918][ T2131] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 274.472784][ T2131] usb 3-1: device descriptor read/8, error -71 [ 274.537798][ T7888] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 274.751744][ T2131] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 274.793928][ T2131] usb 3-1: device descriptor read/8, error -71 [ 274.912596][ T2131] usb usb3-port1: unable to enumerate USB device [ 277.051770][ T2131] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 277.111701][ T787] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 277.201817][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 277.233862][ T2131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.247412][ T2131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.258304][ T2131] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.271903][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 277.279855][ T2131] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.289831][ T2131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.300542][ T2131] usb 3-1: config 0 descriptor?? [ 277.321832][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 277.330767][ T787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.347079][ T787] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 277.358326][ T787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 31734, setting to 1024 [ 277.374603][ T787] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 277.385622][ T787] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 277.400715][ T787] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.401056][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 277.410244][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 277.426229][ T787] usb 2-1: SerialNumber: syz [ 277.434193][ T7912] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 277.434363][ T27] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 277.442381][ T7912] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 277.459150][ T27] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 277.479896][ T23] usb 1-1: device descriptor read/64, error -71 [ 277.491386][ T27] usb 4-1: string descriptor 0 read error: -22 [ 277.501192][ T27] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 277.513501][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.683574][ T787] usb 2-1: USB disconnect, device number 12 [ 277.726710][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.740330][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.750065][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.758033][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.765672][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 277.773570][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.781517][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.790105][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.797972][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.805927][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.814209][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.822559][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.830528][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.838293][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.845855][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.854854][ T2131] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 277.863684][ T2131] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 277.885665][ T2131] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 277.943087][ T23] usb 1-1: device descriptor read/64, error -71 [ 278.004043][ T787] usb 3-1: USB disconnect, device number 16 [ 278.062193][ T23] usb usb1-port1: attempt power cycle [ 278.148048][ T27] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 278.160954][ T27] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 278.215962][ T27] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 278.241340][ T27] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 278.287776][ T27] usb 4-1: USB disconnect, device number 13 [ 278.471714][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 278.517231][ T23] usb 1-1: device descriptor read/8, error -71 [ 278.812171][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 278.846018][ T23] usb 1-1: device descriptor read/8, error -71 [ 278.942549][ T7929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.628'. [ 278.961535][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 278.988087][ T23] usb usb1-port1: unable to enumerate USB device [ 278.995009][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 279.021676][ T27] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 279.241680][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 279.278024][ T27] usb 3-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config [ 279.290832][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.305950][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.316910][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.325937][ T27] usb 3-1: Product: syz [ 279.333680][ T27] usb 3-1: Manufacturer: syz [ 279.339744][ T27] usb 3-1: SerialNumber: syz [ 279.605404][ T27] usb 3-1: 0:2 : does not exist [ 279.623719][ T27] usb 3-1: unit 9 not found! [ 279.645821][ T27] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 279.674342][ T27] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 279.697177][ T27] usb 3-1: 4:0: cannot get min/max values for control 3 (id 4) [ 279.722219][ T27] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4) [ 279.737395][ T27] usb 3-1: 4:0: cannot get min/max values for control 5 (id 4) [ 279.765542][ T27] usb 3-1: 4:0: cannot get min/max values for control 6 (id 4) [ 280.213141][ T27] usb 3-1: USB disconnect, device number 17 [ 281.658798][ T7963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.637'. [ 281.704355][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 281.730728][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 281.892233][ T5832] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 282.083633][ T5832] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.096607][ T5832] usb 3-1: config 0 has no interface number 0 [ 282.107555][ T5832] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 282.121321][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.132292][ T5762] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 282.140365][ T5832] usb 3-1: Product: syz [ 282.148290][ T5832] usb 3-1: Manufacturer: syz [ 282.156626][ T5832] usb 3-1: SerialNumber: syz [ 282.161703][ T27] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 282.165550][ T5832] usb 3-1: config 0 descriptor?? [ 282.301783][ T5762] usb 2-1: device descriptor read/64, error -71 [ 282.392480][ T5832] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 282.394412][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 282.423390][ T27] usb 1-1: not running at top speed; connect to a high speed hub [ 282.429419][ T5832] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 282.446556][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.456279][ T5832] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 282.465082][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.479041][ T5832] usb 3-1: media controller created [ 282.493968][ T27] usb 1-1: string descriptor 0 read error: -22 [ 282.500413][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 282.515975][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.534280][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.552464][ T27] usb 1-1: 0:2 : does not exist [ 282.590124][ T5762] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 282.660682][ T5832] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 282.763191][ T5762] usb 2-1: device descriptor read/64, error -71 [ 282.892069][ T5762] usb usb2-port1: attempt power cycle [ 283.109050][ T7982] loop3: detected capacity change from 0 to 40427 [ 283.119443][ T7982] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 283.127687][ T7982] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 283.141469][ T7982] F2FS-fs (loop3): invalid crc value [ 283.158211][ T7982] F2FS-fs (loop3): Found nat_bits in checkpoint [ 283.217410][ T7982] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 283.225223][ T7982] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 283.311975][ T5762] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 283.362590][ T5762] usb 2-1: device descriptor read/8, error -71 [ 284.144620][ T27] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 284.175145][ T5762] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 284.178038][ T27] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 284.199362][ T27] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 284.218366][ T5832] usb 3-1: USB disconnect, device number 18 [ 284.229533][ T27] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 284.254335][ T5762] usb 2-1: device descriptor read/8, error -71 [ 284.263292][ T27] usb 1-1: USB disconnect, device number 14 [ 284.392030][ T5762] usb usb2-port1: unable to enumerate USB device [ 284.963408][ T7998] loop2: detected capacity change from 0 to 1024 [ 285.048715][ T7998] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.651: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 285.108358][ T7998] EXT4-fs error (device loop2): ext4_quota_enable:7143: comm syz.2.651: Bad quota inode: 4, type: 1 [ 285.161650][ T7998] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 285.212841][ T7998] EXT4-fs (loop2): mount failed [ 285.400667][ T8013] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 285.834706][ T8022] loop2: detected capacity change from 0 to 1024 [ 285.845607][ T8022] EXT4-fs: Ignoring removed i_version option [ 285.867023][ T8022] EXT4-fs: Mount option(s) incompatible with ext2 [ 286.315300][ T5787] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 286.751709][ T2131] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 286.802226][ T5762] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 286.832659][ T8032] loop2: detected capacity change from 0 to 1024 [ 286.873730][ T8032] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.662: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 286.915152][ T8032] EXT4-fs error (device loop2): ext4_quota_enable:7143: comm syz.2.662: Bad quota inode: 4, type: 1 [ 286.934476][ T8032] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 286.961692][ T5762] usb 1-1: device descriptor read/64, error -71 [ 286.964158][ T2131] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.983788][ T8032] EXT4-fs (loop2): mount failed [ 287.000832][ T2131] usb 2-1: config 0 has no interface number 0 [ 287.017164][ T2131] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 287.030058][ T2131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.039334][ T2131] usb 2-1: Product: syz [ 287.051717][ T2131] usb 2-1: Manufacturer: syz [ 287.066778][ T2131] usb 2-1: SerialNumber: syz [ 287.085023][ T2131] usb 2-1: config 0 descriptor?? [ 287.232136][ T5762] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 287.296695][ T2131] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 287.325326][ T2131] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 287.337981][ T2131] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 287.347625][ T2131] usb 2-1: media controller created [ 287.368005][ T2131] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.391759][ T5762] usb 1-1: device descriptor read/64, error -71 [ 287.461884][ T5832] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 287.512113][ T5762] usb usb1-port1: attempt power cycle [ 287.549589][ T2131] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 287.716046][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.733202][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.749440][ T5832] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 287.760211][ T8043] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 287.760236][ T5832] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 287.777542][ T5832] usb 4-1: Manufacturer: syz [ 287.801196][ T5832] usb 4-1: config 0 descriptor?? [ 287.981823][ T5762] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 288.033906][ T5762] usb 1-1: device descriptor read/8, error -71 [ 288.311750][ T5762] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 288.359410][ T5762] usb 1-1: device descriptor read/8, error -71 [ 288.481943][ T5762] usb usb1-port1: unable to enumerate USB device [ 288.598586][ T2131] usb 2-1: USB disconnect, device number 17 [ 288.841988][ T5832] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0008/input/input8 [ 288.937709][ T5832] uclogic 0003:256C:006D.0008: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 289.045888][ T5762] usb 4-1: USB disconnect, device number 14 [ 289.679940][ T8059] binder: 8058:8059 unknown command 1074553619 [ 289.736610][ T8059] binder: 8058:8059 ioctl c0306201 200000000540 returned -22 [ 289.772268][ T8055] loop1: detected capacity change from 0 to 32768 [ 289.797809][ T8055] [ 289.797809][ T8055] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.797809][ T8055] [ 289.921255][ T5775] [ 289.921255][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.921255][ T5775] [ 289.965703][ T5775] [ 289.965703][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.965703][ T5775] [ 290.092799][ T8065] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 290.107442][ T8067] loop0: detected capacity change from 0 to 1024 [ 290.369616][ T8067] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.676: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 290.419683][ T8067] EXT4-fs error (device loop0): ext4_quota_enable:7143: comm syz.0.676: Bad quota inode: 4, type: 1 [ 290.441934][ T8067] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 290.683956][ T8067] EXT4-fs (loop0): mount failed [ 291.850898][ T8081] loop0: detected capacity change from 0 to 1024 [ 291.862010][ T8081] EXT4-fs: Ignoring removed i_version option [ 291.884307][ T2131] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 291.908251][ T8081] EXT4-fs: Mount option(s) incompatible with ext2 [ 292.255708][ T6856] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 292.276808][ T2131] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.297651][ T2131] usb 2-1: config 0 has no interface number 0 [ 292.318025][ T2131] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 292.341835][ T2131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.374114][ T2131] usb 2-1: Product: syz [ 292.378702][ T2131] usb 2-1: Manufacturer: syz [ 292.401522][ T2131] usb 2-1: SerialNumber: syz [ 292.431521][ T2131] usb 2-1: config 0 descriptor?? [ 292.673761][ T2131] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 292.703760][ T2131] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 292.719553][ T2131] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 292.728962][ T2131] usb 2-1: media controller created [ 292.765640][ T2131] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 292.945659][ T2131] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 293.090286][ T8098] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 293.331401][ T8091] loop0: detected capacity change from 0 to 32768 [ 293.839895][ T8091] [ 293.839895][ T8091] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.839895][ T8091] [ 293.997660][ T5772] [ 293.997660][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.997660][ T5772] [ 294.046425][ T5772] [ 294.046425][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 294.046425][ T5772] [ 294.052137][ T2131] usb 2-1: USB disconnect, device number 18 [ 295.231690][ T5762] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 295.341164][ T8125] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 295.426178][ T5762] usb 3-1: unable to get BOS descriptor or descriptor too short [ 295.457082][ T5762] usb 3-1: not running at top speed; connect to a high speed hub [ 295.485040][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 295.515394][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 295.526132][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 295.535360][ T8130] loop3: detected capacity change from 0 to 4096 [ 295.538351][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 295.554664][ T8130] ntfs3: loop3: ino=3, Correct links count -> 2. [ 295.554743][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 12336, setting to 64 [ 295.577437][ T5762] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 295.588342][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.598547][ T5762] usb 3-1: Product: syz [ 295.606257][ T5762] usb 3-1: Manufacturer: syz [ 295.611070][ T5762] usb 3-1: SerialNumber: syz [ 295.652370][ T5762] usb 3-1: config 0 descriptor?? [ 295.659911][ T8109] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 295.672036][ T8109] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 295.718474][ T5762] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 295.751785][ T5832] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 295.933853][ T5762] usb 3-1: USB disconnect, device number 19 [ 295.961932][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 296.009374][ T5832] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 296.143384][ T5832] usb 1-1: config 2 has no interface number 0 [ 296.316986][ T5832] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 296.373997][ T5832] usb 1-1: config 2 interface 88 has no altsetting 0 [ 296.425804][ T5832] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 296.469014][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.527926][ T5832] usb 1-1: Product: syz [ 296.568490][ T5832] usb 1-1: Manufacturer: syz [ 296.609244][ T5832] usb 1-1: SerialNumber: syz [ 296.639529][ T8131] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 297.852293][ T8131] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 298.069458][ T5762] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 298.126782][ T8157] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 298.261310][ T8161] loop1: detected capacity change from 0 to 1024 [ 298.286839][ T5762] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.300491][ T5762] usb 4-1: config 0 has no interface number 0 [ 298.314393][ T5762] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 298.331758][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.344966][ T8161] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.708: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 298.352273][ T5762] usb 4-1: Product: syz [ 298.372008][ T5762] usb 4-1: Manufacturer: syz [ 298.377136][ T5762] usb 4-1: SerialNumber: syz [ 298.385964][ T5762] usb 4-1: config 0 descriptor?? [ 298.402230][ T8161] EXT4-fs error (device loop1): ext4_quota_enable:7143: comm syz.1.708: Bad quota inode: 4, type: 1 [ 298.404283][ T8163] loop2: detected capacity change from 0 to 4096 [ 298.433179][ T8161] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 298.449259][ T8163] ntfs3: loop2: ino=3, Correct links count -> 2. [ 298.484229][ T8161] EXT4-fs (loop1): mount failed [ 298.610718][ T5762] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 298.628430][ T5762] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 298.641398][ T5762] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 298.650096][ T5762] usb 4-1: media controller created [ 298.679412][ T5762] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.514328][ T5832] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 299.532124][ T5762] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 299.543007][ T5832] asix 1-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 299.567989][ T5832] asix: probe of 1-1:2.88 failed with error -71 [ 299.591888][ T5832] usb 1-1: USB disconnect, device number 19 [ 299.610805][ T5762] usb 4-1: USB disconnect, device number 15 [ 301.870446][ T8192] loop2: detected capacity change from 0 to 1024 [ 301.949652][ T8192] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.718: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 301.995529][ T8192] EXT4-fs error (device loop2): ext4_quota_enable:7143: comm syz.2.718: Bad quota inode: 4, type: 1 [ 302.011358][ T8192] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 302.028566][ T8192] EXT4-fs (loop2): mount failed [ 302.404573][ T8200] loop3: detected capacity change from 0 to 40427 [ 302.431783][ T8200] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 302.439698][ T8200] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 302.449965][ T8200] F2FS-fs (loop3): invalid crc value [ 302.495354][ T8200] F2FS-fs (loop3): Found nat_bits in checkpoint [ 302.539266][ T8202] loop0: detected capacity change from 0 to 4096 [ 302.558655][ T8200] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 302.566692][ T8200] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 302.812812][ T8213] loop2: detected capacity change from 0 to 2048 [ 302.826565][ T8202] ntfs3: loop0: ino=3, Correct links count -> 2. [ 302.847235][ T8213] UDF-fs: bad mount option "umask=S0000000000000000000075" or missing value [ 306.453282][ T8231] netlink: 104 bytes leftover after parsing attributes in process `syz.0.728'. [ 306.820399][ T8238] loop0: detected capacity change from 0 to 1024 [ 306.873008][ T8238] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.731: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 306.992418][ T8238] EXT4-fs error (device loop0): ext4_quota_enable:7143: comm syz.0.731: Bad quota inode: 4, type: 1 [ 307.019639][ T8238] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 307.057515][ T8238] EXT4-fs (loop0): mount failed [ 307.673694][ T3453] Bluetooth: hci4: Frame reassembly failed (-84) [ 307.688121][ T2952] Bluetooth: hci4: Frame reassembly failed (-84) [ 309.008309][ T8265] syz.2.737 (8265) used greatest stack depth: 17864 bytes left [ 309.701925][ T5779] Bluetooth: hci4: command 0x1003 tx timeout [ 309.709872][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 309.802606][ T8278] loop3: detected capacity change from 0 to 1024 [ 309.902428][ T8278] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.742: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 310.000306][ T8278] EXT4-fs error (device loop3): ext4_quota_enable:7143: comm syz.3.742: Bad quota inode: 4, type: 1 [ 310.065266][ T8278] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 310.132232][ T8278] EXT4-fs (loop3): mount failed [ 312.728429][ T8321] loop0: detected capacity change from 0 to 1024 [ 312.856842][ T8321] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.755: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 312.994100][ T8321] EXT4-fs error (device loop0): ext4_quota_enable:7143: comm syz.0.755: Bad quota inode: 4, type: 1 [ 313.007984][ T8321] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 313.037084][ T8321] EXT4-fs (loop0): mount failed [ 313.620112][ T8331] loop0: detected capacity change from 0 to 40427 [ 313.639603][ T8331] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 313.648022][ T8331] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 313.683830][ T8331] F2FS-fs (loop0): invalid crc value [ 313.703760][ T8331] F2FS-fs (loop0): Found nat_bits in checkpoint [ 313.737496][ T8331] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 313.744854][ T8331] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 316.703971][ T8356] loop2: detected capacity change from 0 to 1024 [ 316.733319][ T8356] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.766: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 316.836068][ T8356] EXT4-fs error (device loop2): ext4_quota_enable:7143: comm syz.2.766: Bad quota inode: 4, type: 1 [ 316.912022][ T8356] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 316.962734][ T8356] EXT4-fs (loop2): mount failed [ 317.091031][ T8369] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 317.649481][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 317.679392][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 317.791298][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.798206][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.021781][ T787] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 319.081149][ T8395] loop2: detected capacity change from 0 to 1024 [ 319.096070][ T8395] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.778: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 319.124286][ T8395] EXT4-fs error (device loop2): ext4_quota_enable:7143: comm syz.2.778: Bad quota inode: 4, type: 1 [ 319.424787][ T8395] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 319.568855][ T8395] EXT4-fs (loop2): mount failed [ 319.664223][ T787] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 319.701730][ T787] usb 1-1: config 0 has no interface number 0 [ 319.750857][ T787] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 319.796180][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.847552][ T787] usb 1-1: Product: syz [ 319.855047][ T8400] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 319.864463][ T787] usb 1-1: Manufacturer: syz [ 319.869652][ T787] usb 1-1: SerialNumber: syz [ 319.884330][ T787] usb 1-1: config 0 descriptor?? [ 320.122892][ T787] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 320.145645][ T787] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 320.168697][ T787] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 320.179293][ T787] usb 1-1: media controller created [ 320.215739][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.379008][ T787] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 320.451131][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 320.517669][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 321.480086][ T787] usb 1-1: USB disconnect, device number 20 [ 321.635833][ T8422] netlink: 'syz.2.784': attribute type 33 has an invalid length. [ 321.667539][ T8422] netlink: 36 bytes leftover after parsing attributes in process `syz.2.784'. [ 321.749787][ T8428] syz.2.787: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 321.776833][ T8428] CPU: 0 PID: 8428 Comm: syz.2.787 Not tainted syzkaller #0 [ 321.784461][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.794824][ T8428] Call Trace: [ 321.798419][ T8428] [ 321.801392][ T8428] dump_stack_lvl+0x18c/0x250 [ 321.806222][ T8428] ? show_regs_print_info+0x20/0x20 [ 321.811483][ T8428] ? load_image+0x400/0x400 [ 321.816366][ T8428] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 321.823061][ T8428] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 321.830217][ T8428] warn_alloc+0x246/0x340 [ 321.835201][ T8428] ? stack_trace_save+0xaa/0x100 [ 321.840731][ T8428] ? zone_watermark_ok_safe+0x230/0x230 [ 321.846856][ T8428] ? kasan_set_track+0x5f/0x70 [ 321.851915][ T8428] ? kasan_set_track+0x4e/0x70 [ 321.856886][ T8428] ? __kasan_kmalloc+0x8f/0xa0 [ 321.862003][ T8428] ? xsk_init_queue+0xad/0x100 [ 321.867365][ T8428] ? xsk_setsockopt+0x4e5/0x760 [ 321.872435][ T8428] ? do_sock_setsockopt+0x175/0x1a0 [ 321.878103][ T8428] ? __x64_sys_setsockopt+0x182/0x200 [ 321.884014][ T8428] __vmalloc_node_range+0x126/0x1330 [ 321.889457][ T8428] ? free_vm_area+0x50/0x50 [ 321.894097][ T8428] vmalloc_user+0x74/0x80 [ 321.898675][ T8428] ? xskq_create+0xbf/0x170 [ 321.904085][ T8428] xskq_create+0xbf/0x170 [ 321.908875][ T8428] xsk_init_queue+0xad/0x100 [ 321.914229][ T8428] xsk_setsockopt+0x4e5/0x760 [ 321.918910][ T8428] ? xsk_poll+0x680/0x680 [ 321.924408][ T8428] ? __fget_files+0x28/0x4b0 [ 321.929636][ T8428] ? __fget_files+0x28/0x4b0 [ 321.934589][ T8428] ? aa_sock_opt_perm+0x74/0x100 [ 321.939992][ T8428] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 321.946099][ T8428] ? security_socket_setsockopt+0x7e/0xa0 [ 321.952110][ T8428] ? xsk_poll+0x680/0x680 [ 321.957003][ T8428] do_sock_setsockopt+0x175/0x1a0 [ 321.962139][ T8428] ? __fdget+0x180/0x210 [ 321.966478][ T8428] __x64_sys_setsockopt+0x182/0x200 [ 321.971857][ T8428] do_syscall_64+0x55/0xa0 [ 321.976394][ T8428] ? clear_bhb_loop+0x40/0x90 [ 321.981285][ T8428] ? clear_bhb_loop+0x40/0x90 [ 321.986082][ T8428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.992260][ T8428] RIP: 0033:0x7f18e499c799 [ 321.996950][ T8428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.017996][ T8428] RSP: 002b:00007f18e58f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 322.026783][ T8428] RAX: ffffffffffffffda RBX: 00007f18e4c15fa0 RCX: 00007f18e499c799 [ 322.035780][ T8428] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 322.044598][ T8428] RBP: 00007f18e4a32c99 R08: 0000000000000004 R09: 0000000000000000 [ 322.052860][ T8428] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 322.061895][ T8428] R13: 00007f18e4c16038 R14: 00007f18e4c15fa0 R15: 00007ffc283597f8 [ 322.070609][ T8428] [ 322.124131][ T8428] Mem-Info: [ 322.146234][ T8428] active_anon:6357 inactive_anon:0 isolated_anon:0 [ 322.146234][ T8428] active_file:11396 inactive_file:40078 isolated_file:0 [ 322.146234][ T8428] unevictable:768 dirty:113 writeback:0 [ 322.146234][ T8428] slab_reclaimable:10694 slab_unreclaimable:91202 [ 322.146234][ T8428] mapped:26284 shmem:1376 pagetables:726 [ 322.146234][ T8428] sec_pagetables:0 bounce:0 [ 322.146234][ T8428] kernel_misc_reclaimable:0 [ 322.146234][ T8428] free:1346796 free_pcp:11574 free_cma:0 [ 322.180618][ T8433] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 322.229188][ T8428] Node 0 active_anon:25428kB inactive_anon:0kB active_file:45584kB inactive_file:160112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105636kB dirty:448kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10872kB pagetables:2904kB sec_pagetables:0kB all_unreclaimable? no [ 322.296130][ T8428] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 322.352338][ T8428] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 322.375022][ T8437] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 322.388132][ T8428] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 322.448932][ T8428] Node 0 DMA32 free:1471772kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25288kB inactive_anon:0kB active_file:45584kB inactive_file:159280kB unevictable:1536kB writepending:448kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:37360kB local_pcp:19840kB free_cma:0kB [ 322.481780][ T8439] loop3: detected capacity change from 0 to 1024 [ 322.487351][ T8428] lowmem_reserve[]: 0 0 0 0 0 [ 322.501449][ T8441] netlink: 60 bytes leftover after parsing attributes in process `syz.1.793'. [ 322.532734][ T8439] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.792: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 322.532782][ T8428] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 322.594104][ T8439] EXT4-fs error (device loop3): ext4_quota_enable:7143: comm syz.3.792: Bad quota inode: 4, type: 1 [ 322.646736][ T8428] lowmem_reserve[]: 0 0 0 0 0 [ 322.648462][ T8439] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 322.652839][ T8428] Node 1 Normal free:3899604kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13620kB local_pcp:7764kB free_cma:0kB [ 322.723859][ T8428] lowmem_reserve[]: 0 0 0 0 0 [ 322.729726][ T8439] EXT4-fs (loop3): mount failed [ 322.731666][ T8428] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 322.781926][ T8428] Node 0 DMA32: 36*4kB (UE) 396*8kB (UME) 791*16kB (UME) 82*32kB (UME) 374*64kB (UME) 78*128kB (UM) 26*256kB (UM) 15*512kB (ME) 12*1024kB (UME) 6*2048kB (M) 337*4096kB (UM) = 1471776kB [ 322.859038][ T8428] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 322.885423][ T8428] Node 1 Normal: 153*4kB (UME) 62*8kB (UE) 42*16kB (UE) 165*32kB (UE) 55*64kB (UME) 7*128kB (UM) 0*256kB 0*512kB 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3899604kB [ 322.993871][ T8428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.042462][ T8428] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.057437][ T8428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.083107][ T8428] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.142189][ T8428] 55685 total pagecache pages [ 323.147320][ T8428] 0 pages in swap cache [ 323.152128][ T8428] Free swap = 124460kB [ 323.156556][ T8428] Total swap = 124996kB [ 323.161233][ T8428] 2097051 pages RAM [ 323.167617][ T8428] 0 pages HighMem/MovableOnly [ 323.172951][ T8428] 416924 pages reserved [ 323.177996][ T8428] 0 pages cma reserved [ 323.301687][ T5832] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 323.345021][ T8459] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 323.395563][ T23] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 323.483786][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.512315][ T5832] usb 1-1: config 0 has no interfaces? [ 323.518104][ T8463] netlink: 'syz.2.802': attribute type 10 has an invalid length. [ 323.528634][ T8463] netlink: 2 bytes leftover after parsing attributes in process `syz.2.802'. [ 323.530011][ T5832] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 323.561458][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.584750][ T5832] usb 1-1: Product: syz [ 323.590069][ T5832] usb 1-1: Manufacturer: syz [ 323.604175][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.611766][ T5832] usb 1-1: SerialNumber: syz [ 323.615912][ T8463] team0: Port device vlan0 added [ 323.633537][ T23] usb 2-1: config 0 has no interface number 0 [ 323.634212][ T5832] usb 1-1: config 0 descriptor?? [ 323.644510][ T23] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 323.671729][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.680650][ T23] usb 2-1: Product: syz [ 323.689865][ T23] usb 2-1: Manufacturer: syz [ 323.706072][ T23] usb 2-1: SerialNumber: syz [ 323.714641][ T23] usb 2-1: config 0 descriptor?? [ 323.932267][ T23] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 323.945638][ T8467] loop2: detected capacity change from 0 to 2048 [ 323.953981][ T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 323.965365][ T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 323.975401][ T8467] UDF-fs: bad mount option "umask=S0000000000000000000075" or missing value [ 323.990711][ T23] usb 2-1: media controller created [ 324.033727][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 324.188634][ T23] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 324.512936][ T8481] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 324.756583][ T8490] loop3: detected capacity change from 0 to 2048 [ 324.758041][ T8492] loop2: detected capacity change from 0 to 1024 [ 324.782554][ T8490] UDF-fs: bad mount option "umask=S0000000000000000000075" or missing value [ 324.822205][ T8492] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.815: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 324.845138][ T8492] EXT4-fs error (device loop2): ext4_quota_enable:7143: comm syz.2.815: Bad quota inode: 4, type: 1 [ 324.864928][ T8492] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 324.883158][ T8492] EXT4-fs (loop2): mount failed [ 325.243241][ T23] usb 2-1: USB disconnect, device number 19 [ 326.182539][ T5832] usb 1-1: USB disconnect, device number 21 [ 326.885809][ T8522] loop3: detected capacity change from 0 to 2048 [ 326.891870][ T8526] netlink: 40 bytes leftover after parsing attributes in process `syz.1.826'. [ 326.969359][ T8522] UDF-fs: bad mount option "umask=S0000000000000000000075" or missing value [ 328.330621][ T23] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 329.215242][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.241638][ T23] usb 1-1: config 0 has no interface number 0 [ 329.410356][ T23] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 329.570945][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.695431][ T23] usb 1-1: Product: syz [ 329.753519][ T23] usb 1-1: Manufacturer: syz [ 329.810995][ T23] usb 1-1: SerialNumber: syz [ 330.091887][ T23] usb 1-1: config 0 descriptor?? [ 330.310701][ T23] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 330.348701][ T23] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 330.392158][ T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 330.401374][ T23] usb 1-1: media controller created [ 330.436488][ T8565] loop3: detected capacity change from 0 to 1024 [ 330.490647][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 330.503056][ T8567] [ 330.505915][ T8567] ============================= [ 330.507872][ T8565] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.840: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 330.512117][ T8567] WARNING: suspicious RCU usage [ 330.537328][ T8567] syzkaller #0 Not tainted [ 330.542205][ T8567] ----------------------------- [ 330.547717][ T8567] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 330.557766][ T8567] [ 330.557766][ T8567] other info that might help us debug this: [ 330.557766][ T8567] [ 330.570612][ T8567] [ 330.570612][ T8567] rcu_scheduler_active = 2, debug_locks = 1 [ 330.580368][ T8567] 1 lock held by syz.1.841/8567: [ 330.586912][ T8567] #0: ffffffff8d132240 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 330.598963][ T8567] [ 330.598963][ T8567] stack backtrace: [ 330.605124][ T8567] CPU: 1 PID: 8567 Comm: syz.1.841 Not tainted syzkaller #0 [ 330.613203][ T8567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 330.623629][ T8567] Call Trace: [ 330.627028][ T8567] [ 330.630262][ T8567] dump_stack_lvl+0x18c/0x250 [ 330.635244][ T8567] ? show_regs_print_info+0x20/0x20 [ 330.640463][ T8567] ? load_image+0x400/0x400 [ 330.645063][ T8567] ? __lock_acquire+0x1273/0x7d40 [ 330.650181][ T8567] lockdep_rcu_suspicious+0x1e1/0x300 [ 330.655840][ T8567] get_callchain_entry+0x2a9/0x3c0 [ 330.661058][ T8567] get_perf_callchain+0xc6/0x510 [ 330.666298][ T8567] ? put_callchain_entry+0xb0/0xb0 [ 330.671954][ T8567] ? preempt_schedule_common+0x82/0xc0 [ 330.677614][ T8567] ? preempt_schedule+0xc0/0xd0 [ 330.682692][ T8567] __bpf_get_stack+0x2e4/0x540 [ 330.687859][ T8567] ? stack_map_get_build_id_offset+0x720/0x720 [ 330.694128][ T8567] ? bpf_prog_5e2b81a9232dc734_F+0x31/0x33 [ 330.700777][ T8567] bpf_get_stack_raw_tp+0x1a9/0x210 [ 330.706252][ T8567] bpf_prog_5e2b81a9232dc734_F+0x31/0x33 [ 330.712084][ T8567] bpf_prog_7a9b855b8de32969+0x20/0x29 [ 330.717715][ T8567] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 330.723623][ T8567] bpf_prog_test_run_syscall+0x317/0x4a0 [ 330.729273][ T8567] ? sock_gen_cookie+0x60/0x60 [ 330.734327][ T8567] ? sock_gen_cookie+0x60/0x60 [ 330.739983][ T8567] bpf_prog_test_run+0x321/0x390 [ 330.745117][ T8567] __sys_bpf+0x49d/0x890 [ 330.749373][ T8567] ? bpf_link_show_fdinfo+0x390/0x390 [ 330.755100][ T8567] ? lock_chain_count+0x20/0x20 [ 330.760168][ T8567] __x64_sys_bpf+0x7c/0x90 [ 330.765033][ T8567] do_syscall_64+0x55/0xa0 [ 330.769459][ T8567] ? clear_bhb_loop+0x40/0x90 [ 330.774331][ T8567] ? clear_bhb_loop+0x40/0x90 [ 330.779395][ T8567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.785763][ T8567] RIP: 0033:0x7f7a4519c799 [ 330.790453][ T8567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.810882][ T8567] RSP: 002b:00007f7a46143028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.820545][ T8567] RAX: ffffffffffffffda RBX: 00007f7a45415fa0 RCX: 00007f7a4519c799 [ 330.830301][ T8567] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 330.840931][ T8567] RBP: 00007f7a45232c99 R08: 0000000000000000 R09: 0000000000000000 [ 330.850126][ T8567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.858830][ T8567] R13: 00007f7a45416038 R14: 00007f7a45415fa0 R15: 00007ffda6f71e58 [ 330.867519][ T8567] [ 330.897242][ T8565] EXT4-fs error (device loop3): ext4_quota_enable:7143: comm syz.3.840: Bad quota inode: 4, type: 1 [ 330.921743][ T8565] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 330.962054][ T8565] EXT4-fs (loop3): mount failed [ 330.973058][ T23] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 331.068318][ T23] usb 1-1: USB disconnect, device number 22