last executing test programs: 5m5.028634992s ago: executing program 0 (id=3226): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r2) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4040841) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet(0x2, 0x3, 0x2) 5m4.410328583s ago: executing program 0 (id=3229): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0xffff1000, 0x8, 0xffffffffffffffff, 0x9}) 5m3.482567134s ago: executing program 0 (id=3233): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={0x0, 0x0, 0x10, r1}, 0x18) 5m2.876728918s ago: executing program 0 (id=3237): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 5m2.207448988s ago: executing program 0 (id=3240): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000b00)=[{&(0x7f0000000100)="010000005cc135121e58e6d23b58765bc592fd71b19c05d42faf337052402ce7f05b0cc598bdfa5c764d4fa7d4851146c45fa801224f584e25daa2c6e13e0e3002f50b275e280221a9972639c4820848a2c97e2ae425e574fcb6f40a392cd788af17c0e9b4a21e623aea4797da0593", 0x6f}, {0x0}, {&(0x7f0000000000)="ba70de013ead54a64ba4716a32cd38f5f539bb66d45ddb4badcba263146f9e4ff7c8b44b1f3eed131a11f36af74202eb7d1b1314ae7c8ddaafb1199c8a", 0x3d}, {&(0x7f00000003c0)="f57cac9ffd4700badc6f0a862276f904d7f173aff011bca7f204f01fc8d551a8c4912c52f8281998be20ede3b8cb4af86a03f07b55823d63e4be7c68c1a973402bd10f74659b91fdfceb4617364fa5ee3fc735f750b54c5a05ebf2e6419c880cbdccd64016ed0a2f21519135b6ad46a6a67f8cd5f8191f8bea6e0398be33491b45d8c8922e8829477fc32df1eef918d5876ff78b89a1", 0x96}, {&(0x7f0000000900)="46ddb7fd40427f94dc1189b126d3279ed02b384683089250450253381cd9f37192334acdb9f101c444626fd406180e0594677bfde9846ff6c3eead32a65a8efdca4d8f86a7858568b9b728714dcd307c27fa7b89fe3cf5dc4241d0679a06609e843c9b610d835f9cf1354538abfc5288fbf696fa6b8a1a23c87f1271c28172ef1e492d256d1d88a309da9bec024144a813b7d1e80eb03d4b6b349c81bd6b22e238586fb3a3902b69e4d83e2b253cfaff084aad22", 0xb4}, {&(0x7f00000009c0)="109b1e79f7a55e366b53aa93fc651d77f43258dc13f88b87d61f8b230fa0d0b370d1c48622c360f2c91e2576546df4a97f90b3dadead089e70212f8a94fdb29fb0b18c40474295843fd7d65f80e4d313db30fb2e1fbac29fb11856", 0x5b}, {&(0x7f0000000a40)="40b991110b7c2b4e17b03ddde889d90ac678cb761cd90c77b88f02941e45672d33d215e3c2908c8e3ffcbfe0a53d950bbd72f5aa203a605fec8a5138ae1cbea0aaf340412f5d57f24df6bef999a9443e96d271eb501cfae463825ab9d62bbfc9728f715bbc3c65bbf258834a9ab31d86547142a5cf8eed870565959e1565e34df6cdc6107afd7138be9ee3f5d3b929a2aec38d", 0x93}], 0x7, 0x0, 0x0) 5m1.824651341s ago: executing program 0 (id=3242): fsopen(0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r1, &(0x7f0000000300)="da9019d02404e49cf90a0a4363d1", 0xe, 0x8800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x12) 4m46.512582753s ago: executing program 32 (id=3242): fsopen(0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r1, &(0x7f0000000300)="da9019d02404e49cf90a0a4363d1", 0xe, 0x8800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x12) 7.871179432s ago: executing program 1 (id=4248): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x526d630517582f27, 0x81}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f00000002c0), 0x15) splice(r5, 0x0, r7, 0x0, 0x19404, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 7.747940044s ago: executing program 3 (id=4250): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008c001, 0x0) 6.630480011s ago: executing program 1 (id=4256): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8aa03, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0xc000003, 0x0, 0x0, 0x1, 0xdd}]}) 6.525007262s ago: executing program 4 (id=4257): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000b00)=[{&(0x7f0000000100)="010000005cc135121e58e6d23b58765bc592fd71b19c05d42faf337052402ce7f05b0cc598bdfa5c764d4fa7d4851146c45fa801224f584e25daa2c6e13e0e3002f50b275e280221a9972639c4820848a2c97e2ae425e574fcb6f40a392cd788af17c0e9b4a21e623a", 0x69}, {0x0}, {&(0x7f0000000000)="ba70de013ead54a64ba4716a32cd38f5f539bb66d45ddb4badcba263146f9e4ff7c8b44b1f3eed131a11f36af74202eb7d1b1314ae7c8ddaafb1199c8a", 0x3d}, {&(0x7f00000003c0)="f57cac9ffd4700badc6f0a862276f904d7f173aff011bca7f204f01fc8d551a8c4912c52f8281998be20ede3b8cb4af86a03f07b55823d63e4be7c68c1a973402bd10f74659b91fdfceb4617364fa5ee3fc735f750b54c5a05ebf2e6419c880cbdccd64016ed0a2f21519135b6ad46a6a67f8cd5f8191f8bea6e0398be33491b45d8c8922e8829477fc32df1eef918d5876ff78b89a1", 0x96}, {&(0x7f0000000900)="46ddb7fd40427f94dc1189b126d3279ed02b384683089250450253381cd9f37192334acdb9f101c444626fd406180e0594677bfde9846ff6c3eead32a65a8efdca4d8f86a7858568b9b728714dcd307c27fa7b89fe3cf5dc4241d0679a06609e843c9b610d835f9cf1354538abfc5288fbf696fa6b8a1a23c87f1271c28172ef1e492d256d1d88a309da9bec024144a813b7d1e80eb03d4b6b349c81bd6b22e238586fb3a3902b69e4d83e2b253cfaff084aad228bff8a64b4", 0xb9}, {&(0x7f00000009c0)="109b1e79f7a55e366b53aa93fc651d77f43258dc13f88b87d61f8b230fa0d0b370d1c48622c360f2c91e2576546df4a97f90b3dadead089e70212f8a94fdb29fb0b18c40474295843fd7d65f80e4d313db30fb2e1fbac29fb11856", 0x5b}, {&(0x7f0000000a40)="40b991110b7c2b4e17b03ddde889d90ac678cb761cd90c77b88f02941e45672d33d215e3c2908c8e3ffcbfe0a53d950bbd72f5aa203a605fec8a5138ae1cbea0aaf340412f5d57f24df6bef999a9443e96d271eb501cfae463825ab9d62bbfc9728f715bbc3c65bbf258834a9ab31d86547142a5cf8eed870565959e1565e34df6cdc6107afd7138be9ee3f5d3b929a2aec38d", 0x93}], 0x7, 0x0, 0x0) 6.376431235s ago: executing program 2 (id=4258): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_io_uring_setup(0x7cd8, &(0x7f0000000200)={0x0, 0xd703, 0x4, 0x0, 0xc6, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300)) 5.944300756s ago: executing program 4 (id=4259): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r1, &(0x7f00000002c0)="ab", 0x1, 0x6ed}, 0x0]) 5.943861771s ago: executing program 1 (id=4260): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.908030278s ago: executing program 2 (id=4261): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x397, 0x80d, 0x47, 0x2008, 0x16, "0316d2a2478294f3902707f67f047714a77a00"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x7) 5.4806305s ago: executing program 2 (id=4263): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1b4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x15a011, 0x0) 5.396766086s ago: executing program 4 (id=4264): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x94000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r6, 0x0, 0x0) 5.328478628s ago: executing program 1 (id=4265): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r4, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.948419898s ago: executing program 2 (id=4267): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) 4.849444944s ago: executing program 4 (id=4268): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.365265023s ago: executing program 5 (id=4270): syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x4, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x3, 0xa2}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 4.296054143s ago: executing program 3 (id=4271): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 3.817111458s ago: executing program 5 (id=4272): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, 0x0) 3.470237539s ago: executing program 5 (id=4273): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x1e, 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202", @ANYRESDEC=r4], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) read$char_usb(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r8], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x40010) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r9) 2.281006858s ago: executing program 3 (id=4274): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x89, r1, 0x0, 0x0, 0x1, 0x0, 0x2}]) 1.844534655s ago: executing program 1 (id=4275): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.671466178s ago: executing program 3 (id=4276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 1.31856296s ago: executing program 4 (id=4277): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1b4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x15a011, 0x0) 996.881048ms ago: executing program 3 (id=4278): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x94000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r6, 0x0, 0x0) 883.371056ms ago: executing program 5 (id=4279): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004800)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 697.887908ms ago: executing program 2 (id=4280): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000b00)=[{&(0x7f0000000100)="010000005cc135121e58e6d23b58765bc592fd71b19c05d42faf337052402ce7f05b0cc598bdfa5c764d4fa7d4851146c45fa801224f584e25daa2c6e13e0e3002f50b275e280221a9972639c4820848a2c97e2ae425e574fcb6f40a392cd788af17c0e9b4a21e623aea4797", 0x6c}, {0x0}, {&(0x7f0000000000)="ba70de013ead54a64ba4716a32cd38f5f539bb66d45ddb4badcba263146f9e4ff7c8b44b1f3eed131a11f36af74202eb7d1b1314ae7c8ddaafb1199c8a", 0x3d}, {&(0x7f00000003c0)="f57cac9ffd4700badc6f0a862276f904d7f173aff011bca7f204f01fc8d551a8c4912c52f8281998be20ede3b8cb4af86a03f07b55823d63e4be7c68c1a973402bd10f74659b91fdfceb4617364fa5ee3fc735f750b54c5a05ebf2e6419c880cbdccd64016ed0a2f21519135b6ad46a6a67f8cd5f8191f8bea6e0398be33491b45d8c8922e8829477fc32df1eef918d5876ff78b89a1", 0x96}, {&(0x7f0000000900)="46ddb7fd40427f94dc1189b126d3279ed02b384683089250450253381cd9f37192334acdb9f101c444626fd406180e0594677bfde9846ff6c3eead32a65a8efdca4d8f86a7858568b9b728714dcd307c27fa7b89fe3cf5dc4241d0679a06609e843c9b610d835f9cf1354538abfc5288fbf696fa6b8a1a23c87f1271c28172ef1e492d256d1d88a309da9bec024144a813b7d1e80eb03d4b6b349c81bd6b22e238586fb3a3902b69e4d83e2b253cfaff084aad228bff8a64b4", 0xb9}, {&(0x7f00000009c0)="109b1e79f7a55e366b53aa93fc651d77f43258dc13f88b87d61f8b230fa0d0b370d1c48622c360f2c91e2576546df4a97f90b3dadead089e70212f8a94fdb29fb0b18c40474295843fd7d65f80e4d313db30fb2e1fbac29fb11856", 0x5b}, {&(0x7f0000000a40)="40b991110b7c2b4e17b03ddde889d90ac678cb761cd90c77b88f02941e45672d33d215e3c2908c8e3ffcbfe0a53d950bbd72f5aa203a605fec8a5138ae1cbea0aaf340412f5d57f24df6bef999a9443e96d271eb501cfae463825ab9d62bbfc9728f715bbc3c65bbf258834a9ab31d86547142a5cf8eed870565959e1565e34df6cdc6107afd7138be9ee3f5d3b929a2aec38d", 0x93}], 0x7, 0x0, 0x0) 667.877282ms ago: executing program 1 (id=4281): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008c001, 0x0) 599.544695ms ago: executing program 4 (id=4282): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfe, 0x85, 0x71, 0x8, 0xb48, 0x3007, 0x4f64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x23, 0x52, 0x26}}]}}]}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x500) pread64(r1, 0x0, 0xea, 0x0) 523.247106ms ago: executing program 3 (id=4283): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x94, &(0x7f0000000180)="4171b611def3109367e1045dc1096c3ecb163c4cc38b5cb880551cc5dc79be0e85b878715a9c07008a020000006d8930824db59429505b187c8da9bfd26b2951046b50ca6d9fecae354d735d4e98a5e94759968ddc4b31b8c1bef99b3971d7d47468262bba429a3a84a4e360e582f7a9a0e23af6eb86ce0529be80a18442f1565fb9d29baca34bbde34a74308132ac166d84b3cd") 338.107774ms ago: executing program 5 (id=4284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0xe4ffffff}, 0x9}, [{}, {0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {0x9}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x2000000}, {0x0, 0x0, 0x2000000}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffa}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x400000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfff}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x2}, {}, {0x3}, {}, {}, {}, {}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffe}, {0x0, 0x400000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xe68}}, 0x0) 212.832402ms ago: executing program 2 (id=4285): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r4, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 5 (id=4286): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x89, r1, 0x0, 0x0, 0x1, 0x0, 0x2}]) kernel console output (not intermixed with test programs): _slave_0) entered blocking state [ 1008.873154][ T3902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.034106][ T3902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.041807][ T3902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.958929][T13598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.501804][T13598] veth0_vlan: entered promiscuous mode [ 1011.605448][T13598] veth1_vlan: entered promiscuous mode [ 1011.883693][T13598] veth0_macvtap: entered promiscuous mode [ 1011.958018][T13598] veth1_macvtap: entered promiscuous mode [ 1012.171804][T13598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.256341][T13743] loop3: detected capacity change from 0 to 256 [ 1012.297650][T13598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.387438][T12586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.447338][T12586] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.499689][T12586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.605388][T11342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.749825][T13743] FAT-fs (loop3): Directory bread(block 64) failed [ 1012.757002][T13743] FAT-fs (loop3): Directory bread(block 65) failed [ 1012.764274][T13743] FAT-fs (loop3): Directory bread(block 66) failed [ 1012.771177][T13743] FAT-fs (loop3): Directory bread(block 67) failed [ 1012.778043][T13743] FAT-fs (loop3): Directory bread(block 68) failed [ 1012.785931][T13743] FAT-fs (loop3): Directory bread(block 69) failed [ 1012.793480][T13743] FAT-fs (loop3): Directory bread(block 70) failed [ 1012.800374][T13743] FAT-fs (loop3): Directory bread(block 71) failed [ 1012.807248][T13743] FAT-fs (loop3): Directory bread(block 72) failed [ 1012.820784][T13743] FAT-fs (loop3): Directory bread(block 73) failed [ 1014.109864][T13761] loop1: detected capacity change from 0 to 512 [ 1014.287034][T13761] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3211: inode has both inline data and extents flags [ 1014.390260][T13761] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3211: couldn't read orphan inode 15 (err -117) [ 1014.415400][T13761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.841092][ T5858] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1015.040339][ T5858] usb 2-1: Using ep0 maxpacket: 32 [ 1015.079430][ T5858] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1015.087898][ T5858] usb 2-1: config 0 has no interface number 0 [ 1015.196071][ T5858] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1015.205635][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.214262][ T5858] usb 2-1: Product: syz [ 1015.218677][ T5858] usb 2-1: Manufacturer: syz [ 1015.223774][ T5858] usb 2-1: SerialNumber: syz [ 1015.293597][ T5858] usb 2-1: config 0 descriptor?? [ 1015.325090][ T5858] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1015.560391][ T5858] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1015.623673][ T5858] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1015.942435][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1015.954427][ T9] usb 2-1: USB disconnect, device number 33 [ 1016.036415][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1016.084527][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1016.106279][ T9] quatech2 2-1:0.51: device disconnected [ 1016.681148][T12642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.157434][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.165827][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.306551][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.315027][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.084779][T13814] fuseblk: Bad value for 'fd' [ 1019.254216][T13819] sctp: [Deprecated]: syz.1.3234 (pid 13819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1019.254216][T13819] Use struct sctp_sack_info instead [ 1020.170289][ T5803] Bluetooth: hci5: command 0x0406 tx timeout [ 1022.055410][T13847] fuseblk: Bad value for 'fd' [ 1023.295454][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.302286][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1026.889721][T13868] loop1: detected capacity change from 0 to 1024 [ 1027.673442][T13878] fuseblk: Bad value for 'fd' [ 1027.745490][T13881] netlink: 'syz.2.3260': attribute type 4 has an invalid length. [ 1027.899817][ T4122] hfsplus: b-tree write err: -5, ino 4 [ 1029.129280][T13885] loop3: detected capacity change from 0 to 4096 [ 1033.570201][T13920] loop3: detected capacity change from 0 to 4096 [ 1035.008297][T13929] loop2: detected capacity change from 0 to 512 [ 1035.120746][T13929] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3282: inode has both inline data and extents flags [ 1035.210939][T13929] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3282: couldn't read orphan inode 15 (err -117) [ 1035.229738][T13929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.619482][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.031769][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1037.075812][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1037.091945][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1037.252718][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1037.264684][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1038.887598][T13942] chnl_net:caif_netlink_parms(): no params data found [ 1039.329349][ T30] audit: type=1326 audit(1763465060.018:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1039.354374][ T30] audit: type=1326 audit(1763465060.018:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1039.378565][ T30] audit: type=1326 audit(1763465060.078:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1039.401287][ T30] audit: type=1326 audit(1763465060.078:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1039.424376][ T30] audit: type=1326 audit(1763465060.088:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1039.449267][ T30] audit: type=1326 audit(1763465060.088:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1039.470399][ T5803] Bluetooth: hci2: command tx timeout [ 1039.472695][ T30] audit: type=1326 audit(1763465060.088:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1039.499550][ T30] audit: type=1326 audit(1763465060.088:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1039.522399][ T30] audit: type=1326 audit(1763465060.118:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1039.547350][ T30] audit: type=1326 audit(1763465060.118:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1039.749672][T13963] loop3: detected capacity change from 0 to 128 [ 1039.957779][T13963] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1040.072016][T13963] ext4 filesystem being mounted at /271/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.696118][T10627] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1041.195753][T13942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.203411][T13942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.211350][T13942] bridge_slave_0: entered allmulticast mode [ 1041.320423][T13942] bridge_slave_0: entered promiscuous mode [ 1041.392910][T13942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.400580][T13942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.408308][T13942] bridge_slave_1: entered allmulticast mode [ 1041.493518][T13942] bridge_slave_1: entered promiscuous mode [ 1041.530958][ T5803] Bluetooth: hci2: command tx timeout [ 1041.859564][T13942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.940442][T13942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.317647][T13942] team0: Port device team_slave_0 added [ 1042.370627][T13942] team0: Port device team_slave_1 added [ 1042.732571][T13942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.739706][T13942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.766980][T13942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.894215][T13942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.901691][T13942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.931078][T13942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.526359][T13942] hsr_slave_0: entered promiscuous mode [ 1043.540935][T13942] hsr_slave_1: entered promiscuous mode [ 1043.549661][T13942] debugfs: 'hsr0' already exists in 'hsr' [ 1043.555862][T13942] Cannot create hsr debugfs directory [ 1043.610771][ T5803] Bluetooth: hci2: command tx timeout [ 1044.691158][T13996] loop3: detected capacity change from 0 to 512 [ 1044.822842][T13996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.049277][T13942] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1045.152473][T13942] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1045.283231][T13942] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1045.343642][T13942] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1045.535381][T10627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.690962][T13600] Bluetooth: hci2: command tx timeout [ 1045.771620][T13600] Bluetooth: hci1: command 0x0406 tx timeout [ 1046.667781][T13942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.933068][T13942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.065523][ T4122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.073174][ T4122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.250615][ T4122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.258152][ T4122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.812629][T14030] netlink: 'syz.4.3317': attribute type 2 has an invalid length. [ 1050.017862][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1050.225714][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1050.322582][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.333372][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1050.344702][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1050.354691][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1050.365118][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1050.525516][T13942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.683056][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1050.693643][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1050.708180][ T9] usb 2-1: Manufacturer: syz [ 1050.820394][ T9] usb 2-1: config 0 descriptor?? [ 1051.301721][T14035] loop4: detected capacity change from 0 to 4096 [ 1054.048893][T11342] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.071076][ T9] rc_core: IR keymap rc-hauppauge not found [ 1054.085919][ T9] Registered IR keymap rc-empty [ 1054.103613][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1054.150536][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1054.200655][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1054.216345][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 1054.313827][T11342] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.409052][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1054.451420][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1054.834688][T11342] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.260531][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.264134][T11342] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.280754][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.301328][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.340375][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.360968][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.380704][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.414269][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.440365][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1055.489586][ T9] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1055.499209][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1055.546690][T14062] netlink: 'syz.4.3328': attribute type 2 has an invalid length. [ 1055.760529][ T9] usb 2-1: USB disconnect, device number 34 [ 1055.892291][T13942] veth0_vlan: entered promiscuous mode [ 1056.099135][T13942] veth1_vlan: entered promiscuous mode [ 1056.166960][T11342] bridge_slave_1: left allmulticast mode [ 1056.174585][T11342] bridge_slave_1: left promiscuous mode [ 1056.181863][T11342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.298610][T11342] bridge_slave_0: left allmulticast mode [ 1056.305684][T11342] bridge_slave_0: left promiscuous mode [ 1056.314153][T11342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.183327][T11342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.261318][T11342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.285134][T11342] bond0 (unregistering): Released all slaves [ 1057.826547][T13942] veth0_macvtap: entered promiscuous mode [ 1058.083150][ T5858] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1058.158042][T13942] veth1_macvtap: entered promiscuous mode [ 1058.189486][T14084] loop1: detected capacity change from 0 to 1024 [ 1058.300558][ T5858] usb 3-1: Using ep0 maxpacket: 16 [ 1058.445934][T11342] hsr_slave_0: left promiscuous mode [ 1058.638853][T11342] hsr_slave_1: left promiscuous mode [ 1058.648479][T11342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.656374][T11342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.754555][T11342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.760497][ T5858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.762868][T11342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.772606][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1058.772784][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1058.772926][ T5858] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1058.773065][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1058.996736][T11342] veth1_macvtap: left promiscuous mode [ 1059.003030][T11342] veth0_macvtap: left promiscuous mode [ 1059.009194][T11342] veth1_vlan: left promiscuous mode [ 1059.017054][T11342] veth0_vlan: left promiscuous mode [ 1059.430994][ T5858] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1059.441056][ T5858] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1059.449292][ T5858] usb 3-1: Manufacturer: syz [ 1059.510449][ T9333] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1059.644267][ T5858] usb 3-1: config 0 descriptor?? [ 1059.700430][ T9333] usb 4-1: device descriptor read/64, error -71 [ 1060.031025][ T9333] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1060.204583][ T9333] usb 4-1: device descriptor read/64, error -71 [ 1060.257688][ T4231] hfsplus: b-tree write err: -5, ino 4 [ 1060.421248][T11342] team0 (unregistering): Port device team_slave_1 removed [ 1060.448441][ T9333] usb usb4-port1: attempt power cycle [ 1060.462153][T11342] team0 (unregistering): Port device team_slave_0 removed [ 1060.858653][ T9333] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1060.948405][ T9333] usb 4-1: device descriptor read/8, error -71 [ 1061.191441][T13942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.249320][ T9333] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1061.278512][T13942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.360919][ T9333] usb 4-1: device descriptor read/8, error -71 [ 1061.415900][ T2992] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.459467][ T2992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.476612][ T9333] usb usb4-port1: unable to enumerate USB device [ 1061.527291][ T2992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.578670][ T2992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.160124][ T5858] rc_core: IR keymap rc-hauppauge not found [ 1062.170300][ T5858] Registered IR keymap rc-empty [ 1062.175818][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1062.281752][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1062.342805][ T5858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1062.358655][ T5858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 1062.533175][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1062.580680][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1062.631408][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1062.661040][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1062.710738][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1062.760863][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1062.791122][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1062.822750][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1062.870593][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1062.891881][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1062.947732][ T5858] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1062.956151][ T5858] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1063.112454][ T5858] usb 3-1: USB disconnect, device number 33 [ 1063.349220][T14125] loop3: detected capacity change from 0 to 512 [ 1063.579767][T14125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.593458][T14125] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1063.846734][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1063.846816][ T30] audit: type=1800 audit(1763465084.548:57): pid=14125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3347" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1064.733000][T10627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.702345][T14142] loop3: detected capacity change from 0 to 1024 [ 1066.921536][T14089] hfsplus: b-tree write err: -5, ino 4 [ 1068.050493][ T9333] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1068.280833][ T9333] usb 3-1: device descriptor read/64, error -71 [ 1068.565079][ T9333] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1068.778086][ T9333] usb 3-1: device descriptor read/64, error -71 [ 1068.903636][ T9333] usb usb3-port1: attempt power cycle [ 1069.330840][ T9333] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1069.481608][ T9333] usb 3-1: device descriptor read/8, error -71 [ 1069.778025][ T9333] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1069.872711][ T9333] usb 3-1: device descriptor read/8, error -71 [ 1069.916987][T14184] loop1: detected capacity change from 0 to 512 [ 1070.020704][ T9333] usb usb3-port1: unable to enumerate USB device [ 1070.262022][T14184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.275424][T14184] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1070.558407][ T30] audit: type=1800 audit(1763465091.258:58): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3359" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1071.034725][ T4288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.043051][ T4288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.343904][ T4231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.352225][ T4231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.370950][T13600] Bluetooth: hci0: command 0x0406 tx timeout [ 1071.463458][T12642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.626491][T14228] loop5: detected capacity change from 0 to 256 [ 1074.780428][ T9333] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1074.982900][ T9333] usb 4-1: device descriptor read/64, error -71 [ 1075.083689][T14228] FAT-fs (loop5): Directory bread(block 64) failed [ 1075.090743][T14228] FAT-fs (loop5): Directory bread(block 65) failed [ 1075.097751][T14228] FAT-fs (loop5): Directory bread(block 66) failed [ 1075.104721][T14228] FAT-fs (loop5): Directory bread(block 67) failed [ 1075.111852][T14228] FAT-fs (loop5): Directory bread(block 68) failed [ 1075.118594][T14228] FAT-fs (loop5): Directory bread(block 69) failed [ 1075.125711][T14228] FAT-fs (loop5): Directory bread(block 70) failed [ 1075.132827][T14228] FAT-fs (loop5): Directory bread(block 71) failed [ 1075.139699][T14228] FAT-fs (loop5): Directory bread(block 72) failed [ 1075.148016][T14228] FAT-fs (loop5): Directory bread(block 73) failed [ 1075.251127][ T9333] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1075.450924][ T9333] usb 4-1: device descriptor read/64, error -71 [ 1075.584409][ T9333] usb usb4-port1: attempt power cycle [ 1075.980363][ T9333] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1076.067688][ T9333] usb 4-1: device descriptor read/8, error -71 [ 1076.334454][ T9333] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1076.457188][ T9333] usb 4-1: device descriptor read/8, error -71 [ 1076.577883][ T9333] usb usb4-port1: unable to enumerate USB device [ 1077.828312][T14266] loop4: detected capacity change from 0 to 512 [ 1077.925190][T14266] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1077.971458][T14264] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3384'. [ 1078.092011][T14266] EXT4-fs (loop4): 1 truncate cleaned up [ 1078.100256][T14266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.118878][T14269] loop5: detected capacity change from 0 to 256 [ 1078.635095][T14269] FAT-fs (loop5): Directory bread(block 64) failed [ 1078.642898][T14269] FAT-fs (loop5): Directory bread(block 65) failed [ 1078.650616][T14269] FAT-fs (loop5): Directory bread(block 66) failed [ 1078.662335][T14269] FAT-fs (loop5): Directory bread(block 67) failed [ 1078.669844][T14269] FAT-fs (loop5): Directory bread(block 68) failed [ 1078.678726][T14269] FAT-fs (loop5): Directory bread(block 69) failed [ 1078.683738][T13159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.685967][T14269] FAT-fs (loop5): Directory bread(block 70) failed [ 1078.701527][T14269] FAT-fs (loop5): Directory bread(block 71) failed [ 1078.709376][T14269] FAT-fs (loop5): Directory bread(block 72) failed [ 1078.716284][T14269] FAT-fs (loop5): Directory bread(block 73) failed [ 1079.588397][ T9333] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1079.890201][ T9333] usb 2-1: Using ep0 maxpacket: 16 [ 1079.957184][ T9333] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.970032][ T9333] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1079.979305][ T9333] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1079.992915][ T9333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.264102][ T9333] usb 2-1: config 0 descriptor?? [ 1081.130876][ T9333] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1081.331424][ T9333] usb 6-1: Using ep0 maxpacket: 16 [ 1081.406759][ T9333] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.422164][ T9333] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1081.433026][ T9333] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1081.442503][ T9333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.619226][ T9333] usb 6-1: config 0 descriptor?? [ 1082.240400][T14314] loop3: detected capacity change from 0 to 512 [ 1082.291039][T14314] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1082.371839][T14314] EXT4-fs (loop3): 1 truncate cleaned up [ 1082.380560][T14314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.983056][T10627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.081514][ T5858] usb 2-1: USB disconnect, device number 35 [ 1084.033381][ T5858] usb 6-1: USB disconnect, device number 2 [ 1084.673128][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.680295][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1085.870631][T14352] loop5: detected capacity change from 0 to 512 [ 1085.929407][T14352] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1085.989315][T14352] EXT4-fs (loop5): 1 truncate cleaned up [ 1085.997746][T14352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1086.103843][ T9333] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1086.330734][ T9333] usb 4-1: Using ep0 maxpacket: 16 [ 1086.396184][ T9333] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.407094][ T9333] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1086.416922][ T9333] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1086.427055][ T9333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.523346][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.574071][ T9333] usb 4-1: config 0 descriptor?? [ 1087.200306][ T9333] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1087.418651][ T9333] usb 6-1: Using ep0 maxpacket: 16 [ 1087.434108][ T9333] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.444753][ T9333] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1087.454392][ T9333] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1087.467828][ T9333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.623654][ T9333] usb 6-1: config 0 descriptor?? [ 1089.086472][ T9333] usb 4-1: USB disconnect, device number 33 [ 1089.981731][ T9333] usb 6-1: USB disconnect, device number 3 [ 1091.616857][T14408] loop5: detected capacity change from 0 to 128 [ 1091.860062][T14411] loop2: detected capacity change from 0 to 4096 [ 1092.032750][T14411] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1092.091641][T14408] FAT-fs (loop5): Directory bread(block 162) failed [ 1092.098572][T14408] FAT-fs (loop5): Directory bread(block 163) failed [ 1092.105720][T14408] FAT-fs (loop5): Directory bread(block 164) failed [ 1092.112752][T14408] FAT-fs (loop5): Directory bread(block 165) failed [ 1092.119650][T14408] FAT-fs (loop5): Directory bread(block 166) failed [ 1092.126736][T14408] FAT-fs (loop5): Directory bread(block 167) failed [ 1092.133728][T14408] FAT-fs (loop5): Directory bread(block 168) failed [ 1092.140966][T14408] FAT-fs (loop5): Directory bread(block 169) failed [ 1092.400372][T14411] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1092.409483][T14411] System zones: 0-5 [ 1092.554878][T14411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.279293][T14408] FAT-fs (loop5): Directory bread(block 162) failed [ 1093.286322][T14408] FAT-fs (loop5): Directory bread(block 163) failed [ 1093.373668][T14417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3431'. [ 1093.520460][T14408] syz.5.3429: attempt to access beyond end of device [ 1093.520460][T14408] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 1093.534342][T14408] syz.5.3429: attempt to access beyond end of device [ 1093.534342][T14408] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 1096.986462][ T9333] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1097.226323][ T9333] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1097.236142][ T9333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.374039][ T9333] usb 5-1: config 0 descriptor?? [ 1097.474840][ T9333] cp210x 5-1:0.0: cp210x converter detected [ 1097.939721][ T9333] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1097.948723][ T9333] cp210x 5-1:0.0: querying part number failed [ 1098.184319][ T9333] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1100.153940][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.234516][ T9333] usb 5-1: USB disconnect, device number 22 [ 1100.282704][ T9333] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1100.294772][ T9333] cp210x 5-1:0.0: device disconnected [ 1101.886421][T14462] loop1: detected capacity change from 0 to 8192 [ 1101.990429][ T5858] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1102.210569][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 1102.267645][ T5858] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1102.276522][ T5858] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1102.286175][ T5858] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1102.296341][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1102.310452][ T5858] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1102.322029][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1102.333706][ T5858] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1102.344089][ T5858] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1102.357645][ T5858] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1102.367210][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.773178][ T5858] usb 5-1: config 0 descriptor?? [ 1102.795149][T14468] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1103.093178][ T5858] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1103.262398][ T5858] usb 5-1: USB disconnect, device number 23 [ 1103.336803][ T5858] usblp0: removed [ 1104.950589][ T9333] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1105.213450][ T9333] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1105.224059][ T9333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.315847][ T9333] usb 2-1: config 0 descriptor?? [ 1105.394395][ T9333] cp210x 2-1:0.0: cp210x converter detected [ 1105.625851][ T9333] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1105.634002][ T9333] cp210x 2-1:0.0: querying part number failed [ 1105.752692][ T9333] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1107.251222][T12915] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1107.464537][T12915] usb 4-1: Using ep0 maxpacket: 32 [ 1107.536655][T12915] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1107.546028][T12915] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1107.555809][T12915] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1107.565260][T12915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1107.575319][T12915] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1107.585594][T12915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1107.597376][T12915] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1107.607942][T12915] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1107.621611][T12915] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1107.635208][T12915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.944869][ T9333] usb 2-1: USB disconnect, device number 36 [ 1107.964869][ T9333] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1107.975596][ T9333] cp210x 2-1:0.0: device disconnected [ 1107.996594][T12915] usb 4-1: config 0 descriptor?? [ 1108.005607][T14518] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1108.276533][T12915] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1108.368343][T12915] usb 4-1: USB disconnect, device number 34 [ 1108.441105][T12915] usblp0: removed [ 1108.491218][T14531] loop5: detected capacity change from 0 to 1024 [ 1109.592938][T14538] loop4: detected capacity change from 0 to 4096 [ 1109.723901][ T4122] hfsplus: bad catalog file entry [ 1109.729418][ T4122] hfsplus: b-tree write err: -5, ino 3 [ 1112.275190][T14575] loop5: detected capacity change from 0 to 256 [ 1112.369998][T14579] loop3: detected capacity change from 0 to 1024 [ 1112.552027][ T5858] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1112.791121][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 1112.813870][ T5858] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1112.823052][ T5858] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1112.832238][ T5858] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1112.841550][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1112.851944][ T5858] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1112.865962][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1112.878951][ T5858] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1112.889468][ T5858] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1112.904016][ T5858] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1112.913695][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.000774][ T5858] usb 5-1: config 0 descriptor?? [ 1113.009516][T14572] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1113.032402][ T1890] hfsplus: bad catalog file entry [ 1113.037798][ T1890] hfsplus: b-tree write err: -5, ino 3 [ 1113.279350][ T5858] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1113.357874][T14575] FAT-fs (loop5): Directory bread(block 64) failed [ 1113.365177][T14575] FAT-fs (loop5): Directory bread(block 65) failed [ 1113.377193][T14575] FAT-fs (loop5): Directory bread(block 66) failed [ 1113.385611][T14575] FAT-fs (loop5): Directory bread(block 67) failed [ 1113.393136][T14575] FAT-fs (loop5): Directory bread(block 68) failed [ 1113.400251][T14575] FAT-fs (loop5): Directory bread(block 69) failed [ 1113.407207][T14575] FAT-fs (loop5): Directory bread(block 70) failed [ 1113.414374][T14575] FAT-fs (loop5): Directory bread(block 71) failed [ 1113.421428][T14575] FAT-fs (loop5): Directory bread(block 72) failed [ 1113.428163][T14575] FAT-fs (loop5): Directory bread(block 73) failed [ 1113.525015][T12915] usb 5-1: USB disconnect, device number 24 [ 1113.563800][T12915] usblp0: removed [ 1115.692661][T14608] loop2: detected capacity change from 0 to 1024 [ 1116.065856][ T5858] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1116.265051][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 1116.286785][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.297872][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1116.309287][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1116.319367][ T5858] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1116.329466][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1116.845100][T14622] loop3: detected capacity change from 0 to 256 [ 1117.120512][ T5858] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1117.130166][ T5858] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1117.138386][ T5858] usb 2-1: Manufacturer: syz [ 1117.163165][ T5858] usb 2-1: config 0 descriptor?? [ 1117.270756][T14624] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 1117.454745][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 1117.500866][T14622] FAT-fs (loop3): Directory bread(block 64) failed [ 1117.508061][T14622] FAT-fs (loop3): Directory bread(block 65) failed [ 1117.515199][T14622] FAT-fs (loop3): Directory bread(block 66) failed [ 1117.522141][T14622] FAT-fs (loop3): Directory bread(block 67) failed [ 1117.529098][T14622] FAT-fs (loop3): Directory bread(block 68) failed [ 1117.536100][T14622] FAT-fs (loop3): Directory bread(block 69) failed [ 1117.543214][T14622] FAT-fs (loop3): Directory bread(block 70) failed [ 1117.550231][T14622] FAT-fs (loop3): Directory bread(block 71) failed [ 1117.557080][T14622] FAT-fs (loop3): Directory bread(block 72) failed [ 1117.568632][T14622] FAT-fs (loop3): Directory bread(block 73) failed [ 1119.760340][T12915] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1119.891071][ T5858] rc_core: IR keymap rc-hauppauge not found [ 1119.897178][ T5858] Registered IR keymap rc-empty [ 1119.903010][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1119.970373][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1120.020356][T12915] usb 6-1: Using ep0 maxpacket: 32 [ 1120.031481][ T5858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1120.046983][ T5858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 1120.141403][T12915] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1120.150282][T12915] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1120.159119][T12915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1120.169045][T12915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1120.179260][T12915] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1120.190037][T12915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1120.203745][T12915] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1120.214376][T12915] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1120.232252][T12915] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1120.243039][T12915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.280986][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1120.340574][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1120.375682][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1120.439781][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1120.482661][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1120.550934][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1120.573297][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1120.602900][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1120.616779][T12915] usb 6-1: config 0 descriptor?? [ 1120.643398][T14626] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1120.653158][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1120.700960][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1120.766931][ T5858] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1120.775380][ T5858] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1120.918013][ T5858] usb 2-1: USB disconnect, device number 37 [ 1121.008391][T12915] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1121.170974][T12915] usb 6-1: USB disconnect, device number 4 [ 1121.231142][T12915] usblp0: removed [ 1122.320849][ T5858] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1122.520628][ T5858] usb 3-1: Using ep0 maxpacket: 16 [ 1122.542732][ T5858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.553373][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1122.564674][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1122.574997][ T5858] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1122.588997][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1122.771791][ T5858] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1122.781678][ T5858] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1122.794011][ T5858] usb 3-1: Manufacturer: syz [ 1122.903253][ T5858] usb 3-1: config 0 descriptor?? [ 1126.385476][T14098] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1126.470862][ T5858] rc_core: IR keymap rc-hauppauge not found [ 1126.483250][ T5858] Registered IR keymap rc-empty [ 1126.488758][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1126.593241][T14098] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1126.603107][T14098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.621234][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1126.665698][ T5858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1126.686244][ T5858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 1126.734203][T14098] usb 2-1: config 0 descriptor?? [ 1126.755817][T14098] cp210x 2-1:0.0: cp210x converter detected [ 1126.820901][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1126.869305][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1126.914883][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1126.945276][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1126.976549][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1127.023212][T14098] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1127.036746][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1127.060568][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1127.092895][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1127.200696][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1127.226780][ T5858] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1127.310000][ T5858] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1127.318245][ T5858] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1127.383221][ T5858] usb 3-1: USB disconnect, device number 38 [ 1129.219693][ T5858] usb 2-1: USB disconnect, device number 38 [ 1129.267932][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1129.278741][ T5858] cp210x 2-1:0.0: device disconnected [ 1131.975759][T14718] Bluetooth: MGMT ver 1.23 [ 1131.980932][T14718] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 1132.483059][ T5858] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1132.710152][ T5858] usb 5-1: Using ep0 maxpacket: 16 [ 1132.745931][ T5858] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.756658][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1132.767976][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1132.778089][ T5858] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1132.788138][ T5858] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1132.902982][ T5858] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1132.912870][ T5858] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1132.921710][ T5858] usb 5-1: Manufacturer: syz [ 1132.987968][ T5858] usb 5-1: config 0 descriptor?? [ 1133.414690][T14731] loop2: detected capacity change from 0 to 512 [ 1133.589426][T14731] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3551: inode has both inline data and extents flags [ 1133.726101][T14731] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3551: couldn't read orphan inode 15 (err -117) [ 1133.834646][T14731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1134.717657][T14740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3555'. [ 1134.755673][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.005005][ T5858] rc_core: IR keymap rc-hauppauge not found [ 1136.011586][ T5858] Registered IR keymap rc-empty [ 1136.017102][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1136.109027][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1136.172663][ T5858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1136.188484][ T5858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 1136.373438][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1136.423096][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1136.454868][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1136.515176][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1136.560592][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1136.596522][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1136.636900][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1136.680441][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1136.760349][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1136.800520][ T5858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1136.835593][ T5858] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1136.844279][ T5858] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1136.987464][ T5858] usb 5-1: USB disconnect, device number 25 [ 1137.016940][T14767] loop4: detected capacity change from 0 to 512 [ 1137.275391][T14767] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3567: inode has both inline data and extents flags [ 1137.332454][T14767] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3567: couldn't read orphan inode 15 (err -117) [ 1137.473631][ T9478] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1137.543147][T14767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1137.670522][ T9478] usb 3-1: Using ep0 maxpacket: 16 [ 1137.710079][ T9478] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.720813][ T9478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1137.732287][ T9478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1137.746128][ T9478] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1137.757569][ T9478] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1137.893080][T13159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.957777][ T9478] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1137.967425][ T9478] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1137.975940][ T9478] usb 3-1: Manufacturer: syz [ 1138.073495][ T9478] usb 3-1: config 0 descriptor?? [ 1140.721981][T14794] loop4: detected capacity change from 0 to 512 [ 1140.900425][T14794] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3580: inode has both inline data and extents flags [ 1140.981018][T14794] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3580: couldn't read orphan inode 15 (err -117) [ 1141.040669][ T9478] rc_core: IR keymap rc-hauppauge not found [ 1141.046768][ T9478] Registered IR keymap rc-empty [ 1141.052634][ T9478] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1141.074272][T14794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1141.124284][ T9478] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1141.173247][ T9478] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1141.189085][ T9478] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 1141.342298][ T9478] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1141.401185][ T9478] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1141.450662][ T9478] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1141.481960][ T9478] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1141.518597][ T9478] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1141.596090][ T9478] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1141.607709][T13159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.637531][ T9478] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1141.666144][ T9478] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1141.727923][ T9478] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1141.780895][ T9478] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1141.825089][ T9478] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1141.840180][ T9478] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1141.911930][ T9478] usb 3-1: USB disconnect, device number 39 [ 1141.920255][T12915] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1142.058390][T14807] loop2: detected capacity change from 0 to 512 [ 1142.170304][T12915] usb 6-1: Using ep0 maxpacket: 8 [ 1142.194147][T14807] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3583: inode has both inline data and extents flags [ 1142.194173][T12915] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1142.194337][T12915] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1142.229502][T12915] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1142.239969][T12915] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1142.257457][T12915] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1142.269361][T12915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.292491][T14807] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3583: couldn't read orphan inode 15 (err -117) [ 1142.373512][T14807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1142.691430][T12915] usb 6-1: usb_control_msg returned -71 [ 1142.697663][T12915] usbtmc 6-1:16.0: can't read capabilities [ 1142.721360][T12915] usb 6-1: USB disconnect, device number 5 [ 1142.798437][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.296047][T14833] loop4: detected capacity change from 0 to 512 [ 1144.326114][T14833] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3595: inode has both inline data and extents flags [ 1144.390889][T14833] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3595: couldn't read orphan inode 15 (err -117) [ 1144.532337][T14833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.345818][T13159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.156833][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.163686][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.779099][T12915] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1147.031865][T12915] usb 4-1: Using ep0 maxpacket: 8 [ 1147.137294][T12915] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1147.148966][T12915] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1147.163568][T12915] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1147.175304][T12915] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1147.189045][T12915] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1147.198582][T12915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.650474][T12915] usb 4-1: usb_control_msg returned -71 [ 1147.656726][T12915] usbtmc 4-1:16.0: can't read capabilities [ 1147.758955][T12915] usb 4-1: USB disconnect, device number 35 [ 1148.531632][T14867] loop5: detected capacity change from 0 to 512 [ 1148.684309][T14867] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3609: inode has both inline data and extents flags [ 1148.834262][T14867] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3609: couldn't read orphan inode 15 (err -117) [ 1148.906195][T14867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1149.332245][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.040724][T14895] loop3: detected capacity change from 0 to 512 [ 1151.198872][T14895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.216849][T14895] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1151.726010][T10627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.014110][T14908] loop2: detected capacity change from 0 to 512 [ 1152.184508][T14908] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3626: inode has both inline data and extents flags [ 1152.258430][T14908] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3626: couldn't read orphan inode 15 (err -117) [ 1152.362707][T14908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1153.212261][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.656750][T14924] loop5: detected capacity change from 0 to 24 [ 1154.874171][T14935] loop3: detected capacity change from 0 to 512 [ 1155.000613][T14935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.013847][T14935] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.435485][T10627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.873384][T14951] loop2: detected capacity change from 0 to 24 [ 1158.520197][T14967] loop3: detected capacity change from 0 to 512 [ 1158.636768][T14967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1158.650206][T14967] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1159.309114][T10627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.755269][T14997] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1162.456315][T15004] loop5: detected capacity change from 0 to 512 [ 1162.674191][T15004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.687386][T15004] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.215875][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.535073][T13600] Bluetooth: hci2: command 0x0406 tx timeout [ 1164.358737][T15029] loop4: detected capacity change from 0 to 24 [ 1164.400202][T12915] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1164.571523][T12915] usb 3-1: Using ep0 maxpacket: 16 [ 1164.621718][T12915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.632626][T12915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1164.644064][T12915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1164.654213][T12915] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1164.664367][T12915] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.862217][T12915] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1164.871967][T12915] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1164.885791][T12915] usb 3-1: Manufacturer: syz [ 1164.947674][T12915] usb 3-1: config 0 descriptor?? [ 1165.511151][T12915] rc_core: IR keymap rc-hauppauge not found [ 1165.517362][T12915] Registered IR keymap rc-empty [ 1165.523176][T12915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1165.597250][T12915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1165.632532][T12915] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1165.648735][T12915] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 1165.776029][T12915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1165.816438][T12915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1165.848290][T12915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1165.880783][T12915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1165.889628][T15041] loop5: detected capacity change from 0 to 512 [ 1165.915425][T12915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1165.950711][T12915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1165.980537][T12915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1166.010686][T12915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1166.032567][T12915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1166.060868][T15041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.074195][T15041] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1166.086011][T12915] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1166.114804][T12915] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1166.123264][T12915] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1166.229639][T12915] usb 3-1: USB disconnect, device number 40 [ 1166.732964][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.881470][T15057] loop3: detected capacity change from 0 to 24 [ 1166.961169][T15055] loop2: detected capacity change from 0 to 512 [ 1167.159778][T15055] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3684: inode has both inline data and extents flags [ 1167.181910][T15055] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3684: couldn't read orphan inode 15 (err -117) [ 1167.272610][T15055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1167.825187][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.007429][T15076] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1169.017323][T15076] block device autoloading is deprecated and will be removed. [ 1169.043690][ T9478] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1169.245604][ T9478] usb 2-1: Using ep0 maxpacket: 16 [ 1169.283606][ T9478] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.295138][ T9478] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.305410][ T9478] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1169.312409][ T9478] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1169.321865][ T9478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.471888][ T9478] usb 2-1: config 0 descriptor?? [ 1169.975124][ T9478] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1170.207858][T12915] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1170.420682][T12915] usb 5-1: Using ep0 maxpacket: 16 [ 1170.451414][T12915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.462174][T12915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1170.473726][T12915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1170.483746][T12915] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1170.493906][T12915] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1170.713631][T12915] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1170.724921][T12915] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1170.738580][T12915] usb 5-1: Manufacturer: syz [ 1170.844572][T12915] usb 5-1: config 0 descriptor?? [ 1171.149689][T15089] loop2: detected capacity change from 0 to 512 [ 1171.240212][ T9478] usb 2-1: reset high-speed USB device number 39 using dummy_hcd [ 1171.299092][T12915] rc_core: IR keymap rc-hauppauge not found [ 1171.308259][T12915] Registered IR keymap rc-empty [ 1171.313962][T12915] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.345860][T12915] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.349520][T15089] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3699: inode has both inline data and extents flags [ 1171.374061][T12915] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1171.391300][T12915] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 1171.425384][T15089] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3699: couldn't read orphan inode 15 (err -117) [ 1171.501962][T12915] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.527058][T12915] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.555173][T15089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.601176][T12915] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.640748][T12915] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.664624][T12915] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.765182][T12915] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.796351][T12915] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.850618][T12915] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.890393][T12915] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.923807][T12915] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.984976][T12915] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1171.993750][T12915] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1172.167381][T12915] usb 5-1: USB disconnect, device number 26 [ 1172.181978][T13598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.936307][ T5858] usb 2-1: USB disconnect, device number 39 [ 1173.386510][T15110] loop4: detected capacity change from 0 to 64 [ 1173.705869][ T30] audit: type=1800 audit(1763465194.398:59): pid=15110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3706" name="file1" dev="loop4" ino=23 res=0 errno=0 [ 1173.706858][T15112] xt_socket: unknown flags 0x8 [ 1175.920362][T15125] loop3: detected capacity change from 0 to 512 [ 1176.100310][T15125] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3712: inode has both inline data and extents flags [ 1176.121563][T15125] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3712: couldn't read orphan inode 15 (err -117) [ 1176.236575][T15125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.644597][T10627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.941782][T15131] loop1: detected capacity change from 0 to 512 [ 1177.039279][T15131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1177.052752][T15131] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1177.603492][T12642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.036499][T15141] loop4: detected capacity change from 0 to 64 [ 1180.927116][T12915] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1181.110272][T12915] usb 6-1: Using ep0 maxpacket: 32 [ 1181.134197][T12915] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1181.143035][T12915] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1181.152081][T12915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1181.165417][T12915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1181.176850][T12915] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1181.186929][T12915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1181.198712][T12915] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1181.209252][T12915] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1181.224758][T12915] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1181.234265][T12915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.346629][T12915] usb 6-1: config 0 descriptor?? [ 1181.355398][T15168] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1181.583400][T12915] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1181.754835][T15170] loop4: detected capacity change from 0 to 512 [ 1181.787547][ C0] usblp0: nonzero read bulk status received: -71 [ 1181.796760][T15168] usblp0: error -71 reading from printer [ 1181.803212][ C0] usblp0: nonzero read bulk status received: -71 [ 1181.880403][T12915] usb 6-1: USB disconnect, device number 6 [ 1181.921860][T15170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1181.941474][T15170] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1181.946712][T12915] usblp0: removed [ 1182.332235][T13159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.640243][T15175] loop4: detected capacity change from 0 to 64 [ 1184.959049][T15202] loop5: detected capacity change from 0 to 512 [ 1185.041166][T15202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.059036][T15202] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1185.090339][ T5858] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1185.271811][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.282532][ T5858] usb 2-1: config 0 has no interfaces? [ 1185.288251][ T5858] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1185.301131][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.335260][ T5858] usb 2-1: config 0 descriptor?? [ 1185.357920][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.632076][T12915] usb 2-1: USB disconnect, device number 40 [ 1185.769218][T15207] loop5: detected capacity change from 0 to 512 [ 1185.978448][T15207] EXT4-fs error (device loop5): __ext4_fill_super:5512: inode #2: comm syz.5.3742: invalid fast symlink length 39 [ 1186.028374][T15207] EXT4-fs (loop5): get root inode failed [ 1186.034461][T15207] EXT4-fs (loop5): mount failed [ 1188.795219][T15217] loop1: detected capacity change from 0 to 128 [ 1190.315094][T15233] loop4: detected capacity change from 0 to 512 [ 1190.342102][T12915] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1190.467528][T15233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1190.485317][T15233] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.580852][T12915] usb 3-1: Using ep0 maxpacket: 16 [ 1190.627414][T12915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1190.713237][T12915] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1190.722763][T12915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.731431][T12915] usb 3-1: Product: syz [ 1190.735773][T12915] usb 3-1: Manufacturer: syz [ 1190.740692][T12915] usb 3-1: SerialNumber: syz [ 1190.815673][T13159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.825528][T12915] usb 3-1: config 0 descriptor?? [ 1190.844095][T12915] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1190.854118][T12915] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1191.482303][T12915] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1191.935687][T12915] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1191.944230][T12915] em28xx 3-1:0.0: board has no eeprom [ 1192.240208][T12915] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1192.248412][T12915] em28xx 3-1:0.0: dvb set to bulk mode. [ 1192.256144][ T9333] em28xx 3-1:0.0: Binding DVB extension [ 1192.433655][T12915] usb 3-1: USB disconnect, device number 41 [ 1192.441713][T12915] em28xx 3-1:0.0: Disconnecting em28xx [ 1192.882783][ T9333] em28xx 3-1:0.0: Registering input extension [ 1193.404891][T12915] em28xx 3-1:0.0: Closing input extension [ 1193.563681][T12915] em28xx 3-1:0.0: Freeing device [ 1194.763113][T15264] loop1: detected capacity change from 0 to 128 [ 1194.950457][ T30] audit: type=1800 audit(1763465215.638:60): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3758" name="file1" dev="loop1" ino=1048753 res=0 errno=0 [ 1195.148554][T15269] loop5: detected capacity change from 0 to 512 [ 1195.484693][T15269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1195.502490][T15269] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1196.603800][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.434543][ T9333] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1198.882253][T15291] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3774'. [ 1198.892220][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3774'. [ 1199.304264][ T9333] usb 2-1: Using ep0 maxpacket: 16 [ 1199.368003][ T9333] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.378881][ T9333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1199.394232][ T9333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1199.405681][ T9333] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1199.415745][ T9333] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1200.342136][T15302] loop3: detected capacity change from 0 to 512 [ 1200.453285][ T9333] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1200.462871][ T9333] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1200.471322][ T9333] usb 2-1: Manufacturer: syz [ 1200.485366][ T9333] usb 2-1: config 0 descriptor?? [ 1200.692568][T15302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1200.705766][T15302] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1200.858613][T15310] loop5: detected capacity change from 0 to 128 [ 1201.005256][ T30] audit: type=1800 audit(1763465221.708:61): pid=15310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3780" name="file1" dev="loop5" ino=1048754 res=0 errno=0 [ 1201.120512][ T9333] rc_core: IR keymap rc-hauppauge not found [ 1201.133085][ T9333] Registered IR keymap rc-empty [ 1201.138610][ T9333] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.208374][T10627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.256568][ T9333] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.288621][ T9333] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1201.304555][ T9333] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 1201.460486][ T9333] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.578905][ T9333] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.630799][ T9333] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.711823][ T9333] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.760497][ T9333] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.817515][ T9333] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.859079][ T9333] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.888359][ T9333] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1201.962406][ T9333] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1202.002546][ T9333] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1202.118414][ T9333] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1202.128185][ T9333] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1202.240311][ T9333] usb 2-1: USB disconnect, device number 41 [ 1202.484866][T15325] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3787'. [ 1202.494813][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3787'. [ 1204.217541][T15339] loop5: detected capacity change from 0 to 512 [ 1204.459777][T15339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.473302][T15339] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1204.617256][T15348] loop4: detected capacity change from 0 to 128 [ 1204.820170][ T30] audit: type=1800 audit(1763465225.508:62): pid=15348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3795" name="file1" dev="loop4" ino=1048755 res=0 errno=0 [ 1205.004040][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.314320][T15356] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3800'. [ 1205.328739][T15356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3800'. [ 1205.350219][ T5858] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1205.560235][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 1205.584218][ T5858] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1205.593957][ T5858] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1205.603077][ T5858] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1205.613108][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1205.623150][ T5858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1205.637128][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1205.650004][ T5858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1205.660490][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1205.674251][ T5858] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1205.684568][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.698629][ T5858] usb 4-1: config 0 descriptor?? [ 1205.707575][T15352] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1206.072058][ T5858] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1206.268615][ C1] usblp0: nonzero read bulk status received: -71 [ 1206.298677][T15352] usblp0: error -71 reading from printer [ 1206.305084][ C1] usblp0: nonzero read bulk status received: -71 [ 1206.556807][ T5858] usb 4-1: USB disconnect, device number 36 [ 1206.675396][ T5858] usblp0: removed [ 1207.550618][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.557208][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1207.588971][T15377] loop5: detected capacity change from 0 to 512 [ 1207.744158][T15377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1207.757565][T15377] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1208.320203][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.536035][T15415] overlayfs: overlapping lowerdir path [ 1210.653667][ T5858] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1210.866490][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 1210.924286][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.963774][ T5858] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1210.974945][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.983643][ T5858] usb 4-1: Product: syz [ 1210.987992][ T5858] usb 4-1: Manufacturer: syz [ 1210.993029][ T5858] usb 4-1: SerialNumber: syz [ 1211.103550][ T5858] usb 4-1: config 0 descriptor?? [ 1211.145034][ T5858] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1211.370569][ T5858] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1211.377795][ T5858] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1211.460783][ T5858] usb 4-1: USB disconnect, device number 37 [ 1211.823859][T15429] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3832'. [ 1213.735183][T15447] overlayfs: overlapping lowerdir path [ 1215.166164][T15458] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3845'. [ 1215.594158][T15463] loop4: detected capacity change from 0 to 128 [ 1215.840592][ T30] audit: type=1800 audit(1763465236.518:63): pid=15463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3847" name="file1" dev="loop4" ino=1048756 res=0 errno=0 [ 1219.681202][T15492] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3858'. [ 1221.949748][T15525] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3873'. [ 1226.628071][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3883'. [ 1226.638224][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3883'. [ 1226.841535][ T1890] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.898186][ T1890] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.920822][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3883'. [ 1226.936231][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3883'. [ 1226.960750][ T1890] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.972138][ T1890] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1228.480792][T15559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3887'. [ 1229.141402][T15561] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3888'. [ 1230.160001][T15577] loop1: detected capacity change from 0 to 256 [ 1230.294792][T15577] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1230.311377][T15577] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1230.487683][T15577] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1230.568419][T15577] exFAT-fs (loop1): failed to load alloc-bitmap [ 1230.575194][T15577] exFAT-fs (loop1): failed to recognize exfat type [ 1231.395426][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3901'. [ 1231.472251][T15592] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3903'. [ 1233.191052][ T5803] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 1233.220911][T12915] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1233.390695][T12915] usb 3-1: Using ep0 maxpacket: 8 [ 1233.422840][T12915] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.433744][T12915] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1233.443202][T12915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.844764][T15608] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1233.852647][T15609] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1233.859218][T15609] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1233.899440][T15609] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1233.905939][T15609] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1233.935710][T15609] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1233.947717][T15609] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1233.954468][T15609] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1234.050990][T15609] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1234.057476][T15609] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1235.311445][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3915'. [ 1235.811401][T15621] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3916'. [ 1235.932725][ T5803] Bluetooth: hci5: command 0x0406 tx timeout [ 1235.944819][T13600] Bluetooth: hci4: command 0x0406 tx timeout [ 1236.012390][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 1236.090224][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 1236.351792][T12915] usb 3-1: USB disconnect, device number 42 [ 1237.505624][T15635] loop1: detected capacity change from 0 to 4096 [ 1237.568839][T15635] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1238.014831][ T5803] Bluetooth: hci5: command 0x0406 tx timeout [ 1238.095072][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 1238.170441][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 1238.584387][T15653] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3931'. [ 1238.870210][T12915] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1239.066976][T12915] usb 3-1: Using ep0 maxpacket: 8 [ 1239.101321][T12915] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.112001][T12915] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1239.131516][T12915] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1239.140937][T12915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.336809][T12915] usbtmc 3-1:16.0: bulk endpoints not found [ 1239.438834][T15660] overlayfs: missing 'lowerdir' [ 1241.670319][ T5858] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1241.867440][T12915] usb 3-1: USB disconnect, device number 43 [ 1241.872732][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 1241.941236][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1242.045137][ T5858] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1242.054625][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.063365][ T5858] usb 4-1: Product: syz [ 1242.067812][ T5858] usb 4-1: Manufacturer: syz [ 1242.073477][ T5858] usb 4-1: SerialNumber: syz [ 1242.180848][ T5858] usb 4-1: config 0 descriptor?? [ 1242.229065][ T5858] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1242.238876][ T5858] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1242.967970][ T5858] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1243.083670][T15691] overlayfs: missing 'lowerdir' [ 1243.118580][T15690] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3944'. [ 1243.409555][ T5858] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1243.425707][ T5858] em28xx 4-1:0.0: board has no eeprom [ 1243.750431][ T5858] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1243.758487][ T5858] em28xx 4-1:0.0: dvb set to bulk mode. [ 1243.778510][ T9478] em28xx 4-1:0.0: Binding DVB extension [ 1243.879940][ T5858] usb 4-1: USB disconnect, device number 38 [ 1243.887718][ T5858] em28xx 4-1:0.0: Disconnecting em28xx [ 1244.141433][ T9478] em28xx 4-1:0.0: Registering input extension [ 1244.161189][ T5858] em28xx 4-1:0.0: Closing input extension [ 1244.214233][ T5858] em28xx 4-1:0.0: Freeing device [ 1244.590746][T12915] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1244.808069][T12915] usb 3-1: Using ep0 maxpacket: 8 [ 1244.883842][T12915] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.894589][T12915] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1244.908689][T12915] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1244.918053][T12915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.131131][T12915] usbtmc 3-1:16.0: bulk endpoints not found [ 1245.786679][T15721] overlayfs: missing 'lowerdir' [ 1245.867931][T15722] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3960'. [ 1246.702307][T15725] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1246.726805][T15726] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1246.734365][T15726] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1246.741554][T15726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1246.748201][T15726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1246.755042][T15726] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1247.582670][ T5858] usb 3-1: USB disconnect, device number 44 [ 1247.733117][T15742] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3966'. [ 1248.010446][T10629] Bluetooth: hci4: command 0x0406 tx timeout [ 1248.079568][T15749] loop3: detected capacity change from 0 to 64 [ 1248.810746][T10629] Bluetooth: hci3: command 0x0406 tx timeout [ 1248.816994][T10629] Bluetooth: hci2: command 0x0406 tx timeout [ 1248.824114][T13600] Bluetooth: hci5: command 0x0406 tx timeout [ 1248.992210][T15751] loop5: detected capacity change from 0 to 4096 [ 1249.424064][T15751] ntfs3(loop5): ino=18, mi_enum_attr [ 1249.429621][T15751] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1249.501728][T15751] ntfs3(loop5): ino=1a, mi_enum_attr [ 1251.049593][T15774] overlay: Unknown parameter '/' [ 1251.575924][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3988'. [ 1251.585332][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3988'. [ 1251.594683][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3988'. [ 1251.604030][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3988'. [ 1251.618489][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3988'. [ 1251.629170][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3988'. [ 1251.638475][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3988'. [ 1251.647733][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3988'. [ 1251.657133][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3988'. [ 1251.666524][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3988'. [ 1251.966456][T12915] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1252.140133][T12915] usb 3-1: device descriptor read/64, error -71 [ 1252.406864][T12915] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1252.593942][T12915] usb 3-1: device descriptor read/64, error -71 [ 1252.742336][T12915] usb usb3-port1: attempt power cycle [ 1253.123369][T12915] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1253.197991][T12915] usb 3-1: device descriptor read/8, error -71 [ 1253.460271][T12915] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1253.479678][T15806] overlay: Unknown parameter '/' [ 1253.514291][T12915] usb 3-1: device descriptor read/8, error -71 [ 1253.634498][T12915] usb usb3-port1: unable to enumerate USB device [ 1256.755895][T15840] __nla_validate_parse: 41 callbacks suppressed [ 1256.755979][T15840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4016'. [ 1259.157170][T15868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4030'. [ 1261.479138][T15886] loop5: detected capacity change from 0 to 512 [ 1261.534991][T15886] EXT4-fs: Ignoring removed oldalloc option [ 1261.718196][T15886] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4040: Parent and EA inode have the same ino 15 [ 1261.734075][T15892] loop1: detected capacity change from 0 to 64 [ 1261.801607][T15886] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4040: Parent and EA inode have the same ino 15 [ 1261.858795][T15886] EXT4-fs (loop5): 1 orphan inode deleted [ 1261.867114][T15886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1261.910472][ T30] audit: type=1800 audit(1763465282.608:64): pid=15892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4038" name="file1" dev="loop1" ino=23 res=0 errno=0 [ 1261.967338][T15886] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.4040: deleted inode referenced: 15 [ 1262.285098][T15894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4043'. [ 1262.436617][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.907769][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4052'. [ 1263.917161][T15912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1263.925009][T15912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.977921][T15912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1263.986836][T15912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.731468][T15920] netlink: 'syz.4.4055': attribute type 3 has an invalid length. [ 1264.831419][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4056'. [ 1265.400425][ T5858] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1268.621012][ T5858] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1268.630517][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.603837][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1269.610632][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1271.655882][ T5858] usb 5-1: config 0 descriptor?? [ 1275.918291][ T5858] usb 5-1: can't set config #0, error -71 [ 1275.933533][ T5858] usb 5-1: USB disconnect, device number 27 [ 1276.212756][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4065'. [ 1277.269324][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4071'. [ 1279.127371][ T5858] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1279.403386][ T5858] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1279.413621][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.722339][ T5858] usb 5-1: config 0 descriptor?? [ 1279.891367][ T5858] cp210x 5-1:0.0: cp210x converter detected [ 1280.045360][T15983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4080'. [ 1280.055199][T15983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1280.063147][T15983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1280.143781][T15983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1280.151792][T15983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.194538][ T5858] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1280.276312][ T5858] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1280.421694][ T5858] usb 5-1: USB disconnect, device number 28 [ 1280.473505][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1280.557665][ T5858] cp210x 5-1:0.0: device disconnected [ 1280.974767][T15994] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4085'. [ 1282.051795][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4095'. [ 1282.560268][ T5858] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1282.580330][T12915] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1282.758556][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 1282.780777][T12915] usb 3-1: Using ep0 maxpacket: 16 [ 1282.793890][T12915] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.794163][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1282.806023][T12915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1282.806208][T12915] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1282.806359][T12915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.902815][T12915] usb 3-1: config 0 descriptor?? [ 1283.203550][ T5858] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1283.216666][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.225187][ T5858] usb 4-1: Product: syz [ 1283.229546][ T5858] usb 4-1: Manufacturer: syz [ 1283.234724][ T5858] usb 4-1: SerialNumber: syz [ 1283.490993][ T5858] usb 4-1: config 0 descriptor?? [ 1283.500250][T12915] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 1283.508060][T12915] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 1283.517377][T12915] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 1283.693068][ T5858] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1283.702353][T12915] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1283.703573][ T5858] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1283.715125][ C0] usb 3-1: input irq status -75 received [ 1284.055861][T12915] usb 3-1: USB disconnect, device number 49 [ 1284.238079][ T5858] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1284.714942][ T5858] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1284.723369][ T5858] em28xx 4-1:0.0: board has no eeprom [ 1285.081317][ T5858] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1285.089477][ T5858] em28xx 4-1:0.0: dvb set to bulk mode. [ 1285.111349][ T9478] em28xx 4-1:0.0: Binding DVB extension [ 1285.182754][ T5858] usb 4-1: USB disconnect, device number 39 [ 1285.236784][T16037] fido_id[16037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1285.287451][ T5858] em28xx 4-1:0.0: Disconnecting em28xx [ 1285.309579][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4109'. [ 1285.326286][T16046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.334453][T16046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.384111][T16046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.391980][T16046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.515382][ T9478] em28xx 4-1:0.0: Registering input extension [ 1285.621949][ T5858] em28xx 4-1:0.0: Closing input extension [ 1285.736929][ T5858] em28xx 4-1:0.0: Freeing device [ 1286.311412][T16055] process 'syz.3.4113' launched './file1' with NULL argv: empty string added [ 1286.448536][T16058] loop5: detected capacity change from 0 to 512 [ 1286.502517][T16058] EXT4-fs: Ignoring removed oldalloc option [ 1286.591152][T16058] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4114: Parent and EA inode have the same ino 15 [ 1286.651503][T16058] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4114: Parent and EA inode have the same ino 15 [ 1286.743384][T16058] EXT4-fs (loop5): 1 orphan inode deleted [ 1286.751615][T16058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1286.980270][T12915] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1287.098385][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.150220][T12915] usb 2-1: Using ep0 maxpacket: 16 [ 1287.191993][T12915] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.203364][T12915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1287.212141][T12915] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1287.223908][T12915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.378074][T12915] usb 2-1: config 0 descriptor?? [ 1287.949609][T12915] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 1287.964646][T12915] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 1287.974379][T12915] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 1288.082588][T12915] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1288.197912][ C1] usb 2-1: input irq status -75 received [ 1288.935096][T16090] fuseblk: Bad value for 'fd' [ 1289.976344][T16099] loop4: detected capacity change from 0 to 512 [ 1290.038507][T16099] EXT4-fs: Ignoring removed oldalloc option [ 1290.195921][T16099] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.4132: Parent and EA inode have the same ino 15 [ 1290.275280][T12915] usb 2-1: USB disconnect, device number 42 [ 1290.362060][T16099] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.4132: Parent and EA inode have the same ino 15 [ 1290.434480][T16099] EXT4-fs (loop4): 1 orphan inode deleted [ 1290.511594][T16099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1291.048665][T13159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.693911][T16122] fuseblk: Bad value for 'fd' [ 1292.180130][ T9333] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1292.365982][ T9333] usb 2-1: Using ep0 maxpacket: 16 [ 1292.395326][ T9333] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.406796][ T9333] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1292.414487][ T9333] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1292.423955][ T9333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.518676][ T9333] usb 2-1: config 0 descriptor?? [ 1292.815368][T16136] loop5: detected capacity change from 0 to 512 [ 1292.902335][T16136] EXT4-fs: Ignoring removed oldalloc option [ 1293.058167][T16136] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4149: Parent and EA inode have the same ino 15 [ 1293.071521][ T9333] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 1293.085940][ T9333] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 1293.097661][ T9333] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 1293.127727][T16136] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4149: Parent and EA inode have the same ino 15 [ 1293.203842][T16136] EXT4-fs (loop5): 1 orphan inode deleted [ 1293.212099][T16136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1293.295348][ T9333] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1293.310682][ C0] usb 2-1: input irq status -75 received [ 1293.571697][ T9333] usb 2-1: USB disconnect, device number 43 [ 1293.812490][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.155263][T16142] fido_id[16142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1294.602601][T16153] fuseblk: Bad value for 'fd' [ 1296.005112][ T30] audit: type=1326 audit(1763465316.708:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16171 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1296.028418][ T30] audit: type=1326 audit(1763465316.708:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16171 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1296.054956][ T30] audit: type=1326 audit(1763465316.708:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16171 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1296.066510][T16169] loop5: detected capacity change from 0 to 4096 [ 1296.079269][ T30] audit: type=1326 audit(1763465316.758:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16171 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1296.107351][ T30] audit: type=1326 audit(1763465316.758:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16171 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1296.130278][ T30] audit: type=1326 audit(1763465316.758:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16171 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1296.156680][ T30] audit: type=1326 audit(1763465316.758:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16171 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1296.180746][ T30] audit: type=1326 audit(1763465316.798:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16171 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1296.203505][ T30] audit: type=1326 audit(1763465316.798:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16171 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1296.226900][ T30] audit: type=1326 audit(1763465316.798:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16171 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1296.326617][T16169] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1297.012057][T16185] fuseblk: Bad value for 'fd' [ 1297.880503][ T5858] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1298.074201][ T5858] usb 5-1: device descriptor read/64, error -71 [ 1298.233056][T16201] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1298.342977][ T5858] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1298.543433][ T5858] usb 5-1: device descriptor read/64, error -71 [ 1298.669110][ T5858] usb usb5-port1: attempt power cycle [ 1299.062750][ T5858] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1299.115852][ T5858] usb 5-1: device descriptor read/8, error -71 [ 1299.387351][ T5858] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1299.445022][T16214] fuseblk: Bad value for 'fd' [ 1299.460433][ T5858] usb 5-1: device descriptor read/8, error -71 [ 1299.592033][ T5858] usb usb5-port1: unable to enumerate USB device [ 1300.551171][T16229] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1301.140002][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1301.140081][ T30] audit: type=1326 audit(1763465321.828:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16232 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1301.174427][ T30] audit: type=1326 audit(1763465321.828:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16232 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1301.198421][ T30] audit: type=1326 audit(1763465321.828:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16232 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1301.223031][ T30] audit: type=1326 audit(1763465321.828:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16232 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1301.246199][ T30] audit: type=1326 audit(1763465321.828:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16232 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1301.275634][ T30] audit: type=1326 audit(1763465321.838:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16232 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1301.299715][ T30] audit: type=1326 audit(1763465321.838:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16232 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1301.322691][ T30] audit: type=1326 audit(1763465321.838:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16232 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1301.345397][ T30] audit: type=1326 audit(1763465321.838:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16232 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1301.368607][ T30] audit: type=1326 audit(1763465321.848:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16232 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1301.698981][T16238] loop5: detected capacity change from 0 to 512 [ 1301.793288][T16238] EXT4-fs: Ignoring removed oldalloc option [ 1301.948447][T16241] fuseblk: Bad value for 'fd' [ 1301.960982][T16238] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4197: Parent and EA inode have the same ino 15 [ 1302.052411][T16238] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4197: Parent and EA inode have the same ino 15 [ 1302.131068][T16238] EXT4-fs (loop5): 1 orphan inode deleted [ 1302.214235][T16238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1302.735297][T13942] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.193269][T16260] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1303.450202][ T5858] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1303.670232][ T5858] usb 6-1: Using ep0 maxpacket: 8 [ 1303.710575][ T5858] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.721011][ T5858] usb 6-1: config 0 has no interfaces? [ 1303.730882][ T5858] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1303.741636][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.839036][ T5858] usb 6-1: config 0 descriptor?? [ 1304.399716][T16271] fuseblk: Bad value for 'fd' [ 1306.477649][ T5858] usb 6-1: USB disconnect, device number 7 [ 1306.580904][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1306.580983][ T30] audit: type=1326 audit(1763465327.278:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1306.616687][ T30] audit: type=1326 audit(1763465327.278:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1306.640837][ T30] audit: type=1326 audit(1763465327.288:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1306.663929][ T30] audit: type=1326 audit(1763465327.288:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1306.687033][ T30] audit: type=1326 audit(1763465327.288:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1306.713728][ T30] audit: type=1326 audit(1763465327.288:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1306.737916][ T30] audit: type=1326 audit(1763465327.288:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1306.761185][ T30] audit: type=1326 audit(1763465327.288:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1306.786069][ T30] audit: type=1326 audit(1763465327.288:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1306.808928][ T30] audit: type=1326 audit(1763465327.288:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.3.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f929518f6c9 code=0x7ffc0000 [ 1307.266630][T16296] fuseblk: Bad value for 'fd' [ 1309.184004][T16322] binder: 16312:16322 ioctl c0306201 200000000780 returned -11 [ 1309.201796][T16322] virtio-fs: tag not found [ 1309.410303][ T5858] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1309.640004][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 1309.688683][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.699435][ T5858] usb 2-1: config 0 has no interfaces? [ 1309.705295][ T5858] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1309.714624][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.947250][ T5858] usb 2-1: config 0 descriptor?? [ 1312.699329][ T5858] usb 2-1: USB disconnect, device number 44 [ 1314.876700][T16358] loop1: detected capacity change from 0 to 512 [ 1314.932816][T16358] EXT4-fs: Ignoring removed oldalloc option [ 1315.068766][T16358] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.4248: Parent and EA inode have the same ino 15 [ 1315.100227][T16358] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.4248: Parent and EA inode have the same ino 15 [ 1315.104612][ T9333] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1315.156138][T16358] EXT4-fs (loop1): 1 orphan inode deleted [ 1315.206122][T16358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1315.309266][T16358] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.4248: deleted inode referenced: 15 [ 1315.341279][ T9333] usb 4-1: Using ep0 maxpacket: 8 [ 1315.390314][ T9333] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.405210][ T9333] usb 4-1: config 0 has no interfaces? [ 1315.412537][ T9333] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1315.421978][ T9333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.488866][ T9333] usb 4-1: config 0 descriptor?? [ 1315.722314][T12642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.089237][T16378] comedi comedi4: bad chanlist[0]=0x000000dd chan=221 range length=2 [ 1317.940097][ T9333] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1317.950205][T12915] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1318.015335][T14067] usb 4-1: USB disconnect, device number 40 [ 1318.130849][ T9333] usb 3-1: Using ep0 maxpacket: 32 [ 1318.149121][T12915] usb 5-1: Using ep0 maxpacket: 8 [ 1318.186917][ T9333] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1318.195833][ T9333] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1318.205097][ T9333] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1318.214457][ T9333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1318.224566][ T9333] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1318.234740][ T9333] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1318.248288][ T9333] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1318.257778][ T9333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.310185][T12915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.321149][T12915] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1318.330794][T12915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.415680][T12915] usb 5-1: config 0 descriptor?? [ 1318.433555][T12915] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 1318.490267][ T9333] usb 3-1: config 0 descriptor?? [ 1318.691038][T14067] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1318.745468][ T9333] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1318.817373][ T9333] usb 3-1: USB disconnect, device number 50 [ 1318.842783][ T9333] usblp0: removed [ 1318.901686][T14067] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.913059][T14067] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1318.972615][T14067] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1318.982452][T14067] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1318.994849][T14067] usb 4-1: SerialNumber: syz [ 1319.300954][ T9333] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1319.355057][T14067] usb 4-1: 0:2 : does not exist [ 1319.398767][T14067] usb 4-1: USB disconnect, device number 41 [ 1319.470468][ T5858] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1319.476158][ T9333] usb 3-1: Using ep0 maxpacket: 32 [ 1319.492082][ T9333] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1319.505101][ T9333] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1319.515613][ T9333] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1319.525018][ T9333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1319.526431][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1319.535375][ T9333] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1319.535581][ T9333] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1319.535832][ T9333] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1319.535974][ T9333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.596686][ T9333] usb 3-1: config 0 descriptor?? [ 1319.761215][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 1319.785105][ T5858] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1319.793893][ T5858] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1319.802861][ T5858] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1319.817146][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1319.828611][ T5858] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1319.838699][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1319.850355][ T5858] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1319.860773][ T5858] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1319.874199][ T5858] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1319.883670][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.925273][ T9333] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1320.073130][ T5858] usb 6-1: config 0 descriptor?? [ 1320.081252][T16412] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1320.323737][ T5858] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1320.550125][ T9333] usb 6-1: USB disconnect, device number 8 [ 1320.576487][ T9333] usblp1: removed [ 1320.745127][ T5858] usb 3-1: USB disconnect, device number 51 [ 1320.785454][ T5858] usblp0: removed [ 1320.977589][ T9478] usb 5-1: USB disconnect, device number 33 [ 1322.140786][ T9478] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1322.250267][ T9333] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1322.260706][T12915] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1322.320549][ T9478] usb 2-1: Using ep0 maxpacket: 8 [ 1322.345062][ T9478] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.356028][ T9478] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1322.369671][ T9478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.459539][ T9478] usb 2-1: config 0 descriptor?? [ 1322.472353][T12915] usb 4-1: Using ep0 maxpacket: 16 [ 1322.484555][ T9333] usb 5-1: Using ep0 maxpacket: 8 [ 1322.503605][T12915] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.515333][T12915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1322.517825][ T9478] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 1322.522363][T12915] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1322.538199][T12915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.590831][ T9333] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 1322.599343][ T9333] usb 5-1: config 0 has no interface number 0 [ 1322.650243][ T9333] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1322.660130][ T9333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.668337][ T9333] usb 5-1: Product: syz [ 1322.676915][ T9333] usb 5-1: Manufacturer: syz [ 1322.683221][ T9333] usb 5-1: SerialNumber: syz [ 1322.733560][T12915] usb 4-1: config 0 descriptor?? [ 1322.744107][ T9333] usb 5-1: config 0 descriptor?? [ 1322.790582][ T9333] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1322.798700][ T9333] pctv452e: pctv452e_power_ctrl: 1 [ 1322.798700][ T9333] [ 1322.806546][ T9333] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1322.806546][ T9333] [ 1322.817211][ T9333] dvb-usb: bulk message failed: -22 (5/0) [ 1322.848133][ T9333] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1322.867503][ T9333] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1322.882930][ T9333] usb 5-1: media controller created [ 1322.888450][ T9333] dvb-usb: bulk message failed: -22 (8/0) [ 1322.896787][ T9333] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1322.905663][ T9333] dvb-usb: MAC address reading failed. [ 1323.000495][ T9333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. ** 1 printk messages dropped ** [ 1323.040914][T16431] ===================================================== [ 1323.041334][T16431] BUG: KMSAN: uninit-value in hex_string+0x681/0x740 [ 1323.041475][T16431] hex_string+0x681/0x740 [ 1323.041602][T16431] pointer+0x2c7/0x1bd0 [ 1323.041714][T16431] vsnprintf+0xf8a/0x1bd0 [ 1323.041837][T16431] vscnprintf+0x6d/0x120 [ 1323.041954][T16431] printk_sprint+0x53/0x5c0 [ 1323.042114][T16431] vprintk_store+0xbb9/0x1530 [ 1323.042219][T16431] vprintk_emit+0x21a/0xb60 [ 1323.042326][T16431] vprintk_default+0x3f/0x50 [ 1323.042436][T16431] vprintk+0x36/0x50 [ 1323.042567][T16431] _printk+0x17e/0x1b0 [ 1323.042739][T16431] pctv452e_i2c_msg+0x82a/0x8f0 [ 1323.042988][T16431] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 1323.043139][T16431] __i2c_transfer+0xecd/0x3110 [ 1323.043302][T16431] i2c_transfer+0x300/0x4b0 [ 1323.043419][T16431] i2c_transfer_buffer_flags+0x138/0x200 [ 1323.043552][T16431] i2cdev_read+0x1b2/0x3c0 [ 1323.043698][T16431] vfs_read+0x27c/0xf90 [ 1323.043926][T16431] __x64_sys_pread64+0x2ab/0x3b0 [ 1323.044040][T16431] x64_sys_call+0x3370/0x3e30 [ 1323.044193][T16431] do_syscall_64+0xd9/0xfa0 [ 1323.044404][T16431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.044534][T16431] [ 1323.044570][T16431] Uninit was created at: [ 1323.044816][T16431] __kmalloc_cache_noprof+0x8f5/0x16b0 [ 1323.044963][T16431] pctv452e_i2c_msg+0x98/0x8f0 [ 1323.045114][T16431] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 1323.045271][T16431] __i2c_transfer+0xecd/0x3110 [ 1323.045390][T16431] i2c_transfer+0x300/0x4b0 [ 1323.045506][T16431] i2c_transfer_buffer_flags+0x138/0x200 [ 1323.045639][T16431] i2cdev_read+0x1b2/0x3c0 [ 1323.045749][T16431] vfs_read+0x27c/0xf90 [ 1323.045923][T16431] __x64_sys_pread64+0x2ab/0x3b0 [ 1323.046038][T16431] x64_sys_call+0x3370/0x3e30 [ 1323.046194][T16431] do_syscall_64+0xd9/0xfa0 [ 1323.046347][T16431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.046476][T16431] [ 1323.046554][T16431] CPU: 1 UID: 0 PID: 16431 Comm: syz.4.4282 Not tainted syzkaller #0 PREEMPT(none) [ 1323.046688][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1323.046769][T16431] ===================================================== [ 1323.046823][T16431] Disabling lock debugging due to kernel taint [ 1323.046882][T16431] Kernel panic - not syncing: kmsan.panic set ... [ 1323.268117][T16431] CPU: 1 UID: 0 PID: 16431 Comm: syz.4.4282 Tainted: G B syzkaller #0 PREEMPT(none) [ 1323.279262][T16431] Tainted: [B]=BAD_PAGE [ 1323.283514][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1323.293709][T16431] Call Trace: [ 1323.297109][T16431] [ 1323.300141][T16431] __dump_stack+0x26/0x30 [ 1323.304676][T16431] dump_stack_lvl+0x53/0x270 [ 1323.309474][T16431] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1323.315503][T16431] dump_stack+0x1e/0x25 [ 1323.319850][T16431] vpanic+0x435/0xd30 [ 1323.324045][T16431] panic+0x15d/0x160 [ 1323.328177][T16431] kmsan_report+0x31c/0x320 [ 1323.332860][T16431] ? __msan_warning+0x1b/0x30 [ 1323.337703][T16431] ? hex_string+0x681/0x740 [ 1323.342379][T16431] ? pointer+0x2c7/0x1bd0 [ 1323.346997][T16431] ? vsnprintf+0xf8a/0x1bd0 [ 1323.351666][T16431] ? vscnprintf+0x6d/0x120 [ 1323.356260][T16431] ? printk_sprint+0x53/0x5c0 [ 1323.361092][T16431] ? vprintk_store+0xbb9/0x1530 [ 1323.366116][T16431] ? vprintk_emit+0x21a/0xb60 [ 1323.370958][T16431] ? vprintk_default+0x3f/0x50 [ 1323.375880][T16431] ? vprintk+0x36/0x50 [ 1323.380136][T16431] ? _printk+0x17e/0x1b0 [ 1323.384592][T16431] ? pctv452e_i2c_msg+0x82a/0x8f0 [ 1323.389842][T16431] ? pctv452e_i2c_xfer+0x2e6/0x4c0 [ 1323.395251][T16431] ? __i2c_transfer+0xecd/0x3110 [ 1323.400383][T16431] ? i2c_transfer+0x300/0x4b0 [ 1323.405229][T16431] ? i2c_transfer_buffer_flags+0x138/0x200 [ 1323.411222][T16431] ? i2cdev_read+0x1b2/0x3c0 [ 1323.415984][T16431] ? vfs_read+0x27c/0xf90 [ 1323.420525][T16431] ? __x64_sys_pread64+0x2ab/0x3b0 [ 1323.425829][T16431] ? x64_sys_call+0x3370/0x3e30 [ 1323.430885][T16431] ? do_syscall_64+0xd9/0xfa0 [ 1323.435766][T16431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.442014][T16431] ? kmsan_get_metadata+0xfb/0x160 [ 1323.447316][T16431] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1323.453408][T16431] ? format_decode+0x1131/0x1160 [ 1323.458519][T16431] ? filter_irq_stacks+0x49/0x190 [ 1323.463894][T16431] ? stack_depot_save_flags+0x35/0x7b0 [ 1323.469624][T16431] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1323.475627][T16431] ? kmsan_get_metadata+0xfb/0x160 [ 1323.480975][T16431] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1323.487558][T16431] ? kmsan_get_metadata+0xfb/0x160 [ 1323.492880][T16431] __msan_warning+0x1b/0x30 [ 1323.497546][T16431] hex_string+0x681/0x740 [ 1323.502090][T16431] pointer+0x2c7/0x1bd0 [ 1323.506436][T16431] ? kmsan_get_metadata+0xfb/0x160 [ 1323.511752][T16431] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1323.517762][T16431] vsnprintf+0xf8a/0x1bd0 [ 1323.522315][T16431] vscnprintf+0x6d/0x120 [ 1323.526751][T16431] printk_sprint+0x53/0x5c0 [ 1323.531424][T16431] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1323.537526][T16431] vprintk_store+0xbb9/0x1530 [ 1323.542386][T16431] ? kmsan_get_metadata+0xfb/0x160 [ 1323.547830][T16431] vprintk_emit+0x21a/0xb60 [ 1323.552534][T16431] vprintk_default+0x3f/0x50 [ 1323.557298][T16431] vprintk+0x36/0x50 [ 1323.561385][T16431] _printk+0x17e/0x1b0 [ 1323.565729][T16431] pctv452e_i2c_msg+0x82a/0x8f0 [ 1323.570818][T16431] ? kmsan_get_metadata+0xfb/0x160 [ 1323.576138][T16431] pctv452e_i2c_xfer+0x2e6/0x4c0 [ 1323.581317][T16431] ? __pfx_pctv452e_i2c_xfer+0x10/0x10 [ 1323.586987][T16431] __i2c_transfer+0xecd/0x3110 [ 1323.592365][T16431] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1323.598937][T16431] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1323.604863][T16431] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1323.611272][T16431] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1323.617192][T16431] i2c_transfer+0x300/0x4b0 [ 1323.621886][T16431] i2c_transfer_buffer_flags+0x138/0x200 [ 1323.627774][T16431] i2cdev_read+0x1b2/0x3c0 [ 1323.632381][T16431] ? __pfx_i2cdev_read+0x10/0x10 [ 1323.637488][T16431] vfs_read+0x27c/0xf90 [ 1323.641865][T16431] ? __fget_files+0x3b9/0x4a0 [ 1323.646806][T16431] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1323.652825][T16431] __x64_sys_pread64+0x2ab/0x3b0 [ 1323.657957][T16431] x64_sys_call+0x3370/0x3e30 [ 1323.662841][T16431] do_syscall_64+0xd9/0xfa0 [ 1323.667640][T16431] ? irqentry_exit+0x16/0x60 [ 1323.672506][T16431] ? clear_bhb_loop+0x40/0x90 [ 1323.677390][T16431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.683478][T16431] RIP: 0033:0x7f03d578f6c9 [ 1323.688028][T16431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1323.707825][T16431] RSP: 002b:00007f03d669f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1323.716420][T16431] RAX: ffffffffffffffda RBX: 00007f03d59e5fa0 RCX: 00007f03d578f6c9 [ 1323.724557][T16431] RDX: 00000000000000ea RSI: 0000000000000000 RDI: 0000000000000005 [ 1323.732664][T16431] RBP: 00007f03d5811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1323.740774][T16431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1323.748878][T16431] R13: 00007f03d59e6038 R14: 00007f03d59e5fa0 R15: 00007ffffd952568 [ 1323.757140][T16431] [ 1323.760697][T16431] Kernel Offset: disabled [ 1323.765081][T16431] Rebooting in 86400 seconds..