last executing test programs: 11.333963738s ago: executing program 2 (id=687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@x86={0x4e, 0x5, 0x6, 0x0, 0x0, 0xb, 0x0, 0xfd, 0x1, 0x7, 0x7f, 0xfb, 0x0, 0x1, 0xb, 0x0, 0x0, 0x1, 0xf8, '\x00', 0x5, 0x6}) 11.017433235s ago: executing program 2 (id=690): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x80804) 11.016224595s ago: executing program 0 (id=691): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000840)={0x0, 0xf, 0x6, "428a7482a325"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 10.871312104s ago: executing program 2 (id=692): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, 0x0, 0x38}}], 0x1, 0x46000) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x9, 0xffff, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_open_pts(r0, 0x200) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xa) 9.771830003s ago: executing program 2 (id=693): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 6.690927279s ago: executing program 0 (id=700): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2000}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="3801"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}, {@version_u}, {@nodevmap}]}}) 6.500822769s ago: executing program 0 (id=701): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x80804) 6.323319799s ago: executing program 0 (id=702): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) 3.89937004s ago: executing program 0 (id=709): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000280)={0x6, "d042b2a3c5f8"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.764438317s ago: executing program 1 (id=711): landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='projid_map\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) epoll_create(0xff9) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x7, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x7ffffffe, 0x6a, 0x401, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x7, 0x8c, 0x6, 0x6, 0x0, 0x3e66c0a1, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x5, 0x400009, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0x4, 0x7, 0x6c7, 0x9, 0x9, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x2, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x3, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0xc, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x5, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xc, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0xd, 0x6, 0x10, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3c, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x6, 0x8, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xc, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0xffffffff, 0xfffff000, 0x10080, 0x6, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x228, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x5) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000340)=0x6) 3.611300665s ago: executing program 2 (id=712): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x0, 0x0) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000840)={0x0, 0xf, 0x6, "428a7482a325"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3.52938104s ago: executing program 1 (id=713): mkdirat(0xffffffffffffff9c, 0x0, 0x0) inotify_init1(0x80800) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x34000359) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x163242, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, 0x0) close(0xffffffffffffffff) 2.492842636s ago: executing program 3 (id=714): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0xffffffff, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, "c614f198"}, 0x7, 0x1, {0x0}}) shutdown(r0, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x7c489beb, 0xe, 0x2, 0x0, 0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) listen(r3, 0x7) listen(0xffffffffffffffff, 0x0) 2.41519764s ago: executing program 0 (id=715): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000840)={0x0, 0xf, 0x6, "428a7482a325"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 2.366102533s ago: executing program 1 (id=716): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2000}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="3801"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}, {@version_u}, {@nodevmap}]}}) 2.241608199s ago: executing program 1 (id=717): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) 1.651320691s ago: executing program 3 (id=718): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1) write$qrtrtun(r1, &(0x7f0000000600)="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", 0x144) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) ioctl$COMEDI_DEVINFO(r2, 0x80b06401, &(0x7f0000000100)) ioctl$COMEDI_UNLOCK(r2, 0x6406) 1.562210936s ago: executing program 3 (id=719): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x80804) 1.476278981s ago: executing program 3 (id=720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000120000000000100000000001c00090008"], 0x4c}}, 0x40000) 240.741338ms ago: executing program 3 (id=721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 167.398482ms ago: executing program 1 (id=722): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1) write$qrtrtun(r1, &(0x7f0000000600)="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", 0x144) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) ioctl$COMEDI_UNLOCK(r2, 0x6406) 114.018364ms ago: executing program 1 (id=723): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xfffd}, {0x6, 0x24, 0x1a, 0x0, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x0, 0x5}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x14, 0x10, 0x13, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0xd, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 112.873004ms ago: executing program 3 (id=724): mkdirat(0xffffffffffffff9c, 0x0, 0x0) inotify_init1(0x80800) inotify_add_watch(0xffffffffffffffff, 0x0, 0x34000359) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x163242, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, 0x0) close(0xffffffffffffffff) 0s ago: executing program 2 (id=725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) kernel console output (not intermixed with test programs): 8] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.125416][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.154106][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.247338][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.270905][ T5085] Bluetooth: hci3: command tx timeout [ 88.284223][ T5085] Bluetooth: hci2: command tx timeout [ 88.289718][ T5085] Bluetooth: hci1: command tx timeout [ 88.296288][ T5782] Bluetooth: hci0: command tx timeout [ 88.313257][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.380006][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.387222][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.411924][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.419132][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.547807][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.574311][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.638951][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.707044][ T5770] veth0_vlan: entered promiscuous mode [ 88.744049][ T5770] veth1_vlan: entered promiscuous mode [ 88.850001][ T5771] veth0_vlan: entered promiscuous mode [ 88.884543][ T5770] veth0_macvtap: entered promiscuous mode [ 88.902769][ T5771] veth1_vlan: entered promiscuous mode [ 88.944451][ T5770] veth1_macvtap: entered promiscuous mode [ 88.987982][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.047490][ T5771] veth0_macvtap: entered promiscuous mode [ 89.064503][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.081311][ T5771] veth1_macvtap: entered promiscuous mode [ 89.100897][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.130278][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.140270][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.150128][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.161466][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.175026][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.225701][ T5773] veth0_vlan: entered promiscuous mode [ 89.242238][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.253883][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.267435][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.279478][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.290649][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.302937][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.334368][ T5773] veth1_vlan: entered promiscuous mode [ 89.364803][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.382776][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.392067][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.401531][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.486376][ T2938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.507651][ T2938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.565902][ T5773] veth0_macvtap: entered promiscuous mode [ 89.579975][ T5772] veth0_vlan: entered promiscuous mode [ 89.608374][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.617963][ T5773] veth1_macvtap: entered promiscuous mode [ 89.620876][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.675083][ T5772] veth1_vlan: entered promiscuous mode [ 89.681536][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.689411][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.719034][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.731520][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.741664][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.753300][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.765988][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.825941][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.840633][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.855003][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.867843][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.883131][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.927076][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.943743][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.957314][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.966433][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.983963][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.015670][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.064439][ T5772] veth0_macvtap: entered promiscuous mode [ 90.119814][ T5772] veth1_macvtap: entered promiscuous mode [ 90.247870][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.269468][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.283005][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.299245][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.310877][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.327368][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.341344][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.359339][ T5085] Bluetooth: hci2: command tx timeout [ 90.365774][ T5782] Bluetooth: hci1: command tx timeout [ 90.371860][ T5085] Bluetooth: hci0: command tx timeout [ 90.377321][ T5085] Bluetooth: hci3: command tx timeout [ 90.425641][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.443329][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.479074][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.491847][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.504570][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.518149][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.535281][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.547267][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.565971][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.590074][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.608141][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.634508][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.644044][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.653327][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.664524][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.772734][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.888878][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.908386][ T5851] syz.0.1[5851]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.928033][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.993895][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.010114][ T2915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.025606][ T27] usb 2-1: config 0 has no interfaces? [ 91.046457][ T2915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.058434][ T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 91.095099][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.123932][ T27] usb 2-1: Product: syz [ 91.128177][ T27] usb 2-1: Manufacturer: syz [ 91.158252][ T27] usb 2-1: SerialNumber: syz [ 91.204067][ T27] usb 2-1: config 0 descriptor?? [ 91.534391][ T5844] loop1: detected capacity change from 0 to 2048 [ 91.637004][ T5844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.710990][ T5844] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.771308][ T5844] ======================================================= [ 91.771308][ T5844] WARNING: The mand mount option has been deprecated and [ 91.771308][ T5844] and is ignored by this kernel. Remove the mand [ 91.771308][ T5844] option from the mount to silence this warning. [ 91.771308][ T5844] ======================================================= [ 91.915445][ T5820] usb 2-1: USB disconnect, device number 2 [ 92.062033][ T5861] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.212672][ T8] cfg80211: failed to load regulatory.db [ 92.275058][ T5865] loop3: detected capacity change from 0 to 128 [ 92.330964][ T5865] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 92.357156][ T5865] FAT-fs (loop3): Filesystem has been set read-only [ 92.442818][ T5085] Bluetooth: hci1: command tx timeout [ 92.448415][ T5782] Bluetooth: hci0: command tx timeout [ 92.448426][ T5784] Bluetooth: hci2: command tx timeout [ 92.454033][ T5777] Bluetooth: hci3: command tx timeout [ 92.571068][ T5867] loop2: detected capacity change from 0 to 4096 [ 92.578656][ T5867] EXT4-fs: inline encryption not supported [ 92.703577][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.962366][ T5867] EXT4-fs (loop2): Test dummy encryption mode enabled [ 92.988950][ T5867] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 93.010874][ T5867] System zones: 0-5 [ 93.019107][ T5867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.094534][ T28] audit: type=1800 audit(1777190600.237:2): pid=5867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 93.216737][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.237982][ T5880] loop1: detected capacity change from 0 to 512 [ 93.329413][ T5880] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.13: missing EA_INODE flag [ 93.363579][ T5881] loop3: detected capacity change from 0 to 512 [ 93.417956][ T5880] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.13: error while reading EA inode 12 err=-117 [ 93.426298][ T5884] loop2: detected capacity change from 0 to 512 [ 93.458871][ T5880] EXT4-fs (loop1): 1 orphan inode deleted [ 93.467068][ T5880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.495838][ T5881] EXT4-fs (loop3): 1 truncate cleaned up [ 93.504275][ T5881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.778029][ T5888] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.017906][ T5891] kvm: pic: non byte read [ 94.030147][ T5891] kvm: pic: non byte read [ 94.042566][ T5891] kvm: pic: non byte read [ 94.054771][ T5891] kvm: pic: non byte read [ 94.069018][ T5891] kvm: pic: level sensitive irq not supported [ 94.069133][ T5891] kvm: pic: non byte read [ 94.097997][ T5891] kvm: pic: non byte read [ 94.104763][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.108862][ T5891] kvm: pic: non byte read [ 94.137724][ T5891] kvm: pic: non byte read [ 94.150923][ T5891] kvm: pic: non byte read [ 94.167274][ T5891] kvm: pic: non byte read [ 94.179991][ T5891] kvm: pic: single mode not supported [ 94.180015][ T5891] kvm: pic: level sensitive irq not supported [ 94.220775][ T5891] kvm: pic: single mode not supported [ 94.230968][ T5891] kvm: pic: single mode not supported [ 94.236734][ T5891] kvm: pic: level sensitive irq not supported [ 94.281143][ T5891] kvm: pic: single mode not supported [ 94.289878][ T5891] kvm: pic: single mode not supported [ 94.301150][ T5891] kvm: pic: level sensitive irq not supported [ 94.317635][ T5891] kvm: pic: single mode not supported [ 94.323971][ T5891] kvm: pic: level sensitive irq not supported [ 94.357469][ T5891] kvm: pic: single mode not supported [ 94.363715][ T5891] kvm: pic: level sensitive irq not supported [ 94.383020][ T5891] kvm: pic: single mode not supported [ 94.389943][ T5891] kvm: pic: level sensitive irq not supported [ 94.421889][ T5891] kvm: pic: single mode not supported [ 94.428117][ T5891] kvm: pic: level sensitive irq not supported [ 94.470750][ T5891] kvm: pic: single mode not supported [ 94.481484][ T5891] kvm: pic: level sensitive irq not supported [ 95.133821][ T5900] loop0: detected capacity change from 0 to 1024 [ 95.201595][ T5900] EXT4-fs: Ignoring removed oldalloc option [ 95.251841][ T5900] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.308381][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.331674][ T5900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.508593][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.691557][ T5912] loop3: detected capacity change from 0 to 512 [ 95.727776][ T5912] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.743835][ T5915] loop0: detected capacity change from 0 to 256 [ 95.768524][ T5912] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.781660][ T5915] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.803040][ T5912] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.24: bad orphan inode 131083 [ 95.830796][ T5915] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 95.856476][ T5912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.887752][ T5915] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 95.914261][ T5912] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.24: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 96.042807][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.185582][ T5921] loop1: detected capacity change from 0 to 512 [ 96.463268][ T5921] EXT4-fs (loop1): 1 truncate cleaned up [ 96.811427][ T5921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.308558][ T5932] loop3: detected capacity change from 0 to 2048 [ 97.385679][ T5932] EXT4-fs: Ignoring removed oldalloc option [ 97.506266][ T5939] loop2: detected capacity change from 0 to 1024 [ 97.513369][ T5932] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 97.562793][ T5939] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 97.562793][ T5939] [ 97.576561][ T5932] System zones: 0-7 [ 97.586152][ T5932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.616969][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.646880][ T5932] EXT4-fs error (device loop3): ext4_find_extent:945: inode #2: comm syz.3.29: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 97.687592][ T5932] EXT4-fs (loop3): Remounting filesystem read-only [ 97.797440][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.671541][ T5952] loop3: detected capacity change from 0 to 512 [ 98.679434][ T5952] EXT4-fs: Ignoring removed orlov option [ 98.695697][ T5952] EXT4-fs (loop3): Test dummy encryption mode enabled [ 98.740530][ T5952] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.808328][ T5952] EXT4-fs (loop3): 1 truncate cleaned up [ 98.835781][ T5952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.024462][ T5963] loop0: detected capacity change from 0 to 256 [ 99.062160][ T5957] loop2: detected capacity change from 0 to 4096 [ 99.093911][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.117876][ T5957] EXT4-fs (loop2): Test dummy encryption mode enabled [ 99.153639][ T5957] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 99.153685][ T5957] EXT4-fs (loop2): group descriptors corrupted! [ 99.333372][ T5957] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1918967856 (3837935712 ns) > initial count (3260039326 ns). Using initial count to start timer. [ 99.369817][ T5971] Bluetooth: MGMT ver 1.22 [ 100.025160][ T5986] loop0: detected capacity change from 0 to 1024 [ 100.057766][ T5986] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 100.057766][ T5986] [ 100.394329][ T5990] netlink: 'syz.1.43': attribute type 2 has an invalid length. [ 101.116505][ T5986] loop0: detected capacity change from 0 to 2048 [ 101.264602][ T5986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.823144][ T5997] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 102.150318][ C0] sched: RT throttling activated [ 102.452832][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.331186][ T6004] loop0: detected capacity change from 0 to 2048 [ 103.350145][ T6004] EXT4-fs: quotafile must be on filesystem root [ 103.784267][ T6016] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.802761][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.810756][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.928381][ T6020] loop1: detected capacity change from 0 to 512 [ 103.934937][ T1589] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 103.998337][ T6020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.064552][ T6020] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.132850][ T1589] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.156720][ T1589] usb 3-1: not running at top speed; connect to a high speed hub [ 104.185399][ T1589] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 104.200780][ T6020] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.51: corrupted xattr block 33: invalid checksum [ 104.220503][ T1589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.236714][ T1589] usb 3-1: Product: syz [ 104.246167][ T1589] usb 3-1: Manufacturer: syz [ 104.258469][ T1589] usb 3-1: SerialNumber: syz [ 104.275212][ T6023] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.51: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 104.320956][ T6023] EXT4-fs error (device loop1) in ext4_free_inode:363: Filesystem failed CRC [ 104.422230][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.513202][ T1589] usb 3-1: selecting invalid altsetting 1 [ 104.602187][ T6025] loop1: detected capacity change from 0 to 1024 [ 104.609091][ T1589] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 104.645978][ T1589] usb 3-1: USB disconnect, device number 2 [ 104.656462][ T6025] EXT4-fs: quotafile must be on filesystem root [ 104.701187][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.364827][ T6046] loop2: detected capacity change from 0 to 256 [ 108.387422][ T6046] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 109.761235][ T6054] devpts: called with bogus options [ 109.943563][ T6056] loop0: detected capacity change from 0 to 512 [ 110.110728][ T6056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.199076][ T6056] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.602332][ T6064] cgroup: Need name or subsystem set [ 110.664124][ T6042] loop3: detected capacity change from 0 to 131072 [ 110.718513][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.732563][ T6042] F2FS-fs (loop3): invalid crc value [ 110.782728][ T6042] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 110.952381][ T6071] loop0: detected capacity change from 0 to 512 [ 110.976516][ T6071] EXT4-fs: Ignoring removed orlov option [ 111.002416][ T6071] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.065509][ T6071] EXT4-fs error (device loop0): ext4_ext_check_inode:530: inode #16: comm syz.0.65: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 111.107632][ T6071] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.65: couldn't read orphan inode 16 (err -117) [ 111.142467][ T6071] EXT4-fs (loop0): 1 orphan inode deleted [ 111.149600][ T6071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.274532][ T6071] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 111.326343][ T6075] loop3: detected capacity change from 0 to 4096 [ 111.337951][ T6071] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 111.361618][ T6075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.385510][ T6071] overlayfs: failed to verify upper root origin [ 111.542369][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.654427][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.217861][ T6086] xt_hashlimit: size too large, truncated to 1048576 [ 113.903192][ T6097] loop0: detected capacity change from 0 to 512 [ 113.996490][ T6097] EXT4-fs (loop0): 1 truncate cleaned up [ 114.043689][ T6097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.227153][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.779085][ T6117] capability: warning: `syz.2.80' uses deprecated v2 capabilities in a way that may be insecure [ 114.794996][ T6115] loop0: detected capacity change from 0 to 256 [ 114.836324][ T6115] FAT-fs (loop0): Directory bread(block 64) failed [ 114.843782][ T6115] FAT-fs (loop0): Directory bread(block 65) failed [ 114.851465][ T6115] FAT-fs (loop0): Directory bread(block 66) failed [ 114.858056][ T6115] FAT-fs (loop0): Directory bread(block 67) failed [ 114.864840][ T6115] FAT-fs (loop0): Directory bread(block 68) failed [ 114.871542][ T6115] FAT-fs (loop0): Directory bread(block 69) failed [ 114.878254][ T6115] FAT-fs (loop0): Directory bread(block 70) failed [ 114.884901][ T6115] FAT-fs (loop0): Directory bread(block 71) failed [ 114.891737][ T6115] FAT-fs (loop0): Directory bread(block 72) failed [ 114.898325][ T6115] FAT-fs (loop0): Directory bread(block 73) failed [ 115.860768][ T6123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.653772][ T6125] loop3: detected capacity change from 0 to 512 [ 116.861376][ T6125] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.926169][ T6125] EXT4-fs (loop3): 1 truncate cleaned up [ 116.941627][ T6125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.788802][ T6131] loop0: detected capacity change from 0 to 16 [ 118.802821][ T6131] erofs: Unknown parameter './cgroup.net/syz1' [ 120.996440][ T6131] loop0: detected capacity change from 0 to 40427 [ 121.051486][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.077044][ T6131] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 3) [ 121.084910][ T6131] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 121.108692][ T6131] F2FS-fs (loop0): Image doesn't support compression [ 121.115675][ T6131] F2FS-fs (loop0): Unrecognized mount option "whint_mode=user-based" or missing value [ 123.173621][ T6161] loop3: detected capacity change from 0 to 1024 [ 123.185627][ T6161] EXT4-fs: inline encryption not supported [ 123.194217][ T6161] EXT4-fs: Ignoring removed bh option [ 123.202471][ T6161] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 123.276298][ T6161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.382807][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.984642][ T6170] process 'syz.3.94' launched './file0' with NULL argv: empty string added [ 124.200602][ T6170] loop3: detected capacity change from 0 to 256 [ 124.215917][ T6170] exfat: Bad value for 'uid' [ 125.190577][ T5847] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.387381][ T5847] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 125.419848][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.443740][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.468042][ T6171] loop2: detected capacity change from 0 to 40427 [ 125.474910][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 125.517384][ T6171] F2FS-fs (loop2): Image doesn't support compression [ 125.528305][ T5847] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 125.557674][ T6171] F2FS-fs (loop2): Unrecognized mount option "whint_mode=fs-based" or missing value [ 125.567412][ T5847] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 125.580877][ T5847] usb 4-1: Manufacturer: syz [ 125.589613][ T5847] usb 4-1: config 0 descriptor?? [ 125.949728][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 126.048513][ T5847] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 126.072165][ T5847] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 126.128142][ T5847] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 126.332673][ T6181] loop1: detected capacity change from 0 to 1024 [ 126.341925][ T5814] usb 4-1: USB disconnect, device number 2 [ 126.367090][ T6179] fido_id[6179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 126.390996][ T6181] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 126.390996][ T6181] [ 126.491658][ T6181] loop1: detected capacity change from 0 to 2048 [ 126.552914][ T6181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.986641][ T6190] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 127.003172][ T6190] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 127.015970][ T6190] EXT4-fs (loop1): This should not happen!! Data will be lost [ 127.015970][ T6190] [ 127.025891][ T6190] EXT4-fs (loop1): Total free blocks count 0 [ 127.032878][ T6190] EXT4-fs (loop1): Free/Dirty block details [ 127.038970][ T6190] EXT4-fs (loop1): free_blocks=4096 [ 127.044620][ T6190] EXT4-fs (loop1): dirty_blocks=48 [ 127.049839][ T6190] EXT4-fs (loop1): Block reservation details [ 127.056018][ T6190] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 127.598076][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.700632][ T6195] loop1: detected capacity change from 0 to 512 [ 127.736620][ T6195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.755032][ T6195] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.950618][ T5784] Bluetooth: hci4: command 0x1003 tx timeout [ 128.178047][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 128.307075][ T6203] loop0: detected capacity change from 0 to 40427 [ 128.321907][ T6203] F2FS-fs (loop0): invalid crc value [ 128.338296][ T6203] F2FS-fs (loop0): Found nat_bits in checkpoint [ 128.411911][ T6203] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 128.715558][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.954438][ T6217] loop1: detected capacity change from 0 to 256 [ 129.066534][ T5773] syz-executor: attempt to access beyond end of device [ 129.066534][ T5773] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.127399][ T5773] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 130.086838][ T6223] loop3: detected capacity change from 0 to 512 [ 130.121183][ T6223] journal_path: Lookup failure for './file2' [ 130.137488][ T6223] EXT4-fs: error: could not find journal device path [ 130.160503][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.370048][ T6225] loop3: detected capacity change from 0 to 1024 [ 130.380616][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 130.401533][ T8] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 130.411989][ T8] usb 1-1: config 0 has no interface number 0 [ 130.423710][ T8] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 130.440556][ T8] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 130.454678][ T6225] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 130.454678][ T6225] [ 130.477884][ T8] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 130.496353][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.530369][ T8] usb 1-1: Product: syz [ 130.534618][ T8] usb 1-1: Manufacturer: syz [ 130.567650][ T8] usb 1-1: SerialNumber: syz [ 130.591760][ T8] usb 1-1: config 0 descriptor?? [ 130.621217][ T6221] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.629244][ T6221] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.907390][ T6221] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.930625][ T6221] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.858313][ T8] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 131.888984][ T8] asix: probe of 1-1:0.34 failed with error -61 [ 132.791179][ T6255] loop3: detected capacity change from 0 to 256 [ 133.035572][ T6255] FAT-fs (loop3): Directory bread(block 64) failed [ 133.042414][ T6255] FAT-fs (loop3): Directory bread(block 65) failed [ 133.049248][ T6255] FAT-fs (loop3): Directory bread(block 66) failed [ 133.055888][ T6255] FAT-fs (loop3): Directory bread(block 67) failed [ 133.062617][ T6255] FAT-fs (loop3): Directory bread(block 68) failed [ 133.069177][ T6255] FAT-fs (loop3): Directory bread(block 69) failed [ 133.076982][ T6255] FAT-fs (loop3): Directory bread(block 70) failed [ 133.083606][ T6255] FAT-fs (loop3): Directory bread(block 71) failed [ 133.090264][ T6255] FAT-fs (loop3): Directory bread(block 72) failed [ 133.096892][ T6255] FAT-fs (loop3): Directory bread(block 73) failed [ 133.521191][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.529220][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.631963][ T5814] usb 1-1: USB disconnect, device number 2 [ 133.898062][ T6262] loop0: detected capacity change from 0 to 1024 [ 133.929214][ T6258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.998575][ T6262] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 133.998575][ T6262] [ 134.225160][ T6262] loop0: detected capacity change from 0 to 2048 [ 134.295441][ T6265] xt_hashlimit: size too large, truncated to 1048576 [ 134.310023][ T6262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.741958][ T6272] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 134.757666][ T6272] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 134.770241][ T6272] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.770241][ T6272] [ 134.780088][ T6272] EXT4-fs (loop0): Total free blocks count 0 [ 134.786214][ T6272] EXT4-fs (loop0): Free/Dirty block details [ 134.792418][ T6272] EXT4-fs (loop0): free_blocks=4096 [ 134.797716][ T6272] EXT4-fs (loop0): dirty_blocks=48 [ 134.802962][ T6272] EXT4-fs (loop0): Block reservation details [ 134.809037][ T6272] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 135.396550][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.847751][ T6284] loop2: detected capacity change from 0 to 1024 [ 135.927261][ T6284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 135.964264][ T6284] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.009363][ T6284] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.130: Freeing blocks not in datazone - block = 0, count = 16 [ 136.245501][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.264880][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 136.521094][ T6292] Zero length message leads to an empty skb [ 136.888095][ T23] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 137.061153][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.317330][ T23] usb 1-1: Product: syz [ 137.329654][ T23] usb 1-1: Manufacturer: syz [ 137.352661][ T23] usb 1-1: SerialNumber: syz [ 137.381637][ T23] usb 1-1: config 0 descriptor?? [ 137.422794][ T23] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 137.429735][ T23] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 137.520641][ T23] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 137.612268][ T5847] usb 1-1: USB disconnect, device number 3 [ 137.701215][ T6298] loop2: detected capacity change from 0 to 1024 [ 137.761513][ T6298] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 137.761513][ T6298] [ 138.724597][ T6298] loop2: detected capacity change from 0 to 2048 [ 138.989110][ T6298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.238280][ T6310] loop0: detected capacity change from 0 to 256 [ 139.415458][ T6314] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 139.431581][ T6314] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 139.444286][ T6314] EXT4-fs (loop2): This should not happen!! Data will be lost [ 139.444286][ T6314] [ 139.454122][ T6314] EXT4-fs (loop2): Total free blocks count 0 [ 139.460196][ T6314] EXT4-fs (loop2): Free/Dirty block details [ 139.466322][ T6314] EXT4-fs (loop2): free_blocks=4096 [ 139.471787][ T6314] EXT4-fs (loop2): dirty_blocks=48 [ 139.476988][ T6314] EXT4-fs (loop2): Block reservation details [ 139.483124][ T6314] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 139.724327][ T6310] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 139.801284][ T6310] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 140.033892][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.268827][ T6321] overlayfs: missing 'lowerdir' [ 140.817526][ T6324] loop1: detected capacity change from 0 to 40427 [ 140.902559][ T6324] F2FS-fs (loop1): invalid crc value [ 141.015788][ T6324] F2FS-fs (loop1): Found nat_bits in checkpoint [ 141.293507][ T6324] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 142.184932][ T6321] loop2: detected capacity change from 0 to 40427 [ 142.285719][ T6321] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x7ffff [ 142.461877][ T5770] syz-executor: attempt to access beyond end of device [ 142.461877][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.520455][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 142.532933][ T6344] Illegal XDP return value 4294967274 on prog (id 12) dev syz_tun, expect packet loss! [ 142.655963][ T6345] loop0: detected capacity change from 0 to 1024 [ 142.756234][ T6345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.844294][ T6353] loop3: detected capacity change from 0 to 256 [ 142.867310][ T6353] exfat: Deprecated parameter 'utf8' [ 142.879593][ T6353] exfat: Deprecated parameter 'utf8' [ 142.907409][ T6353] exfat: Deprecated parameter 'namecase' [ 142.950643][ T6353] exfat: Deprecated parameter 'utf8' [ 142.971994][ T6353] exfat: Deprecated parameter 'namecase' [ 143.048828][ T6353] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 143.082109][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.674632][ T6366] loop1: detected capacity change from 0 to 1024 [ 143.696145][ T6366] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 143.696145][ T6366] [ 143.855305][ T6366] loop1: detected capacity change from 0 to 2048 [ 143.892395][ T6370] loop0: detected capacity change from 0 to 1024 [ 143.917142][ T6366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.936684][ T6370] EXT4-fs: Ignoring removed oldalloc option [ 143.993601][ T6370] EXT4-fs: Ignoring removed bh option [ 144.113070][ T6370] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.188802][ T6370] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 144.188802][ T6370] [ 144.395529][ T6374] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 144.410577][ T6374] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 144.422979][ T6374] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.422979][ T6374] [ 144.432792][ T6374] EXT4-fs (loop1): Total free blocks count 0 [ 144.439632][ T6374] EXT4-fs (loop1): Free/Dirty block details [ 144.445890][ T6374] EXT4-fs (loop1): free_blocks=4096 [ 144.451318][ T6374] EXT4-fs (loop1): dirty_blocks=48 [ 144.456523][ T6374] EXT4-fs (loop1): Block reservation details [ 144.462657][ T6374] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 144.986568][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.541922][ T6379] loop1: detected capacity change from 0 to 40427 [ 145.594947][ T6379] F2FS-fs (loop1): invalid crc value [ 145.658048][ T6379] F2FS-fs (loop1): Found nat_bits in checkpoint [ 145.725781][ T6379] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 145.962342][ T6387] loop0: detected capacity change from 0 to 512 [ 146.484681][ T6387] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.758373][ T6387] EXT4-fs (loop0): 1 truncate cleaned up [ 146.770667][ T6387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.784512][ T5770] syz-executor: attempt to access beyond end of device [ 146.784512][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.770798][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 148.684284][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.897094][ T6394] loop0: detected capacity change from 0 to 128 [ 148.986953][ T6394] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.013025][ T6394] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.277444][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.517276][ T6406] loop0: detected capacity change from 0 to 128 [ 149.615610][ T6411] loop2: detected capacity change from 0 to 1024 [ 149.645304][ T6411] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 149.645304][ T6411] [ 150.246854][ T6415] loop1: detected capacity change from 0 to 256 [ 150.260618][ T6415] exfat: Bad value for 'uid' [ 151.062262][ T6417] loop1: detected capacity change from 0 to 1024 [ 151.088771][ T6417] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 151.088771][ T6417] [ 153.116651][ T6422] loop1: detected capacity change from 0 to 40427 [ 153.132214][ T6422] F2FS-fs (loop1): invalid crc value [ 153.147599][ T6422] F2FS-fs (loop1): Found nat_bits in checkpoint [ 153.210619][ T6422] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.236964][ T6427] loop2: detected capacity change from 0 to 256 [ 153.282633][ T6427] exfat: Deprecated parameter 'utf8' [ 153.363816][ T6427] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 154.043953][ T5770] syz-executor: attempt to access beyond end of device [ 154.043953][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.066478][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 155.654299][ T6454] loop1: detected capacity change from 0 to 512 [ 155.693603][ T6454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.745256][ T6454] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.174: iget: bad i_size value: 38620345925642 [ 155.772869][ T6454] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.174: couldn't read orphan inode 15 (err -117) [ 155.851860][ T6454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.042006][ T6461] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.174: bg 0: block 5: invalid block bitmap [ 156.076161][ T6461] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 332 with error 28 [ 156.110782][ T6461] EXT4-fs (loop1): This should not happen!! Data will be lost [ 156.110782][ T6461] [ 156.124268][ T6461] EXT4-fs (loop1): Total free blocks count 0 [ 156.131900][ T6461] EXT4-fs (loop1): Free/Dirty block details [ 156.138038][ T6461] EXT4-fs (loop1): free_blocks=0 [ 156.146824][ T6461] EXT4-fs (loop1): dirty_blocks=336 [ 156.152959][ T6461] EXT4-fs (loop1): Block reservation details [ 156.158990][ T6461] EXT4-fs (loop1): i_reserved_data_blocks=336 [ 156.286925][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.536161][ T6469] loop1: detected capacity change from 0 to 512 [ 156.593883][ T6469] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.622360][ T6469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.684361][ T6469] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.797324][ T6475] loop0: detected capacity change from 0 to 4096 [ 156.850808][ T6475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.107927][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.060724][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.786283][ T6492] loop2: detected capacity change from 0 to 8192 [ 159.363235][ T6486] loop0: detected capacity change from 0 to 40427 [ 159.376573][ T6486] F2FS-fs (loop0): Unrecognized mount option "whint_mode=user-based" or missing value [ 160.370530][ T9] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 160.437437][ T6507] loop1: detected capacity change from 0 to 256 [ 160.491971][ T6507] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 160.587460][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 160.610363][ T28] audit: type=1800 audit(1777190667.757:3): pid=6507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.193" name="file1" dev="loop1" ino=1048603 res=0 errno=0 [ 160.640679][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 160.679298][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 160.688581][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.705808][ T9] usb 1-1: config 0 descriptor?? [ 160.721541][ T6503] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.857441][ T6501] loop3: detected capacity change from 0 to 40427 [ 160.884579][ T6501] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 160.910241][ T6501] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 160.932770][ T6501] F2FS-fs (loop3): invalid crc value [ 160.955543][ T6501] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.102501][ T6501] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 161.130632][ T6501] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 161.207614][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.233637][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.264595][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.296094][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.309879][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.343774][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.370386][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.400379][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.407449][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.452050][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.459175][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.496054][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.520377][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.527446][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.575471][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.593321][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.614747][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.631797][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.640219][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.649126][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.669603][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.733178][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.740242][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.771443][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.790643][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.797789][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.836468][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.850454][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.867891][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.880343][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.887377][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.901918][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.945207][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 161.995688][ T9] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 162.066868][ T9] lg-g15 0003:046D:C22D.0002: hidraw0: USB HID v0.08 Device [HID 046d:c22d] on usb-dummy_hcd.0-1/input0 [ 162.088002][ T9] usb 1-1: USB disconnect, device number 4 [ 163.007877][ T6525] fido_id[6525]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 163.709136][ T6541] loop3: detected capacity change from 0 to 256 [ 163.755198][ T6541] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 163.833008][ T6536] loop1: detected capacity change from 0 to 40427 [ 163.845484][ T28] audit: type=1800 audit(1777190670.997:4): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.203" name="file1" dev="loop3" ino=1048606 res=0 errno=0 [ 163.881741][ T6536] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 163.889035][ T6536] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 163.919078][ T6536] F2FS-fs (loop1): Unrecognized mount option "whint_mode=user-based" or missing value [ 165.039873][ T6547] loop2: detected capacity change from 0 to 256 [ 165.096687][ T6547] FAT-fs (loop2): Directory bread(block 64) failed [ 165.114732][ T6547] FAT-fs (loop2): Directory bread(block 65) failed [ 165.151125][ T6547] FAT-fs (loop2): Directory bread(block 66) failed [ 165.179421][ T6547] FAT-fs (loop2): Directory bread(block 67) failed [ 165.189991][ T6547] FAT-fs (loop2): Directory bread(block 68) failed [ 165.210669][ T6547] FAT-fs (loop2): Directory bread(block 69) failed [ 165.217406][ T6547] FAT-fs (loop2): Directory bread(block 70) failed [ 165.238657][ T6547] FAT-fs (loop2): Directory bread(block 71) failed [ 165.250584][ T6547] FAT-fs (loop2): Directory bread(block 72) failed [ 165.257247][ T6547] FAT-fs (loop2): Directory bread(block 73) failed [ 165.429268][ T6552] syz.2.205: attempt to access beyond end of device [ 165.429268][ T6552] loop2: rw=2049, sector=1224, nr_sectors = 352 limit=256 [ 165.671287][ T6557] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.893604][ T6556] loop0: detected capacity change from 0 to 40427 [ 165.911240][ T6556] F2FS-fs (loop0): invalid crc value [ 165.976752][ T6556] F2FS-fs (loop0): Found nat_bits in checkpoint [ 166.033925][ T6556] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 166.314034][ T6564] loop3: detected capacity change from 0 to 1024 [ 166.346013][ T6564] EXT4-fs: Ignoring removed orlov option [ 166.410514][ T6564] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 166.644633][ T5773] syz-executor: attempt to access beyond end of device [ 166.644633][ T5773] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.693351][ T49] kworker/u4:3: attempt to access beyond end of device [ 166.693351][ T49] loop2: rw=1, sector=1260, nr_sectors = 4 limit=256 [ 166.707922][ T6564] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 166.720431][ T5773] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 166.743378][ T6564] EXT4-fs (loop3): orphan cleanup on readonly fs [ 166.778956][ T49] Buffer I/O error on dev loop2, logical block 315, lost async page write [ 166.799681][ T6564] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.208: Invalid inode table block 0 in block_group 0 [ 166.860428][ T6564] EXT4-fs (loop3): Remounting filesystem read-only [ 166.908893][ T6564] Quota error (device loop3): write_blk: dquota write failed [ 166.929980][ T6564] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 166.950605][ T6564] EXT4-fs (loop3): 1 truncate cleaned up [ 166.965484][ T6564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.129767][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.414200][ T6574] loop3: detected capacity change from 0 to 4096 [ 167.430016][ T6576] loop1: detected capacity change from 0 to 256 [ 167.484431][ T6576] exfat: Deprecated parameter 'utf8' [ 167.525754][ T6576] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 167.609120][ T6574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.823214][ T6574] EXT4-fs error (device loop3): ext4_get_first_dir_block:3604: inode #12: block 80: comm syz.3.212: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 167.887954][ T6574] EXT4-fs error (device loop3): ext4_get_first_dir_block:3606: inode #12: comm syz.3.212: directory missing '..' [ 167.982433][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.147548][ T6570] loop2: detected capacity change from 0 to 40427 [ 168.185088][ T6570] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x7ffff [ 168.189933][ T6589] loop0: detected capacity change from 0 to 256 [ 168.210900][ T6570] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 168.232350][ T6589] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 168.234369][ T6591] loop3: detected capacity change from 0 to 512 [ 168.254517][ T6570] F2FS-fs (loop2): Image doesn't support compression [ 168.277225][ T6570] F2FS-fs (loop2): invalid crc value [ 168.311639][ T6570] F2FS-fs (loop2): Found nat_bits in checkpoint [ 168.332508][ T6591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.387128][ T28] audit: type=1800 audit(1777190675.537:5): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.215" name="file1" dev="loop0" ino=1048611 res=0 errno=0 [ 168.420506][ T6591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.493358][ T6591] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.571712][ T6570] F2FS-fs (loop2): Start checkpoint disabled! [ 168.590880][ T6570] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 168.610014][ T6597] loop1: detected capacity change from 0 to 512 [ 168.835574][ T6597] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.217: inode has both inline data and extents flags [ 169.041372][ T6597] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.217: couldn't read orphan inode 15 (err -117) [ 169.722253][ T6597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.858886][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.882231][ T2923] kworker/u4:8: attempt to access beyond end of device [ 169.882231][ T2923] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 169.971453][ T2923] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 170.009031][ T2923] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 170.344154][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.025087][ T6626] loop2: detected capacity change from 0 to 512 [ 171.057237][ T6626] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.102355][ T6626] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.229: bad orphan inode 131083 [ 171.154302][ T6626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.308486][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.174576][ T6657] loop2: detected capacity change from 0 to 8192 [ 174.471956][ T6636] loop3: detected capacity change from 0 to 40427 [ 174.520252][ T6636] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 174.528109][ T6636] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 174.625648][ T6636] F2FS-fs (loop3): invalid crc value [ 174.680619][ T6636] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 176.043439][ T6682] netlink: 320 bytes leftover after parsing attributes in process `syz.1.247'. [ 179.679642][ T6709] loop3: detected capacity change from 0 to 512 [ 179.735066][ T6709] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.836388][ T6709] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.260: bad orphan inode 131083 [ 179.860914][ T6709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.097803][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.370193][ T6722] loop0: detected capacity change from 0 to 1024 [ 180.392458][ T6722] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 180.392458][ T6722] [ 180.760508][ T6722] loop0: detected capacity change from 0 to 2048 [ 180.843707][ T6722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.070859][ T6736] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 182.085504][ T6736] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 182.097977][ T6736] EXT4-fs (loop0): This should not happen!! Data will be lost [ 182.097977][ T6736] [ 182.107743][ T6736] EXT4-fs (loop0): Total free blocks count 0 [ 182.114234][ T6736] EXT4-fs (loop0): Free/Dirty block details [ 182.120189][ T6736] EXT4-fs (loop0): free_blocks=4096 [ 182.126359][ T6736] EXT4-fs (loop0): dirty_blocks=48 [ 182.131595][ T6736] EXT4-fs (loop0): Block reservation details [ 182.137719][ T6736] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 183.333983][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.872440][ T6755] @0Ù: renamed from team_slave_1 (while UP) [ 184.519713][ T6769] loop1: detected capacity change from 0 to 1024 [ 184.543156][ T6769] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 184.543156][ T6769] [ 185.400120][ T6761] syzkaller0: entered allmulticast mode [ 189.835212][ T6810] loop3: detected capacity change from 0 to 1024 [ 189.853743][ T6810] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 189.853743][ T6810] [ 193.668908][ T6837] loop0: detected capacity change from 0 to 1024 [ 193.724864][ T6837] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 193.724864][ T6837] [ 194.611321][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.628517][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.272176][ T6931] syz.1.341[6931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.272546][ T6931] syz.1.341[6931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.349896][ T6941] netlink: 320 bytes leftover after parsing attributes in process `syz.1.344'. [ 203.018707][ T6952] loop1: detected capacity change from 0 to 40427 [ 203.046037][ T6952] F2FS-fs (loop1): invalid crc value [ 203.082618][ T6952] F2FS-fs (loop1): Found nat_bits in checkpoint [ 203.140923][ T6952] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 204.333101][ T5770] syz-executor: attempt to access beyond end of device [ 204.333101][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.348769][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 205.741555][ T6987] loop2: detected capacity change from 0 to 40427 [ 205.758181][ T6987] F2FS-fs (loop2): invalid crc value [ 205.922171][ T6987] F2FS-fs (loop2): Found nat_bits in checkpoint [ 206.182747][ T6987] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 207.166630][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 207.172992][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 207.179202][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 207.678248][ T5772] syz-executor: attempt to access beyond end of device [ 207.678248][ T5772] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.748274][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 209.040788][ T7022] loop1: detected capacity change from 0 to 40427 [ 209.060479][ T7022] F2FS-fs (loop1): invalid crc value [ 209.092576][ T7022] F2FS-fs (loop1): Found nat_bits in checkpoint [ 209.144627][ T7022] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 210.468300][ T5770] syz-executor: attempt to access beyond end of device [ 210.468300][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.510401][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 212.266681][ T7064] loop0: detected capacity change from 0 to 40427 [ 212.279300][ T7064] F2FS-fs (loop0): invalid crc value [ 212.296860][ T7064] F2FS-fs (loop0): Found nat_bits in checkpoint [ 212.430973][ T7064] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 213.764492][ T7094] netlink: 320 bytes leftover after parsing attributes in process `syz.3.396'. [ 215.074093][ T7095] netlink: 320 bytes leftover after parsing attributes in process `syz.1.397'. [ 215.291731][ T5773] syz-executor: attempt to access beyond end of device [ 215.291731][ T5773] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 215.367475][ T5773] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 219.051186][ T7134] netlink: 320 bytes leftover after parsing attributes in process `syz.0.408'. [ 223.345740][ T7184] netlink: 320 bytes leftover after parsing attributes in process `syz.2.423'. [ 226.314330][ T7205] KVM: debugfs: duplicate directory 7205-10 [ 226.928703][ T7226] netlink: 320 bytes leftover after parsing attributes in process `syz.2.435'. [ 227.905502][ T7235] syz.3.438 uses obsolete (PF_INET,SOCK_PACKET) [ 229.891230][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 230.110405][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 230.124080][ T27] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 230.140797][ T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.188773][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.206131][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.226233][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.240623][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.258661][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.266497][ T27] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.289824][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.299957][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 230.309216][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.339720][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.350311][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.382334][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.410238][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.417937][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.446769][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.463442][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.481631][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.510619][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.535097][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.554396][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.563365][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.571336][ T1589] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 230.828128][ T27] usb 3-1: usb_control_msg returned -32 [ 230.835318][ T27] usbtmc 3-1:16.0: can't read capabilities [ 230.841549][ T1589] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 230.955317][ T7279] netlink: 320 bytes leftover after parsing attributes in process `syz.3.450'. [ 231.547958][ T7280] usbtmc 3-1:16.0: INDICATOR_PULSE returned 0 [ 231.750689][ T1589] usb 3-1: USB disconnect, device number 3 [ 233.211982][ T7287] syzkaller1: entered promiscuous mode [ 233.235471][ T7287] syzkaller1: entered allmulticast mode [ 234.250196][ T7313] netlink: 320 bytes leftover after parsing attributes in process `syz.3.461'. [ 234.316337][ T5784] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 234.326301][ T5784] Bluetooth: hci1: Injecting HCI hardware error event [ 234.339944][ T5784] Bluetooth: hci1: hardware error 0x00 [ 238.420789][ T7333] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 10 out of range (51000000..2150000000) [ 238.530574][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 238.741418][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 238.758597][ T8] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 238.777339][ T8] usb 1-1: config 2 has no interface number 0 [ 238.792639][ T8] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 238.834967][ T8] usb 1-1: config 2 interface 88 has no altsetting 0 [ 238.876741][ T8] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 238.896789][ T27] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 238.919389][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.935252][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 238.948528][ T8] usb 1-1: Product: syz [ 238.958420][ T8] usb 1-1: Manufacturer: syz [ 238.965845][ T8] usb 1-1: SerialNumber: syz [ 238.997956][ T7331] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 239.244804][ T7331] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 239.285540][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 239.296970][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 239.308407][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 239.318132][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 239.326314][ T27] usb 4-1: SerialNumber: syz [ 239.385701][ T7349] netlink: 320 bytes leftover after parsing attributes in process `syz.2.473'. [ 239.434694][ T27] usb 4-1: bad CDC descriptors [ 239.462563][ T27] usb-storage 4-1:1.0: USB Mass Storage device detected [ 240.070442][ T27] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 240.160496][ T5784] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 240.237500][ T27] scsi host1: usb-storage 4-1:1.0 [ 241.980882][ T5847] usb 4-1: USB disconnect, device number 3 [ 242.070518][ T8] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 242.085838][ T8] asix: probe of 1-1:2.88 failed with error -71 [ 242.098018][ T8] usb 1-1: USB disconnect, device number 5 [ 242.790596][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 242.936527][ T5847] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 242.971969][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 242.987239][ T8] usb 3-1: config 243 has too many interfaces: 239, using maximum allowed: 32 [ 243.004323][ T8] usb 3-1: config 243 has an invalid descriptor of length 185, skipping remainder of the config [ 243.030540][ T8] usb 3-1: config 243 has 0 interfaces, different from the descriptor's value: 239 [ 243.040797][ T5815] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 243.066100][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 243.083696][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.098451][ T8] usb 3-1: Product: syz [ 243.106909][ T8] usb 3-1: Manufacturer: syz [ 243.112091][ T8] usb 3-1: SerialNumber: syz [ 243.151573][ T5847] usb 1-1: Using ep0 maxpacket: 8 [ 243.171634][ T5847] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 243.185456][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.194078][ T5847] usb 1-1: Product: syz [ 243.198446][ T5847] usb 1-1: Manufacturer: syz [ 243.208188][ T5847] usb 1-1: SerialNumber: syz [ 243.216558][ T5847] usb 1-1: config 0 descriptor?? [ 243.227287][ T5847] gspca_main: se401-2.14.0 probing 047d:5003 [ 243.243926][ T5815] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.254185][ T5815] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 243.265058][ T5815] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.281438][ T5815] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 243.295438][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 243.305719][ T5815] usb 2-1: Product: syz [ 243.310013][ T5815] usb 2-1: Manufacturer: syz [ 243.319655][ T5815] usb 2-1: SerialNumber: syz [ 243.554705][ T5815] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 243.636655][ T5847] gspca_se401: Wrong descriptor type [ 243.759896][ T5847] usb 2-1: USB disconnect, device number 3 [ 243.779194][ T5847] usblp0: removed [ 243.846495][ T5815] usb 1-1: USB disconnect, device number 6 [ 244.270451][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 244.504854][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 245.849163][ T7407] loop0: detected capacity change from 0 to 1024 [ 245.864701][ T7407] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 245.864701][ T7407] [ 245.891117][ T8] usb 3-1: USB disconnect, device number 4 [ 246.364146][ T7411] netlink: 68 bytes leftover after parsing attributes in process `syz.0.489'. [ 246.373263][ T7411] netlink: 56 bytes leftover after parsing attributes in process `syz.0.489'. [ 247.086651][ T5814] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 247.286477][ T5814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.297413][ T5814] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 247.306990][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.328112][ T5814] usb 4-1: config 0 descriptor?? [ 247.344616][ T5814] pwc: Askey VC010 type 2 USB webcam detected. [ 247.390441][ T5847] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 247.590443][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 247.601839][ T5847] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 247.609999][ T5847] usb 1-1: config 0 has no interface number 0 [ 247.630016][ T5847] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 247.642204][ T5847] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 247.673363][ T5847] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 247.690987][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.699074][ T5847] usb 1-1: Product: syz [ 247.720521][ T5847] usb 1-1: Manufacturer: syz [ 247.725341][ T5847] usb 1-1: SerialNumber: syz [ 247.738276][ T5847] usb 1-1: config 0 descriptor?? [ 247.765119][ T5814] pwc: recv_control_msg error -32 req 02 val 2b00 [ 247.773630][ T5814] pwc: recv_control_msg error -32 req 02 val 2700 [ 247.782167][ T5814] pwc: recv_control_msg error -32 req 02 val 2c00 [ 247.789868][ T5814] pwc: recv_control_msg error -32 req 04 val 1000 [ 247.798663][ T5814] pwc: recv_control_msg error -32 req 04 val 1300 [ 247.806777][ T5814] pwc: recv_control_msg error -32 req 04 val 1400 [ 247.814549][ T5814] pwc: recv_control_msg error -32 req 02 val 2000 [ 247.831254][ T5814] pwc: recv_control_msg error -32 req 02 val 2100 [ 247.842696][ T5814] pwc: recv_control_msg error -32 req 04 val 1500 [ 247.853918][ T5814] pwc: recv_control_msg error -32 req 02 val 2500 [ 247.865213][ T5814] pwc: recv_control_msg error -32 req 02 val 2400 [ 247.896523][ T5814] pwc: recv_control_msg error -32 req 02 val 2600 [ 247.926176][ T5814] pwc: recv_control_msg error -32 req 02 val 2900 [ 247.965755][ T5847] radio-si470x 1-1:0.35: this is not a si470x device. [ 248.181498][ T5814] pwc: recv_control_msg error -71 req 04 val 1100 [ 248.191151][ T5814] pwc: recv_control_msg error -71 req 04 val 1200 [ 248.215021][ T5814] pwc: Registered as video103. [ 248.235753][ T5814] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 248.295060][ T5814] usb 4-1: USB disconnect, device number 4 [ 248.385537][ T5847] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 248.400421][ T5847] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 248.413928][ T5847] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 248.442801][ T5847] usb 1-1: USB disconnect, device number 7 [ 248.449745][ T5847] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 249.632477][ T7456] 9pnet_fd: Insufficient options for proto=fd [ 250.054599][ T7458] loop1: detected capacity change from 0 to 40427 [ 250.082106][ T7458] F2FS-fs (loop1): invalid crc value [ 250.094243][ T7458] F2FS-fs (loop1): Found nat_bits in checkpoint [ 250.235495][ T7458] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 252.592777][ T7450] netlink: 320 bytes leftover after parsing attributes in process `syz.2.502'. [ 252.749894][ T5770] syz-executor: attempt to access beyond end of device [ 252.749894][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 252.803238][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 253.106469][ T7473] syzkaller1: entered promiscuous mode [ 253.115034][ T7473] syzkaller1: entered allmulticast mode [ 253.280532][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 253.480646][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 253.506386][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 253.536115][ T8] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 253.578547][ T8] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 253.599335][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.624304][ T8] usb 1-1: Product: syz [ 253.632918][ T8] usb 1-1: Manufacturer: syz [ 253.646573][ T8] usb 1-1: SerialNumber: syz [ 253.876815][ T8] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 253.912047][ T8] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 253.924084][ T8] usb 1-1: invalid MIDI EP [ 253.929045][ T8] usb 1-1: snd-bcd2000: error during probing [ 253.938390][ T8] snd-bcd2000: probe of 1-1:1.0 failed with error -22 [ 253.948830][ T8] usb 1-1: invalid MIDI EP [ 253.953475][ T8] usb 1-1: snd-bcd2000: error during probing [ 253.960471][ T8] snd-bcd2000: probe of 1-1:1.1 failed with error -22 [ 253.970686][ T8] usb 1-1: invalid MIDI EP [ 253.975320][ T8] usb 1-1: snd-bcd2000: error during probing [ 253.982216][ T8] snd-bcd2000: probe of 1-1:1.2 failed with error -22 [ 253.993915][ T8] usb 1-1: USB disconnect, device number 8 [ 254.027746][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.061630][ T5847] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 254.282030][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 254.293101][ T5847] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 254.301662][ T5847] usb 2-1: config 0 has no interface number 0 [ 254.307824][ T5847] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.324988][ T5847] usb 2-1: config 0 interface 85 has no altsetting 0 [ 254.335380][ T5847] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 254.352077][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.360148][ T5847] usb 2-1: Product: syz [ 254.365104][ T5847] usb 2-1: Manufacturer: syz [ 254.369763][ T5847] usb 2-1: SerialNumber: syz [ 254.391116][ T5847] usb 2-1: config 0 descriptor?? [ 254.510019][ T7486] 9pnet_fd: Insufficient options for proto=fd [ 254.650761][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 254.871358][ T5847] appletouch 2-1:0.85: Geyser mode initialized. [ 254.892030][ T5847] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input6 [ 255.092982][ C1] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 255.157499][ T7492] loop3: detected capacity change from 0 to 40427 [ 255.180938][ T7492] F2FS-fs (loop3): invalid crc value [ 255.201713][ T7492] F2FS-fs (loop3): Found nat_bits in checkpoint [ 255.259407][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 255.278164][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.287666][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.295896][ T7492] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 255.315974][ T8] usb 3-1: config 0 descriptor?? [ 255.324863][ T1589] usb 2-1: USB disconnect, device number 4 [ 255.335043][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 255.381170][ T1589] appletouch 2-1:0.85: input: appletouch disconnected [ 256.129619][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.136281][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.391876][ T5771] syz-executor: attempt to access beyond end of device [ 256.391876][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.426563][ T5771] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 256.744001][ T7512] netlink: 320 bytes leftover after parsing attributes in process `syz.0.518'. [ 256.971086][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 257.304623][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 257.334400][ T27] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 257.361089][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.417442][ T27] usb 2-1: config 0 has no interface number 0 [ 257.447161][ T27] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 257.468009][ T5847] usb 3-1: USB disconnect, device number 5 [ 257.487914][ T27] usb 2-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.530513][ T27] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 257.568208][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.611263][ T27] usb 2-1: Product: syz [ 257.646220][ T27] usb 2-1: Manufacturer: syz [ 257.689735][ T27] usb 2-1: SerialNumber: syz [ 257.733800][ T27] usb 2-1: config 0 descriptor?? [ 257.775889][ T7511] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 257.821303][ T27] asix: probe of 2-1:0.34 failed with error -22 [ 258.701025][ T5847] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 259.091243][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 259.102851][ T5847] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 259.111597][ T5847] usb 3-1: config 0 has no interface number 0 [ 259.118303][ T5847] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 259.129972][ T5847] usb 3-1: config 0 interface 89 has no altsetting 0 [ 259.145703][ T5847] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 259.159116][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.170746][ T5847] usb 3-1: Product: syz [ 259.174996][ T5847] usb 3-1: Manufacturer: syz [ 259.190224][ T5847] usb 3-1: SerialNumber: syz [ 259.207464][ T5847] usb 3-1: config 0 descriptor?? [ 259.226680][ T5847] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 259.259575][ T5847] em28xx 3-1:0.89: Video interface 89 found: [ 259.586810][ T7538] fuse: Unknown parameter '00000000000000000005' [ 259.600629][ T5816] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 259.800708][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 259.818038][ T5816] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 259.826734][ T5816] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.836632][ T5816] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.848554][ T5847] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 259.855121][ T5816] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.865759][ T5816] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.880996][ T5816] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 259.890094][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.925734][ T27] usb 2-1: USB disconnect, device number 5 [ 260.123872][ T5816] usb 4-1: usb_control_msg returned -32 [ 260.130448][ T5816] usbtmc 4-1:16.0: can't read capabilities [ 260.460444][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 260.819750][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.842304][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.852314][ T27] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 260.861712][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.875076][ T27] usb 2-1: config 0 descriptor?? [ 260.904924][ T5847] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 260.913825][ T5847] em28xx 3-1:0.89: board has no eeprom [ 261.003996][ T5847] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 261.011390][ T5847] em28xx 3-1:0.89: analog set to bulk mode. [ 261.018062][ T5816] em28xx 3-1:0.89: Registering V4L2 extension [ 261.047100][ T5847] usb 3-1: USB disconnect, device number 6 [ 261.054452][ T5847] em28xx 3-1:0.89: Disconnecting em28xx [ 261.113690][ T5816] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 261.126205][ T5816] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 261.133910][ T5816] em28xx 3-1:0.89: No AC97 audio processor [ 261.147493][ T5816] usb 3-1: Decoder not found [ 261.152639][ T5816] em28xx 3-1:0.89: failed to create media graph [ 261.159011][ T5816] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 261.176757][ T5816] em28xx 3-1:0.89: Registering snapshot button... [ 261.187362][ T5816] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input7 [ 261.205904][ T5816] em28xx 3-1:0.89: Remote control support is not available for this card. [ 261.215429][ T5847] em28xx 3-1:0.89: Closing input extension [ 261.223558][ T5847] em28xx 3-1:0.89: Deregistering snapshot button [ 261.258079][ T5847] em28xx 3-1:0.89: Freeing device [ 261.328958][ T27] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 261.353758][ T27] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 261.574372][ T27] cp2112 0003:10C4:EA90.0004: error requesting version [ 261.834196][ T27] cp2112: probe of 0003:10C4:EA90.0004 failed with error -5 [ 261.846452][ T27] usb 2-1: USB disconnect, device number 6 [ 262.355838][ T27] usb 4-1: USB disconnect, device number 5 [ 262.820426][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 262.950562][ T5847] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 263.197622][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 263.205796][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 263.212828][ T27] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 263.222003][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.234217][ T27] usb 4-1: config 0 descriptor?? [ 263.392828][ T5847] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 263.539838][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.759593][ T5847] usb 2-1: Product: syz [ 263.967399][ T27] hid-retrode 0003:0403:97C1.0005: unknown global tag 0xd [ 263.974713][ T5847] usb 2-1: Manufacturer: syz [ 264.000049][ T5847] usb 2-1: SerialNumber: syz [ 264.010649][ T27] hid-retrode 0003:0403:97C1.0005: item 0 1 1 13 parsing failed [ 264.019227][ T27] hid-retrode: probe of 0003:0403:97C1.0005 failed with error -22 [ 264.081361][ T5847] usb 2-1: config 0 descriptor?? [ 264.156313][ T5816] usb 4-1: USB disconnect, device number 6 [ 264.304873][ T5847] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 264.313447][ T6482] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 264.390438][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 264.520491][ T6482] usb 3-1: Using ep0 maxpacket: 8 [ 264.528302][ T6482] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 264.536689][ T6482] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.547168][ T6482] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.558515][ T6482] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.569163][ T6482] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.583257][ T6482] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 264.594140][ T6482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.594371][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.617286][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.631233][ T27] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 264.640711][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 264.648805][ T27] usb 1-1: SerialNumber: syz [ 264.841395][ T6482] usb 3-1: usb_control_msg returned -32 [ 264.860338][ T6482] usbtmc 3-1:16.0: can't read capabilities [ 264.883384][ T27] usb 1-1: 0:2 : does not exist [ 264.985721][ T27] usb 1-1: USB disconnect, device number 9 [ 265.083774][ T7434] udevd[7434]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.964558][ T5847] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 265.976087][ T5847] usb 2-1: USB disconnect, device number 7 [ 267.113122][ T8] usb 3-1: USB disconnect, device number 7 [ 268.775302][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 268.870356][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 269.055243][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 269.071994][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 269.089161][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 269.103399][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 269.116139][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 269.135156][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 269.148153][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 269.166769][ T8] usb 4-1: Product: syz [ 269.176918][ T8] usb 4-1: Manufacturer: syz [ 269.218556][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 269.229998][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 269.238910][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 269.250351][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 269.636854][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 269.770901][ T27] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 269.911603][ T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.942826][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.995284][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.023796][ T27] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.070318][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 270.100028][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.221261][ T8] usb 4-1: USB disconnect, device number 7 [ 270.381449][ T27] usb 3-1: usb_control_msg returned -32 [ 270.387135][ T27] usbtmc 3-1:16.0: can't read capabilities [ 270.835367][ T7669] netlink: 320 bytes leftover after parsing attributes in process `syz.1.575'. [ 272.127233][ T27] usb 3-1: USB disconnect, device number 8 [ 274.472295][ T5815] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 274.680401][ T5815] usb 2-1: Using ep0 maxpacket: 8 [ 274.707008][ T5815] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 274.719763][ T5815] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.740431][ T5815] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.774092][ T5815] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.820378][ T5815] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.874521][ T5815] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 274.919264][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.935222][ T7701] loop0: detected capacity change from 0 to 40427 [ 274.970615][ T7701] F2FS-fs (loop0): invalid crc value [ 274.999184][ T7701] F2FS-fs (loop0): Found nat_bits in checkpoint [ 275.062355][ T7701] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 275.305457][ T6482] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 275.825777][ T5815] usb 2-1: usb_control_msg returned -32 [ 275.867423][ T5815] usbtmc 2-1:16.0: can't read capabilities [ 276.201887][ T5773] syz-executor: attempt to access beyond end of device [ 276.201887][ T5773] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 276.240531][ T6482] usb 4-1: Using ep0 maxpacket: 8 [ 276.254833][ T6482] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 276.264105][ T5773] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 276.277673][ T6482] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.309682][ T6482] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.557286][ T6482] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.568150][ T6482] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.582907][ T6482] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.592419][ T6482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.739842][ T7717] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 276.983894][ T5816] usb 2-1: USB disconnect, device number 8 [ 277.090910][ T6482] usb 4-1: usb_control_msg returned -32 [ 277.292331][ T6482] usbtmc 4-1:16.0: can't read capabilities [ 277.467077][ T7719] usbtmc 4-1:16.0: INDICATOR_PULSE returned 0 [ 277.685083][ T5815] usb 4-1: USB disconnect, device number 8 [ 277.975770][ T7731] netlink: 320 bytes leftover after parsing attributes in process `syz.0.593'. [ 279.390400][ T6482] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 279.586988][ T6482] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 279.604044][ T6482] usb 2-1: config 0 has no interface number 0 [ 279.635780][ T6482] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 279.676868][ T6482] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 279.718535][ T6482] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 279.748898][ T7742] qrtr: Invalid version 43 [ 279.754185][ T6482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.773416][ T7742] comedi comedi3: comedi_test: 3 microvolt, 5 microsecond waveform attached [ 279.787057][ T6482] usb 2-1: Product: syz [ 279.797270][ T6482] usb 2-1: Manufacturer: syz [ 279.940758][ T6482] usb 2-1: SerialNumber: syz [ 280.075685][ T6482] usb 2-1: config 0 descriptor?? [ 280.098349][ T7733] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.112071][ T7733] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.132435][ T6482] smsc95xx v2.0.0 [ 280.245009][ T7750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.604'. [ 280.485064][ T7733] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.514245][ T7733] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.771550][ T6482] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 280.796298][ T6482] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 281.220431][ T5816] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 281.553532][ T7774] netlink: 320 bytes leftover after parsing attributes in process `syz.0.613'. [ 281.631476][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 281.752661][ T5816] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 281.888498][ T5816] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.240033][ T5816] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.360449][ T5816] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.389983][ T5816] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.434651][ T5816] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.470496][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.730958][ T5816] usb 3-1: usb_control_msg returned -32 [ 282.750572][ T5816] usbtmc 3-1:16.0: can't read capabilities [ 283.099067][ T7779] usbtmc 3-1:16.0: INDICATOR_PULSE returned 0 [ 283.308299][ T5816] usb 3-1: USB disconnect, device number 9 [ 283.844860][ T6482] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 283.856513][ T6482] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 283.870828][ T6482] usb 2-1: USB disconnect, device number 9 [ 284.046634][ T7792] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 284.853381][ T7792] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 285.120519][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 285.570622][ T5815] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 285.750946][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 285.768827][ T5815] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 285.785873][ T5815] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.830344][ T5815] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.853695][ T5815] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.875294][ T5815] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.693291][ T5815] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.702906][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.922685][ T5815] usb 3-1: usb_control_msg returned -32 [ 286.928367][ T5815] usbtmc 3-1:16.0: can't read capabilities [ 287.100487][ T5847] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 287.277853][ T7835] usbtmc 3-1:16.0: INDICATOR_PULSE returned 0 [ 287.295379][ T5847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.305889][ T5847] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 287.315311][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.327024][ T5847] usb 1-1: config 0 descriptor?? [ 287.341916][ T5847] pwc: Askey VC010 type 2 USB webcam detected. [ 287.440387][ T5815] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 287.479450][ T5814] usb 3-1: USB disconnect, device number 10 [ 287.620397][ T5815] usb 4-1: Using ep0 maxpacket: 32 [ 287.629281][ T5815] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 287.640968][ T5815] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 287.654744][ T5815] usb 4-1: config 0 interface 0 has no altsetting 0 [ 287.661959][ T5815] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 287.671472][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.686000][ T5815] usb 4-1: config 0 descriptor?? [ 287.957859][ T5847] pwc: recv_control_msg error -32 req 02 val 2700 [ 288.114138][ T5815] hid (null): unknown global tag 0xd [ 288.119530][ T5815] hid (null): invalid report_count -893387286 [ 288.170894][ T5847] pwc: recv_control_msg error -71 req 04 val 1000 [ 288.173586][ T5815] hid-alps 0003:044E:120C.0006: unknown global tag 0xd [ 288.198072][ T5847] pwc: recv_control_msg error -71 req 04 val 1300 [ 288.204776][ T5815] hid-alps 0003:044E:120C.0006: item 0 1 1 13 parsing failed [ 288.212885][ T5815] hid-alps 0003:044E:120C.0006: parse failed [ 288.212987][ T5815] hid-alps: probe of 0003:044E:120C.0006 failed with error -22 [ 288.329693][ T5815] usb 4-1: USB disconnect, device number 9 [ 288.445551][ T5847] pwc: recv_control_msg error -71 req 04 val 1400 [ 288.458431][ T5847] pwc: recv_control_msg error -71 req 02 val 2000 [ 288.465472][ T5847] pwc: recv_control_msg error -71 req 02 val 2100 [ 288.480870][ T5847] pwc: recv_control_msg error -71 req 04 val 1500 [ 288.487862][ T5847] pwc: recv_control_msg error -71 req 02 val 2500 [ 288.501809][ T5847] pwc: recv_control_msg error -71 req 02 val 2400 [ 288.519434][ T5847] pwc: recv_control_msg error -71 req 02 val 2600 [ 288.547011][ T5847] pwc: recv_control_msg error -71 req 02 val 2900 [ 288.612330][ T5847] pwc: recv_control_msg error -71 req 02 val 2800 [ 288.660017][ T5847] pwc: recv_control_msg error -71 req 04 val 1100 [ 288.733607][ T5847] pwc: recv_control_msg error -71 req 04 val 1200 [ 289.122551][ T5847] pwc: Registered as video103. [ 289.129330][ T5847] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 289.323257][ T5847] usb 1-1: USB disconnect, device number 10 [ 290.020754][ T5847] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 290.050545][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 290.250577][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 290.267165][ T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 290.282614][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.303077][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.319375][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.329991][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.348174][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 290.358122][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.452595][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.464388][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.474363][ T5847] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 290.483542][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.564139][ T5847] usb 1-1: config 0 descriptor?? [ 291.291852][ T8] usb 4-1: usb_control_msg returned -32 [ 291.297575][ T8] usbtmc 4-1:16.0: can't read capabilities [ 291.317081][ T8] usb 4-1: USB disconnect, device number 10 [ 291.394482][ T5847] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 291.440022][ T5847] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 291.582755][ T7861] cp2112 0003:10C4:EA90.0007: pid 7861 passed too short report [ 291.603642][ T5847] cp2112 0003:10C4:EA90.0007: error requesting version [ 291.628232][ T5847] cp2112: probe of 0003:10C4:EA90.0007 failed with error -71 [ 291.695111][ T5847] usb 1-1: USB disconnect, device number 11 [ 292.081861][ T7906] netlink: 'syz.2.662': attribute type 10 has an invalid length. [ 292.252493][ T7906] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 293.520930][ T5847] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 293.713293][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 293.726573][ T5847] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 293.751534][ T5847] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.769810][ T5847] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.780754][ T5847] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.792264][ T5847] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.826594][ T5847] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 293.842386][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.860339][ T1589] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 294.098379][ T5847] usb 3-1: usb_control_msg returned -32 [ 294.105541][ T5847] usbtmc 3-1:16.0: can't read capabilities [ 294.121433][ T5847] usb 3-1: USB disconnect, device number 11 [ 294.191087][ T1589] usb 2-1: Using ep0 maxpacket: 32 [ 294.206551][ T1589] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 294.256046][ T6482] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 294.300999][ T1589] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 294.373367][ T1589] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 294.496691][ T1589] usb 2-1: config 1 has no interface number 0 [ 294.581004][ T6482] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.599260][ T1589] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.657836][ T6482] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.680736][ T1589] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 294.820558][ T6482] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 294.840487][ T1589] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 294.849602][ T1589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.859290][ T6482] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.875756][ T6482] usb 1-1: config 0 descriptor?? [ 294.899989][ T1589] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 295.102981][ T1589] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 295.120916][ T7939] qrtr: Invalid version 43 [ 295.341899][ T6482] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 295.369650][ T6482] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 295.510413][ T1589] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 295.531260][ T5847] usb 2-1: USB disconnect, device number 10 [ 295.545664][ T7931] cp2112 0003:10C4:EA90.0008: pid 7931 passed too short report [ 295.557718][ T5847] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 295.567258][ T6482] cp2112 0003:10C4:EA90.0008: error requesting version [ 295.585144][ T6482] cp2112: probe of 0003:10C4:EA90.0008 failed with error -71 [ 295.596579][ T6482] usb 1-1: USB disconnect, device number 12 [ 295.736420][ T7943] loop3: detected capacity change from 0 to 40427 [ 295.740028][ T1589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 295.762753][ T1589] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 295.773178][ T1589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.784449][ T7943] F2FS-fs (loop3): invalid crc value [ 295.788761][ T1589] usb 3-1: config 0 descriptor?? [ 295.799214][ T7941] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 295.835084][ T7943] F2FS-fs (loop3): Found nat_bits in checkpoint [ 295.893986][ T7943] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 296.222365][ T1589] hid (null): unknown global tag 0xe [ 296.261913][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.277608][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.310354][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.327538][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.340850][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.355400][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.369402][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.386702][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.404149][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.420332][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.450318][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.459576][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.467593][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.475779][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.483056][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.520331][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.527340][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.554249][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.580626][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.587594][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.609514][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.617228][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.628160][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.646017][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.657732][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.700326][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.719068][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.746597][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.769457][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.790141][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.802095][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.815142][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.825057][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.847679][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.863546][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.873076][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.880015][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.892006][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 296.894712][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.909764][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.923245][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.931890][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.938913][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.950007][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.964262][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.974030][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.982524][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 296.989713][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 297.002780][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 297.010025][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 297.035664][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 297.080002][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 297.096760][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 297.110384][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 297.110406][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 297.134398][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 297.137796][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 297.150520][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 297.158709][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.168699][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x4 [ 297.168736][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 297.168764][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x0 [ 297.168790][ T1589] wacom 0003:056A:0084.0009: unknown main item tag 0x2 [ 297.168818][ T1589] wacom 0003:056A:0084.0009: unknown global tag 0xe [ 297.168834][ T1589] wacom 0003:056A:0084.0009: item 0 4 1 14 parsing failed [ 297.173569][ T1589] wacom 0003:056A:0084.0009: parse failed [ 297.208458][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 297.247338][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 297.261999][ T1589] wacom: probe of 0003:056A:0084.0009 failed with error -22 [ 297.298474][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.298994][ T1589] usb 3-1: USB disconnect, device number 12 [ 297.330445][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 297.374929][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.624119][ T8] usb 1-1: usb_control_msg returned -32 [ 297.644083][ T8] usbtmc 1-1:16.0: can't read capabilities [ 297.669706][ T8] usb 1-1: USB disconnect, device number 13 [ 298.941217][ T5771] syz-executor: attempt to access beyond end of device [ 298.941217][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 298.952909][ T7977] qrtr: Invalid version 43 [ 298.967142][ T5771] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 299.242029][ T5816] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 299.466551][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.493301][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.520362][ T5816] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 299.541923][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.550528][ T5815] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 299.577320][ T5816] usb 2-1: config 0 descriptor?? [ 299.730452][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 299.738055][ T5815] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 299.748437][ T5815] usb 1-1: config 0 has no interface number 0 [ 299.755134][ T5815] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 299.765783][ T5815] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 299.779491][ T5815] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 299.789304][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.807447][ T5815] usb 1-1: Product: syz [ 299.812138][ T5815] usb 1-1: Manufacturer: syz [ 299.816794][ T5815] usb 1-1: SerialNumber: syz [ 299.824896][ T5815] usb 1-1: config 0 descriptor?? [ 299.830813][ T7986] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 299.843288][ T7986] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 299.950479][ T1589] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 300.013233][ T5816] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 300.029577][ T5816] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 300.065885][ T7986] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 300.078718][ T7986] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 300.146013][ T1589] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 300.159742][ T1589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.168424][ T1589] usb 4-1: Product: syz [ 300.173748][ T1589] usb 4-1: Manufacturer: syz [ 300.178448][ T1589] usb 4-1: SerialNumber: syz [ 300.201100][ T1589] usb 4-1: config 0 descriptor?? [ 300.218422][ T1589] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 300.226106][ T7979] cp2112 0003:10C4:EA90.000A: pid 7979 passed too short report [ 300.240945][ T5816] cp2112 0003:10C4:EA90.000A: error requesting version [ 300.250696][ T5816] cp2112: probe of 0003:10C4:EA90.000A failed with error -71 [ 300.275372][ T5816] usb 2-1: USB disconnect, device number 11 [ 300.720535][ T5814] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 300.910553][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 300.918014][ T5814] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 300.927468][ T5814] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.938048][ T5814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 300.948324][ T5814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 300.958932][ T5814] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.972642][ T5814] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 300.984515][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.222340][ T5814] usb 3-1: GET_CAPABILITIES returned 0 [ 301.228082][ T5814] usbtmc 3-1:16.0: can't read capabilities [ 302.525940][ T1589] gspca_stk1135: reg_w 0x203 err -71 [ 302.542200][ T1589] gspca_stk1135: serial bus timeout: status=0x00 [ 302.554904][ T1589] gspca_stk1135: Sensor write failed [ 302.563123][ T1589] gspca_stk1135: serial bus timeout: status=0x00 [ 302.569614][ T1589] gspca_stk1135: Sensor write failed [ 302.580435][ T1589] gspca_stk1135: serial bus timeout: status=0x00 [ 302.587209][ T1589] gspca_stk1135: Sensor read failed [ 302.596907][ T1589] gspca_stk1135: serial bus timeout: status=0x00 [ 302.605197][ T1589] gspca_stk1135: Sensor read failed [ 302.618167][ T1589] gspca_stk1135: Detected sensor type unknown (0x0) [ 302.627156][ T1589] gspca_stk1135: serial bus timeout: status=0x00 [ 302.637548][ T1589] gspca_stk1135: Sensor read failed [ 302.649090][ T1589] gspca_stk1135: serial bus timeout: status=0x00 [ 302.658915][ T1589] gspca_stk1135: Sensor read failed [ 302.667300][ T1589] gspca_stk1135: serial bus timeout: status=0x00 [ 302.677452][ T1589] gspca_stk1135: Sensor write failed [ 302.685354][ T1589] gspca_stk1135: serial bus timeout: status=0x00 [ 302.695989][ T1589] gspca_stk1135: Sensor write failed [ 302.703331][ T1589] stk1135: probe of 4-1:0.0 failed with error -71 [ 302.715305][ T1589] usb 4-1: USB disconnect, device number 11 [ 302.964222][ T8006] loop1: detected capacity change from 0 to 40427 [ 302.982086][ T8006] F2FS-fs (loop1): invalid crc value [ 303.004672][ T8006] F2FS-fs (loop1): Found nat_bits in checkpoint [ 303.112934][ T8006] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 303.188992][ T8012] qrtr: Invalid version 43 [ 303.468846][ T5815] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 303.497800][ T5815] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 303.531660][ T5815] asix: probe of 1-1:0.34 failed with error -71 [ 303.572876][ T5815] usb 1-1: USB disconnect, device number 14 [ 304.140425][ T5815] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 304.335586][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.362528][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.387831][ T5815] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 304.417528][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.441814][ T5815] usb 1-1: config 0 descriptor?? [ 305.283580][ T5815] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 305.303689][ T5815] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 305.443572][ T5815] cp2112 0003:10C4:EA90.000B: error requesting version [ 305.453911][ T5815] cp2112: probe of 0003:10C4:EA90.000B failed with error -5 [ 305.625939][ T5770] syz-executor: attempt to access beyond end of device [ 305.625939][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 305.643195][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 305.657638][ T5847] usb 1-1: USB disconnect, device number 15 [ 305.850802][ T5815] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 306.047761][ T8039] qrtr: Invalid version 43 [ 306.054844][ T5815] usb 4-1: unable to get BOS descriptor or descriptor too short [ 306.090503][ T5815] usb 4-1: config 3 has an invalid interface number: 56 but max is 0 [ 306.098671][ T5815] usb 4-1: config 3 has no interface number 0 [ 306.113537][ T5815] usb 4-1: config 3 interface 56 altsetting 5 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 306.124945][ T5815] usb 4-1: config 3 interface 56 has no altsetting 0 [ 306.139559][ T5815] usb 4-1: New USB device found, idVendor=044f, idProduct=ec60, bcdDevice=79.aa [ 306.154807][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.163364][ T5815] usb 4-1: Product: syz [ 306.167599][ T5815] usb 4-1: Manufacturer: syz [ 306.189905][ T5815] usb 4-1: SerialNumber: syz [ 306.432264][ T7995] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 306.456153][ T5815] usb 4-1: USB disconnect, device number 12 [ 306.506535][ T5814] usb 3-1: USB disconnect, device number 13 [ 307.800101][ T5814] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 307.983218][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 308.003308][ T5814] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 308.018100][ T5814] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.041810][ T5814] usb 3-1: config 0 has no interface number 0 [ 308.048194][ T5814] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 308.063366][ T5814] usb 3-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.085989][ T5814] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 308.095407][ T5760] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 308.104543][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.115947][ T5814] usb 3-1: Product: syz [ 308.120420][ T5814] usb 3-1: Manufacturer: syz [ 308.125735][ T5814] usb 3-1: SerialNumber: syz [ 308.134902][ T5814] usb 3-1: config 0 descriptor?? [ 308.141265][ T8049] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 308.151609][ T5814] asix: probe of 3-1:0.34 failed with error -22 [ 308.300533][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 308.308288][ T5760] usb 1-1: Using ep0 maxpacket: 16 [ 308.322397][ T5760] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 308.335335][ T5760] usb 1-1: config 0 has no interface number 0 [ 308.341890][ T5760] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 308.361884][ T5760] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 308.379854][ T5760] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 308.389944][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.398396][ T5760] usb 1-1: Product: syz [ 308.403434][ T5760] usb 1-1: Manufacturer: syz [ 308.408080][ T5760] usb 1-1: SerialNumber: syz [ 308.421159][ T5760] usb 1-1: config 0 descriptor?? [ 308.427833][ T8059] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 308.435570][ T8059] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 308.502572][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.524307][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.537906][ T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 308.547462][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.560905][ T8] usb 2-1: config 0 descriptor?? [ 308.573699][ T8067] qrtr: Invalid version 43 [ 308.659755][ T8059] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 308.667497][ T8059] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 308.989625][ T8] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 309.005238][ T8] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 309.188485][ T8] cp2112 0003:10C4:EA90.000C: error requesting version [ 309.205368][ T8] cp2112: probe of 0003:10C4:EA90.000C failed with error -5 [ 309.409633][ T8] usb 2-1: USB disconnect, device number 12 [ 310.031433][ T8080] qrtr: Invalid version 43 [ 310.154057][ T8] usb 3-1: USB disconnect, device number 14 [ 310.352101][ T5760] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 310.392073][ T5760] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 310.414622][ T8088] ------------[ cut here ]------------ [ 310.420941][ T8088] WARNING: CPU: 0 PID: 8088 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 310.432362][ T8088] Modules linked in: [ 310.436336][ T8088] CPU: 0 PID: 8088 Comm: syz.2.725 Not tainted syzkaller #0 [ 310.443798][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.454173][ T8088] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 310.461586][ T8088] Code: 48 89 df e8 6a 56 d6 f7 e9 dc fc ff ff e8 f0 1e 7e f7 eb 24 e8 e9 1e 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 d8 1e 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ca 1e 7e f7 48 8b 7c 24 08 4c 8b 7c [ 310.482230][ T8088] RSP: 0018:ffffc90003636e00 EFLAGS: 00010283 [ 310.488459][ T8088] RAX: ffffffff8a08ff2e RBX: 0000000000000001 RCX: 0000000000080000 [ 310.497190][ T8088] RDX: ffffc9000e06e000 RSI: 0000000000006156 RDI: 0000000000006157 [ 310.505773][ T8088] RBP: dffffc0000000000 R08: ffffffff911c55c7 R09: 1ffffffff2238ab8 [ 310.514327][ T8088] R10: dffffc0000000000 R11: fffffbfff2238ab9 R12: 0000000000000001 [ 310.522867][ T8088] R13: ffff88805cc8a5d9 R14: ffff88807c8bac70 R15: ffff88807c8bace8 [ 310.531452][ T8088] FS: 00007ff2e8dc66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 310.541269][ T8088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.547930][ T8088] CR2: 00007ff2e8dc4fa8 CR3: 00000000788fe000 CR4: 00000000003506f0 [ 310.556722][ T8088] Call Trace: [ 310.560088][ T8088] [ 310.563618][ T8088] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 310.570662][ T8088] ieee80211_csa_finalize+0x5a6/0xf20 [ 310.576135][ T8088] ? ieee80211_csa_finalize_work+0x140/0x140 [ 310.582647][ T8088] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 310.589243][ T8088] ieee80211_channel_switch+0xad5/0xe70 [ 310.595430][ T8088] ? ieee80211_csa_finalize+0xf20/0xf20 [ 310.601229][ T8088] ? mutex_lock_nested+0x20/0x20 [ 310.606234][ T8088] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 310.612216][ T8088] rdev_channel_switch+0xeb/0x240 [ 310.617317][ T8088] nl80211_channel_switch+0xae8/0x1120 [ 310.620740][ T5847] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 310.622897][ T8088] ? genl_family_rcv_msg_doit+0xce/0x310 [ 310.636512][ T8088] ? __mutex_trylock_common+0x159/0x260 [ 310.642225][ T8088] ? mutex_unlock+0x10/0x10 [ 310.646805][ T8088] ? nl80211_set_coalesce+0x1340/0x1340 [ 310.652545][ T8088] ? __nla_parse+0x40/0x50 [ 310.657036][ T8088] ? nl80211_pre_doit+0x4f1/0x930 [ 310.662274][ T8088] genl_family_rcv_msg_doit+0x211/0x310 [ 310.667889][ T8088] ? end_current_label_crit_section+0x170/0x170 [ 310.674307][ T8088] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 310.680369][ T8088] ? bpf_lsm_capable+0x9/0x10 [ 310.685122][ T8088] ? security_capable+0x89/0xb0 [ 310.690146][ T8088] genl_rcv_msg+0x619/0x7a0 [ 310.694828][ T8088] ? genl_bind+0x360/0x360 [ 310.699312][ T8088] ? nl80211_exit+0x30/0x30 [ 310.703927][ T8088] ? nl80211_set_coalesce+0x1340/0x1340 [ 310.709542][ T8088] ? nl80211_pre_doit+0x930/0x930 [ 310.714723][ T8088] ? ref_tracker_free+0x690/0x840 [ 310.719839][ T8088] netlink_rcv_skb+0x241/0x4d0 [ 310.724765][ T8088] ? genl_bind+0x360/0x360 [ 310.729254][ T8088] ? netlink_ack+0x1180/0x1180 [ 310.734287][ T8088] ? __lock_acquire+0x7d40/0x7d40 [ 310.739716][ T8088] ? down_read+0x1ac/0x2e0 [ 310.744256][ T8088] genl_rcv+0x28/0x40 [ 310.748291][ T8088] netlink_unicast+0x751/0x8d0 [ 310.753261][ T8088] netlink_sendmsg+0x8d0/0xbf0 [ 310.758114][ T8088] ? netlink_getsockopt+0x590/0x590 [ 310.763464][ T8088] ? aa_sock_msg_perm+0x94/0x150 [ 310.768522][ T8088] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 310.774013][ T8088] ? security_socket_sendmsg+0x80/0xa0 [ 310.779557][ T8088] ? netlink_getsockopt+0x590/0x590 [ 310.784901][ T8088] ____sys_sendmsg+0x5ba/0x960 [ 310.789758][ T8088] ? __asan_memset+0x22/0x40 [ 310.794492][ T8088] ? __sys_sendmsg_sock+0x30/0x30 [ 310.799568][ T8088] ? __import_iovec+0x5f2/0x850 [ 310.804587][ T8088] ? import_iovec+0x73/0xa0 [ 310.809162][ T8088] ___sys_sendmsg+0x2a6/0x360 [ 310.813966][ T8088] ? __sys_sendmsg+0x2a0/0x2a0 [ 310.818829][ T8088] ? put_user_ifreq+0x85/0xb0 [ 310.823681][ T8088] __se_sys_sendmsg+0x1c2/0x2b0 [ 310.828610][ T8088] ? __x64_sys_sendmsg+0x80/0x80 [ 310.833765][ T8088] ? lockdep_hardirqs_on+0x98/0x150 [ 310.839336][ T8088] do_syscall_64+0x55/0xa0 [ 310.843919][ T8088] ? clear_bhb_loop+0x40/0x90 [ 310.848664][ T8088] ? clear_bhb_loop+0x40/0x90 [ 310.853478][ T8088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.859440][ T8088] RIP: 0033:0x7ff2e7f9cdd9 [ 310.863976][ T8088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.867435][ T5847] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 310.883932][ T8088] RSP: 002b:00007ff2e8dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.883969][ T8088] RAX: ffffffffffffffda RBX: 00007ff2e8216090 RCX: 00007ff2e7f9cdd9 [ 310.883987][ T8088] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 310.884003][ T8088] RBP: 00007ff2e8032d69 R08: 0000000000000000 R09: 0000000000000000 [ 310.884018][ T8088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.884033][ T8088] R13: 00007ff2e8216128 R14: 00007ff2e8216090 R15: 00007ffcdc5fc648 [ 310.884071][ T8088] [ 310.884083][ T8088] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 310.884106][ T8088] CPU: 0 PID: 8088 Comm: syz.2.725 Not tainted syzkaller #0 [ 310.884126][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.884139][ T8088] Call Trace: [ 310.884147][ T8088] [ 310.884155][ T8088] dump_stack_lvl+0x18c/0x250 [ 310.884318][ T8088] ? show_regs_print_info+0x20/0x20 [ 310.884407][ T8088] ? load_image+0x420/0x420 [ 310.884539][ T8088] panic+0x2dc/0x730 [ 310.884630][ T8088] ? bpf_jit_dump+0xd0/0xd0 [ 310.884767][ T8088] __warn+0x2e0/0x470 [ 310.884820][ T8088] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 310.884907][ T8088] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 310.884980][ T8088] report_bug+0x2be/0x4f0 [ 310.885037][ T8088] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 310.885107][ T8088] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 310.885183][ T8088] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 310.885255][ T8088] handle_bug+0xcf/0x120 [ 310.885305][ T8088] exc_invalid_op+0x1a/0x50 [ 310.885361][ T8088] asm_exc_invalid_op+0x1a/0x20 [ 310.885428][ T8088] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 310.885508][ T8088] Code: 48 89 df e8 6a 56 d6 f7 e9 dc fc ff ff e8 f0 1e 7e f7 eb 24 e8 e9 1e 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 d8 1e 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ca 1e 7e f7 48 8b 7c 24 08 4c 8b 7c [ 310.885564][ T8088] RSP: 0018:ffffc90003636e00 EFLAGS: 00010283 [ 310.885619][ T8088] RAX: ffffffff8a08ff2e RBX: 0000000000000001 RCX: 0000000000080000 [ 310.885670][ T8088] RDX: ffffc9000e06e000 RSI: 0000000000006156 RDI: 0000000000006157 [ 310.885721][ T8088] RBP: dffffc0000000000 R08: ffffffff911c55c7 R09: 1ffffffff2238ab8 [ 310.885777][ T8088] R10: dffffc0000000000 R11: fffffbfff2238ab9 R12: 0000000000000001 [ 310.885823][ T8088] R13: ffff88805cc8a5d9 R14: ffff88807c8bac70 R15: ffff88807c8bace8 [ 310.885896][ T8088] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 310.886031][ T8088] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 310.886120][ T8088] ieee80211_csa_finalize+0x5a6/0xf20 [ 310.886218][ T8088] ? ieee80211_csa_finalize_work+0x140/0x140 [ 310.886300][ T8088] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 310.886400][ T8088] ieee80211_channel_switch+0xad5/0xe70 [ 310.886521][ T8088] ? ieee80211_csa_finalize+0xf20/0xf20 [ 310.886637][ T8088] ? mutex_lock_nested+0x20/0x20 [ 310.886697][ T8088] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 310.886792][ T8088] rdev_channel_switch+0xeb/0x240 [ 310.886890][ T8088] nl80211_channel_switch+0xae8/0x1120 [ 310.886972][ T8088] ? genl_family_rcv_msg_doit+0xce/0x310 [ 310.887070][ T8088] ? __mutex_trylock_common+0x159/0x260 [ 310.887154][ T8088] ? mutex_unlock+0x10/0x10 [ 310.887208][ T8088] ? nl80211_set_coalesce+0x1340/0x1340 [ 310.887405][ T8088] ? __nla_parse+0x40/0x50 [ 310.887471][ T8088] ? nl80211_pre_doit+0x4f1/0x930 [ 310.887563][ T8088] genl_family_rcv_msg_doit+0x211/0x310 [ 310.887618][ T8088] ? end_current_label_crit_section+0x170/0x170 [ 310.887711][ T8088] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 310.887791][ T8088] ? bpf_lsm_capable+0x9/0x10 [ 310.887867][ T8088] ? security_capable+0x89/0xb0 [ 310.887964][ T8088] genl_rcv_msg+0x619/0x7a0 [ 310.888048][ T8088] ? genl_bind+0x360/0x360 [ 310.888094][ T8088] ? nl80211_exit+0x30/0x30 [ 310.888158][ T8088] ? nl80211_set_coalesce+0x1340/0x1340 [ 310.888231][ T8088] ? nl80211_pre_doit+0x930/0x930 [ 310.888297][ T8088] ? ref_tracker_free+0x690/0x840 [ 310.888414][ T8088] netlink_rcv_skb+0x241/0x4d0 [ 310.888590][ T8088] ? genl_bind+0x360/0x360 [ 310.888655][ T8088] ? netlink_ack+0x1180/0x1180 [ 310.888755][ T8088] ? __lock_acquire+0x7d40/0x7d40 [ 310.888839][ T8088] ? down_read+0x1ac/0x2e0 [ 310.888904][ T8088] genl_rcv+0x28/0x40 [ 310.888958][ T8088] netlink_unicast+0x751/0x8d0 [ 310.889078][ T8088] netlink_sendmsg+0x8d0/0xbf0 [ 310.889189][ T8088] ? netlink_getsockopt+0x590/0x590 [ 310.889295][ T8088] ? aa_sock_msg_perm+0x94/0x150 [ 310.889382][ T8088] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 310.889450][ T8088] ? security_socket_sendmsg+0x80/0xa0 [ 310.889514][ T8088] ? netlink_getsockopt+0x590/0x590 [ 310.889612][ T8088] ____sys_sendmsg+0x5ba/0x960 [ 310.889691][ T8088] ? __asan_memset+0x22/0x40 [ 310.889773][ T8088] ? __sys_sendmsg_sock+0x30/0x30 [ 310.889866][ T8088] ? __import_iovec+0x5f2/0x850 [ 310.889967][ T8088] ? import_iovec+0x73/0xa0 [ 310.890032][ T8088] ___sys_sendmsg+0x2a6/0x360 [ 310.890110][ T8088] ? __sys_sendmsg+0x2a0/0x2a0 [ 310.890239][ T8088] ? put_user_ifreq+0x85/0xb0 [ 310.890395][ T8088] __se_sys_sendmsg+0x1c2/0x2b0 [ 310.890462][ T8088] ? __x64_sys_sendmsg+0x80/0x80 [ 310.890642][ T8088] ? lockdep_hardirqs_on+0x98/0x150 [ 310.890721][ T8088] do_syscall_64+0x55/0xa0 [ 310.890767][ T8088] ? clear_bhb_loop+0x40/0x90 [ 310.890827][ T8088] ? clear_bhb_loop+0x40/0x90 [ 310.890915][ T8088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.890980][ T8088] RIP: 0033:0x7ff2e7f9cdd9 [ 310.891034][ T8088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.891079][ T8088] RSP: 002b:00007ff2e8dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.891132][ T8088] RAX: ffffffffffffffda RBX: 00007ff2e8216090 RCX: 00007ff2e7f9cdd9 [ 310.891175][ T8088] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 310.891222][ T8088] RBP: 00007ff2e8032d69 R08: 0000000000000000 R09: 0000000000000000 [ 310.891270][ T8088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.891316][ T8088] R13: 00007ff2e8216128 R14: 00007ff2e8216090 R15: 00007ffcdc5fc648 [ 310.891403][ T8088] [ 310.894360][ T8088] Kernel Offset: disabled