last executing test programs: 1m58.603296577s ago: executing program 1 (id=1745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, r2, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_b, @initial, {}, @value}, @void, @void, @void, @void, @void}}]}, 0x3c}}, 0x0) 1m57.794260468s ago: executing program 1 (id=1749): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000000}) close_range(r0, r1, 0x0) 1m56.931668355s ago: executing program 1 (id=1754): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1m56.118117997s ago: executing program 1 (id=1758): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m54.946449692s ago: executing program 1 (id=1766): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 1m54.019502276s ago: executing program 1 (id=1771): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2SEmV9Pjb13Z19b/a9eeMZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr56+qz7PwA8Vq75/38AAAAAAAAAAAAAADjoUhTxZKSYvbKaxqr3HfXL7b7bd0aHhreudiRVNQ9V5cuf+pmz585/6YXBC9283J7+gPp77bPx2si1S42XZ27Nzk3Oz09ONEan2+MzE5M73sNu6292sjoAjVuv3564cWO+cfb5cxs+vjPwfv8TxwcuDj576plu2dGh4eGR9SL13vK1+25Ix3YzPA5HEacixXPf+2lqRUQRuz8W9Qc79psdqTpxsurE6NBw1ZGpdmt6ofzwavdAFBGNnkrN7jHaeiyi1vdA+7C9ZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv+9u+uLImqR4jvHVtP1iDjUPQ5frCYGb9+OYh/7uANlOxt9EUvFIzBmB1h/FPFqpPjZOydiPF9nqmvNFyJeLfMHEW+V+VJEKk+M8xHvbXEe8WiqRRF/WY7/xdU0UV0PuteVy19rfGX6xkxP2e515SPeH+65Ujyk+8ORTflgHPBrUz2KaFVX/NV0/7/ZAQAAAAAAAAAAAAAAAGCvHYkiPhMpXvmPP6nmFUc1L/3YxcE/HPjV3jnjT3/Ifsqyz0fEYrGzObmH88TAq+lqSg95LvHjrB5F/Gme//eth90YAAAAAAAAAAAAAAAAAACAx1oRP4kUL757Ii1F75ri7embjWut61OdVWG7a/9210xfW1tba6RONnOO5VzMuZRzOedKzihy/ZzNnGM5F3Mu5VzOuZIzDuX6OZs5x3Iu5lzKuZxzJWfUcv2czZxjORfLrK93dDlvX8kZB2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj5MiivhFpPj2N1ZTpIhoRoxFJ5f7H3brAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSfyri+5Gi8UfNu9tqEZGqfztOlL+cj+bhMj8ZzcEyX4rmpZytKmvNbz2E9rM7famIH0eK/vrbdwc8j39f593d0yDe+ub6u8/WOnmo++HA+/1PHD92cXD4N57e7nXaqgEnL7enb99pjA4ND4/0bK7lb/9kz7aB/L3F3nSdiJh/483XW1NTk3P3/6I8BXZR/RF6kWqPS08f1ovFvTgh9+5F1A5EMx5O33kMlPf/9yLF7777n90bfuf+X49f6by7e4ePn//Z+v3/xc072uH9v7a5Xr7/l/f0re7/T/ZsezH/bqSvFlFfuDXbdzyiPv/Gm6fat1o3J29OTp8/ffrLg4NfPne673BE/UZ7arLn1Z4cLgAAAAAAAAAAAAAAAIAHJxXx+5Gi9ePV1IiIO9V8rYGLg8+eeuZQHKrmW22Yt/3ayLVLjZdnbs3OTc7PT040Rqfb4zMTkzv9uno13Wt0aHhfOvOhjuxz+4/UX56ZfWOuffOPF7b8/Gj90vX5hbnW+NYfx5EoIpq9W05WDR4dGq4aPdVuTVdVr245mf6j60tF/FekGD/fSJ/P2/L8/80z/DfM/1/cvKN9mv//iZ5t5XemVMTPI8Xv/NXT8fmqnUfjnmOWy/1dpDh54XO5XBwuy3Xb0HmuQGdmYFn2/yLFP/1iY9nufMgn18ue2fGBfUSU438sUnz/L74bv5m3bXz+w9bjf3TzjvZp/J/q2XZ0w/MKdt118vifihQvPfl2/Fbe9kHP/+g+e+NELnz3+Rz7NP6f6tk2kL/3t/em6wAAAAAAAAAAAI+0vlTE30eKHw7X0gt5207+/t/E5h3t09//+nTPtom9Wa/oQ1/s+qACAAAAwAHRl4r4SaS4ufD23TnUG+d/98z//L31+Z9DadOn1Z/z/Vr13IC9/PO/XgP5e8d2320AAAAAAAAAAAAAAAAAAAA4UFIq4oW8nvpYNZ9/Ytv11JcjxSv/81wul46X5brrwA9Uv9avzEyfujQ1NTPeWmhdn5psjMy2xifLuk9FitW//VyuW1Trq3fXm++s8b6+FvtcpBj+h27Zzlrs3bXJn1ove6Ys+4lI8d//uLFsdx3rT62XPVuW/ZtI8fV/2brs8fWy58qy340UP/p6o1v2aFm2+3zUT6+XfX58ptiHUQEAAAAAAAAAAAAAAAAAAOBx05eK+PNI8b+3lu7O5c/r//f1vK289c2e9f43uVOt8z9Qrf+/3ev7Wf+/eq7A4nbfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH08pingzUsxeWU3L/eX7jvrl9vTtO6NDw1tXO5Kqmoeq8uVP/czZc+e/9MLghW5+cP299pl4beTapcbLM7dm5ybn5ycnGqPT7fGZickd72G39Tc7WR2Axq3Xb0/cuDHfOPv8uQ0f3xl4v/+J4wMXB5899Uy37OjQ8PBIT5la331/+z3SNtsPRxF/HSme+95P0w/7I4rY/bH4kHNnvx2pOnGy6sTo0HDVkal2a3qh/PBq90AUEY2eSs3uMXoAY7ErzYjFsvllg0+W3RuZbc21rk9NNq625hbaC+2Z6aup09qyP40o4kKKWIqIlf57d9cXRbweKb5zbDX9a3/Eoe5x+OKVka+ePrt9O4p97OMOlO1s9EUsFY/AmB1g/VHEP0eKn71zIv6tP6IWnZ/4QsSrZf4g4q3ojHcqT4zzEe9tcR7xaKpFEf9fjv/F1fROf3k96F5XLn+t8ZXpGzM9ZbvXlUf+/vAgHfBrUz2K+FF1xV9N/+6/awAAAAAAAAAAAAAAAIADpIhfjxQvvnsiVfOD784pbk/fbFxrXZ/qTOvrzv3rzpleW1tba6RONnOO5VzMuZRzOedKzihy/ZzNMutra2P5/WLOpZzLOVdyxqFcP2cz51jOxZxLOZdzruSMWq6fs5lzLOdizqWcyzlXcsYBmbsHAAAAAAAAAAAAAAAAAAB8vBTVPym+/Y3VtNbfWV96LDq5bD3Qj71fBgAA//8dq/O8") rename(&(0x7f0000001600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f00000000c0)=""/55, 0x37) 1m52.341382551s ago: executing program 32 (id=1771): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$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") rename(&(0x7f0000001600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f00000000c0)=""/55, 0x37) 8.723546128s ago: executing program 3 (id=2210): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)="674c774c0372b9", 0x7}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "e9c9cf623465aab2"}, 0x28) 8.03554986s ago: executing program 3 (id=2213): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="93") 5.275531877s ago: executing program 3 (id=2227): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 5.27286058s ago: executing program 4 (id=2228): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x44010) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003fdffff7f000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 4.953013777s ago: executing program 0 (id=2229): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, '.'}}], [], 0x2c}) recvmsg(0xffffffffffffffff, 0x0, 0x40000003) 4.437252257s ago: executing program 3 (id=2231): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r2, @ANYRESDEC=r1], 0x0) 4.220411154s ago: executing program 0 (id=2232): setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r0) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0xff02, 0x0) 4.030971404s ago: executing program 4 (id=2233): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0xfe}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f0000000100)="3f7ead2355f7dba182", 0x9}, 0x1, 0x0, 0x0, 0x4000}, 0x4008040) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x4}, 0xfc}, 0x18, &(0x7f0000000340)={0x0}}, 0x0) 3.99555216s ago: executing program 2 (id=2234): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000440)=ANY=[], 0x83, 0x1501, &(0x7f0000002180)="$eJzs3Au8jtW2MPAx5pwPi6Q3yX2OOR7e5DJJklwSEkmSJEluCUmSJCGxyC0JScg9yT0kt1jJ/X7LPUm2JElCQpL5/bQ7n7NP+5z2/nbf8X1njf/vN39rjvW8Y7xzrrF+7/s8z/qt99uOg6vWr1a5LjPDvwT/+iUVAFIAoB8AXAMAEQCUylYqG+AwyKQx9V97EvHnemjalV6BuJKk/+mb9D99k/6nb9L/9E36n75J/9M36X/6Jv0XIj3bOj33tTLS7/jvu/8Pcv///zny/v8/yOFiY75cX+z6Tv9EivQ/fZP+p2/S//RN+p++Sf/TN+n//3ARQKX/4rD0P32T/guRnl3p+88yruy40r9/QgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHSh3PhMgMA/za/0usSQgghhBBCCCHEnydkvNIrEEIIIYQQQgghxP99CAo0GIggA2SEFMgEmeEqyAJXQ1a4BhJwLWSD6yA7XA85ICfkgtyQB/JCPrBA4IAhhvxQAJJwAxSEG6EQFIYiUBQ8FIPicBOUgJuhJNwCpeBWKA23QRkoC+WgPNwOFeAOqAiVoDLcCVXgLqgK1eBuqA73QA24F2rCfVAL7ofa8ADUgQehLjwE9eBhqA+PQAN4FBpCI2gMTaDp/1H+i9AVXoJu0B1SoQf0hJehF/SGPtAX+sEr0B9ehQHwGgyEQTAYXoch8AYMhTdhGAyHEfAWjIRRMBrGwFgYB+PhbZgA78BEeBcmwWSYAlNhGkyHGfAezIRZMBvehznwAcyFeTAfFsBC+BAWwWJIg49gCXwMS2EZLIcVsBJWwWpYA2thHayHDbARNsFm2AJb4RPYBtthB+yEXbAb9sCnsBc+g33wOeyHL/7J/LP/Ib8TAgIqVGjQYAbMgCmYgpkxM2bBLJgVs2ICE5gNs2F2zI45MAfmwlyYB/NgPsyHhISMjPkxPyYxiQWxIBbCQlgEi6BHj8WxOJbAm7EklsRSWApLY2ksg2WxLJbH8lgBK2BFrIiVsTJWwSpYFavi3Xg33oM1sAbWxJpYC2thbayNdbAO1sW6WA/rYX2sjw2wATbEhtgYG2NTbIrNsBk2x+bYEltiK2yFrbE1tsE22BbbYjtsh+2xPXbADtgRO2In7Iyd8UV8EV/Cl7A7VlE9sCf2xF7YC/tgX+yLr2B/fBVfxddwIA7Cwfg6vo5v4FA8g8NwOI7AEVhBjcLROAZZjcPxOB4n4ASciBNxEk7GyTgVp+F0nIEzcCbOwln4Ps7BD/ADnIfzcAEuxIW4CBdjGqbhEjyLS3EZLscVuBJX4Upcg2txDa7HDbgeN+Em3IJb8BP8BLfjdtyJO3E37sZP8VP8DD/Dgbgf9+MBPIAH8SAewkN4GA/jETyCR/EoHsNjeByP4wk8iafwJJ7G03gGz+I5PIfn8TxewOfzfF1vd+F1A0FdYpRRGVQGlaJSVGaVWWVRWVRWlVUlVEJlU9lUdpVd5VA5VC6VS+VReVQ+lU+RIsUqVvlVfpVUSVVQFVSFVCFVRBVRXnlVXBVXJVQJVVKVVKXUraq0uk2VUWVVC19elVcVVEtfUVVSlVVlVUXdpaqqaqqaqq6qqxqqhqqpaqpaqpaqrR5QdVQP7IMPqUudqa8GYQM1GBuqRqqxaqLewMdUMzUUm6sWqqV6Qg3HYdhaNfNt1NOqrRqN7dSzagw+pzqocdhRvaA6qc6qi3pRdVXNfbcMv70EqqnYS/VWfVRfNRPvUpc6VlW9pgaqQWqwel0twDfUUPWmGqaGqxHqLTVSjVKj1Rg1Vo1T49XbaoJ6R01U76pJarKaoqaqaWq6mqHeUzPVLDVbva/mqA/UXDVPzVcL1EL1oVqkFqs09ZFaoj5WS9UytVytUCvVKrVarVFr1Tq1Xm1QG9UmtVltUVvVJ2qb2q52qJ1ql9qt9qhP1V71mdqnPlf71RfqgPqLOqi+VIfUV+qw+lodUd+oo+pbdUx9p46r79UJdVKdUj+o0+pHdUadVefUT+q8+lldUL+oiyoo0KiV1troSGfQGXWKzqQz66t0Fn21zqqv0Ql9rc6mr9PZ9fU6h86pc+ncOo/Oq/Npq0k7zTrW+XUBndQ36IL6Rl1IF9ZFdFHtdTFdXN+kS+ibdUl9iy6lb9Wl9W26jC6ry+ny+nZdQd+hK+pKurK+U1fRd+mqupq+W1fX9+ga+l5dU9+na+n7dW39gK6jH9R19UO6nn5Y19eP6Ab6Ud1QN9KNdRPdVD+mm+nHdXPdQrfUT+hW+kndWj+l2+indVv9jG6nn9Xt9XO6g35ed9Qv6E66s+6if9EXddDddHedqnvonvpl3Uv31n10X91Pv6L761f1AP2aHqgH6cH6dT1Ev6GH6jf1MD1cj9Bv6ZF6lB6tx+ixepwer9/WE/Q7eqJ+V0/Sk/UUPVVP09N1n98qzf4H8t/5O/kDfn32LXqr/kRv09v1Dr1T79K79R69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Uv+kf9Cn9Y/6jD6rz+qf9Hl9Xl/47WcABo0y2hgTmQwmo0kxmUxmc5XJYq42Wc01JmGuNdnMdSa7ud7kMDlNLpPb5DF5TT5jDRln2MQmvylgkuYGU9DcaAqZwqaIKWq8KWaKm5v+5fw/Wl9T09Q0M81Mc9PctDQtTSvTyrQ2rU0b08a0NW1NO9POtDftTQfTwXQ0HU0n08l0MV1MV9PVdDPdTKpJNT3Ny6aX6W36mL6mn3nF9Df9zQAzwAw0A81gM9gMMUPMUDPUDDPDzAgzwow0I81oM9qMNWPNeDPeTDATzEQz0Uwyk8wUM8VMM9PMDDPDzDQzzWwz28wxc8xcM9fMN/PNQrPQLDKLTJpJM0vMErPULDPLzAqzwqwyq8was8asM+vMBrPBbDKbzFKz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDKHzWFzxBwxR81Rc8wcM8fNcXPCnDCnzClz2pw2Z8wZc86cM+fNeXPBXDAXzcVLp32RilRkIhNliDJEKVFKlDnKHGWJskRZo6xRIkpE2aJsUfbo+ihHlDPKFeWO8kR5o1SwEUUu4iiO8kcFomR0Q1QwujEqFBWOikRFIx8Vi4pHN0UlopujktEtUano1qh0dFtUJioblYvKR7dHFaI7oopRpahydGdUJborqhpVi+6Oqkf3RDWie6Oa0X1Rrej+qHb0QFQnejCqGz0U1YsejupHj0QNokejhlGjqHHUJGr6p9YP4UzOx303292m2h62p33Z9rK9bR/b1/azr9j+9lU7wL5mB9pBdrB93Q6xb9ih9k07zA63I+xbdqQdZUfbMXasHWfH27ftBPuOnWjftZPsZDvFTrXT7HQ7w75nZ9pZdrZ9386xH9i5dp6dbxfYhfZDu8gutmn2I7vEfmyX2mV2uV1hV9pVdrVdY9fadXa93WA32k12s91it9pP7Da73e6wO+0uu9vusZ/avfYzu89+bvfbL+wB+xd70H5pD9mv7GH7tT1iv7FH7bf2mP3OHrff2xP2pD1lf7Cn7Y/2jD1rz9mf7Hn7s71gf7EXbbh0cn/p7Z0MGcpAGSiFUigzZaYslIWyUlZKUIKyUTbKTtkpB+WgXJSL8lAeykf56BImpvyUn5KUpIJUkApRISpCRciTp+JUnEpQCSpJJakUlaLSVJrKUBkqR+Xodrqd7qA7qBJVojvpTrqL7qJqVI2qU3WqQTWoJtWkWlSLalNtqkN1qC7VpXpUj+pTfWpADaghNaTG1JiaUlNqRs2oOTWnltSSWlErak2tqQ21obbUltpRO2pP7akDdaCO1JE6USfqQl2oK3WlbtSNUimVelJP6kW9qA/1oX7Uj/pTfxpAA2ggDaTBNJiG0BAaSkNpGA2nEfQWjaRRNJrG0FgaR+NpPE2gCTSRJtIkmkRTaApNo2k0g2bQTJpJs2k2zaE5NJfm0nyaTwtpIS2iRZRGabSEltBSWkrLaTmtpJW0mlbTWlpL62k9baSNtJk201baSttoG+2gHbSLdtEe2kN7aS/to320n/bTATpAB+kgHaJDdJgO0xE6QkfpKB2jY3ScjtMJOkGn6BSdptN0hs7QOTpH5+lnukC/0EUKlOIUZHZXuSzuapfVXeNSXCZ3KY4A4FKcy+V2eVxel89Zl8Pl/JuYnHOFXGFXxBV13hVzxd1Nv4vLuLKunCvvbncV3B2u4u/i6u4eV8Pd62q6+1w1d/ffxLXc/a62e8TVcY+6uq6Rq+eauPruEdfAPeoaukausWviWrknXWv3lGvjnnZt3TO/ixe5xW6tW+fWuw1ur/vMnXM/uaPuW3fe/ey6ue6un3vF9XevugHuNTfQDfpdPMK95Ua6UW60G+PGunG/i6e4qW6am+5muPfcTDfrd/FC96Gb49LcXDfPzXcLfo0vrSnNfeSWuI/dUrfMLXcr3Eq3yq12a/73Wle4TW6z2+L2uE/dNrfd7XA73S63+9f40j72uc/dfveFO+K+cQfdl+6QO+YOu69/jS/t75j7zh1337sT7qQ75X5wp92P7ow7++v+L+39B/eLu+iCA0ZWrNlwxBk4I6dwJs7MV3EWvpqz8jWc4Gs5G1/H2fl6zsE5ORfn5jycl/OxZWLHzDHn5wKc5Bu4IN/IhbgwF+Gi7LkYF+ebuATfzCX5Fi7Ft3Jpvo3LcFkux+X5dq7Ad3BFrsSV+U6uEgJX5Wp8N1fne7gG38s1+T6uxfdzbX6A6/CDXJcf4nr8MNfnR7gBP8oNuRE35ibclB/jZvw4N+cW3JKf4Fb8JLfmp7gNP81t+Rlux89ye36OO/Dz3JFf4E7cmbvwi9yVX+Ju3J1TuQf35Je5F/fmPtyX+/Er3J9f5QH8Gg/kQTyYX+ch/AYP5Td5GA/nEfwWj+RRPJrH8Fgex+P5bZ7A7/BEfpcn8WSewlN5Gk/nGfwez+RZPJvf5zn8Ac/leTyfF/BC/pAX8WJO4494CX/MS3kZL+cVvJJX8Wpew2t5Ha/nDbyRN/Fm3sJb+RPextt5B+/kXbyb9/CnvJc/4338Oe/nL/gA/4UP8pd8iL/iw/w1H+Fv+Ch/y8f4Oz7O3/MJPsmn+Ac+zT/yGT7L5/gnPs8/8wX+hS9yYIgxVrGOTRzFGeKMcUqcKc4cXxVnia+Os8bXxIn42jhbfF2cPb4+zhHnjHPFueM8cd44X2xjil3McRznjwvEyfiGuGB8Y1woLhwXiYvGPi4WF49vikvEN8cl41viUvGtcen4trhMXDZ+5L7y8e1xhfiOuGJcKa4c3xlXie+Kq8bV4rvj6vE9cY343rhmfF9cMr4/rh0/ENeJH4zrxg/F9eKH4/rxI3GD+NG4Ydwobhw3iZvGj8XN4sfj5nGLuGX8RNwqfjJuHT8Vt4mfjtvGz/zh8dS4R9wzfjl+OQ7hXj0/uSC5MPlhclFycTIt+VFySfLj5NLksuTy5IrkyuSq5OrkmuTa5Lrk+uSG5MbkpuTm5JZkCNUygkevvPbGRz6Dz+hTfCaf2V/ls/irfVZ/jU/4a302f53P7q/3OXxOn8vn9nl8Xp/PW0/eefaxz+8L+KS/wRf0N/pCvrAv4ot674v54r6Jb+qb+mb+cd/ct/At/RP+Cf+kf9I/5Z/yT/u2/hnfzj/r2/vnfAf/vH/ev+A7+c6+i3/Rd/Uv+W6+u0/1qb6n7+l7+V6+j+/j+/l+vr/v7wf4AX6gH+gH+8F+iB/ih/qhfpgf5kf4EX6kH+lH+9F+rB/rx/vxfoKf4Cf6iX6Sn+Sn+Cl+mp/mZ/gZfqaf6Wf72X5OoTl+rp/r5/v5fqFf6Bf5RT7Np/klfolf6pf65X65X+lX+tV+tV/r1/r1fr3f6Df6zX6z3+q3+m1+m9/hd/hdfpff4/f4vX6v3+f3+f1+vz/gD/iD/qA/5L/yh/3X/oj/xh/13/pj/jt/3H/vT/iT/pT/wZ/2P/oz/qw/53/y5/3P/oL/xV/0wY9PvJ2YkHgnMTHxbmJSYnJiSmJqYlpiemJG4r3EzMSsxOzE+4k5iQ8ScxPzEvMTCxILEx8mFiUWJ9ISHyWWJD5OLE0sSyxPrEisTKxKhJB3WxzyhwIhGW4IBcONoVAoHIqEosGHYqF4uCmUCDeHkuGWUCrcGkqH20KZUDaUC4+GhqFRaByahKbhsdAsPB6ahxahZXgitApPhtbhqdAmPB3ahmdCu/BsaB+eCx3C86FjeCF0Cp1Dl/Bi6BpeCt1C95AaeoSe4eXQK/QOfULf0C+8EvqHV8OA8FoYGAaFweH1MCS8EYaGN8OwMDyMCG+FkWFUGB3GhLFhXBgf3g4TwjthYng3TAqTw5QwNUwL08OM8F6YGWaF2eH9MCd8EOaGeWF+WBAWhg/DorA4pIWPwpLwcVgaloXlYUVYGVaF1WFNWBvWhfVhQ9gYNoXNYUvYGj4J28L2sCPsDLvC7rAnfBr2hs/CvvB52B++CAfCX8LB8GU4FL4Kh8PX4Uj4JhwN34Zj4btwPHwfToST4VT4IZwOP4Yz4Ww4F34K58PP4UL4JVyU/1kTQgghhPiH6D843uPvfE/9Ni7pCQBXb899+D/W3Jjjr/PeKk+rBAA83b3jQ/82qlRJTU397bFLNUQF5gFA4nL+r3+W+y1eBi3hSWgDLaDE311fb9X5PP9B/eStAJn/XU4KXI4v17/5P6n/2BMjFpWOz2X7L+rPAyhU4HJOJrgcX65f8j+pn7PZH6w/05fjAZr/u5wscDm+XL84PA7PQJu/eaQQQgghhBBCCPFXvVW59n90/Xzp+jyPuZyTES7Hf3R9LoQQQgghhBBCiCvvuc5dnnqsTZsW7f+xCf52X+Cfy5KJTGTy/9nkSr8yCSGEEEIIIf5sl0/6r/RKhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKI9Ou/4+PErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//l485ZQ==") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) creat(&(0x7f0000000100)='./bus\x00', 0x0) 3.945672415s ago: executing program 5 (id=2235): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.128226897s ago: executing program 0 (id=2236): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 3.127588275s ago: executing program 2 (id=2237): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775) r1 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 3.076631311s ago: executing program 5 (id=2238): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000280)={[{@uid}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@gid}, {@type={'type', 0x3d, "9d119198"}}, {@codepage={'codepage', 0x3d, 'cp950'}}, {}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@file_umask={'file_umask', 0x3d, 0x3}}]}, 0x4, 0x337, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x62a043, 0x0) 2.567698002s ago: executing program 2 (id=2239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000089d2fa328a928730d4f108000300", @ANYRES32=r2, @ANYBLOB="04005b0006006500"], 0x28}}, 0x0) 2.515242742s ago: executing program 3 (id=2240): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000d40)={0x60, 0x0, &(0x7f00008a4000/0xe000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xb, 0x0, 0x0, 0x2, 0x25, 0x18, 0x20, 0x30}) 2.459921494s ago: executing program 0 (id=2241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xbe, r1}, 0x38) 2.368507567s ago: executing program 5 (id=2242): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x10, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 2.063383754s ago: executing program 4 (id=2243): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) setreuid(0x0, 0xee00) fcntl$notify(r0, 0x402, 0x5) preadv(r0, 0x0, 0x0, 0x0, 0x0) unshare(0x2c020400) 2.062931363s ago: executing program 3 (id=2244): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01feffffff000000000006241a0000000905810300020000020904010000020d00000904010102020d00000905822f88d65d000009050302400000000008"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x14, 0x10, 0x10, 0x10, 0x10, 0x10, 0x13, 0xe, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.83486071s ago: executing program 2 (id=2245): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, {0xc6}}, 0x18) 1.627330482s ago: executing program 5 (id=2246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x88}]}]}, 0x3c}}, 0x20004040) 1.59217323s ago: executing program 0 (id=2247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r2, 0x601}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0xffffffffffffffd0, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b32}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.288008755s ago: executing program 4 (id=2248): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mremap(&(0x7f000075e000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00006a3000/0x1000)=nil) mremap(&(0x7f0000b0a000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000fe1000/0x4000)=nil) 1.164008321s ago: executing program 2 (id=2249): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$l2tp(0x2, 0x2, 0x73) 874.129723ms ago: executing program 4 (id=2250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(r0, &(0x7f0000000000)='U', 0x1, 0x4fed0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 788.15214ms ago: executing program 0 (id=2251): openat$kvm(0xffffffffffffff9c, 0x0, 0x402080, 0x0) socket(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000040)=':', 0x1}], 0x1) 786.959714ms ago: executing program 5 (id=2252): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) 218.905558ms ago: executing program 4 (id=2253): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x28, 0x75, 0x70, 0x40, 0x403, 0xf06a, 0x12d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x94, 0xa, 0x0, 0x2d, 0x61, 0x11, 0x1}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 210.361049ms ago: executing program 2 (id=2263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 0s ago: executing program 5 (id=2254): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2810880, &(0x7f0000000300)=ANY=[], 0x8b, 0x28e, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) kernel console output (not intermixed with test programs): tman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.076872][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.373478][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.384445][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.397527][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.408581][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.419686][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.434042][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.446217][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.458510][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.469137][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.481207][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.497162][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.629317][ T9402] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.642307][ T9402] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.657588][ T9402] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.666692][ T9402] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.467684][ T5835] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 630.689690][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 630.719129][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 630.732583][ T5835] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 630.742388][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.803241][ T5835] usb 5-1: config 0 descriptor?? [ 630.866858][ T5835] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 631.094218][ T5128] bcm5974 5-1:0.0: could not read from device [ 631.112724][ T5128] bcm5974 5-1:0.0: could not read from device [ 631.128674][ T5835] usb 5-1: USB disconnect, device number 19 [ 631.142035][ T5128] bcm5974 5-1:0.0: could not read from device [ 631.199232][ T5128] bcm5974 5-1:0.0: could not read from device [ 631.409859][ T9535] loop3: detected capacity change from 0 to 2048 [ 631.480885][ T9537] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 631.583381][ T30] audit: type=1800 audit(1743651590.798:61): pid=9535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1411" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 631.716663][ T9539] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 4) [ 631.730000][ T9539] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16) [ 631.763932][ T9539] Remounting filesystem read-only [ 632.073565][ T9541] loop0: detected capacity change from 0 to 2048 [ 632.100824][ T8245] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 632.188127][ T9541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 632.966296][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1416'. [ 635.116097][ T9591] loop4: detected capacity change from 0 to 16 [ 635.165515][ T9591] erofs (device loop4): invalid lz4 cfgs, size=4 [ 635.533994][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.542306][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.806541][ T6550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.815118][ T6550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.223736][ T9603] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 637.023661][ T30] audit: type=1326 audit(1743651596.238:62): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.0.1439" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x0 [ 637.092203][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 637.199651][ T9609] loop2: detected capacity change from 0 to 4096 [ 637.287641][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 637.306920][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.322549][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 637.334667][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 637.346475][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 637.358391][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.559779][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 637.569522][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 637.578564][ T24] usb 5-1: Manufacturer: syz [ 637.641660][ T24] usb 5-1: config 0 descriptor?? [ 638.283601][ T24] rc_core: IR keymap rc-hauppauge not found [ 638.290048][ T24] Registered IR keymap rc-empty [ 638.295631][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.348425][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.379015][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 638.393980][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input23 [ 638.494214][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.600479][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.629918][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.658270][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.682135][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.719136][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.770461][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.811111][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.842621][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.868313][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.908942][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 638.918503][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 638.999093][ T24] usb 5-1: USB disconnect, device number 20 [ 640.122062][ T9645] loop0: detected capacity change from 0 to 8 [ 640.222561][ T9648] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 641.080632][ T9662] netlink: 'syz.4.1458': attribute type 3 has an invalid length. [ 641.089260][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 641.308991][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 641.741279][ T9668] vlan2: entered allmulticast mode [ 641.748864][ T9668] bridge0: port 3(vlan2) entered blocking state [ 641.755896][ T9668] bridge0: port 3(vlan2) entered disabled state [ 641.767175][ T9668] vlan2: entered promiscuous mode [ 643.245878][ T9691] vivid-004: disconnect [ 643.290623][ T9689] vivid-004: reconnect [ 643.808518][ T9699] loop2: detected capacity change from 0 to 128 [ 644.972377][ T9714] loop3: detected capacity change from 0 to 512 [ 645.133262][ T9714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.146826][ T9714] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 645.297799][ T9720] loop0: detected capacity change from 0 to 512 [ 645.311776][ T9720] EXT4-fs: Ignoring removed oldalloc option [ 645.440154][ T9720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.453554][ T9720] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 645.526581][ T8245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.850343][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.067715][ T9734] loop2: detected capacity change from 0 to 128 [ 646.226892][ T9734] FAT-fs (loop2): Directory bread(block 32) failed [ 646.234394][ T9734] FAT-fs (loop2): Directory bread(block 33) failed [ 646.241867][ T9734] FAT-fs (loop2): Directory bread(block 34) failed [ 646.250105][ T9734] FAT-fs (loop2): Directory bread(block 35) failed [ 646.257115][ T9734] FAT-fs (loop2): Directory bread(block 36) failed [ 646.264760][ T9734] FAT-fs (loop2): Directory bread(block 37) failed [ 646.274171][ T9734] FAT-fs (loop2): Directory bread(block 38) failed [ 646.281887][ T9734] FAT-fs (loop2): Directory bread(block 39) failed [ 646.289161][ T9734] FAT-fs (loop2): Directory bread(block 40) failed [ 646.296018][ T9734] FAT-fs (loop2): Directory bread(block 41) failed [ 646.710523][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1492'. [ 646.718769][ T5843] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 646.726871][ T9740] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1492'. [ 646.739830][ T9740] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1492'. [ 646.806526][ T9738] loop4: detected capacity change from 0 to 256 [ 646.952341][ T5843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 646.964963][ T5843] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 646.977997][ T9738] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 647.028066][ T5843] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 647.037764][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.048588][ T5843] usb 1-1: Product: syz [ 647.053051][ T5843] usb 1-1: Manufacturer: syz [ 647.058827][ T5843] usb 1-1: SerialNumber: syz [ 647.453409][ T9736] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 647.563315][ T9746] loop3: detected capacity change from 0 to 128 [ 647.959701][ T9744] loop2: detected capacity change from 0 to 4096 [ 648.350988][ T5843] cdc_ncm 1-1:1.0: bind() failure [ 648.377065][ T5843] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 648.385256][ T5843] cdc_ncm 1-1:1.1: bind() failure [ 648.445452][ T5843] usb 1-1: USB disconnect, device number 20 [ 648.574032][ T30] audit: type=1800 audit(1743651607.798:63): pid=9744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1493" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 648.838082][ T9760] loop4: detected capacity change from 0 to 128 [ 648.911755][ T9760] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 648.968209][ T9760] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 649.431988][ T5797] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 649.776591][ T9770] loop0: detected capacity change from 0 to 512 [ 649.829284][ T9770] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 649.895580][ T9770] EXT4-fs (loop0): 1 truncate cleaned up [ 649.911859][ T9770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.987840][ T53] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 649.996514][ T53] Bluetooth: hci4: Injecting HCI hardware error event [ 650.004361][ T5788] Bluetooth: hci4: hardware error 0x00 [ 650.098932][ T30] audit: type=1800 audit(1743651609.328:64): pid=9776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1503" name="file2" dev="loop0" ino=18 res=0 errno=0 [ 650.505220][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.842180][ T9802] loop2: detected capacity change from 0 to 512 [ 652.040540][ T5788] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 652.070039][ T9802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.084591][ T9802] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.193433][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 652.378474][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 652.410352][ T24] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 652.419033][ T24] usb 2-1: config 0 has no interface number 0 [ 652.438460][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 652.448030][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.456336][ T24] usb 2-1: Product: syz [ 652.461093][ T24] usb 2-1: Manufacturer: syz [ 652.465959][ T24] usb 2-1: SerialNumber: syz [ 652.488569][ T24] usb 2-1: config 0 descriptor?? [ 652.515731][ T24] smsc95xx v2.0.0 [ 652.519910][ T9402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.986875][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 652.998226][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 653.424730][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 653.436831][ T24] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 653.510429][ T24] usb 2-1: USB disconnect, device number 17 [ 653.872364][ T9824] macvlan1: entered promiscuous mode [ 653.885662][ T9824] ipvlan0: entered promiscuous mode [ 653.896707][ T9824] ipvlan0: left promiscuous mode [ 653.998154][ T9824] macvlan1: left promiscuous mode [ 654.199765][ T9827] netlink: 'syz.3.1527': attribute type 2 has an invalid length. [ 654.984382][ T9839] input: syz1 as /devices/virtual/input/input24 [ 655.217887][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 655.309032][ T3070] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 655.407878][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 655.444928][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 655.453610][ T24] usb 1-1: config 0 has no interface number 0 [ 655.508260][ T3070] usb 2-1: Using ep0 maxpacket: 16 [ 655.529642][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 655.541618][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.551470][ T24] usb 1-1: Product: syz [ 655.555935][ T24] usb 1-1: Manufacturer: syz [ 655.560985][ T24] usb 1-1: SerialNumber: syz [ 655.595717][ T3070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.607515][ T3070] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 655.616897][ T3070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.678729][ T24] usb 1-1: config 0 descriptor?? [ 655.700483][ T3070] usb 2-1: config 0 descriptor?? [ 655.728510][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 655.965639][ T9838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.976190][ T9838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.121229][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 656.159576][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 656.318896][ T3070] hid-steam 0003:28DE:1102.001C: unknown main item tag 0x0 [ 656.326890][ T3070] hid-steam 0003:28DE:1102.001C: unknown main item tag 0x0 [ 656.413077][ T3070] hid-steam 0003:28DE:1102.001C: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 656.485092][ T3070] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' connected [ 656.500362][ T3070] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.001C/input/input25 [ 656.552269][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 656.567369][ T24] usb 1-1: USB disconnect, device number 21 [ 656.592974][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 656.656447][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 656.673151][ T24] quatech2 1-1:0.51: device disconnected [ 656.684103][ T3070] hid-steam 0003:28DE:1102.001D: unknown main item tag 0x0 [ 656.693913][ T3070] hid-steam 0003:28DE:1102.001D: unknown main item tag 0x0 [ 656.764963][ T3070] hid-steam 0003:28DE:1102.001D: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 656.812831][ T3070] usb 2-1: USB disconnect, device number 18 [ 656.905594][ T3070] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' disconnected [ 657.885593][ T9867] loop3: detected capacity change from 0 to 128 [ 657.918617][ T9865] loop2: detected capacity change from 0 to 512 [ 657.978337][ T9867] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 658.016427][ T9867] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.097005][ T9865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.114257][ T9865] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.298042][ T9865] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 658.358584][ T9865] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 658.372057][ T9865] EXT4-fs (loop2): This should not happen!! Data will be lost [ 658.372057][ T9865] [ 658.382246][ T9865] EXT4-fs (loop2): Total free blocks count 0 [ 658.388792][ T9865] EXT4-fs (loop2): Free/Dirty block details [ 658.394957][ T9865] EXT4-fs (loop2): free_blocks=65280 [ 658.400860][ T9865] EXT4-fs (loop2): dirty_blocks=31 [ 658.409707][ T9865] EXT4-fs (loop2): Block reservation details [ 658.415957][ T9865] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 658.520861][ T8245] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 658.663296][ T9402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.666835][ T9891] loop3: detected capacity change from 0 to 128 [ 659.739637][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.746643][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.069141][ T3070] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 660.094647][ T9898] program syz.0.1558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.134731][ T9896] loop1: detected capacity change from 0 to 512 [ 660.257638][ T3070] usb 4-1: Using ep0 maxpacket: 16 [ 660.258311][ T9896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.278546][ T9896] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.284055][ T3070] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.300891][ T3070] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.311944][ T3070] usb 4-1: config 0 interface 0 has no altsetting 0 [ 660.319106][ T3070] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 660.328649][ T3070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.358406][ T3070] usb 4-1: config 0 descriptor?? [ 660.725717][ T9904] loop4: detected capacity change from 0 to 1024 [ 660.811816][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.870697][ T3070] hid (null): unknown global tag 0xd [ 660.876383][ T3070] hid (null): global environment stack underflow [ 660.883574][ T3070] hid (null): unknown global tag 0xe [ 660.892787][ T9904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.948863][ T3070] hid (null): invalid report_size 24934 [ 661.122340][ T3070] usb 4-1: USB disconnect, device number 23 [ 661.146226][ T9911] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.1560: Abort forced by user [ 661.196634][ T9911] EXT4-fs (loop4): Remounting filesystem read-only [ 661.204879][ T9911] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 661.678731][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.288635][ T9917] loop2: detected capacity change from 0 to 7 [ 662.325196][ T9917] Dev loop2: unable to read RDB block 7 [ 662.331482][ T9917] loop2: unable to read partition table [ 662.398771][ T9917] loop2: partition table beyond EOD, truncated [ 662.409863][ T9917] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 663.940298][ T9941] lo: entered allmulticast mode [ 664.041893][ T5843] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 664.226193][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.238159][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.251484][ T5843] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 664.261519][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.306589][ T5843] usb 1-1: config 0 descriptor?? [ 664.427915][ T3070] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 664.721152][ T3070] usb 5-1: Using ep0 maxpacket: 16 [ 664.777776][ T5843] logitech 0003:046D:C293.001F: unbalanced collection at end of report description [ 664.807112][ T3070] usb 5-1: config 0 has an invalid interface number: 60 but max is 0 [ 664.816063][ T3070] usb 5-1: config 0 has no interface number 0 [ 664.851266][ T5843] logitech 0003:046D:C293.001F: parse failed [ 664.862252][ T5843] logitech 0003:046D:C293.001F: probe with driver logitech failed with error -22 [ 664.942448][ T3070] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 664.952452][ T3070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.963084][ T3070] usb 5-1: Product: syz [ 664.968374][ T3070] usb 5-1: Manufacturer: syz [ 664.973387][ T3070] usb 5-1: SerialNumber: syz [ 665.020015][ T24] usb 1-1: USB disconnect, device number 22 [ 665.056881][ T3070] usb 5-1: config 0 descriptor?? [ 665.093067][ T3070] gspca_main: spca500-2.14.0 probing 046d:0900 [ 665.458100][ T3070] gspca_spca500: reg write: error -71 [ 665.488954][ T3070] gspca_spca500: reg write: error -71 [ 665.515778][ T3070] gspca_spca500: reg write: error -71 [ 665.547625][ T3070] gspca_spca500: reg write: error -71 [ 665.579577][ T3070] gspca_spca500: reg write: error -71 [ 665.625456][ T3070] gspca_spca500: reg write: error -71 [ 665.648620][ T3070] gspca_spca500: reg write: error -71 [ 665.670355][ T3070] gspca_spca500: reg write: error -71 [ 665.692767][ T3070] gspca_spca500: reg write: error -71 [ 665.745802][ T3070] gspca_spca500: reg write: error -71 [ 665.771168][ T3070] gspca_spca500: reg write: error -71 [ 665.833694][ T3070] gspca_spca500: reg write: error -71 [ 665.852412][ T3070] gspca_spca500: reg write: error -71 [ 665.869934][ T3070] gspca_spca500: reg write: error -71 [ 665.919557][ T3070] usb 5-1: USB disconnect, device number 21 [ 666.548765][ T9963] netlink: 'syz.3.1585': attribute type 1 has an invalid length. [ 666.557021][ T9963] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1585'. [ 666.974761][ T9966] ip6gretap0 speed is unknown, defaulting to 1000 [ 666.986089][ T9966] ip6gretap0 speed is unknown, defaulting to 1000 [ 666.995497][ T9966] ip6gretap0 speed is unknown, defaulting to 1000 [ 667.514295][ T9966] infiniband syz0: set active [ 667.522052][ T9966] infiniband syz0: added ip6gretap0 [ 667.529991][ T3070] ip6gretap0 speed is unknown, defaulting to 1000 [ 667.608204][ T9970] loop1: detected capacity change from 0 to 1024 [ 667.675678][ T9970] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 667.688219][ T9970] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 667.698922][ T9970] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 667.709870][ T9970] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 667.719451][ T9970] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 667.757111][ T9966] RDS/IB: syz0: added [ 667.761795][ T9966] smc: adding ib device syz0 with port count 1 [ 667.769103][ T9966] smc: ib device syz0 port 1 has pnetid [ 667.780735][ T9966] ip6gretap0 speed is unknown, defaulting to 1000 [ 668.169876][ T9975] ALSA: mixer_oss: invalid OSS volume 'ÿÿ' [ 668.353305][ T9966] ip6gretap0 speed is unknown, defaulting to 1000 [ 668.920977][ T9966] ip6gretap0 speed is unknown, defaulting to 1000 [ 669.265527][ T5788] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 669.288472][ T5843] ip6gretap0 speed is unknown, defaulting to 1000 [ 669.492426][ T9966] ip6gretap0 speed is unknown, defaulting to 1000 [ 670.074127][ T9966] ip6gretap0 speed is unknown, defaulting to 1000 [ 670.676039][ T9966] ip6gretap0 speed is unknown, defaulting to 1000 [ 671.167601][ T3070] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 671.265104][ T9966] ip6gretap0 speed is unknown, defaulting to 1000 [ 671.386605][ T3070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.399749][ T3070] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.410016][ T3070] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 671.426322][ T3070] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 671.437803][ T3070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.643471][ T3070] usb 2-1: config 0 descriptor?? [ 672.411038][ T3070] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 672.467172][ T3070] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 673.706510][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 673.884169][ T53] block nbd3: Receive control failed (result -32) [ 673.895718][T10007] block nbd3: shutting down sockets [ 674.495206][ T5843] usb 2-1: USB disconnect, device number 19 [ 674.914141][T10027] input: syz1 as /devices/virtual/input/input27 [ 675.219020][T10034] netlink: 'syz.4.1614': attribute type 12 has an invalid length. [ 675.228655][T10034] netlink: 'syz.4.1614': attribute type 29 has an invalid length. [ 675.236743][T10034] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1614'. [ 675.250080][T10034] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 675.258414][T10034] netlink: 'syz.4.1614': attribute type 2 has an invalid length. [ 675.266392][T10034] netlink: 39 bytes leftover after parsing attributes in process `syz.4.1614'. [ 676.777914][T10048] tun0: tun_chr_ioctl cmd 1074025675 [ 676.786142][T10048] tun0: persist enabled [ 676.818432][T10048] tun0: tun_chr_ioctl cmd 1074025675 [ 676.824044][T10048] tun0: persist disabled [ 678.099277][ T5835] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 678.307955][ T5835] usb 1-1: Using ep0 maxpacket: 8 [ 678.368791][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.381762][ T5835] usb 1-1: config 0 has no interfaces? [ 678.458220][ T5835] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 678.470726][ T5835] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 678.481725][ T5835] usb 1-1: Product: syz [ 678.486208][ T5835] usb 1-1: Manufacturer: syz [ 678.491883][ T5835] usb 1-1: SerialNumber: syz [ 678.594706][T10073] loop4: detected capacity change from 0 to 1024 [ 678.620155][ T5835] usb 1-1: config 0 descriptor?? [ 678.859481][ T30] audit: type=1326 audit(1743651638.088:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 678.883031][ T30] audit: type=1326 audit(1743651638.088:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 678.908256][ T30] audit: type=1326 audit(1743651638.118:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 678.931823][ T30] audit: type=1326 audit(1743651638.128:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 678.955888][ T30] audit: type=1326 audit(1743651638.138:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 678.978657][ T30] audit: type=1326 audit(1743651638.148:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 679.002828][ T30] audit: type=1326 audit(1743651638.148:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 679.025267][ T14] tipc: Subscription rejected, illegal request [ 679.213602][ T3518] hfsplus: b-tree write err: -5, ino 4 [ 679.328169][ T30] audit: type=1326 audit(1743651638.278:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 679.352731][ T30] audit: type=1326 audit(1743651638.278:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 679.376913][ T30] audit: type=1326 audit(1743651638.278:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10078 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 679.918523][ T3070] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 680.119672][ T3070] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 680.129078][ T3070] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 680.219545][ T3070] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 680.229327][ T3070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.238631][ T3070] usb 5-1: Product: syz [ 680.244087][ T3070] usb 5-1: Manufacturer: syz [ 680.249507][ T3070] usb 5-1: SerialNumber: syz [ 680.300680][ T3070] usb 5-1: config 0 descriptor?? [ 680.930882][ T5835] usb 1-1: USB disconnect, device number 23 [ 681.048175][ T3070] mos7840 5-1:0.0: required endpoints missing [ 681.091781][ T3070] usb 5-1: USB disconnect, device number 22 [ 683.164315][T10120] loop1: detected capacity change from 0 to 2048 [ 683.214962][T10120] EXT4-fs: Ignoring removed mblk_io_submit option [ 683.299959][T10120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.610540][T10133] batadv_slave_1: entered promiscuous mode [ 683.645087][T10129] batadv_slave_1: left promiscuous mode [ 684.100094][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.500719][T10143] batadv_slave_1: entered promiscuous mode [ 684.535074][T10145] loop1: detected capacity change from 0 to 128 [ 684.562989][T10142] batadv_slave_1: left promiscuous mode [ 685.243557][T10152] loop2: detected capacity change from 0 to 2048 [ 685.352939][T10152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.459372][ T3070] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 685.547750][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 685.655769][ T3070] usb 5-1: Using ep0 maxpacket: 16 [ 685.692629][ T3070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.704121][ T3070] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 685.713869][ T3070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.804914][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 685.814995][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.851980][ T3070] usb 5-1: config 0 descriptor?? [ 685.913118][ T24] usb 1-1: config 0 descriptor?? [ 685.958462][ T24] cp210x 1-1:0.0: cp210x converter detected [ 686.391732][ T24] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 686.415875][ T3070] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 686.467975][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 686.655369][ T3070] usb 1-1: USB disconnect, device number 24 [ 686.703236][ T3070] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 686.777919][ T3070] cp210x 1-1:0.0: device disconnected [ 686.796423][ T24] usb 5-1: USB disconnect, device number 23 [ 687.057791][ T9200] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 687.277089][ T9200] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 687.287880][ T9200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.362462][ T9200] usb 4-1: config 0 descriptor?? [ 687.396851][ T9200] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 687.728268][ T5835] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 687.943877][ T5835] usb 3-1: config 0 has no interfaces? [ 687.951957][ T5835] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 687.962485][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.054689][ T5835] usb 3-1: config 0 descriptor?? [ 688.493402][ T9200] gspca_sonixj: reg_w1 err -71 [ 688.522804][T10175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.532104][ T9200] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 688.532370][T10175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.567815][ T9200] usb 4-1: USB disconnect, device number 24 [ 688.606382][ T24] usb 3-1: USB disconnect, device number 13 [ 689.469981][T10195] loop1: detected capacity change from 0 to 512 [ 689.574933][T10195] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 689.630324][T10195] System zones: 0-2, 18-18, 34-34 [ 689.749671][T10195] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1687: bg 0: block 248: padding at end of block bitmap is not set [ 689.798788][T10195] __quota_error: 2 callbacks suppressed [ 689.798873][T10195] Quota error (device loop1): write_blk: dquota write failed [ 689.813029][T10195] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 689.823803][T10195] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1687: Failed to acquire dquot type 1 [ 689.915564][T10206] loop2: detected capacity change from 0 to 128 [ 689.973649][T10195] EXT4-fs (loop1): 1 truncate cleaned up [ 689.982403][T10195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.998243][T10195] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.211220][ T3959] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 690.220177][T10198] loop0: detected capacity change from 0 to 4096 [ 690.220958][ T3959] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:16: Failed to release dquot type 1 [ 690.470288][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.777735][T10211] loop1: detected capacity change from 0 to 512 [ 690.838762][T10211] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 690.947834][T10211] EXT4-fs (loop1): 1 truncate cleaned up [ 690.956532][T10211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.061477][ T30] audit: type=1800 audit(1743651650.258:77): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1694" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 691.247943][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.872105][T10222] loop2: detected capacity change from 0 to 2048 [ 692.033648][T10222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.189365][T10229] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1700'. [ 692.201479][T10229] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1700'. [ 692.263857][T10222] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 692.673917][ T9402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.098866][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 693.244992][T10240] loop3: detected capacity change from 0 to 256 [ 693.331236][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 693.341119][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.400052][ T24] usb 2-1: config 0 descriptor?? [ 693.445672][ T24] cp210x 2-1:0.0: cp210x converter detected [ 693.904281][ T24] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 694.161039][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 694.374960][ T24] usb 2-1: USB disconnect, device number 20 [ 694.421988][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 694.460009][ T24] cp210x 2-1:0.0: device disconnected [ 695.818563][T10258] loop2: detected capacity change from 0 to 4096 [ 695.975717][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1716'. [ 695.985694][T10263] netlink: 'syz.0.1716': attribute type 5 has an invalid length. [ 696.182552][ T30] audit: type=1800 audit(1743651655.408:78): pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1712" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 696.206147][ T30] audit: type=1800 audit(1743651655.438:79): pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1712" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 697.452879][T10275] syzkaller1: entered promiscuous mode [ 697.459640][T10275] syzkaller1: entered allmulticast mode [ 698.028464][ T5835] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 698.224652][ T5835] usb 5-1: Using ep0 maxpacket: 32 [ 698.272698][ T5835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 698.309739][ T5835] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 698.319572][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.328274][ T5835] usb 5-1: Product: syz [ 698.332729][ T5835] usb 5-1: Manufacturer: syz [ 698.337796][ T5835] usb 5-1: SerialNumber: syz [ 698.420544][ T5835] usb 5-1: config 0 descriptor?? [ 698.507097][T10291] loop2: detected capacity change from 0 to 1024 [ 698.517775][T10292] loop3: detected capacity change from 0 to 512 [ 698.576406][T10292] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 698.685684][T10291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.709404][T10292] EXT4-fs (loop3): 1 truncate cleaned up [ 698.718022][T10292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.882397][ T5835] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 698.918601][T10292] syz.3.1729 (pid 10292) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 699.250475][ T9402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.490778][ T8245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.529190][ T5835] usb 5-1: USB disconnect, device number 24 [ 700.881642][ T5835] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 701.123971][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.136570][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.148152][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 701.163466][ T5835] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 701.173721][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.351261][ T5835] usb 5-1: config 0 descriptor?? [ 701.843684][ T5835] plantronics 0003:047F:FFFF.0022: item fetching failed at offset 12/15 [ 701.905465][ T5835] plantronics 0003:047F:FFFF.0022: parse failed [ 701.912925][ T5835] plantronics 0003:047F:FFFF.0022: probe with driver plantronics failed with error -22 [ 702.057026][ T5835] usb 5-1: USB disconnect, device number 25 [ 702.381557][T10340] loop0: detected capacity change from 0 to 47 [ 702.873937][T10347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1750'. [ 703.355843][T10354] loop9: detected capacity change from 0 to 7 [ 703.409883][T10354] Dev loop9: unable to read RDB block 7 [ 703.416007][T10354] loop9: AHDI p1 [ 703.421002][T10354] loop9: partition table partially beyond EOD, truncated [ 703.518574][ T5835] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 703.757971][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.768791][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 703.784110][ T5835] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 703.794975][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.925491][ T5835] usb 5-1: config 0 descriptor?? [ 704.403010][ T5835] megaworld 0003:07B5:0312.0023: unknown main item tag 0x0 [ 704.412477][ T5835] megaworld 0003:07B5:0312.0023: unknown main item tag 0x0 [ 704.421662][ T5835] megaworld 0003:07B5:0312.0023: item fetching failed at offset 2/5 [ 704.477000][ T5835] megaworld 0003:07B5:0312.0023: parse failed [ 704.484425][ T5835] megaworld 0003:07B5:0312.0023: probe with driver megaworld failed with error -22 [ 704.563150][T10366] loop1: detected capacity change from 0 to 512 [ 704.601152][T10366] EXT4-fs: Ignoring removed bh option [ 704.614984][ T24] usb 5-1: USB disconnect, device number 26 [ 704.641139][T10366] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 704.778527][T10366] EXT4-fs (loop1): 1 truncate cleaned up [ 704.786757][T10366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.335739][ T5786] EXT4-fs error (device loop1): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 705.366503][ T5786] EXT4-fs error (device loop1): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 705.537020][T10381] loop3: detected capacity change from 0 to 16 [ 705.619841][T10381] erofs (device loop3): mounted with root inode @ nid 36. [ 705.722362][T10381] erofs (device loop3): readahead error at folio 2 @ nid 89 [ 705.747783][ T53] erofs (device loop3): failed to decompress 6887 in[4096, 0] out[8192] [ 705.760607][T10381] erofs (device loop3): failed to decompress 6887 in[4096, 0] out[8192] [ 705.772038][T10381] erofs (device loop3): read error -117 @ 0 of nid 89 [ 705.789816][ T30] audit: type=1800 audit(1743651665.008:80): pid=10381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1765" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 705.861254][ T9664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.893959][T10384] loop4: detected capacity change from 0 to 512 [ 705.963382][T10384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 706.015980][T10384] EXT4-fs (loop4): 1 truncate cleaned up [ 706.025971][T10384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.177718][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 706.259832][ T9200] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 706.381830][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 706.393716][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.405945][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.416150][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 706.483638][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 706.493470][ T24] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 706.502078][ T24] usb 1-1: Manufacturer: syz [ 706.509528][ T9200] usb 3-1: Using ep0 maxpacket: 8 [ 706.515375][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.528804][ T9200] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 706.539300][ T9200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.554460][ T24] usb 1-1: config 0 descriptor?? [ 706.568934][ T9200] usb 3-1: config 0 descriptor?? [ 706.823289][ T9200] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 707.021878][ T24] appleir 0003:05AC:8243.0024: unknown main item tag 0x0 [ 707.048318][ T24] appleir 0003:05AC:8243.0024: No inputs registered, leaving [ 707.072621][ T24] appleir 0003:05AC:8243.0024: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 707.344933][ T5835] usb 1-1: USB disconnect, device number 25 [ 707.665404][ T9200] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 707.677135][ T9200] asix 3-1:0.0: probe with driver asix failed with error -71 [ 707.698971][ T9200] usb 3-1: USB disconnect, device number 14 [ 708.347170][T10395] loop4: detected capacity change from 0 to 512 [ 708.436115][T10395] EXT4-fs: Ignoring removed i_version option [ 708.477826][T10395] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 708.611372][T10395] EXT4-fs (loop4): 1 truncate cleaned up [ 708.620056][T10395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.769096][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 708.799475][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 708.819368][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 708.845472][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.864280][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 708.919402][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 709.173436][T10402] ip6gretap0 speed is unknown, defaulting to 1000 [ 710.238606][ T30] audit: type=1326 audit(1743651669.448:81): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.3.1781" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x0 [ 710.879021][T10402] chnl_net:caif_netlink_parms(): no params data found [ 711.071836][ T5788] Bluetooth: hci2: command tx timeout [ 711.893090][T10441] loop2: detected capacity change from 0 to 7 [ 711.928225][ T9200] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 711.962560][T10441] Dev loop2: unable to read RDB block 7 [ 711.969246][T10441] loop2: unable to read partition table [ 712.018821][T10441] loop2: partition table beyond EOD, truncated [ 712.025371][T10441] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 712.178721][ T9200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.191400][ T9200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.202147][ T9200] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 712.216102][ T9200] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 712.225631][ T9200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.375885][T10402] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.384197][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.395889][T10402] bridge_slave_0: entered allmulticast mode [ 712.407030][T10402] bridge_slave_0: entered promiscuous mode [ 712.441547][ T9200] usb 4-1: config 0 descriptor?? [ 712.466806][T10402] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.478210][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.486265][T10402] bridge_slave_1: entered allmulticast mode [ 712.498707][T10402] bridge_slave_1: entered promiscuous mode [ 712.958668][ T9200] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 713.003734][T10402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.004365][ T9200] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 713.078374][ T9200] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 713.117149][T10402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.148205][ T5788] Bluetooth: hci2: command tx timeout [ 713.571684][T10402] team0: Port device team_slave_0 added [ 713.660629][T10402] team0: Port device team_slave_1 added [ 713.978019][ T9200] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 714.048274][T10402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.055574][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.084533][T10402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.130707][T10402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.140079][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.167603][T10402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.234851][ T9200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.248082][ T9200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.259109][ T9200] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 714.273349][ T9200] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 714.283039][ T9200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.430744][ T9200] usb 5-1: config 0 descriptor?? [ 714.724493][T10402] hsr_slave_0: entered promiscuous mode [ 714.738872][T10402] hsr_slave_1: entered promiscuous mode [ 714.748375][T10402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 714.757669][T10402] Cannot create hsr debugfs directory [ 714.925707][ T9200] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 714.979417][ T9200] plantronics 0003:047F:FFFF.0026: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 715.145471][ T5835] usb 4-1: USB disconnect, device number 25 [ 715.217910][ T9200] usb 5-1: USB disconnect, device number 27 [ 715.230240][ T5788] Bluetooth: hci2: command tx timeout [ 716.182577][T10402] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 716.272718][T10402] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 716.327579][T10402] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 716.338088][T10467] 9pnet_fd: Insufficient options for proto=fd [ 716.374431][T10402] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 716.495937][T10470] loop3: detected capacity change from 0 to 512 [ 716.734464][T10470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.894449][ T30] audit: type=1800 audit(1743651676.108:82): pid=10470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1800" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 717.068033][ T9200] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 717.275745][ T9200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 717.288404][ T9200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.299267][ T9200] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 717.308928][ T9200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.323674][ T9200] usb 5-1: config 0 descriptor?? [ 717.337168][ T5788] Bluetooth: hci2: command tx timeout [ 717.413515][ T8245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.732752][T10402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.015619][ T9200] zydacron 0003:13EC:0006.0027: unknown main item tag 0x6 [ 718.033019][T10402] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.099814][ T9200] zydacron 0003:13EC:0006.0027: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.4-1/input0 [ 718.125608][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.133529][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.201020][T10479] syzkaller1: entered promiscuous mode [ 718.210071][T10479] syzkaller1: entered allmulticast mode [ 718.246203][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.254239][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.257688][ T24] usb 5-1: USB disconnect, device number 28 [ 720.455007][T10493] loop8: detected capacity change from 0 to 7 [ 720.476922][T10493] Dev loop8: unable to read RDB block 7 [ 720.483160][T10493] loop8: unable to read partition table [ 720.510442][T10493] loop8: partition table beyond EOD, truncated [ 720.516980][T10493] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 720.556281][T10497] loop4: detected capacity change from 0 to 512 [ 720.616808][T10402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.621624][T10497] EXT4-fs: Ignoring removed bh option [ 720.657754][T10497] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 720.765948][T10497] EXT4-fs (loop4): 1 truncate cleaned up [ 720.775484][T10497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.188985][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.195730][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.441799][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.685085][T10507] loop0: detected capacity change from 0 to 512 [ 721.872291][T10507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.888359][T10507] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 722.285635][T10517] loop2: detected capacity change from 0 to 164 [ 722.385317][T10517] Unable to read rock-ridge attributes [ 722.385920][T10518] loop4: detected capacity change from 0 to 512 [ 722.481673][T10517] Unable to read rock-ridge attributes [ 722.516385][T10518] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.1813: bad orphan inode 13 [ 722.564660][T10517] syz.2.1815: attempt to access beyond end of device [ 722.564660][T10517] loop2: rw=524288, sector=192, nr_sectors = 64 limit=164 [ 722.621692][T10518] ext4_test_bit(bit=12, block=4) = 1 [ 722.627589][T10518] is_bad_inode(inode)=0 [ 722.631974][T10518] NEXT_ORPHAN(inode)=0 [ 722.637591][T10518] max_ino=32 [ 722.641028][T10518] i_nlink=1 [ 722.648720][T10518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.678304][T10517] syz.2.1815: attempt to access beyond end of device [ 722.678304][T10517] loop2: rw=524288, sector=256, nr_sectors = 28 limit=164 [ 722.692697][T10517] syz.2.1815: attempt to access beyond end of device [ 722.692697][T10517] loop2: rw=0, sector=192, nr_sectors = 8 limit=164 [ 722.716288][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.729716][ T30] audit: type=1800 audit(1743651681.928:83): pid=10517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1815" name="file0" dev="loop2" ino=1862 res=0 errno=0 [ 722.870707][T10402] veth0_vlan: entered promiscuous mode [ 722.976585][T10402] veth1_vlan: entered promiscuous mode [ 723.310040][T10402] veth0_macvtap: entered promiscuous mode [ 723.339712][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.404378][T10521] loop3: detected capacity change from 0 to 2048 [ 723.433787][T10402] veth1_macvtap: entered promiscuous mode [ 723.495963][T10521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 723.626566][T10402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.639717][T10402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.653411][T10402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.665788][T10402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.676443][T10402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.688051][T10402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.698351][T10402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.710804][T10402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.722259][T10402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.733312][T10402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.744742][T10402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.756086][T10402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.774279][T10402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.878019][ T9200] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 723.997539][T10402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.009038][T10402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.019394][T10402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.031471][T10402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.041855][T10402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.055226][T10402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.066332][T10402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.078459][T10402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.089291][T10402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.092774][ T9200] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 4 [ 724.102592][T10402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.112854][ T9200] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 724.122143][T10402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.122240][T10402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.129400][T10402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.133841][ T9200] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 724.173894][ T9200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.402946][T10523] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 724.429945][ T9200] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 724.440662][ T9200] usb 1-1: invalid MIDI in EP 0 [ 724.521735][T10402] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.531640][T10402] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.540949][T10402] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.550317][T10402] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.642457][T10532] sctp: [Deprecated]: syz.3.1820 (pid 10532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 724.642457][T10532] Use struct sctp_sack_info instead [ 724.771076][ T9200] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 724.814205][ T9200] usb 1-1: USB disconnect, device number 26 [ 725.860945][T10540] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.871014][T10540] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.879128][T10540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.469966][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1831'. [ 730.798054][ T6555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.808198][ T6555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.034038][ T6552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.042687][ T6552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.777863][T10621] loop3: detected capacity change from 0 to 2048 [ 731.902762][T10621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.215880][T10621] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 732.252180][T10621] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 732.266569][T10621] EXT4-fs (loop3): This should not happen!! Data will be lost [ 732.266569][T10621] [ 732.277647][T10621] EXT4-fs (loop3): Total free blocks count 0 [ 732.284744][T10621] EXT4-fs (loop3): Free/Dirty block details [ 732.291133][T10621] EXT4-fs (loop3): free_blocks=66060288 [ 732.296978][T10621] EXT4-fs (loop3): dirty_blocks=48 [ 732.302908][T10621] EXT4-fs (loop3): Block reservation details [ 732.310329][T10621] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 732.429975][T10629] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 732.952397][T10634] loop9: detected capacity change from 0 to 8 [ 732.992589][T10634] loop9: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 733.000043][T10634] loop9: p1 start 3818150966 is beyond EOD, truncated [ 733.009774][T10634] loop9: p2 start 473777336 is beyond EOD, truncated [ 733.016810][T10634] loop9: p3 start 630371558 is beyond EOD, truncated [ 733.024903][T10634] loop9: p4 start 1947670962 is beyond EOD, truncated [ 733.034265][T10634] loop9: p5 start 1038240951 is beyond EOD, truncated [ 733.042268][T10634] loop9: p6 start 3089380622 is beyond EOD, truncated [ 733.049752][T10634] loop9: p7 start 2242964714 is beyond EOD, truncated [ 733.059142][T10634] loop9: p8 start 882556477 is beyond EOD, truncated [ 733.066296][T10634] loop9: p9 start 1336359268 is beyond EOD, truncated [ 733.074394][T10634] loop9: p10 start 536710687 is beyond EOD, truncated [ 733.129569][ T11] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 733.174318][ T11] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 734.608145][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 734.667528][T10657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1858'. [ 734.803066][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.814920][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.826216][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 734.840296][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 734.850298][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.870759][ T24] usb 1-1: config 0 descriptor?? [ 735.355463][ T24] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 735.440696][ T24] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 735.614226][ T24] usb 1-1: USB disconnect, device number 27 [ 735.843619][T10667] loop5: detected capacity change from 0 to 2048 [ 736.029254][T10667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.183959][T10667] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 736.225845][T10667] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 736.241797][T10667] EXT4-fs (loop5): This should not happen!! Data will be lost [ 736.241797][T10667] [ 736.252350][T10667] EXT4-fs (loop5): Total free blocks count 0 [ 736.259942][T10667] EXT4-fs (loop5): Free/Dirty block details [ 736.266126][T10667] EXT4-fs (loop5): free_blocks=66060288 [ 736.272714][T10667] EXT4-fs (loop5): dirty_blocks=48 [ 736.280507][T10667] EXT4-fs (loop5): Block reservation details [ 736.287665][T10667] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 736.373260][T10677] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 736.730789][T10679] loop4: detected capacity change from 0 to 256 [ 736.879745][T10679] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 737.280718][ T11] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 737.491087][ T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.501965][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 737.572466][ T11] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 737.582403][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.592674][ T11] usb 3-1: Product: syz [ 737.597807][ T11] usb 3-1: Manufacturer: syz [ 737.602698][ T11] usb 3-1: SerialNumber: syz [ 737.772539][T10693] loop4: detected capacity change from 0 to 8 [ 737.913528][ T11] usb 3-1: 0:2 : does not exist [ 738.001490][ T11] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 738.160300][ T11] usb 3-1: USB disconnect, device number 15 [ 738.200387][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 738.254810][T10697] vlan2: entered allmulticast mode [ 738.262031][T10697] bridge0: port 3(vlan2) entered blocking state [ 738.269400][T10697] bridge0: port 3(vlan2) entered disabled state [ 738.284310][T10697] vlan2: entered promiscuous mode [ 738.408070][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 738.481480][ T24] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 738.492541][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.501447][ T24] usb 1-1: Product: syz [ 738.505880][ T24] usb 1-1: Manufacturer: syz [ 738.512265][ T24] usb 1-1: SerialNumber: syz [ 738.638044][ T24] usb 1-1: config 0 descriptor?? [ 738.681149][ T24] usb-storage 1-1:0.0: USB Mass Storage device detected [ 738.803156][ T24] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 738.911317][ T24] usb 1-1: USB disconnect, device number 28 [ 739.141582][T10707] loop2: detected capacity change from 0 to 256 [ 739.197171][T10707] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 739.210907][T10707] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 739.396925][T10707] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 740.687770][T10727] loop0: detected capacity change from 0 to 128 [ 740.789463][T10727] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 740.914257][T10727] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 741.098790][ T24] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 741.183957][ T30] audit: type=1800 audit(1743652213.381:84): pid=10727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1897" name="file0" dev="loop0" ino=12 res=0 errno=0 [ 741.205970][ T30] audit: type=1804 audit(1743652213.401:85): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1897" name="/newroot/396/file1/file0" dev="loop0" ino=12 res=1 errno=0 [ 741.417563][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 741.429954][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 741.549319][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.559024][ T5795] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 741.569683][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.579355][ T24] usb 5-1: Product: syz [ 741.583807][ T24] usb 5-1: Manufacturer: syz [ 741.589434][ T24] usb 5-1: SerialNumber: syz [ 741.961323][T10731] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 742.511655][ T11] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 742.734010][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 742.743749][ T11] usb 1-1: config 1 has no interface number 0 [ 742.751192][ T11] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.764644][ T11] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 742.774848][ T11] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 195 [ 742.851368][ T24] cdc_ncm 5-1:1.0: bind() failure [ 742.870117][ T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 742.877542][ T24] cdc_ncm 5-1:1.1: bind() failure [ 742.946984][ T24] usb 5-1: USB disconnect, device number 29 [ 742.970360][ T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 742.980393][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.990997][ T11] usb 1-1: Product: syz [ 742.995436][ T11] usb 1-1: Manufacturer: syz [ 743.000847][ T11] usb 1-1: SerialNumber: syz [ 743.118634][T10746] loop5: detected capacity change from 0 to 256 [ 743.135836][T10746] exfat: Deprecated parameter 'utf8' [ 743.215028][T10746] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 743.330538][T10742] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 743.708134][ T53] Bluetooth: hci5: command 0x1003 tx timeout [ 743.708774][ T5788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 744.019598][T10742] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 744.032230][ T11] cdc_ncm 1-1:1.1: bind() failure [ 744.297892][ T24] usb 1-1: USB disconnect, device number 29 [ 746.202901][T10776] loop0: detected capacity change from 0 to 256 [ 746.309405][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1909'. [ 746.388364][T10776] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 747.572163][T10784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1911'. [ 747.581996][T10784] tipc: Started in network mode [ 747.587100][T10784] tipc: Node identity 7, cluster identity 4711 [ 747.594240][T10784] tipc: Node number set to 7 [ 748.409085][T10795] trusted_key: syz.3.1917 sent an empty control message without MSG_MORE. [ 748.534224][T10794] loop0: detected capacity change from 0 to 2048 [ 748.625208][T10794] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 748.704716][T10794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 749.160746][T10797] loop5: detected capacity change from 0 to 4096 [ 749.252889][T10801] loop2: detected capacity change from 0 to 2048 [ 749.291646][T10801] EXT4-fs: Ignoring removed bh option [ 749.420204][T10801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 749.558340][T10801] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 749.648074][T10801] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 19 with error 28 [ 749.661171][T10801] EXT4-fs (loop2): This should not happen!! Data will be lost [ 749.661171][T10801] [ 749.677011][T10801] EXT4-fs (loop2): Total free blocks count 0 [ 749.683995][T10801] EXT4-fs (loop2): Free/Dirty block details [ 749.693757][T10801] EXT4-fs (loop2): free_blocks=2415919104 [ 749.700048][T10801] EXT4-fs (loop2): dirty_blocks=32 [ 749.705567][T10801] EXT4-fs (loop2): Block reservation details [ 749.712127][T10801] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 749.884321][ T30] audit: type=1800 audit(1743652222.111:86): pid=10797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1916" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 750.109383][ T9402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.821054][ T11] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 750.914723][T10827] loop2: detected capacity change from 0 to 128 [ 751.011420][T10827] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 751.028429][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 751.043192][T10827] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.061096][ T11] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.073236][ T11] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 751.088882][ T11] usb 4-1: config 0 interface 0 has no altsetting 0 [ 751.095861][ T11] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 751.106673][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.122833][ T11] usb 4-1: config 0 descriptor?? [ 751.351322][ T11] usbhid 4-1:0.0: can't add hid device: -71 [ 751.361263][ T11] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 751.399448][ T11] usb 4-1: USB disconnect, device number 26 [ 751.632490][ T9402] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 752.034035][T10841] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1931'. [ 752.356663][T10845] loop5: detected capacity change from 0 to 1024 [ 752.399266][ T11] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 752.475741][T10845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.488825][T10845] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.569594][T10845] EXT4-fs (loop5): shut down requested (1) [ 752.618365][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 752.684532][ T11] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 752.695093][ T11] usb 3-1: config 0 has no interface number 0 [ 752.771427][ T11] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 752.781275][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.791708][ T11] usb 3-1: Product: syz [ 752.796147][ T11] usb 3-1: Manufacturer: syz [ 752.801858][ T11] usb 3-1: SerialNumber: syz [ 752.869675][ T11] usb 3-1: config 0 descriptor?? [ 752.889839][ T11] smsc95xx v2.0.0 [ 753.014761][T10402] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.306670][T10856] loop3: detected capacity change from 0 to 256 [ 753.407150][ T11] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 753.418823][ T11] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 753.558011][T10856] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 753.861233][ T11] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 753.875336][ T11] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 753.899919][ T11] usb 3-1: USB disconnect, device number 16 [ 755.065242][T10876] loop2: detected capacity change from 0 to 512 [ 755.098392][T10877] vlan3: entered allmulticast mode [ 755.103828][T10877] bond0: entered allmulticast mode [ 755.109421][T10877] bond_slave_0: entered allmulticast mode [ 755.115430][T10877] bond_slave_1: entered allmulticast mode [ 755.204090][T10876] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 755.425366][T10876] loop2: detected capacity change from 0 to 512 [ 755.512746][T10876] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 755.606399][T10876] EXT4-fs (loop2): 1 truncate cleaned up [ 755.617045][T10876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 755.765250][ T14] Bluetooth: hci5: Frame reassembly failed (-84) [ 755.984910][ T9402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.201021][T10895] loop2: detected capacity change from 0 to 128 [ 757.340782][T10898] pim6reg1: entered allmulticast mode [ 757.787882][ T53] Bluetooth: hci5: command 0xfc11 tx timeout [ 757.789087][ T5788] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 757.877572][ T51] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 758.034904][T10901] loop2: detected capacity change from 0 to 1024 [ 758.893498][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1964'. [ 758.927082][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1964'. [ 759.812290][ T11] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 759.967175][T10929] loop0: detected capacity change from 0 to 512 [ 760.009054][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 760.033418][T10929] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 760.056229][ T11] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 760.067012][ T11] usb 6-1: config 0 has no interface number 0 [ 760.074614][ T11] usb 6-1: config 0 interface 184 has no altsetting 0 [ 760.155553][T10929] EXT4-fs (loop0): 1 truncate cleaned up [ 760.164503][T10929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.210853][ T11] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 760.221416][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.230212][ T11] usb 6-1: Product: syz [ 760.234828][ T11] usb 6-1: Manufacturer: syz [ 760.241632][ T11] usb 6-1: SerialNumber: syz [ 760.271592][ T11] usb 6-1: config 0 descriptor?? [ 760.340215][ T11] smsc75xx v1.0.0 [ 760.615133][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.701478][T10940] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 761.186696][T10943] loop2: detected capacity change from 0 to 7 [ 761.258533][T10943] Dev loop2: unable to read RDB block 7 [ 761.265458][T10943] loop2: unable to read partition table [ 761.299487][T10943] loop2: partition table beyond EOD, truncated [ 761.306085][T10943] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 761.396919][ T11] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 761.408704][ T11] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 761.457974][ T11] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 761.473093][ T11] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 761.484111][ T11] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 761.497851][ T11] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 761.509407][ T11] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 761.713673][ T11] usb 6-1: USB disconnect, device number 2 [ 763.964768][T10979] loop5: detected capacity change from 0 to 164 [ 764.231754][T10983] tap0: tun_chr_ioctl cmd 1074025675 [ 764.239343][T10983] tap0: persist enabled [ 764.317171][T10981] tap0: tun_chr_ioctl cmd 1074025675 [ 764.323075][T10981] tap0: persist enabled [ 766.230669][T11004] input: syz0 as /devices/virtual/input/input28 [ 766.374636][T11010] loop5: detected capacity change from 0 to 128 [ 766.489905][T11010] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 766.619908][T11010] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 766.749236][T11010] fscrypt (loop5, inode 12): Unsupported encryption flags (0x84) [ 766.819737][ T11] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 766.987065][T10402] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 766.998969][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 767.050381][ T11] usb 3-1: config 0 has an invalid interface number: 60 but max is 0 [ 767.061073][ T11] usb 3-1: config 0 has no interface number 0 [ 767.145164][ T11] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 767.157745][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.166161][ T11] usb 3-1: Product: syz [ 767.172348][ T11] usb 3-1: Manufacturer: syz [ 767.177772][ T11] usb 3-1: SerialNumber: syz [ 767.274410][ T11] usb 3-1: config 0 descriptor?? [ 767.293592][T11020] loop8: detected capacity change from 0 to 2 [ 767.332377][ T11] gspca_main: spca500-2.14.0 probing 046d:0900 [ 767.342164][T11020] Dev loop8: unable to read RDB block 2 [ 767.348952][T11020] loop8: unable to read partition table [ 767.380319][T11020] loop8: partition table beyond EOD, truncated [ 767.389239][T11020] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 767.439067][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 767.615183][ T11] gspca_spca500: reg write: error -71 [ 767.645720][ T11] gspca_spca500: reg write: error -71 [ 767.705330][ T11] gspca_spca500: reg write: error -71 [ 767.804178][ T11] gspca_spca500: reg write: error -71 [ 767.837993][ T11] gspca_spca500: reg write: error -71 [ 767.898089][ T11] gspca_spca500: reg write: error -71 [ 767.909314][ T11] gspca_spca500: reg write: error -71 [ 767.928216][ T11] gspca_spca500: reg write: error -71 [ 767.968443][ T11] gspca_spca500: reg write: error -71 [ 768.038526][ T11] gspca_spca500: reg write: error -71 [ 768.088120][ T11] gspca_spca500: reg write: error -71 [ 768.106107][ T11] gspca_spca500: reg write: error -71 [ 768.177584][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.191822][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.204512][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 768.219126][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 768.229471][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.346654][T11025] random: crng reseeded on system resumption [ 768.608329][ T11] gspca_spca500: reg write: error -71 [ 768.632179][ T11] gspca_spca500: reg write: error -71 [ 768.651461][ T11] usb 3-1: USB disconnect, device number 17 [ 768.684960][ T24] usb 1-1: config 0 descriptor?? [ 768.977848][ T5835] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 769.047820][ T5843] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 769.138076][ T5835] usb 6-1: Using ep0 maxpacket: 32 [ 769.144699][ T24] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 769.175053][ T24] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 769.224986][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 769.248599][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.261198][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.272050][ T5835] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 769.283565][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.301410][ T5843] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 769.315222][ T5843] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 769.336512][ T5835] usb 6-1: config 0 descriptor?? [ 769.357129][ T5843] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 769.366967][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.375584][ T5843] usb 4-1: Product: syz [ 769.382009][ T5843] usb 4-1: Manufacturer: syz [ 769.386893][ T5843] usb 4-1: SerialNumber: syz [ 769.487066][ T24] usb 1-1: USB disconnect, device number 30 [ 769.749087][ T5843] usbhid 4-1:1.0: can't add hid device: -71 [ 769.756482][ T5843] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 769.820708][ T5843] usb 4-1: USB disconnect, device number 27 [ 769.902931][ T5835] savu 0003:1E7D:2D5A.002B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 770.135226][ T24] usb 6-1: USB disconnect, device number 3 [ 772.790893][T11069] ALSA: mixer_oss: invalid OSS volume 'ÿÿ' [ 772.922470][T11071] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2032'. [ 773.586555][T11081] kernel read not supported for file / (pid: 11081 comm: syz.4.2035) [ 773.602475][ T30] audit: type=1800 audit(1743652245.831:87): pid=11081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2035" name=0D dev="mqueue" ino=27047 res=0 errno=0 [ 773.631556][T11075] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.846340][T11075] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.973886][T11075] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.056111][T11085] loop2: detected capacity change from 0 to 2048 [ 774.162291][T11085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 774.184250][T11075] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.554208][T11075] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.587179][T11075] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.619111][T11075] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.662391][T11075] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.237779][ T5843] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 775.432914][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 775.466469][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.479386][ T5843] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 775.489380][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.548318][ T5843] usb 1-1: config 0 descriptor?? [ 776.015666][ T5843] hid-steam 0003:28DE:1102.002C: unknown main item tag 0x0 [ 776.023836][ T5843] hid-steam 0003:28DE:1102.002C: unknown main item tag 0x0 [ 776.081454][ T5843] hid-steam 0003:28DE:1102.002C: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 776.177661][ T5843] hid-steam 0003:28DE:1102.002C: Steam Controller 'XXXXXXXXXX' connected [ 776.194335][ T5843] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.002C/input/input30 [ 776.236714][ T5843] hid-steam 0003:28DE:1102.002D: unknown main item tag 0x0 [ 776.249658][ T5843] hid-steam 0003:28DE:1102.002D: unknown main item tag 0x0 [ 776.422927][ T5843] hid-steam 0003:28DE:1102.002D: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 776.500870][ T5843] usb 1-1: USB disconnect, device number 31 [ 776.610041][ T5843] hid-steam 0003:28DE:1102.002C: Steam Controller 'XXXXXXXXXX' disconnected [ 776.771120][T11110] netlink: 'syz.5.2049': attribute type 1 has an invalid length. [ 776.779958][T11110] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2049'. [ 777.859349][ T5843] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 778.041332][T11122] loop2: detected capacity change from 0 to 2048 [ 778.078035][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 778.085026][T11122] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 778.152189][ T5843] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.165958][ T5843] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.177056][ T5843] usb 5-1: config 0 interface 0 has no altsetting 0 [ 778.186880][ T5843] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 778.198246][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.584510][ T5843] usb 5-1: config 0 descriptor?? [ 779.068106][ T5843] hid (null): report_id 0 is invalid [ 779.074031][ T5843] hid (null): invalid report_count -737697329 [ 779.157158][T11130] loop0: detected capacity change from 0 to 1764 [ 779.325382][ T5843] usb 5-1: USB disconnect, device number 30 [ 779.348333][ T9200] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 779.549681][ T9200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.561419][ T9200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.573000][ T9200] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 779.586811][ T9200] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.596959][ T9200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.639754][ T9200] usb 3-1: config 0 descriptor?? [ 779.658624][ T5835] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 779.679548][T11136] input: syz1 as /devices/virtual/input/input31 [ 779.874690][ T5835] usb 4-1: Using ep0 maxpacket: 8 [ 779.932171][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 779.944040][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 779.956529][ T5835] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 779.967622][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 779.980629][ T5835] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 779.991532][ T5835] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 780.001361][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.135597][ T9200] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 780.163792][ T5835] usb 4-1: config 0 descriptor?? [ 780.175806][T11134] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 780.205569][ T9200] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 780.396936][ T5835] usb 3-1: USB disconnect, device number 18 [ 780.650591][ T9200] usb 4-1: USB disconnect, device number 28 [ 780.661579][ T5788] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 782.021908][T11162] loop5: detected capacity change from 0 to 128 [ 782.098561][ T9200] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 782.288839][ T9200] usb 4-1: Using ep0 maxpacket: 8 [ 782.356699][ T9200] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 782.367039][ T9200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.375589][ T9200] usb 4-1: Product: syz [ 782.380252][ T9200] usb 4-1: Manufacturer: syz [ 782.385136][ T9200] usb 4-1: SerialNumber: syz [ 782.480242][ T9200] usb 4-1: config 0 descriptor?? [ 782.501365][ T9200] gspca_main: se401-2.14.0 probing 047d:5003 [ 782.622479][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.629597][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.784064][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2076'. [ 782.965008][ T9200] gspca_se401: ExtraFeatures: 35 [ 783.112153][T11169] loop5: detected capacity change from 0 to 256 [ 783.159928][T11169] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 783.171614][T11169] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 783.188789][ T9200] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 783.358635][T11169] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 783.400277][ T9200] usb 4-1: USB disconnect, device number 29 [ 784.237582][T11183] loop5: detected capacity change from 0 to 16 [ 784.314264][T11183] erofs (device loop5): mounted with root inode @ nid 36. [ 784.778522][ T5835] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 784.988251][ T5835] usb 5-1: Using ep0 maxpacket: 32 [ 785.048977][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.060651][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.071340][ T5835] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 785.083019][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.099961][ T5835] usb 5-1: config 0 descriptor?? [ 785.118080][ T5835] hub 5-1:0.0: USB hub found [ 785.347983][ T5835] hub 5-1:0.0: 1 port detected [ 785.417707][ T5843] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 785.578011][ T5843] usb 6-1: Using ep0 maxpacket: 16 [ 785.611753][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.623713][ T5843] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 785.633684][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.655347][ T5843] usb 6-1: config 0 descriptor?? [ 785.972847][ T5835] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 786.145694][ T5843] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 786.155282][ T5843] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x4 [ 786.164014][ T5843] mcp2221 0003:04D8:00DD.0030: item fetching failed at offset 3/5 [ 786.253970][ T5843] mcp2221 0003:04D8:00DD.0030: can't parse reports [ 786.261524][ T5843] mcp2221 0003:04D8:00DD.0030: probe with driver mcp2221 failed with error -22 [ 786.298859][ T9200] usb 5-1: USB disconnect, device number 31 [ 786.522552][ T5843] usb 6-1: USB disconnect, device number 4 [ 787.235527][T11213] batadv_slave_1: entered promiscuous mode [ 787.299418][T11211] batadv_slave_1: left promiscuous mode [ 787.857151][T11223] batadv_slave_1: entered promiscuous mode [ 787.938105][T11222] batadv_slave_1: left promiscuous mode [ 789.049457][T11238] loop4: detected capacity change from 0 to 2048 [ 789.061450][T11238] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 789.151131][T11238] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 789.207763][T11238] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 789.289666][T11238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 789.517605][ T9200] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 789.753605][ T9200] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 789.763169][ T9200] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 789.846518][ T9200] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 789.856229][ T9200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.864749][ T9200] usb 3-1: Product: syz [ 789.869340][ T9200] usb 3-1: Manufacturer: syz [ 789.874228][ T9200] usb 3-1: SerialNumber: syz [ 789.952545][ T9200] usb 3-1: config 0 descriptor?? [ 790.639591][ T9200] mos7840 3-1:0.0: required endpoints missing [ 790.698913][ T9200] usb 3-1: USB disconnect, device number 19 [ 791.929156][T11273] input: syz1 as /devices/virtual/input/input33 [ 792.326989][T11278] loop4: detected capacity change from 0 to 64 [ 792.758078][ T9200] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 792.981874][ T9200] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 792.991941][ T9200] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 793.001107][ T9200] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 793.011030][ T9200] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 793.022353][ T9200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 793.033058][ T9200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 793.043278][ T9200] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 793.256735][ T9200] usb 1-1: string descriptor 0 read error: -22 [ 793.263848][ T9200] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 793.275651][ T9200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.372017][ T9200] usb 1-1: config 0 descriptor?? [ 793.407926][ T9200] hub 1-1:0.0: bad descriptor, ignoring hub [ 793.414174][ T9200] hub 1-1:0.0: probe with driver hub failed with error -5 [ 793.431635][ T9200] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input34 [ 793.608153][ T9200] usb 1-1: USB disconnect, device number 32 [ 794.804822][ T30] audit: type=1326 audit(1743652267.021:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 794.829145][ T30] audit: type=1326 audit(1743652267.021:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 795.009464][ T30] audit: type=1326 audit(1743652267.101:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 795.033123][ T30] audit: type=1326 audit(1743652267.101:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 795.056369][ T30] audit: type=1326 audit(1743652267.101:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 795.080040][ T30] audit: type=1326 audit(1743652267.101:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 795.102522][ T30] audit: type=1326 audit(1743652267.101:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 795.125836][ T30] audit: type=1326 audit(1743652267.111:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 795.149650][ T30] audit: type=1326 audit(1743652267.111:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 795.173108][ T30] audit: type=1326 audit(1743652267.111:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11304 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5579 code=0x7ffc0000 [ 795.839526][T11320] loop4: detected capacity change from 0 to 256 [ 795.861912][T11320] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 795.873255][T11320] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 795.918842][ T9200] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 795.926117][T11320] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 796.199593][ T9200] usb 1-1: Using ep0 maxpacket: 16 [ 796.223170][ T9200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.238232][ T9200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.251816][ T9200] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 796.266735][ T9200] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 796.276927][ T9200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.303165][ T9200] usb 1-1: config 0 descriptor?? [ 796.904310][ T9200] microsoft 0003:045E:07DA.0031: No inputs registered, leaving [ 796.931155][ T9200] microsoft 0003:045E:07DA.0031: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 796.943745][ T9200] microsoft 0003:045E:07DA.0031: no inputs found [ 796.952645][ T9200] microsoft 0003:045E:07DA.0031: could not initialize ff, continuing anyway [ 796.998239][ T24] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 797.073858][ T9200] usb 1-1: USB disconnect, device number 33 [ 797.189484][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 797.201628][ T24] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 797.211813][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.230081][ T24] usb 6-1: config 0 descriptor?? [ 797.245663][T11325] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 797.361798][ T9200] kernel read not supported for file /audio (pid: 9200 comm: kworker/1:3) [ 797.509762][T11330] netlink: 'syz.4.2146': attribute type 13 has an invalid length. [ 797.540025][T11330] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 797.556142][T11330] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 797.564644][T11330] gretap1: entered promiscuous mode [ 797.573463][T11330] gretap1: entered allmulticast mode [ 797.710631][ T24] elan 0003:04F3:0755.0032: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 797.945316][ T24] usb 6-1: USB disconnect, device number 5 [ 799.337652][ T5843] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 799.560093][ T5843] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 799.573403][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 799.588285][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 799.599716][ T5843] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 799.613328][ T5843] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.624794][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.794515][ T5843] usb 1-1: config 0 descriptor?? [ 800.029704][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 800.346032][ T5843] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 800.373255][ T5843] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving [ 800.432129][ T5843] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 800.647583][ T5843] usb 1-1: USB disconnect, device number 34 [ 801.368057][ T5843] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 801.567561][ T5843] usb 6-1: Using ep0 maxpacket: 16 [ 801.614765][ T5843] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 801.623503][ T5843] usb 6-1: config 0 has no interface number 0 [ 801.630417][ T5843] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 801.645592][ T5843] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 801.753260][ T5843] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 801.763374][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 801.773947][ T5843] usb 6-1: Product: syz [ 801.778860][ T5843] usb 6-1: SerialNumber: syz [ 801.816706][ T5843] usb 6-1: config 0 descriptor?? [ 801.842954][ T5843] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 801.853971][ T5843] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input35 [ 802.091045][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 802.158946][T11373] loop8: detected capacity change from 0 to 8 [ 802.211616][T11373] Dev loop8: unable to read RDB block 8 [ 802.217907][T11373] loop8: unable to read partition table [ 802.303251][T11373] loop8: partition table beyond EOD, truncated [ 802.310145][T11373] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 802.948622][T11382] loop9: detected capacity change from 0 to 8 [ 802.962533][T11382] Dev loop9: unable to read RDB block 8 [ 802.972014][T11382] loop9: unable to read partition table [ 802.979692][ T5843] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 803.034370][T11382] loop9: partition table beyond EOD, truncated [ 803.041192][T11382] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 803.167688][ T5843] usb 3-1: Using ep0 maxpacket: 16 [ 803.188462][T11385] loop0: detected capacity change from 0 to 256 [ 803.216166][ T5843] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 803.225955][ T5843] usb 3-1: config 0 has no interface number 0 [ 803.233060][ T5843] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 803.243620][ T5843] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 803.264707][T11385] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 803.276530][T11385] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 803.331281][ T5843] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 803.341149][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.350667][ T5843] usb 3-1: Product: syz [ 803.355129][ T5843] usb 3-1: Manufacturer: syz [ 803.360705][ T5843] usb 3-1: SerialNumber: syz [ 803.391654][ T5843] usb 3-1: config 0 descriptor?? [ 803.406941][T11379] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 803.460046][T11385] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 803.498316][T11379] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 803.792946][T11379] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 803.835125][T11379] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 804.156437][ T5835] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 804.203388][T11389] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 804.210277][T11389] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 804.218055][T11390] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 804.224881][T11390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 804.234357][T11390] vhci_hcd vhci_hcd.0: Device attached [ 804.235230][T11389] vhci_hcd vhci_hcd.0: Device attached [ 804.388596][T11389] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 804.470640][ T5835] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 804.481432][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.514373][ T24] vhci_hcd: vhci_device speed not set [ 804.520089][T11389] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 804.526958][T11389] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 804.536965][T11389] vhci_hcd vhci_hcd.0: Device attached [ 804.544239][ T5843] asix 3-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x89 [ 804.576980][ T5835] usb 5-1: config 0 descriptor?? [ 804.578649][ T9200] usb 6-1: USB disconnect, device number 6 [ 804.605711][T11390] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(12) [ 804.612674][T11390] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 804.621639][T11390] vhci_hcd vhci_hcd.0: Device attached [ 804.622417][ T5835] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 804.670792][ T9200] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 804.751195][T11396] vhci_hcd: connection closed [ 804.753276][ T3959] vhci_hcd: stop threads [ 804.763448][ T3959] vhci_hcd: release socket [ 804.768711][ T24] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 804.777712][ T3959] vhci_hcd: disconnect device [ 804.802426][T11391] vhci_hcd: connection reset by peer [ 804.803262][T11398] vhci_hcd: connection closed [ 804.824162][T11393] vhci_hcd: connection closed [ 804.852024][ T3959] vhci_hcd: stop threads [ 804.859200][ T3070] usb 3-1: USB disconnect, device number 20 [ 804.863392][ T3959] vhci_hcd: release socket [ 804.874808][ T3959] vhci_hcd: disconnect device [ 804.895515][ T3959] vhci_hcd: stop threads [ 804.900501][ T3959] vhci_hcd: release socket [ 804.905650][ T3959] vhci_hcd: disconnect device [ 804.986828][ T3959] vhci_hcd: stop threads [ 804.992930][ T3959] vhci_hcd: release socket [ 804.998568][ T3959] vhci_hcd: disconnect device [ 805.675169][ T5835] gspca_sonixj: reg_w1 err -71 [ 805.707960][ T5835] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 805.733108][ T5835] usb 5-1: USB disconnect, device number 32 [ 806.180515][T11415] loop5: detected capacity change from 0 to 128 [ 806.199452][T11415] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 806.248750][T11415] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 806.611454][ T3518] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 807.055730][T11426] loop5: detected capacity change from 0 to 128 [ 807.468909][T11424] loop4: detected capacity change from 0 to 4096 [ 807.597738][ T5835] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 807.758170][ T5835] usb 4-1: Using ep0 maxpacket: 8 [ 807.794347][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.805670][ T5835] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 807.809381][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 807.809473][ T30] audit: type=1800 audit(1743652280.021:101): pid=11424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2185" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 807.817398][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.881804][ T5835] usb 4-1: config 0 descriptor?? [ 807.936850][ T30] audit: type=1800 audit(1743652280.071:102): pid=11424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2185" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 808.015014][ T5835] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 808.465151][T11437] loop0: detected capacity change from 0 to 512 [ 808.543397][T11437] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 808.673648][T11437] EXT4-fs (loop0): 1 truncate cleaned up [ 808.682689][T11437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.936605][ T30] audit: type=1800 audit(1743652281.161:103): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2191" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 809.014198][ T5835] gspca_vc032x: reg_r err -71 [ 809.019751][ T5835] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 809.084854][ T5835] usb 4-1: USB disconnect, device number 30 [ 809.261580][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.322742][T11448] loop5: detected capacity change from 0 to 512 [ 809.528753][T11448] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2195: bg 0: block 248: padding at end of block bitmap is not set [ 809.588088][T11448] Quota error (device loop5): write_blk: dquota write failed [ 809.596141][T11448] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 809.606737][T11448] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2195: Failed to acquire dquot type 1 [ 809.678036][T11448] EXT4-fs (loop5): 1 truncate cleaned up [ 809.686402][T11448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.700682][T11448] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 809.860022][ T24] vhci_hcd: vhci_device speed not set [ 810.088868][T11448] syz.5.2195 (11448) used greatest stack depth: 3056 bytes left [ 810.174295][T10402] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.208069][ T6559] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 810.218243][ T6559] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:27: Failed to release dquot type 1 [ 810.725275][T11466] loop5: detected capacity change from 0 to 128 [ 810.769095][T11464] loop2: detected capacity change from 0 to 512 [ 810.791432][T11464] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 810.816958][T11466] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 810.928800][T11466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 811.356097][T11468] loop0: detected capacity change from 0 to 4096 [ 811.449638][T11468] NILFS (loop0): invalid segment: Checksum error in segment payload [ 811.458162][T11468] NILFS (loop0): trying rollback from an earlier position [ 811.583087][T11468] NILFS (loop0): recovery complete [ 811.633094][T11475] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 811.750446][T11474] loop2: detected capacity change from 0 to 2048 [ 811.887699][T11474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.124545][T11487] EXT4-fs (loop2): shut down requested (1) [ 812.430493][ T9402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.758117][ T5835] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 812.987907][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 813.006972][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.019064][ T5835] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 813.028835][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.052428][T11497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2215'. [ 813.114884][ T5835] usb 4-1: config 0 descriptor?? [ 813.221571][T11499] Falling back ldisc for ttyS3. [ 813.779735][ T5835] mcp2221 0003:04D8:00DD.0034: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 813.968613][T11508] loop2: detected capacity change from 0 to 512 [ 814.126719][ T24] usb 4-1: USB disconnect, device number 31 [ 814.189866][T11508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.203454][T11508] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.503777][ T9402] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.887781][ T5835] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 815.120630][ T5835] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.131382][ T5835] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 815.192634][ T5835] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 815.202666][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 815.214632][ T5835] usb 6-1: SerialNumber: syz [ 815.419973][ T24] kernel write not supported for file /snd/midiC2D0 (pid: 24 comm: kworker/1:0) [ 815.471654][ T5835] usb 6-1: 0:2 : does not exist [ 815.477155][ T5835] usb 6-1: usbmixer: too many channels (61) in unit 5 [ 815.515345][T11529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2228'. [ 815.525030][T11529] netlink: 'syz.4.2228': attribute type 7 has an invalid length. [ 815.533809][T11529] netlink: 'syz.4.2228': attribute type 8 has an invalid length. [ 815.542008][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'. [ 815.573899][T11529] gretap0: entered promiscuous mode [ 815.585468][T11529] batadv_slave_1: entered promiscuous mode [ 815.615569][T11527] overlayfs: workdir and upperdir must be separate subtrees [ 815.647810][T11529] gretap0: left promiscuous mode [ 815.657017][ T5835] usb 6-1: USB disconnect, device number 7 [ 815.687548][T11529] batadv_slave_1: left promiscuous mode [ 816.327732][ T24] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 816.547564][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.558222][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 816.583657][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 816.593576][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.602248][ T24] usb 4-1: Product: syz [ 816.606695][ T24] usb 4-1: Manufacturer: syz [ 816.611785][ T24] usb 4-1: SerialNumber: syz [ 816.642597][T11542] loop2: detected capacity change from 0 to 256 [ 816.677806][T11542] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 816.691601][T11542] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 816.828899][T11542] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 816.867524][ T24] usb 4-1: 0:2 : does not exist [ 816.931071][ T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 817.065805][ T24] usb 4-1: USB disconnect, device number 32 [ 817.405380][T11548] loop5: detected capacity change from 0 to 64 [ 817.737086][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888013662000: rx timeout, send abort [ 817.749921][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888013662000: 0x0fe00: (3) A timeout occurred and this is the connection abort to close the session. [ 818.030654][ T53] Bluetooth: hci2: command 0x0405 tx timeout [ 818.580216][ T5835] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 818.821047][ T5835] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.832962][ T5835] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 93, changing to 10 [ 818.847091][ T5835] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 50824, setting to 1024 [ 818.860303][ T5835] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 818.948032][ T5835] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 818.958120][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.966459][ T5835] usb 4-1: Product: syz [ 818.973057][ T5835] usb 4-1: Manufacturer: syz [ 818.978580][ T5835] usb 4-1: SerialNumber: syz [ 819.073317][T11568] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2247'. [ 819.405460][T11559] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 819.428081][T11559] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 820.054368][T11559] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 820.079370][ T5843] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 820.104427][T11559] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 820.268884][ T5843] usb 1-1: Using ep0 maxpacket: 8 [ 820.336783][ T5843] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 820.346912][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.355787][ T5843] usb 1-1: Product: syz [ 820.360562][ T5843] usb 1-1: Manufacturer: syz [ 820.365773][ T5843] usb 1-1: SerialNumber: syz [ 820.375332][ T5835] cdc_ncm 4-1:1.0: bind() failure [ 820.407806][ T5835] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 820.429212][ T5835] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 820.456289][ T5835] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 820.475793][ T5843] usb 1-1: config 0 descriptor?? [ 820.503220][ T5843] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 820.516024][ T5843] usb 1-1: setting power ON [ 820.521564][ T5843] dvb-usb: bulk message failed: -22 (2/0) [ 820.550547][ T5835] usb 4-1: USB disconnect, device number 33 [ 820.579139][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 820.601119][T11586] loop5: detected capacity change from 0 to 64 [ 820.613269][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 820.673764][ T5843] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 820.684658][ T5843] usb 1-1: media controller created [ 820.710597][T11580] dvb-usb: bulk message failed: -22 (3/0) [ 820.718666][T11580] ===================================================== [ 820.726292][T11580] BUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x153a/0x1a60 [ 820.735165][T11580] cxusb_i2c_xfer+0x153a/0x1a60 [ 820.740784][T11580] __i2c_transfer+0xe25/0x3150 [ 820.745806][T11580] i2c_transfer+0x317/0x4a0 [ 820.750786][T11580] i2c_transfer_buffer_flags+0x125/0x1e0 [ 820.753717][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 820.756780][T11580] i2cdev_write+0x210/0x280 [ 820.774721][T11580] vfs_writev+0x963/0x14e0 [ 820.779650][T11580] do_writev+0x247/0x5c0 [ 820.784177][T11580] __ia32_sys_writev+0x95/0xe0 [ 820.790738][T11580] ia32_sys_call+0x3955/0x41f0 [ 820.795831][T11580] __do_fast_syscall_32+0xb0/0x110 [ 820.801379][T11580] do_fast_syscall_32+0x38/0x80 [ 820.806471][T11580] do_SYSENTER_32+0x1f/0x30 [ 820.811378][T11580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 820.819716][T11580] [ 820.822213][T11580] Local variable i.i809 created at: [ 820.827868][T11580] cxusb_i2c_xfer+0x323/0x1a60 [ 820.832989][T11580] __i2c_transfer+0xe25/0x3150 [ 820.840719][T11580] [ 820.843231][T11580] CPU: 1 UID: 0 PID: 11580 Comm: syz.0.2251 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(undef) [ 820.856085][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 820.866752][T11580] ===================================================== [ 820.874740][T11580] Disabling lock debugging due to kernel taint [ 820.881208][T11580] Kernel panic - not syncing: kmsan.panic set ... [ 820.887848][T11580] CPU: 1 UID: 0 PID: 11580 Comm: syz.0.2251 Tainted: G B 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(undef) [ 820.901813][T11580] Tainted: [B]=BAD_PAGE [ 820.906126][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 820.916498][T11580] Call Trace: [ 820.919960][T11580] [ 820.923032][T11580] dump_stack_lvl+0x216/0x2d0 [ 820.927960][T11580] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 820.934072][T11580] dump_stack+0x1e/0x24 [ 820.938484][T11580] panic+0x4e5/0xcf0 [ 820.942645][T11580] ? kmsan_internal_set_shadow_origin+0x10/0x100 [ 820.949225][T11580] kmsan_report+0x2ca/0x2d0 [ 820.953992][T11580] ? vprintk_default+0x3e/0x50 [ 820.959014][T11580] ? __msan_warning+0x95/0x120 [ 820.963992][T11580] ? cxusb_i2c_xfer+0x153a/0x1a60 [ 820.969246][T11580] ? __i2c_transfer+0xe25/0x3150 [ 820.974410][T11580] ? i2c_transfer+0x317/0x4a0 [ 820.979310][T11580] ? i2c_transfer_buffer_flags+0x125/0x1e0 [ 820.985355][T11580] ? i2cdev_write+0x210/0x280 [ 820.990259][T11580] ? vfs_writev+0x963/0x14e0 [ 820.995095][T11580] ? do_writev+0x247/0x5c0 [ 820.999746][T11580] ? __ia32_sys_writev+0x95/0xe0 [ 821.004905][T11580] ? ia32_sys_call+0x3955/0x41f0 [ 821.010046][T11580] ? __do_fast_syscall_32+0xb0/0x110 [ 821.015545][T11580] ? do_fast_syscall_32+0x38/0x80 [ 821.020864][T11580] ? do_SYSENTER_32+0x1f/0x30 [ 821.025751][T11580] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 821.032497][T11580] ? kmsan_get_metadata+0x13e/0x1c0 [ 821.037935][T11580] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 821.044549][T11580] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 821.050841][T11580] ? kmsan_get_metadata+0x13e/0x1c0 [ 821.056280][T11580] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 821.062864][T11580] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 821.069191][T11580] ? mutex_unlock+0x29/0x50 [ 821.073914][T11580] ? kmsan_get_metadata+0x13e/0x1c0 [ 821.079439][T11580] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 821.085578][T11580] __msan_warning+0x95/0x120 [ 821.090383][T11580] cxusb_i2c_xfer+0x153a/0x1a60 [ 821.095463][T11580] ? ia32_sys_call+0x3955/0x41f0 [ 821.100610][T11580] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 821.106656][T11580] ? __kmalloc_node_track_caller_noprof+0xf5/0x1260 [ 821.113482][T11580] ? kmsan_get_metadata+0x13e/0x1c0 [ 821.118927][T11580] ? kmsan_get_metadata+0x13e/0x1c0 [ 821.124377][T11580] ? kmsan_get_metadata+0x13e/0x1c0 [ 821.129836][T11580] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 821.135286][T11580] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 821.140758][T11580] __i2c_transfer+0xe25/0x3150 [ 821.145804][T11580] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 821.152577][T11580] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 821.158603][T11580] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 821.164944][T11580] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 821.170994][T11580] i2c_transfer+0x317/0x4a0 [ 821.175936][T11580] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 821.182024][T11580] i2c_transfer_buffer_flags+0x125/0x1e0 [ 821.188020][T11580] i2cdev_write+0x210/0x280 [ 821.192872][T11580] vfs_writev+0x963/0x14e0 [ 821.197610][T11580] ? __pfx_i2cdev_write+0x10/0x10 [ 821.202927][T11580] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 821.209520][T11580] ? kmsan_get_metadata+0x13e/0x1c0 [ 821.214973][T11580] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 821.221034][T11580] do_writev+0x247/0x5c0 [ 821.225552][T11580] __ia32_sys_writev+0x95/0xe0 [ 821.230682][T11580] ia32_sys_call+0x3955/0x41f0 [ 821.235684][T11580] __do_fast_syscall_32+0xb0/0x110 [ 821.241125][T11580] ? irqentry_exit+0x16/0x60 [ 821.245929][T11580] do_fast_syscall_32+0x38/0x80 [ 821.251034][T11580] do_SYSENTER_32+0x1f/0x30 [ 821.255761][T11580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 821.262367][T11580] RIP: 0023:0xf7fb5579 [ 821.266611][T11580] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 821.286810][T11580] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 821.295455][T11580] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800012c0 [ 821.303602][T11580] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 821.311742][T11580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 821.319893][T11580] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 821.328121][T11580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 821.336290][T11580] [ 821.339824][T11580] Kernel Offset: disabled [ 821.344256][T11580] Rebooting in 86400 seconds..