last executing test programs: 34.373194122s ago: executing program 3 (id=1460): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fchdir(0xffffffffffffffff) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2143) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 20.000409092s ago: executing program 3 (id=1491): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)=0x3ff, 0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)='J', 0x1}], 0x1) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x62, 0x8, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x6, [0x3, 0x0, 0x0]}}]}}}], 0x60}, 0x0) landlock_restrict_self(r0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1000000000800, 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r4, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) unshare(0x2040400) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) unshare(0x2000400) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000440)={0x2000000c, 0x2, 0x3, "bc3e099e0000f4ba89596a40523a00008e7d5480000000300000000000000002"}) fsmount(r5, 0x0, 0x0) 18.456992226s ago: executing program 3 (id=1495): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r0, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0) 18.381559016s ago: executing program 3 (id=1497): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x11, r1, 0x501f0000) read$dsp(r0, 0x0, 0x0) 18.234144936s ago: executing program 3 (id=1499): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) clock_nanosleep(0x8, 0x0, 0x0, 0xfffffffffffffffe) 17.188175391s ago: executing program 3 (id=1501): recvfrom$unix(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000100)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000140)={'sit0\x00', 0x0}) getrandom(&(0x7f0000000580)=""/304, 0x130, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000080)=@s={0x5, @generic=0xff}) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r5 = dup(r2) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="b8080b8ed80f0119b800008ec00f060f01d9660fae38260f01c367266f0f83f200ba2100b85700ef", 0x28}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000006380)={0x2020}, 0x2020) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, &(0x7f0000000180)={0x5, "c4b8b7ed9af8ca40813563c2b15ec5a7151cfe4d5904e3ae4a19f6cee94bf7f7eeff8fb7843a830ac844f650b25969c5bfca61da34c50d9181ab1dedeacf8957", {0x8, 0xf}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast2}, {@in=@empty=0x5, 0x1440, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x0, 0x4, 0x0, 0x44, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 6.251481236s ago: executing program 1 (id=1528): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x1000007f, 0x6, 0x4d, 0xfffffff6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x81, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80010000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10001, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0xffffffff, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x2, 0x9, 0x6, 0x7, 0x8000, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x7, 0x4, 0x8, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x27fff, 0x0, 0x5, 0xb, 0x8, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x20000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x936, 0xa, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x800, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x9, 0x80000000, 0x5, 0x8, 0x6, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x7, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.101155235s ago: executing program 1 (id=1530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x200, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000001400)=[{0x0}], 0x1) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x390, 0x238, 0x238, 0x390, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x270, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89c8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x0, [], 0x0, 0x0, 0x4}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x0, 0x20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 4.92652574s ago: executing program 0 (id=1533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) 4.91067369s ago: executing program 1 (id=1534): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_procfs(0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES16], 0xc4}, 0x1, 0x0, 0x0, 0x20040800}, 0x4008040) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0xfffffffe}, &(0x7f0000000180)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000026b, &(0x7f0000000500)=ANY=[@ANYBLOB="829095a161b56def5f005100000000009d611914f147f7ff952000560000000000834a29e3ea944b8175ea207f76e6290ff9e19537361ab1dc7e9778cc6144183c07"], &(0x7f0000003ff6)='GPL\x00', 0xee9, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x91, 0x34, 0x6d, 0x40, 0x1608, 0x207, 0xa2ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x53, 0x0, 0x1, 0x33, 0xed, 0xce, 0x0, [], [{{0x9, 0x5, 0x7, 0x2, 0x8, 0x0, 0x9, 0x86}}]}}]}}]}}, 0x0) creat(0x0, 0x24) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) socket$qrtr(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) process_mrelease(0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r8, 0x6}, &(0x7f0000000080)=0x8) r9 = accept4(r5, 0x0, 0x0, 0x0) read$alg(r9, &(0x7f0000000300)=""/99, 0x63) 4.724311659s ago: executing program 4 (id=1536): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, 0x0, &(0x7f0000001080)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) 4.461693788s ago: executing program 0 (id=1537): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x97, 0x34, 0x6f, 0x10, 0x4b4, 0x931e, 0xe8e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfd, 0x0, 0x0, 0x63, 0x74, 0x4}}]}}]}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0x0, "001bf1000000000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) 4.300130658s ago: executing program 2 (id=1538): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100}, 0x0, {0x3}, 0x0, 0x1}) 4.207014827s ago: executing program 2 (id=1539): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.133716007s ago: executing program 4 (id=1540): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x1000007f, 0x6, 0x4d, 0xfffffff6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x81, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80010000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10001, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0xffffffff, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x2, 0x9, 0x6, 0x7, 0x8000, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x7, 0x4, 0x8, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x27fff, 0x0, 0x5, 0xb, 0x8, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x20000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x936, 0xa, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x800, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x9, 0x80000000, 0x5, 0x8, 0x6, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x7, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.996358908s ago: executing program 0 (id=1541): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x21081a, &(0x7f0000000000)={[{@grpquota}, {@errors_continue}, {@nogrpid}]}, 0x1, 0x532, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r4 = creat(0x0, 0x0) lseek(r4, 0x207ffffb, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000140)) 1.876749588s ago: executing program 32 (id=1501): recvfrom$unix(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000100)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000140)={'sit0\x00', 0x0}) getrandom(&(0x7f0000000580)=""/304, 0x130, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000080)=@s={0x5, @generic=0xff}) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r5 = dup(r2) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="b8080b8ed80f0119b800008ec00f060f01d9660fae38260f01c367266f0f83f200ba2100b85700ef", 0x28}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000006380)={0x2020}, 0x2020) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, &(0x7f0000000180)={0x5, "c4b8b7ed9af8ca40813563c2b15ec5a7151cfe4d5904e3ae4a19f6cee94bf7f7eeff8fb7843a830ac844f650b25969c5bfca61da34c50d9181ab1dedeacf8957", {0x8, 0xf}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast2}, {@in=@empty=0x5, 0x1440, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x0, 0x4, 0x0, 0x44, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 1.729301637s ago: executing program 4 (id=1543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14}}, 0x84}}, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200004c, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x0, 0x143, &(0x7f0000001580)="$eJzs0LFLAmEYx/Hf25VGZRoZ2JAFDR2JeZ7YFqGRIGQHRbugFwSakYu0NbT5J0hUQtPhEI0NZi2GB2L/RMtBUNBovPdeWFBD+/PZ3u/zvo94m2umDB8gQdgoFY+O9XJZzy/saJnU7s3t3STvbgCjP+br9v1mAniRgOYwYJ0CeQAPHmD/oKCv5EoFfrYSgAwgOS66AnF3jDe/aFGnyYtAa0Y09ZcWc5qLv/UO9vUvgSXepgb73gFUaqGG8bTdaafDy9dzEs7SoflphvPqtx7Uq2pqtj4RkLCnP14hyfi750g73I00jJ7ZyWxpGc2MqepqTIkqSrzH/3m8b38UjonfYc7RhUDQjbcT5wjDnlv3zAOgdfGhFb1uP4DXQx/QxV8TVqnlsoGRetbvG4Ik42s9IYQQQgghhBDyb58BAAD//8kVZzA=") mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000001e40)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e20, 0x704d, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, {0x0}, 0x0}, 0xa0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.518727786s ago: executing program 1 (id=1544): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r3, 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000000)) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 912.068893ms ago: executing program 2 (id=1545): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r1, 0x0, 0x1000}, &(0x7f0000000340)=0xc) 826.403713ms ago: executing program 0 (id=1546): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) 760.679463ms ago: executing program 2 (id=1547): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="9306d813d7dcd35750a7408871cdd4a61fe4d48beecb38f12aae45f2f226fe45b578c97ff4bf7fdf7504c5c08a0f1e6bdbaa7b79ce572f50574943f7972d5b84424ff66e3f4143a7fc5e2b4d4cf6018d1cab4e37ecd6531fb3dde7cbebef87c81a", 0x61, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4140aecd, &(0x7f00000001c0)=ANY=[]) 652.693512ms ago: executing program 4 (id=1548): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/fscaps', 0x80, 0xd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 460.257541ms ago: executing program 1 (id=1549): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0xffff, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}]}}]}, 0x48}}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 360.002481ms ago: executing program 2 (id=1550): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100}, 0x0, {0x3}, 0x0, 0x1}) 353.327391ms ago: executing program 0 (id=1551): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) unshare(0x20400) fallocate(r0, 0x0, 0x400000000000000, 0x7) 190.55333ms ago: executing program 1 (id=1552): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x1000007f, 0x6, 0x4d, 0xfffffff6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x81, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80010000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10001, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0xffffffff, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x2, 0x9, 0x6, 0x7, 0x8000, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x7, 0x4, 0x8, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x27fff, 0x0, 0x5, 0xb, 0x8, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x20000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x936, 0xa, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x800, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x9, 0x80000000, 0x5, 0x8, 0x6, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x7, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 159.14286ms ago: executing program 2 (id=1553): r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000002740), 0x0, 0x68000) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r1], 0x0) 104.55754ms ago: executing program 4 (id=1554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x7ffff000) 104.23937ms ago: executing program 0 (id=1555): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) 0s ago: executing program 4 (id=1556): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x21081a, &(0x7f0000000000)={[{@grpquota}, {@errors_continue}, {@nogrpid}]}, 0x1, 0x532, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r4 = creat(0x0, 0x0) lseek(r4, 0x207ffffb, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000140)) kernel console output (not intermixed with test programs): . [ 328.964000][ T4251] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 329.742817][ T6350] binder: 6344:6350 ioctl c0306201 0 returned -14 [ 331.853569][ T6368] loop4: detected capacity change from 0 to 4096 [ 332.043315][ T4264] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 332.055652][ T4264] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 332.081360][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 332.700662][ T6379] loop1: detected capacity change from 0 to 4096 [ 332.739111][ T6379] NILFS (loop1): invalid segment: Checksum error in segment payload [ 332.747396][ T6379] NILFS (loop1): trying rollback from an earlier position [ 332.767065][ T6379] NILFS (loop1): recovery complete [ 332.785233][ T6380] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.815260][ T27] audit: type=1804 audit(1734606652.907:98): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.467" name="/newroot/88/file2/bus" dev="loop1" ino=12 res=1 errno=0 [ 332.934220][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 335.551427][ T6415] loop4: detected capacity change from 0 to 4096 [ 335.905590][ T6424] random: crng reseeded on system resumption [ 339.059119][ T4264] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 339.065837][ T4264] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 339.862902][ T6437] loop2: detected capacity change from 0 to 4096 [ 339.908256][ T6437] NILFS (loop2): invalid segment: Checksum error in segment payload [ 339.917422][ T6437] NILFS (loop2): trying rollback from an earlier position [ 339.933607][ T6437] NILFS (loop2): recovery complete [ 339.950482][ T6442] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.030953][ T27] audit: type=1804 audit(1734606660.117:99): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.481" name="/newroot/87/file2/bus" dev="loop2" ino=12 res=1 errno=0 [ 340.273986][ T4296] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 340.521766][ T4296] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.599496][ T4296] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 340.644994][ T4296] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.725774][ T4296] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.780448][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.800781][ T4296] usb 5-1: Product: syz [ 340.827082][ T4296] usb 5-1: Manufacturer: syz [ 340.860696][ T4296] usb 5-1: SerialNumber: syz [ 341.283638][ T4296] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 341.470965][ T4296] cdc_ncm 5-1:1.0: bind() failure [ 341.689694][ T6467] binder: 6459:6467 ioctl c0306201 0 returned -14 [ 341.937185][ T6469] loop2: detected capacity change from 0 to 4096 [ 343.064730][ T4252] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 343.071526][ T4252] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 343.149046][ T6478] random: crng reseeded on system resumption [ 344.929960][ T126] usb 5-1: USB disconnect, device number 5 [ 346.275606][ T6495] loop0: detected capacity change from 0 to 4096 [ 346.319861][ T6495] NILFS (loop0): invalid segment: Checksum error in segment payload [ 346.342093][ T6495] NILFS (loop0): trying rollback from an earlier position [ 346.504023][ T4299] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 346.601390][ T6495] NILFS (loop0): recovery complete [ 346.644172][ T6501] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.705384][ T4299] usb 4-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 346.761152][ T4299] usb 4-1: config 0 interface 0 altsetting 24 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 346.772339][ T27] audit: type=1804 audit(1734606666.847:100): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.497" name="/newroot/109/file2/bus" dev="loop0" ino=12 res=1 errno=0 [ 346.822842][ T4299] usb 4-1: config 0 interface 0 has no altsetting 0 [ 346.845089][ T4299] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 346.875048][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.918339][ T4299] usb 4-1: config 0 descriptor?? [ 346.924275][ T6497] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 347.825423][ T6512] loop0: detected capacity change from 0 to 1024 [ 348.018428][ T4299] waltop 0003:172F:0038.0011: unknown main item tag 0x0 [ 348.025571][ T4299] waltop 0003:172F:0038.0011: unknown main item tag 0x0 [ 348.032556][ T4299] waltop 0003:172F:0038.0011: unknown main item tag 0x0 [ 348.039605][ T4299] waltop 0003:172F:0038.0011: unknown main item tag 0x0 [ 348.046646][ T4299] waltop 0003:172F:0038.0011: unknown main item tag 0x0 [ 348.053642][ T4299] waltop 0003:172F:0038.0011: unknown main item tag 0x0 [ 348.092651][ T4299] waltop 0003:172F:0038.0011: unknown main item tag 0x0 [ 348.130444][ T4299] waltop 0003:172F:0038.0011: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.3-1/input0 [ 348.241563][ T4299] usb 4-1: USB disconnect, device number 7 [ 348.375441][ T6521] loop4: detected capacity change from 0 to 2048 [ 348.594058][ T6521] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 348.907055][ T4507] hfsplus: b-tree write err: -5, ino 8 [ 350.008658][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 350.339468][ T6547] loop3: detected capacity change from 0 to 4096 [ 350.392668][ T6547] NILFS (loop3): invalid segment: Checksum error in segment payload [ 350.411633][ T6548] binder: 6537:6548 ioctl c0306201 0 returned -14 [ 350.421300][ T6547] NILFS (loop3): trying rollback from an earlier position [ 350.508162][ T6547] NILFS (loop3): recovery complete [ 350.549922][ T6551] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 350.654447][ T27] audit: type=1804 audit(1734606670.747:101): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.512" name="/newroot/107/file2/bus" dev="loop3" ino=12 res=1 errno=0 [ 350.759354][ T6550] loop4: detected capacity change from 0 to 4096 [ 352.433483][ T4264] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 352.454072][ T4264] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 352.750634][ T6572] loop2: detected capacity change from 0 to 8 [ 352.759733][ T6572] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 353.658786][ T6575] loop4: detected capacity change from 0 to 1024 [ 354.505132][ T6582] loop2: detected capacity change from 0 to 2048 [ 354.581781][ T6580] loop0: detected capacity change from 0 to 4096 [ 354.749949][ T6564] loop3: detected capacity change from 0 to 32768 [ 354.777743][ T6564] jfs_mount: dbMount failed w/rc = -22 [ 354.783684][ T6564] Mount JFS Failure: -22 [ 354.848105][ T6582] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 354.856937][ T6564] jfs_mount failed w/return code = -22 [ 354.885988][ T4507] hfsplus: b-tree write err: -5, ino 8 [ 355.221415][ T4251] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 355.233167][ T4251] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 356.168956][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 358.435660][ T6602] hub 6-0:1.0: USB hub found [ 358.454195][ T6602] hub 6-0:1.0: 1 port detected [ 359.168311][ T6623] loop4: detected capacity change from 0 to 1024 [ 359.791496][ T6625] loop3: detected capacity change from 0 to 4096 [ 360.059028][ T4579] hfsplus: b-tree write err: -5, ino 8 [ 360.359452][ T4256] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 360.374686][ T4256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 361.116170][ T6640] loop3: detected capacity change from 0 to 2048 [ 361.358346][ T6640] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 363.591281][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 366.818830][ T6672] loop1: detected capacity change from 0 to 4096 [ 367.042731][ T6686] loop0: detected capacity change from 0 to 2048 [ 367.965859][ T6686] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 368.727110][ T6695] netlink: 224 bytes leftover after parsing attributes in process `syz.4.557'. [ 368.900481][ T4253] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 369.078829][ T4253] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 369.080916][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.557'. [ 370.578268][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 370.680401][ T4327] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 370.751149][ T6721] loop1: detected capacity change from 0 to 8 [ 370.761647][ T6721] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 371.028994][ T4327] usb 4-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 371.084100][ T4327] usb 4-1: config 0 interface 0 altsetting 24 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 371.215503][ T4327] usb 4-1: config 0 interface 0 has no altsetting 0 [ 371.272182][ T4327] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 371.386386][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.541508][ T4327] usb 4-1: config 0 descriptor?? [ 371.559370][ T6716] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 371.971688][ T6714] loop2: detected capacity change from 0 to 32768 [ 372.000857][ T6714] jfs_mount: dbMount failed w/rc = -22 [ 372.058874][ T4327] usbhid 4-1:0.0: can't add hid device: -71 [ 372.066477][ T4327] usbhid: probe of 4-1:0.0 failed with error -71 [ 372.081711][ T6714] Mount JFS Failure: -22 [ 372.128763][ T6714] jfs_mount failed w/return code = -22 [ 372.151391][ T4327] usb 4-1: USB disconnect, device number 8 [ 373.719737][ T6737] loop0: detected capacity change from 0 to 4096 [ 376.852363][ T4251] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 376.941544][ T6756] loop3: detected capacity change from 0 to 2048 [ 376.953912][ T4251] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 378.466309][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.472967][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.593984][ T6769] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 378.601023][ T6769] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 378.774351][ T6769] vhci_hcd vhci_hcd.0: Device attached [ 378.825818][ T6771] vhci_hcd: connection closed [ 378.830698][ T9] vhci_hcd: stop threads [ 378.915283][ T6781] netlink: 224 bytes leftover after parsing attributes in process `syz.3.579'. [ 378.924419][ T6781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.579'. [ 378.998145][ T9] vhci_hcd: release socket [ 379.051702][ T9] vhci_hcd: disconnect device [ 379.062227][ T4333] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 381.440140][ T6796] loop2: detected capacity change from 0 to 4096 [ 382.128655][ T6784] loop1: detected capacity change from 0 to 32768 [ 382.499973][ T6784] jfs_mount: dbMount failed w/rc = -22 [ 382.526126][ T6784] Mount JFS Failure: -22 [ 382.530428][ T6784] jfs_mount failed w/return code = -22 [ 382.713649][ T6806] loop3: detected capacity change from 0 to 2048 [ 382.791380][ T6806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 382.974569][ T6794] loop0: detected capacity change from 0 to 32768 [ 383.090480][ T6794] (syz.0.586,6794,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 383.140074][ T6794] (syz.0.586,6794,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 383.172904][ T6811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 383.657817][ T6794] JBD2: Ignoring recovery information on journal [ 383.846315][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 383.881999][ T6794] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 384.230559][ T4333] vhci_hcd: vhci_device speed not set [ 384.978992][ T6814] loop1: detected capacity change from 0 to 32768 [ 384.982446][ T4251] ocfs2: Unmounting device (7,0) on (node local) [ 385.096970][ T6814] XFS (loop1): Mounting V5 Filesystem [ 385.172471][ T6814] XFS (loop1): Ending clean mount [ 385.180960][ T6814] XFS (loop1): Quotacheck needed: Please wait. [ 385.224632][ T6814] XFS (loop1): Quotacheck: Done. [ 385.254159][ T4252] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 385.260739][ T4252] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 385.693237][ T6840] netlink: 224 bytes leftover after parsing attributes in process `syz.0.594'. [ 385.702417][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'. [ 385.734915][ T27] audit: type=1800 audit(1734606705.747:102): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.591" name="bus" dev="loop1" ino=9291 res=0 errno=0 [ 386.293982][ T953] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 386.483984][ T953] usb 4-1: Using ep0 maxpacket: 16 [ 386.493289][ T953] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 386.559593][ T953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.626447][ T953] usb 4-1: Product: syz [ 386.630663][ T953] usb 4-1: Manufacturer: syz [ 386.663729][ T953] usb 4-1: SerialNumber: syz [ 386.693319][ T953] usb 4-1: config 0 descriptor?? [ 386.817042][ T953] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 387.305410][ T953] gp8psk: usb out operation failed. [ 387.311152][ T953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 387.358853][ T953] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 387.374335][ T953] usb 4-1: media controller created [ 387.429618][ T953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.520686][ T953] gp8psk_fe: Frontend revision 1 attached [ 387.551393][ T953] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 387.584916][ T953] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 387.703524][ T953] gp8psk: usb in 138 operation failed. [ 387.716199][ T953] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 387.746950][ T953] gp8psk: found Genpix USB device pID = 201 (hex) [ 387.759742][ T6860] loop0: detected capacity change from 0 to 8192 [ 387.783726][ T953] usb 4-1: USB disconnect, device number 9 [ 387.968771][ T953] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 388.023439][ T4253] XFS (loop1): Unmounting Filesystem [ 388.539272][ T6858] loop4: detected capacity change from 0 to 32768 [ 388.568447][ T6858] jfs_mount: dbMount failed w/rc = -22 [ 388.584089][ T6858] Mount JFS Failure: -22 [ 388.588477][ T6858] jfs_mount failed w/return code = -22 [ 388.630725][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 388.664128][ T6530] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 388.695699][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 389.128046][ T6880] kvm: emulating exchange as write [ 389.803866][ T953] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 390.694100][ T953] usb 4-1: Using ep0 maxpacket: 16 [ 390.705774][ T953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.775575][ T953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.905605][ T953] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 390.949241][ T953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.980347][ T953] usb 4-1: config 0 descriptor?? [ 391.370887][ T6907] loop4: detected capacity change from 0 to 4096 [ 391.525793][ T6908] loop2: detected capacity change from 0 to 8192 [ 391.631882][ T953] usbhid 4-1:0.0: can't add hid device: -71 [ 391.659816][ T953] usbhid: probe of 4-1:0.0 failed with error -71 [ 391.702011][ T953] usb 4-1: USB disconnect, device number 10 [ 391.833582][ T6897] loop1: detected capacity change from 0 to 32768 [ 392.152746][ T6897] XFS (loop1): Mounting V5 Filesystem [ 392.236932][ T4264] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 392.267517][ T4264] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 392.352180][ T6897] XFS (loop1): Ending clean mount [ 392.359346][ T6897] XFS (loop1): Quotacheck needed: Please wait. [ 392.434738][ T6897] XFS (loop1): Quotacheck: Done. [ 392.652222][ T6921] loop2: detected capacity change from 0 to 4096 [ 392.786087][ T27] audit: type=1800 audit(1734606712.867:103): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.615" name="bus" dev="loop1" ino=9291 res=0 errno=0 [ 392.806494][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.408079][ T4253] XFS (loop1): Unmounting Filesystem [ 393.418403][ T6931] bridge0: port 3(gretap0) entered blocking state [ 393.421630][ T4252] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 393.426123][ T6931] bridge0: port 3(gretap0) entered disabled state [ 393.439096][ T4252] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 393.516145][ T6931] device gretap0 entered promiscuous mode [ 393.572970][ T6931] bridge0: port 3(gretap0) entered blocking state [ 393.580474][ T6931] bridge0: port 3(gretap0) entered forwarding state [ 394.221268][ T6941] 9pnet: Unknown protocol version 9p200 [ 394.256226][ T6941] siw: device registration error -23 [ 395.004512][ T6945] syz.4.629 (6945): attempted to duplicate a private mapping with mremap. This is not supported. [ 395.267432][ T6947] loop2: detected capacity change from 0 to 4096 [ 395.333750][ T6949] loop0: detected capacity change from 0 to 8192 [ 395.399147][ T6530] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 396.100963][ T6963] loop3: detected capacity change from 0 to 4096 [ 396.148578][ T4252] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 396.162937][ T4252] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 396.397441][ T6955] loop1: detected capacity change from 0 to 32768 [ 396.436448][ T6955] jfs_mount: dbMount failed w/rc = -22 [ 396.447412][ T6955] Mount JFS Failure: -22 [ 396.451789][ T6955] jfs_mount failed w/return code = -22 [ 396.512091][ T4256] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 396.522066][ T4256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 397.540628][ T6980] 9pnet: Unknown protocol version 9p200 [ 397.553943][ T6980] siw: device registration error -23 [ 400.006207][ T6995] loop4: detected capacity change from 0 to 8192 [ 400.094869][ T6998] loop1: detected capacity change from 0 to 4096 [ 400.125881][ T7005] loop0: detected capacity change from 0 to 4096 [ 400.499924][ T4253] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 400.509798][ T4253] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 400.655638][ T4251] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 400.662129][ T4251] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 401.567990][ T7027] 9pnet: Unknown protocol version 9p200 [ 401.581039][ T7027] siw: device registration error -23 [ 402.610118][ T7037] loop0: detected capacity change from 0 to 4096 [ 402.652706][ T7014] loop3: detected capacity change from 0 to 32768 [ 402.676637][ T7014] jfs_mount: dbMount failed w/rc = -22 [ 402.693902][ T126] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 402.711791][ T7014] Mount JFS Failure: -22 [ 402.724221][ T7014] jfs_mount failed w/return code = -22 [ 403.073887][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 403.081400][ T126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 403.105204][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.803465][ T7039] loop4: detected capacity change from 0 to 8192 [ 403.810002][ T126] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.824037][ T126] usb 3-1: config 1 interface 0 has no altsetting 0 [ 403.930250][ T126] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.941053][ T4251] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 403.953971][ T4251] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 403.983989][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.992040][ T126] usb 3-1: Product: syz [ 404.042038][ T126] usb 3-1: Manufacturer: syz [ 404.238683][ T126] usb 3-1: SerialNumber: syz [ 404.295862][ T7047] loop0: detected capacity change from 0 to 4096 [ 404.541772][ T126] usb 3-1: bad CDC descriptors [ 404.601140][ T7034] loop1: detected capacity change from 0 to 32768 [ 404.620586][ T126] usb 3-1: USB disconnect, device number 7 [ 405.050400][ T7034] XFS (loop1): Mounting V5 Filesystem [ 405.204211][ T7060] loop3: detected capacity change from 0 to 4096 [ 405.311219][ T4251] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 405.382629][ T4251] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 405.511991][ T7034] XFS (loop1): Ending clean mount [ 405.553214][ T7034] XFS (loop1): Quotacheck needed: Please wait. [ 405.734908][ T7034] XFS (loop1): Quotacheck: Done. [ 406.511239][ T4253] XFS (loop1): Unmounting Filesystem [ 406.806254][ T4256] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 406.823040][ T4256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 406.898813][ T7074] 9pnet: Unknown protocol version 9p200 [ 406.906681][ T7074] siw: device registration error -23 [ 408.587625][ T7084] loop3: detected capacity change from 0 to 4096 [ 409.625060][ T4256] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 409.632967][ T7093] loop2: detected capacity change from 0 to 8192 [ 409.635997][ T4256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 409.870401][ T6426] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 409.883914][ T7097] loop0: detected capacity change from 0 to 4096 [ 410.421882][ T4251] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 410.431209][ T4251] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 410.478171][ T7086] loop4: detected capacity change from 0 to 32768 [ 410.566221][ T7086] jfs_mount: dbMount failed w/rc = -22 [ 410.571970][ T7086] Mount JFS Failure: -22 [ 410.615399][ T7086] jfs_mount failed w/return code = -22 [ 411.917890][ T7118] netlink: 224 bytes leftover after parsing attributes in process `syz.1.682'. [ 411.927043][ T7118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.682'. [ 413.700025][ T7132] netlink: 'syz.4.688': attribute type 1 has an invalid length. [ 413.753926][ T4333] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 413.791537][ T7134] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 413.800630][ T7136] netlink: 48 bytes leftover after parsing attributes in process `syz.0.689'. [ 413.953127][ T4333] usb 2-1: Using ep0 maxpacket: 16 [ 413.973949][ T4333] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 414.059556][ T4333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.150398][ T4333] usb 2-1: Product: syz [ 414.192313][ T4333] usb 2-1: Manufacturer: syz [ 414.272360][ T4333] usb 2-1: SerialNumber: syz [ 414.386380][ T4333] usb 2-1: config 0 descriptor?? [ 414.427633][ T4333] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 415.176443][ T4333] gp8psk: usb out operation failed. [ 415.182364][ T4333] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 415.204263][ T4333] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 415.229111][ T4333] usb 2-1: media controller created [ 415.291192][ T4333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 415.343395][ T7152] loop3: detected capacity change from 0 to 4096 [ 415.361884][ T4333] gp8psk_fe: Frontend revision 1 attached [ 415.389391][ T4333] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 415.433031][ T4333] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 415.515924][ T4333] gp8psk: usb in 138 operation failed. [ 415.527674][ T4333] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 415.596962][ T4333] gp8psk: found Genpix USB device pID = 201 (hex) [ 415.673512][ T4333] usb 2-1: USB disconnect, device number 3 [ 416.447279][ T4256] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 416.460375][ T4333] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 416.471285][ T4256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 418.373912][ T7173] netlink: 224 bytes leftover after parsing attributes in process `syz.3.697'. [ 418.382892][ T7173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.697'. [ 419.759600][ T7161] syz.4.695 (7161): drop_caches: 2 [ 419.902989][ T27] audit: type=1326 audit(1734606739.987:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.1.702" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb167185d29 code=0x0 [ 422.348740][ T7198] loop1: detected capacity change from 0 to 4096 [ 424.725568][ T4253] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 424.756379][ T4253] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 425.281486][ T7217] netlink: 224 bytes leftover after parsing attributes in process `syz.1.711'. [ 425.290741][ T7217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.711'. [ 428.585654][ T7247] binder: 7231:7247 ioctl c0306201 0 returned -14 [ 428.867544][ T7249] loop4: detected capacity change from 0 to 4096 [ 428.911377][ T7236] loop1: detected capacity change from 0 to 32768 [ 429.168719][ T7236] XFS (loop1): Mounting V5 Filesystem [ 429.694079][ T7236] XFS (loop1): Ending clean mount [ 429.740809][ T7236] XFS (loop1): Quotacheck needed: Please wait. [ 429.763251][ T7261] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 429.857680][ T7236] XFS (loop1): Quotacheck: Done. [ 429.886343][ T4264] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 429.892937][ T4264] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 430.354879][ T4333] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 430.673836][ T4333] usb 5-1: Using ep0 maxpacket: 16 [ 430.680955][ T4333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.702555][ T4333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.713244][ T27] audit: type=1800 audit(1734606750.797:105): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.718" name="bus" dev="loop1" ino=9291 res=0 errno=0 [ 430.732959][ T4333] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 430.784055][ T4333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.851506][ T4333] usb 5-1: config 0 descriptor?? [ 431.513665][ T4333] usbhid 5-1:0.0: can't add hid device: -71 [ 431.715589][ T4333] usbhid: probe of 5-1:0.0 failed with error -71 [ 431.744942][ T4295] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 431.754296][ T4333] usb 5-1: USB disconnect, device number 6 [ 432.723599][ T4295] usb 3-1: Using ep0 maxpacket: 32 [ 432.733123][ T4295] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 432.776312][ T4295] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 432.782542][ T7295] device erspan0 entered promiscuous mode [ 432.811495][ T7295] device vlan2 entered promiscuous mode [ 432.813864][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.840648][ T7295] device erspan0 left promiscuous mode [ 432.843845][ T4295] usb 3-1: Product: syz [ 432.850540][ T4295] usb 3-1: Manufacturer: syz [ 432.873868][ T4295] usb 3-1: SerialNumber: syz [ 432.893854][ T4295] usb 3-1: config 0 descriptor?? [ 432.899604][ T7288] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 432.923337][ T4295] hub 3-1:0.0: bad descriptor, ignoring hub [ 432.935696][ T7293] loop3: detected capacity change from 0 to 8192 [ 432.943841][ T4295] hub: probe of 3-1:0.0 failed with error -5 [ 432.971340][ T4295] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 433.053872][ T6515] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 433.320010][ T953] usb 3-1: USB disconnect, device number 8 [ 433.320204][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 433.416594][ T7297] loop4: detected capacity change from 0 to 4096 [ 433.442676][ T4253] XFS (loop1): Unmounting Filesystem [ 433.864235][ T7301] loop0: detected capacity change from 0 to 4096 [ 434.062685][ T7306] loop1: detected capacity change from 0 to 2048 [ 434.181463][ T7306] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 434.257754][ T4264] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 434.270319][ T4264] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 434.514065][ T953] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 434.587991][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 434.714061][ T953] usb 3-1: Using ep0 maxpacket: 16 [ 434.759544][ T953] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 434.941924][ T953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.954116][ T953] usb 3-1: Product: syz [ 434.958386][ T953] usb 3-1: Manufacturer: syz [ 434.963425][ T953] usb 3-1: SerialNumber: syz [ 435.012537][ T953] usb 3-1: config 0 descriptor?? [ 435.168722][ T953] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 435.382786][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 435.389224][ T953] gp8psk: usb in 128 operation failed. [ 435.400881][ T953] gp8psk: usb in 137 operation failed. [ 435.406748][ T953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 435.416928][ T953] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 435.426251][ T953] usb 3-1: media controller created [ 435.450795][ T7321] binder: 7303:7321 ioctl c0306201 0 returned -14 [ 435.525708][ T953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 435.591345][ T953] gp8psk_fe: Frontend revision 1 attached [ 435.612950][ T953] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 435.635016][ T953] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 436.022109][ T953] gp8psk: usb in 138 operation failed. [ 436.103843][ T953] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 436.141653][ T953] gp8psk: found Genpix USB device pID = 201 (hex) [ 436.186909][ T953] usb 3-1: USB disconnect, device number 9 [ 436.359935][ T953] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 437.934583][ T4251] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 437.941160][ T4251] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 438.121159][ T7349] loop4: detected capacity change from 0 to 2048 [ 438.183525][ T7349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 438.453506][ T7345] loop2: detected capacity change from 0 to 8192 [ 438.466426][ T7355] loop0: detected capacity change from 0 to 4096 [ 438.552164][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.750'. [ 439.271745][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 439.546538][ T4251] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 439.576679][ T4251] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 439.874018][ T126] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 439.908639][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.915179][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.084310][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 440.128939][ T126] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 440.143955][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.152608][ T126] usb 4-1: Product: syz [ 440.160579][ T126] usb 4-1: Manufacturer: syz [ 440.167227][ T126] usb 4-1: SerialNumber: syz [ 440.183241][ T126] usb 4-1: config 0 descriptor?? [ 440.272496][ T126] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 440.399387][ T126] gp8psk: usb in 128 operation failed. [ 440.424809][ T126] gp8psk: usb in 137 operation failed. [ 440.450872][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 440.499847][ T126] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 440.605258][ T126] usb 4-1: media controller created [ 441.111872][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.264716][ T126] gp8psk_fe: Frontend revision 1 attached [ 441.333897][ T126] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 441.391444][ T126] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 441.408928][ T7381] loop2: detected capacity change from 0 to 4096 [ 441.554492][ T126] gp8psk: usb in 138 operation failed. [ 441.560137][ T126] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 441.579995][ T7384] loop0: detected capacity change from 0 to 2048 [ 441.597868][ T126] gp8psk: found Genpix USB device pID = 201 (hex) [ 441.786414][ T7384] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 441.790175][ T126] usb 4-1: USB disconnect, device number 11 [ 441.849416][ T126] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 441.900855][ T7390] loop4: detected capacity change from 0 to 4096 [ 442.665584][ T7398] loop3: detected capacity change from 0 to 8192 [ 442.767200][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 442.939686][ T4264] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 442.951896][ T4264] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 443.197152][ T7408] binder: 7393:7408 ioctl c0306201 0 returned -14 [ 443.860809][ T7417] loop3: detected capacity change from 0 to 512 [ 444.621257][ T7417] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 444.656204][ T7417] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 444.951994][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 445.119187][ T7429] loop0: detected capacity change from 0 to 2048 [ 445.139808][ T953] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 445.341806][ T953] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 445.364998][ T7429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 445.375363][ T4252] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 445.377777][ T953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.381887][ T4252] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 445.399926][ T953] usb 5-1: config 0 has no interface number 0 [ 445.406133][ T953] usb 5-1: config 0 interface 126 has no altsetting 0 [ 445.425245][ T953] usb 5-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 445.444005][ T953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.462390][ T953] usb 5-1: Product: syz [ 445.466647][ T953] usb 5-1: Manufacturer: syz [ 445.471279][ T953] usb 5-1: SerialNumber: syz [ 445.506726][ T953] usb 5-1: config 0 descriptor?? [ 445.526446][ T953] zaurus 5-1:0.126: More than one union descriptor, skipping ... [ 445.620649][ T953] zaurus 5-1:0.126: skipping garbage [ 445.641013][ T953] usb 5-1: bad CDC descriptors [ 446.153286][ T953] usb 5-1: USB disconnect, device number 7 [ 446.819400][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 446.969834][ T7445] loop1: detected capacity change from 0 to 8192 [ 447.186078][ T7329] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 447.434123][ T5486] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 447.469241][ T7453] loop0: detected capacity change from 0 to 4096 [ 447.631544][ T5486] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 447.867061][ T5486] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.880433][ T5486] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 447.893993][ T5486] usb 5-1: config 0 interface 0 has no altsetting 0 [ 447.900934][ T5486] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 447.947417][ T5486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.103645][ T5486] usb 5-1: config 0 descriptor?? [ 448.318647][ T4251] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 448.352701][ T4251] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 449.084070][ T14] usb 5-1: USB disconnect, device number 8 [ 449.661541][ T7470] loop3: detected capacity change from 0 to 1024 [ 450.071982][ T4295] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 450.965974][ T7484] binder: 7473:7484 ioctl c0306201 0 returned -14 [ 450.987289][ T7483] loop4: detected capacity change from 0 to 2048 [ 451.134824][ T7483] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 451.377108][ T4364] hfsplus: b-tree write err: -5, ino 8 [ 451.383836][ T4295] usb 3-1: Using ep0 maxpacket: 8 [ 451.390790][ T4295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.401841][ T4295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.411776][ T4295] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 452.089780][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.112682][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 452.114852][ T4295] usb 3-1: config 0 descriptor?? [ 452.290306][ T7496] loop3: detected capacity change from 0 to 8192 [ 452.542428][ T7472] xt_socket: unknown flags 0xe0 [ 452.563582][ T4295] lenovo 0003:17EF:6062.0013: unknown main item tag 0x0 [ 452.589254][ T4295] lenovo 0003:17EF:6062.0013: unknown main item tag 0x0 [ 452.608949][ T4295] lenovo 0003:17EF:6062.0013: unknown main item tag 0x0 [ 452.633837][ T4295] lenovo 0003:17EF:6062.0013: item fetching failed at offset 4/5 [ 452.674194][ T4295] lenovo 0003:17EF:6062.0013: hid_parse failed [ 452.686628][ T4295] lenovo: probe of 0003:17EF:6062.0013 failed with error -22 [ 453.001907][ T22] usb 3-1: USB disconnect, device number 10 [ 453.198639][ T7501] loop3: detected capacity change from 0 to 4096 [ 454.171928][ T4256] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 454.223643][ T4256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 454.964139][ T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 456.083474][ T7528] loop0: detected capacity change from 0 to 2048 [ 456.113240][ T7532] netlink: 36 bytes leftover after parsing attributes in process `syz.2.804'. [ 456.153889][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 456.160374][ T7528] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 456.179867][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.259640][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.378255][ T5486] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 456.449685][ T14] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 456.459619][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.470237][ T14] usb 5-1: config 0 descriptor?? [ 457.157805][ T5486] usb 4-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 457.189108][ T5486] usb 4-1: config 0 interface 0 altsetting 24 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 457.208649][ T5486] usb 4-1: config 0 interface 0 has no altsetting 0 [ 457.212681][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 457.222328][ T5486] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 457.320791][ T5486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.331913][ T14] usbhid 5-1:0.0: can't add hid device: -71 [ 457.341521][ T14] usbhid: probe of 5-1:0.0 failed with error -71 [ 457.405732][ T14] usb 5-1: USB disconnect, device number 9 [ 457.448764][ T5486] usb 4-1: config 0 descriptor?? [ 457.467459][ T7531] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 457.840022][ T7548] loop0: detected capacity change from 0 to 4096 [ 457.906307][ T5486] usbhid 4-1:0.0: can't add hid device: -71 [ 457.912404][ T5486] usbhid: probe of 4-1:0.0 failed with error -71 [ 457.992649][ T5486] usb 4-1: USB disconnect, device number 12 [ 458.001295][ T7549] binder: 7538:7549 ioctl c0306201 0 returned -14 [ 458.209800][ T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 458.465772][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 458.483300][ T14] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 459.363295][ T14] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 459.380616][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.394899][ T14] usb 5-1: config 0 descriptor?? [ 459.400788][ T7551] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 459.409513][ T14] hub 5-1:0.0: bad descriptor, ignoring hub [ 459.426378][ T4251] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 459.429461][ T14] hub: probe of 5-1:0.0 failed with error -5 [ 459.432839][ T4251] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 459.963559][ T14] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 460.160147][ T7567] loop0: detected capacity change from 0 to 512 [ 460.274150][ T7567] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.811: casefold flag without casefold feature [ 460.297730][ T7567] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.811: couldn't read orphan inode 15 (err -117) [ 460.330115][ T7567] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 460.391675][ T7571] netlink: 36 bytes leftover after parsing attributes in process `syz.3.815'. [ 461.806210][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 461.871872][ T7581] loop3: detected capacity change from 0 to 2048 [ 461.947181][ T7581] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 462.813684][ T953] usb 5-1: USB disconnect, device number 10 [ 464.180353][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 464.288668][ T7597] loop4: detected capacity change from 0 to 4096 [ 464.473973][ T7442] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 465.136904][ T7442] usb 2-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 465.168781][ T7442] usb 2-1: config 0 interface 0 altsetting 24 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 465.252423][ T7442] usb 2-1: config 0 interface 0 has no altsetting 0 [ 465.280587][ T7442] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 465.320155][ T7442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.357031][ T7442] usb 2-1: config 0 descriptor?? [ 465.369601][ T7602] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 465.540024][ T4264] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 465.562009][ T4264] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 465.804829][ T7442] usbhid 2-1:0.0: can't add hid device: -71 [ 465.816710][ T7623] binder: 7613:7623 ioctl c0306201 0 returned -14 [ 465.823705][ T7442] usbhid: probe of 2-1:0.0 failed with error -71 [ 465.847057][ T7442] usb 2-1: USB disconnect, device number 4 [ 466.773933][ T7636] loop4: detected capacity change from 0 to 2048 [ 466.878896][ T7636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 467.872658][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 469.620125][ T7661] loop4: detected capacity change from 0 to 512 [ 469.624479][ T7654] loop2: detected capacity change from 0 to 4096 [ 469.717399][ T7661] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 469.754370][ T7661] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 470.363957][ T4252] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 470.419987][ T4252] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 471.511379][ T7675] netlink: 224 bytes leftover after parsing attributes in process `syz.0.843'. [ 471.520735][ T7675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.843'. [ 472.499614][ T7679] vivid-000: disconnect [ 472.507012][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 473.083197][ T7678] vivid-000: reconnect [ 474.528240][ T7706] loop0: detected capacity change from 0 to 4096 [ 474.579093][ T7707] binder: 7691:7707 ioctl c0306201 0 returned -14 [ 475.388204][ T4251] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 475.413919][ T4251] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 476.870517][ T7727] loop0: detected capacity change from 0 to 8 [ 476.879596][ T7727] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 480.539679][ T7746] loop0: detected capacity change from 0 to 1024 [ 481.046670][ T27] audit: type=1800 audit(1734606801.137:106): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.867" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 481.151477][ T7754] loop4: detected capacity change from 0 to 4096 [ 483.368661][ T4792] hfsplus: b-tree write err: -5, ino 8 [ 484.155500][ T4264] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 484.185020][ T4264] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 484.351103][ T7784] lo speed is unknown, defaulting to 1000 [ 484.369939][ T7787] loop4: detected capacity change from 0 to 512 [ 484.427339][ T7787] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.879: casefold flag without casefold feature [ 484.465327][ T7787] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.879: couldn't read orphan inode 15 (err -117) [ 484.536948][ T7787] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 485.957172][ T7802] binder: 7790:7802 ioctl c0306201 0 returned -14 [ 486.116559][ T7808] 9pnet: Unknown protocol version 9p200 [ 486.129553][ T7808] siw: device registration error -23 [ 486.171920][ T7807] loop3: detected capacity change from 0 to 1024 [ 487.093135][ T7804] loop0: detected capacity change from 0 to 4096 [ 489.831432][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 490.043193][ T5361] hfsplus: b-tree write err: -5, ino 8 [ 490.520658][ T7822] loop0: detected capacity change from 0 to 8 [ 490.527639][ T7822] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 491.432677][ T7830] loop3: detected capacity change from 0 to 4096 [ 492.034148][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 492.273892][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 492.295363][ T22] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 492.410554][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.430782][ T22] usb 1-1: Product: syz [ 492.439252][ T22] usb 1-1: Manufacturer: syz [ 492.469656][ T22] usb 1-1: SerialNumber: syz [ 492.517619][ T22] usb 1-1: config 0 descriptor?? [ 492.572060][ T22] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 492.776149][ T22] gp8psk: usb in 128 operation failed. [ 492.786207][ T22] gp8psk: usb in 137 operation failed. [ 492.791725][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 492.826936][ T22] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 492.833845][ T4256] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 492.844288][ T4256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 492.856888][ T22] usb 1-1: media controller created [ 492.898920][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.930282][ T7851] loop2: detected capacity change from 0 to 4096 [ 492.951290][ T22] gp8psk_fe: Frontend revision 1 attached [ 492.957285][ T22] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 492.995932][ T22] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 493.125940][ T7847] binder: 7846:7847 ioctl c0306201 0 returned -14 [ 493.328382][ T22] gp8psk: usb in 138 operation failed. [ 493.375721][ T22] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 493.474089][ T22] gp8psk: found Genpix USB device pID = 201 (hex) [ 493.562250][ T22] usb 1-1: USB disconnect, device number 4 [ 493.798802][ T22] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 494.758231][ T7869] tipc: Started in network mode [ 494.892999][ T7869] tipc: Node identity 7f000001, cluster identity 4711 [ 494.924004][ T7869] tipc: Enabled bearer , priority 10 [ 495.077941][ T7876] random: crng reseeded on system resumption [ 496.861734][ T3583] tipc: Node number set to 2130706433 [ 498.434057][ T4252] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 498.440665][ T4252] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 498.674418][ T4295] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 498.914160][ T4295] usb 4-1: Using ep0 maxpacket: 16 [ 498.962511][ T4295] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 499.167199][ T4295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.196064][ T4295] usb 4-1: Product: syz [ 499.200286][ T4295] usb 4-1: Manufacturer: syz [ 499.236751][ T4295] usb 4-1: SerialNumber: syz [ 499.291351][ T4295] usb 4-1: config 0 descriptor?? [ 499.338650][ T4295] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 499.691535][ T4295] gp8psk: usb in 128 operation failed. [ 499.700655][ T4295] gp8psk: usb in 137 operation failed. [ 499.737871][ T4295] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 500.457196][ T4295] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 500.501172][ T4295] usb 4-1: media controller created [ 500.610118][ T4295] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 500.674058][ T4295] gp8psk_fe: Frontend revision 1 attached [ 500.680142][ T4295] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 500.691496][ T4295] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 500.732303][ T7897] loop4: detected capacity change from 0 to 32768 [ 500.931238][ T4295] gp8psk: usb in 138 operation failed. [ 500.962652][ T4295] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 500.978004][ T4295] gp8psk: found Genpix USB device pID = 201 (hex) [ 500.993440][ T4295] usb 4-1: USB disconnect, device number 13 [ 501.311473][ T7931] random: crng reseeded on system resumption [ 502.884503][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.890880][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.515902][ T4295] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 504.545446][ T7897] XFS (loop4): Mounting V5 Filesystem [ 504.599343][ T7897] XFS (loop4): log mount failed [ 504.818466][ T7936] loop1: detected capacity change from 0 to 4096 [ 504.992030][ T7943] can0: slcan on ptm0. [ 505.149769][ T7942] can0 (unregistered): slcan off ptm0. [ 507.204027][ T5486] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 507.403946][ T5486] usb 4-1: Using ep0 maxpacket: 16 [ 507.427825][ T5486] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 507.472764][ T5486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.573232][ T5486] usb 4-1: Product: syz [ 507.605179][ T5486] usb 4-1: Manufacturer: syz [ 507.612295][ T5486] usb 4-1: SerialNumber: syz [ 507.738525][ T5486] usb 4-1: config 0 descriptor?? [ 507.774609][ T5486] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 507.953211][ T5486] gp8psk: usb in 128 operation failed. [ 507.961610][ T5486] gp8psk: usb in 137 operation failed. [ 507.996091][ T5486] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 508.027961][ T7981] loop4: detected capacity change from 0 to 512 [ 508.028959][ T5486] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 508.075893][ T5486] usb 4-1: media controller created [ 508.144380][ T5486] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.163319][ T7981] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 508.183407][ T5486] gp8psk_fe: Frontend revision 1 attached [ 508.189267][ T5486] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 508.192813][ T7981] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 508.207581][ T5486] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 508.267785][ T5486] gp8psk: usb in 138 operation failed. [ 508.273458][ T5486] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 508.283969][ T3583] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 508.283980][ T5486] gp8psk: found Genpix USB device pID = 201 (hex) [ 508.304974][ T5486] usb 4-1: USB disconnect, device number 14 [ 508.520261][ T5486] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 508.565900][ T3583] usb 3-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 508.752262][ T3583] usb 3-1: config 0 interface 0 altsetting 24 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 508.828320][ T7991] random: crng reseeded on system resumption [ 509.780554][ T3583] usb 3-1: config 0 interface 0 has no altsetting 0 [ 509.787453][ T3583] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 509.796578][ T3583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.175050][ T3583] usb 3-1: config 0 descriptor?? [ 511.245051][ T3583] usb 3-1: can't set config #0, error -71 [ 511.310449][ T3583] usb 3-1: USB disconnect, device number 11 [ 512.328689][ T4253] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 512.350804][ T4253] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 513.875094][ T7995] loop3: detected capacity change from 0 to 32768 [ 514.030619][ T7995] XFS (loop3): Mounting V5 Filesystem [ 514.122085][ T7995] XFS (loop3): Ending clean mount [ 514.134487][ T3583] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 514.159970][ T7995] XFS (loop3): Quotacheck needed: Please wait. [ 514.251271][ T7995] XFS (loop3): Quotacheck: Done. [ 514.314221][ T7442] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 514.350348][ T4256] XFS (loop3): Unmounting Filesystem [ 514.356005][ T3583] usb 1-1: Using ep0 maxpacket: 32 [ 514.367085][ T3583] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 514.432292][ T3583] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 514.462148][ T3583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.482687][ T3583] usb 1-1: Product: syz [ 514.505490][ T3583] usb 1-1: Manufacturer: syz [ 514.516112][ T3583] usb 1-1: SerialNumber: syz [ 514.534535][ T7442] usb 2-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 514.567821][ T3583] usb 1-1: config 0 descriptor?? [ 514.573530][ T8032] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 514.592560][ T7442] usb 2-1: config 0 interface 0 altsetting 24 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 514.618882][ T3583] hub 1-1:0.0: bad descriptor, ignoring hub [ 514.634028][ T7442] usb 2-1: config 0 interface 0 has no altsetting 0 [ 514.642606][ T7442] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 514.662311][ T3583] hub: probe of 1-1:0.0 failed with error -5 [ 514.692941][ T3583] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 514.702673][ T7442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.777780][ T7442] usb 2-1: config 0 descriptor?? [ 514.805121][ T8043] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 514.824972][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 514.844475][ T3640] usb 1-1: USB disconnect, device number 5 [ 514.844560][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 515.240483][ T7442] usbhid 2-1:0.0: can't add hid device: -71 [ 515.258972][ T7442] usbhid: probe of 2-1:0.0 failed with error -71 [ 515.305896][ T7442] usb 2-1: USB disconnect, device number 5 [ 515.683528][ T8063] process 'syz.3.948' launched './file0' with NULL argv: empty string added [ 516.526342][ T8067] loop4: detected capacity change from 0 to 4096 [ 517.779401][ T8066] loop0: detected capacity change from 0 to 32768 [ 517.829598][ T8066] (syz.0.953,8066,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 517.864312][ T8066] (syz.0.953,8066,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 517.950368][ T8066] JBD2: Ignoring recovery information on journal [ 518.092390][ T8066] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 518.171417][ T8082] loop2: detected capacity change from 0 to 32768 [ 518.361894][ T8082] XFS (loop2): Mounting V5 Filesystem [ 518.978205][ T4251] ocfs2: Unmounting device (7,0) on (node local) [ 519.166602][ T8082] XFS (loop2): Ending clean mount [ 519.196865][ T8082] XFS (loop2): Quotacheck needed: Please wait. [ 519.794180][ T8082] XFS (loop2): Quotacheck: Done. [ 520.012605][ T4264] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 520.049206][ T4264] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 520.225201][ T27] audit: type=1800 audit(1734606840.237:107): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.958" name="bus" dev="loop2" ino=9291 res=0 errno=0 [ 520.496562][ T8107] syz.0.962 sent an empty control message without MSG_MORE. [ 520.519385][ T4252] XFS (loop2): Unmounting Filesystem [ 521.216393][ T8121] netlink: 224 bytes leftover after parsing attributes in process `syz.3.967'. [ 521.225887][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.967'. [ 523.057959][ T8145] loop3: detected capacity change from 0 to 4096 [ 524.747410][ T4256] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 524.777849][ T4256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 525.026349][ T3583] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 525.233885][ T3583] usb 1-1: Using ep0 maxpacket: 16 [ 525.245764][ T3583] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.321366][ T3583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 525.411409][ T3583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 525.479130][ T3583] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 525.529899][ T3583] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.595933][ T3583] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 525.612897][ T3583] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 525.622679][ T3583] usb 1-1: Manufacturer: syz [ 525.701850][ T3583] usb 1-1: config 0 descriptor?? [ 526.239190][ T3583] rc_core: IR keymap rc-hauppauge not found [ 526.245383][ T3583] Registered IR keymap rc-empty [ 526.250730][ T3583] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.313202][ T3583] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.315634][ T8168] loop3: detected capacity change from 0 to 4096 [ 526.355230][ T3583] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 526.394604][ T8170] loop1: detected capacity change from 0 to 512 [ 526.412552][ T3583] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 526.566838][ T3583] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.601064][ T8170] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.983: casefold flag without casefold feature [ 526.614118][ T3583] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.642612][ T8170] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.983: couldn't read orphan inode 15 (err -117) [ 526.654973][ T3583] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.682473][ T8170] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 526.692009][ T3583] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.794819][ T3583] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.864502][ T3583] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.904242][ T3583] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.964073][ T3583] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 527.005192][ T3583] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 527.063876][ T3583] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 527.119569][ T3583] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 527.143358][ T4256] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 527.157698][ T4256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 527.166789][ T3583] mceusb 1-1:0.0: Registered 穥 with mce emulator interface version 90 [ 527.192370][ T3583] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 527.264093][ T3583] usb 1-1: USB disconnect, device number 6 [ 527.392511][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'. [ 527.465935][ T8178] batman_adv: batadv0: Adding interface: macvlan0 [ 527.472425][ T8178] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.523873][ T8178] batman_adv: batadv0: Interface activated: macvlan0 [ 527.749651][ T8182] netlink: 224 bytes leftover after parsing attributes in process `syz.2.986'. [ 527.758787][ T8182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.986'. [ 528.776328][ T8189] netlink: 'syz.4.988': attribute type 1 has an invalid length. [ 528.943605][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 529.070578][ T8197] loop3: detected capacity change from 0 to 4096 [ 530.580810][ T8211] kernel read not supported for file / ԢW)S- (pid: 8211 comm: syz.1.996) [ 530.616665][ T27] audit: type=1800 audit(1734606850.707:108): pid=8211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.996" name=20019CCFFCD4A25729EB5393A7C72DEB dev="mqueue" ino=45178 res=0 errno=0 [ 531.274989][ T8220] loop2: detected capacity change from 0 to 1024 [ 531.293095][ T4256] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 531.310885][ T8221] netlink: 224 bytes leftover after parsing attributes in process `syz.0.998'. [ 531.314805][ T4256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 531.320502][ T8221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.998'. [ 532.660581][ T8233] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 533.550228][ T4558] hfsplus: b-tree write err: -5, ino 8 [ 535.030818][ T8253] 9pnet: Unknown protocol version 9p200 [ 535.038187][ T8253] siw: device registration error -23 [ 535.173842][ T3583] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 535.181573][ T14] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 535.210167][ T8263] loop4: detected capacity change from 0 to 1024 [ 535.382868][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 535.396177][ T3583] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.412622][ T3583] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.422461][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.451853][ T14] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 535.462230][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.473376][ T3583] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 535.491841][ T14] usb 4-1: config 0 descriptor?? [ 536.375043][ T3583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.637848][ T14] hub 4-1:0.0: USB hub found [ 536.663241][ T3583] usb 3-1: Product: syz [ 536.694824][ T3583] usb 3-1: Manufacturer: syz [ 536.699522][ T3583] usb 3-1: SerialNumber: syz [ 536.850178][ T14] hub 4-1:0.0: 1 port detected [ 536.912626][ T8274] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1015'. [ 536.922257][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1015'. [ 536.923357][ T5361] hfsplus: b-tree write err: -5, ino 8 [ 536.997211][ T3583] usb 3-1: 0:2 : does not exist [ 537.376268][ T14] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 537.392003][ T3583] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 537.404280][ T14] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 537.546727][ T14] usbhid 4-1:0.0: can't add hid device: -71 [ 537.652068][ T14] usbhid: probe of 4-1:0.0 failed with error -71 [ 537.841037][ T3583] usb 3-1: USB disconnect, device number 12 [ 537.860773][ T14] usb 4-1: USB disconnect, device number 15 [ 538.094759][ T27] audit: type=1326 audit(1734606858.187:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a4585d29 code=0x7ffc0000 [ 538.136010][ T7329] udevd[7329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.186992][ T27] audit: type=1326 audit(1734606858.187:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7ff7a4585d29 code=0x7ffc0000 [ 538.242650][ T27] audit: type=1326 audit(1734606858.187:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a4585d29 code=0x7ffc0000 [ 538.810014][ T8299] 9pnet: Unknown protocol version 9p200 [ 538.817510][ T8299] siw: device registration error -23 [ 539.148715][ T8306] loop3: detected capacity change from 0 to 1024 [ 539.503643][ T8313] loop2: detected capacity change from 0 to 2048 [ 540.471378][ T8313] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 540.514082][ T3583] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 540.894014][ T3583] usb 1-1: Using ep0 maxpacket: 32 [ 540.955641][ T3583] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 540.973686][ T3583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.154931][ T3583] usb 1-1: config 0 descriptor?? [ 541.189787][ T3583] gspca_main: sunplus-2.14.0 probing 041e:400b [ 541.325776][ T4640] hfsplus: b-tree write err: -5, ino 8 [ 541.452790][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 541.657471][ T27] audit: type=1800 audit(1734606861.747:112): pid=8327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1030" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 543.294343][ T3583] gspca_sunplus: reg_w_riv err -110 [ 543.299667][ T3583] sunplus: probe of 1-1:0.0 failed with error -110 [ 543.861566][ T8351] random: crng reseeded on system resumption [ 545.096597][ T3583] usb 1-1: USB disconnect, device number 7 [ 545.189759][ T8355] loop1: detected capacity change from 0 to 1024 [ 547.315242][ T8362] hfsplus: xattr search failed [ 547.539820][ T8358] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1042'. [ 547.548995][ T8358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1042'. [ 547.899194][ T8378] dccp_invalid_packet: P.Data Offset(4) too small [ 548.121948][ T8381] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1048'. [ 548.131217][ T8381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1048'. [ 548.471373][ T27] audit: type=1800 audit(1734606868.557:113): pid=8396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1058" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 548.493827][ T126] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 548.553380][ T8398] loop3: detected capacity change from 0 to 1024 [ 551.106110][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.137601][ T126] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 551.159360][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.188619][ T126] usb 2-1: config 0 descriptor?? [ 551.300866][ T4640] hfsplus: b-tree write err: -5, ino 8 [ 551.402412][ T126] usb 2-1: can't set config #0, error -71 [ 551.435268][ T126] usb 2-1: USB disconnect, device number 6 [ 552.952276][ T8443] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1071'. [ 552.961706][ T8443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1071'. [ 554.510567][ T8409] syz.4.1059 (8409): drop_caches: 2 [ 556.091228][ T8478] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1085'. [ 556.100493][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1085'. [ 558.501759][ T8514] netlink: 'syz.3.1098': attribute type 1 has an invalid length. [ 561.013329][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.691908][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.704149][ T8547] loop0: detected capacity change from 0 to 4096 [ 561.717145][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.734973][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.752911][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.762657][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.788066][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.815519][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.827697][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.846600][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.856564][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.878219][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.896106][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.903659][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.919877][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.946700][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.960442][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.970607][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.986616][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 561.996418][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 562.005536][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 562.012969][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 562.022941][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 562.032143][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 562.041966][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 562.051104][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 562.060984][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 562.070121][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 562.082431][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 562.092566][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 562.108403][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 562.118209][ T3640] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 562.136491][ T3640] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 562.403995][ T5486] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 562.594096][ T5486] usb 3-1: Using ep0 maxpacket: 16 [ 562.604106][ T5486] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.638992][ T8537] syz.1.1106 (8537): drop_caches: 2 [ 562.666401][ T5486] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 562.703038][ T8543] loop4: detected capacity change from 0 to 32768 [ 562.781579][ T5486] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.796949][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.804129][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.885779][ T5486] usb 3-1: config 0 descriptor?? [ 562.904273][ T8543] XFS (loop4): Mounting V5 Filesystem [ 562.971447][ T8568] netlink: 'syz.1.1115': attribute type 1 has an invalid length. [ 563.056841][ T4251] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 563.063370][ T4251] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 563.099550][ T8543] XFS (loop4): Ending clean mount [ 563.128579][ T8543] XFS (loop4): Quotacheck needed: Please wait. [ 563.267403][ T8543] XFS (loop4): Quotacheck: Done. [ 563.589193][ T27] audit: type=1800 audit(1734606883.667:114): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1109" name="bus" dev="loop4" ino=9291 res=0 errno=0 [ 563.647597][ T5486] hid-steam 0003:28DE:1102.0015: unknown main item tag 0x0 [ 563.655775][ T5486] hid-steam 0003:28DE:1102.0015: unknown main item tag 0x0 [ 563.663961][ T5486] hid-steam 0003:28DE:1102.0015: unknown main item tag 0x0 [ 563.671749][ T5486] hid-steam 0003:28DE:1102.0015: unknown main item tag 0x0 [ 563.679758][ T5486] hid-steam 0003:28DE:1102.0015: unknown main item tag 0x0 [ 563.706016][ T5486] hid-steam 0003:28DE:1102.0015: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 563.810754][ T5486] usb 3-1: USB disconnect, device number 13 [ 564.148671][ T4264] XFS (loop4): Unmounting Filesystem [ 564.158022][ T27] audit: type=1326 audit(1734606884.247:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb167185d29 code=0x7ffc0000 [ 564.326182][ T27] audit: type=1326 audit(1734606884.347:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb167185d29 code=0x7ffc0000 [ 564.407303][ T27] audit: type=1326 audit(1734606884.347:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb167185d29 code=0x7ffc0000 [ 564.429639][ T27] audit: type=1326 audit(1734606884.357:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb167185d29 code=0x7ffc0000 [ 564.451984][ T27] audit: type=1326 audit(1734606884.357:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb167185d29 code=0x7ffc0000 [ 564.476312][ T27] audit: type=1326 audit(1734606884.357:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb167185d29 code=0x7ffc0000 [ 564.521246][ T27] audit: type=1326 audit(1734606884.357:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb167185d29 code=0x7ffc0000 [ 564.628564][ T27] audit: type=1326 audit(1734606884.357:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb167185d29 code=0x7ffc0000 [ 564.686295][ T27] audit: type=1326 audit(1734606884.357:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.1.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fb167185d29 code=0x7ffc0000 [ 564.893863][ T7442] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 564.901553][ T3583] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 565.124137][ T7442] usb 2-1: Using ep0 maxpacket: 16 [ 565.139670][ T3583] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.183322][ T7442] usb 2-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 565.320799][ T3583] usb 1-1: config 0 has no interfaces? [ 565.674773][ T7442] usb 2-1: config 0 has an invalid interface descriptor of length 4, skipping [ 565.687418][ T3583] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 565.704030][ T7442] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.714265][ T3583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.734723][ T7442] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 36 [ 565.750010][ T3583] usb 1-1: config 0 descriptor?? [ 565.761887][ T7442] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 565.780980][ T7442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.800845][ T7442] usb 2-1: config 0 descriptor?? [ 566.003258][ T7442] usb 1-1: USB disconnect, device number 8 [ 566.049754][ T14] usb 2-1: USB disconnect, device number 7 [ 566.410809][ T8599] syz.3.1125 (8599): drop_caches: 2 [ 568.192985][ T8620] loop1: detected capacity change from 0 to 32768 [ 568.264391][ T4295] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 568.290554][ T8622] loop3: detected capacity change from 0 to 32768 [ 568.320711][ T8622] (syz.3.1132,8622,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 568.408852][ T8622] (syz.3.1132,8622,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 568.429835][ T8620] XFS (loop1): Mounting V5 Filesystem [ 568.482902][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.492712][ T8622] JBD2: Ignoring recovery information on journal [ 568.543361][ T8622] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 568.569374][ T4295] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 568.585189][ T8620] XFS (loop1): Ending clean mount [ 568.782063][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.800314][ T14] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 568.809423][ T4295] usb 1-1: config 0 descriptor?? [ 568.826395][ T8620] XFS (loop1): Quotacheck needed: Please wait. [ 568.981479][ T8620] XFS (loop1): Quotacheck: Done. [ 569.021343][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 569.052146][ T14] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 569.297389][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.313804][ T14] usb 3-1: config 0 has no interface number 0 [ 569.320735][ T14] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 569.335591][ T14] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.349189][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 569.349206][ T27] audit: type=1800 audit(1734606889.427:126): pid=8650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1131" name="bus" dev="loop1" ino=9291 res=0 errno=0 [ 569.378071][ T14] usb 3-1: config 0 interface 52 has no altsetting 0 [ 569.395735][ T14] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 569.411714][ T14] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 569.423217][ T14] usb 3-1: Manufacturer: syz [ 569.435730][ T14] usb 3-1: config 0 descriptor?? [ 569.543741][ T4295] usbhid 1-1:0.0: can't add hid device: -71 [ 569.558484][ T4256] ocfs2: Unmounting device (7,3) on (node local) [ 569.576054][ T4295] usbhid: probe of 1-1:0.0 failed with error -71 [ 569.606950][ T4295] usb 1-1: USB disconnect, device number 9 [ 569.655831][ T4253] XFS (loop1): Unmounting Filesystem [ 569.660295][ T14] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input11 [ 569.931862][ T7442] usb 3-1: USB disconnect, device number 14 [ 569.937932][ C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 570.227527][ T8660] loop1: detected capacity change from 0 to 512 [ 570.325580][ T8660] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 570.335077][ T8660] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 571.195259][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 572.984545][ T8692] loop3: detected capacity change from 0 to 512 [ 573.045667][ T8692] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1153: casefold flag without casefold feature [ 573.096478][ T8692] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1153: couldn't read orphan inode 15 (err -117) [ 573.149693][ T8692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 573.777058][ T8704] loop1: detected capacity change from 0 to 4096 [ 574.311308][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 575.322295][ T8735] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 575.332357][ T8737] loop4: detected capacity change from 0 to 512 [ 575.374995][ T8735] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 575.398752][ T8737] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1172: casefold flag without casefold feature [ 575.465770][ T8737] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1172: couldn't read orphan inode 15 (err -117) [ 575.531261][ T8737] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 575.623945][ T4295] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 575.846962][ T4295] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 575.866110][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.890638][ T4295] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 575.916423][ T4295] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 575.939637][ T4295] usb 1-1: Manufacturer: syz [ 575.958376][ T4295] usb 1-1: config 0 descriptor?? [ 576.113831][ T4295] rc_core: IR keymap rc-hauppauge not found [ 576.124647][ T4295] Registered IR keymap rc-empty [ 576.139467][ T4295] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 576.161344][ T4295] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 576.200492][ T4253] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 576.232074][ T4253] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 576.448871][ T8757] device erspan1 entered promiscuous mode [ 576.474420][ C1] igorplugusb 1-1:0.0: receive overflow invalid: 15 [ 576.475887][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 576.687556][ T953] usb 1-1: USB disconnect, device number 10 [ 577.155054][ T8771] loop4: detected capacity change from 0 to 512 [ 577.281805][ T8771] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 577.319013][ T8771] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 578.048337][ T8777] netlink: 'syz.3.1184': attribute type 1 has an invalid length. [ 578.390620][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 578.664151][ T8787] 9pnet: Unknown protocol version 9p200 [ 578.664888][ T8788] siw: device registration error -23 [ 579.579209][ T8790] loop3: detected capacity change from 0 to 4096 [ 579.761898][ T8798] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1187'. [ 579.771176][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1187'. [ 580.770485][ T8812] loop1: detected capacity change from 0 to 4096 [ 581.404077][ T3640] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 581.926153][ T3640] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.946413][ T3640] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.959949][ T8826] netlink: 'syz.2.1198': attribute type 1 has an invalid length. [ 581.968886][ T3640] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.998786][ T3640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.039452][ T3640] usb 5-1: Product: syz [ 582.053904][ T3640] usb 5-1: Manufacturer: syz [ 582.083820][ T3640] usb 5-1: SerialNumber: syz [ 582.118402][ T4253] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 582.142194][ T4253] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 582.315796][ T3640] usb 5-1: 0:2 : does not exist [ 582.326274][ T3640] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 582.465564][ T3640] usb 5-1: USB disconnect, device number 11 [ 582.774139][ T8840] 9pnet: Unknown protocol version 9p200 [ 582.774751][ T8841] siw: device registration error -23 [ 583.570398][ T8845] loop2: detected capacity change from 0 to 1024 [ 583.846369][ T8850] tipc: Started in network mode [ 583.859167][ T8850] tipc: Node identity 4, cluster identity 4711 [ 583.865526][ T8850] tipc: Node number set to 4 [ 584.855431][ T7329] udevd[7329]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.109299][ T8856] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1205'. [ 585.118569][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1205'. [ 585.774310][ T4558] hfsplus: b-tree write err: -5, ino 8 [ 586.120888][ T4256] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 586.142751][ T4256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 586.251240][ T8864] loop0: detected capacity change from 0 to 4096 [ 586.389661][ T8872] netlink: 'syz.3.1212': attribute type 1 has an invalid length. [ 587.824736][ T8880] 9pnet: Unknown protocol version 9p200 [ 587.839284][ T8880] siw: device registration error -23 [ 587.853213][ T8882] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1214'. [ 587.862446][ T8882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1214'. [ 587.897456][ T5486] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 588.314596][ T5486] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 588.331709][ T5486] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.412093][ T5486] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.424941][ T5486] usb 2-1: config 0 interface 0 has no altsetting 0 [ 588.440250][ T5486] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.459929][ T5486] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.486325][ T5486] usb 2-1: config 0 interface 0 has no altsetting 0 [ 588.506336][ T5486] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.522807][ T5486] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.544052][ T5486] usb 2-1: config 0 interface 0 has no altsetting 0 [ 588.557763][ T5486] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.580066][ T5486] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.608239][ T5486] usb 2-1: config 0 interface 0 has no altsetting 0 [ 588.629860][ T5486] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.648848][ T5486] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.680274][ T5486] usb 2-1: config 0 interface 0 has no altsetting 0 [ 588.701107][ T5486] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.722322][ T5486] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.742040][ T5486] usb 2-1: config 0 interface 0 has no altsetting 0 [ 588.760794][ T5486] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.780610][ T5486] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.801969][ T5486] usb 2-1: config 0 interface 0 has no altsetting 0 [ 588.823381][ T5486] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 588.840046][ T5486] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 588.865156][ T5486] usb 2-1: config 0 interface 0 has no altsetting 0 [ 588.890734][ T5486] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 588.913931][ T5486] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 588.932573][ T5486] usb 2-1: Product: syz [ 588.942690][ T5486] usb 2-1: Manufacturer: syz [ 588.962925][ T5486] usb 2-1: SerialNumber: syz [ 588.975449][ T5486] usb 2-1: config 0 descriptor?? [ 589.018611][ T5486] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 589.022737][ T8900] loop4: detected capacity change from 0 to 4096 [ 589.281308][ T3640] usb 2-1: USB disconnect, device number 8 [ 589.312108][ T3640] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 589.489578][ T4251] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 589.496218][ T4251] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 590.126584][ T4264] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 590.133128][ T4264] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 590.231133][ T8919] loop2: detected capacity change from 0 to 8 [ 590.240249][ T8919] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 591.437159][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1236'. [ 592.781721][ T8956] device batadv0 entered promiscuous mode [ 592.828273][ T8956] device netdevsim0 entered promiscuous mode [ 592.897935][ T8963] loop0: detected capacity change from 0 to 1024 [ 592.982779][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 594.544892][ T8978] netlink: 'syz.2.1249': attribute type 1 has an invalid length. [ 594.721614][ T5374] hfsplus: b-tree write err: -5, ino 8 [ 596.578244][ T9013] netlink: 'syz.3.1259': attribute type 10 has an invalid length. [ 596.988447][ T9013] team0: Port device netdevsim0 added [ 597.616790][ T9022] loop1: detected capacity change from 0 to 1024 [ 598.990260][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1268'. [ 599.277745][ T5361] hfsplus: b-tree write err: -5, ino 8 [ 599.697033][ T9048] loop4: detected capacity change from 0 to 512 [ 600.448820][ T9048] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1272: casefold flag without casefold feature [ 600.468532][ T9053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1273'. [ 600.564317][ T9048] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1272: couldn't read orphan inode 15 (err -117) [ 600.578375][ T9053] device vlan2 entered promiscuous mode [ 600.594072][ T9048] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 602.170812][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 602.577559][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1287'. [ 602.633111][ T9087] device vlan2 entered promiscuous mode [ 602.639089][ T9087] device gretap0 entered promiscuous mode [ 603.910356][ T9110] lo speed is unknown, defaulting to 1000 [ 604.733924][ T7442] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 604.923981][ T7442] usb 5-1: Using ep0 maxpacket: 16 [ 604.981013][ T7442] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.063793][ T7442] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.128880][ T7442] usb 5-1: config 0 interface 0 has no altsetting 0 [ 605.167996][ T7442] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 606.559117][ T7442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.748030][ T7442] usb 5-1: config 0 descriptor?? [ 607.006130][ T9132] random: crng reseeded on system resumption [ 608.154881][ T9136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1303'. [ 608.181416][ T9136] device vlan2 entered promiscuous mode [ 608.187607][ T9136] device gretap0 entered promiscuous mode [ 609.193002][ T7442] hid (null): unknown global tag 0xe [ 609.198494][ T7442] hid (null): report_id 58501 is invalid [ 609.204756][ T7442] hid (null): unknown global tag 0x1c [ 609.211778][ T7442] hid (null): unknown global tag 0xe [ 609.217235][ T7442] hid (null): unknown global tag 0xe [ 609.222563][ T7442] hid (null): unknown global tag 0xe [ 609.229910][ T7442] hid (null): unknown global tag 0xe [ 609.235352][ T7442] hid (null): invalid report_count 1640429044 [ 609.241683][ T7442] hid (null): unknown global tag 0x16 [ 609.263770][ T7442] hid (null): unknown global tag 0xd [ 609.269147][ T7442] hid (null): report_id 2384115945 is invalid [ 609.302325][ T7442] cougar 0003:060B:500A.0016: unknown main item tag 0x0 [ 609.346995][ T7442] cougar 0003:060B:500A.0016: unknown main item tag 0x0 [ 609.364457][ T7442] cougar 0003:060B:500A.0016: unknown main item tag 0x0 [ 609.371484][ T7442] cougar 0003:060B:500A.0016: unknown main item tag 0x0 [ 609.423807][ T7442] cougar 0003:060B:500A.0016: unknown main item tag 0x0 [ 609.430841][ T7442] cougar 0003:060B:500A.0016: unknown main item tag 0x0 [ 609.473790][ T7442] cougar 0003:060B:500A.0016: unknown main item tag 0x0 [ 609.480820][ T7442] cougar 0003:060B:500A.0016: unknown main item tag 0x0 [ 609.495283][ T7442] cougar 0003:060B:500A.0016: unknown main item tag 0x0 [ 609.514237][ T7442] cougar 0003:060B:500A.0016: unknown main item tag 0x0 [ 609.531545][ T7442] cougar 0003:060B:500A.0016: unknown main item tag 0x3 [ 609.541521][ T7442] cougar 0003:060B:500A.0016: unknown main item tag 0x4 [ 609.573912][ T7442] cougar 0003:060B:500A.0016: unknown main item tag 0x6 [ 609.588761][ T7442] cougar 0003:060B:500A.0016: unexpected long global item [ 609.606963][ T7442] cougar 0003:060B:500A.0016: parse failed [ 609.622250][ T7442] cougar: probe of 0003:060B:500A.0016 failed with error -22 [ 609.641966][ T7442] usb 5-1: USB disconnect, device number 12 [ 611.179368][ T9176] random: crng reseeded on system resumption [ 614.507224][ T9200] loop2: detected capacity change from 0 to 8 [ 614.516422][ T9200] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 615.493817][ T953] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 615.687784][ T953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.710265][ T953] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 615.757386][ T953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.793383][ T953] usb 2-1: config 0 descriptor?? [ 616.224981][ T953] usbhid 2-1:0.0: can't add hid device: -71 [ 616.371845][ T953] usbhid: probe of 2-1:0.0 failed with error -71 [ 616.418672][ T953] usb 2-1: USB disconnect, device number 9 [ 616.575527][ T9225] loop4: detected capacity change from 0 to 512 [ 616.590663][ T9213] syz.0.1328 (9213): drop_caches: 2 [ 616.622566][ T9225] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1334: casefold flag without casefold feature [ 616.644734][ T9225] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1334: couldn't read orphan inode 15 (err -117) [ 616.673861][ T9225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 617.593799][ T4295] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 617.753805][ T4295] usb 4-1: device descriptor read/64, error -71 [ 618.133982][ T4295] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 618.144752][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 618.304200][ T4295] usb 4-1: device descriptor read/64, error -71 [ 618.403516][ T9253] loop2: detected capacity change from 0 to 8 [ 618.410795][ T9253] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 618.425844][ T4295] usb usb4-port1: attempt power cycle [ 619.122861][ T4295] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 619.187226][ T4295] usb 4-1: device descriptor read/8, error -71 [ 619.483932][ T4295] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 619.551111][ T4295] usb 4-1: device descriptor read/8, error -71 [ 619.767186][ T4295] usb usb4-port1: unable to enumerate USB device [ 619.912974][ T9274] random: crng reseeded on system resumption [ 623.129524][ T9281] loop3: detected capacity change from 0 to 512 [ 623.163962][ T9281] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1351: casefold flag without casefold feature [ 623.177174][ T9281] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1351: couldn't read orphan inode 15 (err -117) [ 623.195001][ T9281] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 624.008125][ T9297] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1354'. [ 624.017326][ T9297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1354'. [ 626.037497][ T9298] loop0: detected capacity change from 0 to 8 [ 626.044434][ T9298] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 626.052727][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.059137][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.529057][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 626.825596][ T9319] random: crng reseeded on system resumption [ 628.732963][ T7442] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 629.998075][ T7442] usb 5-1: device descriptor read/64, error -71 [ 630.765556][ T9349] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1368'. [ 630.774840][ T9349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1368'. [ 630.907549][ T9350] loop4: detected capacity change from 0 to 8 [ 630.914510][ T9350] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 632.540542][ T9358] loop0: detected capacity change from 0 to 512 [ 632.635446][ T9358] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1373: casefold flag without casefold feature [ 632.677278][ T9336] loop1: detected capacity change from 0 to 32768 [ 632.771699][ T9358] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1373: couldn't read orphan inode 15 (err -117) [ 632.799239][ T9336] XFS (loop1): Mounting V5 Filesystem [ 632.810308][ T9358] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 632.825891][ T9376] ALSA: mixer_oss: invalid OSS volume '0xffffffffffffffff' [ 632.989179][ T9336] XFS (loop1): Ending clean mount [ 633.016285][ T9336] XFS (loop1): Quotacheck needed: Please wait. [ 633.100092][ T9336] XFS (loop1): Quotacheck: Done. [ 633.441281][ T27] audit: type=1800 audit(1734606953.517:127): pid=9393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1367" name="bus" dev="loop1" ino=9291 res=0 errno=0 [ 633.571750][ T14] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 634.053938][ T4253] XFS (loop1): Unmounting Filesystem [ 634.156099][ T9399] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1383'. [ 634.165374][ T9399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1383'. [ 634.831940][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 634.893991][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 634.904096][ T14] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 634.913198][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.949464][ T14] usb 4-1: Product: syz [ 634.959612][ T14] usb 4-1: Manufacturer: syz [ 634.964807][ T14] usb 4-1: SerialNumber: syz [ 634.971372][ T14] usb 4-1: config 0 descriptor?? [ 635.611507][ T14] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:05:d6:fb:53:6a [ 635.683262][ T14] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 635.716384][ T14] usb 4-1: USB disconnect, device number 20 [ 635.893867][ T3583] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 636.083836][ T3583] usb 3-1: Using ep0 maxpacket: 8 [ 636.091911][ T3583] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 636.127572][ T3583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.172757][ T3583] usb 3-1: config 0 descriptor?? [ 636.588990][ T9435] binder: 9430:9435 ioctl c0306201 0 returned -14 [ 638.123611][ T3583] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 638.144567][ T3583] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 638.161859][ T3583] asix: probe of 3-1:0.0 failed with error -71 [ 638.183869][ T953] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 638.211689][ T3583] usb 3-1: USB disconnect, device number 15 [ 638.299253][ T9460] 9pnet: Unknown protocol version 9p200 [ 638.883864][ T953] usb 2-1: Using ep0 maxpacket: 32 [ 638.895165][ T953] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 638.914375][ T953] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 638.923032][ T953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 638.937838][ T953] usb 2-1: config 1 has no interface number 0 [ 638.948364][ T953] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 638.964632][ T953] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 638.982984][ T953] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 638.994031][ T953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.044990][ T953] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 639.229265][ T953] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 639.463832][ T3583] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 639.676570][ T3583] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.692169][ T3583] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 639.704601][ T3583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.792631][ T3583] usb 5-1: config 0 descriptor?? [ 639.817227][ T953] usb 2-1: USB disconnect, device number 10 [ 639.839553][ T953] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 639.947705][ T9469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.242414][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 640.251477][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 640.259881][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 640.268512][ T3583] usbhid 5-1:0.0: can't add hid device: -32 [ 640.311667][ T3583] usbhid: probe of 5-1:0.0 failed with error -32 [ 640.373338][ T3583] usb 5-1: USB disconnect, device number 15 [ 640.812611][ T9486] device bridge1 entered promiscuous mode [ 640.829956][ T9486] team0: Port device bridge1 added [ 641.184492][ T9497] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1417'. [ 641.193958][ T9497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1417'. [ 642.174380][ T3583] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 642.224064][ T126] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 642.383921][ T126] usb 5-1: device descriptor read/64, error -71 [ 642.384671][ T3583] usb 4-1: Using ep0 maxpacket: 16 [ 642.431007][ T3583] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 642.506795][ T3583] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.592168][ T3583] usb 4-1: config 0 interface 0 has no altsetting 0 [ 642.663844][ T126] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 642.682722][ T3583] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 642.764270][ T9513] 9pnet: Unknown protocol version 9p200 [ 642.835197][ T126] usb 5-1: device descriptor read/64, error -71 [ 642.959823][ T126] usb usb5-port1: attempt power cycle [ 643.201168][ T3583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.211252][ T3583] usb 4-1: config 0 descriptor?? [ 643.383916][ T126] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 643.448547][ T126] usb 5-1: device descriptor read/8, error -71 [ 643.634976][ T3583] hid-multitouch 0003:0EEF:72D0.0017: unknown main item tag 0x0 [ 643.717820][ T3583] hid-multitouch 0003:0EEF:72D0.0017: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 643.753951][ T126] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 644.074603][ T126] usb 5-1: device descriptor read/8, error -71 [ 644.104161][ T14] usb 4-1: USB disconnect, device number 21 [ 644.194084][ T126] usb usb5-port1: unable to enumerate USB device [ 644.271217][ T9533] netlink: 'syz.0.1433': attribute type 1 has an invalid length. [ 645.171437][ T9537] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 645.299738][ T9541] loop4: detected capacity change from 0 to 512 [ 645.351266][ T9520] syz.1.1426 (9520): drop_caches: 2 [ 645.392998][ T9541] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 645.433943][ T9541] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 645.680670][ T9548] vivid-001: disconnect [ 645.745709][ T9553] vivid-001: reconnect [ 645.815426][ T27] audit: type=1800 audit(1734606965.897:128): pid=9554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1435" name="bus" dev="loop4" ino=19 res=0 errno=0 [ 646.261316][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 646.453956][ T14] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 647.026661][ T9568] 9pnet: Unknown protocol version 9p200 [ 647.062853][ T9568] siw: device registration error -23 [ 647.123730][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 647.130970][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.178502][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 647.296175][ T14] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 647.305528][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.315648][ T14] usb 3-1: Product: syz [ 647.320002][ T14] usb 3-1: Manufacturer: syz [ 647.327160][ T14] usb 3-1: SerialNumber: syz [ 647.342934][ T14] usb 3-1: config 0 descriptor?? [ 648.127576][ T14] hub 3-1:0.0: bad descriptor, ignoring hub [ 648.133812][ T14] hub: probe of 3-1:0.0 failed with error -5 [ 648.408761][ T3583] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 648.481383][ T9580] netlink: 'syz.4.1448': attribute type 1 has an invalid length. [ 648.533989][ T126] usb 3-1: USB disconnect, device number 16 [ 648.613877][ T3583] usb 1-1: Using ep0 maxpacket: 16 [ 648.633973][ T3583] usb 1-1: no configurations [ 648.638632][ T3583] usb 1-1: can't read configurations, error -22 [ 648.831396][ T3583] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 648.836431][ T9593] loop1: detected capacity change from 0 to 512 [ 648.907717][ T9593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 648.955147][ T9593] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 649.024116][ T3583] usb 1-1: Using ep0 maxpacket: 16 [ 649.030145][ T3583] usb 1-1: no configurations [ 649.067816][ T3583] usb 1-1: can't read configurations, error -22 [ 649.150056][ T9599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1454'. [ 649.282008][ T3583] usb usb1-port1: attempt power cycle [ 649.419906][ T9604] loop2: detected capacity change from 0 to 1024 [ 649.494128][ T27] audit: type=1800 audit(1734606969.557:129): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1453" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 650.707243][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 650.753772][ T3583] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 650.805787][ T3583] usb 1-1: Using ep0 maxpacket: 16 [ 650.814407][ T3583] usb 1-1: no configurations [ 650.819045][ T3583] usb 1-1: can't read configurations, error -22 [ 651.158581][ T3583] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 651.195453][ T4792] hfsplus: b-tree write err: -5, ino 8 [ 651.209110][ T3583] usb 1-1: device descriptor read/8, error -71 [ 652.030910][ T3583] usb usb1-port1: unable to enumerate USB device [ 652.144863][ T9626] netlink: 'syz.1.1463': attribute type 1 has an invalid length. [ 652.407747][ T9624] syz.3.1460 (9624): drop_caches: 2 [ 652.478568][ T9635] random: crng reseeded on system resumption [ 654.795064][ T9640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1466'. [ 655.050864][ T9646] loop0: detected capacity change from 0 to 512 [ 655.125903][ T9646] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 655.145470][ T9646] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 655.445389][ T9656] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1468'. [ 655.454699][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1468'. [ 655.490029][ T126] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 656.065048][ T27] audit: type=1800 audit(1734606976.077:130): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1469" name="bus" dev="loop0" ino=19 res=0 errno=0 [ 656.182658][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 656.361218][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.381465][ T126] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 656.428125][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.490702][ T9663] loop0: detected capacity change from 0 to 1024 [ 656.539781][ T126] usb 3-1: config 0 descriptor?? [ 658.333118][ T9668] hfsplus: xattr search failed [ 658.959745][ T126] usbhid 3-1:0.0: can't add hid device: -71 [ 658.979460][ T126] usbhid: probe of 3-1:0.0 failed with error -71 [ 659.028152][ T126] usb 3-1: USB disconnect, device number 17 [ 659.404821][ T9684] random: crng reseeded on system resumption [ 661.976099][ T9692] netlink: 'syz.4.1479': attribute type 1 has an invalid length. [ 662.054223][ T9696] loop2: detected capacity change from 0 to 512 [ 662.723834][ T9705] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1482'. [ 662.732891][ T9705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1482'. [ 663.741337][ T9696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 663.751824][ T9696] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 663.982378][ T27] audit: type=1800 audit(1734606984.067:131): pid=9706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1483" name="bus" dev="loop2" ino=19 res=0 errno=0 [ 664.198264][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 665.429410][ T9714] sctp: failed to load transform for md5: -2 [ 665.748272][ T126] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 665.852575][ T9738] random: crng reseeded on system resumption [ 667.185682][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.196203][ T126] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 667.211991][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.232690][ T126] usb 3-1: config 0 descriptor?? [ 667.293759][ T3583] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 667.915650][ T126] usbhid 3-1:0.0: can't add hid device: -71 [ 667.935864][ T126] usbhid: probe of 3-1:0.0 failed with error -71 [ 668.066540][ T126] usb 3-1: USB disconnect, device number 18 [ 668.375751][ T3583] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 668.390770][ T3583] usb 5-1: config 0 has no interface number 0 [ 668.400510][ T3583] usb 5-1: config 0 interface 188 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 668.408949][ T9762] capability: warning: `syz.3.1501' uses deprecated v2 capabilities in a way that may be insecure [ 668.442329][ T3583] usb 5-1: config 0 interface 188 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 668.463937][ T3583] usb 5-1: config 0 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 668.493511][ T3583] usb 5-1: New USB device found, idVendor=2c7c, idProduct=6002, bcdDevice=42.9b [ 668.526234][ T3583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.544348][ T3583] usb 5-1: Product: syz [ 668.559059][ T3583] usb 5-1: Manufacturer: syz [ 668.564680][ T3583] usb 5-1: SerialNumber: syz [ 668.600656][ T3583] usb 5-1: config 0 descriptor?? [ 668.661306][ T3583] option 5-1:0.188: GSM modem (1-port) converter detected [ 668.662465][ T9770] syz.1.1502 (9770): drop_caches: 2 [ 668.852588][ T3583] usb 5-1: USB disconnect, device number 20 [ 668.878921][ T3583] option 5-1:0.188: device disconnected [ 669.700027][ T9784] random: crng reseeded on system resumption [ 672.393247][ T9791] netlink: 'syz.0.1509': attribute type 1 has an invalid length. [ 672.463475][ T9793] loop2: detected capacity change from 0 to 512 [ 672.611532][ T9793] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 672.673843][ T9793] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 673.004273][ T27] audit: type=1800 audit(1734606993.097:132): pid=9793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1511" name="bus" dev="loop2" ino=19 res=0 errno=0 [ 673.339162][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 673.355251][ T9806] loop0: detected capacity change from 0 to 4096 [ 675.093775][ T5486] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 675.291682][ T5486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.356358][ T5486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.570281][ T5486] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 675.614353][ T5486] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.669826][ T5486] usb 1-1: config 0 descriptor?? [ 675.882478][ T9819] loop2: detected capacity change from 0 to 7 [ 675.904634][ T9819] Dev loop2: unable to read RDB block 7 [ 675.910767][ T9819] loop2: unable to read partition table [ 676.090848][ T9819] loop2: partition table beyond EOD, truncated [ 676.109939][ T9819] loop_reread_partitions: partition scan of loop2 (被xڬdƤݡ [ 676.109939][ T9819] ) failed (rc=-5) [ 676.201111][ T9833] random: crng reseeded on system resumption [ 677.272105][ T3624] Dev loop2: unable to read RDB block 7 [ 677.321492][ T3624] loop2: unable to read partition table [ 678.306338][ T3624] loop2: partition table beyond EOD, truncated [ 678.484708][ T9838] netlink: 'syz.1.1522': attribute type 1 has an invalid length. [ 678.531268][ T5486] usbhid 1-1:0.0: can't add hid device: -71 [ 678.545970][ T5486] usbhid: probe of 1-1:0.0 failed with error -71 [ 678.566999][ T5486] usb 1-1: USB disconnect, device number 15 [ 678.731135][ T9847] loop2: detected capacity change from 0 to 512 [ 678.821909][ T9847] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 678.853889][ T9847] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 679.154261][ T27] audit: type=1800 audit(1734606999.247:133): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1524" name="bus" dev="loop2" ino=19 res=0 errno=0 [ 679.686587][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 681.014751][ T9881] netlink: 'syz.4.1536': attribute type 1 has an invalid length. [ 681.373796][ T953] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 681.944090][ T14] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 681.985365][ T953] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 682.021945][ T953] usb 2-1: config 0 has no interface number 0 [ 682.034044][ T953] usb 2-1: config 0 interface 83 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 682.087932][ T953] usb 2-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=a2.ae [ 682.129025][ T953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.153577][ T953] usb 2-1: Product: syz [ 682.159132][ T953] usb 2-1: Manufacturer: syz [ 682.169157][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 682.188551][ T14] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 682.193762][ T5486] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 682.213535][ T953] usb 2-1: SerialNumber: syz [ 682.233725][ T14] usb 1-1: config 0 has no interface number 0 [ 682.256816][ T953] usb 2-1: config 0 descriptor?? [ 682.280827][ T14] usb 1-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice=e8.e1 [ 682.297416][ T9876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 682.319673][ T953] io_ti 2-1:0.83: Edgeport TI 2 port adapter converter detected [ 682.337920][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.364381][ T14] usb 1-1: Product: syz [ 682.391921][ T14] usb 1-1: Manufacturer: syz [ 682.399450][ T953] io_ti 2-1:0.83: Direct firmware load for edgeport/down3.bin failed with error -2 [ 682.423785][ T14] usb 1-1: SerialNumber: syz [ 682.440629][ T14] usb 1-1: config 0 descriptor?? [ 682.446051][ T953] io_ti 2-1:0.83: Falling back to sysfs fallback for: edgeport/down3.bin [ 682.492513][ T14] usb 1-1: can't set first interface for hiFace device. [ 682.757445][ T5486] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 682.791034][ T5486] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.898849][ T5486] usb 3-1: config 0 has no interface number 0 [ 682.922986][ T5486] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 682.965513][ T5486] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.012414][ T5486] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 683.039348][ T5486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.068233][ T5486] usb 3-1: Product: syz [ 683.082618][ T5486] usb 3-1: Manufacturer: syz [ 683.093611][ T5486] usb 3-1: SerialNumber: syz [ 683.129802][ T5486] usb 3-1: config 0 descriptor?? [ 683.226309][ T14] snd-usb-hiface: probe of 1-1:0.253 failed with error -5 [ 683.796518][ T5486] usbtouchscreen: probe of 3-1:0.117 failed with error -71 [ 683.815633][ T14] usb 1-1: USB disconnect, device number 16 [ 683.921536][ T5486] usb 3-1: USB disconnect, device number 19 [ 683.984870][ T9895] loop0: detected capacity change from 0 to 512 [ 684.137559][ T9904] loop4: detected capacity change from 0 to 8 [ 684.144608][ T9904] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 684.153803][ T9895] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 684.163060][ T9895] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 684.496818][ T27] audit: type=1800 audit(1734607004.587:134): pid=9906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1541" name="bus" dev="loop0" ino=19 res=0 errno=0 [ 684.546668][ T9909] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 684.561986][ T9909] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 684.572009][ T9909] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 684.581966][ T9909] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 684.590516][ T9909] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 684.598467][ T9909] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 684.731539][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 684.737887][ T4263] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 684.745398][ T4263] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 684.754713][ T4263] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 684.774180][ T9909] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 684.781993][ T9909] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 684.790662][ T9909] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 685.022311][ T9907] lo speed is unknown, defaulting to 1000 [ 685.589734][ T9936] loop4: detected capacity change from 0 to 512 [ 685.611987][ T9939] page:ffffea00015606c0 refcount:4 mapcount:1 mapping:ffff888056999658 index:0x0 pfn:0x5581b [ 685.623803][ T9939] memcg:ffff888076110000 [ 685.628085][ T9939] aops:shmem_aops ino:1fa [ 685.632471][ T9939] flags: 0xfff60000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 685.642419][ T9939] raw: 00fff60000080015 ffff888076112248 ffffea000148d8c8 ffff888056999658 [ 685.651038][ T9939] raw: 0000000000000000 0000000000000000 0000000400000000 ffff888076110000 [ 685.659642][ T9939] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 685.666945][ T9939] page_owner tracks the page as allocated [ 685.674139][ T9939] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 9940, tgid 9939 (syz.0.1555), ts 685607151884, free_ts 684711287612 [ 685.691895][ T9939] post_alloc_hook+0x18d/0x1b0 [ 685.695038][ T126] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 685.696673][ T9939] get_page_from_freelist+0x3731/0x38d0 [ 685.708386][ T9907] chnl_net:caif_netlink_parms(): no params data found [ 685.709787][ T9939] __alloc_pages+0x28d/0x770 [ 685.721186][ T9939] __folio_alloc+0xf/0x30 [ 685.725540][ T9939] vma_alloc_folio+0x486/0x990 [ 685.730323][ T9939] shmem_alloc_and_acct_folio+0x5a8/0xd50 [ 685.736059][ T9939] shmem_get_folio_gfp+0x13f0/0x3470 [ 685.741383][ T9939] shmem_read_mapping_page_gfp+0x113/0x3a0 [ 685.747223][ T9939] udmabuf_create+0x85e/0x1060 [ 685.752016][ T9939] udmabuf_ioctl+0x300/0x4e0 [ 685.756632][ T9939] __se_sys_ioctl+0xf1/0x160 [ 685.761242][ T9939] do_syscall_64+0x3b/0xb0 [ 685.765692][ T9939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 685.771626][ T9939] page last free stack trace: [ 685.776317][ T9939] free_unref_page_prepare+0x12a6/0x15b0 [ 685.781980][ T9939] free_unref_page_list+0x663/0x900 [ 685.787207][ T9939] release_pages+0x24c4/0x27a0 [ 685.792000][ T9939] __pagevec_release+0x80/0xf0 [ 685.796801][ T9939] shmem_undo_range+0x865/0x2390 [ 685.801788][ T9939] shmem_evict_inode+0x265/0xa60 [ 685.806771][ T9939] evict+0x529/0x930 [ 685.810713][ T9939] __dentry_kill+0x436/0x650 [ 685.815428][ T9939] dentry_kill+0xbb/0x290 [ 685.819787][ T9939] dput+0xfb/0x1d0 [ 685.823627][ T9939] __fput+0x62e/0x8d0 [ 685.827632][ T9939] task_work_run+0x246/0x300 [ 685.832251][ T9939] do_exit+0xa73/0x26a0 [ 685.836438][ T9939] do_group_exit+0x202/0x2b0 [ 685.841063][ T9939] get_signal+0x16f7/0x17d0 [ 685.845601][ T9939] arch_do_signal_or_restart+0xb0/0x1a10 [ 685.851407][ T9939] ------------[ cut here ]------------ [ 685.856874][ T9939] kernel BUG at mm/filemap.c:153! [ 685.862112][ T9939] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 685.868214][ T9939] CPU: 0 PID: 9939 Comm: syz.0.1555 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 685.879597][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 685.889675][ T9939] RIP: 0010:filemap_unaccount_folio+0x5c2/0xa60 [ 685.895959][ T9939] Code: 07 38 c1 0f 8c 21 fe ff ff 48 89 ef e8 e7 21 2b 00 e9 14 fe ff ff e8 9d 98 d3 ff 4c 89 ef 48 c7 c6 60 00 15 8b e8 7e 50 13 00 <0f> 0b e8 87 98 d3 ff 4c 89 ef 48 c7 c6 e0 05 15 8b e8 68 50 13 00 [ 685.915601][ T9939] RSP: 0018:ffffc9000e507578 EFLAGS: 00010046 [ 685.921698][ T9939] RAX: 838b30c5ea48ee00 RBX: ffff888056999658 RCX: ffffc9000e507303 [ 685.929705][ T9939] RDX: 0000000000000002 RSI: ffffffff8b0c14e0 RDI: ffffffff8b5e6500 [ 685.937716][ T9939] RBP: ffffc9000e507718 R08: dffffc0000000000 R09: fffffbfff1d360c6 [ 685.945721][ T9939] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888056999658 [ 685.953715][ T9939] R13: ffffea00015606c0 R14: ffffea00015606c0 R15: ffffea00015606c0 [ 685.961715][ T9939] FS: 000055555a87b500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 685.970704][ T9939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 685.977313][ T9939] CR2: 0000000000000004 CR3: 000000001eb67000 CR4: 00000000003506f0 [ 685.985316][ T9939] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 685.993308][ T9939] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 686.001306][ T9939] Call Trace: [ 686.004607][ T9939] [ 686.007551][ T9939] ? __die_body+0x5e/0xa0 [ 686.011919][ T9939] ? die+0x83/0xb0 [ 686.015690][ T9939] ? do_trap+0x11e/0x350 [ 686.019956][ T9939] ? filemap_unaccount_folio+0x5c2/0xa60 [ 686.025622][ T9939] ? filemap_unaccount_folio+0x5c2/0xa60 [ 686.031284][ T9939] ? do_error_trap+0x13d/0x1e0 [ 686.036071][ T9939] ? filemap_unaccount_folio+0x5c2/0xa60 [ 686.041746][ T9939] ? do_int3+0x30/0x30 [ 686.045842][ T9939] ? report_bug+0x3c9/0x500 [ 686.050361][ T9939] ? handle_invalid_op+0x2c/0x40 [ 686.055321][ T9939] ? filemap_unaccount_folio+0x5c2/0xa60 [ 686.060993][ T9939] ? exc_invalid_op+0x2f/0x40 [ 686.065707][ T9939] ? asm_exc_invalid_op+0x16/0x20 [ 686.070781][ T9939] ? filemap_unaccount_folio+0x5c2/0xa60 [ 686.076448][ T9939] ? filemap_unaccount_folio+0x5c2/0xa60 [ 686.082115][ T9939] __filemap_remove_folio+0xc7/0xaa0 [ 686.087438][ T9939] ? __rwlock_init+0x140/0x140 [ 686.092234][ T9939] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 686.099641][ T9939] ? _raw_spin_lock_irq+0xdb/0x110 [ 686.104793][ T9939] ? _raw_spin_lock_irqsave+0x120/0x120 [ 686.110383][ T9939] ? find_get_entries+0x710/0x710 [ 686.115436][ T9939] filemap_remove_folio+0x105/0x2e0 [ 686.120664][ T9939] truncate_inode_folio+0x59/0x70 [ 686.125714][ T9939] shmem_undo_range+0x570/0x2390 [ 686.130695][ T9939] ? shmem_truncate_range+0xb0/0xb0 [ 686.135953][ T9939] shmem_evict_inode+0x265/0xa60 [ 686.140916][ T9939] ? inode_wait_for_writeback+0x21f/0x280 [ 686.146671][ T9939] ? shmem_free_in_core_inode+0xb0/0xb0 [ 686.152238][ T9939] ? bit_waitqueue+0x30/0x30 [ 686.156861][ T9939] ? do_raw_spin_unlock+0x137/0x8a0 [ 686.162080][ T9939] ? shmem_free_in_core_inode+0xb0/0xb0 [ 686.167649][ T9939] evict+0x529/0x930 [ 686.171579][ T9939] ? proc_nr_inodes+0x310/0x310 [ 686.176480][ T9939] ? _raw_spin_unlock+0x24/0x40 [ 686.181354][ T9939] ? iput+0x73f/0x980 [ 686.185358][ T9939] __dentry_kill+0x436/0x650 [ 686.189968][ T9939] dentry_kill+0xbb/0x290 [ 686.194317][ T9939] ? dput+0x37/0x1d0 [ 686.198227][ T9939] dput+0xfb/0x1d0 [ 686.201964][ T9939] __fput+0x62e/0x8d0 [ 686.205970][ T9939] task_work_run+0x246/0x300 [ 686.210583][ T9939] ? task_work_cancel+0x2e0/0x2e0 [ 686.215630][ T9939] ? exit_to_user_mode_loop+0x39/0x100 [ 686.221110][ T9939] exit_to_user_mode_loop+0xde/0x100 [ 686.226408][ T9939] exit_to_user_mode_prepare+0xb1/0x140 [ 686.231971][ T9939] syscall_exit_to_user_mode+0x60/0x270 [ 686.237546][ T9939] do_syscall_64+0x47/0xb0 [ 686.241994][ T9939] ? clear_bhb_loop+0x45/0xa0 [ 686.246702][ T9939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 686.248562][ T9936] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 686.252619][ T9939] RIP: 0033:0x7fd952785d29 [ 686.252650][ T9939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.287874][ T9939] RSP: 002b:00007ffcf2ee7698 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 686.296404][ T9939] RAX: 0000000000000000 RBX: 00000000000a75ef RCX: 00007fd952785d29 [ 686.304391][ T9939] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 686.312371][ T9939] RBP: 00007fd952977ba0 R08: 0000000000000001 R09: 00007ffcf2ee798f [ 686.320388][ T9939] R10: 00007fd952400000 R11: 0000000000000246 R12: 00000000000a763c [ 686.328365][ T9939] R13: 00007fd952975fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 686.336360][ T9939] [ 686.339381][ T9939] Modules linked in: [ 686.343296][ T9939] ---[ end trace 0000000000000000 ]--- [ 686.348755][ T9939] RIP: 0010:filemap_unaccount_folio+0x5c2/0xa60 [ 686.355023][ T9939] Code: 07 38 c1 0f 8c 21 fe ff ff 48 89 ef e8 e7 21 2b 00 e9 14 fe ff ff e8 9d 98 d3 ff 4c 89 ef 48 c7 c6 60 00 15 8b e8 7e 50 13 00 <0f> 0b e8 87 98 d3 ff 4c 89 ef 48 c7 c6 e0 05 15 8b e8 68 50 13 00 [ 686.374714][ T9939] RSP: 0018:ffffc9000e507578 EFLAGS: 00010046 [ 686.380786][ T9939] RAX: 838b30c5ea48ee00 RBX: ffff888056999658 RCX: ffffc9000e507303 [ 686.388760][ T9939] RDX: 0000000000000002 RSI: ffffffff8b0c14e0 RDI: ffffffff8b5e6500 [ 686.396732][ T9939] RBP: ffffc9000e507718 R08: dffffc0000000000 R09: fffffbfff1d360c6 [ 686.404711][ T9939] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888056999658 [ 686.412688][ T9939] R13: ffffea00015606c0 R14: ffffea00015606c0 R15: ffffea00015606c0 [ 686.420670][ T9939] FS: 000055555a87b500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 686.429604][ T9939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.436188][ T9939] CR2: 0000000000000004 CR3: 000000001eb67000 CR4: 00000000003506f0 [ 686.444160][ T9939] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 686.452128][ T9939] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 686.460109][ T9939] Kernel panic - not syncing: Fatal exception [ 686.466480][ T9939] Kernel Offset: disabled [ 686.470801][ T9939] Rebooting in 86400 seconds..