last executing test programs: 1m38.966107173s ago: executing program 1 (id=291): open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1200001, &(0x7f0000000080)={[{@gid}, {@codepage={'codepage', 0x3d, 'cp850'}}, {}, {@file_umask={'file_umask', 0x3d, 0x9}}]}, 0x2, 0x33c, &(0x7f0000001f80)="$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") 1m38.620236544s ago: executing program 1 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000004c0)=[{0x5, 0x3, 0x8, 0x2}, {0x5, 0x1, 0xc, 0x2}], 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigaction(0x8, 0x0, 0x0, 0x8, &(0x7f0000000300)) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000600)={0x0, @bt={0x1e, 0x3, 0x1, 0x2, 0x4, 0x86, 0x5, 0x6, 0xfffffffd, 0x6, 0x0, 0x6, 0x401, 0x35fa865e, 0x2, 0x10, {0x34, 0xfffffffe}, 0xff, 0x3}}) syz_open_procfs(0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x20200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 1m37.214984591s ago: executing program 1 (id=299): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16], 0x0) syz_usb_ep_read(r0, 0xa, 0x0, 0x0) 1m34.056208174s ago: executing program 1 (id=312): r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000580)={0x20, 0x9, 0x48, {0x48, 0x24, "62bc529e53f51fcd4e23dc355f17ff796808aaba10115c372f488fcefb80695d3639f6ad11ee72e10cf746c877e7fb54707e807e6dcd36cb2b10f2a6bfdf78aa0635bb3200b2"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x2, 0x3, 0x411}}, 0x0, 0x0}, 0x0) 1m30.221150678s ago: executing program 1 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0002000000", @ANYRES32=0x0, @ANYBLOB], 0x50) sendto$inet(r4, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="050000"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r4}, 0x20) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_matches\x00') lseek(r8, 0xfffffffffffffffd, 0x1) 1m28.723002949s ago: executing program 1 (id=333): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010) 1m13.42965429s ago: executing program 32 (id=333): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010) 12.085321167s ago: executing program 6 (id=799): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000001c0)=""/189) 11.268068402s ago: executing program 4 (id=802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 10.775351801s ago: executing program 4 (id=804): r0 = socket$inet(0xa, 0x801, 0x84) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r3, {0x0, 0xfff1}, {0x4}, {0x0, 0x5}}}, 0xfffffffffffffe51}, 0x1, 0xf0ffffffffffff}, 0x20000011) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2ea6, 0x2, 0x4}) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={r7, 0x8000, 0x5, 0x0, 0x1, [], [0x800000, 0x0, 0x0, 0x8], [0x5, 0x1001000], [0x0, 0x0, 0xe8a6]}) connect$inet(r0, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r9, &(0x7f00000003c0)=[{&(0x7f0000000480)}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df36dc459b8791e09e4a38e1f0f3c7de180ffe20ac20e80f97e9e54415f6ff5999b3c974ec962a6050d9", 0x52}], 0x2, 0x4000001, 0x0) sendfile(r8, r9, 0x0, 0x8000fb00) 10.646312878s ago: executing program 2 (id=806): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x3ab5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsync(0xffffffffffffffff) 9.591766293s ago: executing program 4 (id=807): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x6d, 0x33, 0x95, 0x8, 0xfe9, 0xdb51, 0x5e35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x22, 0x0, 0x1, 0x8f, 0x53, 0x4e, 0x1, [], [{{0x9, 0x5, 0x1, 0x3, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000014c0)={0x14, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 9.165240381s ago: executing program 6 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) close(r0) 8.743319892s ago: executing program 6 (id=810): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="4a03e36762a1b410105ec29e82cb8a94abdc10140f589c452aad88bf668760bf252e75b039868f7aee2a4ecfe2886d95be8fc2bd06ad0b111b2af28278293408000000e9d60300ffaa"]}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) 8.120327061s ago: executing program 2 (id=812): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xc0080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000001400)='./file0\x00', 0x8, &(0x7f00000003c0)={[{@barrier}, {@autodefrag}, {@thread_pool={'thread_pool', 0x3d, 0x4}}, {@rescan_uuid_tree}, {@compress_force}, {@discard_async}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x74, 0x25]}}, {@noenospc_debug}, {@discard}]}, 0x0, 0x55c5, &(0x7f0000005600)="$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") 7.149383951s ago: executing program 4 (id=817): socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x92, 0x93, 0xdb, 0x40, 0x2013, 0x246, 0x6074, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0x1f, 0x88, 0x6c}}]}}]}}, 0x0) 6.620984723s ago: executing program 2 (id=818): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x58) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000300)=ANY=[], 0x148) readahead(r0, 0x0, 0x7) 5.496675257s ago: executing program 6 (id=820): r0 = socket$inet(0xa, 0x801, 0x84) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r3, {0x0, 0xfff1}, {0x4}, {0x0, 0x5}}}, 0xfffffffffffffe51}, 0x1, 0xf0ffffffffffff}, 0x20000011) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0xfff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2ea6, 0x2, 0x4}) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={r7, 0x8000, 0x5, 0x0, 0x1, [], [0x800000, 0x0, 0x0, 0x8], [0x5, 0x1001000], [0x0, 0x0, 0xe8a6]}) connect$inet(r0, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r9, &(0x7f00000003c0)=[{&(0x7f0000000480)}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df36dc459b8791e09e4a38e1f0f3c7de180ffe20ac20e80f97e9e54415f6ff5999b3c974ec962a6050d9", 0x52}], 0x2, 0x4000001, 0x0) sendfile(r8, r9, 0x0, 0x8000fb00) 5.378425254s ago: executing program 5 (id=822): r0 = socket$inet(0xa, 0x801, 0x84) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r3, {0x0, 0xfff1}, {0x4}, {0x0, 0x5}}}, 0xfffffffffffffe51}, 0x1, 0xf0ffffffffffff}, 0x20000011) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2ea6, 0x2, 0x4}) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={r7, 0x8000, 0x5, 0x0, 0x1, [], [0x800000, 0x0, 0x0, 0x8], [0x5, 0x1001000], [0x0, 0x0, 0xe8a6]}) connect$inet(r0, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r9, &(0x7f00000003c0)=[{&(0x7f0000000480)}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df36dc459b8791e09e4a38e1f0f3c7de180ffe20ac20e80f97e9e54415f6ff5999b3c974ec962a6050d9", 0x52}], 0x2, 0x4000001, 0x0) sendfile(r8, r9, 0x0, 0x8000fb00) 5.20124923s ago: executing program 4 (id=823): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB='\x00\"&'], 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) 5.077844206s ago: executing program 6 (id=824): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) capset(0x0, 0x0) socket(0x27, 0x3, 0xe54) 3.647888023s ago: executing program 3 (id=827): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000001480)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf9e, 0x0, @opaque="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"}}}}}, 0x0) 3.417561263s ago: executing program 5 (id=828): socket$inet(0xa, 0x801, 0x84) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0x0, 0xfff1}, {0x4}, {0x0, 0x5}}}, 0xfffffffffffffe51}, 0x1, 0xf0ffffffffffff}, 0x20000011) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2ea6, 0x2, 0x4}) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r5, 0x8000, 0x5, 0x0, 0x1, [], [0x800000, 0x0, 0x0, 0x8], [0x5, 0x1001000], [0x0, 0x0, 0xe8a6]}) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r7, &(0x7f00000003c0)=[{&(0x7f0000000480)}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df36dc459b8791e09e4a38e1f0f3c7de180ffe20ac20e80f97e9e54415f6ff5999b3c974ec962a6050d9", 0x52}], 0x2, 0x4000001, 0x0) sendfile(r6, r7, 0x0, 0x8000fb00) 3.272123814s ago: executing program 0 (id=829): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic='\t']}, 0x14}], 0x1}, 0x0) 3.174361584s ago: executing program 3 (id=830): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x0, 0x4004, 0x4000}) ioctl$RTC_IRQP_READ(r0, 0x40187013, &(0x7f0000000080)) 3.007945413s ago: executing program 5 (id=831): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x42, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) 2.927337201s ago: executing program 0 (id=832): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x3000000, @empty}}]}, 0x110) 2.81664016s ago: executing program 3 (id=833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.717483997s ago: executing program 5 (id=834): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20003, 0x23) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r0, &(0x7f0000000800)={0x2, 0x0, @local}, 0x10) 2.601519441s ago: executing program 0 (id=835): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0xfffffcb3) 2.477015417s ago: executing program 3 (id=836): r0 = socket$inet(0xa, 0x801, 0x84) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r3, {0x0, 0xfff1}, {0x4}, {0x0, 0x5}}}, 0xfffffffffffffe51}, 0x1, 0xf0ffffffffffff}, 0x20000011) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0xfff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2ea6, 0x2, 0x4}) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={r7, 0x8000, 0x5, 0x0, 0x1, [], [0x800000, 0x0, 0x0, 0x8], [0x5, 0x1001000], [0x0, 0x0, 0xe8a6]}) connect$inet(r0, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r9, &(0x7f00000003c0)=[{&(0x7f0000000480)}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df36dc459b8791e09e4a38e1f0f3c7de180ffe20ac20e80f97e9e54415f6ff5999b3c974ec962a6050d9", 0x52}], 0x2, 0x4000001, 0x0) sendfile(r8, r9, 0x0, 0x8000fb00) 2.476857701s ago: executing program 2 (id=837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 2.289780706s ago: executing program 0 (id=838): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000001380)={[{@delalloc}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x53}}, {@noload}, {@usrjquota}, {@usrjquota}]}, 0xfe, 0x453, &(0x7f0000000e00)="$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") 2.127894916s ago: executing program 2 (id=839): r0 = socket$inet(0xa, 0x801, 0x84) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r3, {0x0, 0xfff1}, {0x4}, {0x0, 0x5}}}, 0xfffffffffffffe51}, 0x1, 0xf0ffffffffffff}, 0x20000011) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2ea6, 0x2, 0x4}) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={r7, 0x8000, 0x5, 0x0, 0x1, [], [0x800000, 0x0, 0x0, 0x8], [0x5, 0x1001000], [0x0, 0x0, 0xe8a6]}) connect$inet(r0, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r9, &(0x7f00000003c0)=[{&(0x7f0000000480)}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df36dc459b8791e09e4a38e1f0f3c7de180ffe20ac20e80f97e9e54415f6ff5999b3c974ec962a6050d9", 0x52}], 0x2, 0x4000001, 0x0) sendfile(r8, r9, 0x0, 0x8000fb00) 1.204984569s ago: executing program 6 (id=840): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000100)='8', 0x1) syz_usb_disconnect(r0) 1.137124363s ago: executing program 5 (id=841): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) 1.073317888s ago: executing program 0 (id=842): unshare(0x6020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000150001"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r0, 0x0, 0x0) 1.022330934s ago: executing program 3 (id=843): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 1.021426225s ago: executing program 4 (id=844): socket$inet(0xa, 0x801, 0x84) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00'}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2ea6, 0x2, 0x4}) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r5, 0x8000, 0x5, 0x0, 0x1, [], [0x800000, 0x0, 0x0, 0x8], [0x5, 0x1001000], [0x0, 0x0, 0xe8a6]}) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r7, &(0x7f00000003c0)=[{&(0x7f0000000480)}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df36dc459b8791e09e4a38e1f0f3c7de180ffe20ac20e80f97e9e54415f6ff5999b3c974ec962a6050d9", 0x52}], 0x2, 0x4000001, 0x0) sendfile(r6, r7, 0x0, 0x8000fb00) 261.234792ms ago: executing program 2 (id=845): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f000099f000/0x3000)=nil, &(0x7f0000898000/0x2000)=nil, 0x3000, 0x2}) 260.893291ms ago: executing program 0 (id=846): r0 = socket$inet(0xa, 0x801, 0x84) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r3, {0x0, 0xfff1}, {0x4}, {0x0, 0x5}}}, 0xfffffffffffffe51}, 0x1, 0xf0ffffffffffff}, 0x20000011) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0xfff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2ea6, 0x2, 0x4}) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={r7, 0x8000, 0x5, 0x0, 0x1, [], [0x800000, 0x0, 0x0, 0x8], [0x5, 0x1001000], [0x0, 0x0, 0xe8a6]}) connect$inet(r0, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r9, &(0x7f00000003c0)=[{&(0x7f0000000480)}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df36dc459b8791e09e4a38e1f0f3c7de180ffe20ac20e80f97e9e54415f6ff5999b3c974ec962a6050d9", 0x52}], 0x2, 0x4000001, 0x0) sendfile(r8, r9, 0x0, 0x8000fb00) 251.85012ms ago: executing program 5 (id=847): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x40) 0s ago: executing program 3 (id=848): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x26001) kernel console output (not intermixed with test programs): T970] libceph: connect (1)[c::]:6789 error -101 [ 211.196428][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 211.206510][ T6908] ceph: No mds server is up or the cluster is laggy [ 211.227119][ T6919] loop2: detected capacity change from 0 to 256 [ 211.233307][ T6916] loop5: detected capacity change from 0 to 256 [ 211.371817][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 211.377989][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 211.384152][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 211.488410][ T6920] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 212.164910][ T970] libceph: connect (1)[c::]:6789 error -101 [ 212.180656][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 212.251057][ T6916] FAT-fs (loop5): Directory bread(block 64) failed [ 212.257699][ T6916] FAT-fs (loop5): Directory bread(block 65) failed [ 212.297713][ T6926] loop1: detected capacity change from 0 to 512 [ 212.309368][ T6916] FAT-fs (loop5): Directory bread(block 66) failed [ 212.341259][ T6916] FAT-fs (loop5): Directory bread(block 67) failed [ 212.367501][ T6919] FAT-fs (loop2): Directory bread(block 64) failed [ 212.384379][ T6916] FAT-fs (loop5): Directory bread(block 68) failed [ 212.392984][ T6926] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 212.394245][ T6919] FAT-fs (loop2): Directory bread(block 65) failed [ 212.433313][ T6916] FAT-fs (loop5): Directory bread(block 69) failed [ 212.458754][ T6916] FAT-fs (loop5): Directory bread(block 70) failed [ 212.485749][ T6926] EXT4-fs (loop1): 1 truncate cleaned up [ 212.489099][ T6919] FAT-fs (loop2): Directory bread(block 66) failed [ 212.491679][ T6916] FAT-fs (loop5): Directory bread(block 71) failed [ 212.498054][ T6919] FAT-fs (loop2): Directory bread(block 67) failed [ 212.511712][ T6919] FAT-fs (loop2): Directory bread(block 68) failed [ 212.518367][ T6919] FAT-fs (loop2): Directory bread(block 69) failed [ 212.526471][ T6919] FAT-fs (loop2): Directory bread(block 70) failed [ 212.532265][ T6926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.533206][ T6919] FAT-fs (loop2): Directory bread(block 71) failed [ 212.552273][ T6919] FAT-fs (loop2): Directory bread(block 72) failed [ 212.569021][ T6919] FAT-fs (loop2): Directory bread(block 73) failed [ 212.575836][ T6916] FAT-fs (loop5): Directory bread(block 72) failed [ 212.608385][ T6916] FAT-fs (loop5): Directory bread(block 73) failed [ 212.620984][ T6932] loop4: detected capacity change from 0 to 2048 [ 212.648056][ T6926] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 212.688767][ T6932] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.814111][ T6938] loop3: detected capacity change from 0 to 764 [ 212.835026][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.873006][ T6938] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 213.233224][ T6944] ubi: mtd0 is already attached to ubi31 [ 213.758698][ T6947] loop4: detected capacity change from 0 to 164 [ 214.409270][ T6955] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 214.510474][ T6957] loop5: detected capacity change from 0 to 64 [ 214.810108][ T6962] loop4: detected capacity change from 0 to 764 [ 214.846855][ T6963] loop1: detected capacity change from 0 to 64 [ 214.877593][ T6962] rock: directory entry would overflow storage [ 214.916036][ T6962] rock: sig=0x4654, size=5, remaining=4 [ 214.964668][ T6962] isofs: Unable to find the ".." directory for NFS. [ 215.217853][ T6970] loop2: detected capacity change from 0 to 1764 [ 215.429239][ T5896] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 215.549052][ T5905] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 215.759159][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 215.768654][ T6979] loop4: detected capacity change from 0 to 2048 [ 215.775588][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 215.777621][ T6970] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 215.809929][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 215.849083][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 215.903280][ T5896] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 215.908911][ T5905] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 215.923785][ T6979] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 215.928900][ T5896] usb 1-1: config 0 has no interface number 0 [ 215.952120][ T5905] usb 4-1: config 0 has no interface number 0 [ 215.981091][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.5.297'. [ 215.986525][ T5905] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 215.997402][ T5896] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 216.015843][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.034826][ T6103] udevd[6103]: incorrect nilfs2 checksum on /dev/loop4 [ 216.043470][ T6985] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.056310][ T5905] usb 4-1: Product: syz [ 216.058936][ T5896] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9 [ 216.074070][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 216.080325][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 216.086419][ T5896] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 216.099674][ T5896] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 216.111024][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.114295][ T5905] usb 4-1: Manufacturer: syz [ 216.120873][ T5896] usb 1-1: Product: syz [ 216.128045][ T5896] usb 1-1: Manufacturer: syz [ 216.133661][ T5896] usb 1-1: SerialNumber: syz [ 216.140992][ T5896] usb 1-1: config 0 descriptor?? [ 216.148125][ T6977] ceph: No mds server is up or the cluster is laggy [ 216.159357][ T6971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.169821][ T6979] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952 [ 216.191502][ T5905] usb 4-1: SerialNumber: syz [ 216.240675][ T5905] usb 4-1: config 0 descriptor?? [ 216.294806][ T6979] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 216.333625][ T6979] Remounting filesystem read-only [ 216.412844][ T6979] NILFS (loop4): error -5 truncating bmap (ino=15) [ 216.479993][ T5142] Bluetooth: hci0: command tx timeout [ 216.670247][ T5896] usb 1-1: USB disconnect, device number 6 [ 216.829776][ T6991] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 217.518985][ T5905] radio-si470x 4-1:0.35: this is not a si470x device. [ 217.574165][ T5905] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 217.625701][ T5829] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 217.651194][ T5905] usb 4-1: USB disconnect, device number 6 [ 217.718974][ T5912] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 217.905031][ T6998] loop4: detected capacity change from 0 to 2048 [ 217.908880][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.939464][ T6998] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 217.961874][ T6998] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 217.964906][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.976818][ T6998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.990770][ T5896] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 218.003393][ T7000] loop5: detected capacity change from 0 to 128 [ 218.027467][ T5912] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.073401][ T7000] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.125985][ T5912] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.164453][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.185273][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 218.198601][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 218.204801][ T7000] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.228299][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 218.252316][ T5912] usb 3-1: Product: syz [ 218.255762][ T5896] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 218.269791][ T5912] usb 3-1: Manufacturer: syz [ 218.299151][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.301401][ T5912] usb 3-1: SerialNumber: syz [ 218.357518][ T5896] usb 2-1: Product: syz [ 218.363449][ T7005] ubi: mtd0 is already attached to ubi31 [ 218.408028][ T5896] usb 2-1: Manufacturer: syz [ 218.475607][ T5896] usb 2-1: SerialNumber: syz [ 218.641185][ T5896] usb 2-1: config 0 descriptor?? [ 218.836541][ T5912] usb 3-1: bad CDC descriptors [ 218.907817][ T7000] /dev/loop5: Can't open blockdev [ 219.040950][ T5892] usb 3-1: USB disconnect, device number 6 [ 219.087063][ T5833] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.247682][ T5839] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 219.433703][ T5839] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.462977][ T5142] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 219.466060][ T5839] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.493320][ T5839] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.554568][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.559159][ T5912] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 219.570647][ T970] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 219.574348][ T7010] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 219.619440][ T5839] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.739244][ T970] usb 6-1: Using ep0 maxpacket: 32 [ 219.744631][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 219.770408][ T970] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 219.789418][ T5905] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 219.797253][ T5912] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 219.800702][ T7024] loop2: detected capacity change from 0 to 64 [ 219.829038][ T970] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.839588][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.863224][ T970] usb 6-1: config 0 has no interface number 0 [ 219.871562][ T5912] usb 1-1: config 0 has no interface number 0 [ 219.877745][ T5912] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 219.904384][ T970] usb 6-1: config 0 interface 244 has no altsetting 0 [ 219.924827][ T5912] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 219.948042][ T970] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 219.964990][ T5839] usb 5-1: USB disconnect, device number 7 [ 219.968716][ T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.991940][ T5912] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 220.008920][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 220.014363][ T970] usb 6-1: Product: syz [ 220.018591][ T970] usb 6-1: Manufacturer: syz [ 220.028617][ T5912] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 220.048167][ T5905] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 220.056637][ T970] usb 6-1: SerialNumber: syz [ 220.066787][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.083039][ T5912] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 220.094830][ T5905] usb 4-1: config 0 has no interface number 0 [ 220.105357][ T970] usb 6-1: config 0 descriptor?? [ 220.117288][ T5912] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 220.131244][ T5905] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 220.146469][ T970] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort found [ 220.159759][ T5905] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.179743][ T5912] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 220.197792][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.214674][ T7026] loop2: detected capacity change from 0 to 128 [ 220.217777][ T5905] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 220.233058][ T7026] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 220.240546][ T5912] usb 1-1: config 0 descriptor?? [ 220.248013][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.259353][ T7012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 220.284396][ T5905] usb 4-1: Product: syz [ 220.284847][ T7026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.294675][ T5912] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.304885][ T5905] usb 4-1: Manufacturer: syz [ 220.310250][ T5905] usb 4-1: SerialNumber: syz [ 220.336311][ T5905] usb 4-1: config 0 descriptor?? [ 220.353321][ T7020] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 220.378358][ T970] snd_usb_toneport 6-1:0.244: cannot get proper max packet size [ 220.397615][ T970] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort now disconnected [ 220.420401][ T970] snd_usb_toneport 6-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 220.463902][ T5912] snd-usb-audio 1-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 220.479949][ T5905] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.492065][ T5905] usb 4-1: invalid MIDI in EP 0 [ 220.556085][ T5912] usb 1-1: USB disconnect, device number 7 [ 220.602261][ T9] usb 6-1: USB disconnect, device number 7 [ 220.692407][ T5905] snd-usb-audio 4-1:0.16: probe with driver snd-usb-audio failed with error -22 [ 220.711684][ T5905] usb 4-1: USB disconnect, device number 7 [ 220.800520][ T6100] udevd[6100]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.126/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 220.890155][ T6698] udevd[6698]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.706725][ T7040] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 222.294545][ T7043] ubi: mtd0 is already attached to ubi31 [ 222.407670][ T7044] netlink: 92 bytes leftover after parsing attributes in process `syz.3.319'. [ 222.687430][ T7046] loop2: detected capacity change from 0 to 256 [ 222.734143][ T7046] exfat: Deprecated parameter 'namecase' [ 223.358930][ T7046] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 224.696025][ T7063] loop5: detected capacity change from 0 to 1024 [ 224.724945][ T7067] loop2: detected capacity change from 0 to 16 [ 224.872645][ T7069] loop4: detected capacity change from 0 to 1024 [ 224.896743][ T7067] cramfs: Error -3 while decompressing! [ 224.952378][ T7067] cramfs: ffffffff9aba43a8(27)->ffff88807f8af000(4096) [ 224.959584][ T7067] cramfs: Error -3 while decompressing! [ 224.965540][ T7067] cramfs: ffffffff9aba43c3(16)->ffff88807f8b0000(4096) [ 224.972669][ T7067] cramfs: Error -3 while decompressing! [ 224.980762][ T7067] cramfs: ffffffff9aba43a8(27)->ffff88807f8af000(4096) [ 224.988226][ T30] audit: type=1800 audit(1743128886.785:3): pid=7067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.329" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 225.058959][ T7069] hfsplus: bad catalog entry type [ 225.199115][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.259102][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.351821][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.376732][ T7078] loop2: detected capacity change from 0 to 256 [ 225.393735][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.568320][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 225.637832][ T7086] loop5: detected capacity change from 0 to 8 [ 225.693598][ T7086] SQUASHFS error: Unable to read inode 0xe3 [ 225.726769][ T7087] loop3: detected capacity change from 0 to 64 [ 225.758296][ T7087] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 226.009175][ T5892] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 226.029979][ T7094] ubi: mtd0 is already attached to ubi31 [ 226.299160][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 226.395658][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.673891][ T5892] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 226.734890][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.755190][ T5892] usb 1-1: Product: syz [ 226.759056][ T5142] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 226.772613][ T5142] Bluetooth: hci4: Injecting HCI hardware error event [ 226.783227][ T5852] Bluetooth: hci4: hardware error 0x00 [ 226.793862][ T5892] usb 1-1: Manufacturer: syz [ 226.835492][ T5892] usb 1-1: SerialNumber: syz [ 226.878491][ T5892] usb 1-1: config 0 descriptor?? [ 226.898197][ T5892] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 226.928942][ T5892] usb 1-1: selecting invalid altsetting 1 [ 227.001797][ T7098] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ¯HcUØîÑË•‚Ž¹+ÕuµŽê!Þ÷œ8¦ [ 227.175376][ T7103] ubi: mtd0 is already attached to ubi31 [ 227.961505][ T9] usb 1-1: USB disconnect, device number 8 [ 228.300313][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.351'. [ 228.332477][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.351'. [ 228.827561][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 229.009302][ T5839] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 229.017331][ T5852] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 229.194183][ T5839] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 229.270271][ T5839] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 229.286542][ T7140] ubi: mtd0 is already attached to ubi31 [ 229.330422][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 229.385276][ T5839] usb 4-1: Product: syz [ 229.414264][ T5905] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 229.415864][ T5839] usb 4-1: Manufacturer: syz [ 229.437238][ T5839] usb 4-1: SerialNumber: syz [ 229.488068][ T5896] iguanair 2-1:0.0: failed to get version [ 229.496257][ T5896] iguanair 2-1:0.0: probe with driver iguanair failed with error -110 [ 229.554639][ T5839] usb 4-1: config 0 descriptor?? [ 229.827507][ T7132] loop5: detected capacity change from 0 to 4096 [ 229.840270][ T5896] usb 2-1: USB disconnect, device number 4 [ 229.858375][ T5839] ims_pcu 4-1:0.0: Zero length descriptor [ 229.880082][ T5839] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 229.904378][ T7132] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 229.925090][ T7132] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 229.986316][ T5905] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 229.997781][ T5905] usb 1-1: config 0 has no interface number 0 [ 230.005830][ T7132] ntfs3(loop5): Failed to load $Extend (-22). [ 230.024184][ T5905] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 230.049418][ T7132] ntfs3(loop5): Failed to initialize $Extend. [ 230.070458][ T5905] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 230.090156][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.119715][ T5905] usb 1-1: Product: syz [ 230.123952][ T5905] usb 1-1: Manufacturer: syz [ 230.128612][ T5905] usb 1-1: SerialNumber: syz [ 230.142167][ T30] audit: type=1800 audit(1743128891.945:4): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.361" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 230.194644][ T9] usb 4-1: USB disconnect, device number 8 [ 230.233390][ T5905] usb 1-1: config 0 descriptor?? [ 230.264394][ T7136] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 230.290956][ T5905] usb-storage 1-1:0.20: USB Mass Storage device detected [ 230.350959][ T5905] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 230.375199][ T7149] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 230.539832][ T5905] scsi host1: usb-storage 1-1:0.20 [ 230.801208][ T5839] usb 1-1: USB disconnect, device number 9 [ 230.954204][ T7167] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 231.004696][ T7169] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 231.100275][ T7173] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.380'. [ 231.114414][ T7173] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.380'. [ 231.281281][ T7178] ubi: mtd0 is already attached to ubi31 [ 232.436531][ T7198] loop3: detected capacity change from 0 to 8 [ 233.266029][ T7211] openvswitch: netlink: Missing key (keys=40, expected=100) [ 233.402518][ T7186] loop5: detected capacity change from 0 to 32768 [ 233.533116][ T7186] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 233.577695][ T7217] netlink: 352 bytes leftover after parsing attributes in process `syz.2.397'. [ 233.672588][ T5852] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 233.687854][ T7186] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 233.813488][ T7228] netlink: 'syz.2.401': attribute type 4 has an invalid length. [ 234.016570][ T5833] ocfs2: Unmounting device (7,5) on (node local) [ 235.625892][ T7258] ubi: mtd0 is already attached to ubi31 [ 237.026641][ T7282] syz.5.424: attempt to access beyond end of device [ 237.026641][ T7282] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 238.079186][ T7282] exFAT-fs (nbd5): unable to read boot sector [ 238.134451][ T7282] exFAT-fs (nbd5): failed to read boot sector [ 238.146427][ T7282] exFAT-fs (nbd5): failed to recognize exfat type [ 238.900872][ T7312] ubi: mtd0 is already attached to ubi31 [ 239.039531][ T5839] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 239.222543][ T5839] usb 4-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 239.233164][ T5839] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 239.422801][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 239.437503][ T5839] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 239.452555][ T5839] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 239.462856][ T5839] usb 4-1: Product: syz [ 239.467056][ T5839] usb 4-1: Manufacturer: syz [ 239.475991][ T5839] usb 4-1: SerialNumber: syz [ 239.770926][ T7315] loop2: detected capacity change from 0 to 32768 [ 239.798249][ T5839] usb 4-1: config 0 descriptor?? [ 239.842518][ T5839] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.842739][ T7315] XFS (loop2): Mounting V5 filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb in no-recovery mode. Filesystem will be inconsistent. [ 239.889711][ T7325] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 239.930527][ T7315] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x139/0x1e0, xfs_agf block 0x1 [ 239.941417][ T7315] XFS (loop2): Unmount and run xfs_repair [ 239.947177][ T7315] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 239.954690][ T7315] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 239.963729][ T7315] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 239.972767][ T7315] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 239.981690][ T7315] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 239.990781][ T7315] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 239.999722][ T7315] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 240.008604][ T7315] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 240.017563][ T7315] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 240.027524][ T7315] XFS (loop2): metadata I/O error in "xfs_read_agf+0x290/0x560" at daddr 0x1 len 1 error 74 [ 240.041607][ T7315] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 240.164700][ T5839] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 240.300267][ T9] usb 4-1: USB disconnect, device number 9 [ 240.422919][ T7330] netlink: 20 bytes leftover after parsing attributes in process `syz.5.442'. [ 240.503979][ T6103] udevd[6103]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.586962][ T7342] capability: warning: `syz.0.446' uses deprecated v2 capabilities in a way that may be insecure [ 242.010861][ T5142] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 242.038246][ T5142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 242.052653][ T5142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 242.075308][ T5142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 242.085251][ T5142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 242.672699][ T7368] ubi: mtd0 is already attached to ubi31 [ 243.135587][ T7349] chnl_net:caif_netlink_parms(): no params data found [ 243.309017][ T7374] syz.4.457: attempt to access beyond end of device [ 243.309017][ T7374] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 243.409758][ T7374] exFAT-fs (nbd4): unable to read boot sector [ 243.412944][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.436850][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.448420][ T7374] exFAT-fs (nbd4): failed to read boot sector [ 243.455312][ T7349] bridge_slave_0: entered allmulticast mode [ 243.490048][ T7349] bridge_slave_0: entered promiscuous mode [ 243.521295][ T7374] exFAT-fs (nbd4): failed to recognize exfat type [ 243.532822][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.564560][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.582185][ T7349] bridge_slave_1: entered allmulticast mode [ 243.632297][ T7349] bridge_slave_1: entered promiscuous mode [ 243.774108][ T7381] Bluetooth: MGMT ver 1.23 [ 243.819515][ T7349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.868615][ T7349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.888512][ T7385] syz_tun: entered allmulticast mode [ 244.046320][ T7385] syz_tun: left allmulticast mode [ 244.074668][ T7349] team0: Port device team_slave_0 added [ 244.079213][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 244.109846][ T7349] team0: Port device team_slave_1 added [ 244.132569][ T5852] Bluetooth: hci6: command tx timeout [ 244.290388][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.343953][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 244.384008][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.396748][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.419965][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.440444][ T9] usb 1-1: config 0 descriptor?? [ 244.538838][ T7349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.580963][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.587979][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.621080][ T9] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 244.636783][ T7396] loop2: detected capacity change from 0 to 256 [ 244.654362][ T7399] netlink: 'syz.5.466': attribute type 21 has an invalid length. [ 244.695046][ T7349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.912752][ T7403] loop4: detected capacity change from 0 to 65 [ 244.937888][ T7349] hsr_slave_0: entered promiscuous mode [ 244.961785][ T7401] loop3: detected capacity change from 0 to 64 [ 244.964141][ T7349] hsr_slave_1: entered promiscuous mode [ 244.984278][ T7403] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 245.005854][ T7349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.110853][ T7407] ubi: mtd0 is already attached to ubi31 [ 245.277655][ T7349] Cannot create hsr debugfs directory [ 245.540500][ T9] usb 1-1: device descriptor read/64, error -71 [ 245.818967][ T9] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 246.199397][ T5852] Bluetooth: hci6: command tx timeout [ 246.250755][ T7349] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 246.309940][ T7349] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 246.323697][ T9] usb 1-1: USB disconnect, device number 10 [ 246.343254][ T7349] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 246.418015][ T7349] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 246.709109][ T7434] ubi: mtd0 is already attached to ubi31 [ 247.276103][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.351085][ T7349] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.369050][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'. [ 247.381440][ T7441] block nbd0: NBD_DISCONNECT [ 247.386825][ T7441] block nbd0: Disconnected due to user request. [ 247.407573][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.414780][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.446911][ T7441] block nbd0: shutting down sockets [ 247.499232][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.506476][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.693580][ T7349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.712718][ T7450] loop5: detected capacity change from 0 to 128 [ 247.730299][ T7349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.774795][ T7450] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 247.797857][ T7450] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.929242][ T7453] ubi: mtd0 is already attached to ubi31 [ 248.279088][ T5852] Bluetooth: hci6: command tx timeout [ 248.407061][ T7450] overlayfs: upper fs needs to support d_type. [ 248.460080][ T7450] overlayfs: upper fs does not support tmpfile. [ 248.885476][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.205253][ T7470] loop5: detected capacity change from 0 to 512 [ 249.246498][ T7470] EXT4-fs: Ignoring removed i_version option [ 249.270440][ T7470] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 249.314146][ T7470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 249.351951][ T7448] loop2: detected capacity change from 0 to 32768 [ 249.374760][ T7470] System zones: 1-12 [ 249.379387][ T7470] EXT4-fs (loop5): orphan cleanup on readonly fs [ 249.387340][ T7448] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.484 (7448) [ 249.402331][ T7470] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.491: invalid indirect mapped block 12 (level 1) [ 249.428700][ T7470] EXT4-fs (loop5): Remounting filesystem read-only [ 249.454103][ T7448] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.476646][ T7470] EXT4-fs (loop5): 1 truncate cleaned up [ 249.505722][ T7448] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 249.511048][ T7446] loop4: detected capacity change from 0 to 32768 [ 249.516535][ T7470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 249.554553][ T7448] BTRFS info (device loop2): disk space caching is enabled [ 249.569889][ T7446] XFS: ikeep mount option is deprecated. [ 249.587658][ T7481] random: crng reseeded on system resumption [ 249.606492][ T7448] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 249.679843][ T7446] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 249.763169][ T7349] veth0_vlan: entered promiscuous mode [ 249.785197][ T7349] veth1_vlan: entered promiscuous mode [ 249.855800][ T7349] veth0_macvtap: entered promiscuous mode [ 249.871175][ T7349] veth1_macvtap: entered promiscuous mode [ 249.891283][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.892485][ T7446] XFS (loop4): Ending clean mount [ 249.902108][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.902133][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.902161][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.907513][ T7448] BTRFS info (device loop2): rebuilding free space tree [ 249.917291][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.003190][ T7446] XFS (loop4): Quotacheck needed: Please wait. [ 250.009829][ T7448] BTRFS info (device loop2): disabling free space tree [ 250.023001][ T7509] loop3: detected capacity change from 0 to 128 [ 250.037339][ T7448] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 250.081198][ T7448] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 250.095048][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.148188][ T7446] XFS (loop4): Quotacheck: Done. [ 250.158204][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.171113][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.183290][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 250.195556][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.260695][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.285508][ T30] audit: type=1800 audit(1743128912.085:5): pid=7448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.484" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 250.309485][ T7448] BTRFS warning (device loop2): get dev_stats failed, device not found [ 250.338411][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.369766][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.380278][ T5852] Bluetooth: hci6: command tx timeout [ 250.386209][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.396394][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.437496][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.448570][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.459633][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.469985][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.482559][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.494256][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.530980][ T5829] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.653302][ T7349] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.662978][ T5835] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.714219][ T7349] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.860219][ T7349] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.879071][ T7349] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.568257][ T7519] loop3: detected capacity change from 0 to 4096 [ 251.583678][ T6012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.646464][ T6012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.649202][ T7528] loop4: detected capacity change from 0 to 512 [ 252.701142][ T7528] EXT4-fs: Ignoring removed i_version option [ 252.784845][ T7528] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 252.789882][ T6012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.802707][ T6012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.839502][ T7523] loop5: detected capacity change from 0 to 131072 [ 252.860226][ T7523] F2FS-fs (loop5): invalid crc value [ 252.900982][ T7523] F2FS-fs (loop5): SIT is corrupted node# 0 vs 1 [ 252.929023][ T7523] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 253.000202][ T7528] EXT4-fs (loop4): 1 truncate cleaned up [ 253.076881][ T7528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.127943][ T7543] loop3: detected capacity change from 0 to 1024 [ 253.201640][ T7528] EXT4-fs error (device loop4): ext4_find_extent:901: inode #15: comm syz.4.498: inode has invalid extent depth: 25964 [ 253.255110][ T7546] xt_CT: No such helper "snmp" [ 253.272502][ T7528] EXT4-fs (loop4): Remounting filesystem read-only [ 253.302010][ T7528] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 253.454540][ T7551] loop5: detected capacity change from 0 to 2048 [ 253.520221][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.572737][ T7554] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.584963][ T13] hfsplus: b-tree write err: -5, ino 4 [ 254.010861][ T7558] loop2: detected capacity change from 0 to 4096 [ 254.066950][ T7558] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 254.120027][ T7568] random: crng reseeded on system resumption [ 254.181081][ T7558] ntfs3(loop2): ino=19, mi_enum_attr [ 254.187109][ T7558] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 254.235978][ T7564] loop5: detected capacity change from 0 to 4096 [ 254.277980][ T7558] ntfs3(loop2): failed to convert "c46c" to iso8859-13 [ 254.325817][ T7558] ntfs3(loop2): ino=20, mi_enum_attr [ 254.343796][ T7564] NILFS (loop5): invalid segment: Checksum error in segment payload [ 254.398851][ T7564] NILFS (loop5): trying rollback from an earlier position [ 254.481945][ T7564] NILFS (loop5): recovery complete [ 254.540090][ T7574] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.798458][ T7580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.519'. [ 255.495726][ T7586] loop2: detected capacity change from 0 to 64 [ 255.605321][ T7586] Trying to free block not in datazone [ 255.652034][ T7586] Trying to free block not in datazone [ 255.673487][ T7586] Trying to free block not in datazone [ 255.737767][ T7586] Trying to free block not in datazone [ 255.858989][ T5892] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 255.868117][ T7591] loop5: detected capacity change from 0 to 512 [ 255.885818][ T7591] EXT4-fs: Ignoring removed i_version option [ 255.912494][ T7591] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 255.955662][ T7591] EXT4-fs (loop5): 1 truncate cleaned up [ 255.964815][ T7591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.056044][ T7591] EXT4-fs error (device loop5): ext4_find_extent:901: inode #15: comm syz.5.525: inode has invalid extent depth: 25964 [ 256.087800][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 256.126974][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 256.131902][ T7600] loop3: detected capacity change from 0 to 128 [ 256.146042][ T7591] EXT4-fs (loop5): Remounting filesystem read-only [ 256.158931][ T7591] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 256.167689][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 256.262705][ T5892] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 256.289546][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.312448][ T5892] usb 1-1: Product: syz [ 256.316692][ T5892] usb 1-1: Manufacturer: syz [ 256.332330][ T5892] usb 1-1: SerialNumber: syz [ 256.361523][ T5892] usb 1-1: config 0 descriptor?? [ 256.390841][ T7578] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.400203][ T7578] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.411880][ T5892] usb 1-1: ucan: probing device on interface #0 [ 256.429691][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.542138][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.534'. [ 256.552969][ T7608] block nbd0: NBD_DISCONNECT [ 256.557672][ T7608] block nbd0: Send disconnect failed -32 [ 256.602759][ T5839] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 256.649190][ T5912] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 256.779068][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 256.787394][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.818055][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.840084][ T5912] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 256.845850][ T5839] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 256.858589][ T5892] usb 1-1: ucan: device reported invalid tx-fifo size [ 256.876328][ T5892] usb 1-1: ucan: probe failed; try to update the device firmware [ 256.879073][ T5912] usb 7-1: config 0 has no interface number 0 [ 256.884606][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.911661][ T7614] loop5: detected capacity change from 0 to 4096 [ 256.918153][ T5912] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 256.936399][ T7618] loop3: detected capacity change from 0 to 512 [ 256.956849][ T5839] usb 3-1: config 0 descriptor?? [ 256.966804][ T5912] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 256.977825][ T7614] ntfs3(loop5): It is recommened to use chkdsk. [ 257.002247][ T7618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.022086][ T7614] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 257.034259][ T5912] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 257.062349][ T7614] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 257.065645][ T7618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.076620][ T5912] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 257.093671][ T5892] usb 1-1: USB disconnect, device number 11 [ 257.094930][ T7614] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 257.108504][ T5912] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 257.123486][ T7614] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 257.133389][ T5912] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 257.146724][ T5912] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 257.149080][ T7614] ntfs3(loop5): try to read out of volume at offset 0x3fffffc1c00 [ 257.155913][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.183686][ T5912] usb 7-1: config 0 descriptor?? [ 257.189622][ T7604] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 257.196918][ T7604] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 257.204309][ T7618] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.215315][ T7614] ntfs3(loop5): try to read out of volume at offset 0x3fffffc2c00 [ 257.235276][ T5912] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 257.244951][ T7614] ntfs3(loop5): try to read out of volume at offset 0x3fffffc4c00 [ 257.285955][ T7618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.295323][ T7614] ntfs3(loop5): try to read out of volume at offset 0x3fffffc8c00 [ 257.316585][ T7614] ntfs3(loop5): try to read out of volume at offset 0x3fffffd0c00 [ 257.335071][ T7618] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 257.420314][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.563965][ T5912] usb 7-1: USB disconnect, device number 2 [ 257.582956][ T5912] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 257.590912][ T7627] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 257.609117][ T5892] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 257.688882][ T9] usb 3-1: USB disconnect, device number 7 [ 257.799022][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 257.817180][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.858919][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.876066][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.908903][ T5892] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 257.928340][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.942109][ T7635] loop5: detected capacity change from 0 to 512 [ 257.969859][ T5892] usb 5-1: config 0 descriptor?? [ 257.983268][ T7635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.047010][ T7635] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.063292][ T7635] ext4 filesystem being mounted at /88/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.111304][ T7635] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 258.161960][ T7644] loop3: detected capacity change from 0 to 2048 [ 258.170840][ T7635] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 258.186444][ T7635] EXT4-fs error (device loop5): ext4_acquire_dquot:6925: comm syz.5.544: Failed to acquire dquot type 0 [ 258.199241][ T7645] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 258.228428][ T7644] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.278469][ T7645] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 258.320459][ T7645] EXT4-fs error (device loop5): ext4_acquire_dquot:6925: comm syz.5.544: Failed to acquire dquot type 0 [ 258.341968][ T7647] netlink: 44 bytes leftover after parsing attributes in process `syz.0.548'. [ 258.383048][ T7649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.549'. [ 258.389632][ T5892] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0 [ 258.418926][ T5892] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0 [ 258.476198][ T5892] koneplus 0003:1E7D:2E22.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 258.487009][ T7649] block nbd0: NBD_DISCONNECT [ 258.521467][ T7649] block nbd0: Send disconnect failed -32 [ 258.600789][ T5892] koneplus 0003:1E7D:2E22.0002: couldn't init struct koneplus_device [ 258.620639][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.644384][ T5892] koneplus 0003:1E7D:2E22.0002: couldn't install mouse [ 258.699605][ T5892] koneplus 0003:1E7D:2E22.0002: probe with driver koneplus failed with error -71 [ 258.758327][ T5892] usb 5-1: USB disconnect, device number 8 [ 258.853628][ T7661] loop5: detected capacity change from 0 to 1024 [ 258.891150][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 259.014137][ T12] hfsplus: b-tree write err: -5, ino 4 [ 259.029922][ T5839] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 259.083540][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.119392][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 259.166725][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.207559][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 259.239132][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 259.241732][ T5839] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 259.301649][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 259.304575][ T5839] usb 1-1: config 0 has no interface number 0 [ 259.328927][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 259.339286][ T5839] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 259.348410][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.367293][ T9] usb 4-1: Product: syz [ 259.372880][ T5839] usb 1-1: Product: syz [ 259.377083][ T5839] usb 1-1: Manufacturer: syz [ 259.382841][ T9] usb 4-1: Manufacturer: syz [ 259.399012][ T5839] usb 1-1: SerialNumber: syz [ 259.401828][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 259.423220][ T5839] usb 1-1: config 0 descriptor?? [ 259.430121][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 259.447396][ T7673] loop4: detected capacity change from 0 to 512 [ 259.460302][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 259.466884][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 259.474003][ T5839] as10x_usb: device has been detected [ 259.479027][ T5905] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 259.489346][ T5839] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 259.503894][ T7673] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.591122][ T5839] usb 1-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 259.614771][ T7673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.663894][ T7673] EXT4-fs error (device loop4): ext4_do_update_inode:5158: inode #2: comm syz.4.560: corrupted inode contents [ 259.679578][ T5839] as10x_usb: error during firmware upload part1 [ 259.686275][ T5839] Registered device PCTV Systems picoStick (74e) [ 259.692757][ T5905] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 259.697395][ T5839] usb 1-1: USB disconnect, device number 12 [ 259.705524][ T7673] EXT4-fs error (device loop4): ext4_dirty_inode:6046: inode #2: comm syz.4.560: mark_inode_dirty error [ 259.719986][ T5839] Unregistered device PCTV Systems picoStick (74e) [ 259.727061][ T5839] as10x_usb: device has been disconnected [ 259.750137][ T5905] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 259.817121][ T5905] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 259.832815][ T7673] EXT4-fs error (device loop4): ext4_do_update_inode:5158: inode #2: comm syz.4.560: corrupted inode contents [ 259.851071][ T5912] usb 4-1: USB disconnect, device number 10 [ 259.874616][ T5905] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 259.888219][ T5905] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 259.940181][ T5905] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 259.957955][ T5905] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 259.982861][ T5905] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 259.994825][ T7685] netlink: 44 bytes leftover after parsing attributes in process `syz.2.565'. [ 260.004003][ T5905] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 260.036427][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.061804][ T5905] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 260.092133][ T5905] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 260.121072][ T5905] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 260.158893][ T5905] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 260.205759][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.217857][ T5905] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 260.290826][ T5905] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 260.335244][ T5905] usb 6-1: string descriptor 0 read error: -22 [ 260.343887][ T5905] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 260.363158][ T7691] loop4: detected capacity change from 0 to 256 [ 260.373881][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.417481][ T5905] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 260.498943][ T7691] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 260.933408][ T5905] usb 6-1: USB disconnect, device number 8 [ 261.099256][ T5912] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 261.269627][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 261.289382][ T5912] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 261.290906][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 261.297821][ T5912] usb 1-1: config 179 has no interface number 0 [ 261.328171][ T5912] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 261.348298][ T5912] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 261.410663][ T5912] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.469041][ T5912] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 42897, setting to 1024 [ 261.512661][ T5912] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 261.576570][ T5912] usb 1-1: config 179 interface 65 has no altsetting 0 [ 261.598945][ T5912] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 261.633849][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.678626][ T7696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 261.732465][ T5912] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input14 [ 261.859046][ T5186] input input14: unable to receive magic message: -110 [ 261.889193][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 261.909270][ T5905] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 261.940717][ T5186] input input14: unable to receive magic message: -32 [ 261.995292][ T5186] input input14: unable to receive magic message: -32 [ 262.045424][ T5186] input input14: unable to receive magic message: -32 [ 262.071901][ T5905] usb 6-1: config 0 has an invalid interface number: 11 but max is 8 [ 262.117337][ T5905] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.162258][ T7699] loop3: detected capacity change from 0 to 32768 [ 262.166515][ T5905] usb 6-1: config 0 has no interface number 0 [ 262.190273][ T5905] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 262.224791][ T5905] usb 6-1: config 0 interface 11 has no altsetting 0 [ 262.227097][ T5839] usb 1-1: USB disconnect, device number 13 [ 262.231835][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 262.246439][ T5839] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 262.278364][ T5905] usb 6-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 262.338002][ T7699] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 262.340444][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.406464][ T7699] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 262.443177][ T5905] usb 6-1: config 0 descriptor?? [ 262.490536][ T5905] keyspan 6-1:0.11: Keyspan 4 port adapter converter detected [ 262.529407][ T5905] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81 [ 262.537313][ T5905] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1 [ 262.596738][ T5905] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 262.621090][ T5905] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82 [ 262.661667][ T5905] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2 [ 262.675675][ T7729] loop4: detected capacity change from 0 to 1764 [ 262.706586][ T5905] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 262.707697][ T5831] ocfs2: Unmounting device (7,3) on (node local) [ 262.729834][ T5905] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83 [ 262.758101][ T5905] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3 [ 262.766781][ T7729] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 262.794245][ T7716] loop2: detected capacity change from 0 to 32768 [ 262.806778][ T5905] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 262.826283][ T5905] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84 [ 262.836080][ T7716] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.576 (7716) [ 262.845598][ T5905] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4 [ 262.899893][ T5905] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 262.961459][ T5905] usb 6-1: USB disconnect, device number 9 [ 262.993717][ T7716] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 262.994541][ T5905] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 263.106279][ T5905] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 263.115989][ T7716] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 263.156895][ T7716] BTRFS info (device loop2): using free-space-tree [ 263.422562][ T5905] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 263.435522][ T5905] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 263.446341][ T5905] keyspan 6-1:0.11: device disconnected [ 263.719145][ T5852] Bluetooth: hci6: command tx timeout [ 264.589339][ T7716] BTRFS info (device loop2): rebuilding free space tree [ 264.970265][ T5835] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 265.260833][ T5852] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 265.308947][ T5905] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 265.448361][ T7775] loop5: detected capacity change from 0 to 64 [ 265.479113][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 265.501120][ T5905] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 265.541808][ T5905] usb 5-1: config 0 has no interface number 0 [ 265.548001][ T5905] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 265.552575][ T7778] loop3: detected capacity change from 0 to 512 [ 265.618904][ T5905] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9 [ 265.633477][ T7778] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.667581][ T5905] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 265.719343][ T7778] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 265.757511][ T5905] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 265.784431][ T7785] netlink: 'syz.6.600': attribute type 2 has an invalid length. [ 265.823643][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.861851][ T7778] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 265.970073][ T7778] System zones: 0-2, 18-18, 34-34 [ 265.982680][ T5905] usb 5-1: Product: syz [ 266.154063][ T7778] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 266.154104][ T5905] usb 5-1: Manufacturer: syz [ 266.154171][ T5905] usb 5-1: SerialNumber: syz [ 266.389959][ T7778] EXT4-fs (loop3): 1 truncate cleaned up [ 266.397976][ T5905] usb 5-1: config 0 descriptor?? [ 266.415813][ T7767] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 266.440281][ T7778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.792212][ T30] audit: type=1800 audit(1743128928.595:6): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.597" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 266.826355][ T5839] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 267.507069][ T5905] usb 5-1: USB disconnect, device number 9 [ 267.770754][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.795535][ T5839] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 267.808886][ T5839] usb 6-1: config 0 has no interface number 0 [ 267.815053][ T5839] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.858194][ T5839] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 267.869172][ T5839] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 267.888920][ T5839] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 267.900465][ T5839] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 267.915520][ T7801] openvswitch: netlink: Actions may not be safe on all matching packets [ 267.927059][ T5839] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 268.049993][ T5839] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 268.108440][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.155602][ T5839] usb 6-1: config 0 descriptor?? [ 268.169674][ T7789] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 268.177301][ T7789] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 268.204747][ T5839] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 268.298035][ T5970] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 268.745878][ T5970] usb 5-1: Using ep0 maxpacket: 16 [ 268.794114][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.838217][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.855431][ T5970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.870388][ T5970] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 268.879976][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.940831][ T5970] usb 5-1: config 0 descriptor?? [ 268.945695][ T5839] usb 6-1: USB disconnect, device number 10 [ 268.956391][ T5839] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 269.039476][ T5970] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 269.079915][ T5186] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 269.155680][ T5186] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 269.269676][ T7805] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 269.349309][ T7822] /dev/loop6: Can't open blockdev [ 269.369171][ T5186] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 269.422641][ T5970] usb 5-1: USB disconnect, device number 10 [ 269.456272][ T6698] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 269.475340][ T7827] loop2: detected capacity change from 0 to 64 [ 271.228617][ T7838] loop5: detected capacity change from 0 to 2048 [ 271.292837][ T7838] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 271.352823][ T7838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.385137][ T7844] loop4: detected capacity change from 0 to 512 [ 271.460614][ T30] audit: type=1800 audit(1743128933.255:7): pid=7838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.618" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 271.474519][ T7846] pim6reg: entered allmulticast mode [ 271.577944][ T7844] EXT4-fs error (device loop4): __ext4_iget:4988: inode #15: block 1803188595: comm syz.4.622: invalid block [ 271.691904][ T7844] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.622: couldn't read orphan inode 15 (err -117) [ 271.728309][ T7844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.734662][ T7852] sp0: Synchronizing with TNC [ 271.879032][ T5896] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 271.910622][ T30] audit: type=1326 audit(1743128933.695:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9bd8d169 code=0x7ffc0000 [ 271.968890][ T30] audit: type=1326 audit(1743128933.695:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9bd8d169 code=0x7ffc0000 [ 271.990973][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.016057][ T30] audit: type=1326 audit(1743128933.695:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e9bd8d169 code=0x7ffc0000 [ 272.071994][ T5896] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.078249][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.096574][ T5896] usb 4-1: config 0 has no interface number 0 [ 272.138981][ T5896] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 272.148106][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.157552][ T30] audit: type=1326 audit(1743128933.695:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9bd8d169 code=0x7ffc0000 [ 272.183012][ T5896] usb 4-1: config 0 descriptor?? [ 272.188240][ T30] audit: type=1326 audit(1743128933.705:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9bd8d169 code=0x7ffc0000 [ 272.214294][ T5896] usb 4-1: selecting invalid altsetting 1 [ 272.221666][ T5896] dvb_ttusb_budget: ttusb_init_controller: error [ 272.228042][ T5896] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 272.264167][ T30] audit: type=1326 audit(1743128933.745:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f6e9bd8d169 code=0x7ffc0000 [ 272.388857][ T30] audit: type=1326 audit(1743128933.745:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9bd8d169 code=0x7ffc0000 [ 272.460427][ T5896] DVB: Unable to find symbol cx22700_attach() [ 272.544771][ T30] audit: type=1326 audit(1743128933.745:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9bd8d169 code=0x7ffc0000 [ 272.551720][ T5912] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 273.088583][ T5896] DVB: Unable to find symbol tda10046_attach() [ 273.128843][ T5896] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 273.172475][ T5896] usb 4-1: USB disconnect, device number 11 [ 273.222917][ T5912] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 273.244353][ T5912] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 273.303180][ T5912] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 273.378841][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.453839][ T7861] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 273.499220][ T5912] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.548940][ T5839] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 273.746267][ T5839] usb 7-1: Using ep0 maxpacket: 8 [ 273.783269][ T5839] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 273.804620][ T5839] usb 7-1: config 179 has no interface number 0 [ 273.837115][ T7883] ubi: mtd0 is already attached to ubi31 [ 273.868688][ T5839] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 273.976111][ T5839] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 274.226130][ T5839] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.338752][ T5839] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 274.443507][ T5896] usb 6-1: USB disconnect, device number 11 [ 274.476640][ T5839] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 274.569614][ T5839] usb 7-1: config 179 interface 65 has no altsetting 0 [ 274.577965][ T5839] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 274.608034][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.731713][ T5839] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input16 [ 274.851923][ T7894] loop2: detected capacity change from 0 to 512 [ 274.880953][ T7894] EXT4-fs (loop2): blocks per group (4096) and clusters per group (2304) inconsistent [ 274.979070][ T30] audit: type=1326 audit(1743128936.765:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7895 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6458d169 code=0x7ffc0000 [ 275.025188][ T5852] Bluetooth: to_multiplier 46966 > 3200 [ 275.079860][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 275.088345][ T5896] usb 7-1: USB disconnect, device number 3 [ 275.110248][ T5896] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 275.133337][ T30] audit: type=1326 audit(1743128936.815:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7895 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd6458d169 code=0x7ffc0000 [ 275.360487][ T47] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 275.373265][ T7908] loop5: detected capacity change from 0 to 64 [ 275.539702][ T47] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 275.588062][ T47] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 275.620203][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 275.689098][ T47] usb 5-1: Product: syz [ 275.689134][ T47] usb 5-1: Manufacturer: syz [ 275.689161][ T47] usb 5-1: SerialNumber: syz [ 275.746257][ T47] usb 5-1: config 0 descriptor?? [ 275.781933][ T47] ims_pcu 5-1:0.0: Zero length descriptor [ 275.816965][ T7921] loop2: detected capacity change from 0 to 512 [ 275.828895][ T47] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 275.873961][ T7921] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 275.903314][ T7921] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 275.916492][ T7921] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 275.934489][ T7921] System zones: 0-2, 18-18, 34-34 [ 275.950911][ T7921] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 276.001075][ T7921] EXT4-fs (loop2): 1 truncate cleaned up [ 276.069719][ T7921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.082729][ T5896] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 276.103334][ T47] IPVS: starting estimator thread 0... [ 276.135151][ T7927] IPVS: ip_vs_add_dest(): server weight less than zero [ 276.150883][ T47] usb 5-1: USB disconnect, device number 11 [ 276.209139][ T7928] IPVS: using max 22 ests per chain, 52800 per kthread [ 276.237840][ T7932] netlink: 'syz.6.660': attribute type 3 has an invalid length. [ 276.259241][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 276.283014][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.357210][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.388602][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.411212][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.426681][ T5896] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 276.467948][ T7936] loop5: detected capacity change from 0 to 1024 [ 276.488082][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.512846][ T5896] usb 1-1: config 0 descriptor?? [ 276.528555][ T7936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.578914][ T5905] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 276.801062][ T5905] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 276.829988][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.839734][ T5905] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 276.879345][ T5905] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 276.888419][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.946355][ T7934] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 276.956128][ T5896] koneplus 0003:1E7D:2E22.0003: unknown main item tag 0x0 [ 276.957626][ T5905] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.984039][ T5896] koneplus 0003:1E7D:2E22.0003: unknown main item tag 0x0 [ 277.050189][ T5896] koneplus 0003:1E7D:2E22.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 277.079499][ T5852] Bluetooth: hci5: command 0x0406 tx timeout [ 277.144560][ T5896] koneplus 0003:1E7D:2E22.0003: couldn't init struct koneplus_device [ 277.169898][ T7950] loop5: detected capacity change from 0 to 512 [ 277.200271][ T7950] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 277.208904][ T5896] koneplus 0003:1E7D:2E22.0003: couldn't install mouse [ 277.264372][ T5896] koneplus 0003:1E7D:2E22.0003: probe with driver koneplus failed with error -71 [ 277.270904][ T5896] usb 1-1: USB disconnect, device number 14 [ 277.359377][ T7950] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.362168][ T5970] usb 4-1: USB disconnect, device number 12 [ 277.408132][ T7950] EXT4-fs error (device loop5): ext4_do_update_inode:5158: inode #2: comm syz.5.667: corrupted inode contents [ 277.412411][ T7950] EXT4-fs error (device loop5): ext4_dirty_inode:6046: inode #2: comm syz.5.667: mark_inode_dirty error [ 277.414588][ T7950] EXT4-fs error (device loop5): ext4_do_update_inode:5158: inode #2: comm syz.5.667: corrupted inode contents [ 277.423440][ T7956] loop2: detected capacity change from 0 to 256 [ 277.489161][ T7956] FAT-fs (loop2): Directory bread(block 64) failed [ 277.541346][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.554033][ T7956] FAT-fs (loop2): Directory bread(block 65) failed [ 277.554136][ T7956] FAT-fs (loop2): Directory bread(block 66) failed [ 277.554194][ T7956] FAT-fs (loop2): Directory bread(block 67) failed [ 277.554367][ T7956] FAT-fs (loop2): Directory bread(block 68) failed [ 277.554416][ T7956] FAT-fs (loop2): Directory bread(block 69) failed [ 277.554579][ T7956] FAT-fs (loop2): Directory bread(block 70) failed [ 277.554626][ T7956] FAT-fs (loop2): Directory bread(block 71) failed [ 277.554715][ T7956] FAT-fs (loop2): Directory bread(block 72) failed [ 277.554761][ T7956] FAT-fs (loop2): Directory bread(block 73) failed [ 278.046323][ T7946] loop4: detected capacity change from 0 to 32768 [ 278.189040][ T5896] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 279.104179][ T7982] loop3: detected capacity change from 0 to 512 [ 279.124666][ T7946] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 279.155140][ T5896] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.168917][ T5896] usb 3-1: config 0 has no interface number 0 [ 279.175112][ T5896] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 279.187951][ T5896] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 279.200684][ T5896] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 279.210383][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.219831][ T7946] bcachefs (loop4): initializing new filesystem [ 279.252227][ T5896] usb 3-1: config 0 descriptor?? [ 279.259455][ T7960] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 279.276855][ T7982] EXT4-fs error (device loop3): __ext4_iget:4988: inode #15: block 1803188595: comm syz.3.677: invalid block [ 279.278833][ T7946] bcachefs (loop4): going read-write [ 279.299243][ T5896] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 279.311521][ T7987] loop5: detected capacity change from 0 to 8 [ 279.318008][ T7982] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.677: couldn't read orphan inode 15 (err -117) [ 279.356166][ T7946] bcachefs (loop4): marking superblocks [ 279.364437][ T7982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.530550][ T7946] bcachefs (loop4): initializing freespace [ 279.591955][ T7946] bcachefs (loop4): done initializing freespace [ 279.612054][ T7946] bcachefs (loop4): reading snapshots table [ 279.618284][ T7946] bcachefs (loop4): reading snapshots done [ 279.626866][ T5892] usb 3-1: USB disconnect, device number 8 [ 279.706576][ T7946] bcachefs (loop4): done starting filesystem [ 279.748343][ T7999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.753219][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.828271][ T7946] syz.4.665 (7946) used greatest stack depth: 17880 bytes left [ 279.839103][ T5896] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 279.976617][ T5829] bcachefs (loop4): shutting down [ 279.998458][ T5829] bcachefs (loop4): going read-only [ 280.009712][ T5896] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.018530][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 280.031013][ T5829] bcachefs (loop4): finished waiting for writes to stop [ 280.041004][ T5896] usb 6-1: config 0 has no interface number 0 [ 280.047153][ T5896] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 280.099876][ T5896] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 280.125954][ T5829] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 280.135044][ T5896] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 280.190052][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.243170][ T5896] usb 6-1: config 0 descriptor?? [ 280.253895][ T7993] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 280.290795][ T5896] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 280.365111][ T5829] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 280.414230][ T5829] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 280.438473][ T5829] bcachefs (loop4): marking filesystem clean [ 281.949261][ T5905] usb 6-1: USB disconnect, device number 12 [ 282.154285][ T5829] bcachefs (loop4): shutdown complete [ 282.229878][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.697'. [ 282.269058][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.6.697'. [ 282.306150][ T8027] netlink: 'syz.6.697': attribute type 7 has an invalid length. [ 282.618923][ T5896] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 282.768010][ T8039] loop5: detected capacity change from 0 to 64 [ 282.808875][ T5905] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 282.810728][ T5896] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 282.857217][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.890009][ T5896] usb 3-1: config 0 descriptor?? [ 282.923191][ T5896] pwc: Samsung MPC-C10 USB webcam detected. [ 283.019191][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 283.038277][ T5905] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 283.074923][ T5905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.099845][ T5905] usb 1-1: config 0 has no interface number 0 [ 283.106154][ T5905] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 283.117141][ T5905] usb 1-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.140766][ T5896] pwc: send_video_command error -71 [ 283.146076][ T5896] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 283.173595][ T5905] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 283.188849][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.201517][ T5896] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 283.212461][ T5905] usb 1-1: Product: syz [ 283.216684][ T5905] usb 1-1: Manufacturer: syz [ 283.222225][ T5896] usb 3-1: USB disconnect, device number 9 [ 283.231586][ T5905] usb 1-1: SerialNumber: syz [ 283.256384][ T5905] usb 1-1: config 0 descriptor?? [ 283.281947][ T8031] loop3: detected capacity change from 0 to 32768 [ 283.285302][ T8035] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 283.314965][ T5905] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.379242][ T5905] usb 1-1: invalid MIDI in EP 0 [ 283.548105][ T5905] snd-usb-audio 1-1:0.16: probe with driver snd-usb-audio failed with error -22 [ 283.656457][ T5905] usb 1-1: USB disconnect, device number 15 [ 283.855797][ T8031] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 283.870017][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.906007][ T8031] bcachefs (loop3): initializing new filesystem [ 283.929503][ T8031] bcachefs (loop3): going read-write [ 283.999752][ T8031] bcachefs (loop3): marking superblocks [ 284.023020][ T8031] bcachefs (loop3): initializing freespace [ 284.033073][ T8031] bcachefs (loop3): done initializing freespace [ 284.076689][ T8031] bcachefs (loop3): reading snapshots table [ 284.104197][ T8031] bcachefs (loop3): reading snapshots done [ 284.108938][ T5970] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 284.237709][ T8031] bcachefs (loop3): done starting filesystem [ 284.323549][ T5970] usb 6-1: Using ep0 maxpacket: 16 [ 284.600356][ T5970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.841167][ T5970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.922701][ T5970] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.971495][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.714'. [ 284.988949][ T5970] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 285.033051][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.714'. [ 285.042424][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.086951][ T5970] usb 6-1: config 0 descriptor?? [ 285.104125][ T5970] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input17 [ 285.167758][ T5186] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 285.256139][ T5186] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 285.355275][ T6698] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 285.428381][ T5186] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 285.459028][ T5831] bcachefs (loop3): shutting down [ 285.474972][ T5831] bcachefs (loop3): going read-only [ 285.502043][ T5831] bcachefs (loop3): finished waiting for writes to stop [ 285.513909][ T8062] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 285.564642][ T5831] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 285.568912][ T5186] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 285.583632][ T5896] usb 6-1: USB disconnect, device number 13 [ 285.907471][ T5831] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4 [ 285.918982][ T5970] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 286.151383][ T5831] bcachefs (loop3): clean shutdown complete, journal seq 5 [ 286.329135][ T5970] usb 3-1: Using ep0 maxpacket: 32 [ 286.381722][ T5831] bcachefs (loop3): marking filesystem clean [ 286.539304][ T5970] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 286.621089][ T5970] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 286.671290][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 286.733316][ T5831] bcachefs (loop3): shutdown complete [ 286.747694][ T5970] usb 3-1: Product: syz [ 286.754483][ T5970] usb 3-1: Manufacturer: syz [ 286.799216][ T5970] usb 3-1: SerialNumber: syz [ 286.819840][ T5970] usb 3-1: config 0 descriptor?? [ 286.830062][ T8085] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 286.850087][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 286.850145][ T30] audit: type=1326 audit(1743128948.655:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.6.724" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d3f38d169 code=0x0 [ 286.877787][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.118746][ T5896] usb 3-1: USB disconnect, device number 10 [ 287.229595][ T8107] ubi: mtd0 is already attached to ubi31 [ 287.464149][ T8082] loop4: detected capacity change from 0 to 32768 [ 287.766817][ T8082] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 287.962007][ T8082] XFS (loop4): Ending clean mount [ 288.114318][ T5892] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 288.158645][ T5829] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 288.311650][ T5892] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 288.341640][ T5892] usb 7-1: config 0 has no interface number 0 [ 288.372784][ T5892] usb 7-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 288.387049][ T8103] loop5: detected capacity change from 0 to 32768 [ 288.394756][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.408123][ T8103] btrfs: Deprecated parameter 'usebackuproot' [ 288.424738][ T5892] usb 7-1: Product: syz [ 288.438897][ T5892] usb 7-1: Manufacturer: syz [ 288.445041][ T8103] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 288.464789][ T5892] usb 7-1: SerialNumber: syz [ 288.502843][ T5892] usb 7-1: config 0 descriptor?? [ 288.508095][ T8103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.727 (8103) [ 288.572620][ T5892] as10x_usb: device has been detected [ 288.578463][ T5892] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 288.604878][ T8103] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.660186][ T8103] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 288.834550][ T8103] BTRFS info (device loop5): using free-space-tree [ 289.197592][ T5892] usb 7-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 289.230828][ T8126] loop2: detected capacity change from 0 to 256 [ 289.265488][ T5892] as10x_usb: error during firmware upload part1 [ 289.282304][ T5892] Registered device PCTV Systems picoStick (74e) [ 289.289740][ T8126] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 289.291683][ T5892] usb 7-1: USB disconnect, device number 4 [ 289.479650][ T8103] BTRFS info (device loop5): rebuilding free space tree [ 289.493345][ T5892] Unregistered device PCTV Systems picoStick (74e) [ 289.529393][ T5892] as10x_usb: device has been disconnected [ 289.911125][ T5833] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 291.616672][ T8162] loop5: detected capacity change from 0 to 2048 [ 291.685898][ T8162] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 291.762062][ T8162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.772813][ T8147] loop2: detected capacity change from 0 to 40427 [ 291.843976][ T8147] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff [ 291.914481][ T8147] F2FS-fs (loop2): invalid crc value [ 291.961763][ T8147] F2FS-fs (loop2): Found nat_bits in checkpoint [ 292.380236][ T8147] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 292.527388][ T8147] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 292.808874][ T5970] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 292.979183][ T5970] usb 7-1: Using ep0 maxpacket: 8 [ 293.003379][ T5970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 293.038862][ T5970] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 293.064740][ T5970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.091447][ T5970] usb 7-1: config 0 descriptor?? [ 293.221270][ T5832] block device autoloading is deprecated and will be removed. [ 293.369524][ T5970] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 293.460386][ T8193] loop5: detected capacity change from 0 to 128 [ 293.533530][ T8198] loop4: detected capacity change from 0 to 256 [ 293.548309][ T8177] loop3: detected capacity change from 0 to 32768 [ 293.626350][ T5970] usb 7-1: USB disconnect, device number 5 [ 293.636007][ T8177] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 293.657478][ T8198] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 293.797379][ T8177] XFS (loop3): Ending clean mount [ 294.048280][ T5831] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 295.017894][ T8232] ubi: mtd0 is already attached to ubi31 [ 295.839537][ T5892] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 296.070742][ T5892] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 296.079577][ T5892] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 296.095775][ T5892] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 296.105512][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 296.116986][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 296.130357][ T5892] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 296.139842][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 296.149642][ T5892] usb 1-1: Product: syz [ 296.153937][ T5892] usb 1-1: Manufacturer: syz [ 296.211831][ T5892] cdc_wdm 1-1:1.0: skipping garbage [ 296.217204][ T5892] cdc_wdm 1-1:1.0: skipping garbage [ 296.267911][ T5892] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 296.274698][ T5892] cdc_wdm 1-1:1.0: Unknown control protocol [ 296.743816][ T5839] usb 1-1: USB disconnect, device number 16 [ 297.118875][ T5892] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 297.311482][ T5892] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 297.327335][ T8265] ubi: mtd0 is already attached to ubi31 [ 297.631860][ T5892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.663340][ T5892] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.718856][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 297.751358][ T5892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.784002][ T5892] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.849318][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 297.880545][ T5892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.923714][ T5892] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.965398][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 297.991663][ T5892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.034721][ T5892] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.073891][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 298.122129][ T5892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.166387][ T5892] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.219167][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 298.239750][ T5892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.259391][ T5892] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.270832][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 298.289703][ T5892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.308977][ T5892] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.348877][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 298.370140][ T5892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.396598][ T5892] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.403257][ T5905] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 298.434263][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 298.477361][ T5892] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 298.510744][ T5892] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 298.562763][ T5892] usb 4-1: Product: syz [ 298.569830][ T5892] usb 4-1: Manufacturer: syz [ 298.574486][ T5892] usb 4-1: SerialNumber: syz [ 298.600307][ T5892] usb 4-1: config 0 descriptor?? [ 298.608942][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 298.614694][ T5892] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 298.672891][ T5905] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 298.709033][ T5905] usb 6-1: config 179 has no interface number 0 [ 298.739294][ T5905] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 298.778869][ T5905] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 298.799238][ T47] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 298.801053][ T5905] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 298.856677][ T5892] usb 4-1: USB disconnect, device number 13 [ 298.858432][ T5905] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 298.886530][ T5892] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 298.912017][ T5905] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 298.950344][ T5905] usb 6-1: config 179 interface 65 has no altsetting 0 [ 298.972595][ T47] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.977673][ T5905] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 298.994032][ T8268] loop0: detected capacity change from 0 to 32768 [ 299.013392][ T47] usb 7-1: config 0 has no interface number 0 [ 299.022797][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.025264][ T47] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 299.052431][ T5905] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input18 [ 299.072586][ T47] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 299.083983][ T47] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 299.131492][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.169117][ T47] usb 7-1: config 0 descriptor?? [ 299.205610][ T8276] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 299.237780][ T47] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 299.502371][ T8285] ubi: mtd0 is already attached to ubi31 [ 299.586452][ T30] audit: type=1326 audit(1743129190.245:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54da58d169 code=0x7fc00000 [ 300.011673][ T30] audit: type=1326 audit(1743129190.245:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f54da58d169 code=0x7fc00000 [ 300.070027][ T5839] usb 7-1: USB disconnect, device number 6 [ 300.129131][ T30] audit: type=1326 audit(1743129190.245:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.4.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54da58d169 code=0x7fc00000 [ 300.367631][ T5839] usb 6-1: USB disconnect, device number 14 [ 300.367756][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 300.381990][ T5839] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 300.492397][ T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 300.658913][ T5892] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 300.690482][ T47] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 300.706862][ T8296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.727833][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.757407][ T47] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.783961][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.797938][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.807548][ T47] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.820282][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.828276][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 300.860180][ T8299] ubi: mtd0 is already attached to ubi31 [ 300.869319][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 300.885204][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 300.896787][ T47] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 300.979311][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.988733][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.009961][ T5892] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 301.046596][ T47] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.066238][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.089014][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.098859][ T5892] usb 1-1: Product: syz [ 301.103098][ T5892] usb 1-1: Manufacturer: syz [ 301.131366][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.146006][ T5892] usb 1-1: SerialNumber: syz [ 301.158240][ T47] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.177904][ T8301] loop4: detected capacity change from 0 to 2048 [ 301.189057][ T5892] usb 1-1: config 0 descriptor?? [ 301.238965][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.249992][ T5892] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 301.272116][ T8301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.299065][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.308225][ T5892] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 301.329148][ T47] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.361681][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.409060][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.429398][ T47] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.476861][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.502836][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.537190][ T47] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.588832][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.622254][ T47] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 301.642085][ T47] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 301.663744][ T47] usb 4-1: Product: syz [ 301.668025][ T47] usb 4-1: Manufacturer: syz [ 301.682769][ T47] usb 4-1: SerialNumber: syz [ 301.690869][ T8309] ubi: mtd0 is already attached to ubi31 [ 301.776494][ T47] usb 4-1: config 0 descriptor?? [ 301.795636][ T47] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 301.834113][ T5892] em28xx 1-1:0.0: chip ID is em2800 [ 301.898950][ T5931] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 301.918927][ T5839] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 302.117639][ T5892] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 302.139951][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 302.156440][ T5892] em28xx 1-1:0.0: board has no eeprom [ 302.169562][ T5931] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.198298][ T5931] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 302.215254][ T5931] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 302.227602][ T24] usb 4-1: USB disconnect, device number 14 [ 302.237336][ T24] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 302.256873][ T5931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.265224][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.272990][ T5892] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 302.283705][ T5892] em28xx 1-1:0.0: dvb set to bulk mode. [ 302.298919][ T5839] usb 3-1: no configurations [ 302.306490][ T5931] usb 7-1: config 0 descriptor?? [ 302.316198][ T5839] usb 3-1: can't read configurations, error -22 [ 302.322893][ T47] em28xx 1-1:0.0: Binding DVB extension [ 302.339217][ T5892] usb 1-1: USB disconnect, device number 17 [ 302.357994][ T5931] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 302.385141][ T5892] em28xx 1-1:0.0: Disconnecting em28xx [ 302.393409][ T5931] dvb-usb: bulk message failed: -22 (3/0) [ 302.415715][ T5931] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 302.448379][ T5931] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 302.469596][ T5931] usb 7-1: media controller created [ 302.488124][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.534237][ T47] em28xx 1-1:0.0: Registering input extension [ 302.551706][ T5931] dvb-usb: bulk message failed: -22 (6/0) [ 302.566204][ T5892] em28xx 1-1:0.0: Closing input extension [ 302.574815][ T5931] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 302.607281][ T5931] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input20 [ 302.641716][ T5892] em28xx 1-1:0.0: Freeing device [ 302.664994][ T5931] dvb-usb: schedule remote query interval to 150 msecs. [ 302.690846][ T5931] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 302.850615][ T47] dvb-usb: bulk message failed: -22 (1/0) [ 302.856614][ T47] dvb-usb: error while querying for an remote control event. [ 303.040879][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 303.049891][ T5892] dvb-usb: error while querying for an remote control event. [ 303.155547][ T8325] ubi: mtd0 is already attached to ubi31 [ 303.211545][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 303.218108][ T5931] dvb-usb: error while querying for an remote control event. [ 303.247290][ T47] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 303.472937][ T5905] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 303.481285][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 303.503267][ T5931] dvb-usb: error while querying for an remote control event. [ 303.511373][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 303.704480][ T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.715745][ T5970] usb 7-1: USB disconnect, device number 7 [ 303.744971][ T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.786941][ T47] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.816421][ T5970] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 303.819925][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.838989][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 303.844571][ T47] usb 1-1: Product: syz [ 303.848249][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.854743][ T47] usb 1-1: Manufacturer: syz [ 303.878845][ T47] usb 1-1: SerialNumber: syz [ 303.888884][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.929422][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 304.009024][ T5905] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 304.064627][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.109874][ T5905] usb 4-1: config 0 descriptor?? [ 304.127455][ T47] usb 1-1: 0:2 : does not exist [ 304.179941][ T47] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 304.272769][ T47] usb 1-1: USB disconnect, device number 18 [ 304.448959][ T5970] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 304.498735][ T6103] udevd[6103]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.537053][ T5905] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 304.554302][ T5905] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 304.596876][ T8315] loop5: detected capacity change from 0 to 32768 [ 304.611118][ T5970] usb 5-1: config 7 has an invalid interface number: 34 but max is 0 [ 304.628451][ T5905] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input21 [ 304.641545][ T5970] usb 5-1: config 7 has no interface number 0 [ 304.665571][ T5970] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35 [ 304.695450][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.726511][ T5970] usb 5-1: Product: syz [ 304.733973][ T5970] usb 5-1: Manufacturer: syz [ 304.746935][ T5970] usb 5-1: SerialNumber: syz [ 304.769752][ T8315] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.800 (8315) [ 304.799662][ T5905] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 304.846224][ T5905] usb 4-1: USB disconnect, device number 15 [ 304.937120][ T8315] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 305.010842][ T8315] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 305.075015][ T8335] ubi: mtd0 is already attached to ubi31 [ 305.244882][ T8315] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 305.250248][ T8315] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 305.280596][ T8315] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 305.297302][ T8315] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 305.309164][ T5931] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 305.326966][ T8315] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 305.327275][ T8315] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 305.483822][ T8315] BTRFS error (device loop5): open_ctree failed: -12 [ 305.588958][ T5931] usb 7-1: Using ep0 maxpacket: 16 [ 305.605322][ T5931] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.626272][ T5931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.658821][ T5931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 305.689063][ T5970] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 305.715533][ T5931] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 305.732754][ T5931] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.757953][ T8357] ubi: mtd0 is already attached to ubi31 [ 305.799930][ T5970] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 305.908952][ T5931] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 305.934227][ T5931] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 305.982084][ T5970] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 305.988820][ T5931] usb 7-1: Manufacturer: syz [ 306.208071][ T8359] loop2: detected capacity change from 0 to 32768 [ 306.217121][ T5931] usb 7-1: config 0 descriptor?? [ 306.231846][ T8359] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.812 (8359) [ 306.252313][ T8359] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 306.258167][ T5970] dvb_usb_cxusb 5-1:7.34: probe with driver dvb_usb_cxusb failed with error -22 [ 306.262654][ T8359] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 306.283543][ T8359] BTRFS info (device loop2): using free-space-tree [ 306.399624][ T5970] usb 5-1: USB disconnect, device number 12 [ 306.560437][ T8359] BTRFS info (device loop2): checking UUID tree [ 306.583659][ T64] BTRFS warning (device loop2): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x63f4ea1683beabb9d22d86706aa2b4c5c2150c09aefaa1f4af82f23e8ce27cb9 level 0 [ 306.638990][ T8359] BTRFS: error (device loop2) in btrfs_fill_super:981: errno=-5 IO failure [ 306.691317][ T8359] BTRFS error (device loop2 state E): commit super ret -30 [ 306.819200][ T5931] rc_core: IR keymap rc-hauppauge not found [ 306.825216][ T5931] Registered IR keymap rc-empty [ 306.840050][ T5931] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 306.880096][ T5931] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 306.960605][ T5931] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 306.982326][ T5931] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input22 [ 306.988985][ T5970] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 307.010451][ T5931] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 307.030257][ T5839] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 307.056191][ T5931] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 307.088876][ T5931] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 307.139133][ T5931] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 307.180379][ T5931] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 307.209093][ T5931] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 307.219213][ T5839] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 307.227706][ T5839] usb 5-1: config 0 has no interface number 0 [ 307.247124][ T5970] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 307.247154][ T5839] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 307.266531][ T5931] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 307.288552][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.309064][ T5931] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 307.326189][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.335460][ T5931] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 307.348835][ T5839] usb 5-1: Product: syz [ 307.353072][ T5839] usb 5-1: Manufacturer: syz [ 307.362824][ T5970] usb 1-1: config 0 descriptor?? [ 307.385006][ T5839] usb 5-1: SerialNumber: syz [ 307.389981][ T5931] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 307.414705][ T5931] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 307.426166][ T5839] usb 5-1: config 0 descriptor?? [ 307.454458][ T5839] as10x_usb: device has been detected [ 307.465038][ T5931] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 307.484566][ T5839] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 307.520700][ T5931] usb 7-1: USB disconnect, device number 8 [ 307.554691][ T5839] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 307.588213][ T5839] as10x_usb: error during firmware upload part1 [ 307.598919][ T5970] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 307.607504][ T5970] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 307.681615][ T5839] Registered device PCTV Systems picoStick (74e) [ 307.699094][ T5839] usb 5-1: USB disconnect, device number 13 [ 307.816826][ T5839] Unregistered device PCTV Systems picoStick (74e) [ 307.827596][ T5839] as10x_usb: device has been disconnected [ 307.930768][ T5970] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 307.961670][ T5970] [drm] Initialized udl on minor 2 [ 308.012172][ T5970] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 308.053166][ T5970] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 308.219323][ T5839] usb 1-1: USB disconnect, device number 19 [ 308.229084][ T5905] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 308.258469][ T5905] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 308.644025][ T8397] ubi: mtd0 is already attached to ubi31 [ 309.419440][ T5905] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 309.429000][ T5839] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 309.448531][ T8404] ubi: mtd0 is already attached to ubi31 [ 309.911588][ T5905] usb 7-1: Using ep0 maxpacket: 16 [ 309.929144][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 309.933107][ T5905] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 309.957613][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.990046][ T5905] usb 7-1: config 0 has no interface number 0 [ 310.005542][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.020132][ T5905] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 310.058907][ T5905] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 310.063175][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 310.110910][ T5839] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 310.113620][ T5905] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 310.146184][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.188503][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.196240][ T5839] usb 5-1: config 0 descriptor?? [ 310.222402][ T5905] usb 7-1: Product: syz [ 310.243517][ T5905] usb 7-1: Manufacturer: syz [ 310.285623][ T5905] usb 7-1: SerialNumber: syz [ 310.313329][ T5905] usb 7-1: config 0 descriptor?? [ 310.343162][ T8402] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 310.359250][ T8402] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 310.368875][ T8413] ubi: mtd0 is already attached to ubi31 [ 310.691731][ T8402] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 310.712762][ T5839] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 310.739881][ T8402] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 310.749876][ T5839] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 310.756883][ T5839] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 310.808507][ T5839] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 310.833893][ T5839] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 310.870325][ T5839] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 310.907574][ T8399] random: crng reseeded on system resumption [ 310.980281][ T5905] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 311.009846][ T5839] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 311.018297][ T5905] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 311.056121][ T5839] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 311.073817][ T5905] asix 7-1:0.251: probe with driver asix failed with error -5 [ 311.141648][ T5905] usb 7-1: USB disconnect, device number 9 [ 311.609368][ T8434] loop0: detected capacity change from 0 to 512 [ 311.628684][ T8434] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.838: inode #16777216: comm syz.0.838: iget: illegal inode # [ 311.669329][ T8434] EXT4-fs (loop0): no journal found [ 311.679414][ T8434] EXT4-fs (loop0): can't get journal size [ 311.700626][ T8434] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 311.715912][ T8434] EXT4-fs (loop0): failed to initialize system zone (-22) [ 311.960320][ T8434] EXT4-fs (loop0): mount failed [ 312.106463][ T5931] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 312.151997][ T5931] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 312.227920][ T5931] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 312.404635][ T5931] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 312.440573][ T47] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 312.634464][ T47] usb 5-1: device descriptor read/64, error -32 [ 312.776782][ T8448] netlink: 'syz.3.843': attribute type 21 has an invalid length. [ 312.849097][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 312.849948][ T8450] ubi: mtd0 is already attached to ubi31 [ 313.044570][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 313.346876][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.395842][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.462822][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 313.512161][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.536745][ T8455] ubi: mtd0 is already attached to ubi31 [ 313.650112][ T5839] usb 5-1: USB disconnect, device number 14 [ 313.658371][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.672043][ T8456] ------------[ cut here ]------------ [ 313.677537][ T8456] WARNING: CPU: 1 PID: 8456 at ./include/net/netdev_lock.h:54 dev_xdp_install+0x610/0x9b0 [ 313.687613][ T8456] Modules linked in: [ 313.691589][ T8456] CPU: 1 UID: 0 PID: 8456 Comm: syz.5.847 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 313.703409][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.713744][ T8456] RIP: 0010:dev_xdp_install+0x610/0x9b0 [ 313.719527][ T8456] Code: 8d bc 24 28 0d 00 00 be ff ff ff ff e8 69 c5 26 02 31 ff 89 c5 89 c6 e8 0e af 81 f8 85 ed 0f 85 59 fb ff ff e8 d1 b3 81 f8 90 <0f> 0b 90 e9 4b fb ff ff e8 c3 b3 81 f8 49 8d bc 24 28 0d 00 00 be [ 313.739407][ T8456] RSP: 0018:ffffc9001f13f950 EFLAGS: 00010287 [ 313.745538][ T8456] RAX: 000000000000023c RBX: ffff888059e8ccbd RCX: ffffc9000da1b000 [ 313.754298][ T8456] RDX: 0000000000080000 RSI: ffffffff89395ebf RDI: 0000000000000005 [ 313.763165][ T8456] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 313.771430][ T8456] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888059e8c000 [ 313.779535][ T8456] R13: ffffffff870484d0 R14: ffffc9000ec3f000 R15: 0000000000000001 [ 313.787557][ T8456] FS: 00007f6e99bf66c0(0000) GS:ffff888124b41000(0000) knlGS:0000000000000000 [ 313.796606][ T8456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.803322][ T8456] CR2: 000000110c2f3eb0 CR3: 000000007f4ec000 CR4: 0000000000350ef0 [ 313.811367][ T8456] Call Trace: [ 313.814704][ T8456] [ 313.817688][ T8456] ? __warn+0xea/0x3c0 [ 313.821883][ T8456] ? dev_xdp_install+0x610/0x9b0 [ 313.826858][ T8456] ? report_bug+0x3c3/0x580 [ 313.831519][ T8456] ? dev_xdp_install+0x610/0x9b0 [ 313.836526][ T8456] ? handle_bug+0x184/0x210 [ 313.841122][ T8456] ? exc_invalid_op+0x17/0x50 [ 313.845860][ T8456] ? asm_exc_invalid_op+0x1a/0x20 [ 313.851014][ T8456] ? __pfx_nsim_bpf+0x10/0x10 [ 313.855756][ T8456] ? dev_xdp_install+0x60f/0x9b0 [ 313.861546][ T8456] ? dev_xdp_install+0x610/0x9b0 [ 313.867221][ T8456] ? __pfx_nsim_bpf+0x10/0x10 [ 313.872013][ T8456] ? __pfx_dev_xdp_install+0x10/0x10 [ 313.877389][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.883210][ T8456] ? __pfx_nsim_bpf+0x10/0x10 [ 313.887945][ T8456] dev_xdp_attach+0x6d1/0x16a0 [ 313.893083][ T8456] ? __pfx_dev_xdp_attach+0x10/0x10 [ 313.899191][ T8456] bpf_xdp_link_attach+0x2c5/0x680 [ 313.904355][ T8456] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 313.910087][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.915773][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.921471][ T8456] ? find_held_lock+0x2b/0x80 [ 313.926178][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.931898][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.937579][ T8456] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 313.943540][ T8456] __sys_bpf+0x1bc7/0x4c80 [ 313.948014][ T8456] ? __pfx___sys_bpf+0x10/0x10 [ 313.952857][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.959280][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.965503][ T8456] ? do_futex+0x122/0x350 [ 313.969918][ T8456] ? __pfx_do_futex+0x10/0x10 [ 313.974626][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.980405][ T8456] ? xfd_validate_state+0x5d/0x180 [ 313.985536][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.991285][ T8456] ? rcu_is_watching+0x12/0xc0 [ 313.996089][ T8456] __x64_sys_bpf+0x78/0xc0 [ 314.000589][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.006242][ T8456] ? lockdep_hardirqs_on+0x7c/0x110 [ 314.011536][ T8456] do_syscall_64+0xcd/0x260 [ 314.016082][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.022050][ T8456] RIP: 0033:0x7f6e9bd8d169 [ 314.026479][ T8456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.046186][ T8456] RSP: 002b:00007f6e99bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.054693][ T8456] RAX: ffffffffffffffda RBX: 00007f6e9bfa5fa0 RCX: 00007f6e9bd8d169 [ 314.063215][ T8456] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 000000000000001c [ 314.071761][ T8456] RBP: 00007f6e9be0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 314.079807][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.087818][ T8456] R13: 0000000000000000 R14: 00007f6e9bfa5fa0 R15: 00007fff0d50ed58 [ 314.095897][ T8456] [ 314.099007][ T8456] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 314.106295][ T8456] CPU: 1 UID: 0 PID: 8456 Comm: syz.5.847 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 314.117857][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.127928][ T8456] Call Trace: [ 314.131214][ T8456] [ 314.134143][ T8456] dump_stack_lvl+0x3d/0x1f0 [ 314.138767][ T8456] panic+0x71c/0x800 [ 314.142710][ T8456] ? __pfx_panic+0x10/0x10 [ 314.147176][ T8456] ? show_trace_log_lvl+0x29c/0x3c0 [ 314.152404][ T8456] ? dev_xdp_install+0x610/0x9b0 [ 314.157370][ T8456] check_panic_on_warn+0xab/0xb0 [ 314.162341][ T8456] __warn+0xf6/0x3c0 [ 314.166268][ T8456] ? dev_xdp_install+0x610/0x9b0 [ 314.171237][ T8456] report_bug+0x3c3/0x580 [ 314.175594][ T8456] ? dev_xdp_install+0x610/0x9b0 [ 314.180559][ T8456] handle_bug+0x184/0x210 [ 314.184929][ T8456] exc_invalid_op+0x17/0x50 [ 314.189449][ T8456] asm_exc_invalid_op+0x1a/0x20 [ 314.194329][ T8456] RIP: 0010:dev_xdp_install+0x610/0x9b0 [ 314.199919][ T8456] Code: 8d bc 24 28 0d 00 00 be ff ff ff ff e8 69 c5 26 02 31 ff 89 c5 89 c6 e8 0e af 81 f8 85 ed 0f 85 59 fb ff ff e8 d1 b3 81 f8 90 <0f> 0b 90 e9 4b fb ff ff e8 c3 b3 81 f8 49 8d bc 24 28 0d 00 00 be [ 314.219549][ T8456] RSP: 0018:ffffc9001f13f950 EFLAGS: 00010287 [ 314.225639][ T8456] RAX: 000000000000023c RBX: ffff888059e8ccbd RCX: ffffc9000da1b000 [ 314.233652][ T8456] RDX: 0000000000080000 RSI: ffffffff89395ebf RDI: 0000000000000005 [ 314.241635][ T8456] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 314.249636][ T8456] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888059e8c000 [ 314.257618][ T8456] R13: ffffffff870484d0 R14: ffffc9000ec3f000 R15: 0000000000000001 [ 314.265618][ T8456] ? __pfx_nsim_bpf+0x10/0x10 [ 314.270351][ T8456] ? dev_xdp_install+0x60f/0x9b0 [ 314.275323][ T8456] ? __pfx_nsim_bpf+0x10/0x10 [ 314.280016][ T8456] ? __pfx_dev_xdp_install+0x10/0x10 [ 314.285332][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.291006][ T8456] ? __pfx_nsim_bpf+0x10/0x10 [ 314.295695][ T8456] dev_xdp_attach+0x6d1/0x16a0 [ 314.300493][ T8456] ? __pfx_dev_xdp_attach+0x10/0x10 [ 314.305722][ T8456] bpf_xdp_link_attach+0x2c5/0x680 [ 314.310863][ T8456] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 314.316548][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.322211][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.327861][ T8456] ? find_held_lock+0x2b/0x80 [ 314.332574][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.338237][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.343891][ T8456] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 314.349821][ T8456] __sys_bpf+0x1bc7/0x4c80 [ 314.354267][ T8456] ? __pfx___sys_bpf+0x10/0x10 [ 314.359077][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.364755][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.370432][ T8456] ? do_futex+0x122/0x350 [ 314.374795][ T8456] ? __pfx_do_futex+0x10/0x10 [ 314.379510][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.385182][ T8456] ? xfd_validate_state+0x5d/0x180 [ 314.390312][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.395962][ T8456] ? rcu_is_watching+0x12/0xc0 [ 314.400778][ T8456] __x64_sys_bpf+0x78/0xc0 [ 314.405232][ T8456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.410885][ T8456] ? lockdep_hardirqs_on+0x7c/0x110 [ 314.416136][ T8456] do_syscall_64+0xcd/0x260 [ 314.420662][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.426567][ T8456] RIP: 0033:0x7f6e9bd8d169 [ 314.430989][ T8456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.450709][ T8456] RSP: 002b:00007f6e99bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.459141][ T8456] RAX: ffffffffffffffda RBX: 00007f6e9bfa5fa0 RCX: 00007f6e9bd8d169 [ 314.467120][ T8456] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 000000000000001c [ 314.475112][ T8456] RBP: 00007f6e9be0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 314.483107][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.491087][ T8456] R13: 0000000000000000 R14: 00007f6e9bfa5fa0 R15: 00007fff0d50ed58 [ 314.499100][ T8456] [ 314.502397][ T8456] Kernel Offset: disabled [ 314.506761][ T8456] Rebooting in 86400 seconds..