last executing test programs: 7m28.986688916s ago: executing program 4 (id=5): syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x84}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b000000a1"], 0x0}, 0x0) 7m26.152913421s ago: executing program 4 (id=25): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00'], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc000) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 7m25.126597761s ago: executing program 4 (id=30): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x104) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) close(r0) 7m24.224072693s ago: executing program 4 (id=37): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) rename(0x0, 0x0) 7m22.250154542s ago: executing program 32 (id=37): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) rename(0x0, 0x0) 14.080924372s ago: executing program 2 (id=2531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 6.921442787s ago: executing program 0 (id=2552): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1], 0x2c}}, 0x0) 6.237007145s ago: executing program 2 (id=2555): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 5.799433054s ago: executing program 3 (id=2557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005"], 0xe0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 5.680344203s ago: executing program 0 (id=2558): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f00000005c0)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {}, {@gid_ignore}, {@gid}, {@longad}]}, 0x5, 0xc32, &(0x7f0000000e00)="$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") r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000100037042a00"/20, @ANYRES32=r1, @ANYBLOB="83040500000000006c0012800900010069706970000000005c000280060012004e210000060010000f00000008000100", @ANYRES32, @ANYBLOB="05000a0001000000060010007f000000060011004e200000050004004b000000060011004e20000006000f00"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004082) 5.56023347s ago: executing program 5 (id=2559): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r1, @local, @loopback}}}], 0x18}}], 0x1, 0x0) 5.160416782s ago: executing program 1 (id=2560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x8, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 4.857711077s ago: executing program 3 (id=2561): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x74, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.767709403s ago: executing program 5 (id=2562): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) close(0x3) 4.139951059s ago: executing program 3 (id=2563): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgrcv(r0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x800) 3.82819675s ago: executing program 1 (id=2564): setregid(0xee00, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x0, &(0x7f00000001c0)) 3.810523221s ago: executing program 5 (id=2565): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f00000000c0)=""/55, 0x37) getdents64(r0, 0x0, 0x0) 3.670627654s ago: executing program 0 (id=2566): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000f00000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 3.50726265s ago: executing program 2 (id=2567): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setresuid(0xee01, 0xee00, 0x0) syz_mount_image$affs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x14880, &(0x7f0000000140)={[{@bs={'bs', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x1}}, {@setuid={'setuid', 0x3d, 0xee00}}, {@bs={'bs', 0x3d, 0x200}}, {@verbose}, {@setuid}, {@notruncate}]}, 0x1, 0x9e32, &(0x7f0000009e80)="$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") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000140)={0x0, 0x0}, 0x10) 3.08624163s ago: executing program 1 (id=2568): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="ac0200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100005800c000380080001"], 0x2ac}}, 0x0) 2.888953721s ago: executing program 0 (id=2569): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x9, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x0, 0xfffffffffffffffe, 0x40000000, 0x10000000000, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7c, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) sendto$inet6(r0, &(0x7f00000003c0)="f9", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @local, 0x9}, 0x1c) 2.835366249s ago: executing program 2 (id=2570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000001f40)={0x38, r1, 0x211, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1000, 0x0, 0x0, 0x1000, 0x8001]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xa35451fd3717669e}, 0x8000) 2.640275293s ago: executing program 3 (id=2571): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) mount_setattr(r1, &(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000200)={0x5}, 0x20) 2.216835753s ago: executing program 5 (id=2572): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x3c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) 1.997718446s ago: executing program 1 (id=2573): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000580)={0x0, 0x2, 0x2, 0x1, 0x0, [@local]}, 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x8, @private2}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1.658021605s ago: executing program 3 (id=2574): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r1, 0x4020940d, 0x0) 1.474073415s ago: executing program 2 (id=2575): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000005ac0)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f00000058c0)=ANY=[@ANYBLOB="cc0000001b0001002bbd7000fddbdf2500000000002400000400000000000001ac1414390000000000000000000000004e2200014e2400050200a0a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000007000000000000000600000000000000020000000000000007000000000000000c00000000000000a604000000000000060000000000000002000000000000000000000000000000f4fffffffffffffff2ffffffffffffff790a0000b26b6e00010101010000000005000000000000000a00100002"], 0xcc}, 0x1, 0x0, 0x0, 0x44040}, 0x20000004) 1.420123386s ago: executing program 0 (id=2576): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x60) ftruncate(r0, 0x7) 1.051399763s ago: executing program 1 (id=2577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) recvmmsg(r0, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)=""/4100, 0x1004}, {&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f0000001800)=""/137, 0x89}, {&(0x7f00000003c0)=""/148, 0x94}], 0x5}, 0x4}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 917.835189ms ago: executing program 5 (id=2578): r0 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x11, r0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1008, 0x0, 0x13, r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x100000) 517.055508ms ago: executing program 3 (id=2579): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d3030303030303030303030303030303030302c6e6c733d64656661756c742c747970653df268d6512c756d61736b3d30303030303030303030303030303030303030363734352c000000000000"], 0x3, 0x6b2, &(0x7f0000000280)="$eJzs3U+IHFkdB/BvdSY96QjZ2X/ZKEKGDSy6wWQmzZoIwkYRySFI0Mteh2SyGTLJLpNZyS5iOuoqePIke/CwIvGwIoiIsJ4W17MgePGUe8CbhxzUkfrTMz0znUlPkpkedz8fqK73+r1671e/VFV3V2foAJ9a517L/l6KnDt+/mZZv3unu3j3Tvdav5xkMkkrmahXKTpJ8XFyNvWSz5ZPNsMVD5rnlXsfFhPvfdCtaxPNUvVvbbXdJkN79pIDq5V9Sabr4r9HHnbTeNVSjXNxbbxHVKzGXSbsWD9xMG4rm/TWGlsP3Xz08xbYs27Vr5ubTCUHU7+6lu8D0lwdHn5lGIfOutqW16beTscCAAAAO2/oZ/lBT93P/dzMod0JBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Zivo3A4tmafXL0yn6v//fHvhN/faYw31M716uVt9+atyBAAAAAAAAAMBjOXo/93Mzh/r1laL6zv/FqvJc9fiZvJUbmc9STuRm5rKc5SxlNsnUwEDtm3PLy0uzm7f8ecotV1ZWbjVbnhq65an1cfU2Bjrsfxps6gQAAAAAAAAAn1o/yLm17/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAvKJJ99apanuuXp9KaSHIgSbuYXu3eHmuwj6UO/aNxhwEAAAC751Dx37qwUlSf+Q9Xn/sP5K1cz3IWspzFzOdSdS+g/ujc+luvu3j3TvdauWwe8Gv/3Nb81Yip7z0Mn3mm6vH86hbn8s18J8cznQtZykK+m7ksZz7T+UZVmkuRqebuxdTdO530Y90c79l1tQsbYzs6UC7jO1JF0snlLFSxncjFdj/0VtPvyMBsf2wnG2a8XWaneLUxYo4uNetyj37WrPeGqWrP969mZKbJfZmNpwfzvjn32zxONs40m9bqPajn1mYpqxtneqScH2zWu5Drbd5KW5+J3k/LWv/oO7x1zpMv/v3PF660rl+9cvnG8b1zGD2ijcdEdyATL4yUicUyE73HyMSBx4n/yWk32aivotu7Wr5YbXsoC/lW3silzOd0ZjKbM5nJV3Iq3ZwayOvzW+e1Otda2zvXjn2hKXSS/KRZ76rJBzWUeX16IK+DV7qpqm3wmbUsPTNClop2hmfpH0NDmfhcUyjn+OHAK874bczE7EAmnt06E7/8z0qSG4vXry5dmXtzxPleatblafvu+mv0r57IDm1fs7vl8fJM+Y9VVn6cdUdH2fZsv21DvtrNNy4TzWDr2tqpzue67WFnajnS4dvDRqrbXhg6S7dqOzLQtu5dTt7I4uq7EAD2rFYOvnyw3bnX+Wvn/c6POlc65w98ffLM5Ofb2f+XiT/t+13r162vFi/n/Xw/h8YdKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBLcePudq3OLi/NLe7CQ1gidf5vRB7w9tKmfivqZ9k7vVz3ZR78Ze3qfaKF/IE1udUT9PskW47THEXwnyc5OcXS0zpnYhV2ezJCm86vPdJLWajxJru6RH7gDdsLJ5Wtvnrzx9jtfWrg29/r86/PXT505/erp7pdnb528vLA4P1M/jjtKYCdsfF8KAAAAAAAAAAAA7H278VcWQ6YtemPYVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/07nXsr+XIrMzJ2bK+t073cVy6ZfXek4kaSUpvpcUHydnUy+ZGhiueNA8r9z78BcvvfdBd22siX7/1obt/vCvlZVt7kWvWTKdZF+zfrjJkca7ODBeb5uB1YrVPSwTdqyfOBi3/wUAAP//0koEbg==") rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 377.63575ms ago: executing program 0 (id=2580): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x19) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x7f, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 279.998789ms ago: executing program 2 (id=2581): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000a40)="2abfe1a934d5", 0x52, 0x1) fchown(r0, 0x0, 0xee01) 180.529436ms ago: executing program 5 (id=2582): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 0s ago: executing program 1 (id=2583): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) kernel console output (not intermixed with test programs): 7.711385][ T11] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 387.839745][ T11] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 388.051822][ T5875] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 388.115334][ T11] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 388.123490][ T11] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 388.160160][ T11] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -71 [ 388.190862][ T11] usb 6-1: USB disconnect, device number 7 [ 388.241314][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 388.259308][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.270881][ T5875] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 388.280214][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.298102][ T5875] usb 4-1: config 0 descriptor?? [ 388.795839][ T5875] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 388.977228][ T8765] veth0_to_team: entered promiscuous mode [ 389.192522][ T11] usb 4-1: USB disconnect, device number 11 [ 389.411988][ T5875] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 389.631900][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.643231][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.653416][ T5875] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 389.665339][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.757084][ T5875] usb 2-1: config 0 descriptor?? [ 389.826812][ T8779] loop5: detected capacity change from 0 to 512 [ 389.851681][ T8779] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 389.893948][ T8781] team0: Device gtp0 is of different type [ 390.043490][ T8779] EXT4-fs (loop5): 1 truncate cleaned up [ 390.052930][ T8779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.185480][ T30] audit: type=1800 audit(2000000190.980:89): pid=8779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1151" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 390.245911][ T5875] usbhid 2-1:0.0: can't add hid device: -71 [ 390.252909][ T5875] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 390.312626][ T5875] usb 2-1: USB disconnect, device number 13 [ 390.432191][ T8237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.661775][ T8794] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 390.669674][ T8794] ALSA: mixer_oss: invalid OSS volume 'Â' [ 391.076421][ T8798] loop3: detected capacity change from 0 to 1024 [ 391.098473][ T8798] EXT4-fs: Ignoring removed nobh option [ 391.104827][ T8798] EXT4-fs: Ignoring removed bh option [ 391.125000][ T8802] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1158'. [ 391.134625][ T8802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1158'. [ 391.203456][ T8798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.488695][ T8808] veth0_to_team: entered promiscuous mode [ 392.033328][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.151564][ T5170] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 392.335518][ T5170] usb 6-1: Using ep0 maxpacket: 16 [ 392.377879][ T5170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.389558][ T5170] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 392.399828][ T5170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.406605][ T8822] loop3: detected capacity change from 0 to 512 [ 392.438457][ T5170] usb 6-1: config 0 descriptor?? [ 392.449160][ T8822] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 392.574005][ T8822] EXT4-fs (loop3): 1 truncate cleaned up [ 392.581920][ T8822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.714216][ T30] audit: type=1800 audit(2000000193.510:90): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1166" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 392.947936][ T5170] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 392.972029][ T5874] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 393.018457][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.173873][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.185639][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.195752][ T5874] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 393.205209][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.333969][ T5874] usb 1-1: config 0 descriptor?? [ 393.379127][ T11] usb 6-1: USB disconnect, device number 8 [ 393.628346][ T8837] loop1: detected capacity change from 0 to 8 [ 393.656051][ T8831] loop2: detected capacity change from 0 to 8192 [ 393.711956][ T8831] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 393.789475][ T5874] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 393.797048][ T5874] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 393.804252][ T5874] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 393.811411][ T5874] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 393.818430][ T5874] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 393.830080][ T5874] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 393.838167][ T5874] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 393.881702][ T5874] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 394.196021][ T5874] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 394.203911][ T5874] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 394.295487][ T5874] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -71 [ 394.344413][ T5874] usb 1-1: USB disconnect, device number 9 [ 394.693719][ T8850] loop2: detected capacity change from 0 to 512 [ 394.729905][ T8850] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 394.854600][ T8850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.868430][ T8850] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.040396][ T8850] EXT4-fs (loop2): shut down requested (1) [ 395.182295][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.204963][ T8883] input: syz0 as /devices/virtual/input/input14 [ 396.660810][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 397.183349][ T8899] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1206'. [ 398.426880][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1217'. [ 398.818265][ T8937] loop3: detected capacity change from 0 to 8 [ 398.825528][ T8932] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1220'. [ 400.809733][ T8971] loop2: detected capacity change from 0 to 4096 [ 400.916415][ T8980] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.995264][ T8969] syz.2.1240: attempt to access beyond end of device [ 400.995264][ T8969] loop2: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 401.009894][ T8969] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1) [ 402.441924][ T5874] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 402.646970][ T5874] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 402.659619][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.705509][ T5874] usb 6-1: config 0 descriptor?? [ 402.756835][ T5874] cp210x 6-1:0.0: cp210x converter detected [ 403.000457][ T9014] loop3: detected capacity change from 0 to 4096 [ 403.144826][ T9023] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 403.315438][ T9013] syz.3.1259: attempt to access beyond end of device [ 403.315438][ T9013] loop3: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 403.330291][ T9013] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 403.403765][ T5874] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 403.412106][ T5874] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 403.446811][ T5874] usb 6-1: cp210x converter now attached to ttyUSB0 [ 403.508786][ T5874] usb 6-1: USB disconnect, device number 9 [ 403.542694][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 403.555089][ T5874] cp210x 6-1:0.0: device disconnected [ 404.257690][ T9035] loop2: detected capacity change from 0 to 128 [ 404.829853][ T9044] loop5: detected capacity change from 0 to 512 [ 404.950144][ T9044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.963867][ T9044] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 405.227327][ T30] audit: type=1800 audit(2000000206.000:91): pid=9044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1273" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 405.485156][ T8237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.072359][ T5170] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 406.110637][ T9067] loop2: detected capacity change from 0 to 512 [ 406.197776][ T9062] loop5: detected capacity change from 0 to 4096 [ 406.247136][ T9062] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 406.294442][ T5170] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 406.304422][ T5170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.351757][ T5170] usb 2-1: config 0 descriptor?? [ 406.366869][ T5170] cp210x 2-1:0.0: cp210x converter detected [ 406.432736][ T9062] ntfs3(loop5): ino=19, mi_enum_attr [ 406.441354][ T9062] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 407.022712][ T5170] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 407.030804][ T5170] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 407.055968][ T5170] usb 2-1: cp210x converter now attached to ttyUSB0 [ 407.087014][ T5170] usb 2-1: USB disconnect, device number 14 [ 407.133745][ T5170] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 407.143920][ T5170] cp210x 2-1:0.0: device disconnected [ 407.757832][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1293'. [ 408.854330][ T9104] loop2: detected capacity change from 0 to 4096 [ 408.894956][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.901735][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.983239][ T9104] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 409.278418][ T9104] ntfs3(loop2): ino=19, mi_enum_attr [ 409.284439][ T9104] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 409.831672][ T5875] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 410.036293][ T5875] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 410.048672][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.112703][ T5875] usb 4-1: config 0 descriptor?? [ 410.171097][ T5875] cp210x 4-1:0.0: cp210x converter detected [ 410.748805][ T9141] loop1: detected capacity change from 0 to 1764 [ 410.792416][ T5875] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 410.800386][ T5875] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 410.862184][ T5875] usb 4-1: cp210x converter now attached to ttyUSB0 [ 410.896772][ T5875] usb 4-1: USB disconnect, device number 12 [ 410.953084][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 410.962138][ T5875] cp210x 4-1:0.0: device disconnected [ 411.716441][ T9159] loop5: detected capacity change from 0 to 256 [ 411.778631][ T9159] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 411.855394][ T9159] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 411.937881][ T30] audit: type=1800 audit(2000000212.730:92): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1323" name="bus" dev="loop5" ino=1048662 res=0 errno=0 [ 411.961465][ T30] audit: type=1804 audit(2000000212.730:93): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1323" name="/newroot/61/file0/bus" dev="loop5" ino=1048662 res=1 errno=0 [ 412.526953][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'. [ 412.536406][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'. [ 412.675536][ T9180] netlink: 'syz.2.1342': attribute type 8 has an invalid length. [ 413.321627][ T9192] loop3: detected capacity change from 0 to 1024 [ 413.402776][ T9196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1339'. [ 413.607683][ T35] hfsplus: b-tree write err: -5, ino 4 [ 413.954193][ T9206] Falling back ldisc for ptm0. [ 414.245324][ T9212] netlink: 'syz.0.1347': attribute type 8 has an invalid length. [ 414.281954][ T9211] loop2: detected capacity change from 0 to 512 [ 414.338248][ T9211] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 414.421669][ T9211] EXT4-fs (loop2): 1 truncate cleaned up [ 414.429396][ T9211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.465948][ T9219] program syz.1.1351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.554873][ T9211] netlink: 'syz.2.1348': attribute type 16 has an invalid length. [ 414.564618][ T9211] netlink: 'syz.2.1348': attribute type 3 has an invalid length. [ 414.572863][ T9211] netlink: 51730 bytes leftover after parsing attributes in process `syz.2.1348'. [ 414.671982][ C1] sd 0:0:1:0: [sda] tag#3607 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 414.683053][ C1] sd 0:0:1:0: [sda] tag#3607 CDB: Write(6) 0a 00 00 00 00 00 [ 414.787091][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.129022][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1356'. [ 415.224464][ T9236] program syz.0.1367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.442038][ C1] sd 0:0:1:0: [sda] tag#3613 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 415.452975][ C1] sd 0:0:1:0: [sda] tag#3613 CDB: Write(6) 0a 00 00 00 00 00 [ 415.467168][ T9229] loop3: detected capacity change from 0 to 8192 [ 415.476479][ T9229] msdos: Unknown parameter 'A' [ 415.933830][ T9247] loop1: detected capacity change from 0 to 128 [ 416.049518][ T9247] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.102399][ T9247] ext4 filesystem being mounted at /273/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 416.397777][ T9258] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96 [ 416.566551][ T5825] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.003008][ T9267] loop5: detected capacity change from 0 to 512 [ 417.190206][ T9267] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1369: bg 0: block 248: padding at end of block bitmap is not set [ 417.242701][ T9267] Quota error (device loop5): write_blk: dquota write failed [ 417.250692][ T9267] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 417.261055][ T9267] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1369: Failed to acquire dquot type 1 [ 417.289649][ T9274] program syz.2.1373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.342172][ T9267] EXT4-fs (loop5): 1 truncate cleaned up [ 417.349910][ T9267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.363465][ T9267] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 417.434652][ C1] sd 0:0:1:0: [sda] tag#3620 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 417.445681][ C1] sd 0:0:1:0: [sda] tag#3620 CDB: Write(6) 0a 00 00 00 00 00 [ 417.689533][ T8237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.832261][ T9285] loop2: detected capacity change from 0 to 256 [ 417.864690][ T9285] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 417.909509][ T9285] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 417.980730][ T30] audit: type=1800 audit(2000000218.770:94): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1379" name="bus" dev="loop2" ino=1048663 res=0 errno=0 [ 418.003903][ T30] audit: type=1804 audit(2000000218.770:95): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1379" name="/newroot/271/file0/bus" dev="loop2" ino=1048663 res=1 errno=0 [ 418.041581][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 418.211605][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 418.257344][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.268827][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 418.275982][ T24] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 418.285485][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.367664][ T24] usb 1-1: config 0 descriptor?? [ 418.544885][ T9299] loop3: detected capacity change from 0 to 256 [ 418.772923][ T9299] FAT-fs (loop3): Directory bread(block 64) failed [ 418.779822][ T9299] FAT-fs (loop3): Directory bread(block 65) failed [ 418.786902][ T9299] FAT-fs (loop3): Directory bread(block 66) failed [ 418.794665][ T9299] FAT-fs (loop3): Directory bread(block 67) failed [ 418.802141][ T9299] FAT-fs (loop3): Directory bread(block 68) failed [ 418.808848][ T9299] FAT-fs (loop3): Directory bread(block 69) failed [ 418.819276][ T9299] FAT-fs (loop3): Directory bread(block 70) failed [ 418.826200][ T9299] FAT-fs (loop3): Directory bread(block 71) failed [ 418.833206][ T9299] FAT-fs (loop3): Directory bread(block 72) failed [ 418.839910][ T9299] FAT-fs (loop3): Directory bread(block 73) failed [ 418.892314][ T24] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 418.900094][ T24] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 418.907951][ T24] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 418.917041][ T24] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 418.925321][ T24] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 419.013260][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 419.028879][ T24] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 419.247854][ T24] usb 1-1: USB disconnect, device number 10 [ 420.046136][ T9318] loop1: detected capacity change from 0 to 256 [ 420.097257][ T9318] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 420.214406][ T9318] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 420.328320][ T30] audit: type=1800 audit(2000000221.110:96): pid=9318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1393" name="bus" dev="loop1" ino=1048664 res=0 errno=0 [ 420.351666][ T30] audit: type=1804 audit(2000000221.120:97): pid=9318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1393" name="/newroot/280/file0/bus" dev="loop1" ino=1048664 res=1 errno=0 [ 420.607663][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'. [ 421.460605][ T5875] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 421.527054][ T9345] loop2: detected capacity change from 0 to 8192 [ 421.544106][ T9345] msdos: Unknown parameter 'A' [ 421.610014][ T5876] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 421.676091][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.689955][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.700236][ T5875] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 421.709654][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.759536][ T5875] usb 4-1: config 0 descriptor?? [ 421.784643][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 421.826252][ T5876] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.837625][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0 [ 421.844594][ T5876] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 421.854024][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.933486][ T5876] usb 2-1: config 0 descriptor?? [ 422.305248][ T5875] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 422.313121][ T5875] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 422.320965][ T5875] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 422.328755][ T5875] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 422.336656][ T5875] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 422.412738][ T5875] playstation 0003:054C:0DF2.0011: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 422.515437][ T5876] nzxt-smart2 0003:1E71:2009.0012: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 422.708140][ T5875] playstation 0003:054C:0DF2.0011: Failed to retrieve feature with reportID 32: -71 [ 422.722960][ T5875] playstation 0003:054C:0DF2.0011: Failed to retrieve DualSense firmware info: -71 [ 422.732969][ T5875] playstation 0003:054C:0DF2.0011: Failed to get firmware info from DualSense [ 422.742280][ T5875] playstation 0003:054C:0DF2.0011: Failed to create dualsense. [ 422.760743][ T5875] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -71 [ 422.865690][ T11] usb 2-1: USB disconnect, device number 15 [ 422.907695][ T5875] usb 4-1: USB disconnect, device number 13 [ 424.022727][ T5876] IPVS: starting estimator thread 0... [ 424.045184][ T9387] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 424.123068][ T9388] IPVS: using max 240 ests per chain, 12000 per kthread [ 424.478475][ T9394] loop2: detected capacity change from 0 to 1024 [ 424.661593][ T9394] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 424.668490][ T9394] hfsplus: xattr searching failed [ 424.853825][ T5875] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 424.919292][ T9404] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 425.053552][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.067223][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.078550][ T5875] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 425.088266][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.118758][ T5875] usb 1-1: config 0 descriptor?? [ 425.183095][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 425.371672][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 425.403984][ T24] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.415407][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 425.422569][ T24] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 425.432154][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.501027][ T24] usb 4-1: config 0 descriptor?? [ 425.575639][ T5875] hid_parser_main: 5 callbacks suppressed [ 425.575737][ T5875] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 425.590204][ T5875] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 425.598085][ T5875] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 425.606254][ T5875] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 425.614081][ T5875] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 425.760463][ T5875] playstation 0003:054C:0DF2.0013: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 425.979486][ T24] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 425.987609][ T24] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 425.996987][ T24] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 426.006381][ T24] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 426.010335][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1436'. [ 426.017703][ T24] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 426.039654][ T5875] playstation 0003:054C:0DF2.0013: Failed to retrieve feature with reportID 32: -71 [ 426.049982][ T5875] playstation 0003:054C:0DF2.0013: Failed to retrieve DualSense firmware info: -71 [ 426.059786][ T5875] playstation 0003:054C:0DF2.0013: Failed to get firmware info from DualSense [ 426.069903][ T5875] playstation 0003:054C:0DF2.0013: Failed to create dualsense. [ 426.088858][ T24] nzxt-smart2 0003:1E71:2009.0014: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 426.174751][ T5875] playstation 0003:054C:0DF2.0013: probe with driver playstation failed with error -71 [ 426.303400][ T5875] usb 1-1: USB disconnect, device number 11 [ 426.393324][ T11] usb 4-1: USB disconnect, device number 14 [ 427.257316][ T9436] loop1: detected capacity change from 0 to 64 [ 427.377267][ T30] audit: type=1800 audit(2000000228.160:98): pid=9436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1446" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 428.162034][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 428.369977][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.381607][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.391856][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 428.401109][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.503748][ T24] usb 3-1: config 0 descriptor?? [ 428.692532][ T5876] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 428.879667][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 428.926571][ T5876] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.938230][ T5876] usb 6-1: config 0 interface 0 has no altsetting 0 [ 428.945955][ T5876] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 428.956233][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.016598][ T24] playstation 0003:054C:0DF2.0015: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 429.060481][ T5876] usb 6-1: config 0 descriptor?? [ 429.393749][ T24] playstation 0003:054C:0DF2.0015: Failed to retrieve feature with reportID 32: -71 [ 429.403832][ T24] playstation 0003:054C:0DF2.0015: Failed to retrieve DualSense firmware info: -71 [ 429.413848][ T24] playstation 0003:054C:0DF2.0015: Failed to get firmware info from DualSense [ 429.424376][ T24] playstation 0003:054C:0DF2.0015: Failed to create dualsense. [ 429.524732][ T24] playstation 0003:054C:0DF2.0015: probe with driver playstation failed with error -71 [ 429.572643][ T5876] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 429.610267][ T24] usb 3-1: USB disconnect, device number 10 [ 430.013406][ T11] usb 6-1: USB disconnect, device number 10 [ 431.412346][ T9511] loop5: detected capacity change from 0 to 512 [ 431.446886][ T9511] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 431.482658][ T9511] EXT4-fs (loop5): shut down requested (1) [ 431.557781][ T9518] netlink: 'syz.3.1485': attribute type 6 has an invalid length. [ 431.652417][ T9518] netlink: 'syz.3.1485': attribute type 6 has an invalid length. [ 431.706863][ T8237] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 432.211045][ T9531] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 432.431753][ T11] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 432.643459][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 432.671811][ T11] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.683103][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 432.689974][ T11] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 432.699358][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.818700][ T11] usb 3-1: config 0 descriptor?? [ 433.288899][ T11] hid_parser_main: 10 callbacks suppressed [ 433.289001][ T11] nzxt-smart2 0003:1E71:2009.0017: unknown main item tag 0x0 [ 433.303446][ T11] nzxt-smart2 0003:1E71:2009.0017: unknown main item tag 0x0 [ 433.311092][ T11] nzxt-smart2 0003:1E71:2009.0017: unknown main item tag 0x0 [ 433.319030][ T11] nzxt-smart2 0003:1E71:2009.0017: unknown main item tag 0x0 [ 433.332388][ T11] nzxt-smart2 0003:1E71:2009.0017: unknown main item tag 0x0 [ 433.405398][ T11] nzxt-smart2 0003:1E71:2009.0017: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 433.651451][ T9550] netlink: 'syz.1.1499': attribute type 6 has an invalid length. [ 433.679420][ T9550] netlink: 'syz.1.1499': attribute type 6 has an invalid length. [ 433.742417][ T24] usb 3-1: USB disconnect, device number 11 [ 434.027397][ T9552] loop3: detected capacity change from 0 to 256 [ 434.131076][ T9552] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010272, chksum : 0x693c94a4, utbl_chksum : 0xe619d30d) [ 434.145273][ T9552] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 434.590318][ T30] audit: type=1326 audit(2000000235.380:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.3.1504" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708e539 code=0x0 [ 434.808093][ T9555] loop5: detected capacity change from 0 to 8192 [ 434.832298][ T9568] netlink: 'syz.2.1507': attribute type 10 has an invalid length. [ 434.851455][ T9568] team0: Cannot enslave team device to itself [ 435.681347][ T9583] netlink: 'syz.5.1513': attribute type 6 has an invalid length. [ 435.720858][ T9583] netlink: 'syz.5.1513': attribute type 6 has an invalid length. [ 435.812471][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1523'. [ 436.331642][ T9596] loop3: detected capacity change from 0 to 256 [ 436.591608][ T9600] loop1: detected capacity change from 0 to 64 [ 436.618219][ T9596] FAT-fs (loop3): Directory bread(block 64) failed [ 436.625869][ T9596] FAT-fs (loop3): Directory bread(block 65) failed [ 436.633851][ T9596] FAT-fs (loop3): Directory bread(block 66) failed [ 436.640555][ T9596] FAT-fs (loop3): Directory bread(block 67) failed [ 436.647952][ T9596] FAT-fs (loop3): Directory bread(block 68) failed [ 436.654863][ T9596] FAT-fs (loop3): Directory bread(block 69) failed [ 436.663413][ T9596] FAT-fs (loop3): Directory bread(block 70) failed [ 436.670204][ T9596] FAT-fs (loop3): Directory bread(block 71) failed [ 436.677575][ T9596] FAT-fs (loop3): Directory bread(block 72) failed [ 436.684433][ T9596] FAT-fs (loop3): Directory bread(block 73) failed [ 437.754913][ T9616] netlink: 'syz.2.1527': attribute type 6 has an invalid length. [ 437.792488][ T9616] netlink: 'syz.2.1527': attribute type 6 has an invalid length. [ 437.902841][ T9619] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1528'. [ 438.600118][ T9629] loop5: detected capacity change from 0 to 256 [ 438.787370][ T9629] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010272, chksum : 0x693c94a4, utbl_chksum : 0xe619d30d) [ 438.801722][ T9629] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 440.022397][ T9656] loop7: detected capacity change from 0 to 7 [ 440.030945][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.040366][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 440.075562][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.085247][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 440.112799][ T11] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 440.122274][ T9658] Invalid logical block size (6) [ 440.129637][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.139278][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 440.154088][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.163530][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 440.179466][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.189005][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 440.201434][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.210863][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 440.221431][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.230864][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 440.244061][ T9656] ldm_validate_partition_table(): Disk read failed. [ 440.253721][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.263199][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 440.272590][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.282075][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 440.290975][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.300496][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 440.310481][ T9656] Dev loop7: unable to read RDB block 0 [ 440.347930][ T9656] loop7: unable to read partition table [ 440.355123][ T9656] loop7: partition table beyond EOD, truncated [ 440.361721][ T9656] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 440.375956][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 440.387066][ T11] usb 2-1: config 0 interface 0 has no altsetting 0 [ 440.403244][ T11] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 440.412718][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.422945][ T11] usb 2-1: Product: syz [ 440.427302][ T11] usb 2-1: Manufacturer: syz [ 440.432751][ T11] usb 2-1: SerialNumber: syz [ 440.504123][ T11] usb 2-1: config 0 descriptor?? [ 440.970227][ T11] gs_usb 2-1:0.0: Configuring for 2 interfaces [ 441.376144][ T11] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 441.444112][ T11] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 441.564354][ T11] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 441.624766][ T11] usb 2-1: USB disconnect, device number 16 [ 441.692402][ T9684] binder: 9681:9684 ioctl c0306201 800002c0 returned -14 [ 441.861696][ T5875] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 442.051811][ T5875] usb 6-1: Using ep0 maxpacket: 16 [ 442.097538][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.109621][ T5875] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 442.121538][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.140625][ T5875] usb 6-1: config 0 descriptor?? [ 442.228354][ T9696] loop7: detected capacity change from 0 to 7 [ 442.293119][ T9696] ldm_validate_partition_table(): Disk read failed. [ 442.373324][ T9698] Invalid logical block size (6) [ 442.402522][ T9696] Dev loop7: unable to read RDB block 0 [ 442.489475][ T9696] loop7: unable to read partition table [ 442.497782][ T9696] loop7: partition table beyond EOD, truncated [ 442.504563][ T9696] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 442.649971][ T5875] hid-led 0003:1D34:000A.0018: ignoring exceeding usage max [ 442.821370][ T30] audit: type=1326 audit(2000000243.600:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 442.822945][ T5875] hid-led 0003:1D34:000A.0018: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.5-1/input0 [ 442.859997][ T5875] hid-led 0003:1D34:000A.0018: Dream Cheeky Webmail Notifier initialized [ 442.907893][ T30] audit: type=1326 audit(2000000243.660:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 442.930830][ T30] audit: type=1326 audit(2000000243.660:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 442.953683][ T30] audit: type=1326 audit(2000000243.660:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 442.977741][ T30] audit: type=1326 audit(2000000243.660:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 443.002729][ T30] audit: type=1326 audit(2000000243.700:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 443.025347][ T30] audit: type=1326 audit(2000000243.700:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 443.047993][ T30] audit: type=1326 audit(2000000243.710:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 443.070294][ T30] audit: type=1326 audit(2000000243.720:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 443.184458][ T5875] usb 6-1: USB disconnect, device number 11 [ 443.413060][ T9714] binder: 9713:9714 ioctl c0306201 800002c0 returned -14 [ 443.722180][ T9718] Driver unsupported XDP return value 0 on prog (id 159) dev N/A, expect packet loss! [ 443.959516][ T9723] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1576'. [ 444.392280][ T5875] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 444.510314][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 444.571988][ T5875] usb 6-1: Using ep0 maxpacket: 32 [ 444.618510][ T5875] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 444.628211][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.673426][ T5875] usb 6-1: config 0 descriptor?? [ 444.951724][ T5875] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 444.972700][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 445.003938][ T5875] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 445.011720][ T5875] usb 6-1: media controller created [ 445.082249][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.124046][ T9743] bridge0: port 3(syz_tun) entered blocking state [ 445.132376][ T9743] bridge0: port 3(syz_tun) entered disabled state [ 445.139441][ T9743] syz_tun: entered allmulticast mode [ 445.148057][ T9743] syz_tun: entered promiscuous mode [ 445.155530][ T9743] bridge0: port 3(syz_tun) entered blocking state [ 445.162481][ T9743] bridge0: port 3(syz_tun) entered forwarding state [ 445.261898][ T5875] az6027: usb out operation failed. (-71) [ 445.276639][ T5875] az6027: usb out operation failed. (-71) [ 445.282940][ T5875] stb0899_attach: Driver disabled by Kconfig [ 445.289158][ T5875] az6027: no front-end attached [ 445.289158][ T5875] [ 445.319131][ T5875] az6027: usb out operation failed. (-71) [ 445.325694][ T5875] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 445.338521][ T5875] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 445.377192][ T5875] dvb-usb: schedule remote query interval to 400 msecs. [ 445.388763][ T5875] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 445.401452][ T5875] usb 6-1: USB disconnect, device number 12 [ 445.663391][ T5875] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 445.871411][ T11] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 446.050601][ T9754] netlink: 22 bytes leftover after parsing attributes in process `syz.5.1591'. [ 446.061816][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 446.076860][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.089017][ T11] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 446.098938][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.175104][ T11] usb 3-1: config 0 descriptor?? [ 446.682696][ T11] hid-led 0003:1D34:000A.0019: ignoring exceeding usage max [ 446.798285][ T9766] 9p: Unknown access argument ÿÿ: -22 [ 446.840357][ T11] hid-led 0003:1D34:000A.0019: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 446.856624][ T11] hid-led 0003:1D34:000A.0019: Dream Cheeky Webmail Notifier initialized [ 447.103411][ T11] usb 3-1: USB disconnect, device number 12 [ 447.777460][ T30] audit: type=1326 audit(2000000248.570:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.5.1607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 447.882034][ T30] audit: type=1326 audit(2000000248.610:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.5.1607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 447.905659][ T30] audit: type=1326 audit(2000000248.610:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.5.1607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 447.929501][ T30] audit: type=1326 audit(2000000248.610:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.5.1607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 447.952105][ T30] audit: type=1326 audit(2000000248.640:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.5.1607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 447.974653][ T30] audit: type=1326 audit(2000000248.640:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.5.1607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 447.997812][ T30] audit: type=1326 audit(2000000248.640:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.5.1607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 448.020543][ T30] audit: type=1326 audit(2000000248.640:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.5.1607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 448.044058][ T30] audit: type=1326 audit(2000000248.640:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.5.1607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 448.066781][ T30] audit: type=1326 audit(2000000248.640:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.5.1607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 448.177021][ T9790] loop2: detected capacity change from 0 to 512 [ 448.233236][ T9790] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 448.240816][ T9790] UDF-fs: Scanning with blocksize 512 failed [ 448.279318][ T9790] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 448.287397][ T9790] UDF-fs: Scanning with blocksize 1024 failed [ 448.308923][ T9790] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 448.317496][ T9790] UDF-fs: Scanning with blocksize 2048 failed [ 448.342790][ T9790] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 448.420463][ T9790] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 448.917403][ T9804] 9p: Unknown access argument ÿÿ: -22 [ 449.281791][ T11] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 449.487418][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 449.497110][ T9814] 9p: Unknown access argument ÿÿ: -22 [ 449.538243][ T11] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 449.548175][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.556479][ T11] usb 2-1: Product: syz [ 449.560805][ T11] usb 2-1: Manufacturer: syz [ 449.565752][ T11] usb 2-1: SerialNumber: syz [ 449.652506][ T11] usb 2-1: config 0 descriptor?? [ 449.666768][ T11] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 449.897427][ T11] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 449.905910][ T11] visor 2-1:0.0: probe with driver visor failed with error -71 [ 449.972903][ T11] usb 2-1: USB disconnect, device number 17 [ 452.173657][ T24] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 452.255593][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 452.431011][ T24] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 452.443435][ T24] usb 4-1: config 0 has no interface number 0 [ 452.483573][ T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 452.493259][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.502659][ T24] usb 4-1: Product: syz [ 452.507020][ T24] usb 4-1: Manufacturer: syz [ 452.512384][ T24] usb 4-1: SerialNumber: syz [ 452.559907][ T24] usb 4-1: config 0 descriptor?? [ 452.598918][ T30] audit: type=1326 audit(2000000253.390:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9870 comm="syz.0.1642" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 452.681475][ T9871] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1643'. [ 452.997277][ T24] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 453.006341][ T24] usb 4-1: Firmware version (0.0) predates our first public release. [ 453.015989][ T24] usb 4-1: Please update to version 0.2 or newer [ 453.326455][ T24] usb 4-1: USB disconnect, device number 15 [ 454.389350][ T35] wlan1: Trigger new scan to find an IBSS to join [ 454.711417][ T11] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 454.897052][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 454.916798][ T11] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 454.926745][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.973664][ T11] usb 1-1: config 0 descriptor?? [ 455.273369][ T11] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 455.307226][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 455.344308][ T11] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 455.352981][ T11] usb 1-1: media controller created [ 455.434365][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.520711][ T11] az6027: usb out operation failed. (-71) [ 455.528224][ T11] az6027: usb out operation failed. (-71) [ 455.534815][ T11] stb0899_attach: Driver disabled by Kconfig [ 455.540939][ T11] az6027: no front-end attached [ 455.540939][ T11] [ 455.594002][ T11] az6027: usb out operation failed. (-71) [ 455.599931][ T11] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 455.609695][ T11] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 455.653243][ T11] dvb-usb: schedule remote query interval to 400 msecs. [ 455.662941][ T11] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 455.704161][ T11] usb 1-1: USB disconnect, device number 12 [ 455.927417][ T11] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 456.385913][ T35] wlan1: Trigger new scan to find an IBSS to join [ 456.646332][ T9943] loop1: detected capacity change from 0 to 64 [ 456.806717][ T9943] Trying to free block not in datazone [ 456.812924][ T9943] Trying to free block not in datazone [ 456.824703][ T9943] Trying to free block not in datazone [ 457.014632][ T9949] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1677'. [ 457.157558][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 457.425927][ T4380] wlan1: Trigger new scan to find an IBSS to join [ 458.281670][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 458.462768][ T35] wlan1: Trigger new scan to find an IBSS to join [ 458.482049][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 458.505977][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 458.515930][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.525493][ T24] usb 4-1: Product: syz [ 458.529832][ T24] usb 4-1: Manufacturer: syz [ 458.534865][ T24] usb 4-1: SerialNumber: syz [ 458.680780][ T24] usb 4-1: config 0 descriptor?? [ 458.737115][ T24] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 458.953130][ T24] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 458.961079][ T24] visor 4-1:0.0: probe with driver visor failed with error -71 [ 458.976299][ T9992] netlink: 'syz.0.1698': attribute type 28 has an invalid length. [ 459.024775][ T24] usb 4-1: USB disconnect, device number 16 [ 459.427608][ T1135] wlan1: Trigger new scan to find an IBSS to join [ 459.474728][ T9999] loop1: detected capacity change from 0 to 2048 [ 459.594431][ T9999] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 460.184535][T10012] macvlan2: entered promiscuous mode [ 460.190046][T10012] macvlan2: entered allmulticast mode [ 460.196581][T10012] gretap0: entered allmulticast mode [ 460.385644][ T3725] wlan1: Trigger new scan to find an IBSS to join [ 460.686573][T10024] loop5: detected capacity change from 0 to 256 [ 461.314321][ T1135] wlan1: Creating new IBSS network, BSSID c2:43:cc:79:e4:9b [ 461.422769][ T3725] wlan1: Trigger new scan to find an IBSS to join [ 462.164548][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1729'. [ 462.473472][ T3725] wlan1: Trigger new scan to find an IBSS to join [ 462.654142][T10072] macvlan3: entered promiscuous mode [ 462.659734][T10072] macvlan3: entered allmulticast mode [ 462.665488][T10072] gretap0: entered allmulticast mode [ 462.860299][T10076] loop2: detected capacity change from 0 to 256 [ 463.408019][T10088] loop2: detected capacity change from 0 to 256 [ 463.423937][ T35] wlan1: Creating new IBSS network, BSSID 8a:b5:6e:1d:05:e2 [ 463.536234][T10088] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 463.542316][T10091] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1744'. [ 463.644413][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 463.644488][ T30] audit: type=1800 audit(2000000264.440:130): pid=10088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1741" name="file1" dev="loop2" ino=1048683 res=0 errno=0 [ 464.382890][ T3725] wlan1: Creating new IBSS network, BSSID 0a:54:73:70:14:bd [ 465.362733][T10128] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1757'. [ 465.396126][T10126] loop5: detected capacity change from 0 to 256 [ 465.540237][T10126] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 465.666591][ T30] audit: type=1800 audit(2000000266.460:131): pid=10126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1759" name="file1" dev="loop5" ino=1048684 res=0 errno=0 [ 466.586983][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1770'. [ 466.605980][T10142] loop3: detected capacity change from 0 to 2048 [ 466.778114][T10142] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.981718][ T11] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 467.153417][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1774'. [ 467.162780][T10155] netlink: 'syz.5.1774': attribute type 30 has an invalid length. [ 467.196634][ T3655] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.223774][ T11] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 467.232550][ T11] usb 1-1: config 0 has no interface number 0 [ 467.238817][ T11] usb 1-1: config 0 interface 183 has no altsetting 0 [ 467.268066][ T3655] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.299432][ T3655] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.323993][ T11] usb 1-1: New USB device found, idVendor=1a8d, idProduct=100c, bcdDevice=a0.20 [ 467.333597][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.342300][ T11] usb 1-1: Product: syz [ 467.347646][ T11] usb 1-1: Manufacturer: syz [ 467.353077][ T11] usb 1-1: SerialNumber: syz [ 467.370458][ T3655] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.433795][ T11] usb 1-1: config 0 descriptor?? [ 467.479534][T10159] loop1: detected capacity change from 0 to 256 [ 467.641678][T10159] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 467.694874][ T11] option 1-1:0.183: GSM modem (1-port) converter detected [ 467.728860][ T11] usb 1-1: USB disconnect, device number 13 [ 467.737000][ T11] option 1-1:0.183: device disconnected [ 467.803678][ T30] audit: type=1800 audit(2000000268.590:132): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1775" name="file1" dev="loop1" ino=1048685 res=0 errno=0 [ 468.019553][T10166] loop3: detected capacity change from 0 to 2048 [ 468.144605][T10166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.494728][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.331380][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.337999][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.074794][T10220] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1800'. [ 473.244497][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 473.404147][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 473.428652][ T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 473.438190][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.483427][ T24] usb 1-1: config 0 descriptor?? [ 473.562697][T10268] netlink: 'syz.1.1819': attribute type 3 has an invalid length. [ 473.570733][T10268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1819'. [ 473.718541][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 473.763340][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 473.791375][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 473.800208][ T24] usb 1-1: media controller created [ 473.903650][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.434031][ T24] az6027: usb out operation failed. (-71) [ 474.440033][ T24] stb0899_attach: Driver disabled by Kconfig [ 474.448873][ T24] az6027: no front-end attached [ 474.448873][ T24] [ 474.471724][ T24] az6027: usb out operation failed. (-71) [ 474.477722][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 474.489160][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 474.545357][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 474.555188][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 474.652585][ T24] usb 1-1: USB disconnect, device number 14 [ 474.946018][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 475.242685][T10297] netlink: 'syz.3.1832': attribute type 3 has an invalid length. [ 475.250707][T10297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1832'. [ 475.919042][T10313] loop1: detected capacity change from 0 to 512 [ 476.039505][T10313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.053887][T10313] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.311667][T10313] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 476.802946][T10333] loop3: detected capacity change from 0 to 512 [ 476.853729][T10333] EXT4-fs: Ignoring removed oldalloc option [ 476.929570][T10333] EXT4-fs (loop3): orphan cleanup on readonly fs [ 476.939502][T10333] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 476.956956][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.967521][T10333] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 476.970002][T10333] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1845: attempt to clear invalid blocks 2 len 1 [ 476.977419][T10333] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1845: invalid indirect mapped block 1819239214 (level 0) [ 477.067367][T10333] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1845: invalid indirect mapped block 1819239214 (level 1) [ 477.147012][T10333] EXT4-fs (loop3): 1 truncate cleaned up [ 477.155033][T10333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 477.223873][T10333] EXT4-fs (loop3): shut down requested (1) [ 477.348773][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.511787][ T49] Bluetooth: hci3: command 0x0405 tx timeout [ 478.403109][T10358] netlink: 'syz.1.1855': attribute type 1 has an invalid length. [ 478.774935][T10364] input: syz1 as /devices/virtual/input/input18 [ 479.190588][T10369] loop1: detected capacity change from 0 to 8 [ 480.498801][ T30] audit: type=1326 audit(2000000281.280:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 480.563546][ T30] audit: type=1326 audit(2000000281.320:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 480.586382][ T30] audit: type=1326 audit(2000000281.330:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 480.610251][ T30] audit: type=1326 audit(2000000281.330:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 480.633407][ T30] audit: type=1326 audit(2000000281.340:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 480.657073][ T30] audit: type=1326 audit(2000000281.350:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 480.680507][ T30] audit: type=1326 audit(2000000281.350:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 480.705386][ T30] audit: type=1326 audit(2000000281.350:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 480.728133][ T30] audit: type=1326 audit(2000000281.350:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.1.1870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 482.040781][T10411] sch_fq: defrate 4294966271 ignored. [ 482.197104][T10399] sctp: failed to load transform for md5: -2 [ 484.474306][T10442] loop1: detected capacity change from 0 to 512 [ 484.517091][T10442] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 484.533198][T10442] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 484.550504][T10442] EXT4-fs (loop1): group descriptors corrupted! [ 484.565632][ T24] IPVS: starting estimator thread 0... [ 484.681722][T10449] IPVS: using max 240 ests per chain, 12000 per kthread [ 485.251047][T10444] loop2: detected capacity change from 0 to 4096 [ 485.297649][T10456] loop1: detected capacity change from 0 to 256 [ 485.390940][T10456] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 485.470349][T10456] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 485.485061][T10456] FAT-fs (loop1): Filesystem has been set read-only [ 485.839383][ T30] audit: type=1800 audit(2000000286.630:142): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1894" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 486.439840][T10470] loop1: detected capacity change from 0 to 764 [ 487.719917][T10488] loop3: detected capacity change from 0 to 64 [ 489.459879][T10513] loop1: detected capacity change from 0 to 128 [ 489.547885][T10513] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 489.576376][ T30] audit: type=1326 audit(2000000290.360:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.5.1926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 489.603885][ T30] audit: type=1326 audit(2000000290.360:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.5.1926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 489.631847][ T30] audit: type=1326 audit(2000000290.360:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.5.1926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 489.659100][ T30] audit: type=1326 audit(2000000290.360:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.5.1926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 489.687362][ T30] audit: type=1326 audit(2000000290.360:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.5.1926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 489.710179][ T30] audit: type=1326 audit(2000000290.360:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.5.1926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 489.910493][T10520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1927'. [ 491.218991][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 491.258180][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 491.330411][ T3655] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 491.833186][T10545] netlink: 'syz.0.1939': attribute type 21 has an invalid length. [ 491.843194][ T24] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 491.862383][ T5876] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 492.044797][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 492.056439][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 492.070242][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 492.107336][ T5876] usb 4-1: config 201 has an invalid interface number: 249 but max is 0 [ 492.116262][ T5876] usb 4-1: config 201 has no interface number 0 [ 492.122988][ T5876] usb 4-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 492.136058][ T5876] usb 4-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 492.147901][ T5876] usb 4-1: config 201 interface 249 has no altsetting 0 [ 492.225412][ T24] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 492.235942][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.244780][ T24] usb 6-1: Product: syz [ 492.249130][ T24] usb 6-1: Manufacturer: syz [ 492.254044][ T24] usb 6-1: SerialNumber: syz [ 492.299478][ T5876] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 492.309595][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.317962][ T5876] usb 4-1: Product: syz [ 492.322872][ T5876] usb 4-1: Manufacturer: syz [ 492.327643][ T5876] usb 4-1: SerialNumber: syz [ 492.360711][ T24] usb 6-1: config 0 descriptor?? [ 492.370933][T10541] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 492.379858][T10541] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 492.410667][ T24] usb 6-1: ucan: probing device on interface #0 [ 492.714256][ T5876] ath6kl: Failed to submit usb control message: -71 [ 492.721772][ T5876] ath6kl: unable to send the bmi data to the device: -71 [ 492.729106][ T5876] ath6kl: Unable to send get target info: -71 [ 492.799142][ T5876] ath6kl: Failed to init ath6kl core: -71 [ 492.818722][ T5876] ath6kl_usb 4-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 492.836285][ T11] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 492.888652][ T24] usb 6-1: ucan: device reported invalid tx-fifo size [ 492.896282][ T24] usb 6-1: ucan: probe failed; try to update the device firmware [ 492.923613][ T5876] usb 4-1: USB disconnect, device number 17 [ 493.037396][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'. [ 493.056005][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 493.058271][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1945'. [ 493.096088][ T5874] usb 6-1: USB disconnect, device number 13 [ 493.146075][ T11] usb 3-1: config 6 has an invalid interface number: 70 but max is 0 [ 493.160356][ T11] usb 3-1: config 6 has no interface number 0 [ 493.171715][ T11] usb 3-1: config 6 interface 70 has no altsetting 0 [ 493.208155][ T11] usb 3-1: New USB device found, idVendor=126f, idProduct=da99, bcdDevice=b0.0e [ 493.222453][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.230676][ T11] usb 3-1: Product: syz [ 493.239581][ T11] usb 3-1: Manufacturer: syz [ 493.249078][ T11] usb 3-1: SerialNumber: syz [ 493.719425][ T11] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 493.731816][ T11] usb 3-1: MIDIStreaming interface descriptor not found [ 493.857191][ T11] usb 3-1: USB disconnect, device number 13 [ 494.446350][ T5876] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 494.665946][T10577] loop2: detected capacity change from 0 to 1024 [ 494.684814][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 494.697623][ T5876] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 494.707531][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.818224][ T5876] usb 6-1: config 0 descriptor?? [ 494.927603][T10577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.276095][ T5876] samsung 0003:0419:0600.001A: unknown main item tag 0x2 [ 495.283681][ T5876] samsung 0003:0419:0600.001A: unknown main item tag 0x5 [ 495.376727][ T5876] samsung 0003:0419:0600.001A: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.5-1/input0 [ 495.452867][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.480245][ T5876] usb 6-1: USB disconnect, device number 14 [ 495.909185][ T3725] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 496.506741][T10599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1961'. [ 496.547184][ T3725] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 497.446288][ T11] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 497.617080][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 497.676819][ T11] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.727455][ T11] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 497.741723][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.749933][ T11] usb 2-1: Product: syz [ 497.758907][ T11] usb 2-1: Manufacturer: syz [ 497.769067][ T11] usb 2-1: SerialNumber: syz [ 497.778386][ T5876] kernel write not supported for file /comedi4 (pid: 5876 comm: kworker/1:5) [ 497.869063][ T11] usb 2-1: config 0 descriptor?? [ 498.369834][ T11] gs_usb 2-1:0.0: Configuring for 2 interfaces [ 498.563714][ T11] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 498.606146][ T11] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 498.649755][ C1] hrtimer: interrupt took 225210 ns [ 498.848524][ T11] usb 2-1: USB disconnect, device number 18 [ 503.112374][ T30] audit: type=1326 audit(2000000303.900:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.5.1993" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 503.353863][T10670] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1994'. [ 503.369339][ T30] audit: type=1326 audit(2000000304.010:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.5.1993" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 503.393060][ T30] audit: type=1326 audit(2000000304.020:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10667 comm="syz.5.1993" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x0 [ 503.630373][ T30] audit: type=1326 audit(2000000304.360:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.2.1995" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f83539 code=0x0 [ 505.640297][T10631] Set syz1 is full, maxelem 65536 reached [ 505.783671][T10688] netlink: 'syz.5.2001': attribute type 21 has an invalid length. [ 506.681932][T10702] loop1: detected capacity change from 0 to 764 [ 508.984407][T10741] team_slave_0: entered promiscuous mode [ 508.990353][T10741] team_slave_1: entered promiscuous mode [ 509.003176][T10741] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 509.725930][T10750] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 509.747271][T10750] overlayfs: overlapping lowerdir path [ 510.935882][T10767] loop1: detected capacity change from 0 to 256 [ 510.957267][T10767] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 510.968255][T10767] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 511.110404][T10767] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2d0d25cc, utbl_chksum : 0xe619d30d) [ 511.828188][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 511.838145][T10781] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2044'. [ 512.770384][T10793] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2050'. [ 513.727115][ T11] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 513.926862][ T11] usb 6-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 513.936395][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.997149][ T11] usb 6-1: config 0 descriptor?? [ 514.479239][ T11] smartjoyplus 0003:0925:8866.001B: unknown global tag 0xd [ 514.497830][ T11] smartjoyplus 0003:0925:8866.001B: item 0 0 1 13 parsing failed [ 514.530800][ T5876] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 514.537608][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2060'. [ 514.578532][ T11] smartjoyplus 0003:0925:8866.001B: parse failed [ 514.592282][ T11] smartjoyplus 0003:0925:8866.001B: probe with driver smartjoyplus failed with error -22 [ 514.689311][ T5170] usb 6-1: USB disconnect, device number 15 [ 514.725960][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 514.743078][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.753861][ T5876] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 514.764529][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.779625][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 514.805078][ T5876] usb 3-1: config 0 descriptor?? [ 514.837113][ T5876] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 514.954286][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 514.992287][ T24] usb 1-1: config 6 has an invalid interface number: 70 but max is 0 [ 515.002229][ T24] usb 1-1: config 6 has no interface number 0 [ 515.011671][ T24] usb 1-1: config 6 interface 70 has no altsetting 0 [ 515.085916][ T24] usb 1-1: New USB device found, idVendor=126f, idProduct=da99, bcdDevice=b0.0e [ 515.095946][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.105850][ T24] usb 1-1: Product: syz [ 515.110280][ T24] usb 1-1: Manufacturer: syz [ 515.115516][ T24] usb 1-1: SerialNumber: syz [ 515.258287][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2063'. [ 515.268268][T10827] netlink: 'syz.3.2063': attribute type 30 has an invalid length. [ 515.277623][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2063'. [ 515.543421][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 515.550782][ T24] usb 1-1: MIDIStreaming interface descriptor not found [ 515.569342][T10829] loop1: detected capacity change from 0 to 512 [ 515.638892][T10829] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 515.729957][ T5876] gspca_vc032x: reg_w err -71 [ 515.736141][ T5876] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 515.752905][ T24] usb 1-1: USB disconnect, device number 15 [ 515.779008][ T5876] usb 3-1: USB disconnect, device number 14 [ 516.212703][T10834] loop3: detected capacity change from 0 to 256 [ 516.238384][T10834] exfat: Deprecated parameter 'utf8' [ 516.248902][T10834] exfat: Deprecated parameter 'utf8' [ 516.259237][T10834] exfat: Deprecated parameter 'utf8' [ 516.269560][T10834] exfat: Deprecated parameter 'utf8' [ 516.279998][T10834] exfat: Deprecated parameter 'namecase' [ 516.380788][T10834] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 518.075950][ T11] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 518.265909][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 518.338823][ T11] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 518.353905][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.367001][ T11] usb 2-1: Product: syz [ 518.375917][ T11] usb 2-1: Manufacturer: syz [ 518.380702][ T11] usb 2-1: SerialNumber: syz [ 518.422209][T10863] loop2: detected capacity change from 0 to 256 [ 518.607529][T10863] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 518.621399][T10863] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 518.702747][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 518.888654][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 518.936882][ T24] usb 6-1: config 6 has an invalid interface number: 70 but max is 0 [ 518.945825][ T24] usb 6-1: config 6 has no interface number 0 [ 518.952396][ T24] usb 6-1: config 6 interface 70 has no altsetting 0 [ 519.024418][ T24] usb 6-1: New USB device found, idVendor=126f, idProduct=da99, bcdDevice=b0.0e [ 519.033928][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.042369][ T24] usb 6-1: Product: syz [ 519.046739][ T24] usb 6-1: Manufacturer: syz [ 519.051930][ T24] usb 6-1: SerialNumber: syz [ 519.126877][ T11] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 519.497586][ T11] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 519.510642][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 519.510761][ T24] usb 6-1: MIDIStreaming interface descriptor not found [ 519.627698][ T24] usb 6-1: USB disconnect, device number 16 [ 519.639948][ T11] usb 2-1: USB disconnect, device number 19 [ 520.517689][T10881] loop5: detected capacity change from 0 to 16 [ 520.548114][T10881] erofs (device loop5): mounted with root inode @ nid 36. [ 520.576367][T10881] erofs (device loop5): readahead error at folio 6 @ nid 36 [ 520.585937][T10881] erofs (device loop5): readahead error at folio 4 @ nid 36 [ 520.594361][T10881] erofs (device loop5): invalid logical cluster 0 at nid 36 [ 520.603035][T10881] erofs (device loop5): readahead error at folio 0 @ nid 36 [ 520.610738][T10881] syz.5.2087: attempt to access beyond end of device [ 520.610738][T10881] loop5: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 520.625899][T10881] syz.5.2087: attempt to access beyond end of device [ 520.625899][T10881] loop5: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 520.641932][T10881] syz.5.2087: attempt to access beyond end of device [ 520.641932][T10881] loop5: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 520.656408][T10881] syz.5.2087: attempt to access beyond end of device [ 520.656408][T10881] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 520.670863][T10881] erofs (device loop5): invalid logical cluster 0 at nid 36 [ 520.678737][T10881] syz.5.2087: attempt to access beyond end of device [ 520.678737][T10881] loop5: rw=0, sector=296, nr_sectors = 8 limit=16 [ 520.692325][T10881] erofs (device loop5): read error -5 @ 0 of nid 36 [ 520.699946][T10881] erofs (device loop5): failed to readdir of logical block 0 of nid 36 [ 520.708912][T10884] erofs (device loop5): invalid logical cluster 0 at nid 36 [ 520.726299][T10884] syz.5.2087: attempt to access beyond end of device [ 520.726299][T10884] loop5: rw=0, sector=296, nr_sectors = 8 limit=16 [ 520.745829][T10884] erofs (device loop5): read error -5 @ 0 of nid 36 [ 520.758220][T10884] erofs (device loop5): failed to readdir of logical block 0 of nid 36 [ 522.120092][T10904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2108'. [ 522.173645][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 522.244397][T10908] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.2100'. [ 522.254437][T10908] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 522.277177][T10906] loop5: detected capacity change from 0 to 1024 [ 522.296179][T10906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 522.347586][T10906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 522.369207][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 522.436031][T10906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.457454][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 522.561627][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 522.638272][ T24] usb 4-1: config 6 has an invalid interface number: 70 but max is 0 [ 522.647616][ T24] usb 4-1: config 6 has no interface number 0 [ 522.654419][ T24] usb 4-1: config 6 interface 70 has no altsetting 0 [ 522.711843][ T8237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.754696][ T24] usb 4-1: New USB device found, idVendor=126f, idProduct=da99, bcdDevice=b0.0e [ 522.764237][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.772574][ T24] usb 4-1: Product: syz [ 522.778131][ T24] usb 4-1: Manufacturer: syz [ 522.783707][ T24] usb 4-1: SerialNumber: syz [ 522.995880][T10915] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 523.011066][T10915] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 523.129952][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2104'. [ 523.173852][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 523.181030][ T24] usb 4-1: MIDIStreaming interface descriptor not found [ 523.217988][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2104'. [ 523.323048][ T24] usb 4-1: USB disconnect, device number 18 [ 523.726470][T10925] loop1: detected capacity change from 0 to 256 [ 524.130283][T10925] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 524.144023][T10925] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 524.970864][T10942] loop5: detected capacity change from 0 to 512 [ 525.068220][T10942] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2114: casefold flag without casefold feature [ 525.088787][T10942] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2114: couldn't read orphan inode 15 (err -117) [ 525.190371][T10942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.306425][T10947] loop3: detected capacity change from 0 to 2048 [ 525.328623][T10947] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 525.376629][T10949] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 525.780691][T10955] loop2: detected capacity change from 0 to 256 [ 525.790292][ T8237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.288543][T10959] netlink: 'syz.5.2120': attribute type 40 has an invalid length. [ 527.902235][ T3520] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 527.913264][ T3655] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 527.952707][T10986] loop2: detected capacity change from 0 to 128 [ 528.699109][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 530.137725][T11022] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2151'. [ 530.380335][T11024] loop2: detected capacity change from 0 to 512 [ 530.517920][T11024] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 530.526659][T11031] @: renamed from vlan0 (while UP) [ 530.648659][T11024] System zones: 1-12 [ 530.669625][T11024] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.2152: Directory hole found for htree index block 0 [ 530.753155][T11024] EXT4-fs (loop2): Remounting filesystem read-only [ 530.798793][T11024] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 530.847153][T11024] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 530.868080][T11024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.420173][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.888690][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.900738][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.160776][T11037] loop3: detected capacity change from 0 to 8192 [ 532.903898][T11057] loop1: detected capacity change from 0 to 16 [ 533.004203][T11057] erofs (device loop1): mounted with root inode @ nid 36. [ 533.095031][T11057] erofs (device loop1): readahead error at folio 6 @ nid 36 [ 533.108394][T11057] erofs (device loop1): readahead error at folio 4 @ nid 36 [ 533.122084][T11057] erofs (device loop1): invalid logical cluster 0 at nid 36 [ 533.129609][T11057] erofs (device loop1): readahead error at folio 0 @ nid 36 [ 533.143724][T11057] syz.1.2162: attempt to access beyond end of device [ 533.143724][T11057] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 533.163802][T11057] syz.1.2162: attempt to access beyond end of device [ 533.163802][T11057] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 533.178848][T11057] syz.1.2162: attempt to access beyond end of device [ 533.178848][T11057] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 533.198235][T11057] syz.1.2162: attempt to access beyond end of device [ 533.198235][T11057] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 533.217535][T11057] erofs (device loop1): invalid logical cluster 0 at nid 36 [ 533.235954][T11057] syz.1.2162: attempt to access beyond end of device [ 533.235954][T11057] loop1: rw=0, sector=296, nr_sectors = 8 limit=16 [ 533.254530][T11057] erofs (device loop1): read error -5 @ 0 of nid 36 [ 533.266072][T11057] erofs (device loop1): failed to readdir of logical block 0 of nid 36 [ 533.328925][T11061] erofs (device loop1): invalid logical cluster 0 at nid 36 [ 533.338034][T11061] syz.1.2162: attempt to access beyond end of device [ 533.338034][T11061] loop1: rw=0, sector=296, nr_sectors = 8 limit=16 [ 533.351886][T11061] erofs (device loop1): read error -5 @ 0 of nid 36 [ 533.358679][T11061] erofs (device loop1): failed to readdir of logical block 0 of nid 36 [ 533.654131][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2176'. [ 534.376961][T11075] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2168'. [ 534.786938][T11080] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2173'. [ 535.539445][T11087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2178'. [ 535.554865][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2178'. [ 536.327949][T11097] @: renamed from vlan0 (while UP) [ 536.825733][T11105] loop5: detected capacity change from 0 to 512 [ 536.869586][T11105] EXT4-fs: Ignoring removed oldalloc option [ 537.019961][T11105] EXT4-fs (loop5): orphan cleanup on readonly fs [ 537.031570][T11105] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 537.080236][T11105] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 537.137199][T11105] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2184: attempt to clear invalid blocks 2 len 1 [ 537.226654][T11105] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2184: invalid indirect mapped block 1819239214 (level 0) [ 537.267427][T11099] sctp: failed to load transform for md5: -2 [ 537.326455][T11105] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2184: invalid indirect mapped block 1819239214 (level 1) [ 537.536474][T11105] EXT4-fs (loop5): 1 truncate cleaned up [ 537.549014][T11105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 537.847284][T11105] EXT4-fs (loop5): shut down requested (1) [ 538.339180][T11121] loop1: detected capacity change from 0 to 1024 [ 538.430525][ T8237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.592628][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 538.799843][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 538.838999][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 538.853256][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.902128][ T24] usb 4-1: config 0 descriptor?? [ 539.168904][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 539.197521][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 539.275931][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 539.287932][ T24] usb 4-1: media controller created [ 539.497820][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.628489][T11132] syz.5.2197 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 540.072290][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 540.080474][ T24] az6027: usb out operation failed. (-32) [ 540.089763][ T24] stb0899_attach: Driver disabled by Kconfig [ 540.100740][ T24] az6027: no front-end attached [ 540.100740][ T24] [ 540.200484][ T24] az6027: usb out operation failed. (-71) [ 540.212265][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 540.227758][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 540.416832][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 540.428782][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 540.558441][ T24] usb 4-1: USB disconnect, device number 19 [ 541.169120][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 541.196390][T11145] loop2: detected capacity change from 0 to 128 [ 541.260365][T11148] loop1: detected capacity change from 0 to 128 [ 541.297416][T11145] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 541.360205][T11145] hpfs: filesystem error: improperly stopped [ 541.376202][T11145] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 541.389979][T11145] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 541.405516][T11145] hpfs: You really don't want any checks? You are crazy... [ 541.497338][T11145] hpfs: hpfs_map_sector(): read error [ 541.507974][T11145] hpfs: code page support is disabled [ 541.636746][T11145] hpfs: hpfs_map_4sectors(): unaligned read [ 541.650379][T11145] hpfs: hpfs_map_4sectors(): unaligned read [ 541.661467][T11145] hpfs: filesystem error: unable to find root dir [ 541.839741][T11151] loop5: detected capacity change from 0 to 64 [ 542.947270][T11166] input: syz0 as /devices/virtual/input/input20 [ 544.969305][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2219'. [ 544.983498][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2219'. [ 545.065360][ T11] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 545.197722][ T11] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 546.889835][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'. [ 548.117515][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2235'. [ 548.170219][T11217] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2235'. [ 550.236860][T11237] loop5: detected capacity change from 0 to 16 [ 550.507482][ T11] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 550.679180][T11242] loop1: detected capacity change from 0 to 128 [ 550.759397][ T11] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 550.774010][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.799079][T11242] EXT4-fs: Ignoring removed nobh option [ 550.860016][ T11] usb 3-1: config 0 descriptor?? [ 550.940533][T11242] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 550.950074][ T11] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 551.027789][T11242] ext4 filesystem being mounted at /459/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 551.329923][T11246] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2249'. [ 551.409327][ T11] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 551.507250][ T5819] Bluetooth: hci3: command 0x0405 tx timeout [ 551.910119][ T11] gspca_cpia1: usb_control_msg 02, error -71 [ 551.921408][ T11] cpia1 3-1:0.0: only firmware version 1 is supported (got: 122) [ 551.980812][ T5825] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 552.068396][ T11] usb 3-1: USB disconnect, device number 15 [ 552.237320][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 552.436414][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 552.566124][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 552.584120][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.602504][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 552.616353][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.890506][ T24] usb 4-1: config 0 descriptor?? [ 553.568967][ T3655] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 553.584655][ T5819] Bluetooth: hci3: command 0x0405 tx timeout [ 553.678184][ T24] playstation 0003:054C:0DF2.001D: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 553.850894][ T24] playstation 0003:054C:0DF2.001D: Invalid reportID received, expected 9 got 0 [ 553.865282][ T24] playstation 0003:054C:0DF2.001D: Failed to retrieve DualSense pairing info: -22 [ 553.877341][ T24] playstation 0003:054C:0DF2.001D: Failed to get MAC address from DualSense [ 553.887028][ T24] playstation 0003:054C:0DF2.001D: Failed to create dualsense. [ 554.107729][ T24] playstation 0003:054C:0DF2.001D: probe with driver playstation failed with error -22 [ 554.247452][ T24] usb 4-1: USB disconnect, device number 20 [ 554.650765][T11272] loop5: detected capacity change from 0 to 2048 [ 554.773823][T11272] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 557.719931][T11308] block nbd5: NBD_DISCONNECT [ 559.678133][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2281'. [ 559.692245][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2281'. [ 559.718363][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2280'. [ 559.937017][T10666] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 559.937527][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 560.619609][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2286'. [ 560.634118][T11341] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2286'. [ 560.717269][ T11] kernel write not supported for file /sg0 (pid: 11 comm: kworker/0:1) [ 562.706455][ T11] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 562.909502][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 562.922723][ T11] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 562.939272][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 563.169608][ T11] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 563.183810][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.196764][ T11] usb 6-1: Product: syz [ 563.201114][ T11] usb 6-1: Manufacturer: syz [ 563.216343][ T11] usb 6-1: SerialNumber: syz [ 563.290636][ T11] usb 6-1: config 0 descriptor?? [ 563.317251][T11362] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 563.346999][T11362] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 563.416346][ T11] usb 6-1: ucan: probing device on interface #0 [ 564.116562][ T11] ucan 6-1:0.0: probe with driver ucan failed with error -71 [ 564.177211][ T11] usb 6-1: USB disconnect, device number 17 [ 564.334568][T11372] loop2: detected capacity change from 0 to 1024 [ 566.358560][T11388] loop1: detected capacity change from 0 to 1024 [ 566.417592][T11388] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 566.546271][T11390] bond0: entered promiscuous mode [ 566.556288][T11390] bond_slave_0: entered promiscuous mode [ 566.567748][T11390] bond_slave_1: entered promiscuous mode [ 566.597775][T11390] dummy0: entered promiscuous mode [ 566.619505][T11390] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 566.634780][T11390] hsr1: entered promiscuous mode [ 566.640087][T11390] hsr1: entered allmulticast mode [ 566.650055][T11390] bond0: entered allmulticast mode [ 566.659955][T11390] bond_slave_0: entered allmulticast mode [ 566.670400][T11390] bond_slave_1: entered allmulticast mode [ 566.687000][T11390] dummy0: entered allmulticast mode [ 566.768301][T11388] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.2308: lblock 1 mapped to illegal pblock 1 (length 1) [ 566.935973][T11388] Quota error (device loop1): write_blk: dquota write failed [ 566.948524][T11388] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 566.963828][T11388] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2308: Failed to acquire dquot type 0 [ 567.147926][T11388] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.2308: Freeing blocks not in datazone - block = 0, count = 4096 [ 567.177766][T11388] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2308: Invalid inode bitmap blk 0 in block_group 0 [ 567.199856][T11388] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 567.214129][ T74] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 567.250035][ T74] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 567.263838][ T74] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 567.306751][T11388] EXT4-fs (loop1): 1 orphan inode deleted [ 567.328947][T11388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.116816][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.061070][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2323'. [ 571.070743][T11433] mkiss: ax0: crc mode is auto. [ 574.021837][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 574.261115][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.281527][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 574.296901][ T24] usb 1-1: config 1 has no interface number 0 [ 574.308568][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.320593][ T24] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 574.551042][T11464] loop3: detected capacity change from 0 to 512 [ 574.599928][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 574.610278][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.618660][ T24] usb 1-1: Product: syz [ 574.623301][ T24] usb 1-1: Manufacturer: syz [ 574.628109][ T24] usb 1-1: SerialNumber: syz [ 574.686281][T11464] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 574.701439][T11464] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 574.856721][T11464] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 574.890604][T11464] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 574.905256][T11464] System zones: 0-2, 18-18, 34-34 [ 575.057203][T11464] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2339: iget: bad i_size value: 360287970189639680 [ 575.147294][T11464] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2339: couldn't read orphan inode 15 (err -117) [ 575.239225][T11464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.334155][T11464] Bluetooth: MGMT ver 1.23 [ 575.607902][ T24] cdc_ncm 1-1:1.1: bind() failure [ 575.707104][ T24] usb 1-1: USB disconnect, device number 16 [ 576.110765][T11477] loop1: detected capacity change from 0 to 512 [ 576.341034][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.985657][T11487] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2351'. [ 577.267799][T11490] geneve2: entered promiscuous mode [ 577.273487][T11490] geneve2: entered allmulticast mode [ 580.069863][T11517] loop1: detected capacity change from 0 to 1024 [ 580.575611][T11523] loop2: detected capacity change from 0 to 2048 [ 580.816336][T11528] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 581.270894][ T30] audit: type=1326 audit(2000000382.060:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.5.2369" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x0 [ 581.477075][T11528] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 581.493675][T11528] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 581.587195][T11528] Remounting filesystem read-only [ 581.598771][ T5813] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 584.806688][ T4380] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 584.916379][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 584.987013][T11559] loop1: detected capacity change from 0 to 2048 [ 585.146817][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 585.171462][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.183158][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.197852][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 585.212133][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.309799][T11564] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 585.606839][ T24] usb 3-1: config 0 descriptor?? [ 586.346555][ T24] savu 0003:1E7D:2D5A.001E: unknown main item tag 0x0 [ 586.354069][ T24] savu 0003:1E7D:2D5A.001E: unknown main item tag 0x0 [ 586.366013][ T24] savu 0003:1E7D:2D5A.001E: unknown main item tag 0x0 [ 586.379066][ T24] savu 0003:1E7D:2D5A.001E: unknown main item tag 0x0 [ 586.391556][ T24] savu 0003:1E7D:2D5A.001E: unknown main item tag 0x0 [ 586.558206][T11564] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 586.574437][T11564] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 586.618897][ T24] savu 0003:1E7D:2D5A.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 586.697316][T11564] Remounting filesystem read-only [ 586.706379][ T24] usb 3-1: USB disconnect, device number 16 [ 586.818373][ T5825] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 587.659383][T11575] netlink: 'syz.1.2385': attribute type 10 has an invalid length. [ 587.990774][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2387'. [ 590.050733][ T5819] block nbd0: Receive control failed (result -32) [ 590.064839][ T5815] block nbd0: Receive control failed (result -32) [ 590.866497][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2394'. [ 591.438253][T11602] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 591.449496][T11602] pim6reg0: linktype set to 270 [ 591.917516][ T14] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 591.941078][ T74] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 592.930400][T11615] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 592.937725][T11615] syzkaller0: linktype set to 1 [ 593.209016][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.220514][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 594.845397][T11626] loop2: detected capacity change from 0 to 4096 [ 595.046052][T11634] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 595.848224][T11633] loop5: detected capacity change from 0 to 4096 [ 595.986830][T11641] loop3: detected capacity change from 0 to 8 [ 596.070278][T11643] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 596.317650][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 596.595829][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 596.677318][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 596.696741][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.710049][ T24] usb 2-1: Product: syz [ 596.720138][ T24] usb 2-1: Manufacturer: syz [ 596.729836][ T24] usb 2-1: SerialNumber: syz [ 596.799876][T10666] tipc: Subscription rejected, illegal request [ 597.076450][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 597.170508][ T24] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 597.287919][ T24] usb 2-1: USB disconnect, device number 20 [ 599.936158][ T11] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 600.122487][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.137245][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 600.155484][ T11] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 600.172209][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.333995][ T11] usb 3-1: config 0 descriptor?? [ 600.796199][ T11] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 600.808357][ T11] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 600.822288][ T11] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 600.829701][ T11] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 600.842193][ T11] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 600.992186][ T11] kovaplus 0003:1E7D:2D50.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 601.306142][ T11] kovaplus 0003:1E7D:2D50.001F: couldn't init struct kovaplus_device [ 601.319208][ T11] kovaplus 0003:1E7D:2D50.001F: couldn't install mouse [ 601.369369][ T11] kovaplus 0003:1E7D:2D50.001F: probe with driver kovaplus failed with error -71 [ 601.469186][ T11] usb 3-1: USB disconnect, device number 17 [ 601.918036][T11683] loop5: detected capacity change from 0 to 4096 [ 601.960495][T11683] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 602.527262][T11683] ntfs3(loop5): Failed to load root (-22). [ 604.027623][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2439'. [ 606.238585][T11720] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2448'. [ 607.018563][T11728] loop3: detected capacity change from 0 to 64 [ 607.309664][T11726] pim6reg: tun_chr_ioctl cmd 2147767507 [ 608.150379][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2454'. [ 609.431062][T11746] loop1: detected capacity change from 0 to 512 [ 609.589711][T11746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.939466][T11746] fs-verity (loop1, inode 13): Unknown hash algorithm number: 0 [ 610.508101][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.999827][T11758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2463'. [ 613.257140][ T11] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 613.466421][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 613.598174][ T11] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 613.615985][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 613.806862][ T11] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 613.822530][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.830732][ T11] usb 4-1: Product: syz [ 613.840260][ T11] usb 4-1: Manufacturer: syz [ 613.849689][ T11] usb 4-1: SerialNumber: syz [ 613.977251][ T11] usb 4-1: config 0 descriptor?? [ 614.028313][ T11] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 614.042429][ T11] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 614.888645][ T11] em28xx 4-1:0.0: chip ID is em2765 [ 615.098954][ T11] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 615.236553][ T11] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 615.248456][ T11] em28xx 4-1:0.0: No AC97 audio processor [ 615.370919][ T11] usb 4-1: USB disconnect, device number 21 [ 615.384015][ T11] em28xx 4-1:0.0: Disconnecting em28xx [ 615.497163][ T11] em28xx 4-1:0.0: Freeing device [ 616.467056][ T3520] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 617.113453][T11807] netlink: 'syz.1.2484': attribute type 10 has an invalid length. [ 617.159278][T11807] team0: Port device dummy0 added [ 617.171029][T11809] netlink: 'syz.1.2484': attribute type 10 has an invalid length. [ 617.449663][T11809] team0: Port device dummy0 removed [ 617.479469][T11809] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 617.547801][T11806] loop5: detected capacity change from 0 to 4096 [ 622.178152][T11842] loop1: detected capacity change from 0 to 64 [ 622.249682][T11846] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 622.481524][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 622.656121][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 622.681014][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 622.748558][ T24] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 622.759069][ T24] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 622.767861][ T24] usb 1-1: Product: syz [ 622.772325][ T24] usb 1-1: Manufacturer: syz [ 622.777114][ T24] usb 1-1: SerialNumber: syz [ 622.878852][ T24] usb 1-1: config 0 descriptor?? [ 622.891384][T11847] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 622.970251][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 622.986034][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 623.268207][T11854] bond0: option arp_interval: invalid value (18446744071578845184) [ 623.277366][T11854] bond0: option arp_interval: allowed values 0 - 2147483647 [ 623.326726][ T11] usb 1-1: USB disconnect, device number 17 [ 623.686558][ T11] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 623.820152][T11860] overlayfs: invalid origin (0000) [ 623.896166][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 623.913403][T10666] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 623.916080][ T3520] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 623.983546][ T11] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 624.088988][ T11] usb 1-1: string descriptor 0 read error: -22 [ 624.100631][ T11] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 624.114957][ T11] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 624.199528][ T11] usb 1-1: config 0 descriptor?? [ 624.217835][T11847] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 624.278840][T11864] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2509'. [ 624.289886][ T11] hub 1-1:0.0: bad descriptor, ignoring hub [ 624.290003][ T11] hub 1-1:0.0: probe with driver hub failed with error -5 [ 624.312270][T11864] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2509'. [ 624.737733][ T24] usb 1-1: USB disconnect, device number 18 [ 624.836648][T11870] loop3: detected capacity change from 0 to 64 [ 624.909973][T11870] hfs: unable to locate alternate MDB [ 624.920721][T11870] hfs: continuing without an alternate MDB [ 625.736109][T11877] block nbd2: Attempted send on invalid socket [ 625.748586][T11877] blk_print_req_error: 20 callbacks suppressed [ 625.748669][T11877] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 625.775939][T11877] block nbd2: Attempted send on invalid socket [ 625.787465][T11877] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 625.802549][T11877] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 625.838472][ T53] block nbd2: Attempted send on invalid socket [ 625.849688][ T53] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 625.868476][T11877] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 625.979631][T11877] block nbd2: Attempted send on invalid socket [ 625.986406][T11877] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.006312][T11877] block nbd2: Attempted send on invalid socket [ 626.017397][T11877] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.031541][T11877] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 626.046299][T11877] block nbd2: Attempted send on invalid socket [ 626.057353][T11877] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.072829][T11877] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 626.089980][T11877] block nbd2: Attempted send on invalid socket [ 626.101075][T11877] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.120659][T11877] block nbd2: Attempted send on invalid socket [ 626.131842][T11877] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.146270][T11877] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 626.160952][T11877] block nbd2: Attempted send on invalid socket [ 626.172101][T11877] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.187443][T11877] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 626.206339][T11877] block nbd2: Attempted send on invalid socket [ 626.217396][T11877] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.232239][T11877] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 626.247087][T11877] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 626.261509][T11877] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 627.346392][ T30] audit: type=1326 audit(2000000428.110:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.3.2520" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708e539 code=0x0 [ 628.545462][T11897] loop2: detected capacity change from 0 to 32768 [ 628.867361][T11897] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only [ 628.867486][T11897] allowing incompatible features above 0.0: (unknown version) [ 628.867571][T11897] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 628.921762][T11897] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 628.930193][T11897] bcachefs (loop2): initializing new filesystem [ 628.966539][T11897] bcachefs (loop2): going read-write [ 629.067136][T11897] bcachefs (loop2): marking superblocks [ 629.149240][T11910] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2524'. [ 629.158968][T11897] bcachefs (loop2): initializing freespace [ 629.197206][T11897] bcachefs (loop2): done initializing freespace [ 629.226993][T11897] bcachefs (loop2): reading snapshots table [ 629.233411][T11897] bcachefs (loop2): reading snapshots done [ 629.437574][T11897] bcachefs (loop2): going read-only [ 629.449572][T11897] bcachefs (loop2): finished waiting for writes to stop [ 629.477090][T11897] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2 [ 629.710192][T11897] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 2 [ 629.737226][T11897] bcachefs (loop2): clean shutdown complete, journal seq 3 [ 629.751347][T11897] bcachefs (loop2): marking filesystem clean [ 629.776381][T11897] bcachefs (loop2): done starting filesystem [ 630.258578][T11897] syz.2.2522 (11897) used greatest stack depth: 1120 bytes left [ 630.316819][ T5813] bcachefs (loop2): shutting down [ 630.537661][ T5813] bcachefs (loop2): shutdown complete [ 631.816259][ T24] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 631.998239][ T24] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 632.012450][ T24] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 632.020839][ T24] usb 6-1: config 0 has no interface number 0 [ 632.032432][ T24] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 632.050730][ T24] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 632.067481][ T24] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 632.083642][ T24] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 632.097581][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.156734][ T24] usb 6-1: config 0 descriptor?? [ 632.169383][T11935] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 632.910582][ T24] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input21 [ 633.129461][ C1] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 633.139430][ T24] usb 6-1: USB disconnect, device number 18 [ 633.798144][T11944] sctp: failed to load transform for md5: -2 [ 634.411041][T11953] loop5: detected capacity change from 0 to 1024 [ 634.649810][T11957] fuse: Unexpected value for 'default_permissions' [ 634.860111][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2544'. [ 635.676584][T11964] loop5: detected capacity change from 0 to 1024 [ 635.758634][T11964] EXT4-fs: inline encryption not supported [ 635.772618][T11964] EXT4-fs: Ignoring removed i_version option [ 635.917479][T11964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.946731][ T11] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 636.149284][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 636.210432][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.226599][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.239355][T11964] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2546: Allocating blocks 497-513 which overlap fs metadata [ 636.255885][T11964] EXT4-fs (loop5): pa ffff888122dfb310: logic 624, phys. 113, len 25 [ 636.256032][T11964] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 24, pa_free 25 [ 636.287993][ T11] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 636.302034][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.584080][ T11] usb 2-1: config 0 descriptor?? [ 636.810286][ T8237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.119274][ T11] hid (null): unknown global tag 0xc [ 637.558802][ T11] usb 2-1: string descriptor 0 read error: -71 [ 637.635474][ T11] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 637.649970][ T11] letsketch 0003:6161:4D15.0020: probe with driver letsketch failed with error -32 [ 637.688249][T11978] tun0: tun_chr_ioctl cmd 2148553947 [ 637.796707][ T11] usb 2-1: USB disconnect, device number 21 [ 638.375993][T11981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2552'. [ 638.878995][T11989] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 638.897721][ T11] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 639.098220][T11991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2557'. [ 639.148135][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 639.164195][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.179530][ T11] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 639.194070][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.339554][ T11] usb 3-1: config 0 descriptor?? [ 639.897254][ T11] lua 0003:1E7D:2C2E.0021: unknown main item tag 0x0 [ 639.910004][ T11] lua 0003:1E7D:2C2E.0021: unknown main item tag 0x0 [ 639.921711][ T11] lua 0003:1E7D:2C2E.0021: unknown main item tag 0x0 [ 639.929441][ T11] lua 0003:1E7D:2C2E.0021: unknown main item tag 0x0 [ 639.940899][ T11] lua 0003:1E7D:2C2E.0021: unknown main item tag 0x0 [ 640.126841][ T11] lua 0003:1E7D:2C2E.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 640.186717][T11993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2558'. [ 640.256872][ T11] usb 3-1: USB disconnect, device number 18 [ 641.218471][T12012] loop5: detected capacity change from 0 to 512 [ 641.276406][T12012] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 641.389440][T12012] EXT4-fs (loop5): 1 truncate cleaned up [ 641.407020][T12012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.080656][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2569'. [ 642.400307][ T8237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.237202][T12035] block nbd1: shutting down sockets [ 644.480820][T12048] loop3: detected capacity change from 0 to 1024 [ 644.659825][T12048] ===================================================== [ 644.672679][T12048] BUG: KMSAN: uninit-value in hfsplus_rename_cat+0x1173/0x17e0 [ 644.680439][T12048] hfsplus_rename_cat+0x1173/0x17e0 [ 644.690637][T12048] hfsplus_rename+0x1fc/0x2f0 [ 644.700285][T12048] vfs_rename+0x1f4e/0x2530 [ 644.710639][T12048] do_renameat2+0x1484/0x1a50 [ 644.720420][T12048] __ia32_sys_rename+0xd7/0x140 [ 644.730123][T12048] ia32_sys_call+0x351c/0x4310 [ 644.741856][T12048] __do_fast_syscall_32+0xb0/0x150 [ 644.747150][T12048] do_fast_syscall_32+0x38/0x80 [ 644.757390][T12048] do_SYSENTER_32+0x1f/0x30 [ 644.766995][T12048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.778172][T12048] [ 644.780588][T12048] Uninit was stored to memory at: [ 644.790515][T12048] hfsplus_rename_cat+0x10a9/0x17e0 [ 644.800585][T12048] hfsplus_rename+0x1fc/0x2f0 [ 644.810172][T12048] vfs_rename+0x1f4e/0x2530 [ 644.820422][T12048] do_renameat2+0x1484/0x1a50 [ 644.826544][T12048] __ia32_sys_rename+0xd7/0x140 [ 644.831750][T12048] ia32_sys_call+0x351c/0x4310 [ 644.836652][T12048] __do_fast_syscall_32+0xb0/0x150 [ 644.844304][T12048] do_fast_syscall_32+0x38/0x80 [ 644.849310][T12048] do_SYSENTER_32+0x1f/0x30 [ 644.859239][T12048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.870498][T12048] [ 644.877566][T12048] Uninit was stored to memory at: [ 644.887665][T12048] hfsplus_create_cat+0x18fb/0x1910 [ 644.897721][T12048] hfsplus_fill_super+0x211d/0x2730 [ 644.907842][T12048] get_tree_bdev_flags+0x6e3/0x920 [ 644.918815][T12048] get_tree_bdev+0x38/0x50 [ 644.928347][T12048] hfsplus_get_tree+0x35/0x40 [ 644.937966][T12048] vfs_get_tree+0xb0/0x5c0 [ 644.949678][T12048] do_new_mount+0x733/0x1420 [ 644.959766][T12048] path_mount+0x6db/0x1e90 [ 644.969096][T12048] __se_sys_mount+0x6eb/0x7d0 [ 644.978651][T12048] __ia32_sys_mount+0xe2/0x150 [ 644.988306][T12048] ia32_sys_call+0x2c16/0x4310 [ 644.997906][T12048] __do_fast_syscall_32+0xb0/0x150 [ 645.008103][T12048] do_fast_syscall_32+0x38/0x80 [ 645.018897][T12048] do_SYSENTER_32+0x1f/0x30 [ 645.028600][T12048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 645.040057][T12048] [ 645.049279][T12048] Uninit was created at: [ 645.058986][T12048] __alloc_frozen_pages_noprof+0x689/0xf00 [ 645.069819][T12048] alloc_pages_mpol+0x328/0x860 [ 645.079785][T12048] alloc_frozen_pages_noprof+0xf7/0x200 [ 645.090428][T12048] allocate_slab+0x24d/0x1220 [ 645.100078][T12048] ___slab_alloc+0xff3/0x3470 [ 645.110251][T12048] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 645.118026][T12048] hfsplus_alloc_inode+0x5a/0xd0 [ 645.123561][T12048] alloc_inode+0x87/0x4a0 [ 645.128063][T12048] iget_locked+0x239/0x12d0 [ 645.133683][T12048] hfsplus_iget+0x5c/0xb80 [ 645.138245][T12048] hfsplus_btree_open+0x128/0x1cf0 [ 645.148254][T12048] hfsplus_fill_super+0x1161/0x2730 [ 645.160401][T12048] get_tree_bdev_flags+0x6e3/0x920 [ 645.171040][T12048] get_tree_bdev+0x38/0x50 [ 645.180455][T12048] hfsplus_get_tree+0x35/0x40 [ 645.189983][T12048] vfs_get_tree+0xb0/0x5c0 [ 645.199251][T12048] do_new_mount+0x733/0x1420 [ 645.208803][T12048] path_mount+0x6db/0x1e90 [ 645.218156][T12048] __se_sys_mount+0x6eb/0x7d0 [ 645.228606][T12048] __ia32_sys_mount+0xe2/0x150 [ 645.238832][T12048] ia32_sys_call+0x2c16/0x4310 [ 645.248524][T12048] __do_fast_syscall_32+0xb0/0x150 [ 645.260639][T12048] do_fast_syscall_32+0x38/0x80 [ 645.270965][T12048] do_SYSENTER_32+0x1f/0x30 [ 645.280379][T12048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 645.292061][T12048] [ 645.294546][T12048] CPU: 1 UID: 0 PID: 12048 Comm: syz.3.2579 Not tainted syzkaller #0 PREEMPT(none) [ 645.308748][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 645.324750][T12048] ===================================================== [ 645.337296][T12048] Disabling lock debugging due to kernel taint [ 645.348274][T12048] Kernel panic - not syncing: kmsan.panic set ... [ 645.354838][T12048] CPU: 1 UID: 0 PID: 12048 Comm: syz.3.2579 Tainted: G B syzkaller #0 PREEMPT(none) [ 645.366051][T12048] Tainted: [B]=BAD_PAGE [ 645.370336][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 645.380529][T12048] Call Trace: [ 645.383912][T12048] [ 645.386929][T12048] __dump_stack+0x26/0x30 [ 645.391447][T12048] dump_stack_lvl+0x53/0x270 [ 645.396351][T12048] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 645.402348][T12048] dump_stack+0x1e/0x25 [ 645.406695][T12048] vpanic+0x361/0xc50 [ 645.410852][T12048] panic+0x15d/0x160 [ 645.414958][T12048] kmsan_report+0x31c/0x320 [ 645.419637][T12048] ? __msan_warning+0x1b/0x30 [ 645.424452][T12048] ? hfsplus_rename_cat+0x1173/0x17e0 [ 645.430008][T12048] ? hfsplus_rename+0x1fc/0x2f0 [ 645.435047][T12048] ? vfs_rename+0x1f4e/0x2530 [ 645.439918][T12048] ? do_renameat2+0x1484/0x1a50 [ 645.444958][T12048] ? __ia32_sys_rename+0xd7/0x140 [ 645.450180][T12048] ? ia32_sys_call+0x351c/0x4310 [ 645.455273][T12048] ? __do_fast_syscall_32+0xb0/0x150 [ 645.460713][T12048] ? do_fast_syscall_32+0x38/0x80 [ 645.465898][T12048] ? do_SYSENTER_32+0x1f/0x30 [ 645.470716][T12048] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 645.477419][T12048] ? kmsan_get_metadata+0xfb/0x160 [ 645.482732][T12048] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 645.488733][T12048] ? hfsplus_bnode_dump+0x50a/0x560 [ 645.494176][T12048] ? kmsan_get_metadata+0xfb/0x160 [ 645.499463][T12048] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 645.505458][T12048] ? hfsplus_brec_remove+0x92f/0xa60 [ 645.510967][T12048] ? kmsan_get_metadata+0xfb/0x160 [ 645.516437][T12048] __msan_warning+0x1b/0x30 [ 645.521086][T12048] hfsplus_rename_cat+0x1173/0x17e0 [ 645.526486][T12048] ? kfree+0xf1/0xec0 [ 645.530647][T12048] ? filter_irq_stacks+0x49/0x190 [ 645.535828][T12048] ? stack_depot_save_flags+0x35/0x7b0 [ 645.541443][T12048] ? kmsan_get_metadata+0xfb/0x160 [ 645.546812][T12048] ? kmsan_get_metadata+0xfb/0x160 [ 645.552127][T12048] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 645.558627][T12048] ? kmsan_get_metadata+0xfb/0x160 [ 645.563913][T12048] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 645.569891][T12048] ? kmsan_get_metadata+0xfb/0x160 [ 645.575170][T12048] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 645.581195][T12048] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 645.587696][T12048] hfsplus_rename+0x1fc/0x2f0 [ 645.592562][T12048] ? __pfx_hfsplus_rename+0x10/0x10 [ 645.597981][T12048] vfs_rename+0x1f4e/0x2530 [ 645.602719][T12048] do_renameat2+0x1484/0x1a50 [ 645.607636][T12048] __ia32_sys_rename+0xd7/0x140 [ 645.612662][T12048] ia32_sys_call+0x351c/0x4310 [ 645.617554][T12048] __do_fast_syscall_32+0xb0/0x150 [ 645.622799][T12048] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 645.628707][T12048] do_fast_syscall_32+0x38/0x80 [ 645.633690][T12048] do_SYSENTER_32+0x1f/0x30 [ 645.638325][T12048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 645.644822][T12048] RIP: 0023:0xf708e539 [ 645.649002][T12048] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 645.668750][T12048] RSP: 002b:00000000f547e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000026 [ 645.677339][T12048] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000380 [ 645.685415][T12048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 645.693558][T12048] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 645.701616][T12048] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 645.709690][T12048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 645.717790][T12048] [ 645.721214][T12048] Kernel Offset: disabled [ 645.725573][T12048] Rebooting in 86400 seconds..