last executing test programs: 4.489909699s ago: executing program 0 (id=857): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) 4.382512108s ago: executing program 4 (id=858): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x1000) 3.949689782s ago: executing program 0 (id=862): syz_open_dev$vcsu(&(0x7f0000000040), 0x7fffffffffffffff, 0xc2140) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 3.949541795s ago: executing program 4 (id=863): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) fsopen(0x0, 0x0) syz_clone(0x20040200, 0x0, 0x5, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x80, 0x0, 0x0) io_setup(0x4082, &(0x7f0000000380)) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) 3.808471169s ago: executing program 3 (id=864): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) 3.526819682s ago: executing program 1 (id=865): capset(&(0x7f0000000100)={0x20080522}, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='team0\x00', 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) 2.981472604s ago: executing program 1 (id=866): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='5', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 2.732725632s ago: executing program 3 (id=867): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x180000000) 2.521227853s ago: executing program 1 (id=868): syz_emit_ethernet(0x4c, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x2}, "0a790cc55a8e"}}}}}}}, 0x0) 2.369291332s ago: executing program 4 (id=869): r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 2.207895344s ago: executing program 2 (id=870): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000002140)=""/4096, 0x13}) 2.139409754s ago: executing program 1 (id=871): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0xfffffff5, 0x0, 0x0) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r2, 0x0) rt_sigsuspend(&(0x7f0000000000), 0x8) 2.080966429s ago: executing program 3 (id=872): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) 1.897783149s ago: executing program 0 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x99052213be020dce}, 0x0) 1.88172273s ago: executing program 4 (id=874): unshare(0x28000400) r0 = socket(0x1e, 0x4, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x2140}], 0x1, 0x0, 0x0, 0x0) 1.732214846s ago: executing program 2 (id=875): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) r2 = openat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x44) fchmod(r2, 0x504) 1.597847868s ago: executing program 3 (id=876): capset(&(0x7f0000000100)={0x20080522}, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='team0\x00', 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) 1.361741593s ago: executing program 0 (id=877): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) 1.289592733s ago: executing program 2 (id=878): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='5', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 1.154485447s ago: executing program 3 (id=879): ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000100)={0x0, 0x8, "d9ac1ef277be0e2af88c3705a22aae2ab6c868642883199ab664ee8dc85e72ee", 0x3, 0x72c, 0x6, 0x895f, 0x5a8, 0x6, 0x1, 0x3, [0x6, 0x6, 0x60000, 0x3]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="c091f4640fc43c299a8d1bb6931d1b6d1b68"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r2 = dup(0xffffffffffffffff) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 937.221592ms ago: executing program 2 (id=880): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000680)={0x18}) 900.420333ms ago: executing program 0 (id=881): syz_emit_ethernet(0x4c, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x2}, "0a790cc55a8e"}}}}}}}, 0x0) 821.368172ms ago: executing program 1 (id=882): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f00000002c0)=0x10) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7d, &(0x7f00000001c0)="020000000980ffff", 0x8) 589.414337ms ago: executing program 4 (id=883): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x58c}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 481.397577ms ago: executing program 3 (id=884): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40}, {0x6, 0x0, 0x0, 0xfffffffc}]}) write$ppp(r0, &(0x7f0000000480)='\x00\x00', 0x2) 451.798892ms ago: executing program 2 (id=885): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x1, 0x2, 0x0, {0x2, 0x4e24, @multicast2}}, 0x24) 431.234187ms ago: executing program 0 (id=886): r0 = syz_open_dev$vim2m(0x0, 0xb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) 369.390621ms ago: executing program 1 (id=887): r0 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 120.645168ms ago: executing program 4 (id=888): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) r2 = openat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x44) fchmod(r2, 0x504) 0s ago: executing program 2 (id=889): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) kernel console output (not intermixed with test programs): 50:50 [ 244.840341][ T3724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.057250][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.067575][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.399408][ T5785] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 245.948137][ T4074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.965021][ T4074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.151896][ T4189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.160745][ T4189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.214709][ T5964] loop0: detected capacity change from 0 to 2048 [ 246.269861][ T5964] udf: Bad value for 'mode' [ 246.570206][ T3901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.579567][ T3901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.589445][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.601502][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.611058][ T5964] loop0: detected capacity change from 0 to 512 [ 246.613389][ T5964] EXT4-fs: Ignoring removed orlov option [ 246.736557][ T3724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.746933][ T3724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.799979][ T5964] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 246.853046][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.859978][ T5964] EXT4-fs (loop0): too many log groups per flexible block group [ 246.865970][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.876064][ T5964] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 246.936505][ T5964] EXT4-fs (loop0): mount failed [ 247.061986][ T5964] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 247.528472][ T5976] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 248.718218][ T5981] loop1: detected capacity change from 0 to 512 [ 248.859436][ T5971] loop3: detected capacity change from 0 to 65536 [ 248.955031][ T5981] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 248.963125][ T5981] UDF-fs: Scanning with blocksize 512 failed [ 249.004017][ T5981] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 249.011960][ T5981] UDF-fs: Scanning with blocksize 1024 failed [ 249.055870][ T5971] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 249.078218][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.089051][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.225247][ T5981] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 249.234739][ T5981] UDF-fs: Scanning with blocksize 2048 failed [ 249.287118][ T5981] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 249.456813][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.465930][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.621615][ T5981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.674140][ T5971] XFS (loop3): Ending clean mount [ 249.709988][ T5996] netlink: 'syz.0.7': attribute type 11 has an invalid length. [ 249.760400][ T5971] XFS (loop3): Quotacheck needed: Please wait. [ 249.855122][ T5971] XFS (loop3): Quotacheck: Done. [ 250.921173][ T5788] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 252.927338][ T6010] loop1: detected capacity change from 0 to 65536 [ 253.055740][ T6005] loop4: detected capacity change from 0 to 512 [ 253.077940][ T6010] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 253.138893][ T6005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 253.139316][ T6005] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.388379][ T6010] XFS (loop1): Ending clean mount [ 253.404232][ T6010] XFS (loop1): Quotacheck needed: Please wait. [ 253.521349][ T6010] XFS (loop1): Quotacheck: Done. [ 253.978266][ T6023] loop2: detected capacity change from 0 to 1024 [ 254.163509][ T6015] loop0: detected capacity change from 0 to 4096 [ 254.360532][ T6015] ntfs3(loop0): try to read out of volume at offset 0x5c00 [ 254.360794][ T6015] ntfs3(loop0): Failed to load $Volume (-5). [ 254.369134][ T6015] netlink: 324 bytes leftover after parsing attributes in process `syz.0.14'. [ 254.454403][ T5795] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 255.177254][ T6035] loop3: detected capacity change from 0 to 256 [ 255.222507][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 256.537638][ T6045] loop2: detected capacity change from 0 to 512 [ 256.563879][ T6045] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 256.572017][ T6045] UDF-fs: Scanning with blocksize 512 failed [ 256.581153][ T6045] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 256.589617][ T6045] UDF-fs: Scanning with blocksize 1024 failed [ 256.604291][ T6046] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 256.641525][ T6045] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 256.649613][ T6045] UDF-fs: Scanning with blocksize 2048 failed [ 256.760726][ T6045] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 257.361540][ T6045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.472985][ T5848] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 258.647475][ T5848] usb 1-1: device descriptor read/64, error -71 [ 259.100777][ T6077] loop1: detected capacity change from 0 to 256 [ 259.147947][ T6077] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 259.213972][ T5848] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 259.353442][ T5848] usb 1-1: device descriptor read/64, error -71 [ 259.488586][ T5848] usb usb1-port1: attempt power cycle [ 259.942887][ T5848] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 260.012487][ T5848] usb 1-1: device descriptor read/8, error -71 [ 260.027380][ T6084] netlink: 'syz.2.36': attribute type 32 has an invalid length. [ 260.195526][ T6086] syz.1.37 (6086): /proc/6085/oom_adj is deprecated, please use /proc/6085/oom_score_adj instead. [ 260.313384][ T5848] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 260.320311][ T6086] loop1: detected capacity change from 0 to 1024 [ 260.375170][ T6086] hfsplus: Unknown parameter 'deco¤b±e' [ 260.408171][ T5848] usb 1-1: device descriptor read/8, error -71 [ 260.548641][ T5848] usb usb1-port1: unable to enumerate USB device [ 260.619528][ T6086] Zero length message leads to an empty skb [ 260.680662][ T6094] netlink: 44 bytes leftover after parsing attributes in process `syz.3.39'. [ 260.802501][ T6096] netlink: 'syz.2.40': attribute type 10 has an invalid length. [ 260.811734][ T6096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.40'. [ 260.823222][ T6096] bridge0: port 3(batadv0) entered blocking state [ 260.830729][ T6096] bridge0: port 3(batadv0) entered disabled state [ 260.840132][ T6096] batadv0: entered allmulticast mode [ 260.849072][ T6096] batadv0: entered promiscuous mode [ 260.857890][ T6096] bridge0: port 3(batadv0) entered blocking state [ 260.865968][ T6096] bridge0: port 3(batadv0) entered forwarding state [ 261.113502][ T1124] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 261.123668][ T1124] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 261.586150][ T6103] syz.4.42 uses obsolete (PF_INET,SOCK_PACKET) [ 262.382451][ T6122] netlink: 'syz.2.49': attribute type 10 has an invalid length. [ 262.392109][ T6122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.49'. [ 262.421429][ T6117] loop3: detected capacity change from 0 to 1024 [ 262.464413][ T5868] hid-generic 0008:0E53:0351.0001: unknown main item tag 0x2 [ 262.536500][ T5868] hid-generic 0008:0E53:0351.0001: hidraw0: HID v0.39 Device [syz0] on syz0 [ 262.574657][ T6117] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 262.625691][ T5848] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 262.730382][ T6117] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 262.827122][ T6126] loop4: detected capacity change from 0 to 2048 [ 262.863013][ T5848] usb 1-1: device descriptor read/64, error -71 [ 262.897116][ T6117] EXT4-fs (loop3): orphan cleanup on readonly fs [ 262.929683][ T6117] Quota error (device loop3): v2_read_file_info: Free block number 4278190080 out of range (1, 6). [ 262.947478][ T6117] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 262.965729][ T6117] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 263.125461][ T6117] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.47: Freeing blocks not in datazone - block = 0, count = 4096 [ 263.193745][ T6117] EXT4-fs (loop3): 1 truncate cleaned up [ 263.201445][ T6117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 263.245572][ T5848] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 263.396931][ T6128] loop4: detected capacity change from 0 to 128 [ 263.405746][ T6128] ======================================================= [ 263.405746][ T6128] WARNING: The mand mount option has been deprecated and [ 263.405746][ T6128] and is ignored by this kernel. Remove the mand [ 263.405746][ T6128] option from the mount to silence this warning. [ 263.405746][ T6128] ======================================================= [ 263.493020][ T5848] usb 1-1: device descriptor read/64, error -71 [ 263.630311][ T5848] usb usb1-port1: attempt power cycle [ 263.661342][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.52'. [ 263.772467][ T6132] sg_write: data in/out 1086678981/120 bytes for SCSI command 0x9-- guessing data in; [ 263.772467][ T6132] program syz.3.47 not setting count and/or reply_len properly [ 264.095047][ T6138] netlink: 'syz.2.55': attribute type 11 has an invalid length. [ 264.221263][ T6139] loop4: detected capacity change from 0 to 1024 [ 264.242976][ T5846] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 264.263868][ T5848] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 264.318219][ T5848] usb 1-1: device descriptor read/8, error -71 [ 264.340157][ T3724] hfsplus: b-tree write err: -5, ino 4 [ 264.421785][ T5846] usb 4-1: config 0 has an invalid interface number: 87 but max is 0 [ 264.431090][ T5846] usb 4-1: config 0 has no interface number 0 [ 264.437888][ T5846] usb 4-1: too many endpoints for config 0 interface 87 altsetting 28: 204, using maximum allowed: 30 [ 264.449369][ T5846] usb 4-1: config 0 interface 87 altsetting 28 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 264.460984][ T5846] usb 4-1: config 0 interface 87 altsetting 28 has 1 endpoint descriptor, different from the interface descriptor's value: 204 [ 264.477559][ T5846] usb 4-1: config 0 interface 87 has no altsetting 0 [ 264.634977][ T5848] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 264.719546][ T5846] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 264.729412][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.738503][ T5846] usb 4-1: Product: syz [ 264.743290][ T5846] usb 4-1: Manufacturer: syz [ 264.748329][ T5846] usb 4-1: SerialNumber: syz [ 264.880055][ T5846] usb 4-1: config 0 descriptor?? [ 264.894840][ T5848] usb 1-1: device descriptor read/8, error -71 [ 265.011713][ T5846] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 265.027741][ T5848] usb usb1-port1: unable to enumerate USB device [ 265.139980][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.59'. [ 265.285648][ T6132] capability: warning: `syz.3.47' uses deprecated v2 capabilities in a way that may be insecure [ 265.404117][ T5846] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 265.624000][ T5846] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 265.632832][ T5846] usb 3-1: config 0 has no interface number 0 [ 265.639209][ T5846] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 265.649885][ T5846] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.796773][ T5846] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 265.809060][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.818230][ T5846] usb 3-1: Product: syz [ 265.823181][ T5846] usb 3-1: Manufacturer: syz [ 265.828031][ T5846] usb 3-1: SerialNumber: syz [ 265.958454][ T5846] usb 3-1: config 0 descriptor?? [ 265.966903][ T6153] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 265.994915][ T6160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.62'. [ 266.031650][ T5846] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 266.035021][ T3724] usb 4-1: Failed to submit usb control message: -110 [ 266.048158][ T3724] usb 4-1: unable to send the bmi data to the device: -110 [ 266.055767][ T3724] usb 4-1: unable to get target info from device [ 266.062373][ T3724] usb 4-1: could not get target info (-110) [ 266.068754][ T3724] usb 4-1: could not probe fw (-110) [ 266.130331][ T5846] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 266.746152][ T6171] loop4: detected capacity change from 0 to 256 [ 266.952656][ C1] hrtimer: interrupt took 235541 ns [ 266.974581][ T6161] sctp: failed to load transform for md5: -2 [ 267.278474][ T5846] usb 3-1: USB disconnect, device number 2 [ 267.294331][ T5846] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 267.332083][ T5846] cyberjack 3-1:0.69: device disconnected [ 267.387235][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.448256][ T5868] usb 4-1: USB disconnect, device number 2 [ 268.249616][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 268.292368][ T6186] loop3: detected capacity change from 0 to 128 [ 268.489171][ T6186] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 268.509934][ T6186] sysv_free_block: trying to free block not in datazone [ 268.535173][ T6186] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 268.723959][ T6186] binder: 6185:6186 ioctl c0306201 20000000 returned -22 [ 268.865517][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 269.358035][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.74'. [ 269.600274][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 269.610273][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.74'. [ 269.614545][ T6214] loop0: detected capacity change from 0 to 128 [ 269.664749][ T6206] netem: unknown loss type 0 [ 269.669750][ T6206] netem: change failed [ 269.973544][ T5848] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 270.157657][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 270.190914][ T5848] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 270.200930][ T5848] usb 3-1: config 0 has no interface number 0 [ 270.207586][ T5848] usb 3-1: config 0 interface 161 has no altsetting 0 [ 270.323607][ T5848] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 270.333368][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.341650][ T5848] usb 3-1: Product: syz [ 270.346222][ T5848] usb 3-1: Manufacturer: syz [ 270.351074][ T5848] usb 3-1: SerialNumber: syz [ 270.361924][ T5848] usb 3-1: config 0 descriptor?? [ 270.375911][ T5848] ums-jumpshot 3-1:0.161: USB Mass Storage device detected [ 270.401083][ T5848] ums-jumpshot 3-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 270.532538][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 270.543056][ T6223] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744072070299648) [ 270.576337][ T6221] netlink: 36 bytes leftover after parsing attributes in process `syz.3.80'. [ 270.586982][ T6221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.80'. [ 270.596372][ T6221] netlink: 36 bytes leftover after parsing attributes in process `syz.3.80'. [ 271.266647][ T5848] usb 3-1: USB disconnect, device number 3 [ 271.465507][ T6234] netlink: 'syz.3.83': attribute type 1 has an invalid length. [ 271.474213][ T6234] NCSI netlink: No device for ifindex 0 [ 271.831219][ T5868] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 271.914411][ T6242] loop2: detected capacity change from 0 to 256 [ 272.013021][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 272.034808][ T6245] __nla_validate_parse: 1 callbacks suppressed [ 272.034888][ T6245] netlink: 64 bytes leftover after parsing attributes in process `syz.3.88'. [ 272.049291][ T5868] usb 2-1: config 6 has an invalid interface number: 76 but max is 2 [ 272.062008][ T5868] usb 2-1: config 6 has an invalid interface number: 123 but max is 2 [ 272.071506][ T5868] usb 2-1: config 6 has an invalid interface number: 42 but max is 2 [ 272.080074][ T5868] usb 2-1: config 6 has an invalid interface number: 72 but max is 2 [ 272.088795][ T5868] usb 2-1: config 6 has an invalid interface number: 60 but max is 2 [ 272.097396][ T5868] usb 2-1: config 6 has 5 interfaces, different from the descriptor's value: 3 [ 272.106994][ T5868] usb 2-1: config 6 has no interface number 0 [ 272.114036][ T5868] usb 2-1: config 6 has no interface number 1 [ 272.120374][ T5868] usb 2-1: config 6 has no interface number 2 [ 272.126856][ T5868] usb 2-1: config 6 has no interface number 3 [ 272.133418][ T5868] usb 2-1: config 6 has no interface number 4 [ 272.139805][ T5868] usb 2-1: config 6 interface 76 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 272.151774][ T5868] usb 2-1: config 6 interface 76 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 1023 [ 272.165415][ T5868] usb 2-1: config 6 interface 76 altsetting 9 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 272.177698][ T5868] usb 2-1: config 6 interface 76 altsetting 9 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 272.189089][ T5868] usb 2-1: config 6 interface 76 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 272.204492][ T5868] usb 2-1: config 6 interface 76 altsetting 9 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 272.217602][ T5868] usb 2-1: config 6 interface 76 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 272.228726][ T5868] usb 2-1: config 6 interface 76 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 272.240066][ T5868] usb 2-1: config 6 interface 76 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 272.251218][ T5868] usb 2-1: config 6 interface 123 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 272.265660][ T5868] usb 2-1: config 6 interface 123 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 272.280776][ T5868] usb 2-1: too many endpoints for config 6 interface 42 altsetting 4: 159, using maximum allowed: 30 [ 272.292250][ T5868] usb 2-1: config 6 interface 42 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 272.303336][ T5868] usb 2-1: config 6 interface 42 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 159 [ 272.303657][ T6242] FAT-fs (loop2): Directory bread(block 64) failed [ 272.316738][ T5868] usb 2-1: too many endpoints for config 6 interface 72 altsetting 15: 97, using maximum allowed: 30 [ 272.316927][ T5868] usb 2-1: config 6 interface 72 altsetting 15 has a duplicate endpoint with address 0x5, skipping [ 272.317074][ T5868] usb 2-1: config 6 interface 72 altsetting 15 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 272.323795][ T6242] FAT-fs (loop2): Directory bread(block 65) failed [ 272.335159][ T5868] usb 2-1: config 6 interface 72 altsetting 15 has a duplicate endpoint with address 0x85, skipping [ 272.345917][ T6242] FAT-fs (loop2): Directory bread(block 66) failed [ 272.358235][ T5868] usb 2-1: config 6 interface 72 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 272.367443][ T6242] FAT-fs (loop2): Directory bread(block 67) failed [ 272.367737][ T6242] FAT-fs (loop2): Directory bread(block 68) failed [ 272.367861][ T6242] FAT-fs (loop2): Directory bread(block 69) failed [ 272.368098][ T6242] FAT-fs (loop2): Directory bread(block 70) failed [ 272.379795][ T5868] usb 2-1: config 6 interface 72 altsetting 15 endpoint 0xA has an invalid bInterval 25, changing to 8 [ 272.379977][ T5868] usb 2-1: config 6 interface 72 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 272.386603][ T6242] FAT-fs (loop2): Directory bread(block 71) failed [ 272.398013][ T5868] usb 2-1: config 6 interface 72 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 272.404814][ T6242] FAT-fs (loop2): Directory bread(block 72) failed [ 272.411271][ T5868] usb 2-1: config 6 interface 72 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 272.417944][ T6242] FAT-fs (loop2): Directory bread(block 73) failed [ 272.424641][ T5868] usb 2-1: config 6 interface 72 altsetting 15 has a duplicate endpoint with address 0x5, skipping [ 272.506127][ T5868] usb 2-1: config 6 interface 72 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 272.517410][ T5868] usb 2-1: config 6 interface 72 altsetting 15 has 9 endpoint descriptors, different from the interface descriptor's value: 97 [ 272.531105][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 272.542180][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 272.553457][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has an endpoint descriptor with address 0x71, changing to 0x1 [ 272.568928][ T5868] usb 2-1: config 6 interface 60 altsetting 6 endpoint 0x1 has invalid maxpacket 36462, setting to 64 [ 272.581231][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 272.592354][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 272.603677][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 272.615009][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 272.626116][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 272.637142][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 272.648206][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 272.659239][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 272.673534][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 272.685604][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 272.696878][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 272.707968][ T5868] usb 2-1: config 6 interface 60 altsetting 6 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 272.721570][ T5868] usb 2-1: config 6 interface 76 has no altsetting 0 [ 272.728786][ T5868] usb 2-1: config 6 interface 123 has no altsetting 0 [ 272.735920][ T5868] usb 2-1: config 6 interface 42 has no altsetting 0 [ 272.743364][ T5868] usb 2-1: config 6 interface 72 has no altsetting 0 [ 272.750339][ T5868] usb 2-1: config 6 interface 60 has no altsetting 0 [ 272.883440][ T6247] serio: Serial port ttyS3 [ 272.956464][ T5868] usb 2-1: Dual-Role OTG device on HNP port [ 272.963820][ T5868] usb 2-1: New USB device found, idVendor=12d1, idProduct=141a, bcdDevice= 0.00 [ 272.973553][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.984975][ T5868] usb 2-1: Product: à š [ 272.989457][ T5868] usb 2-1: Manufacturer: à°Œ [ 272.995855][ T5868] usb 2-1: SerialNumber: Љ [ 273.013853][ T6238] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 273.131980][ T6238] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 273.526648][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.536952][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.622985][ T5843] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 273.703873][ T5846] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 273.834845][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 273.874280][ T5868] usb-storage 2-1:6.76: USB Mass Storage device detected [ 273.876477][ T5843] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 273.890277][ T5843] usb 1-1: config 0 has no interface number 0 [ 273.899410][ T5843] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 273.934750][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 274.228377][ T5843] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 274.239155][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.247649][ T5843] usb 1-1: Product: syz [ 274.252081][ T5843] usb 1-1: Manufacturer: syz [ 274.257020][ T5843] usb 1-1: SerialNumber: syz [ 274.303337][ T5846] usb 4-1: config 0 has no interfaces? [ 274.336490][ T5843] usb 1-1: config 0 descriptor?? [ 274.357265][ T5868] usb-storage 2-1:6.123: USB Mass Storage device detected [ 274.424671][ T5868] option 2-1:6.123: GSM modem (1-port) converter detected [ 274.440986][ T5846] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 274.450908][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.464440][ T5846] usb 4-1: Product: syz [ 274.469051][ T5846] usb 4-1: Manufacturer: syz [ 274.474232][ T5846] usb 4-1: SerialNumber: syz [ 274.501368][ T5846] usb 4-1: config 0 descriptor?? [ 274.515057][ T5868] usb-storage 2-1:6.42: USB Mass Storage device detected [ 274.605931][ T6270] loop1: detected capacity change from 0 to 256 [ 274.627339][ T6252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.637749][ T6252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.688628][ T6270] vfat: Unknown parameter 'xœìÝAkcU' [ 274.741480][ T5843] radioshark 1-1:0.16: Invalid radioSHARK device [ 274.748262][ T5843] radioshark 1-1:0.16: probe with driver radioshark failed with error -22 [ 274.755042][ T5868] usb-storage 2-1:6.72: USB Mass Storage device detected [ 274.760537][ T5843] usbhid 1-1:0.16: couldn't find an input interrupt endpoint [ 274.986580][ T6276] loop1: detected capacity change from 0 to 16 [ 275.085725][ T5843] usb 1-1: USB disconnect, device number 10 [ 275.150425][ T6276] erofs (device loop1): mounted with root inode @ nid 36. [ 275.168479][ T5868] usb-storage 2-1:6.60: USB Mass Storage device detected [ 275.216225][ T6270] syz.1.94: attempt to access beyond end of device [ 275.216225][ T6270] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 275.341300][ T5868] usb 2-1: USB disconnect, device number 2 [ 275.343901][ T5843] usb 4-1: USB disconnect, device number 3 [ 275.412229][ T5868] option 2-1:6.123: device disconnected [ 275.718840][ T6270] syz.1.94: attempt to access beyond end of device [ 275.718840][ T6270] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 275.857794][ T6284] netlink: 664 bytes leftover after parsing attributes in process `syz.0.97'. [ 276.091463][ T6287] loop2: detected capacity change from 0 to 1024 [ 276.100943][ T6287] EXT4-fs: Ignoring removed i_version option [ 276.109859][ T6287] EXT4-fs: Ignoring removed orlov option [ 276.117892][ T6287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.264399][ T6287] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 276.883109][ T5868] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 277.168068][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 277.181680][ T5868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 277.192766][ T5868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1 [ 277.203187][ T5868] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 277.212531][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.621825][ T5868] usb 2-1: config 0 descriptor?? [ 277.633617][ T6297] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 278.064471][ T5868] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 278.072426][ T5868] hdpvr 2-1:0.0: device init failed [ 278.078462][ T5868] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 278.097615][ T5868] usb 2-1: USB disconnect, device number 3 [ 278.254561][ T6312] loop2: detected capacity change from 0 to 4096 [ 278.353283][ T6312] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 278.373080][ T5841] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 278.585273][ T5841] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 278.596475][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.589603][ T6322] loop3: detected capacity change from 0 to 32768 [ 279.598576][ T6322] jfs: Unknown parameter '0x00000000000000340000000000000000005244' [ 279.774254][ T5841] usb 1-1: config 0 descriptor?? [ 280.429719][ T6322] loop3: detected capacity change from 0 to 2048 [ 280.586858][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.594381][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.924934][ T5841] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 281.349268][ T6324] loop1: detected capacity change from 0 to 65536 [ 281.417196][ T5841] usb 1-1: USB disconnect, device number 11 [ 281.544607][ T6328] overlayfs: conflicting lowerdir path [ 281.774933][ T6338] /dev/nullb0: Can't open blockdev [ 281.788809][ T6324] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 281.866198][ T5796] Bluetooth: hci4: link tx timeout [ 281.871770][ T5796] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.273292][ T6324] XFS (loop1): Ending clean mount [ 282.295869][ T6324] XFS (loop1): Quotacheck needed: Please wait. [ 282.443257][ T6324] XFS (loop1): Quotacheck: Done. [ 282.585537][ T6350] netlink: 36 bytes leftover after parsing attributes in process `syz.2.115'. [ 282.707463][ T29] audit: type=1800 audit(1734312569.831:2): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.108" name="bus" dev="loop1" ino=75 res=0 errno=0 [ 283.217886][ T5795] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 283.770809][ T6365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.123'. [ 283.954129][ T5798] Bluetooth: hci4: command 0x0406 tx timeout [ 284.153606][ T5843] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 284.427248][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.438821][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.451388][ T5843] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 284.461635][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.696932][ T5843] usb 4-1: config 0 descriptor?? [ 285.172475][ T6365] loop3: detected capacity change from 0 to 128 [ 285.580586][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.591320][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.130226][ T5843] usbhid 4-1:0.0: can't add hid device: -71 [ 286.137059][ T5843] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 286.256024][ T5843] usb 4-1: USB disconnect, device number 4 [ 287.833804][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 289.174761][ T6387] loop0: detected capacity change from 0 to 32768 [ 289.296713][ T6387] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 289.305343][ T6387] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 289.332200][ T6387] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 19 (type: exp=4, found=5), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 500 [ 289.348372][ T6387] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 289.357204][ T6387] gfs2: fsid=syz:syz.0: File system withdrawn [ 289.367692][ T6387] CPU: 0 UID: 0 PID: 6387 Comm: syz.0.131 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 289.378617][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 289.388931][ T6387] Call Trace: [ 289.392420][ T6387] [ 289.395542][ T6387] dump_stack_lvl+0x216/0x2d0 [ 289.400572][ T6387] dump_stack+0x1e/0x24 [ 289.405038][ T6387] gfs2_withdraw+0x1c77/0x21b0 [ 289.410128][ T6387] ? __wait_on_buffer+0x91/0xb0 [ 289.415338][ T6387] gfs2_metatype_check_ii+0x115/0x150 [ 289.421043][ T6387] gfs2_meta_buffer+0x4b4/0x5d0 [ 289.426212][ T6387] inode_go_instantiate+0xe0/0x1ad0 [ 289.431731][ T6387] ? kmsan_get_metadata+0x13e/0x1c0 [ 289.437350][ T6387] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 289.444051][ T6387] ? kmsan_get_metadata+0x13e/0x1c0 [ 289.449554][ T6387] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 289.455671][ T6387] ? __pfx_inode_go_instantiate+0x10/0x10 [ 289.461719][ T6387] gfs2_instantiate+0x272/0x4c0 [ 289.466910][ T6387] gfs2_inode_lookup+0xa17/0x1440 [ 289.472358][ T6387] ? gfs2_dir_search+0x2c6/0x400 [ 289.477625][ T6387] ? gfs2_dir_search+0x2c6/0x400 [ 289.482908][ T6387] gfs2_dir_search+0x2c6/0x400 [ 289.488020][ T6387] gfs2_lookupi+0x687/0x960 [ 289.492852][ T6387] ? init_journal+0x718/0x3a40 [ 289.497951][ T6387] init_journal+0x718/0x3a40 [ 289.503001][ T6387] ? init_inodes+0x125/0x510 [ 289.507973][ T6387] init_inodes+0x125/0x510 [ 289.512741][ T6387] gfs2_fill_super+0x3a8b/0x45a0 [ 289.518045][ T6387] ? sb_set_blocksize+0x12a/0x160 [ 289.523417][ T6387] ? setup_bdev_super+0xa2c/0xa90 [ 289.528773][ T6387] ? kmsan_get_metadata+0x13e/0x1c0 [ 289.534256][ T6387] ? init_locking+0xf0/0x510 [ 289.539160][ T6387] get_tree_bdev_flags+0x6ec/0x910 [ 289.544598][ T6387] ? __pfx_gfs2_fill_super+0x10/0x10 [ 289.550254][ T6387] ? __pfx_gfs2_fill_super+0x10/0x10 [ 289.555881][ T6387] get_tree_bdev+0x37/0x50 [ 289.560641][ T6387] gfs2_get_tree+0x5c/0x340 [ 289.565467][ T6387] ? __pfx_gfs2_get_tree+0x10/0x10 [ 289.567380][ T6383] loop2: detected capacity change from 0 to 65536 [ 289.570811][ T6387] vfs_get_tree+0xb1/0x5a0 [ 289.582247][ T6387] ? mount_capable+0x97/0x120 [ 289.587346][ T6387] do_new_mount+0x71f/0x15e0 [ 289.592244][ T6387] ? kmsan_get_metadata+0x13e/0x1c0 [ 289.598022][ T6387] path_mount+0x742/0x1f10 [ 289.602802][ T6387] ? user_path_at+0x374/0x3e0 [ 289.607792][ T6387] __se_sys_mount+0x722/0x810 [ 289.612751][ T6387] __x64_sys_mount+0xe4/0x150 [ 289.617737][ T6387] x64_sys_call+0x39bf/0x3c30 [ 289.622742][ T6387] do_syscall_64+0xcd/0x1e0 [ 289.627513][ T6387] ? clear_bhb_loop+0x25/0x80 [ 289.632492][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.638742][ T6387] RIP: 0033:0x7f14439874ba [ 289.643445][ T6387] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.663511][ T6387] RSP: 002b:00007f14437d7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 289.672266][ T6387] RAX: ffffffffffffffda RBX: 00007f14437d7ef0 RCX: 00007f14439874ba [ 289.680659][ T6387] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007f14437d7eb0 [ 289.688886][ T6387] RBP: 0000000020000000 R08: 00007f14437d7ef0 R09: 0000000000000011 [ 289.697115][ T6387] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000020000040 [ 289.705754][ T6387] R13: 00007f14437d7eb0 R14: 000000000001251c R15: 0000000020000180 [ 289.713978][ T6387] [ 289.728766][ T6387] gfs2: fsid=syz:syz.0: can't read journal index: -5 [ 289.966638][ T29] audit: type=1326 audit(1734312576.961:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 289.992376][ T29] audit: type=1326 audit(1734312576.961:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 290.015813][ T29] audit: type=1326 audit(1734312576.961:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 290.038750][ T29] audit: type=1326 audit(1734312576.961:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 290.061353][ T29] audit: type=1326 audit(1734312576.961:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 290.086834][ T29] audit: type=1326 audit(1734312576.961:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 290.110207][ T29] audit: type=1326 audit(1734312576.991:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 290.133379][ T29] audit: type=1326 audit(1734312576.991:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 290.158296][ T29] audit: type=1326 audit(1734312577.001:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 290.183914][ T29] audit: type=1326 audit(1734312577.001:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 290.373929][ T6383] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 290.671307][ T5841] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 290.830791][ T6383] XFS (loop2): Ending clean mount [ 290.867975][ T6383] XFS (loop2): Quotacheck needed: Please wait. [ 290.893817][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 291.169785][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.181151][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.191535][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.209121][ T5841] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 291.219392][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.312981][ T6383] XFS (loop2): Quotacheck: Done. [ 291.535616][ T5784] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 291.699989][ T6409] loop1: detected capacity change from 0 to 32768 [ 291.707075][ T5841] usb 4-1: config 0 descriptor?? [ 291.719238][ T6409] jfs: Unknown parameter '0x000000000000004100000000000000000065AA' [ 292.242966][ T5798] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 292.251585][ T5798] Bluetooth: hci1: Injecting HCI hardware error event [ 292.261316][ T5798] Bluetooth: hci1: hardware error 0x00 [ 292.898475][ T5841] usb 4-1: can't set config #0, error -71 [ 292.909849][ T5841] usb 4-1: USB disconnect, device number 5 [ 293.606851][ T6419] loop2: detected capacity change from 0 to 64 [ 293.710888][ T6416] cgroup: noprefix used incorrectly [ 293.733596][ T6416] loop3: detected capacity change from 0 to 128 [ 293.754236][ T6416] FAT-fs (loop3): bogus number of reserved sectors [ 293.761015][ T6416] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 293.774585][ T6416] FAT-fs (loop3): Can't find a valid FAT filesystem [ 293.854844][ T6419] hfs: Unknown parameter 'H' [ 294.428091][ T5798] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 295.816613][ T6440] loop0: detected capacity change from 0 to 2048 [ 295.886452][ T6440] udf: Unknown parameter 'security.capability' [ 296.189847][ T6433] loop2: detected capacity change from 0 to 65536 [ 296.307723][ T6433] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 297.060964][ T6443] loop3: detected capacity change from 0 to 32768 [ 297.069970][ T6443] jfs: Unknown parameter '0x000000000000004f00000000000000000079OO' [ 297.610848][ T6433] XFS (loop2): Ending clean mount [ 297.638438][ T6443] loop3: detected capacity change from 0 to 2048 [ 297.707864][ T6433] XFS (loop2): Quotacheck needed: Please wait. [ 297.916441][ T6433] XFS (loop2): Quotacheck: Done. [ 298.391183][ T5784] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 298.604506][ T6457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.153'. [ 299.224266][ T5841] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 299.289567][ T6463] loop0: detected capacity change from 0 to 128 [ 299.425774][ T5841] usb 4-1: Using ep0 maxpacket: 32 [ 299.480986][ T5841] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 299.490380][ T5841] usb 4-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 299.505026][ T5841] usb 4-1: config 0 has no interface number 0 [ 299.511414][ T5841] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 299.529098][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 299.663330][ T5841] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 299.672875][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.681158][ T5841] usb 4-1: Product: syz [ 299.685828][ T5841] usb 4-1: Manufacturer: syz [ 299.690682][ T5841] usb 4-1: SerialNumber: syz [ 299.761630][ T6465] loop1: detected capacity change from 0 to 512 [ 299.772253][ T6465] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 299.786201][ T6465] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 299.847309][ T5841] usb 4-1: config 0 descriptor?? [ 299.881179][ T6465] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 299.897977][ T6465] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 299.917309][ T6465] EXT4-fs (loop1): 1 truncate cleaned up [ 299.937118][ T6465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.978850][ T6465] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.147190][ T5841] usb 4-1: USB disconnect, device number 6 [ 301.147779][ T6478] loop2: detected capacity change from 0 to 4096 [ 301.314509][ T6473] netlink: 'syz.1.159': attribute type 2 has an invalid length. [ 301.323125][ T6473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.159'. [ 301.663295][ T6478] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 302.209881][ T6486] loop0: detected capacity change from 0 to 512 [ 302.432166][ T6488] loop3: detected capacity change from 0 to 1024 [ 302.501624][ T6486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 302.513380][ T6488] hfsplus: failed to load root directory [ 302.514933][ T6486] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.044863][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 303.267172][ T6500] overlayfs: failed to clone upperpath [ 303.602991][ T6503] netlink: 36 bytes leftover after parsing attributes in process `syz.2.168'. [ 303.612498][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.168'. [ 303.622126][ T6503] netlink: 36 bytes leftover after parsing attributes in process `syz.2.168'. [ 303.632331][ T6503] netlink: 36 bytes leftover after parsing attributes in process `syz.2.168'. [ 303.659177][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 303.659569][ T29] audit: type=1326 audit(1734312590.801:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b76f85d19 code=0x7ffc0000 [ 303.788964][ T29] audit: type=1326 audit(1734312590.861:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b76f85d19 code=0x7ffc0000 [ 303.816714][ T29] audit: type=1326 audit(1734312590.861:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b76f85d19 code=0x7ffc0000 [ 303.840587][ T29] audit: type=1326 audit(1734312590.861:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b76f85d19 code=0x7ffc0000 [ 303.863263][ T29] audit: type=1326 audit(1734312590.861:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b76f85d19 code=0x7ffc0000 [ 303.886859][ T29] audit: type=1326 audit(1734312590.861:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f3b76f85d19 code=0x7ffc0000 [ 303.912449][ T29] audit: type=1326 audit(1734312590.871:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b76f85d19 code=0x7ffc0000 [ 303.936000][ T29] audit: type=1326 audit(1734312590.871:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b76f85d19 code=0x7ffc0000 [ 303.959990][ T29] audit: type=1326 audit(1734312590.871:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b76f85d19 code=0x7ffc0000 [ 303.983082][ T29] audit: type=1326 audit(1734312590.881:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3b76f85d19 code=0x7ffc0000 [ 304.524599][ T6516] netlink: 32 bytes leftover after parsing attributes in process `syz.4.173'. [ 304.610705][ T6520] loop2: detected capacity change from 0 to 512 [ 305.135041][ T6520] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 305.397320][ T6523] loop1: detected capacity change from 0 to 32768 [ 305.406551][ T6523] jfs: Unknown parameter '0x000000000000005900000000000000000089YY' [ 305.472137][ T6520] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.175: iget: bad i_size value: -6917529027641081756 [ 305.584178][ T6528] loop0: detected capacity change from 0 to 256 [ 305.602898][ T6520] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.175: couldn't read orphan inode 17 (err -117) [ 305.671821][ T6520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.747811][ T6529] netlink: 664 bytes leftover after parsing attributes in process `syz.3.179'. [ 305.913290][ T6491] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 306.586202][ T6545] loop1: detected capacity change from 0 to 128 [ 306.603403][ T6545] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 306.746642][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.747416][ T6545] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 307.074712][ T5846] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 307.314337][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.314480][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 28 [ 307.419162][ T5846] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 307.419335][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.419471][ T5846] usb 4-1: Product: syz [ 307.419580][ T5846] usb 4-1: Manufacturer: syz [ 307.419689][ T5846] usb 4-1: SerialNumber: syz [ 307.480785][ T5846] usb 4-1: config 0 descriptor?? [ 307.912491][ T5846] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 308.073894][ T5843] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 308.283185][ T5843] usb 2-1: device descriptor read/64, error -71 [ 308.553272][ T5843] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 308.692347][ T6301] udevd[6301]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.694414][ T5843] usb 2-1: device descriptor read/64, error -71 [ 308.824871][ T5843] usb usb2-port1: attempt power cycle [ 309.238192][ T5843] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 309.444220][ T5843] usb 2-1: device descriptor read/8, error -71 [ 309.682410][ T5868] usb 4-1: USB disconnect, device number 7 [ 309.722959][ T5843] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 309.972962][ T5843] usb 2-1: device descriptor read/8, error -71 [ 310.039816][ T4419] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 310.094138][ T5843] usb usb2-port1: unable to enumerate USB device [ 311.341794][ T6560] loop2: detected capacity change from 0 to 32768 [ 311.350858][ T6560] jfs: Unknown parameter '0x000000000000005e00000000000000000094^^' [ 311.385185][ T6563] loop3: detected capacity change from 0 to 32768 [ 311.733901][ T6563] bcachefs (/dev/loop3): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 5) [ 311.748400][ T6563] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size [ 311.838420][ T6560] loop2: detected capacity change from 0 to 2048 [ 312.400255][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 312.400334][ T29] audit: type=1326 audit(1734312599.521:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.2.196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a7d85d19 code=0x0 [ 312.731481][ T6581] loop3: detected capacity change from 0 to 128 [ 313.795349][ T6586] loop0: detected capacity change from 0 to 512 [ 314.016240][ T6586] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 314.026978][ T6586] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 314.154489][ T6593] loop3: detected capacity change from 0 to 4096 [ 314.221224][ T6593] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 314.263615][ T6586] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 314.283424][ T6586] System zones: 0-2, 18-18, 34-34 [ 314.316571][ T6593] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 314.373582][ T6593] ntfs3(loop3): volume is dirty and "force" flag is not set! [ 314.381527][ T6586] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 314.472894][ T6586] EXT4-fs (loop0): 1 truncate cleaned up [ 314.480593][ T6586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.423663][ T5846] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 315.666414][ T5846] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 315.676308][ T5846] usb 2-1: config 0 has no interface number 0 [ 315.683225][ T5846] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 315.693755][ T5846] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.882151][ T5846] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 315.892358][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.893464][ T5841] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 315.912759][ T5846] usb 2-1: Product: syz [ 315.917213][ T5846] usb 2-1: Manufacturer: syz [ 315.922049][ T5846] usb 2-1: SerialNumber: syz [ 316.010392][ T5846] usb 2-1: config 0 descriptor?? [ 316.018724][ T6598] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.051297][ T5846] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 316.114514][ T5846] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 316.163099][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 316.202491][ T5841] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.211456][ T5841] usb 4-1: config 0 has no interface number 0 [ 316.291793][ T5841] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 316.301467][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.310042][ T5841] usb 4-1: Product: syz [ 316.314825][ T5841] usb 4-1: Manufacturer: syz [ 316.319694][ T5841] usb 4-1: SerialNumber: syz [ 316.419241][ T5841] usb 4-1: config 0 descriptor?? [ 316.486313][ T5841] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 316.509889][ T6612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.520523][ T6612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.528663][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.741056][ T6616] loop2: detected capacity change from 0 to 512 [ 317.713792][ T6616] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 317.761128][ T6617] loop0: detected capacity change from 0 to 40427 [ 317.785916][ T6617] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 317.794376][ T6617] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 317.986785][ T6617] F2FS-fs (loop0): Found nat_bits in checkpoint [ 318.315696][ T6624] Process accounting resumed [ 318.374328][ T5841] gspca_spca1528: reg_w err -110 [ 318.434384][ T5841] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 318.573572][ T5841] usb 4-1: USB disconnect, device number 8 [ 318.599846][ T6617] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 318.608124][ T6617] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 320.145436][ T5868] usb 2-1: USB disconnect, device number 8 [ 320.230193][ T5868] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 320.246937][ T5868] cyberjack 2-1:0.69: device disconnected [ 320.925148][ T5785] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 320.933319][ T5785] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 320.941131][ T5785] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 320.949542][ T5785] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 320.958842][ T5785] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 320.966876][ T5785] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 320.974811][ T5785] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 322.102335][ T6648] loop3: detected capacity change from 0 to 512 [ 322.166557][ T6652] syz.2.223 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 322.301389][ T6648] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 322.311011][ T6648] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 322.529738][ T6648] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 322.583369][ T6648] System zones: 0-2, 18-18, 34-34 [ 322.652472][ T6648] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 322.832873][ T6648] EXT4-fs (loop3): 1 truncate cleaned up [ 322.840447][ T6648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.308271][ T6666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.226'. [ 323.318312][ T6666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.226'. [ 323.327824][ T6666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.226'. [ 323.337175][ T6666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.226'. [ 324.608360][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.729236][ T5846] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 325.000405][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 325.019323][ T5846] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 325.029128][ T5846] usb 2-1: New USB device strings: Mfr=7, Product=0, SerialNumber=0 [ 325.037590][ T5846] usb 2-1: Manufacturer: syz [ 325.055251][ T5846] usb 2-1: config 0 descriptor?? [ 325.082194][ T6677] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.548940][ T6676] loop1: detected capacity change from 0 to 512 [ 326.552299][ T6676] EXT4-fs: Ignoring removed bh option [ 326.556578][ T6676] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 326.637167][ T6676] EXT4-fs error (device loop1): __ext4_iget:4984: inode #15: block 1803188595: comm syz.1.230: invalid block [ 326.643733][ T6676] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.230: couldn't read orphan inode 15 (err -117) [ 326.649312][ T6676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.674881][ T5846] usbhid 2-1:0.0: can't add hid device: -71 [ 326.675542][ T5846] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 326.703051][ T5846] usb 2-1: USB disconnect, device number 9 [ 327.436821][ T6701] syz.3.238 (6701) used greatest stack depth: 4920 bytes left [ 327.913459][ T6710] loop0: detected capacity change from 0 to 128 [ 328.468089][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.492077][ T6710] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 328.656448][ T6722] netlink: 'syz.2.245': attribute type 30 has an invalid length. [ 329.139122][ T6731] loop1: detected capacity change from 0 to 8 [ 329.486004][ T6731] SQUASHFS error: Unable to read directory block [2c0:35] [ 329.521116][ T6731] SQUASHFS error: Failed to read block 0x2fc: -5 [ 329.528222][ T6731] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 329.536198][ T6731] SQUASHFS error: Unable to read directory block [247:26] [ 330.592500][ T6728] loop3: detected capacity change from 0 to 40427 [ 330.814297][ T6738] loop2: detected capacity change from 0 to 40427 [ 330.952840][ T6738] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 330.960890][ T6738] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 331.033640][ T6728] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 331.044477][ T6728] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 331.169272][ T6738] F2FS-fs (loop2): Found nat_bits in checkpoint [ 331.324609][ T6736] loop0: detected capacity change from 0 to 32768 [ 331.333512][ T6736] jfs: Unknown parameter '0x000000000000008c00000000000000000140ŒŒ' [ 331.450694][ T6728] F2FS-fs (loop3): invalid crc value [ 331.524962][ T6738] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 331.532557][ T6738] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 331.583296][ T6728] F2FS-fs (loop3): Found nat_bits in checkpoint [ 332.016094][ T6735] loop0: detected capacity change from 0 to 2048 [ 332.538920][ T6752] loop1: detected capacity change from 0 to 256 [ 332.601038][ T6752] exfat: Unknown parameter '!„B!„Bñ¿à´¿Ä' [ 332.697489][ T6752] netlink: 'syz.1.251': attribute type 1 has an invalid length. [ 332.705657][ T6752] netlink: 'syz.1.251': attribute type 3 has an invalid length. [ 332.713795][ T6752] netlink: 224 bytes leftover after parsing attributes in process `syz.1.251'. [ 333.133379][ T5784] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 333.141240][ T5784] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 333.149361][ T5784] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 333.157372][ T5784] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 333.165394][ T5784] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 333.173488][ T5784] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 333.181295][ T5784] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 334.354120][ T6763] loop1: detected capacity change from 0 to 4096 [ 334.384154][ T6763] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 335.181845][ T6777] loop3: detected capacity change from 0 to 2048 [ 335.243301][ T6777] NILFS (loop3): invalid segment: Inconsistency found [ 335.250415][ T6777] NILFS (loop3): trying rollback from an earlier position [ 335.361556][ T6777] NILFS (loop3): recovery complete [ 335.485060][ T6781] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.117007][ T6780] loop0: detected capacity change from 0 to 32768 [ 336.125967][ T6780] jfs: Unknown parameter '0x000000000000009900000000000000000153™™' [ 336.612796][ T6780] loop0: detected capacity change from 0 to 2048 [ 336.990518][ T6790] netlink: 44 bytes leftover after parsing attributes in process `syz.1.266'. [ 338.354796][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.270'. [ 338.364231][ T6800] netlink: 'syz.0.270': attribute type 6 has an invalid length. [ 338.771296][ T6794] loop1: detected capacity change from 0 to 65536 [ 338.927453][ T5846] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 339.046702][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.056153][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.066555][ T6807] bridge0: entered allmulticast mode [ 339.080788][ T6810] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.089008][ T6810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.097774][ T6810] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.105589][ T6810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.114563][ T6810] bridge0: entered promiscuous mode [ 339.190514][ T6794] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 339.468289][ T6794] XFS (loop1): Ending clean mount [ 339.484725][ T6794] XFS (loop1): Quotacheck needed: Please wait. [ 339.561844][ T6794] XFS (loop1): Quotacheck: Done. [ 339.845312][ T29] audit: type=1800 audit(1734312626.831:66): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.268" name="bus" dev="loop1" ino=74 res=0 errno=0 [ 339.953630][ T5795] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 340.124311][ T5846] usb 1-1: Using ep0 maxpacket: 32 [ 340.140706][ T5846] usb 1-1: config 0 has an invalid interface number: 76 but max is 0 [ 340.151113][ T5846] usb 1-1: config 0 has no interface number 0 [ 340.157899][ T5846] usb 1-1: config 0 interface 76 has no altsetting 0 [ 340.164976][ T5846] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 340.175060][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.332346][ T6816] netlink: 'syz.2.273': attribute type 34 has an invalid length. [ 341.088812][ T6823] ebt_among: dst integrity fail: 133 [ 341.127492][ T5846] usb 1-1: config 0 descriptor?? [ 341.654602][ T5846] usb 1-1: can't set config #0, error -71 [ 341.785244][ T5846] usb 1-1: USB disconnect, device number 13 [ 341.800034][ T5978] udevd[5978]: setting mode of /dev/bus/usb/001/013 to 020664 failed: No such file or directory [ 341.853466][ T5978] udevd[5978]: setting owner of /dev/bus/usb/001/013 to uid=0, gid=0 failed: No such file or directory [ 342.034292][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.041004][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.636713][ T5846] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 342.667629][ T6833] xt_hashlimit: max too large, truncated to 1048576 [ 342.675932][ T6833] xt_bpf: check failed: parse error [ 342.813042][ T5846] usb 1-1: Using ep0 maxpacket: 32 [ 342.845190][ T5846] usb 1-1: config 8 has an invalid interface number: 28 but max is 0 [ 342.853957][ T5846] usb 1-1: config 8 has no interface number 0 [ 342.968149][ T5846] usb 1-1: New USB device found, idVendor=164d, idProduct=5958, bcdDevice= 2.02 [ 342.978350][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.986897][ T5846] usb 1-1: Product: syz [ 342.991297][ T5846] usb 1-1: Manufacturer: syz [ 342.996232][ T5846] usb 1-1: SerialNumber: syz [ 343.498448][ T5846] usb 1-1: USB disconnect, device number 14 [ 343.586497][ T6831] loop2: detected capacity change from 0 to 32768 [ 343.595378][ T6831] jfs: Unknown parameter '0x000000000000009100000000000000000145‘‘' [ 344.104642][ T6831] loop2: detected capacity change from 0 to 2048 [ 345.164024][ T6842] loop1: detected capacity change from 0 to 512 [ 345.620927][ T6842] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 345.630633][ T6842] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 346.017080][ T6842] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 346.027355][ T6853] loop0: detected capacity change from 0 to 4096 [ 346.053352][ T6842] System zones: 0-2, 18-18, 34-34 [ 346.129356][ T6842] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 346.223909][ T6850] loop3: detected capacity change from 0 to 65536 [ 346.386928][ T6842] EXT4-fs (loop1): 1 truncate cleaned up [ 346.394612][ T6842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.523669][ T6850] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 346.777723][ T6850] XFS (loop3): Ending clean mount [ 346.807838][ T6850] XFS (loop3): Quotacheck needed: Please wait. [ 346.873567][ T6850] XFS (loop3): Quotacheck: Done. [ 346.984993][ T29] audit: type=1800 audit(1734312634.131:67): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.284" name="bus" dev="loop3" ino=74 res=0 errno=0 [ 347.303457][ T6844] loop2: detected capacity change from 0 to 32768 [ 347.316896][ T6844] bcachefs (/dev/loop2): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 5) [ 347.333470][ T6844] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size [ 347.704979][ T5788] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 347.885191][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.485634][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 349.492068][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 349.498600][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 349.793782][ T6880] loop1: detected capacity change from 0 to 65536 [ 349.880536][ T6882] loop2: detected capacity change from 0 to 1024 [ 349.890420][ T6882] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.163700][ T6882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.507949][ T6880] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 350.985672][ T5868] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 351.060473][ T6900] loop0: detected capacity change from 0 to 128 [ 351.282495][ T5868] usb 3-1: config 150 has an invalid interface number: 176 but max is 0 [ 351.291310][ T5868] usb 3-1: config 150 has no interface number 0 [ 351.298107][ T5868] usb 3-1: config 150 interface 176 has no altsetting 0 [ 351.323790][ T6900] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 351.349130][ T5868] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice= d.95 [ 351.358818][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.367340][ T5868] usb 3-1: Product: syz [ 351.371739][ T5868] usb 3-1: Manufacturer: syz [ 351.376723][ T5868] usb 3-1: SerialNumber: syz [ 351.574633][ T6900] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 351.641693][ T6880] XFS (loop1): Ending clean mount [ 351.665572][ T6880] XFS (loop1): Quotacheck needed: Please wait. [ 351.816875][ T5868] qmi_wwan 3-1:150.176: bogus CDC Union: master=0, slave=1 [ 351.829034][ T5868] qmi_wwan 3-1:150.176: probe with driver qmi_wwan failed with error -22 [ 351.852851][ T6900] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 351.988602][ T5868] usb 3-1: USB disconnect, device number 4 [ 352.025440][ T6880] XFS (loop1): Quotacheck: Done. [ 352.048533][ T6900] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 352.087162][ T6900] syz_tun: entered promiscuous mode [ 352.113458][ T6900] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 352.270666][ T5795] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 352.598127][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 352.621787][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.484539][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.306'. [ 353.760929][ T6914] loop3: detected capacity change from 0 to 65536 [ 353.893795][ T6914] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 354.197583][ T6914] XFS (loop3): Ending clean mount [ 354.214214][ T6914] XFS (loop3): Quotacheck needed: Please wait. [ 354.427754][ T6914] XFS (loop3): Quotacheck: Done. [ 354.540402][ T29] audit: type=1800 audit(1734312641.641:68): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.301" name="bus" dev="loop3" ino=74 res=0 errno=0 [ 354.925007][ T6939] loop1: detected capacity change from 0 to 512 [ 355.165079][ T6939] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 355.174570][ T6939] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 355.197686][ T5788] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 355.546996][ T6939] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 355.573331][ T6939] System zones: 0-2, 18-18, 34-34 [ 355.623728][ T6939] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 355.806524][ T6939] EXT4-fs (loop1): 1 truncate cleaned up [ 355.814452][ T6939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.082986][ T6949] loop0: detected capacity change from 0 to 65536 [ 358.228892][ T6949] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 358.589868][ T6949] XFS (loop0): Ending clean mount [ 358.903855][ T5785] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 360.006677][ T6967] fuse: Bad value for 'fd' [ 360.254473][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.838096][ T6968] loop2: detected capacity change from 0 to 32768 [ 361.647520][ T6970] loop3: detected capacity change from 0 to 32768 [ 361.656884][ T6970] jfs: Unknown parameter '0x000000000000009700000000000000000151——' [ 362.196823][ T6967] overlay: ./bus is not a directory [ 363.232895][ T6970] loop3: detected capacity change from 0 to 2048 [ 363.692170][ T6982] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 363.894896][ T6986] loop0: detected capacity change from 0 to 512 [ 363.903772][ T6986] EXT4-fs: Ignoring removed bh option [ 363.910134][ T6986] ext3: Bad value for 'stripe' [ 364.164217][ T6982] loop3: detected capacity change from 0 to 4096 [ 364.203294][ T6982] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 364.893735][ T5848] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 365.038511][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.328'. [ 365.047915][ T6993] tc_dump_action: action bad kind [ 365.506557][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 365.828873][ T6999] loop0: detected capacity change from 0 to 512 [ 365.982988][ T5848] usb 2-1: device descriptor read/64, error -71 [ 366.048469][ T6999] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 366.060301][ T6999] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 366.390486][ T6999] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 366.543074][ T6999] System zones: 0-2, 18-18, 34-34 [ 366.663057][ T6999] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 367.018312][ T6999] EXT4-fs (loop0): 1 truncate cleaned up [ 367.026210][ T6999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.564770][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.228254][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 370.414585][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.168997][ T7029] loop3: detected capacity change from 0 to 65536 [ 371.883975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 374.303867][ T7041] loop0: detected capacity change from 0 to 65536 [ 374.481940][ T7041] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 374.728838][ T7041] XFS (loop0): Ending clean mount [ 374.745897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 374.767525][ T7041] XFS (loop0): Quotacheck needed: Please wait. [ 374.938600][ T7057] loop3: detected capacity change from 0 to 256 [ 375.335727][ T7057] FAT-fs (loop3): bogus number of directory entries (4) [ 375.343391][ T7057] FAT-fs (loop3): Can't find a valid FAT filesystem [ 375.674540][ T7041] XFS (loop0): Quotacheck: Done. [ 376.771072][ T5785] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 377.012936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 377.343512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 377.514119][ T7061] loop2: detected capacity change from 0 to 128 [ 378.136229][ T7067] netlink: 36 bytes leftover after parsing attributes in process `syz.3.350'. [ 378.146436][ T7067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.350'. [ 378.155772][ T7067] netlink: 36 bytes leftover after parsing attributes in process `syz.3.350'. [ 378.165004][ T7067] netlink: 36 bytes leftover after parsing attributes in process `syz.3.350'. [ 378.480876][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 379.000474][ T7079] netlink: 32 bytes leftover after parsing attributes in process `syz.4.356'. [ 379.253889][ T7083] netlink: 664 bytes leftover after parsing attributes in process `syz.3.357'. [ 381.117550][ T7086] loop0: detected capacity change from 0 to 65536 [ 382.140587][ T7107] loop3: detected capacity change from 0 to 512 [ 382.313595][ T7086] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 382.351786][ T7107] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 382.361972][ T7107] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 382.381962][ T7086] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR [ 382.383056][ T7086] XFS (loop0): log mount failed [ 382.505170][ T7107] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 382.516330][ T7107] System zones: 0-2, 18-18, 34-34 [ 382.544921][ T7107] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 382.663594][ T7107] EXT4-fs (loop3): 1 truncate cleaned up [ 382.671066][ T7107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.512197][ T7119] netlink: 'syz.4.364': attribute type 32 has an invalid length. [ 383.751875][ T7115] process 'syz.0.366' launched './file2' with NULL argv: empty string added [ 384.004001][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.383830][ T7125] netlink: 'syz.3.369': attribute type 11 has an invalid length. [ 384.813211][ T29] audit: type=1326 audit(1734312671.911:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a7d85d19 code=0x7ffc0000 [ 384.921539][ T7131] loop1: detected capacity change from 0 to 2048 [ 384.943200][ T29] audit: type=1326 audit(1734312671.981:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f52a7d85d19 code=0x7ffc0000 [ 384.961995][ T7134] FAULT_INJECTION: forcing a failure. [ 384.961995][ T7134] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 384.965859][ T29] audit: type=1326 audit(1734312672.081:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a7d85d19 code=0x7ffc0000 [ 384.979169][ T7134] CPU: 1 UID: 0 PID: 7134 Comm: syz.3.374 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 385.001813][ T29] audit: type=1326 audit(1734312672.081:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a7d85d19 code=0x7ffc0000 [ 385.011751][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 385.011831][ T7134] Call Trace: [ 385.011882][ T7134] [ 385.051015][ T7134] dump_stack_lvl+0x216/0x2d0 [ 385.056129][ T7134] dump_stack+0x1e/0x24 [ 385.060640][ T7134] should_fail_ex+0x748/0x7f0 [ 385.065647][ T7134] should_fail+0x2a/0x40 [ 385.070185][ T7134] should_fail_usercopy+0x2e/0x40 [ 385.075523][ T7134] _copy_from_user+0x35/0x110 [ 385.080506][ T7134] ___sys_sendmsg+0x120/0x3c0 [ 385.085482][ T7134] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 385.091582][ T7134] ? __rcu_read_unlock+0x7b/0xe0 [ 385.096833][ T7134] ? __fget_files+0x42b/0x500 [ 385.101798][ T7134] ? kmsan_get_metadata+0x13e/0x1c0 [ 385.107268][ T7134] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 385.113369][ T7134] __x64_sys_sendmsg+0x212/0x3c0 [ 385.118608][ T7134] ? kmsan_get_metadata+0x13e/0x1c0 [ 385.124090][ T7134] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 385.130175][ T7134] ? kmsan_get_metadata+0x13e/0x1c0 [ 385.135651][ T7134] x64_sys_call+0x2ed6/0x3c30 [ 385.140645][ T7134] do_syscall_64+0xcd/0x1e0 [ 385.145414][ T7134] ? clear_bhb_loop+0x25/0x80 [ 385.150397][ T7134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.156600][ T7134] RIP: 0033:0x7f3862185d19 [ 385.161252][ T7134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.181168][ T7134] RSP: 002b:00007f386302c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.189890][ T7134] RAX: ffffffffffffffda RBX: 00007f3862375fa0 RCX: 00007f3862185d19 [ 385.198206][ T7134] RDX: 000000001000c080 RSI: 0000000020000180 RDI: 0000000000000003 [ 385.206422][ T7134] RBP: 00007f386302c090 R08: 0000000000000000 R09: 0000000000000000 [ 385.215074][ T7134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.223279][ T7134] R13: 0000000000000000 R14: 00007f3862375fa0 R15: 00007ffd82b24428 [ 385.231508][ T7134] [ 385.496281][ T29] audit: type=1326 audit(1734312672.131:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52a7d85d19 code=0x7ffc0000 [ 385.520691][ T29] audit: type=1326 audit(1734312672.131:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a7d85d19 code=0x7ffc0000 [ 385.543330][ T29] audit: type=1326 audit(1734312672.131:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52a7d85d19 code=0x7ffc0000 [ 385.566197][ T29] audit: type=1326 audit(1734312672.131:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a7d85d19 code=0x7ffc0000 [ 385.588857][ T29] audit: type=1326 audit(1734312672.131:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f52a7d85d19 code=0x7ffc0000 [ 385.611424][ T29] audit: type=1326 audit(1734312672.131:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7128 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a7d85d19 code=0x7ffc0000 [ 385.888652][ T7129] loop2: detected capacity change from 0 to 40427 [ 385.901401][ T7129] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 385.909623][ T7129] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 385.950789][ T7129] F2FS-fs (loop2): invalid crc value [ 385.953509][ T7131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.123017][ T7131] netlink: 6 bytes leftover after parsing attributes in process `syz.1.372'. [ 386.140848][ T7131] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 386.312257][ T7129] F2FS-fs (loop2): Found nat_bits in checkpoint [ 388.635213][ T7129] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 388.642885][ T7129] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 388.904616][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.976461][ T7154] netlink: 'syz.0.378': attribute type 10 has an invalid length. [ 388.986586][ T7154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.378'. [ 388.999536][ T7154] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 389.913024][ T7161] loop0: detected capacity change from 0 to 16 [ 389.995212][ T7161] erofs (device loop0): mounted with root inode @ nid 36. [ 390.021957][ T7161] mmap: syz.0.383 (7161) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 390.471251][ T7157] loop1: detected capacity change from 0 to 512 [ 390.500465][ T7157] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 390.510027][ T7157] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 390.722520][ T7157] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 390.732254][ T7157] System zones: 0-2, 18-18, 34-34 [ 390.930520][ T7157] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 390.965283][ T7157] EXT4-fs (loop1): 1 truncate cleaned up [ 390.973017][ T7157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.122110][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 391.122186][ T29] audit: type=1326 audit(1734312678.261:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 391.155964][ T7176] netlink: 134712 bytes leftover after parsing attributes in process `syz.4.386'. [ 391.165628][ T7176] openvswitch: netlink: Message has 76 unknown bytes. [ 391.208382][ T29] audit: type=1326 audit(1734312678.331:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 391.231865][ T29] audit: type=1326 audit(1734312678.331:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 391.257495][ T29] audit: type=1326 audit(1734312678.331:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 391.280362][ T29] audit: type=1326 audit(1734312678.331:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 391.303133][ T29] audit: type=1326 audit(1734312678.331:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 391.326417][ T29] audit: type=1326 audit(1734312678.331:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 391.350684][ T29] audit: type=1326 audit(1734312678.331:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 391.373724][ T29] audit: type=1326 audit(1734312678.331:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 391.396502][ T29] audit: type=1326 audit(1734312678.331:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.3.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3862185d19 code=0x7ffc0000 [ 391.970249][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.039826][ T7183] loop2: detected capacity change from 0 to 128 [ 392.146722][ T7185] netlink: 48 bytes leftover after parsing attributes in process `syz.4.391'. [ 392.375429][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'. [ 393.893979][ T7191] loop1: detected capacity change from 0 to 65536 [ 393.943984][ T7191] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 394.060178][ T7191] XFS (loop1): Ending clean mount [ 394.071547][ T7191] XFS (loop1): Quotacheck needed: Please wait. [ 394.315309][ T7191] XFS (loop1): Quotacheck: Done. [ 394.406345][ T7214] loop3: detected capacity change from 0 to 1024 [ 394.415903][ T7214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 394.729898][ T7214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.136363][ T5795] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 395.655189][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.255139][ T7231] loop0: detected capacity change from 0 to 512 [ 396.361710][ T7231] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 396.373549][ T7231] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 396.383114][ T5868] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 396.614440][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.625177][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 396.637183][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 396.648656][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 396.660251][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 396.671629][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 396.683598][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.828949][ T5868] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 396.838779][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.847244][ T5868] usb 4-1: Product: syz [ 396.851645][ T5868] usb 4-1: Manufacturer: syz [ 396.856676][ T5868] usb 4-1: SerialNumber: syz [ 396.894319][ T7248] netlink: 700 bytes leftover after parsing attributes in process `syz.1.404'. [ 396.975908][ T5848] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 396.990284][ T7231] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 397.006905][ T5868] usb 4-1: config 0 descriptor?? [ 397.015470][ T7241] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 397.046549][ T7231] System zones: 0-2, 18-18, 34-34 [ 397.081042][ T5868] ati_remote 4-1:0.0: Initializing ati_remote hardware failed. [ 397.093234][ T5868] ati_remote 4-1:0.0: probe with driver ati_remote failed with error -5 [ 397.139117][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 397.151147][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 397.172121][ T7250] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 397.180895][ T7250] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 397.190912][ T7250] overlayfs: missing 'lowerdir' [ 397.196966][ T7231] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 397.236175][ T5848] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 397.245759][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.246080][ T7231] EXT4-fs (loop0): 1 truncate cleaned up [ 397.254165][ T5848] usb 3-1: Product: syz [ 397.254278][ T5848] usb 3-1: Manufacturer: syz [ 397.261817][ T7231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.264253][ T5848] usb 3-1: SerialNumber: syz [ 397.341759][ T5848] usb 3-1: config 0 descriptor?? [ 397.619310][ T7253] syz.1.410 (7253) used greatest stack depth: 4504 bytes left [ 397.651509][ T5848] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 397.745809][ C0] powermate: config urb returned -71 [ 397.753330][ C0] powermate: config urb returned -71 [ 397.760176][ C0] powermate: config urb returned -71 [ 397.767210][ C0] powermate: config urb returned -71 [ 397.789312][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 397.798796][ T5848] usb 3-1: USB disconnect, device number 5 [ 397.924618][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.589230][ T7259] tmpfs: Bad value for 'nr_inodes' [ 399.632571][ T5868] usb 4-1: USB disconnect, device number 9 [ 400.264094][ T7276] loop3: detected capacity change from 0 to 1024 [ 400.437286][ T7268] loop0: detected capacity change from 0 to 65536 [ 400.570639][ T3617] hfsplus: b-tree write err: -5, ino 4 [ 400.625999][ T7268] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 400.778875][ T7295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.423'. [ 400.902464][ T7268] XFS (loop0): Ending clean mount [ 400.913799][ T7268] XFS (loop0): Quotacheck needed: Please wait. [ 400.981046][ T7268] XFS (loop0): Quotacheck: Done. [ 401.516949][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 401.517030][ T29] audit: type=1800 audit(1734313201.542:147): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.414" name="bus" dev="loop0" ino=75 res=0 errno=0 [ 401.611310][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 401.781971][ T7297] loop2: detected capacity change from 0 to 512 [ 401.926162][ T7297] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 401.935597][ T7297] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 402.036559][ T5785] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 402.133133][ T7318] loop1: detected capacity change from 0 to 128 [ 402.163705][ T7297] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 402.210549][ T7297] System zones: 0-2, 18-18, 34-34 [ 402.258936][ T7318] Bluetooth: MGMT ver 1.23 [ 402.300582][ T7297] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 402.432032][ T7297] EXT4-fs (loop2): 1 truncate cleaned up [ 402.440289][ T7297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.236789][ T5868] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 403.460688][ T5868] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 403.469346][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.479977][ T5868] usb 2-1: config 0 has no interface number 0 [ 403.486336][ T5868] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 403.496637][ T5868] usb 2-1: config 0 interface 51 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 403.512262][ T5868] usb 2-1: New USB device found, idVendor=093a, idProduct=2620, bcdDevice=7e.68 [ 403.521789][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.581284][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.588385][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.665198][ T5868] usb 2-1: config 0 descriptor?? [ 403.688385][ T5868] gspca_main: gspca_pac7302-2.14.0 probing 093a:2620 [ 404.113461][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.405588][ T7330] tmpfs: Unknown parameter 'ua' [ 404.467557][ T7330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.477459][ T7330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.072683][ T7338] loop3: detected capacity change from 0 to 32768 [ 405.120361][ T7341] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 405.152915][ T7338] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 405.161667][ T7338] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 405.300721][ T7338] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 405.392619][ T5868] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 405.489087][ T7346] loop0: detected capacity change from 0 to 512 [ 405.640739][ T5846] usb 2-1: USB disconnect, device number 12 [ 405.655918][ T7338] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 405.722149][ T5796] Bluetooth: hci4: command 0x0406 tx timeout [ 405.778879][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 405.859219][ T7338] team0 (unregistering): Port device team_slave_0 removed [ 405.889128][ T7338] team0 (unregistering): Port device team_slave_1 removed [ 405.934879][ T7346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.949654][ T7346] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.091366][ T7348] loop2: detected capacity change from 0 to 2048 [ 406.535901][ T7356] syz_tun: entered promiscuous mode [ 406.871918][ T7356] syz_tun: left promiscuous mode [ 407.303851][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.402271][ T7348] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.951510][ T5868] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 408.141935][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 408.270676][ T7369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.441'. [ 408.387011][ T5868] usb 3-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 408.396646][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.404918][ T5868] usb 3-1: Product: syz [ 408.409602][ T5868] usb 3-1: Manufacturer: syz [ 408.414446][ T5868] usb 3-1: SerialNumber: syz [ 408.456706][ T7370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.441'. [ 408.468393][ T7370] netlink: 108 bytes leftover after parsing attributes in process `syz.0.441'. [ 408.478115][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 408.597942][ T5868] usb 3-1: config 0 descriptor?? [ 408.804057][ T7373] loop1: detected capacity change from 0 to 1024 [ 408.879393][ T7373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 409.514236][ T7373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.828007][ T7389] loop3: detected capacity change from 0 to 512 [ 409.968453][ T7389] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 409.977986][ T7389] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 409.985547][ T5868] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 410.016748][ T5868] usb 3-1: USB disconnect, device number 6 [ 410.192008][ T7389] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 410.211511][ T7389] System zones: 0-2, 18-18, 34-34 [ 410.396839][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.481287][ T7389] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 410.585492][ T7389] EXT4-fs (loop3): 1 truncate cleaned up [ 410.593184][ T7389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.615502][ T7398] loop2: detected capacity change from 0 to 1024 [ 410.638626][ T5846] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 410.784872][ T7400] loop1: detected capacity change from 0 to 512 [ 410.794205][ T7400] EXT4-fs: Ignoring removed orlov option [ 410.965735][ T7400] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 411.365315][ T5846] usb 1-1: Using ep0 maxpacket: 32 [ 411.483410][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.562592][ T5846] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 411.572521][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.580982][ T5846] usb 1-1: Product: syz [ 411.585869][ T5846] usb 1-1: Manufacturer: syz [ 411.590885][ T5846] usb 1-1: SerialNumber: syz [ 411.865413][ T5846] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 413.059057][ T7424] netlink: 'syz.1.462': attribute type 13 has an invalid length. [ 413.067472][ T7424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.462'. [ 413.813683][ T5846] gspca_stk1135: reg_w 0xf err -110 [ 413.820363][ T5846] gspca_stk1135: serial bus timeout: status=0x00 [ 413.827269][ T5846] gspca_stk1135: Sensor write failed [ 413.832893][ T5846] gspca_stk1135: serial bus timeout: status=0x00 [ 413.839435][ T5846] gspca_stk1135: Sensor write failed [ 413.845286][ T5846] gspca_stk1135: serial bus timeout: status=0x00 [ 413.851822][ T5846] gspca_stk1135: Sensor read failed [ 413.859581][ T5846] gspca_stk1135: serial bus timeout: status=0x00 [ 413.866467][ T5846] gspca_stk1135: Sensor read failed [ 413.875888][ T5846] gspca_stk1135: Detected sensor type unknown (0x0) [ 413.882787][ T5846] gspca_stk1135: serial bus timeout: status=0x00 [ 413.891095][ T5846] gspca_stk1135: Sensor read failed [ 413.896649][ T5846] gspca_stk1135: serial bus timeout: status=0x00 [ 413.903185][ T5846] gspca_stk1135: Sensor read failed [ 413.908842][ T5846] gspca_stk1135: serial bus timeout: status=0x00 [ 413.915530][ T5846] gspca_stk1135: Sensor write failed [ 413.921077][ T5846] gspca_stk1135: serial bus timeout: status=0x00 [ 413.927742][ T5846] gspca_stk1135: Sensor write failed [ 413.933456][ T5846] stk1135 1-1:64.0: probe with driver stk1135 failed with error -110 [ 414.482226][ T5846] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 414.585034][ T7450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.595092][ T7450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.694531][ T5846] usb 4-1: Using ep0 maxpacket: 8 [ 414.721634][ T5846] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 414.731061][ T5846] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 414.741697][ T5846] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.811498][ T5846] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.821303][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.829909][ T5846] usb 4-1: Product: syz [ 414.834332][ T5846] usb 4-1: Manufacturer: syz [ 414.839313][ T5846] usb 4-1: SerialNumber: syz [ 415.383142][ T5846] usb 4-1: 0:2 : does not exist [ 415.469549][ T5846] usb 4-1: USB disconnect, device number 10 [ 415.792302][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.949513][ T5846] usb 1-1: USB disconnect, device number 15 [ 417.670129][ T7495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.491'. [ 417.717478][ T7493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.326197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 420.414967][ T5848] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 420.616480][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 420.688197][ T5848] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 420.698914][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.708429][ T5848] usb 1-1: Product: syz [ 420.712852][ T5848] usb 1-1: Manufacturer: syz [ 420.717913][ T5848] usb 1-1: SerialNumber: syz [ 420.754626][ T5848] usb 1-1: config 0 descriptor?? [ 420.982327][ T5848] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 421.626490][ T5848] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 421.643253][ T5848] usb 1-1: USB disconnect, device number 16 [ 421.716020][ T5846] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 421.818347][ T7541] netlink: 60 bytes leftover after parsing attributes in process `syz.2.511'. [ 421.914210][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 421.944220][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.955864][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.966209][ T5846] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 421.975681][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.019180][ T5846] usb 4-1: config 0 descriptor?? [ 422.475282][ T7535] netlink: 172 bytes leftover after parsing attributes in process `syz.3.508'. [ 422.595658][ T5846] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 422.778505][ T5846] corsair 0003:1B1C:1B02.0002: Read invalid backlight brightness: c5. [ 423.001137][ T5868] usb 4-1: USB disconnect, device number 11 [ 423.902804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 423.912160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 424.024206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 424.776294][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 424.786044][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 424.795402][ T7578] netlink: 'syz.3.527': attribute type 13 has an invalid length. [ 424.803496][ T7578] netlink: 'syz.3.527': attribute type 11 has an invalid length. [ 427.721382][ T5846] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 427.917321][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 428.150178][ T5846] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.160824][ T5846] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 428.256669][ T5846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 428.266183][ T5846] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 428.275140][ T5846] usb 1-1: Product: syz [ 428.279639][ T5846] usb 1-1: Manufacturer: syz [ 428.423266][ T5846] cdc_ether 1-1:1.0: skipping garbage [ 428.430015][ T5846] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 429.520821][ T5796] Bluetooth: Frame is too long (len 12, expected len 4) [ 430.475839][ T5846] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 430.635360][ T5848] usb 1-1: USB disconnect, device number 17 [ 430.671735][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 430.706127][ T5846] usb 3-1: config 0 has an invalid interface number: 33 but max is 1 [ 430.715576][ T5846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.726940][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 430.737056][ T5846] usb 3-1: config 0 has no interface number 0 [ 430.744391][ T5846] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 430.779264][ T5846] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 430.789056][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.797514][ T5846] usb 3-1: Product: syz [ 430.802550][ T5846] usb 3-1: Manufacturer: syz [ 430.807409][ T5846] usb 3-1: SerialNumber: syz [ 430.854978][ T5846] usb 3-1: config 0 descriptor?? [ 430.914399][ T5846] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 431.169163][ T2313] pvrusb2: Invalid write control endpoint [ 431.244593][ T2313] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 431.255468][ T2313] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 431.361424][ T5846] usb 3-1: USB disconnect, device number 7 [ 432.589104][ T7699] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 432.626043][ T7702] loop9: detected capacity change from 0 to 7 [ 432.702517][ T7702] Dev loop9: unable to read RDB block 7 [ 432.708806][ T7702] loop9: unable to read partition table [ 432.785584][ T7702] loop9: partition table beyond EOD, truncated [ 432.792890][ T7702] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 433.340375][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 434.526217][ T5848] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 435.056235][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 436.076872][ T7744] netlink: 'syz.4.592': attribute type 3 has an invalid length. [ 436.085211][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'. [ 436.413117][ T5848] usb 2-1: unable to get BOS descriptor or descriptor too short [ 436.446058][ T5848] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 436.454166][ T5848] usb 2-1: can't read configurations, error -71 [ 436.641689][ T29] audit: type=1326 audit(1734313236.320:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 436.658751][ T5868] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 436.664976][ T29] audit: type=1326 audit(1734313236.320:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 436.762405][ T29] audit: type=1326 audit(1734313236.440:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 436.785806][ T29] audit: type=1326 audit(1734313236.450:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 436.808569][ T29] audit: type=1326 audit(1734313236.460:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 436.831218][ T29] audit: type=1326 audit(1734313236.460:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 436.854107][ T29] audit: type=1326 audit(1734313236.470:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 436.877274][ T29] audit: type=1326 audit(1734313236.470:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 436.904657][ T29] audit: type=1326 audit(1734313236.480:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 436.928078][ T29] audit: type=1326 audit(1734313236.480:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.4.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 437.184647][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 437.297465][ T5868] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 437.307711][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 437.316256][ T5868] usb 4-1: Product: syz [ 437.320661][ T5868] usb 4-1: Manufacturer: syz [ 437.325668][ T5868] usb 4-1: SerialNumber: syz [ 437.350276][ T5868] usb 4-1: config 0 descriptor?? [ 437.388035][ T5868] usbtest 4-1:0.0: FX2 device [ 437.393139][ T5868] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 437.575366][ T8] usb 4-1: USB disconnect, device number 12 [ 438.143572][ T7769] netlink: 244 bytes leftover after parsing attributes in process `syz.4.602'. [ 442.871179][ T5868] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 443.053922][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 443.083768][ T5868] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 443.092683][ T5868] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 443.101810][ T5868] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 443.111209][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 443.121810][ T5868] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 443.133757][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 443.147293][ T5868] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 443.157215][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.360334][ T5868] usb 4-1: config 0 descriptor?? [ 443.592319][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 443.592406][ T29] audit: type=1326 audit(1734313243.213:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 443.621487][ T29] audit: type=1326 audit(1734313243.223:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 443.644533][ T29] audit: type=1326 audit(1734313243.223:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe18d384680 code=0x7ffc0000 [ 443.667333][ T29] audit: type=1326 audit(1734313243.223:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe18d384680 code=0x7ffc0000 [ 443.690185][ T29] audit: type=1326 audit(1734313243.233:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 443.713294][ T29] audit: type=1326 audit(1734313243.233:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 443.735970][ T29] audit: type=1326 audit(1734313243.233:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 443.759502][ T29] audit: type=1326 audit(1734313243.233:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 443.782271][ T29] audit: type=1326 audit(1734313243.233:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18d385d19 code=0x7ffc0000 [ 443.862806][ T5868] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 444.167694][ T5868] usb 4-1: USB disconnect, device number 13 [ 444.242071][ T5868] usblp0: removed [ 445.454218][ T5868] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 445.625009][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 446.398102][ T5868] usb 4-1: device descriptor read/all, error -71 [ 448.028405][ T29] audit: type=1326 audit(1734313247.655:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b76f85d19 code=0x7ffc0000 [ 448.481234][ T7935] loop2: detected capacity change from 0 to 7 [ 448.506067][ T7935] Dev loop2: unable to read RDB block 7 [ 448.512855][ T7935] loop2: unable to read partition table [ 448.529625][ T7935] loop2: partition table beyond EOD, truncated [ 448.536102][ T7935] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 452.055815][ T7995] mmap: syz.1.697 (7995): VmData 37462016 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 453.685447][ T5848] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 453.904440][ T5848] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 453.913246][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 453.925781][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 453.937334][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 453.948902][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 453.962364][ T5848] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 453.971964][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.025106][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 454.048072][ T8024] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 2304 - 0 [ 454.057329][ T8024] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 2304 - 0 [ 454.066932][ T8024] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 2304 - 0 [ 454.076181][ T8024] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 2304 - 0 [ 454.085484][ T8024] geneve2: entered promiscuous mode [ 454.090930][ T8024] geneve2: entered allmulticast mode [ 454.197213][ T5848] usb 4-1: config 0 descriptor?? [ 454.206710][ T8016] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 454.652061][ T5848] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 454.660199][ T5848] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 454.668251][ T5848] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 454.676128][ T5848] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 454.683942][ T5848] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 454.693117][ T5848] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 454.701011][ T5848] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 454.708861][ T5848] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 454.717607][ T5848] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 454.725368][ T5848] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 454.733286][ T5848] plantronics 0003:047F:FFFF.0003: collection stack underflow [ 454.741210][ T5848] plantronics 0003:047F:FFFF.0003: item 0 0 0 12 parsing failed [ 454.944480][ T5848] plantronics 0003:047F:FFFF.0003: parse failed [ 454.951851][ T5848] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 455.072479][ T5848] usb 4-1: USB disconnect, device number 16 [ 457.926701][ T8081] netlink: 'syz.4.734': attribute type 29 has an invalid length. [ 458.011728][ T8082] netlink: 'syz.4.734': attribute type 29 has an invalid length. [ 458.062200][ T8081] netlink: 'syz.4.734': attribute type 29 has an invalid length. [ 458.485187][ T8091] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 459.701479][ T5868] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 459.920691][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 459.973622][ T5868] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.985036][ T5868] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.995271][ T5868] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 460.008710][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 460.015853][ T5868] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 460.025348][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.189773][ T5868] usb 1-1: config 0 descriptor?? [ 460.734733][ T5868] hid (null): no more usage index available [ 460.758193][ T5868] hid-generic 0003:045E:05DA.0004: ignoring exceeding usage max [ 460.778861][ T5868] hid-generic 0003:045E:05DA.0004: ignoring exceeding usage max [ 460.788499][ T5868] hid-generic 0003:045E:05DA.0004: no more usage index available [ 460.797080][ T5868] hid-generic 0003:045E:05DA.0004: item 0 4 2 2 parsing failed [ 460.976753][ T5868] hid-generic 0003:045E:05DA.0004: probe with driver hid-generic failed with error -22 [ 461.032729][ T5868] usb 1-1: USB disconnect, device number 18 [ 465.406129][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.412839][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 466.226835][ T5868] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 466.415734][ T5868] usb 2-1: config 0 has no interfaces? [ 466.431749][ T5868] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 466.441564][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 466.450303][ T5868] usb 2-1: Product: syz [ 466.454915][ T5868] usb 2-1: Manufacturer: syz [ 466.499000][ T5868] usb 2-1: config 0 descriptor?? [ 466.835530][ T5868] usb 2-1: USB disconnect, device number 15 [ 470.737795][ T8299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.823'. [ 471.041111][ T8303] loop6: detected capacity change from 0 to 524287999 [ 471.093334][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 471.109855][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.119401][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.137300][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.146941][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.166289][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.175887][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.195516][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.205173][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.218235][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.227961][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.240470][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.250033][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.261061][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.270778][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.289802][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.299503][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.517726][ T5840] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 475.717464][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 475.749224][ T5840] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 475.761046][ T5840] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 475.771595][ T5840] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 475.781996][ T5840] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.795542][ T5840] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 475.805124][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.036187][ T5840] usb 1-1: GET_CAPABILITIES returned 64 [ 476.042825][ T5840] usbtmc 1-1:16.0: can't read capabilities [ 476.274072][ T5840] usb 1-1: USB disconnect, device number 19 [ 478.950096][ T8433] ===================================================== [ 478.957393][ T8433] BUG: KMSAN: uninit-value in ___bpf_prog_run+0x94d5/0xe0f0 [ 478.965285][ T8433] ___bpf_prog_run+0x94d5/0xe0f0 [ 478.970590][ T8433] __bpf_prog_run32+0xc2/0xf0 [ 478.975487][ T8433] __ppp_xmit_process+0x501/0x2840 [ 478.980935][ T8433] ppp_xmit_process+0x100/0x2b0 [ 478.986018][ T8433] ppp_write+0x71d/0x910 [ 478.990645][ T8433] vfs_write+0x48a/0x1540 [ 478.995192][ T8433] ksys_write+0x240/0x4b0 [ 478.999979][ T8433] __x64_sys_write+0x93/0xe0 [ 479.004795][ T8433] x64_sys_call+0x3161/0x3c30 [ 479.009920][ T8433] do_syscall_64+0xcd/0x1e0 [ 479.014611][ T8433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.020907][ T8433] [ 479.023356][ T8433] Uninit was stored to memory at: [ 479.028798][ T8433] ___bpf_prog_run+0x98e7/0xe0f0 [ 479.033956][ T8433] __bpf_prog_run32+0xc2/0xf0 [ 479.038995][ T8433] __ppp_xmit_process+0x501/0x2840 [ 479.044293][ T8433] ppp_xmit_process+0x100/0x2b0 [ 479.049484][ T8433] ppp_write+0x71d/0x910 [ 479.053911][ T8433] vfs_write+0x48a/0x1540 [ 479.058612][ T8433] ksys_write+0x240/0x4b0 [ 479.063160][ T8433] __x64_sys_write+0x93/0xe0 [ 479.068111][ T8433] x64_sys_call+0x3161/0x3c30 [ 479.073025][ T8433] do_syscall_64+0xcd/0x1e0 [ 479.077711][ T8433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.084025][ T8433] [ 479.086447][ T8433] Uninit was created at: [ 479.091127][ T8433] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 479.097267][ T8433] kmalloc_reserve+0x13d/0x4a0 [ 479.102380][ T8433] __alloc_skb+0x363/0x7b0 [ 479.106996][ T8433] ppp_write+0xdf/0x910 [ 479.111474][ T8433] vfs_write+0x48a/0x1540 [ 479.116010][ T8433] ksys_write+0x240/0x4b0 [ 479.120701][ T8433] __x64_sys_write+0x93/0xe0 [ 479.125517][ T8433] x64_sys_call+0x3161/0x3c30 [ 479.130590][ T8433] do_syscall_64+0xcd/0x1e0 [ 479.135280][ T8433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.141557][ T8433] [ 479.143993][ T8433] CPU: 1 UID: 0 PID: 8433 Comm: syz.3.884 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 479.154934][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 479.165319][ T8433] ===================================================== [ 479.172524][ T8433] Disabling lock debugging due to kernel taint [ 479.178967][ T8433] Kernel panic - not syncing: kmsan.panic set ... [ 479.185541][ T8433] CPU: 1 UID: 0 PID: 8433 Comm: syz.3.884 Tainted: G B 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 479.197854][ T8433] Tainted: [B]=BAD_PAGE [ 479.202137][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 479.212367][ T8433] Call Trace: [ 479.215776][ T8433] [ 479.218839][ T8433] dump_stack_lvl+0x216/0x2d0 [ 479.223751][ T8433] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 479.229778][ T8433] dump_stack+0x1e/0x24 [ 479.234174][ T8433] panic+0x4e2/0xcf0 [ 479.238296][ T8433] ? kmsan_get_metadata+0xc1/0x1c0 [ 479.243626][ T8433] kmsan_report+0x2c7/0x2d0 [ 479.248335][ T8433] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 479.254394][ T8433] ? __msan_warning+0x95/0x120 [ 479.259406][ T8433] ? ___bpf_prog_run+0x94d5/0xe0f0 [ 479.264749][ T8433] ? __bpf_prog_run32+0xc2/0xf0 [ 479.269818][ T8433] ? __ppp_xmit_process+0x501/0x2840 [ 479.275305][ T8433] ? ppp_xmit_process+0x100/0x2b0 [ 479.280534][ T8433] ? ppp_write+0x71d/0x910 [ 479.285156][ T8433] ? vfs_write+0x48a/0x1540 [ 479.289895][ T8433] ? ksys_write+0x240/0x4b0 [ 479.294636][ T8433] ? __x64_sys_write+0x93/0xe0 [ 479.299635][ T8433] ? x64_sys_call+0x3161/0x3c30 [ 479.304730][ T8433] ? do_syscall_64+0xcd/0x1e0 [ 479.309600][ T8433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.315905][ T8433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.322229][ T8433] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 479.328248][ T8433] ? bpf_skb_load_helper_32+0x40/0x1d0 [ 479.333950][ T8433] ? filter_irq_stacks+0x60/0x1a0 [ 479.339206][ T8433] ? stack_depot_save_flags+0x2c/0x750 [ 479.344888][ T8433] ? kmsan_get_metadata+0x13e/0x1c0 [ 479.350294][ T8433] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 479.356887][ T8433] ? kmsan_get_metadata+0x13e/0x1c0 [ 479.362305][ T8433] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 479.368335][ T8433] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 479.374362][ T8433] __msan_warning+0x95/0x120 [ 479.379197][ T8433] ___bpf_prog_run+0x94d5/0xe0f0 [ 479.384393][ T8433] __bpf_prog_run32+0xc2/0xf0 [ 479.389311][ T8433] ? __pfx___bpf_prog_run32+0x10/0x10 [ 479.394915][ T8433] __ppp_xmit_process+0x501/0x2840 [ 479.400259][ T8433] ? kmsan_get_metadata+0x13e/0x1c0 [ 479.405682][ T8433] ppp_xmit_process+0x100/0x2b0 [ 479.410736][ T8433] ? ppp_xmit_process+0x2d/0x2b0 [ 479.415888][ T8433] ppp_write+0x71d/0x910 [ 479.420345][ T8433] ? __pfx_ppp_write+0x10/0x10 [ 479.425305][ T8433] vfs_write+0x48a/0x1540 [ 479.429867][ T8433] ? stack_depot_save_flags+0x2c/0x750 [ 479.435557][ T8433] ? kmsan_get_metadata+0x13e/0x1c0 [ 479.440973][ T8433] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 479.447575][ T8433] ? kmsan_get_metadata+0x13e/0x1c0 [ 479.452975][ T8433] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 479.459010][ T8433] ksys_write+0x240/0x4b0 [ 479.463582][ T8433] ? kmsan_get_metadata+0x13e/0x1c0 [ 479.468999][ T8433] __x64_sys_write+0x93/0xe0 [ 479.473838][ T8433] x64_sys_call+0x3161/0x3c30 [ 479.478758][ T8433] do_syscall_64+0xcd/0x1e0 [ 479.483456][ T8433] ? clear_bhb_loop+0x25/0x80 [ 479.488462][ T8433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.494602][ T8433] RIP: 0033:0x7f3862185d19 [ 479.499173][ T8433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.519019][ T8433] RSP: 002b:00007f386302c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 479.527629][ T8433] RAX: ffffffffffffffda RBX: 00007f3862375fa0 RCX: 00007f3862185d19 [ 479.535752][ T8433] RDX: 0000000000000002 RSI: 0000000020000480 RDI: 0000000000000003 [ 479.543867][ T8433] RBP: 00007f3862201a20 R08: 0000000000000000 R09: 0000000000000000 [ 479.551993][ T8433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.560101][ T8433] R13: 0000000000000000 R14: 00007f3862375fa0 R15: 00007ffd82b24428 [ 479.568248][ T8433] [ 479.571669][ T8433] Kernel Offset: disabled [ 479.576062][ T8433] Rebooting in 86400 seconds..