last executing test programs: 9.450159649s ago: executing program 2 (id=369): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@grpjquota}, {@discard}, {@norecovery}, {@noinit_itable}, {@test_dummy_encryption}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsold}, {@dioread_lock}, {@noblock_validity}, {@nouid32}]}, 0x3, 0x475, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000400)='./file0\x00') open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 9.374138406s ago: executing program 0 (id=370): unshare(0x20000400) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0) finit_module(r0, 0x0, 0x0) 8.485504109s ago: executing program 0 (id=372): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) 8.336681559s ago: executing program 3 (id=373): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0xb, 0x1000}, 0x4) close(r0) 7.619565751s ago: executing program 0 (id=375): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000001500010000000000fcdbdf25fe880000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a00100003000000000000009f1a9254e87bdd0714fa3f7777843347e4"], 0x5c}}, 0x0) 7.526710843s ago: executing program 2 (id=376): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000740)=ANY=[@ANYBLOB='codepage=cp949,iocharset=cp865,umask=00000000000000000000003,file_umask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB="0072d733420009a4c0eedbf1daa255f067cbd5c24fe4b55db981e7c208d7222fe872a496cdf2f8689ae37cb86a37bab80b9894f59f1b7f69155c3d99000000c79837e3ea4a786a3977517b6598f735926fc6c27950e2298dc82fc0ce22706366ea6006fbc309eb22dee13973c3a941b81f1fec017d27e9a4bca0f95bc4bf413f611e2a7aa11bbdd7446c38748c869aa0ec3b8436cb0106f420defe1e2e6ad94a47489364b43a8ba73345a545f9a376f142eb026b49cf9ffc05736f23771915810e4e967ae9c61b85f4bfbba1b7edbcb3"], 0x7, 0x2db, &(0x7f0000000240)="$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") sync() truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) 7.462608571s ago: executing program 3 (id=377): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "ab53bce6"}]}}, 0x0}, 0x0) 7.339550984s ago: executing program 4 (id=378): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0xfffffffffffffec4, 0x0, '\x00', @a}) 6.437541828s ago: executing program 0 (id=380): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x6, 0x0, 0x0) 5.777539493s ago: executing program 4 (id=381): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000004780)=""/102386, 0x18ff2}], 0x1, 0x0, 0x4100) 5.647565423s ago: executing program 1 (id=382): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) r1 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.503503925s ago: executing program 2 (id=383): unshare(0x8010800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) r3 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x3, 0x2a28, 0x0, "f759ca14860e00", '\x00', "03000500", "fc599184", ["8bada940ed86af0a00", "c2a4a110cfc1bac26ef76ef7", '\x00', "00113a071fa0fcd9c500"]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x22200) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r8, 0x80605414, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x192}}, 0x20}}, 0x0) 4.530377057s ago: executing program 3 (id=384): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 4.520559802s ago: executing program 4 (id=385): r0 = socket$nl_generic(0x10, 0x3, 0x10) getpid() r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0x34}}, 0x40000) 4.287818535s ago: executing program 1 (id=386): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="500800000000000014001a80100004800c00088008"], 0x34}}, 0x0) 3.930423972s ago: executing program 0 (id=387): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 3.778694574s ago: executing program 3 (id=388): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x4) 3.724362655s ago: executing program 4 (id=389): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/11, 0xb}}], 0x1, 0x0, 0x0) 3.445641957s ago: executing program 1 (id=390): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x40000000, 0x4) 2.167955378s ago: executing program 3 (id=391): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x101000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1.940916137s ago: executing program 4 (id=392): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x8000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x597, &(0x7f0000000c00)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f00000002c0)=[0x0], 0x1}) openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x100, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000100)=[0x9], &(0x7f0000000200), &(0x7f00000001c0)}) 1.882754849s ago: executing program 1 (id=393): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x7897670a, 0xfffffffe, 0x1, 0x100, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000440)=ANY=[], 0x0) 1.831112782s ago: executing program 2 (id=394): unshare(0x6020480) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) 1.097623276s ago: executing program 1 (id=395): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) 1.010846345s ago: executing program 3 (id=396): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000540)={0x1, 0x8, 0x2, &(0x7f0000000500)={0x11, "e78da5d0ce240742f712606d24dc95914798a0f15b49ef0272e7f67fec00"}}) 748.11531ms ago: executing program 2 (id=397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 545.849762ms ago: executing program 4 (id=398): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 242.495335ms ago: executing program 1 (id=399): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 34.575335ms ago: executing program 2 (id=400): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4840, &(0x7f0000002400)={0x2, 0x4e20, @multicast2}, 0x10) 0s ago: executing program 0 (id=401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0xfffffd}, 0x18) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): is interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.826730][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.851406][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.858645][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.885437][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.900499][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.907704][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.934044][ T53] Bluetooth: hci0: command tx timeout [ 255.939913][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.990529][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.997742][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.024361][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.024365][ T53] Bluetooth: hci1: command tx timeout [ 256.077689][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.085954][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.113729][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.118765][ T53] Bluetooth: hci2: command tx timeout [ 256.249914][ T53] Bluetooth: hci4: command tx timeout [ 256.255627][ T53] Bluetooth: hci3: command tx timeout [ 256.304041][ T5797] hsr_slave_0: entered promiscuous mode [ 256.313274][ T5797] hsr_slave_1: entered promiscuous mode [ 256.322282][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.331128][ T5797] Cannot create hsr debugfs directory [ 256.530495][ T5809] hsr_slave_0: entered promiscuous mode [ 256.540372][ T5809] hsr_slave_1: entered promiscuous mode [ 256.548355][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.557646][ T5809] Cannot create hsr debugfs directory [ 256.756745][ T5804] hsr_slave_0: entered promiscuous mode [ 256.766106][ T5804] hsr_slave_1: entered promiscuous mode [ 256.775425][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.783325][ T5804] Cannot create hsr debugfs directory [ 256.845578][ T5801] hsr_slave_0: entered promiscuous mode [ 256.854874][ T5801] hsr_slave_1: entered promiscuous mode [ 256.863493][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.871486][ T5801] Cannot create hsr debugfs directory [ 258.013344][ T5802] Bluetooth: hci0: command tx timeout [ 258.125978][ T5802] Bluetooth: hci1: command tx timeout [ 258.136038][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 258.169815][ T5802] Bluetooth: hci2: command tx timeout [ 258.242083][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 258.336082][ T5802] Bluetooth: hci3: command tx timeout [ 258.337011][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 258.341972][ T5802] Bluetooth: hci4: command tx timeout [ 258.368909][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 258.594489][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.690040][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.723227][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 258.762518][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.784784][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 258.828146][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 258.854279][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 258.880392][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.164606][ T5804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 259.202440][ T5804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 259.269602][ T5804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.297027][ T5804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 259.511272][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.617678][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.724754][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.759580][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 260.198034][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.347040][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.494808][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.519007][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.579031][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.586766][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.632041][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.707866][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.715911][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.779383][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.795641][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.878175][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.885919][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.949341][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.957330][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.974394][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.982086][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.102682][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.110475][ T5081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.264877][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.498877][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.545696][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.553542][ T5081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.577019][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.584623][ T5081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.838634][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.005278][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.013154][ T5081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.068134][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.142093][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.149844][ T5081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.710525][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.037634][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.108245][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.391573][ T5812] veth0_vlan: entered promiscuous mode [ 264.421047][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.510349][ T5812] veth1_vlan: entered promiscuous mode [ 264.562271][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.793946][ T5797] veth0_vlan: entered promiscuous mode [ 264.845717][ T5801] veth0_vlan: entered promiscuous mode [ 264.950910][ T5801] veth1_vlan: entered promiscuous mode [ 265.023950][ T5797] veth1_vlan: entered promiscuous mode [ 265.145370][ T5812] veth0_macvtap: entered promiscuous mode [ 265.253362][ T5812] veth1_macvtap: entered promiscuous mode [ 265.287346][ T5804] veth0_vlan: entered promiscuous mode [ 265.456932][ T5801] veth0_macvtap: entered promiscuous mode [ 265.483057][ T5797] veth0_macvtap: entered promiscuous mode [ 265.505405][ T5804] veth1_vlan: entered promiscuous mode [ 265.531277][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.567959][ T5801] veth1_macvtap: entered promiscuous mode [ 265.613633][ T5797] veth1_macvtap: entered promiscuous mode [ 265.694620][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.826663][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.836105][ T5812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.845361][ T5812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.857108][ T5812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.904165][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.990262][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.078678][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.104182][ T5804] veth0_macvtap: entered promiscuous mode [ 266.141577][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.191939][ T5797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.201867][ T5797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.211161][ T5797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.220383][ T5797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.244916][ T5804] veth1_macvtap: entered promiscuous mode [ 266.305724][ T5801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.315888][ T5801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.325255][ T5801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.335328][ T5801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.438287][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.636075][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.736358][ T5804] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.747127][ T5804] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.757251][ T5804] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.766561][ T5804] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.732420][ T5809] veth0_vlan: entered promiscuous mode [ 267.807002][ T5809] veth1_vlan: entered promiscuous mode [ 268.190025][ T5809] veth0_macvtap: entered promiscuous mode [ 268.285650][ T5809] veth1_macvtap: entered promiscuous mode [ 268.490726][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.620049][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.693565][ T5809] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.702931][ T5809] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.712218][ T5809] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.721438][ T5809] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.276749][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.285209][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.469534][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.478197][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.714753][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.724403][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.832161][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.841658][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.018004][ T5081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.027046][ T5081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.067315][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.076549][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.218493][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 274.545597][ T5081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.553809][ T5081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.812006][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.821584][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.744219][ T5987] loop3: detected capacity change from 0 to 512 [ 275.772178][ T5987] EXT4-fs: user quota file already specified [ 276.141868][ T5983] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 276.912127][ T5081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.921109][ T5081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.250337][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.258598][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.384022][ T5996] loop0: detected capacity change from 0 to 128 [ 277.413556][ T5996] ======================================================= [ 277.413556][ T5996] WARNING: The mand mount option has been deprecated and [ 277.413556][ T5996] and is ignored by this kernel. Remove the mand [ 277.413556][ T5996] option from the mount to silence this warning. [ 277.413556][ T5996] ======================================================= [ 277.450528][ T5996] vfat: Unknown parameter 'u]%free' [ 278.488461][ T6000] syzkaller0: entered promiscuous mode [ 278.502316][ T6000] syzkaller0: entered allmulticast mode [ 278.778333][ T6011] loop0: detected capacity change from 0 to 512 [ 278.988241][ T6011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.007394][ T6011] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.135819][ T6011] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 280.526121][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.666739][ T1889] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 280.878063][ T1889] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 280.887361][ T1889] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 280.898194][ T1889] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 280.907783][ T1889] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 280.919345][ T1889] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 281.031355][ T1889] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 281.041693][ T1889] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.055822][ T1889] usb 4-1: Product: syz [ 281.061962][ T1889] usb 4-1: Manufacturer: syz [ 281.524824][ T1889] cdc_wdm 4-1:1.0: skipping garbage [ 281.531154][ T1889] cdc_wdm 4-1:1.0: skipping garbage [ 281.630613][ T1889] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 281.637013][ T1889] cdc_wdm 4-1:1.0: Unknown control protocol [ 282.083485][ T1889] usb 4-1: USB disconnect, device number 2 [ 282.142013][ T6041] random: crng reseeded on system resumption [ 282.520967][ T6042] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 282.869009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 282.910557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 283.011658][ T6047] loop0: detected capacity change from 0 to 2048 [ 283.129458][ T6041] team_slave_0: entered promiscuous mode [ 283.135536][ T6041] team_slave_1: entered promiscuous mode [ 283.142726][ T6041] vlan2: entered promiscuous mode [ 283.148026][ T6041] team0: entered promiscuous mode [ 283.336669][ T6047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.535512][ T6052] mmap: syz.0.19 (6052) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 284.269734][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.451979][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 284.455008][ T30] audit: type=1326 audit(1748179543.852:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.3.20" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x0 [ 284.461510][ T6064] team0: entered promiscuous mode [ 284.461609][ T6064] team_slave_0: entered promiscuous mode [ 284.462765][ T6064] team_slave_1: entered promiscuous mode [ 284.504542][ T6064] team0: entered allmulticast mode [ 284.510161][ T6064] team_slave_0: entered allmulticast mode [ 284.516160][ T6064] team_slave_1: entered allmulticast mode [ 284.783928][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22'. [ 284.793565][ T6064] team0: left promiscuous mode [ 284.798597][ T6064] team_slave_0: left promiscuous mode [ 284.805794][ T6064] team_slave_1: left promiscuous mode [ 284.812816][ T6064] team0: left allmulticast mode [ 284.817954][ T6064] team_slave_0: left allmulticast mode [ 284.823997][ T6064] team_slave_1: left allmulticast mode [ 285.500248][ T6073] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 285.569885][ T6073] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 285.623108][ T6075] loop3: detected capacity change from 0 to 128 [ 286.129654][ T1749] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 286.364532][ T1749] usb 4-1: Using ep0 maxpacket: 32 [ 286.433130][ T1749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 286.445034][ T1749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 286.458256][ T1749] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 286.468511][ T1749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.596912][ T1749] usb 4-1: config 0 descriptor?? [ 286.705355][ T1749] hub 4-1:0.0: USB hub found [ 286.854809][ T1749] hub 4-1:0.0: 1 port detected [ 287.722757][ T1749] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 287.723261][ T1889] usb 4-1: USB disconnect, device number 3 [ 288.204016][ T6095] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551 [ 288.468081][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 288.478297][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 288.861377][ T6106] random: crng reseeded on system resumption [ 289.606270][ T6106] team_slave_0: entered promiscuous mode [ 289.612548][ T6106] team_slave_1: entered promiscuous mode [ 289.628166][ T6106] vlan2: entered promiscuous mode [ 289.633720][ T6106] team0: entered promiscuous mode [ 289.790845][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 289.810141][ T30] audit: type=1326 audit(1748179549.202:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.2.36" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x0 [ 290.130330][ T1889] IPVS: starting estimator thread 0... [ 290.220094][ T6122] IPVS: using max 192 ests per chain, 9600 per kthread [ 290.254472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 290.576626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 290.739112][ T6120] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.925284][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.932459][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.651608][ T30] audit: type=1326 audit(1748179551.032:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 291.674124][ T30] audit: type=1326 audit(1748179551.092:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=376 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 291.696476][ T30] audit: type=1326 audit(1748179551.092:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 291.725484][ T30] audit: type=1326 audit(1748179551.132:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 291.859998][ T1749] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 292.071456][ T1749] usb 4-1: Using ep0 maxpacket: 8 [ 292.084166][ T30] audit: type=1326 audit(1748179551.242:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 292.184257][ T1749] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 292.194437][ T1749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.204882][ T1749] usb 4-1: Product: syz [ 292.210057][ T1749] usb 4-1: Manufacturer: syz [ 292.218487][ T1749] usb 4-1: SerialNumber: syz [ 292.232131][ T6140] loop0: detected capacity change from 0 to 256 [ 292.251082][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 292.437896][ T1749] usb 4-1: config 0 descriptor?? [ 293.445113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 293.465263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 293.483270][ T1749] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 293.590708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 294.623052][ T6149] dummy0: entered promiscuous mode [ 294.628688][ T6149] vlan2: entered promiscuous mode [ 294.835851][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 294.845183][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 296.054561][ T1749] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 296.252274][ T1749] usb 4-1: USB disconnect, device number 4 [ 296.570693][ T5802] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 297.821188][ T6165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.53'. [ 298.747018][ T5802] Bluetooth: hci3: unexpected cc 0x0c58 length: 4 > 2 [ 299.437637][ T6182] loop3: detected capacity change from 0 to 1024 [ 299.477737][ T6186] loop2: detected capacity change from 0 to 256 [ 299.630291][ T1749] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 299.656921][ T5802] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 299.741394][ T6182] hfsplus: request for non-existent node 33423360 in B*Tree [ 299.748978][ T6182] hfsplus: request for non-existent node 33423360 in B*Tree [ 299.784877][ T6188] delete_channel: no stack [ 299.868020][ T6191] hfsplus: request for non-existent node 33423360 in B*Tree [ 299.876559][ T6191] hfsplus: request for non-existent node 33423360 in B*Tree [ 299.885387][ T1749] usb 2-1: Using ep0 maxpacket: 32 [ 300.030409][ T1749] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 300.040489][ T1749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.048788][ T1749] usb 2-1: Product: syz [ 300.053486][ T1749] usb 2-1: Manufacturer: syz [ 300.058354][ T1749] usb 2-1: SerialNumber: syz [ 300.132364][ T6192] hfsplus: request for non-existent node 33423360 in B*Tree [ 300.140278][ T6192] hfsplus: request for non-existent node 33423360 in B*Tree [ 300.276245][ T1749] usb 2-1: config 0 descriptor?? [ 302.491261][ T1749] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 302.503914][ T1749] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 302.825312][ T5802] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 302.834264][ T5802] Bluetooth: hci3: Injecting HCI hardware error event [ 302.850204][ T5802] Bluetooth: hci3: hardware error 0x00 [ 303.586235][ T1749] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 303.659587][ T30] audit: type=1326 audit(1748179562.992:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 303.698202][ T1749] usb 2-1: USB disconnect, device number 2 [ 303.819977][ T30] audit: type=1326 audit(1748179563.142:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 303.843404][ T30] audit: type=1326 audit(1748179563.142:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 303.866429][ T30] audit: type=1326 audit(1748179563.162:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 303.895549][ T30] audit: type=1326 audit(1748179563.162:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 303.917941][ T30] audit: type=1326 audit(1748179563.212:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 303.940471][ T30] audit: type=1326 audit(1748179563.212:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 303.962663][ T30] audit: type=1326 audit(1748179563.212:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 303.984877][ T30] audit: type=1326 audit(1748179563.212:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 304.197184][ T30] audit: type=1326 audit(1748179563.612:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6209 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 304.495173][ T6218] loop1: detected capacity change from 0 to 1024 [ 304.731527][ T1749] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 305.046494][ T1749] usb 4-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 305.056059][ T1749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.165511][ T1749] usb 4-1: config 0 descriptor?? [ 305.591206][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 305.667398][ T5802] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 305.890729][ T9] usb 1-1: config 54 has an invalid interface number: 154 but max is 0 [ 305.899661][ T9] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 305.910638][ T9] usb 1-1: config 54 has no interface number 0 [ 305.917486][ T9] usb 1-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 305.929384][ T9] usb 1-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.991524][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 306.001252][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.009967][ T9] usb 1-1: Product: syz [ 306.014636][ T9] usb 1-1: Manufacturer: syz [ 306.019769][ T9] usb 1-1: SerialNumber: syz [ 306.145773][ T6231] loop4: detected capacity change from 0 to 1024 [ 306.383298][ T1749] usb 4-1: string descriptor 0 read error: -71 [ 306.401757][ T1749] uclogic 0003:5543:0047.0001: failed retrieving string descriptor #200: -71 [ 306.412147][ T1749] uclogic 0003:5543:0047.0001: failed retrieving pen parameters: -71 [ 306.420997][ T1749] uclogic 0003:5543:0047.0001: failed probing pen v2 parameters: -71 [ 306.429944][ T1749] uclogic 0003:5543:0047.0001: failed probing parameters: -71 [ 306.438559][ T1749] uclogic 0003:5543:0047.0001: probe with driver uclogic failed with error -71 [ 306.539728][ T6231] hfsplus: request for non-existent node 33423360 in B*Tree [ 306.551869][ T6231] hfsplus: request for non-existent node 33423360 in B*Tree [ 306.627222][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 306.654417][ T3493] usb 1-1: Failed to submit usb control message: -71 [ 306.661858][ T3493] usb 1-1: unable to send the bmi data to the device: -71 [ 306.669484][ T3493] usb 1-1: unable to get target info from device [ 306.676131][ T3493] usb 1-1: could not get target info (-71) [ 306.682507][ T3493] usb 1-1: could not probe fw (-71) [ 306.691438][ T1749] usb 4-1: USB disconnect, device number 5 [ 306.712137][ T9] usb 1-1: USB disconnect, device number 2 [ 306.742615][ T6238] hfsplus: request for non-existent node 33423360 in B*Tree [ 306.750563][ T6238] hfsplus: request for non-existent node 33423360 in B*Tree [ 306.895742][ T6231] hfsplus: request for non-existent node 33423360 in B*Tree [ 306.903923][ T6231] hfsplus: request for non-existent node 33423360 in B*Tree [ 307.050452][ T6242] erspan1: entered promiscuous mode [ 307.055973][ T6242] erspan1: entered allmulticast mode [ 308.930101][ T6255] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 310.563780][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 312.883295][ T6306] x_tables: duplicate underflow at hook 1 [ 314.901769][ T6327] No such timeout policy "syz1" [ 315.422325][ T6333] loop1: detected capacity change from 0 to 128 [ 315.499737][ T5881] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 315.593284][ T6334] loop0: detected capacity change from 0 to 1024 [ 315.673012][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 315.695072][ T5881] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 315.704842][ T5881] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 315.715136][ T5881] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 315.725299][ T5881] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 315.735690][ T5881] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 315.745949][ T5881] usb 5-1: config 1 interface 0 has no altsetting 0 [ 315.753167][ T5881] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 315.768150][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.884385][ T6334] hfsplus: request for non-existent node 33423360 in B*Tree [ 315.893124][ T6334] hfsplus: request for non-existent node 33423360 in B*Tree [ 315.954680][ T5881] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 316.014016][ T6339] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.023112][ T6339] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.229716][ T6339] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.237418][ T6339] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.246456][ T5881] scsi host1: usb-storage 5-1:1.0 [ 316.310788][ T6334] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.318384][ T6334] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.392970][ T6347] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.400987][ T6347] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.424186][ T9] usb 5-1: USB disconnect, device number 2 [ 316.544039][ T6334] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.551776][ T6334] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.695270][ T6339] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.703286][ T6339] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.738549][ T6334] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.747416][ T6334] hfsplus: request for non-existent node 33423360 in B*Tree [ 317.060334][ T6347] hfsplus: request for non-existent node 33423360 in B*Tree [ 317.067930][ T6347] hfsplus: request for non-existent node 33423360 in B*Tree [ 317.195162][ T6339] hfsplus: request for non-existent node 33423360 in B*Tree [ 317.209475][ T6339] hfsplus: request for non-existent node 33423360 in B*Tree [ 317.309529][ T6334] hfsplus: request for non-existent node 33423360 in B*Tree [ 317.317269][ T6334] hfsplus: request for non-existent node 33423360 in B*Tree [ 317.385895][ T5802] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 317.394843][ T5802] Bluetooth: hci1: Injecting HCI hardware error event [ 317.407580][ T5802] Bluetooth: hci1: hardware error 0x00 [ 317.582772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 318.239801][ T6354] loop4: detected capacity change from 0 to 256 [ 318.390214][ T6354] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 318.560782][ T6358] netlink: 84 bytes leftover after parsing attributes in process `syz.0.127'. [ 319.455741][ T5802] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 319.466178][ T6365] loop0: detected capacity change from 0 to 8 [ 319.614684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 319.864532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 319.892789][ T6367] warning: `syz.4.132' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 320.836035][ T6375] loop4: detected capacity change from 0 to 256 [ 324.024489][ T6383] loop0: detected capacity change from 0 to 64 [ 324.041239][ T6380] loop3: detected capacity change from 0 to 1024 [ 324.309670][ T6385] hfsplus: request for non-existent node 33423360 in B*Tree [ 324.317265][ T6385] hfsplus: request for non-existent node 33423360 in B*Tree [ 324.400084][ T6380] hfsplus: request for non-existent node 33423360 in B*Tree [ 324.407699][ T6380] hfsplus: request for non-existent node 33423360 in B*Tree [ 324.551580][ T6387] hfsplus: request for non-existent node 33423360 in B*Tree [ 324.559059][ T6387] hfsplus: request for non-existent node 33423360 in B*Tree [ 324.699635][ T6380] hfsplus: request for non-existent node 33423360 in B*Tree [ 324.707426][ T6380] hfsplus: request for non-existent node 33423360 in B*Tree [ 324.721794][ T6385] hfsplus: request for non-existent node 33423360 in B*Tree [ 324.729874][ T6385] hfsplus: request for non-existent node 33423360 in B*Tree [ 324.900323][ T6380] hfsplus: request for non-existent node 33423360 in B*Tree [ 324.908164][ T6380] hfsplus: request for non-existent node 33423360 in B*Tree [ 325.002988][ T6385] hfsplus: request for non-existent node 33423360 in B*Tree [ 325.010864][ T6385] hfsplus: request for non-existent node 33423360 in B*Tree [ 325.064106][ T6387] hfsplus: request for non-existent node 33423360 in B*Tree [ 325.072550][ T6387] hfsplus: request for non-existent node 33423360 in B*Tree [ 325.197719][ T6380] hfsplus: request for non-existent node 33423360 in B*Tree [ 325.208156][ T6380] hfsplus: request for non-existent node 33423360 in B*Tree [ 325.339564][ T6385] hfsplus: request for non-existent node 33423360 in B*Tree [ 325.347188][ T6385] hfsplus: request for non-existent node 33423360 in B*Tree [ 325.572308][ T6387] hfsplus: request for non-existent node 33423360 in B*Tree [ 325.580167][ T6387] hfsplus: request for non-existent node 33423360 in B*Tree [ 325.762632][ T6393] loop4: detected capacity change from 0 to 1024 [ 326.119954][ T6393] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.127555][ T6393] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.224115][ T6396] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.231973][ T6396] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.352912][ T6397] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.360913][ T6397] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.499401][ T6398] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.514049][ T6398] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.640483][ T6393] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.640545][ T6393] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.678289][ T6393] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.678373][ T6393] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.737711][ T6393] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.737799][ T6393] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.749639][ T6396] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.749726][ T6396] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.756161][ T6393] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.756243][ T6393] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.764140][ T6393] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.764228][ T6393] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.775650][ T6393] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.775732][ T6393] hfsplus: request for non-existent node 33423360 in B*Tree [ 327.525691][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 327.739883][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 327.809767][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.820354][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.833834][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 327.843575][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.023185][ T9] usb 4-1: config 0 descriptor?? [ 328.044306][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 328.222612][ T6407] loop4: detected capacity change from 0 to 1024 [ 328.232848][ T6409] loop0: detected capacity change from 0 to 256 [ 328.328798][ T5881] usb 4-1: USB disconnect, device number 6 [ 328.347815][ T6411] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 329.000531][ T6413] loop2: detected capacity change from 0 to 128 [ 329.332500][ T6415] loop1: detected capacity change from 0 to 256 [ 329.679780][ T6415] FAT-fs (loop1): Directory bread(block 64) failed [ 329.687152][ T6415] FAT-fs (loop1): Directory bread(block 65) failed [ 329.701695][ T6415] FAT-fs (loop1): Directory bread(block 66) failed [ 329.708559][ T6415] FAT-fs (loop1): Directory bread(block 67) failed [ 329.717441][ T6415] FAT-fs (loop1): Directory bread(block 68) failed [ 329.724507][ T6415] FAT-fs (loop1): Directory bread(block 69) failed [ 329.733290][ T6415] FAT-fs (loop1): Directory bread(block 70) failed [ 329.740442][ T6415] FAT-fs (loop1): Directory bread(block 71) failed [ 329.747414][ T6415] FAT-fs (loop1): Directory bread(block 72) failed [ 329.754443][ T6415] FAT-fs (loop1): Directory bread(block 73) failed [ 329.790544][ T6420] loop3: detected capacity change from 0 to 1024 [ 330.057262][ T6420] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.065102][ T6420] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.079552][ T6424] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.087343][ T6424] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.143599][ T6423] loop2: detected capacity change from 0 to 1024 [ 330.220087][ T6425] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.227686][ T6425] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.286343][ T6420] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.295846][ T6420] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.381697][ T6424] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.389522][ T6424] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.461645][ T6423] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.470577][ T6423] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.501947][ T6420] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.513863][ T6420] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.628595][ T6423] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.636560][ T6423] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.706380][ T6424] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.719846][ T6424] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.757925][ T6427] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.766490][ T6427] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.775071][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 330.807593][ T6420] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.820449][ T6420] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.885135][ T6431] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.893958][ T6431] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.029906][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.029942][ T6423] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.030049][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 331.040354][ T6423] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.065248][ T9] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 331.074828][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.375118][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.383048][ T6434] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.407208][ T9] usb 5-1: config 0 descriptor?? [ 331.457405][ T6427] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.465291][ T6427] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.568353][ T6423] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.576288][ T6423] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.704017][ T6431] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.713100][ T6431] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.818591][ T6436] loop0: detected capacity change from 0 to 128 [ 331.886302][ T6427] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.894115][ T6427] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.976176][ T9] Bluetooth: Can't get state to change to load configuration err [ 331.984701][ T9] Bluetooth: Loading sysconfig file failed [ 331.991047][ T9] ath3k 5-1:0.0: probe with driver ath3k failed with error -16 [ 332.124874][ T9] usb 5-1: USB disconnect, device number 3 [ 332.416232][ T6441] loop1: detected capacity change from 0 to 164 [ 333.417854][ T6445] loop0: detected capacity change from 0 to 128 [ 333.529898][ T6445] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 333.620053][ T6445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.648148][ T6448] loop4: detected capacity change from 0 to 256 [ 333.761489][ T6450] loop3: detected capacity change from 0 to 512 [ 333.778909][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 333.778988][ T30] audit: type=1800 audit(1748179593.191:81): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.164" name="file2" dev="loop0" ino=95 res=0 errno=0 [ 333.782579][ T6451] loop1: detected capacity change from 0 to 512 [ 333.862751][ T6450] EXT4-fs: Ignoring removed i_version option [ 333.974670][ T6448] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 334.052363][ T6450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.066695][ T6450] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.160648][ T6451] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.167: Invalid inode bitmap blk 4 in block_group 0 [ 334.254225][ T6451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.478646][ T6456] loop2: detected capacity change from 0 to 256 [ 334.499915][ T6457] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 334.521028][ T6457] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.167: Invalid inode bitmap blk 4 in block_group 0 [ 334.640806][ T6457] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 334.737110][ T30] audit: type=1800 audit(1748179594.151:82): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.167" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 334.791951][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.869833][ T6456] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 334.906185][ T6459] loop0: detected capacity change from 0 to 256 [ 335.047593][ T6461] loop4: detected capacity change from 0 to 8 [ 335.076315][ T6456] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 335.115271][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.160027][ T6459] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 335.170702][ T6459] FAT-fs (loop0): Filesystem has been set read-only [ 335.177599][ T6459] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 335.188679][ T6459] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 335.222515][ T30] audit: type=1800 audit(1748179594.621:83): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.169" name="file1" dev="loop0" ino=1048603 res=0 errno=0 [ 335.499725][ T6463] loop3: detected capacity change from 0 to 1024 [ 335.831839][ T6459] syz.0.169 (6459) used greatest stack depth: 3776 bytes left [ 335.899671][ T6468] hfsplus: request for non-existent node 33423360 in B*Tree [ 335.907263][ T6468] hfsplus: request for non-existent node 33423360 in B*Tree [ 335.950508][ T6469] loop1: detected capacity change from 0 to 64 [ 336.060558][ T6463] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.068144][ T6463] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.114238][ T6468] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.122097][ T6468] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.212209][ T6470] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.220078][ T6470] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.327169][ T6463] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.336426][ T6463] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.504530][ T6468] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.512432][ T6468] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.616255][ T6474] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.624486][ T6474] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.707906][ T6475] loop0: detected capacity change from 0 to 1024 [ 336.770377][ T6463] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.778078][ T6463] hfsplus: request for non-existent node 33423360 in B*Tree [ 336.971916][ T6477] loop4: detected capacity change from 0 to 1024 [ 337.000981][ T6479] loop1: detected capacity change from 0 to 128 [ 337.060559][ T6480] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.072874][ T6480] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.188260][ T6475] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.200823][ T6475] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.302691][ T6475] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.310535][ T6475] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.436625][ T6481] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.444947][ T6481] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.601255][ T6480] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.608973][ T6480] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.820942][ T6483] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.828656][ T6483] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.931365][ T6475] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.938953][ T6475] hfsplus: request for non-existent node 33423360 in B*Tree [ 338.129588][ T6481] hfsplus: request for non-existent node 33423360 in B*Tree [ 338.137185][ T6481] hfsplus: request for non-existent node 33423360 in B*Tree [ 338.197971][ T6480] hfsplus: request for non-existent node 33423360 in B*Tree [ 338.205706][ T6480] hfsplus: request for non-existent node 33423360 in B*Tree [ 338.319795][ T6485] hfsplus: request for non-existent node 33423360 in B*Tree [ 338.327523][ T6485] hfsplus: request for non-existent node 33423360 in B*Tree [ 338.380474][ T6486] loop3: detected capacity change from 0 to 1024 [ 338.492586][ T6489] loop4: detected capacity change from 0 to 256 [ 338.510065][ T6491] loop1: detected capacity change from 0 to 256 [ 338.993329][ T6491] FAT-fs (loop1): Directory bread(block 64) failed [ 339.001320][ T6491] FAT-fs (loop1): Directory bread(block 65) failed [ 339.011304][ T6491] FAT-fs (loop1): Directory bread(block 66) failed [ 339.018127][ T6491] FAT-fs (loop1): Directory bread(block 67) failed [ 339.026021][ T6491] FAT-fs (loop1): Directory bread(block 68) failed [ 339.033088][ T6491] FAT-fs (loop1): Directory bread(block 69) failed [ 339.040551][ T6491] FAT-fs (loop1): Directory bread(block 70) failed [ 339.047361][ T6491] FAT-fs (loop1): Directory bread(block 71) failed [ 339.054606][ T6491] FAT-fs (loop1): Directory bread(block 72) failed [ 339.061683][ T6491] FAT-fs (loop1): Directory bread(block 73) failed [ 339.170686][ T6489] FAT-fs (loop4): Directory bread(block 64) failed [ 339.177606][ T6489] FAT-fs (loop4): Directory bread(block 65) failed [ 339.185155][ T6489] FAT-fs (loop4): Directory bread(block 66) failed [ 339.192369][ T6489] FAT-fs (loop4): Directory bread(block 67) failed [ 339.199660][ T6489] FAT-fs (loop4): Directory bread(block 68) failed [ 339.206498][ T6489] FAT-fs (loop4): Directory bread(block 69) failed [ 339.216554][ T6489] FAT-fs (loop4): Directory bread(block 70) failed [ 339.226453][ T6489] FAT-fs (loop4): Directory bread(block 71) failed [ 339.234389][ T6489] FAT-fs (loop4): Directory bread(block 72) failed [ 339.241456][ T6489] FAT-fs (loop4): Directory bread(block 73) failed [ 339.913399][ T6493] loop0: detected capacity change from 0 to 512 [ 340.313327][ T6493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 340.326868][ T6493] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.817099][ T6507] loop4: detected capacity change from 0 to 64 [ 340.924743][ T6507] hfs: unable to locate alternate MDB [ 340.931473][ T6507] hfs: continuing without an alternate MDB [ 340.970064][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 341.227488][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 341.761375][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 341.999728][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.012308][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 342.021952][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.192784][ T9] usb 1-1: config 0 descriptor?? [ 342.380157][ T6521] loop3: detected capacity change from 0 to 1024 [ 342.428233][ T6522] loop1: detected capacity change from 0 to 1024 [ 342.750518][ T9] logitech 0003:046D:C50C.0002: unbalanced collection at end of report description [ 342.794565][ T9] logitech 0003:046D:C50C.0002: parse failed [ 342.805424][ T9] logitech 0003:046D:C50C.0002: probe with driver logitech failed with error -22 [ 342.874113][ T6521] hfsplus: request for non-existent node 33423360 in B*Tree [ 342.883079][ T6521] hfsplus: request for non-existent node 33423360 in B*Tree [ 342.964577][ T6526] loop4: detected capacity change from 0 to 22 [ 342.986993][ T9] usb 1-1: USB disconnect, device number 3 [ 343.044665][ T6523] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.052851][ T6523] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.081285][ T6521] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.089976][ T6521] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.134686][ T6526] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 343.185757][ T6529] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.193959][ T6529] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.290099][ T6521] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.302144][ T6521] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.424693][ T6523] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.432934][ T6523] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.540464][ T6523] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.548056][ T6523] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.580274][ T6521] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.587864][ T6521] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.691592][ T6523] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.699487][ T6523] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.785689][ T6521] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.793837][ T6521] hfsplus: request for non-existent node 33423360 in B*Tree [ 344.047418][ T6531] loop2: detected capacity change from 0 to 1024 [ 344.107788][ T6531] EXT4-fs: inline encryption not supported [ 344.112291][ T6535] loop4: detected capacity change from 0 to 512 [ 344.114199][ T6531] EXT4-fs: Ignoring removed i_version option [ 344.178108][ T6535] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 344.226703][ T6531] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 344.364618][ T6531] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.194: lblock 2 mapped to illegal pblock 2 (length 1) [ 344.385489][ T6531] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 344.394325][ T6531] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.194: lblock 0 mapped to illegal pblock 48 (length 1) [ 344.423130][ T6535] EXT4-fs (loop4): 1 orphan inode deleted [ 344.431757][ T6535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.460129][ T3493] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 344.470682][ T3493] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 344.482904][ T6531] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 344.492246][ T6531] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.194: Failed to acquire dquot type 0 [ 344.507468][ T6539] loop0: detected capacity change from 0 to 64 [ 344.520924][ T6535] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.578339][ T6531] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 344.624710][ T6531] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.194: mark_inode_dirty error [ 344.719859][ T6531] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 344.730773][ T6531] EXT4-fs (loop2): 1 orphan inode deleted [ 344.739064][ T6531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.755384][ T3493] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 344.842868][ T3493] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 344.856433][ T3493] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 0 [ 345.060285][ T5809] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.116224][ T6544] loop1: detected capacity change from 0 to 64 [ 345.269891][ T6544] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 345.465291][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.521448][ T3531] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 345.589849][ T3531] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 345.598663][ T3531] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 0 [ 345.686772][ T6547] loop0: detected capacity change from 0 to 64 [ 345.747387][ T5804] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 345.829553][ T5804] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 345.890427][ T5804] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 346.608442][ T6556] loop2: detected capacity change from 0 to 128 [ 347.369053][ T6558] loop0: detected capacity change from 0 to 1024 [ 347.639884][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 347.880862][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 347.924756][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 347.934426][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.946473][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 347.958014][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 348.127259][ T6566] loop1: detected capacity change from 0 to 256 [ 348.251254][ T9] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 348.261050][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.269799][ T9] usb 5-1: Product: syz [ 348.274267][ T9] usb 5-1: Manufacturer: syz [ 348.279448][ T9] usb 5-1: SerialNumber: syz [ 348.488762][ T9] usb 5-1: config 0 descriptor?? [ 348.497988][ T6560] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 348.969674][ T6560] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 348.976573][ T6560] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 348.985744][ T6560] vhci_hcd vhci_hcd.0: Device attached [ 349.190955][ T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 349.219787][ T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 349.313940][ T1889] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 349.389854][ T6569] vhci_hcd: connection reset by peer [ 349.396799][ T72] vhci_hcd: stop threads [ 349.401663][ T72] vhci_hcd: release socket [ 349.406393][ T72] vhci_hcd: disconnect device [ 349.489465][ C0] powermate: config urb returned -71 [ 349.499562][ C0] powermate: config urb returned -71 [ 349.506647][ C0] powermate: config urb returned -71 [ 349.513167][ C0] powermate: config urb returned -71 [ 349.595844][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 349.605297][ T9] usb 5-1: USB disconnect, device number 4 [ 349.737868][ T6577] loop2: detected capacity change from 0 to 128 [ 349.945170][ T6577] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 350.079963][ T6577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.101213][ T6579] loop1: detected capacity change from 0 to 256 [ 350.447326][ T6579] FAT-fs (loop1): Directory bread(block 64) failed [ 350.455762][ T6579] FAT-fs (loop1): Directory bread(block 65) failed [ 350.464155][ T6579] FAT-fs (loop1): Directory bread(block 66) failed [ 350.472413][ T6579] FAT-fs (loop1): Directory bread(block 67) failed [ 350.484563][ T6579] FAT-fs (loop1): Directory bread(block 68) failed [ 350.492936][ T6579] FAT-fs (loop1): Directory bread(block 69) failed [ 350.500157][ T6579] FAT-fs (loop1): Directory bread(block 70) failed [ 350.506993][ T6579] FAT-fs (loop1): Directory bread(block 71) failed [ 350.514176][ T6579] FAT-fs (loop1): Directory bread(block 72) failed [ 350.521098][ T6579] FAT-fs (loop1): Directory bread(block 73) failed [ 350.554197][ T6582] loop3: detected capacity change from 0 to 512 [ 350.582077][ T6583] loop0: detected capacity change from 0 to 128 [ 350.618685][ T6582] EXT4-fs: Ignoring removed oldalloc option [ 350.685178][ T6582] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 350.895525][ T6586] loop4: detected capacity change from 0 to 128 [ 351.004338][ T6582] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.211: invalid indirect mapped block 4294967295 (level 0) [ 351.046050][ T6582] EXT4-fs (loop3): Remounting filesystem read-only [ 351.112010][ T6582] EXT4-fs (loop3): 1 orphan inode deleted [ 351.118192][ T6582] EXT4-fs (loop3): 1 truncate cleaned up [ 351.151568][ T6582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.394167][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.214'. [ 351.703631][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.377845][ T6599] loop3: detected capacity change from 0 to 256 [ 352.388752][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.396210][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.444825][ T6599] exfat: Deprecated parameter 'utf8' [ 352.450894][ T6599] exfat: Deprecated parameter 'namecase' [ 352.457463][ T6599] exfat: Deprecated parameter 'utf8' [ 352.571570][ T6601] loop2: detected capacity change from 0 to 256 [ 352.699964][ T6599] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 352.853100][ T6601] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 353.260688][ T6595] loop4: detected capacity change from 0 to 4096 [ 353.316660][ T6605] loop0: detected capacity change from 0 to 16 [ 353.362591][ T6595] ntfs3(loop4): It is recommened to use chkdsk. [ 353.445087][ T6595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 353.455083][ T6605] erofs (device loop0): mounted with root inode @ nid 36. [ 353.469757][ T6595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 353.478074][ T6595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 353.486888][ T6595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 353.495300][ T6595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00 [ 353.506229][ T6595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00 [ 353.514663][ T6595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00 [ 353.523068][ T6595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00 [ 353.531535][ T6595] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00 [ 353.629941][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 353.872905][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.884728][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.895221][ T9] usb 2-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 353.904908][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.113026][ T9] usb 2-1: config 0 descriptor?? [ 354.269625][ T1749] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 354.420156][ T1889] vhci_hcd: vhci_device speed not set [ 354.484887][ T1749] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 354.495037][ T1749] usb 4-1: config 0 has no interface number 0 [ 354.501782][ T1749] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 354.513988][ T1749] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 354.525765][ T1749] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 354.625943][ T9] sony 0003:1430:474C.0003: collection stack underflow [ 354.636312][ T9] sony 0003:1430:474C.0003: item 0 4 0 12 parsing failed [ 354.711018][ T1749] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 354.720830][ T1749] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 354.729813][ T1749] usb 4-1: Product: syz [ 354.734259][ T1749] usb 4-1: SerialNumber: syz [ 354.761586][ T9] sony 0003:1430:474C.0003: parse failed [ 354.767960][ T9] sony 0003:1430:474C.0003: probe with driver sony failed with error -22 [ 354.825274][ T1749] usb 4-1: config 0 descriptor?? [ 354.930742][ T5853] usb 2-1: USB disconnect, device number 3 [ 355.051652][ T1749] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 355.062599][ T1749] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input6 [ 355.073693][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.088927][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.099319][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.107069][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.114909][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.129640][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.137385][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.149416][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.159558][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.167268][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.232088][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 355.241639][ T1749] usb 4-1: USB disconnect, device number 7 [ 355.312226][ T1749] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 355.570364][ T6618] loop4: detected capacity change from 0 to 256 [ 355.927433][ T6621] loop2: detected capacity change from 0 to 512 [ 355.968078][ T6618] FAT-fs (loop4): Directory bread(block 64) failed [ 355.976854][ T6618] FAT-fs (loop4): Directory bread(block 65) failed [ 355.984268][ T6618] FAT-fs (loop4): Directory bread(block 66) failed [ 355.991278][ T6618] FAT-fs (loop4): Directory bread(block 67) failed [ 355.998269][ T6618] FAT-fs (loop4): Directory bread(block 68) failed [ 356.011229][ T6618] FAT-fs (loop4): Directory bread(block 69) failed [ 356.019741][ T6618] FAT-fs (loop4): Directory bread(block 70) failed [ 356.026666][ T6618] FAT-fs (loop4): Directory bread(block 71) failed [ 356.033874][ T6618] FAT-fs (loop4): Directory bread(block 72) failed [ 356.040792][ T6618] FAT-fs (loop4): Directory bread(block 73) failed [ 356.091951][ T6621] EXT4-fs: Ignoring removed oldalloc option [ 356.100709][ T6622] loop0: detected capacity change from 0 to 512 [ 356.129600][ T6621] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 356.296806][ T6621] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.228: invalid indirect mapped block 4294967295 (level 0) [ 356.339578][ T6621] EXT4-fs (loop2): Remounting filesystem read-only [ 356.406760][ T6621] EXT4-fs (loop2): 1 orphan inode deleted [ 356.413163][ T6621] EXT4-fs (loop2): 1 truncate cleaned up [ 356.427425][ T6621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.934102][ T6622] EXT4-fs (loop0): Test dummy encryption mode enabled [ 356.944902][ T6622] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 356.961908][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.003799][ T1749] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 357.028595][ T6622] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.227: bad orphan inode 131083 [ 357.086858][ T6622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.248871][ T1749] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.259657][ T1749] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 357.268912][ T1749] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 357.279978][ T1749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.315158][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.388542][ T1749] usb 4-1: config 0 descriptor?? [ 357.451656][ T1749] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 357.458677][ T1749] dvb-usb: bulk message failed: -22 (3/0) [ 357.506354][ T1749] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 357.566815][ T1749] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 357.575447][ T1749] usb 4-1: media controller created [ 357.618510][ T6630] dvb-usb: bulk message failed: -22 (4/0) [ 357.715666][ T1749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.828684][ T1749] dvb-usb: bulk message failed: -22 (6/0) [ 357.835278][ T1749] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 357.966831][ T1749] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 358.040066][ T1889] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 358.060854][ T1749] dvb-usb: schedule remote query interval to 150 msecs. [ 358.068105][ T1749] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 358.140026][ T1749] usb 4-1: USB disconnect, device number 8 [ 358.262368][ T5881] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 358.326030][ T1889] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 358.335955][ T1889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.344500][ T1889] usb 3-1: Product: syz [ 358.348948][ T1889] usb 3-1: Manufacturer: syz [ 358.353982][ T1889] usb 3-1: SerialNumber: syz [ 358.399655][ T6644] netlink: 156 bytes leftover after parsing attributes in process `syz.1.235'. [ 358.424764][ T1889] usb 3-1: config 0 descriptor?? [ 358.449975][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 358.467883][ T1889] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 358.512042][ T1749] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 358.537946][ T5881] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 133, changing to 11 [ 358.550328][ T5881] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.563816][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 358.574904][ T5881] usb 1-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 358.585772][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.826821][ T5881] usb 1-1: config 0 descriptor?? [ 358.906452][ T1889] usb 3-1: USB disconnect, device number 2 [ 359.310045][ T5881] hid-generic 0003:093A:8001.0004: item fetching failed at offset 2/5 [ 359.326091][ T6646] loop3: detected capacity change from 0 to 128 [ 359.338559][ T5881] hid-generic 0003:093A:8001.0004: probe with driver hid-generic failed with error -22 [ 359.408160][ T6646] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.454481][ T6646] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 359.522496][ T6650] loop4: detected capacity change from 0 to 2048 [ 359.568849][ T1749] usb 1-1: USB disconnect, device number 4 [ 359.600752][ T6646] EXT4-fs (loop3): resizing filesystem from 64 to 1 blocks [ 359.608300][ T6646] EXT4-fs warning (device loop3): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 359.698147][ T6650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.712556][ T6650] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.035097][ T5801] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.385953][ T5809] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.446453][ T6657] loop1: detected capacity change from 0 to 512 [ 360.531206][ T6657] EXT4-fs: Ignoring removed nobh option [ 360.662198][ T6657] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.240: invalid indirect mapped block 256 (level 2) [ 360.757971][ T6657] EXT4-fs (loop1): 2 truncates cleaned up [ 360.766597][ T6657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.838547][ T6660] loop3: detected capacity change from 0 to 128 [ 361.349915][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.419792][ T5881] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 361.633827][ T5881] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.647697][ T5881] usb 5-1: config 0 has no interface number 0 [ 361.654365][ T5881] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 361.663991][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.696063][ T6663] loop0: detected capacity change from 0 to 4096 [ 361.753971][ T5881] usb 5-1: config 0 descriptor?? [ 361.805641][ T5881] usb 5-1: selecting invalid altsetting 1 [ 361.812334][ T5881] dvb_ttusb_budget: ttusb_init_controller: error [ 361.818919][ T5881] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 361.948499][ T6671] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.523328][ T6676] netlink: 156 bytes leftover after parsing attributes in process `syz.3.248'. [ 362.677891][ T5881] DVB: Unable to find symbol cx22700_attach() [ 363.234457][ T5881] DVB: Unable to find symbol tda10046_attach() [ 363.241351][ T5881] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 363.346510][ T5881] usb 5-1: USB disconnect, device number 5 [ 363.569665][ T6687] loop4: detected capacity change from 0 to 64 [ 363.672376][ T6683] loop2: detected capacity change from 0 to 1024 [ 363.785082][ T6687] hfs: unable to locate alternate MDB [ 363.793616][ T6687] hfs: continuing without an alternate MDB [ 363.970732][ T6679] loop1: detected capacity change from 0 to 4096 [ 364.047673][ T6679] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 364.104961][ T6683] hfsplus: request for non-existent node 33423360 in B*Tree [ 364.113587][ T6683] hfsplus: request for non-existent node 33423360 in B*Tree [ 364.256700][ T6683] hfsplus: request for non-existent node 33423360 in B*Tree [ 364.264545][ T6683] hfsplus: request for non-existent node 33423360 in B*Tree [ 364.308519][ T6688] hfsplus: request for non-existent node 33423360 in B*Tree [ 364.316402][ T6688] hfsplus: request for non-existent node 33423360 in B*Tree [ 364.377560][ T6689] hfsplus: request for non-existent node 33423360 in B*Tree [ 364.385511][ T6689] hfsplus: request for non-existent node 33423360 in B*Tree [ 364.438762][ T6691] loop0: detected capacity change from 0 to 64 [ 364.442965][ T6686] loop3: detected capacity change from 0 to 4096 [ 364.470110][ T6683] hfsplus: request for non-existent node 33423360 in B*Tree [ 364.477903][ T6683] hfsplus: request for non-existent node 33423360 in B*Tree [ 364.558219][ T6679] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 364.623755][ T6688] hfsplus: request for non-existent node 33423360 in B*Tree [ 364.627349][ T6686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.631533][ T6688] hfsplus: request for non-existent node 33423360 in B*Tree [ 365.190358][ T5881] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 365.441555][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.477551][ T5881] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 365.486231][ T5881] usb 5-1: config 0 has no interface number 0 [ 365.493698][ T5881] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 365.505787][ T5881] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 365.517996][ T5881] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 365.533552][ T5881] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 365.546549][ T5881] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 365.557083][ T5881] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 365.570770][ T5881] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 365.580354][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.686678][ T6697] loop2: detected capacity change from 0 to 1024 [ 365.778007][ T6697] hfsplus: bad catalog entry type [ 365.811393][ T5881] usb 5-1: config 0 descriptor?? [ 365.820636][ T6694] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 365.875943][ T5881] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 366.005806][ T6701] loop1: detected capacity change from 0 to 256 [ 366.053014][ T3648] hfsplus: b-tree write err: -5, ino 4 [ 366.085243][ T6701] exfat: Deprecated parameter 'utf8' [ 366.178422][ T5881] usb 5-1: USB disconnect, device number 6 [ 366.217502][ T5881] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 366.266680][ T6701] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 366.580833][ T6706] loop0: detected capacity change from 0 to 8 [ 367.449050][ T6710] loop1: detected capacity change from 0 to 512 [ 367.572969][ T6710] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 367.592799][ T6711] netlink: 156 bytes leftover after parsing attributes in process `syz.3.263'. [ 367.718051][ T6710] EXT4-fs (loop1): 1 truncate cleaned up [ 367.726897][ T6710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.811973][ T6711] Zero length message leads to an empty skb [ 367.881666][ T6710] EXT4-fs (loop1): resizing filesystem from 256 to 1 blocks [ 367.894297][ T6710] EXT4-fs warning (device loop1): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 368.120054][ T5856] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 368.186177][ T6716] loop4: detected capacity change from 0 to 2048 [ 368.356289][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 368.366747][ T5856] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 368.377358][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 368.387844][ T5856] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 368.409422][ T5881] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 368.442032][ T6716] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 368.450253][ T6716] UDF-fs: Scanning with blocksize 512 failed [ 368.463243][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.607476][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 368.610379][ T5856] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 368.622904][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.631442][ T5856] usb 1-1: Product: syz [ 368.635954][ T5856] usb 1-1: Manufacturer: syz [ 368.641059][ T5856] usb 1-1: SerialNumber: syz [ 368.669571][ T5881] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 368.683595][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 368.690820][ T5881] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 368.699569][ T6716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.700166][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.762819][ T5856] usb 1-1: config 0 descriptor?? [ 368.824234][ T5856] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 369.003077][ T5881] usb 3-1: config 0 descriptor?? [ 369.025407][ T6721] loop3: detected capacity change from 0 to 256 [ 369.084662][ T5856] scsi host1: usb-storage 1-1:0.0 [ 369.367947][ T5856] usb 1-1: USB disconnect, device number 5 [ 369.588539][ T5881] lenovo 0003:17EF:60FE.0005: unknown main item tag 0x0 [ 369.589906][ T6721] FAT-fs (loop3): Directory bread(block 64) failed [ 369.596355][ T5881] lenovo 0003:17EF:60FE.0005: unknown main item tag 0x0 [ 369.602595][ T6721] FAT-fs (loop3): Directory bread(block 65) failed [ 369.602907][ T6721] FAT-fs (loop3): Directory bread(block 66) failed [ 369.615118][ T5881] lenovo 0003:17EF:60FE.0005: unknown main item tag 0x0 [ 369.617136][ T6721] FAT-fs (loop3): Directory bread(block 67) failed [ 369.623905][ T5881] lenovo 0003:17EF:60FE.0005: unknown main item tag 0x0 [ 369.636777][ T6721] FAT-fs (loop3): Directory bread(block 68) failed [ 369.643034][ T5881] lenovo 0003:17EF:60FE.0005: unknown main item tag 0x0 [ 369.643221][ T5881] lenovo 0003:17EF:60FE.0005: unknown main item tag 0x0 [ 369.643392][ T5881] lenovo 0003:17EF:60FE.0005: unknown main item tag 0x0 [ 369.643564][ T5881] lenovo 0003:17EF:60FE.0005: unknown main item tag 0x0 [ 369.643726][ T5881] lenovo 0003:17EF:60FE.0005: unknown main item tag 0x0 [ 369.643909][ T5881] lenovo 0003:17EF:60FE.0005: unknown main item tag 0x0 [ 369.644075][ T5881] lenovo 0003:17EF:60FE.0005: unknown main item tag 0x0 [ 369.710865][ T6721] FAT-fs (loop3): Directory bread(block 69) failed [ 369.717850][ T6721] FAT-fs (loop3): Directory bread(block 70) failed [ 369.724901][ T6721] FAT-fs (loop3): Directory bread(block 71) failed [ 369.737349][ T6721] FAT-fs (loop3): Directory bread(block 72) failed [ 369.745724][ T6721] FAT-fs (loop3): Directory bread(block 73) failed [ 370.046927][ T5881] lenovo 0003:17EF:60FE.0005: hidraw0: USB HID v0.0b Device [HID 17ef:60fe] on usb-dummy_hcd.2-1/input0 [ 370.131316][ T5881] usb 3-1: USB disconnect, device number 3 [ 370.375978][ T6728] loop1: detected capacity change from 0 to 1024 [ 370.836175][ T5856] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 370.891021][ T6728] hfsplus: request for non-existent node 33423360 in B*Tree [ 370.898635][ T6728] hfsplus: request for non-existent node 33423360 in B*Tree [ 370.985794][ T6732] hfsplus: request for non-existent node 33423360 in B*Tree [ 370.993788][ T6732] hfsplus: request for non-existent node 33423360 in B*Tree [ 371.064283][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 371.100378][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.112151][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.122584][ T5856] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 371.136519][ T5856] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 371.146232][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.409575][ T5856] usb 5-1: config 0 descriptor?? [ 371.701229][ T6730] fido_id[6730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 372.070549][ T5856] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input8 [ 372.303650][ T6737] loop2: detected capacity change from 0 to 4096 [ 372.337677][ T6737] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 372.374620][ T6742] loop0: detected capacity change from 0 to 512 [ 372.421232][ T5856] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 372.478949][ T6742] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 372.526579][ T5856] usb 5-1: USB disconnect, device number 7 [ 372.652997][ T6743] loop1: detected capacity change from 0 to 2048 [ 372.709438][ T6737] ntfs3(loop2): ino=19, mi_enum_attr [ 372.715578][ T6737] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 372.835824][ T6746] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.069623][ T30] audit: type=1800 audit(1748179632.471:84): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.274" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 373.234198][ T6743] NILFS (loop1): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 373.245623][ T6743] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16) [ 373.391537][ T6743] Remounting filesystem read-only [ 373.942447][ T6751] sp0: Synchronizing with TNC [ 373.974608][ T6749] fido_id[6749]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 374.033471][ T5812] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 374.333299][ T6753] netlink: 156 bytes leftover after parsing attributes in process `syz.0.278'. [ 374.900535][ T5091] Bluetooth: hci2: command 0x0406 tx timeout [ 374.906981][ T5091] Bluetooth: hci4: command 0x0405 tx timeout [ 374.921642][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 375.030166][ T6756] loop3: detected capacity change from 0 to 4096 [ 375.121865][ T6756] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 375.162613][ T6764] netlink: 'syz.0.283': attribute type 5 has an invalid length. [ 375.481457][ T6766] netlink: 'syz.2.284': attribute type 29 has an invalid length. [ 375.498817][ T6760] loop1: detected capacity change from 0 to 4096 [ 375.580659][ T6760] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 375.584237][ T6766] netlink: 'syz.2.284': attribute type 29 has an invalid length. [ 376.036659][ T6769] loop0: detected capacity change from 0 to 512 [ 376.087931][ T6769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 376.104619][ T6769] EXT4-fs: Ignoring removed i_version option [ 376.131797][ T6771] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 376.154226][ T30] audit: type=1800 audit(1748179635.541:85): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.281" name="file0" dev="loop1" ino=28 res=0 errno=0 [ 376.269989][ T6769] EXT4-fs (loop0): 1 orphan inode deleted [ 376.278408][ T6769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.727139][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.158446][ T6780] loop4: detected capacity change from 0 to 1024 [ 377.233466][ T6780] EXT4-fs: Ignoring removed bh option [ 377.338046][ T6776] loop2: detected capacity change from 0 to 4096 [ 377.403713][ T6780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.479489][ T6776] NILFS (loop2): invalid segment: Checksum error in segment payload [ 377.493888][ T6776] NILFS (loop2): trying rollback from an earlier position [ 377.556376][ T6776] NILFS (loop2): recovery complete [ 377.640973][ T6786] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.150735][ T5809] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.255493][ T6789] capability: warning: `syz.1.291' uses 32-bit capabilities (legacy support in use) [ 378.310037][ T5856] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 378.522099][ T5856] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 378.532224][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.712500][ T5856] usb 4-1: config 0 descriptor?? [ 378.774320][ T5856] cp210x 4-1:0.0: cp210x converter detected [ 378.811553][ T6793] netlink: 156 bytes leftover after parsing attributes in process `syz.0.294'. [ 379.035406][ T6795] loop2: detected capacity change from 0 to 164 [ 379.216409][ T6797] loop4: detected capacity change from 0 to 256 [ 379.383869][ T6797] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0x314d4978, utbl_chksum : 0xe619d30d) [ 379.499974][ T5856] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 379.507938][ T5856] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 379.615910][ T5856] usb 4-1: cp210x converter now attached to ttyUSB0 [ 379.667576][ T5856] usb 4-1: USB disconnect, device number 9 [ 379.718000][ T5856] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 379.732560][ T5856] cp210x 4-1:0.0: device disconnected [ 380.143278][ T6801] loop0: detected capacity change from 0 to 1024 [ 380.471334][ T6801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.570199][ T5881] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 380.579794][ T5856] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 380.769586][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 380.799778][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 380.813071][ T5856] usb 2-1: config 0 interface 0 has no altsetting 0 [ 380.820667][ T5856] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 380.822716][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.830214][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.850031][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.863322][ T5881] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 380.872826][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.902880][ T6809] loop4: detected capacity change from 0 to 128 [ 380.914588][ T5856] usb 2-1: config 0 descriptor?? [ 381.048034][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.102546][ T6809] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 381.192254][ T5881] usb 3-1: config 0 descriptor?? [ 381.205736][ T6809] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 381.450610][ T5856] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 381.458348][ T5856] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 381.468536][ T5856] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 381.476427][ T5856] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 381.484382][ T5856] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 381.636601][ T5856] waterforce 0003:1044:7A4D.0007: hidraw0: USB HID v0.05 Device [HID 1044:7a4d] on usb-dummy_hcd.1-1/input0 [ 381.713887][ T5856] waterforce 0003:1044:7A4D.0007: fw version request failed with -38 [ 381.714481][ T5881] itetech 0003:06CB:73F6.0008: item fetching failed at offset 4/5 [ 381.734205][ T5809] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.800082][ T5881] itetech 0003:06CB:73F6.0008: probe with driver itetech failed with error -22 [ 381.893569][ T6814] loop3: detected capacity change from 0 to 1024 [ 381.942597][ T5856] usb 2-1: USB disconnect, device number 4 [ 381.960547][ T5881] usb 3-1: USB disconnect, device number 4 [ 382.089961][ T6814] hfsplus: bad catalog entry type [ 382.602462][ T3648] hfsplus: b-tree write err: -5, ino 4 [ 382.669395][ T5881] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 382.798309][ T6818] fido_id[6818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 382.911414][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 383.017705][ T5881] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 383.027293][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.035839][ T5881] usb 5-1: Product: syz [ 383.043291][ T5881] usb 5-1: Manufacturer: syz [ 383.048185][ T5881] usb 5-1: SerialNumber: syz [ 383.066178][ T6822] loop0: detected capacity change from 0 to 512 [ 383.200002][ T6822] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 383.222501][ T5881] usb 5-1: config 0 descriptor?? [ 383.277850][ T5881] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 383.366591][ T6828] loop2: detected capacity change from 0 to 16 [ 383.409605][ T5856] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 383.444742][ T1889] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 383.536201][ T6828] erofs (device loop2): mounted with root inode @ nid 36. [ 383.720588][ T5856] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 383.733181][ T5856] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.743886][ T5856] usb 2-1: config 0 interface 0 has no altsetting 0 [ 383.751083][ T5856] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 383.764047][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.768271][ T1889] usb 4-1: Using ep0 maxpacket: 32 [ 383.934156][ T1889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.946214][ T1889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.956969][ T1889] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 383.969056][ T1889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.009580][ T5856] usb 2-1: config 0 descriptor?? [ 384.032829][ T5881] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 384.081658][ T5881] usb 5-1: USB disconnect, device number 8 [ 384.188441][ T1889] usb 4-1: config 0 descriptor?? [ 384.632763][ T5856] pantherlord 0003:0810:0002.0009: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.1-1/input0 [ 384.647039][ T5856] pantherlord 0003:0810:0002.0009: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 384.751015][ T1889] uclogic 0003:145F:0212.000A: interface is invalid, ignoring [ 384.815707][ T6830] loop0: detected capacity change from 0 to 256 [ 384.850693][ T1889] usb 2-1: USB disconnect, device number 5 [ 385.020026][ T5856] usb 4-1: USB disconnect, device number 10 [ 385.065519][ T6830] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 385.080689][ T6830] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 385.216241][ T6830] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 385.275630][ T6834] loop4: detected capacity change from 0 to 512 [ 385.330503][ T6834] EXT4-fs: Ignoring removed nobh option [ 385.338165][ T5881] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 385.451855][ T6834] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.311: invalid indirect mapped block 256 (level 2) [ 385.515522][ T6834] EXT4-fs (loop4): 2 truncates cleaned up [ 385.524282][ T6834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.553397][ T30] audit: type=1800 audit(1748179644.971:86): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.311" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 385.660901][ T5881] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 385.670076][ T5881] usb 3-1: config 4 has no interface number 0 [ 385.700902][ T5881] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 385.712822][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.722090][ T5881] usb 3-1: Product: syz [ 385.726632][ T5881] usb 3-1: Manufacturer: syz [ 385.731830][ T5881] usb 3-1: SerialNumber: syz [ 385.763298][ T5881] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 386.154899][ T5809] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.222393][ T6836] fido_id[6836]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 386.271881][ T5881] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 386.282947][ T5881] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 386.488035][ T5881] usb 3-1: USB disconnect, device number 5 [ 386.507322][ T6843] loop1: detected capacity change from 0 to 128 [ 386.601671][ T6842] loop0: detected capacity change from 0 to 512 [ 386.710842][ T6843] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.772646][ T6847] loop3: detected capacity change from 0 to 256 [ 386.800146][ T6843] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.844310][ T6847] exfat: Deprecated parameter 'utf8' [ 386.911484][ T6842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.924863][ T6842] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.093713][ T6847] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 387.153833][ T6842] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #4: comm syz.0.312: corrupted inode contents [ 387.240976][ T6842] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #4: comm syz.0.312: mark_inode_dirty error [ 387.347558][ T6842] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #4: comm syz.0.312: corrupted inode contents [ 387.505211][ T6842] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #4: comm syz.0.312: mark_inode_dirty error [ 387.612905][ T5812] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.628877][ T6842] Quota error (device loop0): write_blk: dquota write failed [ 387.637330][ T6842] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 387.652832][ T6842] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.312: Failed to acquire dquot type 1 [ 387.742017][ T6853] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #4: comm syz.0.312: corrupted inode contents [ 387.828292][ T6853] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #4: comm syz.0.312: mark_inode_dirty error [ 387.877088][ T5856] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 387.953578][ T6853] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #4: comm syz.0.312: corrupted inode contents [ 388.069437][ T6853] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #4: comm syz.0.312: mark_inode_dirty error [ 388.089683][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 388.129833][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.141575][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.151826][ T5856] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 388.188708][ T6853] Quota error (device loop0): write_blk: dquota write failed [ 388.188824][ T6853] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 388.189797][ T6853] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 388.190008][ T6853] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.312: Failed to acquire dquot type 1 [ 388.240063][ T5856] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 388.249750][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.354890][ T5856] usb 5-1: config 0 descriptor?? [ 388.749810][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.769756][ T6861] loop3: detected capacity change from 0 to 64 [ 388.888989][ T5856] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 389.107891][ T6863] loop2: detected capacity change from 0 to 512 [ 389.142765][ T5856] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 389.240229][ T6863] EXT4-fs warning (device loop2): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 389.242226][ T5856] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 389.252775][ T6863] EXT4-fs warning (device loop2): dx_probe:851: Enable large directory feature to access it [ 389.263858][ T5856] microsoft 0003:045E:07DA.000B: no inputs found [ 389.263963][ T5856] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 389.274019][ T5856] usb 5-1: USB disconnect, device number 9 [ 389.274677][ T6863] EXT4-fs warning (device loop2): dx_probe:936: inode #2: comm syz.2.320: Corrupt directory, running e2fsck is recommended [ 389.420391][ T6863] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 389.511418][ T6863] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.320: corrupted in-inode xattr: invalid ea_ino [ 389.581649][ T6863] EXT4-fs (loop2): Remounting filesystem read-only [ 389.598798][ T6863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.851912][ T6863] EXT4-fs warning (device loop2): ext4_empty_dir:3088: inode #2: comm syz.2.320: directory missing '.' [ 390.031238][ T6871] capability: warning: `syz.1.322' uses deprecated v2 capabilities in a way that may be insecure [ 390.261786][ T6868] fido_id[6868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 390.315179][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.362381][ T6872] loop3: detected capacity change from 0 to 1024 [ 390.423997][ T6872] EXT4-fs: Ignoring removed nobh option [ 390.430232][ T6872] EXT4-fs: Ignoring removed bh option [ 390.577491][ T6872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.756590][ T6872] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.323: inode #1027213879: comm syz.3.323: iget: illegal inode # [ 390.799658][ T6872] EXT4-fs (loop3): Remounting filesystem read-only [ 390.806713][ T6872] EXT4-fs warning (device loop3): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.3.323: cleanup dec ref error -30 [ 390.820166][ T6872] EXT4-fs warning (device loop3): ext4_xattr_block_set:2190: inode #18: comm syz.3.323: dec ref error=-30 [ 390.932247][ T5856] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 391.151641][ T5856] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 391.160800][ T5856] usb 1-1: config 0 has no interface number 0 [ 391.167358][ T5856] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 391.179651][ T5856] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 391.191598][ T5856] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 391.203929][ T5856] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 391.215717][ T5856] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 391.226961][ T5856] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 391.244541][ T5856] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 391.255281][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.283222][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.662983][ T5856] usb 1-1: config 0 descriptor?? [ 391.672741][ T6879] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 391.890573][ T5856] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 392.063096][ T5856] usb 1-1: USB disconnect, device number 6 [ 392.101094][ T5856] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 392.164746][ T6893] loop4: detected capacity change from 0 to 128 [ 392.174980][ T6893] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 392.194042][ T6893] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 392.867701][ T6899] loop1: detected capacity change from 0 to 128 [ 393.610206][ T5881] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 393.849765][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 393.889963][ T5881] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.903713][ T5881] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.915004][ T5881] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 393.924618][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.067646][ T6903] loop4: detected capacity change from 0 to 4096 [ 394.166757][ T5881] hub 1-1:4.0: USB hub found [ 394.445084][ T5881] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 394.519480][ T5856] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 394.768528][ T5856] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 394.771034][ T6903] ntfs3(loop4): failed to convert "0080" to maciceland [ 394.779494][ T5856] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 394.779649][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.798342][ T5881] usb 1-1: USB disconnect, device number 7 [ 394.893815][ T6903] ntfs3(loop4): failed to convert name for inode 1e. [ 394.960879][ T6903] ntfs3(loop4): ino=1f, mi_enum_attr [ 394.966552][ T6903] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 394.986344][ T5856] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 395.990947][ T6925] loop0: detected capacity change from 0 to 16 [ 396.062708][ T5856] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 396.071497][ T5856] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 396.080703][ T6925] erofs (device loop0): mounted with root inode @ nid 36. [ 396.113777][ T5856] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 396.178437][ T30] audit: type=1800 audit(1748179655.581:87): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.346" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 396.334783][ T5856] usb 2-1: USB disconnect, device number 6 [ 397.081191][ T6934] netlink: 52 bytes leftover after parsing attributes in process `syz.0.349'. [ 398.619720][ T5881] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 398.829555][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.840034][ T5881] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 398.849550][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.934264][ T6958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.943505][ T6958] batadv_slave_0: entered promiscuous mode [ 398.974177][ T5881] usb 2-1: config 0 descriptor?? [ 399.471132][ T5881] nintendo 0003:057E:200E.000C: item fetching failed at offset 5/7 [ 399.495211][ T5881] nintendo 0003:057E:200E.000C: HID parse failed [ 399.503332][ T5881] nintendo 0003:057E:200E.000C: probe - fail = -22 [ 399.510709][ T5881] nintendo 0003:057E:200E.000C: probe with driver nintendo failed with error -22 [ 399.674954][ T5856] usb 2-1: USB disconnect, device number 7 [ 400.509528][ T6972] loop2: detected capacity change from 0 to 512 [ 400.540782][ T6974] loop4: detected capacity change from 0 to 512 [ 400.615205][ T6974] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 400.690665][ T6974] EXT4-fs (loop4): 1 truncate cleaned up [ 400.699396][ T6974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.716905][ T6972] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 401.195721][ T5809] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.350818][ T6980] loop1: detected capacity change from 0 to 512 [ 401.408866][ T6980] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 401.497986][ T6980] EXT4-fs (loop1): 1 truncate cleaned up [ 401.506577][ T6980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.759681][ T6985] loop2: detected capacity change from 0 to 512 [ 401.998409][ T6985] EXT4-fs (loop2): Test dummy encryption mode enabled [ 402.059024][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.142926][ T6985] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.369: corrupted in-inode xattr: invalid ea_ino [ 402.199592][ T6985] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.369: couldn't read orphan inode 15 (err -117) [ 402.302312][ T6985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.427851][ T6985] EXT4-fs error (device loop2): ext4_lookup:1789: inode #14: comm syz.2.369: iget: immutable or append flags not allowed on symlinks [ 402.692366][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 402.870537][ T6998] Bluetooth: MGMT ver 1.23 [ 403.131069][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.518526][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 403.533159][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 403.772144][ T7006] loop2: detected capacity change from 0 to 64 [ 403.840780][ T5856] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 403.852326][ T7008] loop4: detected capacity change from 0 to 128 [ 403.990251][ T7008] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 404.021279][ T7009] loop1: detected capacity change from 0 to 512 [ 404.040051][ T5856] usb 4-1: Using ep0 maxpacket: 16 [ 404.086935][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.098775][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.107657][ T7008] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 404.109782][ T5856] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 404.128720][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.313006][ T5856] usb 4-1: config 0 descriptor?? [ 404.387741][ T7009] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 404.923065][ T5809] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 405.019510][ T1749] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 405.032886][ T5856] aquacomputer_d5next 0003:0C70:F014.000D: hidraw0: USB HID v0.04 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 405.221355][ T5856] usb 4-1: USB disconnect, device number 11 [ 405.269861][ T1749] usb 1-1: Using ep0 maxpacket: 16 [ 405.372901][ T1749] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 405.383470][ T1749] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 405.392973][ T1749] usb 1-1: Product: syz [ 405.398503][ T1749] usb 1-1: Manufacturer: syz [ 405.403726][ T1749] usb 1-1: SerialNumber: syz [ 405.529585][ T1749] usb 1-1: config 0 descriptor?? [ 405.866645][ T1749] usb 1-1: USB disconnect, device number 8 [ 405.953500][ T7015] fido_id[7015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 406.008941][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.068820][ T7022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.077163][ T7022] batadv_slave_0: entered promiscuous mode [ 407.340067][ T1749] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 407.559451][ T1749] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 407.568604][ T1749] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 407.579542][ T1749] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 407.588832][ T1749] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 407.600495][ T1749] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 407.608577][ T7036] syz.1.390: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 407.631155][ T7036] CPU: 1 UID: 0 PID: 7036 Comm: syz.1.390 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(undef) [ 407.631339][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 407.631445][ T7036] Call Trace: [ 407.631512][ T7036] [ 407.631566][ T7036] __dump_stack+0x26/0x30 [ 407.631771][ T7036] dump_stack_lvl+0x1df/0x270 [ 407.631959][ T7036] dump_stack+0x1e/0x25 [ 407.632146][ T7036] warn_alloc+0x470/0x690 [ 407.632386][ T7036] ? kmsan_get_metadata+0x105/0x1b0 [ 407.632614][ T7036] __vmalloc_node_range_noprof+0x133/0x2370 [ 407.632815][ T7036] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 407.633039][ T7036] ? kmsan_get_metadata+0x105/0x1b0 [ 407.633247][ T7036] ? kmsan_get_metadata+0x105/0x1b0 [ 407.633463][ T7036] ? kmsan_get_metadata+0x105/0x1b0 [ 407.633668][ T7036] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 407.633895][ T7036] ? __kmalloc_cache_noprof+0x84c/0xed0 [ 407.634065][ T7036] ? xskq_create+0x65/0x290 [ 407.634210][ T7036] ? kmsan_get_metadata+0x105/0x1b0 [ 407.634432][ T7036] vmalloc_user_noprof+0x8d/0xa0 [ 407.634636][ T7036] ? xskq_create+0x11d/0x290 [ 407.634783][ T7036] xskq_create+0x11d/0x290 [ 407.634940][ T7036] xsk_init_queue+0xfd/0x1d0 [ 407.635084][ T7036] xsk_setsockopt+0x873/0xc30 [ 407.635326][ T7036] do_sock_setsockopt+0x4d9/0x820 [ 407.635525][ T7036] ? __pfx_xsk_setsockopt+0x10/0x10 [ 407.635744][ T7036] __ia32_sys_setsockopt+0x2ac/0x490 [ 407.635959][ T7036] ia32_sys_call+0x41fa/0x42c0 [ 407.636094][ T7036] __do_fast_syscall_32+0xb0/0x110 [ 407.636319][ T7036] do_fast_syscall_32+0x38/0x80 [ 407.636516][ T7036] do_SYSENTER_32+0x1f/0x30 [ 407.636714][ T7036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 407.636981][ T7036] RIP: 0023:0xf711e539 [ 407.637107][ T7036] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 407.637256][ T7036] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 407.637404][ T7036] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000011b [ 407.637503][ T7036] RDX: 0000000000000006 RSI: 0000000080000180 RDI: 0000000000000004 [ 407.637596][ T7036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 407.637685][ T7036] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 407.637774][ T7036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 407.637896][ T7036] [ 407.638689][ T7036] Mem-Info: [ 407.837435][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.905196][ T7036] active_anon:5615 inactive_anon:0 isolated_anon:0 [ 407.905196][ T7036] active_file:1778 inactive_file:39877 isolated_file:0 [ 407.905196][ T7036] unevictable:768 dirty:48 writeback:0 [ 407.905196][ T7036] slab_reclaimable:4910 slab_unreclaimable:24390 [ 407.905196][ T7036] mapped:30510 shmem:1361 pagetables:952 [ 407.905196][ T7036] sec_pagetables:0 bounce:0 [ 407.905196][ T7036] kernel_misc_reclaimable:0 [ 407.905196][ T7036] free:382543 free_pcp:1419 free_cma:0 [ 407.950514][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.960718][ T7036] Node 0 active_anon:22460kB inactive_anon:0kB active_file:6992kB inactive_file:159308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121920kB dirty:192kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5280kB pagetables:3804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 407.994266][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.001129][ T7036] Node 1 active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:4kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 408.019700][ T1749] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 408.036046][ T7036] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.036435][ T7036] lowmem_reserve[]: 0 927 1240 1240 1240 [ 408.036739][ T7036] Node 0 DMA32 free:602876kB boost:0kB min:36752kB low:45940kB high:55128kB reserved_highatomic:0KB active_anon:2712kB inactive_anon:0kB active_file:2148kB inactive_file:83548kB unevictable:0kB writepending:152kB present:3129332kB managed:949908kB mlocked:0kB bounce:0kB free_pcp:4120kB local_pcp:1316kB free_cma:0kB [ 408.037107][ T7036] lowmem_reserve[]: 0 0 312 312 312 [ 408.037397][ T7036] Node 0 Normal free:16848kB boost:0kB min:12992kB low:16240kB high:19488kB reserved_highatomic:0KB active_anon:19804kB inactive_anon:0kB active_file:4844kB inactive_file:75760kB unevictable:1536kB writepending:40kB present:1048580kB managed:320484kB mlocked:0kB bounce:0kB free_pcp:1552kB local_pcp:1184kB free_cma:0kB [ 408.048395][ T1749] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 408.074730][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.075813][ T7036] lowmem_reserve[]: [ 408.080657][ T1749] usb 1-1: Product: syz [ 408.110427][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.110903][ T7036] 0 0 0 0 0 [ 408.111178][ T7036] Node 1 Normal free:906352kB boost:0kB min:40196kB low:50244kB high:60292kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:991296kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.111532][ T7036] lowmem_reserve[]: 0 0 0 0 0 [ 408.111816][ T7036] Node 0 DMA: 0*4kB 0*8kB [ 408.117253][ T1749] usb 1-1: Manufacturer: syz [ 408.147204][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.150041][ T7036] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 408.150664][ T7036] Node 0 DMA32: 55*4kB (UME) 90*8kB (ME) 73*16kB (UME) 28*32kB (ME) 35*64kB [ 408.213156][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.263659][ T7036] (UME) 23*128kB (UME) 23*256kB (UME) 10*512kB (UM) 10*1024kB (UME) 8*2048kB (UME) 136*4096kB (UM) = 602876kB [ 408.277069][ T7036] Node 0 Normal: 2*4kB (ME) 17*8kB (UME) 14*16kB (ME) 15*32kB (UME) 20*64kB (UM) 15*128kB (UE) 6*256kB (UE) 6*512kB (UE) 4*1024kB (UME) 2*2048kB (M) 0*4096kB = 16848kB [ 408.298905][ T7036] Node 1 Normal: 4*4kB (UM) 6*8kB (UME) 21*16kB (UME) 21*32kB (UME) 15*64kB (UE) 13*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 4*2048kB (UME) 217*4096kB (M) = 906352kB [ 408.319443][ T7036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 408.329474][ T7036] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 408.341806][ T7036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 408.352610][ T7036] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 408.362347][ T7036] 42987 total pagecache pages [ 408.367300][ T7036] 0 pages in swap cache [ 408.372297][ T7036] Free swap = 124996kB [ 408.376675][ T7036] Total swap = 124996kB [ 408.381195][ T7036] 2097051 pages RAM [ 408.385310][ T7036] 0 pages HighMem/MovableOnly [ 408.390353][ T7036] 1530605 pages reserved [ 408.394820][ T7036] 0 pages cma reserved [ 408.473379][ T1749] cdc_wdm 1-1:1.0: skipping garbage [ 408.479018][ T1749] cdc_wdm 1-1:1.0: skipping garbage [ 408.504919][ T1749] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 408.511485][ T1749] cdc_wdm 1-1:1.0: Unknown control protocol [ 409.351807][ T7044] loop4: detected capacity change from 0 to 512 [ 409.474605][ T7044] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 410.284822][ T1749] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 410.479607][ T1749] usb 4-1: Using ep0 maxpacket: 32 [ 410.527260][ T1749] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 410.537099][ T1749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.636116][ T1889] usb 1-1: USB disconnect, device number 9 [ 410.660228][ T1749] usb 4-1: config 0 descriptor?? [ 410.774003][ T5881] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 410.959646][ T1749] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 410.992880][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 410.993264][ T1749] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.033306][ T5881] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 411.042304][ T5881] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 411.054043][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 411.064656][ T5881] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 411.076423][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 411.086995][ T5881] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.102881][ T5881] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 411.105763][ T1749] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 411.112891][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.120013][ T1749] usb 4-1: media controller created [ 411.148049][ T7050] ===================================================== [ 411.155593][ T7050] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 411.163430][ T7050] _copy_to_user+0xcc/0x120 [ 411.168173][ T7050] i2cdev_ioctl_smbus+0x586/0x660 [ 411.173722][ T7050] compat_i2cdev_ioctl+0x48f/0xb40 [ 411.179332][ T7050] __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 411.185129][ T7050] ia32_sys_call+0x2d07/0x42c0 [ 411.190331][ T7050] __do_fast_syscall_32+0xb0/0x110 [ 411.195733][ T7050] do_fast_syscall_32+0x38/0x80 [ 411.205408][ T7050] do_SYSENTER_32+0x1f/0x30 [ 411.211698][ T7050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.218318][ T7050] [ 411.220967][ T7050] Uninit was stored to memory at: [ 411.226312][ T7050] __i2c_smbus_xfer+0x2561/0x2f60 [ 411.231901][ T7050] i2c_smbus_xfer+0x31d/0x4d0 [ 411.236859][ T7050] i2cdev_ioctl_smbus+0x4a1/0x660 [ 411.242464][ T7050] compat_i2cdev_ioctl+0x48f/0xb40 [ 411.247830][ T7050] __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 411.253910][ T7050] ia32_sys_call+0x2d07/0x42c0 [ 411.258894][ T7050] __do_fast_syscall_32+0xb0/0x110 [ 411.264431][ T7050] do_fast_syscall_32+0x38/0x80 [ 411.269787][ T7050] do_SYSENTER_32+0x1f/0x30 [ 411.274582][ T7050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.281558][ T7050] [ 411.284015][ T7050] Local variable msgbuf1.i created at: [ 411.289828][ T7050] __i2c_smbus_xfer+0x86a/0x2f60 [ 411.295023][ T7050] i2c_smbus_xfer+0x31d/0x4d0 [ 411.300749][ T7050] [ 411.307404][ T7050] Byte 0 of 1 is uninitialized [ 411.313719][ T7050] Memory access of size 1 starts at ffff88812a2c3c86 [ 411.321012][ T7050] Data copied to user address 0000000080000500 [ 411.327335][ T7050] [ 411.330089][ T7050] CPU: 0 UID: 0 PID: 7050 Comm: syz.3.396 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(undef) [ 411.342715][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.353238][ T7050] ===================================================== [ 411.360499][ T7050] Disabling lock debugging due to kernel taint [ 411.366843][ T7050] Kernel panic - not syncing: kmsan.panic set ... [ 411.373465][ T7050] CPU: 0 UID: 0 PID: 7050 Comm: syz.3.396 Tainted: G B 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(undef) [ 411.387313][ T7050] Tainted: [B]=BAD_PAGE [ 411.391631][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.401897][ T7050] Call Trace: [ 411.405347][ T7050] [ 411.408434][ T7050] __dump_stack+0x26/0x30 [ 411.413032][ T7050] dump_stack_lvl+0x53/0x270 [ 411.417898][ T7050] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 411.424036][ T7050] dump_stack+0x1e/0x25 [ 411.428450][ T7050] panic+0x4bd/0xd50 [ 411.432698][ T7050] kmsan_report+0x29d/0x2a0 [ 411.437532][ T7050] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 411.444167][ T7050] ? kmsan_internal_check_memory+0x496/0x570 [ 411.450446][ T7050] ? kmsan_copy_to_user+0xca/0xe0 [ 411.455764][ T7050] ? _copy_to_user+0xcc/0x120 [ 411.460688][ T7050] ? i2cdev_ioctl_smbus+0x586/0x660 [ 411.466143][ T7050] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 411.471686][ T7050] ? __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 411.477700][ T7050] ? ia32_sys_call+0x2d07/0x42c0 [ 411.482875][ T7050] ? __do_fast_syscall_32+0xb0/0x110 [ 411.488453][ T7050] ? do_fast_syscall_32+0x38/0x80 [ 411.493759][ T7050] ? do_SYSENTER_32+0x1f/0x30 [ 411.498721][ T7050] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.505481][ T7050] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 411.510981][ T7050] ? __i2c_transfer+0x11ca/0x30e0 [ 411.516204][ T7050] ? kmsan_get_metadata+0x105/0x1b0 [ 411.521662][ T7050] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 411.528241][ T7050] ? kmsan_get_metadata+0x105/0x1b0 [ 411.533689][ T7050] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 411.539863][ T7050] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 411.545297][ T7050] ? kmsan_get_metadata+0x105/0x1b0 [ 411.550741][ T7050] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 411.556824][ T7050] kmsan_internal_check_memory+0x496/0x570 [ 411.562896][ T7050] kmsan_copy_to_user+0xca/0xe0 [ 411.567974][ T7050] ? should_fail_usercopy+0x2e/0x40 [ 411.573396][ T7050] _copy_to_user+0xcc/0x120 [ 411.578256][ T7050] i2cdev_ioctl_smbus+0x586/0x660 [ 411.583828][ T7050] compat_i2cdev_ioctl+0x48f/0xb40 [ 411.589208][ T7050] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 411.595318][ T7050] __ia32_compat_sys_ioctl+0x7f9/0x1260 [ 411.601102][ T7050] ? kmsan_get_metadata+0x105/0x1b0 [ 411.606635][ T7050] ? kmsan_get_metadata+0x105/0x1b0 [ 411.612100][ T7050] ia32_sys_call+0x2d07/0x42c0 [ 411.617062][ T7050] __do_fast_syscall_32+0xb0/0x110 [ 411.622448][ T7050] do_fast_syscall_32+0x38/0x80 [ 411.627722][ T7050] do_SYSENTER_32+0x1f/0x30 [ 411.632470][ T7050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.639033][ T7050] RIP: 0023:0xf707e539 [ 411.643265][ T7050] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 411.663100][ T7050] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 411.671721][ T7050] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 411.679888][ T7050] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.688037][ T7050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.696169][ T7050] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 411.704305][ T7050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.712493][ T7050] [ 411.715995][ T7050] Kernel Offset: disabled [ 411.720422][ T7050] Rebooting in 86400 seconds..