last executing test programs: 4m24.257284402s ago: executing program 2 (id=103): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x4, 0x80000001, 0x8}, &(0x7f0000000640)=0x10) 4m23.384595482s ago: executing program 2 (id=110): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000001240)="bd", 0x1) 4m23.113128869s ago: executing program 2 (id=113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000b2}]}) 4m22.535618762s ago: executing program 2 (id=117): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000007300)={[{@quota}, {@nodiscard}, {@gid}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x6}}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@discard}]}, 0x21, 0x6182, &(0x7f0000001140)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 4m21.174888924s ago: executing program 2 (id=124): setreuid(0xee01, 0xee01) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) 4m19.600645931s ago: executing program 2 (id=129): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0x2020) 4m18.675025473s ago: executing program 32 (id=129): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0x2020) 6.552964306s ago: executing program 1 (id=1791): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd28, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) 6.086850717s ago: executing program 1 (id=1796): setgroups(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") 5.741508905s ago: executing program 1 (id=1800): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1a0, 0x12, r0, 0xdb542000) 5.387075884s ago: executing program 1 (id=1801): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) 4.892428615s ago: executing program 1 (id=1806): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x2, 0x0, [{0x40000103, 0x0, 0x1}, {0x202}]}) 4.288234799s ago: executing program 1 (id=1814): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 4.286711599s ago: executing program 0 (id=1815): syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0], 0xfd, 0x5532, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffffc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0x2000003}) 3.519294688s ago: executing program 4 (id=1820): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6da, 0x0, 0x0, 0x0, 0x1, 0x8f}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0xa0}, 'port0\x00', 0x2d, 0x0, 0x7ff8, 0x1, 0x7fffffff, 0x7, 0xe, 0x0, 0x2, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x3, 0x2, 0x0, 0x0, 0x200000}) 3.325093632s ago: executing program 4 (id=1822): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.304487876s ago: executing program 0 (id=1826): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000200)='./file1\x00', 0x454, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=cp949,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d69736f383835392d31332c00639372dae89b1c877bee129642f5a90b1e213b7a2bc83dbfa58bb387dd2e6ca6a01c6c1f9c0967a29ad8b1861863aed0a48249c2f49c4522673702f9398b8688d57d579a94600931636e65faa26d905c2bbb28bc158c37a9989a972eb94f2e893bd91ffba8f8fd"], 0x1, 0x30e, &(0x7f0000001980)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xb7249f, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f00000000c0)='.\x00', 0x80400, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.183292429s ago: executing program 3 (id=1827): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 1.913351785s ago: executing program 3 (id=1828): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0x1, 0x9ed, 0x1, 0x81, 0x9}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) 1.596145793s ago: executing program 3 (id=1829): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1c5}]}) 1.267696241s ago: executing program 0 (id=1830): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) read$FUSE(r0, &(0x7f0000001700)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/250, 0x80}], 0x1, 0x92, 0xfffffffd) 1.182827632s ago: executing program 3 (id=1831): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}}, 0x0) 1.076693565s ago: executing program 0 (id=1832): r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000002100)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x1}) 1.044193786s ago: executing program 4 (id=1833): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000500)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 827.592701ms ago: executing program 4 (id=1834): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x66, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0) 751.667823ms ago: executing program 0 (id=1835): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x36) r1 = accept(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001100)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x80c0) 721.752253ms ago: executing program 3 (id=1836): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 605.078856ms ago: executing program 4 (id=1837): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getsockopt(r0, 0x111, 0xfffffffa, 0x0, &(0x7f0000000080)) 527.822298ms ago: executing program 0 (id=1838): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40046f01, &(0x7f00000002c0)={0x7fffffff, 0x5, 0x401}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x20000000000, 0x2000003, 0x4}) 316.757613ms ago: executing program 4 (id=1839): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 0s ago: executing program 3 (id=1840): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d02, &(0x7f0000000900)) kernel console output (not intermixed with test programs): ror, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 196.952666][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.035414][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.067747][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.114329][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.137301][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.187957][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.224132][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.278767][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.303098][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.345002][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.393304][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.429920][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.480272][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.490942][ T7885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.687'. [ 197.524683][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.538464][ T7885] veth1: entered promiscuous mode [ 197.545808][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.564533][ T7885] veth1: left promiscuous mode [ 197.586811][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.598666][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.627457][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.655550][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.713899][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.757060][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.807198][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.856602][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.888297][ T7864] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 197.918950][ T28] audit: type=1800 audit(1785400873.097:63): pid=7864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.673" name="file1" dev="loop0" ino=1048619 res=0 errno=0 [ 198.547416][ T7904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.696'. [ 198.561315][ T7902] netlink: 'syz.1.694': attribute type 11 has an invalid length. [ 198.604244][ T7902] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.694'. [ 198.702570][ T7902] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 198.769589][ T7910] loop4: detected capacity change from 0 to 1024 [ 198.945186][ T7910] hfsplus: invalid catalog entry type [ 198.969954][ T7910] hfsplus: invalid catalog entry type [ 199.041588][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 199.266014][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 199.294399][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.335081][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 199.386871][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.414348][ T7922] loop4: detected capacity change from 0 to 64 [ 199.434641][ T9] usb 4-1: config 0 descriptor?? [ 199.477411][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 200.334186][ T9] gspca_vc032x: reg_w err -71 [ 200.365827][ T9] vc032x: probe of 4-1:0.0 failed with error -71 [ 200.421773][ T9] usb 4-1: USB disconnect, device number 6 [ 200.959468][ T7929] loop0: detected capacity change from 0 to 32768 [ 200.984416][ T7929] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.703 (7929) [ 201.083959][ T7929] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.123562][ T7929] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 201.164008][ T7929] BTRFS info (device loop0): setting nodatasum [ 201.196879][ T7929] BTRFS info (device loop0): force zlib compression, level 3 [ 201.211604][ T7942] loop3: detected capacity change from 0 to 256 [ 201.228379][ T7929] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 201.283733][ T7929] BTRFS info (device loop0): use lzo compression, level 0 [ 201.296218][ T7942] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 201.341141][ T7929] BTRFS info (device loop0): turning on flush-on-commit [ 201.377680][ T7929] BTRFS info (device loop0): enabling auto defrag [ 201.410954][ T7929] BTRFS info (device loop0): max_inline at 4096 [ 201.445236][ T7929] BTRFS info (device loop0): using free space tree [ 201.557433][ T7929] BTRFS info (device loop0): enabling ssd optimizations [ 201.749455][ T28] audit: type=1800 audit(1785400876.927:64): pid=7929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.703" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 201.769811][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.989486][ T5778] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.506916][ T7973] loop3: detected capacity change from 0 to 64 [ 202.586412][ T7971] loop4: detected capacity change from 0 to 4096 [ 202.693321][ T28] audit: type=1800 audit(1785400877.877:65): pid=7973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.718" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 203.024250][ T5777] hfs: node 4:3 still has 1 user(s)! [ 203.225711][ T7984] loop0: detected capacity change from 0 to 1024 [ 203.353857][ T7984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.488773][ T28] audit: type=1800 audit(1785400878.667:66): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.724" name=02 dev="loop0" ino=18 res=0 errno=0 [ 203.648701][ T7988] loop3: detected capacity change from 0 to 4096 [ 203.668508][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.957600][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'. [ 204.403576][ T8006] loop0: detected capacity change from 0 to 64 [ 204.495654][ T28] audit: type=1800 audit(1785400879.677:67): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.731" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 204.627000][ T5778] hfs: node 4:3 still has 1 user(s)! [ 204.763474][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 205.137501][ T8016] loop0: detected capacity change from 0 to 256 [ 205.165034][ T8016] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.208859][ T8016] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 205.259142][ T8016] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc4d1c548, utbl_chksum : 0xe619d30d) [ 205.734108][ T8024] loop0: detected capacity change from 0 to 1024 [ 205.840693][ T8024] hfsplus: invalid catalog entry type [ 205.868758][ T8024] hfsplus: invalid catalog entry type [ 207.308983][ T8046] loop3: detected capacity change from 0 to 1024 [ 207.340843][ T8043] loop4: detected capacity change from 0 to 4096 [ 207.555467][ T8043] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 207.583628][ T8046] hfsplus: invalid catalog entry type [ 207.622824][ T8043] ntfs3: loop4: Failed to load $Extend (-22). [ 207.629041][ T8043] ntfs3: loop4: Failed to initialize $Extend. [ 207.657708][ T8051] loop0: detected capacity change from 0 to 128 [ 207.671405][ T8046] hfsplus: invalid catalog entry type [ 207.749767][ T8051] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.773826][ T8043] ntfs3: loop4: ino=9, ntfs_sync_fs failed, -22. [ 207.815194][ T8054] ntfs3: loop4: ino=9, ntfs_sync_fs failed, -22. [ 207.825597][ T8051] ext4 filesystem being mounted at /234/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.963368][ T6216] ntfs3: loop4: ino=9, ntfs_sync_fs failed, -22. [ 208.008821][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.481885][ T8065] block nbd0: server does not support multiple connections per device. [ 208.502821][ T8065] block nbd0: shutting down sockets [ 208.517658][ T8066] loop0: detected capacity change from 0 to 4096 [ 208.721785][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 208.944565][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.990028][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 209.016588][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 209.037671][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 209.081638][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 209.097895][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 209.161543][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 209.209074][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 209.254047][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 209.303918][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 209.366409][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 209.381153][ T8075] loop0: detected capacity change from 0 to 4096 [ 209.408203][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 209.483049][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.542405][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.604085][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 209.667007][ T8] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 209.734204][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.793129][ T8] usb 4-1: Product: syz [ 209.797347][ T8] usb 4-1: Manufacturer: syz [ 209.874222][ T8] usb 4-1: SerialNumber: syz [ 209.905228][ T8067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 209.975212][ T8067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.048336][ T8067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.133776][ T8067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.141051][ T8067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.247656][ T8067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.285745][ T8067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.326010][ T8067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.365063][ T8067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.395374][ T8067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.425862][ T8067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.470570][ T8] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 210.502523][ T8] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 210.535243][ T178] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 210.543060][ T8] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 210.574180][ T8] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 210.613842][ T8] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 210.752880][ T178] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.791720][ T178] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.835233][ T178] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.861570][ T178] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 210.911534][ T178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.948385][ T178] usb 5-1: config 0 descriptor?? [ 211.411346][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.439173][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.466308][ T6164] usb 4-1: USB disconnect, device number 7 [ 211.491713][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.526921][ T6164] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 211.544757][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x3 [ 211.570762][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.605969][ T6164] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 211.632300][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.655262][ T6164] keyspan 4-1:1.0: device disconnected [ 211.660903][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.685829][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.715421][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.735891][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.760599][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.778939][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.788648][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.805584][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.820142][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.831619][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.848877][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.862510][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.876359][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.889728][ T178] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 211.917490][ T178] a4tech 0003:09DA:022B.0005: hidraw0: USB HID v0.08 Device [HID 09da:022b] on usb-dummy_hcd.4-1/input0 [ 211.966733][ T178] usb 5-1: USB disconnect, device number 6 [ 212.023950][ T5817] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 212.038719][ T8103] fido_id[8103]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 212.263404][ T5817] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 212.300474][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.349968][ T5817] usb 1-1: config 0 descriptor?? [ 212.377989][ T5817] cp210x 1-1:0.0: cp210x converter detected [ 212.651907][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 212.847058][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.869226][ T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 212.902554][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.925943][ T8] usb 5-1: config 0 descriptor?? [ 212.964272][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 212.995486][ T5817] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 213.021653][ T5817] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 213.059702][ T5817] usb 1-1: cp210x converter now attached to ttyUSB0 [ 213.104884][ T5817] usb 1-1: USB disconnect, device number 9 [ 213.145754][ T5817] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 213.205068][ T5817] cp210x 1-1:0.0: device disconnected [ 213.334213][ T8113] loop3: detected capacity change from 0 to 32768 [ 213.391107][ T8113] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 213.413838][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 213.514322][ T8113] XFS (loop3): Ending clean mount [ 213.638148][ T8] pwc: recv_control_msg error -71 req 02 val 2c00 [ 213.681138][ T8] pwc: recv_control_msg error -71 req 04 val 1000 [ 213.722792][ T8] pwc: recv_control_msg error -71 req 04 val 1300 [ 213.749607][ T8] pwc: recv_control_msg error -71 req 04 val 1400 [ 213.784922][ T8] pwc: recv_control_msg error -71 req 02 val 2000 [ 213.804359][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 213.834651][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 213.857315][ T5777] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 213.882442][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 213.908904][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 213.938135][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 213.980140][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 214.020353][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 214.032087][ T5817] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 214.053997][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 214.089888][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 214.123138][ T8] pwc: Registered as video103. [ 214.129406][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 214.231761][ T178] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 214.249899][ T8] usb 5-1: USB disconnect, device number 7 [ 214.279803][ T5817] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 214.348780][ T5817] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 214.407547][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.450150][ T5817] usb 2-1: Product: syz [ 214.466801][ T178] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.487574][ T5817] usb 2-1: Manufacturer: syz [ 214.518379][ T178] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.531054][ T5817] usb 2-1: SerialNumber: syz [ 214.578707][ T5817] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 214.599237][ T178] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 214.649774][ T178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 214.680906][ T178] usb 1-1: SerialNumber: syz [ 214.923472][ T8140] ALSA: mixer_oss: invalid OSS volume '' [ 214.943331][ T178] usb 1-1: 0:2 : does not exist [ 215.012666][ T178] usb 1-1: USB disconnect, device number 10 [ 215.097826][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.428774][ T8148] loop3: detected capacity change from 0 to 512 [ 215.467759][ T8148] EXT4-fs (loop3): Test dummy encryption mode enabled [ 215.492802][ T5817] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 215.570778][ T8148] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.792: corrupted in-inode xattr: invalid ea_ino [ 215.603957][ T5817] usb 2-1: USB disconnect, device number 7 [ 215.671389][ T8153] loop4: detected capacity change from 0 to 256 [ 215.740249][ T8148] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.792: couldn't read orphan inode 15 (err -117) [ 215.849748][ T8148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.716493][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.536566][ T8179] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 217.760798][ T178] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 217.984993][ T178] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.051182][ T178] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.115734][ T178] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.155091][ T178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 218.199994][ T178] usb 2-1: SerialNumber: syz [ 218.268311][ T8195] loop4: detected capacity change from 0 to 256 [ 218.495905][ T178] usb 2-1: 0:2 : does not exist [ 218.590320][ T178] usb 2-1: USB disconnect, device number 8 [ 218.727842][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.160230][ T8209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.820'. [ 219.397216][ T8213] loop4: detected capacity change from 0 to 256 [ 219.797042][ T8203] loop0: detected capacity change from 0 to 32768 [ 219.897671][ T8203] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.030275][ T8203] XFS (loop0): Ending clean mount [ 220.258021][ T5778] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.354767][ T8233] netlink: 48 bytes leftover after parsing attributes in process `syz.1.837'. [ 220.400559][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 221.688087][ T8263] netlink: 48 bytes leftover after parsing attributes in process `syz.3.843'. [ 221.975617][ T8270] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 223.572510][ T6164] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 223.785004][ T6164] usb 5-1: config 0 has no interfaces? [ 223.794306][ T6164] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 223.808322][ T6164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.828332][ T6164] usb 5-1: Product: syz [ 223.840562][ T6164] usb 5-1: Manufacturer: syz [ 223.860446][ T6164] usb 5-1: SerialNumber: syz [ 223.886419][ T6164] usb 5-1: config 0 descriptor?? [ 224.245359][ T178] usb 5-1: USB disconnect, device number 8 [ 224.911800][ T6164] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 225.135930][ T6164] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.168954][ T6164] usb 1-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 225.202990][ T6164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 225.262911][ T6164] usb 1-1: Product: syz [ 225.267137][ T6164] usb 1-1: Manufacturer: syz [ 225.323437][ T6164] navman 1-1:1.0: navman converter detected [ 225.353628][ T6164] usb 1-1: navman converter now attached to ttyUSB0 [ 225.580855][ T178] usb 1-1: USB disconnect, device number 11 [ 225.612430][ T178] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 225.650917][ T178] navman 1-1:1.0: device disconnected [ 226.278383][ T8378] loop4: detected capacity change from 0 to 128 [ 226.324605][ T8378] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 226.470651][ T8378] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 228.064054][ T28] audit: type=1400 audit(1785400903.247:68): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26262F5083A0768E5D4332352BE40EB41E3406DE4498E740A470141032EA251C144CDB5352D8049281898C72F13A5D3509C9C77308FE45016ABFD7D42B1A022A60B9A5BBCECE7C0A10BF9F157995465729B38FDCADD0D977574636206982A6B4E8F24BC75E3EB054FB9AE81E878AFD24CFA9756F6368616E676570726F66696C65203A2F2F26CCD938681A7387ED22A0E3A8284D3182AA7EF1905A267850FC405494D7079F6D0364287CF7B16DC2310B15BC49FB68D1A96075CB5F30F4FC2EC0C51D0B7E806E78F108F4060A55B8C23B3C89A2F2FA321D5138019C417A504D230EC496583933DABA2998E20D8F9A2E6798F681 pid=8411 comm="syz.0.914" [ 228.124710][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.471278][ T8392] loop3: detected capacity change from 0 to 40427 [ 228.594014][ T8392] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 228.656274][ T8392] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 228.734840][ T8392] F2FS-fs (loop3): invalid crc value [ 228.782623][ T8392] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 228.894966][ T8392] F2FS-fs (loop3): Found nat_bits in checkpoint [ 229.191145][ T8434] loop4: detected capacity change from 0 to 1024 [ 229.243571][ T8392] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 229.250689][ T8392] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 229.292940][ T8434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 229.352301][ T8434] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.438944][ T8434] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 3: comm syz.4.922: lblock 3 mapped to illegal pblock 3 (length 2) [ 229.494926][ T8392] syz.3.904: attempt to access beyond end of device [ 229.494926][ T8392] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 229.528868][ T8444] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.922: lblock 0 mapped to illegal pblock 0 (length 3) [ 229.576417][ T8392] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 229.592958][ T8444] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 229.618863][ T8444] EXT4-fs (loop4): This should not happen!! Data will be lost [ 229.618863][ T8444] [ 229.705682][ T2921] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 4: comm kworker/u4:7: lblock 4 mapped to illegal pblock 4 (length 1) [ 229.748998][ T2921] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 229.791876][ T2921] EXT4-fs (loop4): This should not happen!! Data will be lost [ 229.791876][ T2921] [ 229.827658][ T6216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 230.107969][ T8450] program syz.0.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.297815][ T8452] loop0: detected capacity change from 0 to 2048 [ 230.351367][ T8452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.635787][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.200765][ T8464] netlink: 'syz.0.933': attribute type 2 has an invalid length. [ 232.296562][ T8472] loop4: detected capacity change from 0 to 32768 [ 232.386788][ T8472] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 232.488229][ T8472] XFS (loop4): Ending clean mount [ 232.504386][ T8498] netlink: 'syz.3.944': attribute type 10 has an invalid length. [ 232.540639][ T8472] XFS (loop4): Quotacheck needed: Please wait. [ 232.622846][ T8498] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 232.693903][ T8498] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 232.710702][ T8472] XFS (loop4): Quotacheck: Done. [ 232.767191][ T8494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.953601][ T6216] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 234.071860][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.956'. [ 235.072271][ T8544] veth0_to_team: entered promiscuous mode [ 235.097659][ T8544] gretap0: entered promiscuous mode [ 235.591220][ T8559] pim6reg: tun_chr_ioctl cmd 1074025676 [ 235.651569][ T8559] pim6reg: owner set to 0 [ 235.783594][ T8566] loop3: detected capacity change from 0 to 128 [ 235.890638][ T8566] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 236.253125][ T8574] loop3: detected capacity change from 0 to 512 [ 236.287756][ T8574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 236.353884][ T8574] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.978: bg 0: block 384: padding at end of block bitmap is not set [ 236.420414][ T8574] EXT4-fs (loop3): Remounting filesystem read-only [ 236.453445][ T8574] EXT4-fs (loop3): 1 truncate cleaned up [ 236.484645][ T8574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.710709][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.957912][ T8584] loop0: detected capacity change from 0 to 4096 [ 237.029883][ T8584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.172164][ T28] audit: type=1800 audit(1785400912.347:69): pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.983" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 237.380324][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.783605][ T8604] netlink: 27 bytes leftover after parsing attributes in process `syz.3.991'. [ 237.855120][ T8606] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 238.502079][ T8622] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2863311530 out of range (51000000..2150000000) [ 238.513864][ T8627] loop3: detected capacity change from 0 to 1024 [ 238.557959][ T8627] EXT4-fs: Ignoring removed orlov option [ 238.679010][ T8629] CIFS: bad ip= option (127®0.0.1) [ 238.698004][ T8627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 238.721418][ T8629] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 238.780981][ T8627] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.819523][ T8629] CIFS: Attempting to mount (null) [ 238.906672][ T8629] CIFS: VFS: Error connecting to socket. Aborting operation. [ 238.951981][ T8629] CIFS: VFS: cifs_mount failed w/return code = -111 [ 238.967436][ T8627] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.1000: lblock 3 mapped to illegal pblock 3 (length 3) [ 239.063789][ T8627] EXT4-fs (loop3): Remounting filesystem read-only [ 239.141943][ T8635] EXT4-fs (loop3): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 15; err -5 [ 239.383264][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 239.867795][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1009'. [ 240.302055][ T8660] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 240.308095][ T8660] syzkaller1: linktype set to 768 [ 241.091578][ T5817] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 241.240774][ T8679] loop3: detected capacity change from 0 to 32768 [ 241.281817][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 241.309333][ T5817] usb 2-1: unable to get BOS descriptor or descriptor too short [ 241.319640][ T8679] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 241.345092][ T5817] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 241.377757][ T5817] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 241.417948][ T5817] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 241.448877][ T5817] usb 2-1: config 128 has no interface number 0 [ 241.465313][ T5817] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 252, changing to 11 [ 241.509238][ T5817] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 49306, setting to 1024 [ 241.572825][ T5817] usb 2-1: config 128 interface 127 has no altsetting 0 [ 241.662132][ T5817] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 241.709668][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.759652][ T5817] usb 2-1: Product: syz [ 241.776729][ T5817] usb 2-1: Manufacturer: syz [ 241.781371][ T5817] usb 2-1: SerialNumber: syz [ 241.869246][ T8683] syz.3.1023 (8683) used greatest stack depth: 18840 bytes left [ 242.175241][ T5817] usb 2-1: USB disconnect, device number 9 [ 242.197375][ T8695] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 242.204393][ T8695] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 242.232897][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 242.254464][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.421826][ T8719] loop7: detected capacity change from 0 to 7 [ 243.446873][ C0] blk_print_req_error: 12 callbacks suppressed [ 243.446900][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.462383][ C0] buffer_io_error: 9 callbacks suppressed [ 243.462391][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.491490][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.501000][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.512289][ T6164] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 243.523818][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.533080][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.541342][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.550559][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.559209][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.568606][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.577213][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.586417][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.594881][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.604083][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.615696][ T8719] ldm_validate_partition_table(): Disk read failed. [ 243.634025][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.643417][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.653031][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.662346][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.672346][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.682383][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 243.691390][ T8719] Dev loop7: unable to read RDB block 0 [ 243.707545][ T8719] loop7: unable to read partition table [ 243.733149][ T8719] loop7: partition table beyond EOD, truncated [ 243.759187][ T8719] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 243.899921][ T6164] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 243.926340][ T6164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.977576][ T6164] usb 2-1: Product: syz [ 244.000184][ T6164] usb 2-1: Manufacturer: syz [ 244.026089][ T6164] usb 2-1: SerialNumber: syz [ 244.050487][ T6164] usb 2-1: config 0 descriptor?? [ 244.089166][ T6164] ch341 2-1:0.0: ch341-uart converter detected [ 244.246935][ T8727] loop3: detected capacity change from 0 to 1024 [ 244.329039][ T8727] EXT4-fs error (device loop3): __ext4_fill_super:5517: comm syz.3.1042: inode #2: comm syz.3.1042: iget: illegal inode # [ 244.404103][ T8727] EXT4-fs (loop3): get root inode failed [ 244.435562][ T8727] EXT4-fs (loop3): mount failed [ 244.877529][ T8736] loop3: detected capacity change from 0 to 2048 [ 244.938597][ T8738] loop0: detected capacity change from 0 to 8 [ 244.971806][ T6164] usb 2-1: failed to send control message: -71 [ 244.982268][ T8736] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.033598][ T6164] ch341-uart: probe of ttyUSB0 failed with error -71 [ 245.051168][ T8738] squashfs image failed sanity check [ 245.101192][ T6164] usb 2-1: USB disconnect, device number 10 [ 245.139606][ T6164] ch341 2-1:0.0: device disconnected [ 245.187393][ T28] audit: type=1800 audit(1785400920.367:70): pid=8736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1046" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 245.991793][ T6164] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 246.154688][ T8742] loop0: detected capacity change from 0 to 40427 [ 246.190662][ T8742] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 246.201596][ T6164] usb 5-1: Using ep0 maxpacket: 16 [ 246.211060][ T6164] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.233289][ T8742] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 246.257659][ T6164] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.281340][ T8742] F2FS-fs (loop0): invalid crc value [ 246.311604][ T6164] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 246.385903][ T6164] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.409757][ T6164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 246.454408][ T6164] usb 5-1: SerialNumber: syz [ 246.536060][ T6164] hub 5-1:1.0: bad descriptor, ignoring hub [ 246.565611][ T6164] hub: probe of 5-1:1.0 failed with error -5 [ 246.594890][ T6164] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 246.612459][ T8742] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 246.619913][ T8742] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 246.774164][ T28] audit: type=1800 audit(1785400921.947:71): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1049" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 246.819083][ T8742] Invalid ELF header magic: != ELF [ 246.923715][ T5778] syz-executor: attempt to access beyond end of device [ 246.923715][ T5778] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 246.941935][ T5817] usb 5-1: USB disconnect, device number 9 [ 246.983526][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 247.402309][ T5817] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 247.625382][ T5817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.659165][ T5817] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.706134][ T5817] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 247.745942][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 247.776106][ T8770] netlink: 'syz.4.1061': attribute type 10 has an invalid length. [ 247.786116][ T5817] usb 4-1: SerialNumber: syz [ 247.882642][ T8770] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 247.958074][ T8769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.030571][ T5817] usb 4-1: 0:2 : does not exist [ 248.060368][ T5817] usb 4-1: 0:0: failed to get current value for ch 0 (-22) [ 248.131923][ T5817] usb 4-1: USB disconnect, device number 8 [ 248.193571][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.228134][ T8766] loop0: detected capacity change from 0 to 40427 [ 248.256973][ T8766] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 248.287586][ T8766] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 248.336872][ T8766] F2FS-fs (loop0): invalid crc_offset: 1 [ 248.567373][ T8766] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 248.623548][ T8766] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 248.797059][ T8780] loop4: detected capacity change from 0 to 4096 [ 248.809279][ T8766] syz.0.1058: attempt to access beyond end of device [ 248.809279][ T8766] loop0: rw=2049, sector=53248, nr_sectors = 32 limit=40427 [ 248.957464][ T8785] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.090041][ T28] audit: type=1800 audit(1785400924.267:72): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1064" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 249.155591][ T8788] program syz.3.1066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.210527][ T5778] syz-executor: attempt to access beyond end of device [ 249.210527][ T5778] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 249.254745][ T28] audit: type=1800 audit(1785400924.307:73): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1064" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 249.310653][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 249.662855][ T8796] loop3: detected capacity change from 0 to 1764 [ 250.281653][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 250.501558][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 250.525750][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 250.551581][ T9] usb 5-1: no configurations [ 250.556246][ T9] usb 5-1: can't read configurations, error -22 [ 250.706994][ T8815] sctp: [Deprecated]: syz.1.1077 (pid 8815) Use of int in max_burst socket option. [ 250.706994][ T8815] Use struct sctp_assoc_value instead [ 250.851959][ T6164] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 251.068279][ T6164] usb 1-1: unable to get BOS descriptor or descriptor too short [ 251.086458][ T6164] usb 1-1: not running at top speed; connect to a high speed hub [ 251.135318][ T6164] usb 1-1: config 1 interface 0 altsetting 35 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 251.206169][ T6164] usb 1-1: config 1 interface 0 altsetting 35 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.263679][ T6164] usb 1-1: config 1 interface 0 has no altsetting 0 [ 251.294679][ T6164] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.321535][ T6164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.351148][ T6164] usb 1-1: Product: syz [ 251.372750][ T6164] usb 1-1: Manufacturer: syz [ 251.391549][ T6164] usb 1-1: SerialNumber: syz [ 251.415554][ T8813] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 251.696607][ T6164] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 251.749978][ T6164] usb 1-1: USB disconnect, device number 12 [ 252.335179][ T8856] loop3: detected capacity change from 0 to 256 [ 252.469493][ T8856] FAT-fs (loop3): Directory bread(block 64) failed [ 252.477474][ T8861] netlink: 'syz.1.1096': attribute type 11 has an invalid length. [ 252.504703][ T8862] loop0: detected capacity change from 0 to 1764 [ 252.537363][ T8856] FAT-fs (loop3): Directory bread(block 65) failed [ 252.597856][ T8856] FAT-fs (loop3): Directory bread(block 66) failed [ 252.659513][ T8856] FAT-fs (loop3): Directory bread(block 67) failed [ 252.709233][ T8856] FAT-fs (loop3): Directory bread(block 68) failed [ 252.760492][ T8856] FAT-fs (loop3): Directory bread(block 69) failed [ 252.796927][ T8856] FAT-fs (loop3): Directory bread(block 70) failed [ 252.820565][ T8856] FAT-fs (loop3): Directory bread(block 71) failed [ 252.855221][ T8856] FAT-fs (loop3): Directory bread(block 72) failed [ 252.876875][ T8856] FAT-fs (loop3): Directory bread(block 73) failed [ 252.993298][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 253.201583][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 253.214609][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.256786][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.300923][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.368505][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 253.418456][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.445584][ T9] usb 5-1: config 0 descriptor?? [ 253.534034][ T8874] team_slave_0: entered allmulticast mode [ 253.880498][ T8879] Bluetooth: MGMT ver 1.22 [ 253.897092][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.908446][ T8879] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 253.933569][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.950178][ T8872] loop0: detected capacity change from 0 to 32768 [ 253.985755][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x4 [ 254.044813][ T8872] JBD2: Ignoring recovery information on journal [ 254.080957][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input9 [ 254.218764][ T8872] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 254.258930][ T9] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 254.408166][ T9] usb 5-1: USB disconnect, device number 12 [ 254.611827][ T6164] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 254.627574][ T8886] fido_id[8886]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 254.752967][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 254.809693][ T8888] loop3: detected capacity change from 0 to 164 [ 254.861566][ T6164] usb 2-1: Using ep0 maxpacket: 32 [ 254.902676][ T6164] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 254.961610][ T6164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.996392][ T6164] usb 2-1: config 0 descriptor?? [ 255.274341][ T6164] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 255.340724][ T6164] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.390465][ T6164] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 255.441669][ T6164] usb 2-1: media controller created [ 255.546257][ T6164] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.669711][ T6164] az6027: usb out operation failed. (-71) [ 255.699615][ T8901] loop0: detected capacity change from 0 to 1024 [ 255.707459][ T6164] az6027: usb out operation failed. (-71) [ 255.736129][ T6164] stb0899_attach: Driver disabled by Kconfig [ 255.781625][ T8901] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.801903][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.808319][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.814765][ T6164] az6027: no front-end attached [ 255.814765][ T6164] [ 255.875654][ T6164] az6027: usb out operation failed. (-71) [ 255.906207][ T6164] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 255.943685][ T8901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.970963][ T6164] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 256.075847][ T6164] dvb-usb: schedule remote query interval to 400 msecs. [ 256.129053][ T6164] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 256.222716][ T6164] usb 2-1: USB disconnect, device number 11 [ 256.376833][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.409931][ T6164] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 256.641996][ T51] Bluetooth: hci0: Zero size dump init pkt [ 256.727706][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1120'. [ 256.919063][ T8923] vxcan1: tx drop: invalid da for name 0x0000000000000015 [ 257.326036][ T8931] 9pnet_fd: p9_fd_create_unix (8931): problem connecting socket: ./file0: -111 [ 257.426212][ T8933] scsi_dev_info_list_add_str: bad dev info string 'e' '(null)' '(null)' [ 258.059247][ T8949] loop3: detected capacity change from 0 to 512 [ 258.124207][ T8949] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 258.163369][ T8952] ip6gre1: entered promiscuous mode [ 258.188246][ T8952] ip6gre1: entered allmulticast mode [ 258.210388][ T8949] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 258.260979][ T8949] EXT4-fs (loop3): 1 truncate cleaned up [ 258.301440][ T8949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.552597][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.566870][ T8961] loop4: detected capacity change from 0 to 512 [ 258.579082][ T8961] EXT4-fs: Ignoring removed nobh option [ 258.624598][ T8961] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 258.715524][ T8961] EXT4-fs (loop4): 1 truncate cleaned up [ 258.731671][ T178] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 258.749940][ T8961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.953562][ T178] usb 1-1: Using ep0 maxpacket: 16 [ 258.977558][ T178] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 258.999652][ T178] usb 1-1: config 0 has no interface number 0 [ 259.016048][ T6216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.032875][ T178] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.072661][ T1128] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.113495][ T178] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.155750][ T5817] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.165474][ T1128] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.212401][ T178] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 259.250474][ T178] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 259.258951][ T5817] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.285263][ T8973] program syz.4.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.302303][ T178] usb 1-1: Product: syz [ 259.306491][ T178] usb 1-1: SerialNumber: syz [ 259.344903][ T178] usb 1-1: config 0 descriptor?? [ 259.370043][ T178] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 259.416630][ T178] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input11 [ 259.695811][ T8959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.775859][ T8959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.831713][ T178] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.897573][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.907129][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.914264][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.921393][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.929786][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.936985][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.944166][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.951300][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.958494][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.965642][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.983025][ T178] usb 1-1: USB disconnect, device number 13 [ 259.988972][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 260.091343][ T178] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 260.167089][ T8981] loop4: detected capacity change from 0 to 2048 [ 260.221839][ T8981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.281084][ T28] audit: type=1800 audit(1785401191.460:74): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1148" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 261.200937][ T9001] loop4: detected capacity change from 0 to 512 [ 261.239330][ T9001] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 261.308623][ T9001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 261.356524][ T9001] System zones: 1-12 [ 261.381774][ T9001] EXT4-fs (loop4): orphan cleanup on readonly fs [ 261.437814][ T9001] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.1157: attempt to clear invalid blocks 1024 len 1 [ 261.485443][ T9001] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1157: bg 0: block 361: padding at end of block bitmap is not set [ 261.582572][ T9001] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 261.648663][ T9001] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1157: invalid indirect mapped block 1811939328 (level 0) [ 261.705826][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 261.733949][ T9001] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1157: invalid indirect mapped block 2 (level 2) [ 261.785380][ T9001] EXT4-fs (loop4): 1 truncate cleaned up [ 261.805907][ T9001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 262.029484][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1163'. [ 262.090317][ T9017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1163'. [ 262.210303][ T6216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 263.391679][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 263.427427][ T9061] loop4: detected capacity change from 0 to 256 [ 263.436793][ T9062] loop3: detected capacity change from 0 to 512 [ 264.353551][ T9074] input: syz1 as /devices/virtual/input/input12 [ 265.139945][ T9081] loop4: detected capacity change from 0 to 32768 [ 265.159166][ T9081] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1190 (9081) [ 265.237950][ T9081] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.254768][ T9081] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 265.296030][ T9081] BTRFS info (device loop4): turning on sync discard [ 265.317071][ T9081] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 265.340074][ T9081] BTRFS info (device loop4): use lzo compression, level 0 [ 265.358098][ T9081] BTRFS info (device loop4): turning on async discard [ 265.380697][ T9081] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 265.417901][ T9081] BTRFS info (device loop4): trying to use backup root at mount time [ 265.445605][ T9081] BTRFS info (device loop4): enabling auto defrag [ 265.466691][ T9081] BTRFS info (device loop4): using free space tree [ 265.711242][ T35] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 265.777780][ T9081] BTRFS error (device loop4): failed to load root extent [ 265.801563][ T9081] BTRFS warning (device loop4): try to load backup roots slot 1 [ 265.810269][ T35] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 265.857995][ T9081] BTRFS warning (device loop4): couldn't read tree root [ 265.858016][ T9081] BTRFS warning (device loop4): try to load backup roots slot 2 [ 265.866724][ T1128] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 265.867086][ T9081] BTRFS warning (device loop4): couldn't read tree root [ 265.867114][ T9081] BTRFS warning (device loop4): try to load backup roots slot 3 [ 265.933253][ T9081] BTRFS info (device loop4): enabling ssd optimizations [ 265.952288][ T9081] BTRFS info (device loop4): rebuilding free space tree [ 266.003282][ T9081] BTRFS info (device loop4): checking UUID tree [ 266.276595][ T28] audit: type=1800 audit(1785401197.450:75): pid=9081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1190" name="file1" dev="loop4" ino=257 res=0 errno=0 [ 266.488912][ T6216] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 267.138427][ T9128] program syz.0.1206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.195762][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'. [ 267.372289][ T9135] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1207'. [ 268.989384][ T9173] ªªªªªª: renamed from vlan0 (while UP) [ 269.451931][ T6165] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 269.620717][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1233'. [ 269.661594][ T6165] usb 1-1: Using ep0 maxpacket: 32 [ 269.677079][ T6165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.716378][ T6165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.754380][ T6165] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 269.800608][ T6165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.865034][ T6165] usb 1-1: config 0 descriptor?? [ 269.898214][ T6165] hub 1-1:0.0: USB hub found [ 270.108822][ T6165] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 270.321225][ T9203] ªªªªªª: renamed from vlan0 (while UP) [ 270.341993][ T6165] usbhid 1-1:0.0: can't add hid device: -71 [ 270.383453][ T6165] usbhid: probe of 1-1:0.0 failed with error -71 [ 270.443002][ T6165] usb 1-1: USB disconnect, device number 14 [ 270.811515][ T178] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 270.992546][ T178] usb 5-1: Using ep0 maxpacket: 8 [ 271.016689][ T178] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 271.041069][ T178] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 271.080280][ T178] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.099941][ T178] usb 5-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 271.130198][ T178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.164558][ T178] usb 5-1: config 0 descriptor?? [ 271.629952][ T178] wacom 0003:056A:0013.0007: unknown main item tag 0x0 [ 271.681411][ T178] wacom 0003:056A:0013.0007: unknown main item tag 0x0 [ 271.688648][ T178] wacom 0003:056A:0013.0007: unknown main item tag 0x0 [ 271.751583][ T178] wacom 0003:056A:0013.0007: unknown main item tag 0x0 [ 271.780163][ T178] wacom 0003:056A:0013.0007: unknown main item tag 0x0 [ 271.791607][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 271.841542][ T178] wacom 0003:056A:0013.0007: unknown main item tag 0x0 [ 271.862650][ T9214] loop0: detected capacity change from 0 to 32768 [ 271.872098][ T178] wacom 0003:056A:0013.0007: unknown main item tag 0x0 [ 271.919096][ T178] wacom 0003:056A:0013.0007: unknown main item tag 0x0 [ 271.952401][ T178] wacom 0003:056A:0013.0007: unknown main item tag 0x0 [ 271.994123][ T178] wacom 0003:056A:0013.0007: unknown main item tag 0x0 [ 272.031965][ T9214] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 272.051260][ T178] wacom 0003:056A:0013.0007: unknown main item tag 0x0 [ 272.097616][ T178] wacom 0003:056A:0013.0007: unknown main item tag 0x0 [ 272.130394][ T178] wacom 0003:056A:0013.0007: unknown main item tag 0x7 [ 272.188565][ T178] wacom 0003:056A:0013.0007: unknown main item tag 0x0 [ 272.236431][ T178] wacom 0003:056A:0013.0007: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 272.322918][ T178] wacom 0003:056A:0013.0007: hidraw0: USB HID v0.81 Device [HID 056a:0013] on usb-dummy_hcd.4-1/input0 [ 272.434198][ T178] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0013.0007/input/input13 [ 272.529210][ T9214] XFS (loop0): Ending clean mount [ 272.701645][ T178] usb 5-1: USB disconnect, device number 13 [ 272.712229][ T9214] XFS (loop0): Quotacheck needed: Please wait. [ 272.887342][ T9214] XFS (loop0): Quotacheck: Done. [ 273.320555][ T9241] xt_connbytes: Forcing CT accounting to be enabled [ 273.337180][ T5778] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 273.870608][ T9248] loop3: detected capacity change from 0 to 2048 [ 274.013648][ T9249] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.722132][ T9263] loop0: detected capacity change from 0 to 2048 [ 274.838434][ T9263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.051035][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.280091][ T9281] loop0: detected capacity change from 0 to 32768 [ 276.293679][ T9298] loop3: detected capacity change from 0 to 256 [ 276.324101][ T9281] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.1266 (9281) [ 276.376147][ T9298] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 276.444614][ T9281] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 276.498269][ T9281] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 276.552316][ T9281] BTRFS info (device loop0): using free space tree [ 276.603990][ T9281] BTRFS info (device loop0): enabling ssd optimizations [ 276.631637][ T9281] BTRFS info (device loop0): auto enabling async discard [ 277.054675][ T5778] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 277.120637][ T9325] loop4: detected capacity change from 0 to 512 [ 277.202199][ T9325] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 277.305147][ T9325] EXT4-fs (loop4): 1 truncate cleaned up [ 277.367655][ T9325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.466100][ T9329] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1279'. [ 277.519182][ T9329] netlink: 'syz.0.1279': attribute type 1 has an invalid length. [ 277.691023][ T6216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.971629][ T6165] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 278.198961][ T6165] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 278.246626][ T6165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.310749][ T6165] usb 2-1: config 0 descriptor?? [ 278.381996][ T6165] cp210x 2-1:0.0: cp210x converter detected [ 278.587976][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1288'. [ 278.665729][ T9350] netlink: 'syz.0.1288': attribute type 2 has an invalid length. [ 278.690862][ T9350] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1288'. [ 278.875270][ T6165] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 278.940780][ T6165] usb 2-1: cp210x converter now attached to ttyUSB0 [ 278.989724][ T9] kernel write not supported for file /vcsa1 (pid: 9 comm: kworker/0:1) [ 279.199192][ T9] usb 2-1: USB disconnect, device number 12 [ 279.223738][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 279.299544][ T9] cp210x 2-1:0.0: device disconnected [ 280.142160][ T6165] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 280.351725][ T6165] usb 4-1: Using ep0 maxpacket: 8 [ 280.378148][ T6165] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.408397][ T6165] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.470225][ T6165] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 280.508018][ T6165] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.565325][ T6165] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.605157][ T6165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.908057][ T6165] usb 4-1: GET_CAPABILITIES returned 0 [ 280.939732][ T6165] usbtmc 4-1:16.0: can't read capabilities [ 281.153406][ T6165] usb 4-1: USB disconnect, device number 9 [ 281.990067][ T9418] program syz.3.1316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.415764][ T9430] kernel profiling enabled (shift: 0) [ 282.454933][ T9428] loop3: detected capacity change from 0 to 4096 [ 282.606937][ T9428] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 282.655261][ T9428] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 282.885156][ T9428] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 282.940572][ T9428] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 282.994381][ T9428] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 283.048093][ T9428] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 283.201761][ T2933] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 283.510555][ T9432] loop4: detected capacity change from 0 to 32768 [ 283.579001][ T9432] JBD2: Ignoring recovery information on journal [ 283.736792][ T9432] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 283.989892][ T9430] syz.0.1322: vmalloc error: size 654311424, failed to allocated page array size 1277952, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 284.041577][ T28] audit: type=1800 audit(1785401215.210:76): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1323" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 284.062252][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.152468][ T9430] CPU: 0 PID: 9430 Comm: syz.0.1322 Not tainted syzkaller #0 [ 284.159981][ T9430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.170053][ T9430] Call Trace: [ 284.173355][ T9430] [ 284.176297][ T9430] dump_stack_lvl+0x18c/0x250 [ 284.181013][ T9430] ? show_regs_print_info+0x20/0x20 [ 284.186222][ T9430] ? load_image+0x420/0x420 [ 284.190744][ T9430] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 284.197174][ T9430] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 284.203702][ T9430] warn_alloc+0x246/0x340 [ 284.208058][ T9430] ? zone_watermark_ok_safe+0x230/0x230 [ 284.213613][ T9430] ? _raw_spin_unlock+0x28/0x40 [ 284.218512][ T9430] __vmalloc_node_range+0x661/0x1320 [ 284.223866][ T9430] ? free_vm_area+0x50/0x50 [ 284.228647][ T9430] ? alloc_pages+0x2ff/0x740 [ 284.233243][ T9430] ? rcu_is_watching+0x15/0xb0 [ 284.238043][ T9430] ? profile_init+0xee/0x130 [ 284.242651][ T9430] vzalloc+0x79/0x90 [ 284.246574][ T9430] ? profile_init+0xee/0x130 [ 284.251177][ T9430] profile_init+0xee/0x130 [ 284.255615][ T9430] profiling_store+0x5e/0xc0 [ 284.260224][ T9430] ? sysfs_kf_read+0x360/0x360 [ 284.264996][ T9430] kernfs_fop_write_iter+0x3a4/0x520 [ 284.270324][ T9430] do_iter_write+0x747/0xc50 [ 284.274943][ T9430] ? vfs_iter_write+0xa0/0xa0 [ 284.279654][ T9430] ? __asan_memset+0x22/0x40 [ 284.284349][ T9430] ? iov_iter_bvec+0xd4/0x1b0 [ 284.289040][ T9430] ? vfs_iter_write+0x6e/0xa0 [ 284.293737][ T9430] iter_file_splice_write+0x6b6/0xcf0 [ 284.299129][ T9430] ? splice_from_pipe+0x180/0x180 [ 284.304165][ T9430] ? splice_shrink_spd+0xc0/0xc0 [ 284.309111][ T9430] ? common_file_perm+0x198/0x1f0 [ 284.314148][ T9430] ? splice_from_pipe+0x180/0x180 [ 284.319354][ T9430] direct_splice_actor+0xe8/0x130 [ 284.324401][ T9430] splice_direct_to_actor+0x30b/0x8e0 [ 284.329787][ T9430] ? direct_file_splice_eof+0xb0/0xb0 [ 284.335195][ T9430] ? warn_unsupported+0xc0/0xc0 [ 284.340067][ T9430] ? fsnotify_perm+0x5d/0x5e0 [ 284.344754][ T9430] ? security_file_permission+0x79/0xa0 [ 284.350327][ T9430] do_splice_direct+0x1d5/0x2f0 [ 284.355225][ T9430] ? splice_direct_to_actor+0x8e0/0x8e0 [ 284.360799][ T9430] ? rcu_read_lock_any_held+0xb4/0x140 [ 284.366282][ T9430] ? do_splice_direct+0x2f0/0x2f0 [ 284.371332][ T9430] vfs_copy_file_range+0xb7d/0x1590 [ 284.376553][ T9430] ? generic_copy_file_range+0x1e0/0x1e0 [ 284.382218][ T9430] ? __might_fault+0xaa/0x120 [ 284.386908][ T9430] ? __might_fault+0xc6/0x120 [ 284.391608][ T9430] ? __might_fault+0xaa/0x120 [ 284.396326][ T9430] __se_sys_copy_file_range+0x324/0x470 [ 284.401974][ T9430] ? __x64_sys_copy_file_range+0xf0/0xf0 [ 284.407615][ T9430] ? __x64_sys_copy_file_range+0x21/0xf0 [ 284.413274][ T9430] do_syscall_64+0x55/0xb0 [ 284.417696][ T9430] ? clear_bhb_loop+0x40/0x90 [ 284.422568][ T9430] ? clear_bhb_loop+0x40/0x90 [ 284.427259][ T9430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.433173][ T9430] RIP: 0033:0x7f55fdd9df99 [ 284.437603][ T9430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.457432][ T9430] RSP: 002b:00007f55fec80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 284.465863][ T9430] RAX: ffffffffffffffda RBX: 00007f55fe025fa0 RCX: 00007f55fdd9df99 [ 284.473845][ T9430] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 284.481822][ T9430] RBP: 00007f55fde34ec4 R08: 0000000000000002 R09: 0000000000000000 [ 284.489800][ T9430] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 284.497775][ T9430] R13: 00007f55fe026038 R14: 00007f55fe025fa0 R15: 00007ffcf6163828 [ 284.505771][ T9430] [ 284.508875][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.651925][ T6216] ocfs2: Unmounting device (7,4) on (node local) [ 284.906361][ T9430] Mem-Info: [ 284.909530][ T9430] active_anon:7035 inactive_anon:0 isolated_anon:0 [ 284.909530][ T9430] active_file:732 inactive_file:48259 isolated_file:0 [ 284.909530][ T9430] unevictable:768 dirty:373 writeback:0 [ 284.909530][ T9430] slab_reclaimable:10515 slab_unreclaimable:94422 [ 284.909530][ T9430] mapped:25076 shmem:2493 pagetables:693 [ 284.909530][ T9430] sec_pagetables:0 bounce:0 [ 284.909530][ T9430] kernel_misc_reclaimable:0 [ 284.909530][ T9430] free:1326109 free_pcp:12493 free_cma:0 [ 284.954578][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.127249][ T9430] Node 0 active_anon:23804kB inactive_anon:0kB active_file:2928kB inactive_file:192824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100304kB dirty:1528kB writeback:0kB shmem:3996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11024kB pagetables:2900kB sec_pagetables:0kB all_unreclaimable? no [ 285.159530][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.305318][ T9430] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 285.335583][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.477653][ T9430] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.504729][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.591641][ T9430] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 285.617759][ T9430] Node 0 DMA32 free:1385856kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25688kB inactive_anon:0kB active_file:2928kB inactive_file:192004kB unevictable:1536kB writepending:1528kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:35816kB local_pcp:35816kB free_cma:0kB [ 285.648412][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.793412][ T9430] lowmem_reserve[]: 0 0 0 0 0 [ 285.818910][ T9430] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 285.845950][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.955472][ T9430] lowmem_reserve[]: 0 0 0 0 0 [ 285.955550][ T9430] Node 1 Normal free:3903220kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16640kB local_pcp:16640kB free_cma:0kB [ 285.955598][ T9430] lowmem_reserve[]: 0 0 0 0 0 [ 285.955632][ T9430] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 285.955783][ T9430] Node 0 DMA32: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 3*32kB (UME) 2*64kB (ME) 1*128kB (U) 2*256kB (ME) 1*512kB (M) 0*1024kB 2*2048kB (UE) 337*4096kB (UM) = 1385856kB [ 285.955927][ T9430] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 285.956019][ T9430] Node 1 Normal: 247*4kB (UME) 55*8kB (UME) 40*16kB (UME) 197*32kB (UME) 63*64kB (UE) 11*128kB (UME) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3903220kB [ 285.956176][ T9430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.956189][ T9430] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.956202][ T9430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.956215][ T9430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 285.956228][ T9430] 51097 total pagecache pages [ 285.956245][ T9430] 0 pages in swap cache [ 285.956251][ T9430] Free swap = 124704kB [ 285.956257][ T9430] Total swap = 124996kB [ 285.956264][ T9430] 2097051 pages RAM [ 285.956283][ T9430] 0 pages HighMem/MovableOnly [ 285.956289][ T9430] 416955 pages reserved [ 285.956294][ T9430] 0 pages cma reserved [ 286.221749][ T6165] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 286.401549][ T6165] usb 5-1: Using ep0 maxpacket: 32 [ 286.406381][ T6165] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 286.406401][ T6165] usb 5-1: config 0 has no interface number 0 [ 286.409469][ T6165] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 286.409490][ T6165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.409505][ T6165] usb 5-1: Product: syz [ 286.409516][ T6165] usb 5-1: Manufacturer: syz [ 286.409527][ T6165] usb 5-1: SerialNumber: syz [ 286.411312][ T6165] usb 5-1: config 0 descriptor?? [ 286.414597][ T6165] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 286.891283][ T6165] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 286.912192][ T6165] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 287.208022][ T5817] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 287.283018][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 287.297474][ T9] usb 5-1: USB disconnect, device number 14 [ 287.314846][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 287.348301][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 287.379331][ T9] quatech2 5-1:0.51: device disconnected [ 287.387021][ T6165] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 287.399306][ T5817] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.414935][ T5817] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.444810][ T5817] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.469594][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.501193][ T9475] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 287.518169][ T5817] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 287.605936][ T6165] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 287.643129][ T6165] usb 2-1: config 0 has no interface number 0 [ 287.675264][ T6165] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.724439][ T6165] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 287.762713][ T6165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.775864][ T9481] ubi0: attaching mtd0 [ 287.791681][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.808503][ T9481] ubi0 error: ubi_attach_mtd_dev: bad VID header (589826) or data offsets (589890) [ 287.818207][ T6165] usb 2-1: Product: syz [ 287.833055][ T6165] usb 2-1: Manufacturer: syz [ 287.837688][ T6165] usb 2-1: SerialNumber: syz [ 287.877657][ T6165] usb 2-1: config 0 descriptor?? [ 287.921555][ T5817] usb 1-1: USB disconnect, device number 15 [ 287.948044][ T6165] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 288.284053][ T9485] loop3: detected capacity change from 0 to 2048 [ 288.473707][ T9490] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.666125][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 288.679484][ T5817] usb 2-1: USB disconnect, device number 13 [ 288.710711][ T5817] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 288.890682][ T9494] loop4: detected capacity change from 0 to 128 [ 288.918437][ T9494] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 289.000184][ T9494] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 289.155435][ T2947] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 289.768694][ T9508] loop4: detected capacity change from 0 to 1024 [ 289.818361][ T9508] EXT4-fs: Ignoring removed orlov option [ 289.944490][ T9508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.199140][ T6216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.388988][ T9498] loop3: detected capacity change from 0 to 32768 [ 290.523610][ T9498] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 290.620191][ T9498] XFS (loop3): Ending clean mount [ 290.985194][ T9534] loop0: detected capacity change from 0 to 4096 [ 291.209039][ T28] audit: type=1326 audit(1785401222.390:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.4.1360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb543f9df99 code=0x7fc00000 [ 291.233027][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.316802][ T9534] EXT4-fs (loop0): Test dummy encryption mode enabled [ 291.384989][ T9534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.539562][ T5777] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 291.649934][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.732566][ T9542] mtrr: base(0xf90000000) is not aligned on a size(0x0000) boundary [ 291.825613][ T9544] loop0: detected capacity change from 0 to 128 [ 291.856790][ T9544] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 291.941725][ T9544] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 292.133040][ T35] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 293.259527][ T9571] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 293.268769][ T9570] loop0: detected capacity change from 0 to 16 [ 293.348935][ T9570] erofs: (device loop0): mounted with root inode @ nid 36. [ 293.452259][ T28] audit: type=1800 audit(1785401480.624:78): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1380" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 293.979334][ T5817] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 294.029794][ T5817] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 294.099594][ T5817] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 294.201744][ T6165] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 294.261578][ T178] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 294.298040][ T9588] loop0: detected capacity change from 0 to 4096 [ 294.327971][ T9588] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 294.414552][ T6165] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.451561][ T6165] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 294.480065][ T178] usb 2-1: Using ep0 maxpacket: 16 [ 294.502921][ T6165] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 294.535703][ T178] usb 2-1: config 0 has no interfaces? [ 294.551330][ T178] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 294.568085][ T6165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.609288][ T178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.629522][ T9584] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 294.674746][ T6165] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 294.693742][ T178] usb 2-1: config 0 descriptor?? [ 294.968116][ T6165] usb 2-1: USB disconnect, device number 14 [ 295.012648][ T6164] usb 5-1: USB disconnect, device number 15 [ 295.204216][ T9589] loop3: detected capacity change from 0 to 32768 [ 295.226788][ T9589] JBD2: Ignoring recovery information on journal [ 295.338056][ T9589] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 295.478192][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 297.238312][ T9632] loop4: detected capacity change from 0 to 256 [ 297.276244][ T9632] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 298.365527][ T9636] loop0: detected capacity change from 0 to 32768 [ 298.459399][ T9636] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 298.865420][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 299.501599][ T6164] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 299.705636][ T6164] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.736695][ T6164] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.774348][ T6164] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 299.799099][ T6164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 299.831632][ T6164] usb 1-1: SerialNumber: syz [ 300.098782][ T6164] usb 1-1: 0:2 : does not exist [ 300.125207][ T9671] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 300.148466][ T6164] usb 1-1: USB disconnect, device number 16 [ 300.657173][ T178] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 300.828809][ T9678] loop0: detected capacity change from 0 to 2048 [ 300.882359][ T178] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 300.907392][ T9678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.921633][ T178] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 300.951298][ T178] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 301.003587][ T178] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 301.027027][ T9678] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 301.075158][ T178] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 301.129788][ T178] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 301.167707][ T178] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 301.183142][ T178] usb 5-1: Product: syz [ 301.187736][ T178] usb 5-1: Manufacturer: syz [ 301.233290][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.263970][ T178] cdc_wdm 5-1:1.0: skipping garbage [ 301.269212][ T178] cdc_wdm 5-1:1.0: skipping garbage [ 301.334719][ T178] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 301.340671][ T178] cdc_wdm 5-1:1.0: Unknown control protocol [ 301.564846][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 301.571646][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 301.577937][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 301.584538][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 301.591637][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 301.598242][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 301.605105][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 301.611708][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 301.621832][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 301.628460][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 301.635087][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 301.641713][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 301.648078][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 301.654688][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 301.661050][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 301.667664][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 301.674067][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 301.680664][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 301.687889][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 301.694673][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 301.723164][ T178] usb 5-1: USB disconnect, device number 16 [ 301.729236][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 302.574590][ T9691] loop3: detected capacity change from 0 to 32768 [ 302.733642][ T9691] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 303.118161][ T9691] syz.3.1431 (9691) used greatest stack depth: 17784 bytes left [ 303.214491][ T9729] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1444'. [ 303.293765][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 303.912507][ T9742] loop0: detected capacity change from 0 to 512 [ 304.001283][ T9742] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 304.041575][ T9742] System zones: 0-2, 18-18, 34-35 [ 304.077965][ T9742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.130471][ T9742] ext4 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.274867][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1446'. [ 304.360646][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.271414][ C0] sched: RT throttling activated [ 307.279575][ T9802] (null): rxe_set_mtu: Set mtu to 1024 [ 307.779393][ T9783] loop3: detected capacity change from 0 to 32768 [ 307.786272][ T9802] infiniband syz2: set down [ 307.811622][ T9802] infiniband syz2: added syzkaller0 [ 307.880587][ T9783] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 307.965588][ T9797] loop4: detected capacity change from 0 to 40427 [ 308.009388][ T9797] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 308.078856][ T9797] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 308.099840][ T9783] XFS (loop3): Ending clean mount [ 308.127871][ T9797] F2FS-fs (loop4): invalid crc value [ 308.170669][ T9802] RDS/IB: syz2: added [ 308.252452][ T9802] smc: adding ib device syz2 with port count 1 [ 308.258845][ T9802] smc: ib device syz2 port 1 has pnetid [ 308.330993][ T9802] syz2: rxe_query_port: returned err = -19 [ 308.339073][ T6165] syz2: rxe_query_port: returned err = -19 [ 308.452400][ T2947] smc: removing ib device syz2 [ 308.513196][ T9797] F2FS-fs (loop4): Start checkpoint disabled! [ 308.548550][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 308.616718][ T9797] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 308.659549][ T9797] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 308.859060][ T9797] syz.4.1472: attempt to access beyond end of device [ 308.859060][ T9797] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 309.001675][ T9797] syz.4.1472: attempt to access beyond end of device [ 309.001675][ T9797] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 309.073547][ T9797] syz.4.1472: attempt to access beyond end of device [ 309.073547][ T9797] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 309.204450][ T9802] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 309.314587][ T2933] kworker/u4:8: attempt to access beyond end of device [ 309.314587][ T2933] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 309.386186][ T2933] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 309.745254][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 309.922049][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1482'. [ 309.931118][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1482'. [ 310.144674][ T9832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1483'. [ 310.219891][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 310.850094][ T9849] loop4: detected capacity change from 0 to 512 [ 310.892379][ T9849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 310.974278][ T9849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.039557][ T9849] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 311.159694][ T9849] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.1489: iget: bad i_size value: 2533274857506816 [ 311.382540][ T6216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.070648][ T9876] loop3: detected capacity change from 0 to 64 [ 312.131779][ T6164] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 312.160522][ T9878] loop0: detected capacity change from 0 to 256 [ 312.251982][ T9878] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.397805][ T6164] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 312.437654][ T6164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.491298][ T6164] usb 2-1: config 0 descriptor?? [ 312.532240][ T6164] cp210x 2-1:0.0: cp210x converter detected [ 312.642806][ T9885] loop0: detected capacity change from 0 to 64 [ 312.749026][ T28] audit: type=1800 audit(1785402011.920:79): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1504" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 313.015953][ T6164] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 313.052182][ T178] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 313.102313][ T6164] usb 2-1: cp210x converter now attached to ttyUSB0 [ 313.291880][ T178] usb 5-1: Using ep0 maxpacket: 8 [ 313.307556][ T178] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 313.360312][ T178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.398207][ T6164] usb 2-1: USB disconnect, device number 15 [ 313.433470][ T178] pvrusb2: Hardware description: Terratec Grabster AV400 [ 313.446167][ T6164] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 313.484796][ T178] pvrusb2: ********** [ 313.502788][ T6164] cp210x 2-1:0.0: device disconnected [ 313.510147][ T178] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 313.543472][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1511'. [ 313.572789][ T178] pvrusb2: Important functionality might not be entirely working. [ 313.609388][ T178] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 313.656664][ T178] pvrusb2: ********** [ 313.679046][ T2322] pvrusb2: Invalid write control endpoint [ 313.872231][ T2322] pvrusb2: Invalid write control endpoint [ 313.906186][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 313.920496][ T6164] usb 5-1: USB disconnect, device number 17 [ 313.974410][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 314.015953][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 314.052531][ T2322] pvrusb2: Device being rendered inoperable [ 314.060853][ T9911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1515'. [ 314.099229][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 314.126958][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 314.156305][ T2322] pvrusb2: Attached sub-driver cx25840 [ 314.185090][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 314.239824][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 314.862108][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1524'. [ 314.902304][ T9932] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 314.914320][ T9934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1526'. [ 315.706158][ T9945] loop3: detected capacity change from 0 to 4096 [ 315.761573][ T9945] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 316.150599][ T28] audit: type=1800 audit(1785402015.320:80): pid=9945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1531" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 317.174671][ T9985] geneve2: entered promiscuous mode [ 317.239964][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.250045][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.965348][ T9973] loop3: detected capacity change from 0 to 32768 [ 318.037790][ T9973] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 318.582564][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 318.669584][T10005] loop4: detected capacity change from 0 to 256 [ 318.820276][T10005] FAT-fs (loop4): Directory bread(block 64) failed [ 318.860193][T10005] FAT-fs (loop4): Directory bread(block 65) failed [ 318.877773][T10005] FAT-fs (loop4): Directory bread(block 66) failed [ 318.930825][T10005] FAT-fs (loop4): Directory bread(block 67) failed [ 318.958131][T10005] FAT-fs (loop4): Directory bread(block 68) failed [ 318.994259][T10005] FAT-fs (loop4): Directory bread(block 69) failed [ 319.000932][T10005] FAT-fs (loop4): Directory bread(block 70) failed [ 319.041516][T10005] FAT-fs (loop4): Directory bread(block 71) failed [ 319.079591][T10005] FAT-fs (loop4): Directory bread(block 72) failed [ 319.089799][T10005] FAT-fs (loop4): Directory bread(block 73) failed [ 320.271317][T10029] loop4: detected capacity change from 0 to 16 [ 320.345904][T10029] erofs: (device loop4): mounted with root inode @ nid 36. [ 320.429625][T10029] erofs: (device loop4): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 320.461616][ T6164] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 320.503699][T10029] syz.4.1567: attempt to access beyond end of device [ 320.503699][T10029] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 320.565314][T10029] erofs: (device loop4): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 320.615382][T10029] syz.4.1567: attempt to access beyond end of device [ 320.615382][T10029] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 320.666314][T10029] syz.4.1567: attempt to access beyond end of device [ 320.666314][T10029] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 320.685169][ T6164] usb 4-1: Using ep0 maxpacket: 8 [ 320.705773][T10034] input: syz0 as /devices/virtual/input/input16 [ 320.713031][ T6164] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 320.750145][ T28] audit: type=1800 audit(1785402019.910:81): pid=10029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1567" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 320.784720][ T6164] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 320.847421][ T6164] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.889502][ T6164] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.956431][ T6164] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 321.027988][ T6164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.071603][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.309456][ T6164] usb 4-1: GET_CAPABILITIES returned 0 [ 321.333931][ T6164] usbtmc 4-1:16.0: can't read capabilities [ 321.585329][ T6164] usb 4-1: USB disconnect, device number 10 [ 321.908009][T10037] loop0: detected capacity change from 0 to 40427 [ 321.949990][T10037] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 321.983702][T10037] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 322.026827][T10037] F2FS-fs (loop0): invalid crc value [ 322.324728][T10037] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 322.348932][T10037] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 322.797463][ T5778] syz-executor: attempt to access beyond end of device [ 322.797463][ T5778] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 322.877486][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 323.048848][T10067] netlink: 'syz.4.1581': attribute type 4 has an invalid length. [ 323.177303][T10067] (null): rxe_set_mtu: Set mtu to 256 [ 323.222716][T10067] lo speed is unknown, defaulting to 1000 [ 323.248485][T10067] lo speed is unknown, defaulting to 1000 [ 323.284871][T10067] lo speed is unknown, defaulting to 1000 [ 323.416842][T10070] loop3: detected capacity change from 0 to 2048 [ 323.488339][T10070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.601626][T10070] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.777192][T10070] fs-verity: sha256 using implementation "sha256-avx2" [ 323.825962][T10070] fs-verity (loop3, inode 13): Unsupported log_blocksize: 13 [ 323.887805][T10067] infiniband syz2: set down [ 323.892535][ T6164] lo speed is unknown, defaulting to 1000 [ 323.951785][T10067] infiniband syz2: added lo [ 324.045976][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.137411][T10067] RDS/IB: syz2: added [ 324.155775][T10067] smc: adding ib device syz2 with port count 1 [ 324.187299][T10067] smc: ib device syz2 port 1 has pnetid [ 324.224589][ T6164] lo speed is unknown, defaulting to 1000 [ 324.235859][T10067] lo speed is unknown, defaulting to 1000 [ 324.361565][ T5817] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 324.577890][ T5817] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 324.620560][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.654300][ T5817] usb 1-1: Product: syz [ 324.668699][ T5817] usb 1-1: Manufacturer: syz [ 324.682837][T10067] lo speed is unknown, defaulting to 1000 [ 324.691638][ T5817] usb 1-1: SerialNumber: syz [ 324.712345][ T5817] usb 1-1: config 0 descriptor?? [ 324.777087][ T5817] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 325.110167][T10067] lo speed is unknown, defaulting to 1000 [ 325.387716][T10067] lo speed is unknown, defaulting to 1000 [ 325.564636][ T5817] gspca_stk1135: reg_w 0x5 err -71 [ 325.581383][ T5817] gspca_stk1135: serial bus timeout: status=0x00 [ 325.614037][ T5817] gspca_stk1135: Sensor write failed [ 325.636103][ T5817] gspca_stk1135: serial bus timeout: status=0x00 [ 325.663344][ T5817] gspca_stk1135: Sensor write failed [ 325.678956][ T5817] gspca_stk1135: serial bus timeout: status=0x00 [ 325.698782][ T5817] gspca_stk1135: Sensor read failed [ 325.716557][ T5817] gspca_stk1135: serial bus timeout: status=0x00 [ 325.739741][ T5817] gspca_stk1135: Sensor read failed [ 325.759335][ T5817] gspca_stk1135: Detected sensor type unknown (0x0) [ 325.781953][ T5817] gspca_stk1135: serial bus timeout: status=0x00 [ 325.821622][ T5817] gspca_stk1135: Sensor read failed [ 325.844536][ T5817] gspca_stk1135: serial bus timeout: status=0x00 [ 325.889559][ T5817] gspca_stk1135: Sensor read failed [ 325.909648][ T5817] gspca_stk1135: serial bus timeout: status=0x00 [ 325.944489][ T5817] gspca_stk1135: Sensor write failed [ 325.980303][ T5817] gspca_stk1135: serial bus timeout: status=0x00 [ 326.012944][ T5817] gspca_stk1135: Sensor write failed [ 326.036875][ T5817] stk1135: probe of 1-1:0.0 failed with error -71 [ 326.102560][ T5817] usb 1-1: USB disconnect, device number 17 [ 326.192371][T10100] Zero length message leads to an empty skb [ 326.717806][T10110] kvm: kvm [10109]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x5 [ 327.123679][T10120] loop3: detected capacity change from 0 to 128 [ 327.213470][T10120] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 327.299414][T10108] loop0: detected capacity change from 0 to 32768 [ 327.427227][T10108] JBD2: Ignoring recovery information on journal [ 327.578048][T10108] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 327.587595][T10127] futex_wake_op: syz.4.1603 tries to shift op by 144; fix this program [ 327.640830][T10127] futex_wake_op: syz.4.1603 tries to shift op by 144; fix this program [ 327.653651][ T35] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 328.051022][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 328.513559][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 328.565239][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 328.744397][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1610'. [ 328.783930][T10149] netlink: 'syz.3.1610': attribute type 21 has an invalid length. [ 329.034464][T10155] loop0: detected capacity change from 0 to 128 [ 330.924007][T10172] loop0: detected capacity change from 0 to 40427 [ 330.971757][T10172] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 331.027234][T10172] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 331.110296][T10172] F2FS-fs (loop0): Found nat_bits in checkpoint [ 331.304514][T10172] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 331.355726][T10172] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 331.507149][T10177] loop3: detected capacity change from 0 to 32768 [ 331.572151][T10177] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1622 (10177) [ 331.701499][T10177] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 331.764055][T10177] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 331.818597][T10177] BTRFS info (device loop3): using free space tree [ 332.001605][T10177] BTRFS info (device loop3): enabling ssd optimizations [ 332.031271][T10188] loop4: detected capacity change from 0 to 32768 [ 332.054655][T10177] BTRFS info (device loop3): auto enabling async discard [ 332.121744][ T5817] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 332.148992][T10188] (syz.4.1625,10188,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 332.225928][T10188] (syz.4.1625,10188,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 332.348140][T10188] JBD2: Ignoring recovery information on journal [ 332.359717][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 332.392807][ T5817] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 332.410925][ T5777] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 332.461525][ T5817] usb 2-1: config 0 has no interface number 0 [ 332.481636][ T5817] usb 2-1: config 0 interface 12 has no altsetting 0 [ 332.505029][T10188] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 332.535779][ T5817] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 332.599125][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.673738][ T5817] usb 2-1: Product: syz [ 332.705249][ T5817] usb 2-1: Manufacturer: syz [ 332.709934][ T5817] usb 2-1: SerialNumber: syz [ 332.780776][ T5817] usb 2-1: config 0 descriptor?? [ 333.015937][ T6216] ocfs2: Unmounting device (7,4) on (node local) [ 333.541599][ T5817] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 333.561562][ T5817] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 333.610923][ T5817] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 333.678284][ T5817] f81534: probe of 2-1:0.12 failed with error -71 [ 333.743562][ T5817] usb 2-1: USB disconnect, device number 16 [ 334.024192][T10217] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1630'. [ 335.425766][T10227] loop4: detected capacity change from 0 to 32768 [ 335.481548][T10227] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1634 (10227) [ 335.560116][T10227] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 335.626015][T10227] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 335.685990][T10227] BTRFS info (device loop4): using free space tree [ 335.941501][T10227] BTRFS info (device loop4): enabling ssd optimizations [ 335.948520][T10227] BTRFS info (device loop4): auto enabling async discard [ 336.417562][ T6216] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 338.956396][T10304] loop4: detected capacity change from 0 to 512 [ 338.987393][T10304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.077531][ T28] audit: type=1800 audit(1785402038.250:82): pid=10304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1661" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 339.101577][T10304] fs-verity: sha512 using implementation "sha512-avx2" [ 339.120396][T10304] EXT4-fs warning (device loop4): ext4_begin_enable_verity:135: inode #13: comm syz.4.1661: verity is only allowed on extent-based files [ 339.203866][ T6216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.203815][T10318] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.421953][T10320] dccp_invalid_packet: pskb_may_pull failed [ 340.636598][T10322] loop0: detected capacity change from 0 to 128 [ 342.041549][ T6164] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 342.206473][T10332] loop0: detected capacity change from 0 to 32768 [ 342.230981][T10332] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1674 (10332) [ 342.271884][ T6164] usb 2-1: Using ep0 maxpacket: 32 [ 342.292929][ T6164] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 342.324088][ T6164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.348456][T10332] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 342.391069][ T6164] usb 2-1: Product: syz [ 342.395443][ T6164] usb 2-1: Manufacturer: syz [ 342.400043][ T6164] usb 2-1: SerialNumber: syz [ 342.410027][T10332] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 342.449801][T10332] BTRFS info (device loop0): turning on sync discard [ 342.459801][ T6164] usb 2-1: config 0 descriptor?? [ 342.498296][T10332] BTRFS info (device loop0): force zlib compression, level 3 [ 342.538557][T10332] BTRFS info (device loop0): turning on async discard [ 342.580093][T10332] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 342.636872][T10332] BTRFS info (device loop0): trying to use backup root at mount time [ 342.679852][T10332] BTRFS info (device loop0): using free space tree [ 342.801959][ T2947] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 342.874602][T10332] BTRFS error (device loop0): failed to load root extent [ 342.912784][T10332] BTRFS warning (device loop0): try to load backup roots slot 1 [ 342.932618][ T2947] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 342.996740][T10332] BTRFS warning (device loop0): couldn't read tree root [ 343.024805][T10332] BTRFS warning (device loop0): try to load backup roots slot 2 [ 343.062741][ T3480] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 343.108384][T10332] BTRFS warning (device loop0): couldn't read tree root [ 343.125281][T10332] BTRFS warning (device loop0): try to load backup roots slot 3 [ 343.153425][ T6164] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 343.184802][ T6164] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 343.194698][T10332] BTRFS info (device loop0): enabling ssd optimizations [ 343.224518][ T6164] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 343.235706][T10332] BTRFS info (device loop0): rebuilding free space tree [ 343.290041][T10332] BTRFS info (device loop0): checking UUID tree [ 343.313155][ T6164] peak_usb: probe of 2-1:0.0 failed with error -22 [ 343.377047][ T6164] usb 2-1: USB disconnect, device number 17 [ 343.840039][ T5778] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 345.541212][T10374] loop0: detected capacity change from 0 to 8192 [ 345.594522][T10374] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 345.670100][T10374] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 345.738462][T10374] REISERFS (device loop0): using ordered data mode [ 345.766033][T10374] reiserfs: using flush barriers [ 345.814583][T10374] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 345.894818][T10374] REISERFS (device loop0): checking transaction log (loop0) [ 345.948840][T10374] REISERFS (device loop0): Using r5 hash to sort names [ 345.995046][T10374] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 346.882932][T10401] loop4: detected capacity change from 0 to 256 [ 346.987707][T10401] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 349.468417][ T6165] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 349.672821][ T6165] usb 5-1: Using ep0 maxpacket: 32 [ 349.709630][ T6165] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 349.747517][ T6165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.778972][ T6165] usb 5-1: Product: syz [ 349.797363][ T6165] usb 5-1: Manufacturer: syz [ 349.811810][ T6165] usb 5-1: SerialNumber: syz [ 349.842433][ T6165] usb 5-1: config 0 descriptor?? [ 350.091628][ T6164] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 350.291811][ T6164] usb 4-1: Using ep0 maxpacket: 8 [ 350.310825][ T6164] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.338108][ T6164] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 350.364850][ T6164] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.389810][ T6164] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.420186][ T6164] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 350.450893][ T6164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.481181][ T6165] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 350.536184][ T6165] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 350.556558][ T6165] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 350.623436][ T6165] peak_usb: probe of 5-1:0.0 failed with error -22 [ 350.776327][ T6164] usb 4-1: GET_CAPABILITIES returned 0 [ 350.796513][ T6164] usbtmc 4-1:16.0: can't read capabilities [ 350.812804][ T6165] usb 5-1: USB disconnect, device number 18 [ 351.039751][T10466] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 351.090353][ T6165] usb 4-1: USB disconnect, device number 11 [ 351.291667][ T6164] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 351.494298][ T6164] usb 2-1: Using ep0 maxpacket: 32 [ 351.508946][ T6164] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 351.551123][ T6164] usb 2-1: config 0 has no interface number 0 [ 351.599523][ T6164] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 351.640064][ T6164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.681472][ T6164] usb 2-1: Product: syz [ 351.694655][ T6164] usb 2-1: Manufacturer: syz [ 351.706091][ T6164] usb 2-1: SerialNumber: syz [ 351.757032][ T6164] usb 2-1: config 0 descriptor?? [ 351.786162][ T6164] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 352.029662][ T6164] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 352.095946][ T6164] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 352.329415][T10506] loop4: detected capacity change from 0 to 1024 [ 352.687379][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 352.698199][ T178] usb 2-1: USB disconnect, device number 18 [ 352.746241][ T178] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 352.819581][ T178] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 352.896531][ T178] quatech2 2-1:0.51: device disconnected [ 353.121603][ T5817] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 353.251932][T10522] loop0: detected capacity change from 0 to 512 [ 353.304682][T10522] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 353.344208][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.369772][T10522] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 353.392735][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.460458][ T5817] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 353.479170][T10522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.511355][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.531568][T10522] ext4 filesystem being mounted at /527/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.560247][ T5817] usb 4-1: config 0 descriptor?? [ 353.877262][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.018344][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'. [ 354.035893][ T5817] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 354.059755][ T5817] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 354.080818][ T5817] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 354.109032][ T5817] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 354.141709][ T5817] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 354.168887][ T5817] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 354.189096][ T5817] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 354.229857][ T5817] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 354.241673][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 354.452084][ T9] usb 5-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 354.479065][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.549273][ T9] usb-storage 5-1:1.0: USB Mass Storage device detected [ 354.598402][ T9] usb-storage 5-1:1.0: Quirks match for vid 0451 pid 5416: 2 [ 354.633058][ T6164] usb 4-1: USB disconnect, device number 12 [ 354.640542][ T9] scsi host1: usb-storage 5-1:1.0 [ 354.808971][ T9] usb 5-1: USB disconnect, device number 19 [ 354.822572][T10551] loop0: detected capacity change from 0 to 512 [ 354.850012][T10551] EXT4-fs: Ignoring removed orlov option [ 354.880690][T10551] EXT4-fs: Ignoring removed bh option [ 354.939225][T10551] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1762: inode has both inline data and extents flags [ 355.003623][T10551] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1762: couldn't read orphan inode 15 (err -117) [ 355.027844][T10551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.095340][T10551] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.1762: Directory hole found for htree leaf block 0 [ 355.176803][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.369985][T10556] loop0: detected capacity change from 0 to 1024 [ 355.440229][T10556] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 355.440229][T10556] [ 355.791923][ T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 355.982762][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 356.016946][ T9] usb 5-1: config 6 has an invalid interface number: 44 but max is 0 [ 356.038091][ T9] usb 5-1: config 6 has no interface number 0 [ 356.051358][ T9] usb 5-1: config 6 interface 44 has no altsetting 0 [ 356.076844][ T9] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=be.71 [ 356.098761][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.123883][ T9] usb 5-1: Product: syz [ 356.135949][ T9] usb 5-1: Manufacturer: syz [ 356.147086][ T9] usb 5-1: SerialNumber: syz [ 356.587120][ T9] usb 5-1: ignoring: probably an ADSL modem [ 356.986904][T10596] loop0: detected capacity change from 0 to 2048 [ 357.001181][ T9] cxacru 5-1:6.44: usbatm_usb_probe: bind failed: -19! [ 357.043288][ T9] usb 5-1: USB disconnect, device number 20 [ 357.055050][T10596] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 357.113343][T10596] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 357.121048][T10596] UDF-fs: Scanning with blocksize 512 failed [ 357.200838][T10596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.603936][T10600] loop0: detected capacity change from 0 to 8192 [ 357.659660][T10600] loop0: p1 < > p2 < > p3 p4 < > [ 357.697531][T10600] loop0: partition table partially beyond EOD, truncated [ 357.740057][T10600] loop0: p1 start 67108864 is beyond EOD, truncated [ 357.801972][T10600] loop0: p3 start 100859904 is beyond EOD, truncated [ 357.950546][T10591] loop3: detected capacity change from 0 to 32768 [ 358.498778][ T5988] udevd[5988]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 358.521071][ T5769] udevd[5769]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 359.260326][T10636] loop0: detected capacity change from 0 to 512 [ 359.299744][T10636] EXT4-fs (loop0): 1 orphan inode deleted [ 359.318051][ T2977] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 359.344310][T10636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.376751][ T2977] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:12: Failed to release dquot type 1 [ 359.440470][T10636] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.563141][ T35] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 359.598570][ T35] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 1 [ 359.624340][T10643] loop3: detected capacity change from 0 to 164 [ 359.650399][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.288863][T10657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1808'. [ 360.322364][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1808'. [ 360.358758][T10657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1808'. [ 360.749902][T10670] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1812'. [ 360.936481][T10678] loop4: detected capacity change from 0 to 64 [ 360.995965][T10678] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 361.905533][T10675] loop0: detected capacity change from 0 to 40427 [ 361.940768][T10675] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 361.968241][T10675] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 362.017938][T10675] F2FS-fs (loop0): invalid crc value [ 362.023809][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 362.272128][ T9] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 362.305489][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.337645][T10675] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 362.347353][ T9] usb 5-1: Product: syz [ 362.376869][ T9] usb 5-1: Manufacturer: syz [ 362.387617][T10675] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 362.416483][ T9] usb 5-1: SerialNumber: syz [ 362.482566][ T9] usb 5-1: config 0 descriptor?? [ 362.520414][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 362.657634][ T5778] syz-executor: attempt to access beyond end of device [ 362.657634][ T5778] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 362.745448][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 362.938272][T10703] bond0: Device is already in use. [ 363.354301][ T9] usb 5-1: USB disconnect, device number 21 [ 363.535170][T10710] loop0: detected capacity change from 0 to 64 [ 364.429557][T10726] loop3: detected capacity change from 0 to 512 [ 364.538389][T10726] EXT4-fs (loop3): 1 orphan inode deleted [ 364.562053][ T2933] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 364.612366][T10726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.641243][ T2933] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:8: Failed to release dquot type 1 [ 364.744583][T10726] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.906789][ T2933] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 364.944915][ T2933] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:8: Failed to release dquot type 1 [ 364.992005][ T35] wlan1: Trigger new scan to find an IBSS to join [ 365.000588][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.055506][ T3480] ------------[ cut here ]------------ [ 365.061567][ T3480] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 365.072842][ T3480] WARNING: CPU: 0 PID: 3480 at net/mac80211/rate.c:385 __rate_control_send_low+0x632/0x880 [ 365.083104][ T3480] Modules linked in: [ 365.087029][ T3480] CPU: 0 PID: 3480 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 365.094777][ T3480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.104879][ T3480] Workqueue: events_unbound cfg80211_wiphy_work [ 365.111225][ T3480] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 365.117549][ T3480] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 80 ba df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 9e 8f 4e f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 365.137269][ T3480] RSP: 0018:ffffc9000ced7400 EFLAGS: 00010246 [ 365.143428][ T3480] RAX: 7bb7e21dcdb99900 RBX: 000000000000000c RCX: ffff88802e4e5a00 [ 365.151437][ T3480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 365.159436][ T3480] RBP: 0000000000000084 R08: ffffc9000ced7007 R09: 1ffff920019dae00 [ 365.167438][ T3480] R10: dffffc0000000000 R11: fffff520019dae01 R12: 0000000000000020 [ 365.175461][ T3480] R13: dffffc0000000000 R14: ffff8880779633b8 R15: ffff888022c40668 [ 365.183462][ T3480] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 365.192422][ T3480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.199008][ T3480] CR2: 00002000005ba030 CR3: 00000000685ba000 CR4: 00000000003506f0 [ 365.207019][ T3480] Call Trace: [ 365.210355][ T3480] [ 365.213392][ T3480] rate_control_send_low+0x194/0x790 [ 365.218723][ T3480] rate_control_get_rate+0x20b/0x5c0 [ 365.224070][ T3480] ieee80211_tx_h_rate_ctrl+0xb21/0x1740 [ 365.229776][ T3480] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 365.235823][ T3480] ? __lock_acquire+0x1262/0x7d80 [ 365.240919][ T3480] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 365.247043][ T3480] invoke_tx_handlers_late+0xb1/0x17c0 [ 365.252557][ T3480] ? invoke_tx_handlers_early+0xa30/0x1c80 [ 365.258390][ T3480] ieee80211_tx+0x2d8/0x460 [ 365.262984][ T3480] ? ieee80211_skb_resize+0x610/0x610 [ 365.268390][ T3480] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 365.273956][ T3480] ? ieee80211_xmit+0x2e0/0x3c0 [ 365.278821][ T3480] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 365.284841][ T3480] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 365.290687][ T3480] ? ieee80211_scan_state_send_probe+0x4b2/0x930 [ 365.297105][ T3480] ieee80211_scan_state_send_probe+0x57f/0x930 [ 365.303312][ T3480] ieee80211_scan_work+0x42e/0x1b30 [ 365.308558][ T3480] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.313848][ T3480] cfg80211_wiphy_work+0x228/0x260 [ 365.318967][ T3480] ? process_scheduled_works+0x975/0x1600 [ 365.324764][ T3480] process_scheduled_works+0xa60/0x1600 [ 365.330359][ T3480] ? worker_attach_to_pool+0x370/0x370 [ 365.335900][ T3480] ? assign_work+0x3cc/0x5d0 [ 365.340537][ T3480] worker_thread+0xa5e/0xfe0 [ 365.345200][ T3480] ? _raw_spin_unlock+0x40/0x40 [ 365.350065][ T3480] ? __kthread_parkme+0x71/0x1c0 [ 365.355038][ T3480] kthread+0x2fa/0x390 [ 365.359130][ T3480] ? pr_cont_work+0x550/0x550 [ 365.363847][ T3480] ? kthread_blkcg+0xd0/0xd0 [ 365.368453][ T3480] ret_from_fork+0x48/0x80 [ 365.372938][ T3480] ? kthread_blkcg+0xd0/0xd0 [ 365.377559][ T3480] ret_from_fork_asm+0x11/0x20 [ 365.382383][ T3480] [ 365.385416][ T3480] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 365.392687][ T3480] CPU: 0 PID: 3480 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 365.400321][ T3480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.410375][ T3480] Workqueue: events_unbound cfg80211_wiphy_work [ 365.416620][ T3480] Call Trace: [ 365.419894][ T3480] [ 365.422824][ T3480] dump_stack_lvl+0x18c/0x250 [ 365.427541][ T3480] ? show_regs_print_info+0x20/0x20 [ 365.432760][ T3480] ? load_image+0x420/0x420 [ 365.437306][ T3480] panic+0x2ca/0x720 [ 365.441213][ T3480] ? bpf_jit_dump+0xd0/0xd0 [ 365.445733][ T3480] ? ret_from_fork_asm+0x11/0x20 [ 365.450679][ T3480] __warn+0x2e0/0x470 [ 365.454662][ T3480] ? __rate_control_send_low+0x632/0x880 [ 365.460313][ T3480] ? __rate_control_send_low+0x632/0x880 [ 365.465951][ T3480] report_bug+0x2be/0x4f0 [ 365.470338][ T3480] ? __rate_control_send_low+0x632/0x880 [ 365.475979][ T3480] ? __rate_control_send_low+0x632/0x880 [ 365.481617][ T3480] ? __rate_control_send_low+0x634/0x880 [ 365.487251][ T3480] handle_bug+0xcf/0x120 [ 365.491506][ T3480] exc_invalid_op+0x1a/0x50 [ 365.496015][ T3480] asm_exc_invalid_op+0x1a/0x20 [ 365.500927][ T3480] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 365.507187][ T3480] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 80 ba df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 9e 8f 4e f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 365.526806][ T3480] RSP: 0018:ffffc9000ced7400 EFLAGS: 00010246 [ 365.532882][ T3480] RAX: 7bb7e21dcdb99900 RBX: 000000000000000c RCX: ffff88802e4e5a00 [ 365.540942][ T3480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 365.548937][ T3480] RBP: 0000000000000084 R08: ffffc9000ced7007 R09: 1ffff920019dae00 [ 365.556925][ T3480] R10: dffffc0000000000 R11: fffff520019dae01 R12: 0000000000000020 [ 365.564941][ T3480] R13: dffffc0000000000 R14: ffff8880779633b8 R15: ffff888022c40668 [ 365.572974][ T3480] rate_control_send_low+0x194/0x790 [ 365.578314][ T3480] rate_control_get_rate+0x20b/0x5c0 [ 365.583631][ T3480] ieee80211_tx_h_rate_ctrl+0xb21/0x1740 [ 365.589300][ T3480] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 365.595280][ T3480] ? __lock_acquire+0x1262/0x7d80 [ 365.600341][ T3480] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 365.606432][ T3480] invoke_tx_handlers_late+0xb1/0x17c0 [ 365.611914][ T3480] ? invoke_tx_handlers_early+0xa30/0x1c80 [ 365.617735][ T3480] ieee80211_tx+0x2d8/0x460 [ 365.622281][ T3480] ? ieee80211_skb_resize+0x610/0x610 [ 365.627690][ T3480] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 365.633179][ T3480] ? ieee80211_xmit+0x2e0/0x3c0 [ 365.638064][ T3480] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 365.644064][ T3480] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 365.649892][ T3480] ? ieee80211_scan_state_send_probe+0x4b2/0x930 [ 365.656232][ T3480] ieee80211_scan_state_send_probe+0x57f/0x930 [ 365.662415][ T3480] ieee80211_scan_work+0x42e/0x1b30 [ 365.667631][ T3480] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.672845][ T3480] cfg80211_wiphy_work+0x228/0x260 [ 365.677984][ T3480] ? process_scheduled_works+0x975/0x1600 [ 365.683714][ T3480] process_scheduled_works+0xa60/0x1600 [ 365.689309][ T3480] ? worker_attach_to_pool+0x370/0x370 [ 365.694777][ T3480] ? assign_work+0x3cc/0x5d0 [ 365.699384][ T3480] worker_thread+0xa5e/0xfe0 [ 365.703990][ T3480] ? _raw_spin_unlock+0x40/0x40 [ 365.709028][ T3480] ? __kthread_parkme+0x71/0x1c0 [ 365.714012][ T3480] kthread+0x2fa/0x390 [ 365.718096][ T3480] ? pr_cont_work+0x550/0x550 [ 365.722795][ T3480] ? kthread_blkcg+0xd0/0xd0 [ 365.727416][ T3480] ret_from_fork+0x48/0x80 [ 365.731858][ T3480] ? kthread_blkcg+0xd0/0xd0 [ 365.736451][ T3480] ret_from_fork_asm+0x11/0x20 [ 365.741233][ T3480] [ 365.744327][ T3480] Kernel Offset: disabled [ 365.748794][ T3480] Rebooting in 86400 seconds..