last executing test programs: 1m32.24349635s ago: executing program 2 (id=568): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m32.032832529s ago: executing program 2 (id=571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x68, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) 1m31.808330789s ago: executing program 2 (id=575): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m31.032741275s ago: executing program 2 (id=583): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x10000, 0x0, 0x3}) r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x1) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xa2b) 1m30.705409681s ago: executing program 2 (id=587): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) utimensat(r1, 0x0, 0x0, 0x0) 1m30.423165706s ago: executing program 2 (id=589): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000140)) 1m15.23296517s ago: executing program 32 (id=589): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000140)) 5.023107624s ago: executing program 0 (id=1344): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 4.291965528s ago: executing program 0 (id=1348): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgsnd(0x0, 0x0, 0x401, 0x0) 2.83075845s ago: executing program 0 (id=1361): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x0, 0x12, 0x3, "b4dad2"}, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000440)={0x20, 0x3, 0x1, 0x7}}) 2.686067932s ago: executing program 1 (id=1363): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x65, 0x26, r0, 0x0) fanotify_mark(r1, 0x2, 0x30, r0, 0x0) 2.568569068s ago: executing program 1 (id=1366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="1c00238006000300180000eb050004"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.481365155s ago: executing program 5 (id=1367): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000002480)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESDEC=r0, @ANYRESHEX, @ANYRES64, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRES32, @ANYBLOB="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", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f00000000c0)) 2.368540576s ago: executing program 3 (id=1368): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x100, 0x4, 0x4, 0x2, 0x5, 0x100, 0x3, 0x20000010, 0x800, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x3, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a7a, 0x5, 0x7, 0x8]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000100)) 2.291439423s ago: executing program 1 (id=1370): r0 = syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x4711, &(0x7f0000008f40)="$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") r1 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) flock(r1, 0x6) dup2(r0, r1) 2.095849554s ago: executing program 5 (id=1371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.024880817s ago: executing program 4 (id=1372): r0 = semget$private(0x0, 0x6, 0x1a8) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)) 1.995641353s ago: executing program 3 (id=1373): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x8}, {0x6, 0xfc}]}) write$ppp(r0, &(0x7f00000001c0)="000200e5d60010", 0x7) 1.753974556s ago: executing program 5 (id=1374): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) write$FUSE_STATFS(r0, &(0x7f00000023c0)={0x60, 0x0, 0x0, {{0x3, 0x5fa7bb95, 0x6, 0x3f9, 0x1000007f2, 0x8, 0x3, 0x2}}}, 0x60) 1.678168094s ago: executing program 4 (id=1375): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='mnt/encrypted_dir\x00', 0x50) 1.542643627s ago: executing program 3 (id=1376): mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='drop=1', 0x6) 1.245406281s ago: executing program 3 (id=1377): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 1.239105755s ago: executing program 1 (id=1378): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) 1.112987445s ago: executing program 3 (id=1379): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x28, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x20040890) 1.095979691s ago: executing program 4 (id=1380): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='+ 0 0 0 1 1\n', 0xc) 1.026570821s ago: executing program 3 (id=1381): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) getdents(r0, 0x0, 0x58) 948.61827ms ago: executing program 5 (id=1382): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000001500)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) 930.548207ms ago: executing program 4 (id=1383): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 772.480891ms ago: executing program 0 (id=1384): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10121, 0x0) 566.381795ms ago: executing program 5 (id=1385): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 506.026157ms ago: executing program 4 (id=1386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 461.835389ms ago: executing program 0 (id=1387): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2204806, &(0x7f0000000300)={[{@hide}, {@iocharset={'iocharset', 0x3d, 'cp860'}, 0x0}, {@mode={'mode', 0x3d, 0x1}}, {@nojoliet}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x800000000000056}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@unhide}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) userfaultfd(0x80001) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 219.479544ms ago: executing program 1 (id=1388): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr\n', 0xd7) 127.470551ms ago: executing program 4 (id=1389): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='/dev/loop0,65536G', 0x11) 60.626799ms ago: executing program 0 (id=1390): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) 55.601788ms ago: executing program 5 (id=1391): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x7f, 0x7fff, 0x3, 0x0, 0xd}, &(0x7f00000001c0)=0x14) 0s ago: executing program 1 (id=1392): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000d00", 0x29) kernel console output (not intermixed with test programs): endpoint descriptor, different from the interface descriptor's value: 11 [ 157.692385][ T5744] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.699150][ T5744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.715419][ T5744] usb 1-1: config 0 descriptor?? [ 157.921662][ T7396] loop4: detected capacity change from 0 to 32768 [ 157.948633][ T7396] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.637 (7396) [ 157.990078][ T7394] loop0: detected capacity change from 0 to 1024 [ 158.001987][ T7394] ext4: Unknown parameter 'appraise' [ 158.043080][ T7406] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 158.217329][ T5744] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x2 [ 158.232556][ T5744] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x4 [ 158.240848][ T5744] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 158.249375][ T5744] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 158.257649][ T5744] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 158.267319][ T5744] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 158.275757][ T5744] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 158.284105][ T5744] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 158.292473][ T5744] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 158.300719][ T5744] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0 [ 158.325962][ T5744] logitech-djreceiver 0003:046D:C70E.0005: hidraw0: USB HID v80.09 Device [HID 046d:c70e] on usb-dummy_hcd.0-1/input0 [ 158.388633][ T7396] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.388696][ T7396] BTRFS info (device loop4): using sha256 checksum algorithm [ 158.395349][ T1113] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 158.433386][ T5810] usb 1-1: USB disconnect, device number 6 [ 158.678686][ T7410] fido_id[7410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 158.836946][ T7396] BTRFS info (device loop4): enabling ssd optimizations [ 158.857443][ T7396] BTRFS info (device loop4): turning on async discard [ 158.865308][ T7396] BTRFS info (device loop4): enabling free space tree [ 158.873220][ T7396] BTRFS info (device loop4): force clearing of disk cache [ 158.881159][ T7396] BTRFS info (device loop4): force zlib compression, level 3 [ 158.889071][ T7396] BTRFS info (device loop4): max_inline set to 0 [ 159.113648][ T5616] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.493770][ T5744] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.653015][ T5744] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 159.676801][ T5744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.688048][ T5744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.699480][ T5744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.720728][ T5744] usb 1-1: config 0 descriptor?? [ 159.926112][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 159.936599][ T7446] bond0: entered promiscuous mode [ 159.936663][ T7446] bond_slave_0: entered promiscuous mode [ 159.939198][ T7446] bond_slave_1: entered promiscuous mode [ 159.957442][ T7446] batadv0: entered promiscuous mode [ 159.973263][ T5744] usbhid 1-1:0.0: can't add hid device: -71 [ 159.979427][ T5744] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 159.983978][ T7446] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 160.002364][ T5744] usb 1-1: USB disconnect, device number 7 [ 160.019075][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 160.030218][ T7446] bond0: left promiscuous mode [ 160.030243][ T7446] bond_slave_0: left promiscuous mode [ 160.030734][ T7446] bond_slave_1: left promiscuous mode [ 160.048158][ T7446] batadv0: left promiscuous mode [ 160.250753][ T31] audit: type=1326 audit(1786189395.336:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.4.657" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc51f9e0d9 code=0x7ffc0000 [ 160.283880][ T31] audit: type=1326 audit(1786189395.336:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.4.657" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc51f9e0d9 code=0x7ffc0000 [ 160.310342][ T31] audit: type=1326 audit(1786189395.356:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.4.657" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc51f9e0d9 code=0x7ffc0000 [ 160.336661][ T31] audit: type=1326 audit(1786189395.356:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.4.657" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc51f9e0d9 code=0x7ffc0000 [ 160.349046][ T31] audit: type=1326 audit(1786189395.366:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.4.657" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7efc51f9e0d9 code=0x7ffc0000 [ 160.395904][ T31] audit: type=1326 audit(1786189395.476:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.4.657" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc51f9e0d9 code=0x7ffc0000 [ 160.396463][ T31] audit: type=1326 audit(1786189395.486:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.4.657" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc51f9e0d9 code=0x7ffc0000 [ 160.397218][ T31] audit: type=1326 audit(1786189395.476:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.4.657" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc51f9de42 code=0x7ffc0000 [ 160.397262][ T31] audit: type=1326 audit(1786189395.486:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.4.657" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7efc51f9ded7 code=0x7ffc0000 [ 160.460751][ T7456] program syz.1.658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.463536][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 160.562881][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 160.562937][ T31] audit: type=1326 audit(1786189395.656:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.4.657" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7efc51f9e0d9 code=0x7ffc0000 [ 160.607923][ T5744] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 160.659428][ T7459] set_capacity_and_notify: 1 callbacks suppressed [ 160.670614][ T7459] loop1: detected capacity change from 0 to 256 [ 160.678257][ T7459] exfat: Deprecated parameter 'namecase' [ 160.685321][ T7459] exfat: Deprecated parameter 'namecase' [ 160.720738][ T7459] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 160.764335][ T5744] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 160.776336][ T5744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.776387][ T5744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.776454][ T5744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.810239][ T5744] usb 1-1: config 0 descriptor?? [ 160.825439][ T5744] hub 1-1:0.0: USB hub found [ 160.834259][ T7461] binder: 7460:7461 ioctl c00c6211 0 returned -14 [ 161.036740][ T5744] hub 1-1:0.0: 1 port detected [ 161.186075][ T7464] loop3: detected capacity change from 0 to 2048 [ 161.238056][ T5744] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 161.250676][ T5744] usbhid 1-1:0.0: can't add hid device: -71 [ 161.257339][ T5744] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 161.303356][ T5744] usb 1-1: USB disconnect, device number 8 [ 161.392459][ T1221] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 161.411565][ T7469] loop8: detected capacity change from 0 to 1 [ 161.422530][ T7469] Dev loop8: unable to read RDB block 1 [ 161.422604][ T7469] loop8: unable to read partition table [ 161.422811][ T7469] loop8: partition table beyond EOD, truncated [ 161.425444][ T7469] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 161.541932][ T1221] usb 5-1: Using ep0 maxpacket: 16 [ 161.549587][ T1221] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.549670][ T1221] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 161.570067][ T1221] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.570112][ T1221] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 161.597927][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.606245][ T1221] usb 5-1: Product: syz [ 161.606294][ T1221] usb 5-1: Manufacturer: syz [ 161.606314][ T1221] usb 5-1: SerialNumber: syz [ 162.073133][ T7481] loop1: detected capacity change from 0 to 256 [ 162.086675][ T1221] usb 5-1: USB disconnect, device number 9 [ 162.134020][ T7481] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 162.147584][ T7481] FAT-fs (loop1): Filesystem has been set read-only [ 162.612463][ T1221] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 162.699836][ T7494] program syz.3.676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.761968][ T1221] usb 2-1: Using ep0 maxpacket: 16 [ 162.762413][ T5622] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.777436][ T1221] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 162.789913][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.798087][ T1221] usb 2-1: Product: syz [ 162.802560][ T1221] usb 2-1: Manufacturer: syz [ 162.807336][ T1221] usb 2-1: SerialNumber: syz [ 162.818673][ T1221] usb 2-1: config 0 descriptor?? [ 162.826965][ T1221] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 162.836090][ T1221] usb 2-1: Detected FT-X [ 162.913323][ T5622] usb 1-1: Using ep0 maxpacket: 32 [ 162.914230][ T5622] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 162.915768][ T5622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.918610][ T5622] usb 1-1: config 0 descriptor?? [ 163.063084][ T1221] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 163.153954][ T5622] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 163.193032][ T5622] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.201924][ T5622] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 163.201984][ T5622] usb 1-1: media controller created [ 163.259300][ T5622] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.395411][ T7490] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 163.409471][ T5622] az6027: usb out operation failed. (-71) [ 163.410727][ T5622] az6027: usb out operation failed. (-71) [ 163.410741][ T5622] stb0899_attach: Driver disabled by Kconfig [ 163.410749][ T5622] az6027: no front-end attached [ 163.410749][ T5622] [ 163.419109][ T5622] az6027: usb out operation failed. (-71) [ 163.419125][ T5622] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 163.438760][ T5622] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 163.477720][ T1221] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 163.481071][ T5622] dvb-usb: schedule remote query interval to 400 msecs. [ 163.481179][ T5622] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 163.491352][ T5622] usb 1-1: USB disconnect, device number 9 [ 163.508381][ T1221] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 163.540565][ T1221] usb 2-1: USB disconnect, device number 8 [ 163.616494][ T7508] netlink: 'syz.4.683': attribute type 10 has an invalid length. [ 163.616554][ T7508] netlink: 176 bytes leftover after parsing attributes in process `syz.4.683'. [ 163.695780][ T1221] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 163.705953][ T1221] ftdi_sio 2-1:0.0: device disconnected [ 163.848170][ T5622] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 163.980161][ T7510] loop3: detected capacity change from 0 to 2048 [ 163.990225][ T7510] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 163.990287][ T7510] NILFS (loop3): mounting unchecked fs [ 164.046422][ T7510] NILFS (loop3): recovery complete [ 164.080439][ T7513] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.452306][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 164.592191][ T1221] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 164.613050][ T25] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 164.623989][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.635092][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.645019][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.648657][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 164.648680][ T7523] netlink: 47 bytes leftover after parsing attributes in process `syz.3.690'. [ 164.674790][ T25] usb 5-1: config 0 descriptor?? [ 164.752581][ T1221] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 164.765763][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.778577][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.788771][ T1221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.809482][ T1221] usb 2-1: config 0 descriptor?? [ 164.956563][ T7517] loop0: detected capacity change from 0 to 32768 [ 164.992501][ T7517] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.687 (7517) [ 165.062018][ T7517] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.073103][ T7517] BTRFS info (device loop0): using crc32c checksum algorithm [ 165.127167][ T25] hid_parser_main: 2 callbacks suppressed [ 165.136272][ T25] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 165.145076][ T25] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 165.157179][ T25] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 165.166444][ T25] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 165.177488][ T25] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 165.189576][ T25] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 165.199941][ T25] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 165.221328][ T25] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 165.236567][ T25] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 165.281083][ T1221] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 165.281175][ T1221] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 165.281220][ T1221] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 165.282070][ T5810] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 165.332309][ T1221] playstation 0003:054C:0DF2.0007: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 165.346917][ T7517] BTRFS info (device loop0): enabling ssd optimizations [ 165.353031][ T7517] BTRFS info (device loop0): turning on async discard [ 165.353055][ T7517] BTRFS info (device loop0): enabling free space tree [ 165.354212][ C1] hid-thrustmaster 0003:044F:B65D.0006: Unknown packet type 0x0, unable to proceed further with wheel init [ 165.392373][ T7517] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.435753][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 165.437572][ T5810] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 165.438580][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.438605][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.438639][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.450418][ T5810] usb 4-1: config 0 descriptor?? [ 165.491340][ T1221] playstation 0003:054C:0DF2.0007: Invalid byte count transferred, expected 20 got 0 [ 165.501182][ T1221] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22 [ 165.510575][ T1221] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 165.521262][ T1221] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 165.556769][ T5818] usb 5-1: USB disconnect, device number 10 [ 165.620259][ T7543] fido_id[7543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 165.681914][ T1221] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -22 [ 165.790075][ T1221] usb 2-1: USB disconnect, device number 9 [ 166.152274][ T5810] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 166.353766][ T5810] ft260 0003:0403:6030.0008: failed to retrieve system status [ 166.354181][ T5810] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -71 [ 166.363960][ T5810] usb 4-1: USB disconnect, device number 6 [ 166.510088][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.517543][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.522162][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 166.523177][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 166.523819][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.805814][ T7565] loop4: detected capacity change from 0 to 256 [ 166.915452][ T7568] loop9: detected capacity change from 0 to 7 [ 166.982022][ C0] blk_print_req_error: 136 callbacks suppressed [ 166.982088][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.982188][ C0] buffer_io_error: 138 callbacks suppressed [ 166.982204][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.019404][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.019508][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.033324][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.033409][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.034563][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.034627][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.038542][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.038608][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.038851][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.038909][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.039823][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.039888][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.039969][ T7568] ldm_validate_partition_table(): Disk read failed. [ 167.041417][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.041513][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.042568][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.042631][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.052459][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.052553][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 167.058697][ T7568] Dev loop9: unable to read RDB block 0 [ 167.068645][ T7568] loop9: unable to read partition table [ 167.068851][ T7568] loop9: partition table beyond EOD, truncated [ 167.068883][ T7568] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 167.401608][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 167.501679][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 167.598840][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 167.672969][ T5810] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 167.836772][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short [ 167.836851][ T5810] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 167.837982][ T5810] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 167.843389][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.843414][ T5810] usb 4-1: Product: syz [ 167.843428][ T5810] usb 4-1: Manufacturer: syz [ 167.843441][ T5810] usb 4-1: SerialNumber: syz [ 168.030849][ T7589] Invalid ELF header magic: != ELF [ 168.054132][ T7589] Invalid ELF header magic: != ELF [ 168.171259][ T1143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.239377][ T7595] loop1: detected capacity change from 0 to 256 [ 168.247578][ T7595] exfat: Deprecated parameter 'utf8' [ 168.256634][ T7595] exfat: Deprecated parameter 'namecase' [ 168.264478][ T7595] exfat: Deprecated parameter 'namecase' [ 168.271446][ T7595] exfat: Deprecated parameter 'namecase' [ 168.275645][ T5810] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 168.285588][ T7592] netlink: 84 bytes leftover after parsing attributes in process `syz.4.711'. [ 168.285736][ T7592] netlink: 173 bytes leftover after parsing attributes in process `syz.4.711'. [ 168.350861][ T7595] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 168.404159][ T1143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.472105][ T5818] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 168.558720][ T7600] loop4: detected capacity change from 0 to 512 [ 168.567289][ T7600] EXT4-fs: Ignoring removed bh option [ 168.574627][ T7600] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.591580][ T7600] EXT4-fs (loop4): 1 truncate cleaned up [ 168.605132][ T7600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.612153][ T5634] Bluetooth: hci5: command tx timeout [ 168.632475][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 168.633433][ T5818] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 168.635375][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.635410][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.635474][ T5818] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 168.635520][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.641475][ T5818] usb 1-1: config 0 descriptor?? [ 168.736358][ T1143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.790356][ T5810] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 168.845550][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.973215][ T7607] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 169.035326][ T1143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.117497][ T7613] netlink: 256 bytes leftover after parsing attributes in process `syz.4.719'. [ 169.155743][ T5818] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 169.155813][ T5818] microsoft 0003:045E:07DA.0009: no inputs found [ 169.155845][ T5818] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 169.344665][ T5818] usb 1-1: USB disconnect, device number 10 [ 169.437431][ T5810] usb 4-1: USB disconnect, device number 7 [ 169.873692][ T6326] udevd[6326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.151686][ T7637] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.729'. [ 170.167167][ T7637] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.729'. [ 170.184573][ T1143] bridge_slave_1: left allmulticast mode [ 170.184646][ T1143] bridge_slave_1: left promiscuous mode [ 170.187106][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.337774][ T1143] bridge_slave_0: left allmulticast mode [ 170.337846][ T1143] bridge_slave_0: left promiscuous mode [ 170.357857][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.484486][ T7649] loop4: detected capacity change from 0 to 736 [ 170.492447][ T7647] loop1: detected capacity change from 0 to 4096 [ 170.614353][ T7647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.693407][ T5634] Bluetooth: hci5: command tx timeout [ 170.797003][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.294363][ T7667] loop3: detected capacity change from 0 to 2048 [ 171.350691][ T7667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.350830][ T7667] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.390827][ T7674] netlink: 32 bytes leftover after parsing attributes in process `syz.0.744'. [ 171.506460][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.524933][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.538982][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.564168][ T1143] bond0 (unregistering): Released all slaves [ 172.142014][ T5810] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 172.212527][ T1221] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 172.303877][ T5810] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 172.303948][ T5810] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 172.307074][ T5810] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.307124][ T5810] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.307149][ T5810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.308218][ T5810] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.308261][ T5810] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.308283][ T5810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.309202][ T5810] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.309244][ T5810] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.309267][ T5810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.311766][ T5810] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.311808][ T5810] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.311995][ T5810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.315698][ T5810] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.315751][ T5810] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.315774][ T5810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.318463][ T5810] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.318508][ T5810] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.318532][ T5810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.321707][ T5810] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.321772][ T5810] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.321797][ T5810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.324449][ T5810] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.324496][ T5810] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.324520][ T5810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.326562][ T5810] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 172.326583][ T5810] usb 2-1: Product: syz [ 172.326597][ T5810] usb 2-1: Manufacturer: syz [ 172.326610][ T5810] usb 2-1: SerialNumber: syz [ 172.335939][ T5810] usb 2-1: config 0 descriptor?? [ 172.366236][ T5810] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 172.436986][ T1221] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 172.465031][ T1221] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 172.465084][ T1221] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 172.465111][ T1221] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 172.465136][ T1221] usb 5-1: config 0 interface 0 has no altsetting 0 [ 172.465171][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.474936][ T7554] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.475062][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.475236][ T7554] bridge_slave_0: entered allmulticast mode [ 172.539492][ T7554] bridge_slave_0: entered promiscuous mode [ 172.674108][ T1221] usb 5-1: config 0 descriptor?? [ 172.679664][ T5818] usb 2-1: USB disconnect, device number 10 [ 172.680063][ T7688] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 172.707566][ T5818] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 172.777043][ T5634] Bluetooth: hci5: command tx timeout [ 172.815901][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.816041][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.816196][ T7554] bridge_slave_1: entered allmulticast mode [ 172.847143][ T7554] bridge_slave_1: entered promiscuous mode [ 172.944153][ T7554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.958949][ T7554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.107536][ T1221] hid_parser_main: 4 callbacks suppressed [ 173.114039][ T1221] lenovo 0003:17EF:6062.000A: unknown main item tag 0x2 [ 173.121125][ T1221] lenovo 0003:17EF:6062.000A: unknown main item tag 0x3 [ 173.128338][ T1221] lenovo 0003:17EF:6062.000A: unknown main item tag 0x1 [ 173.135478][ T1221] lenovo 0003:17EF:6062.000A: unknown main item tag 0x2 [ 173.148933][ T1221] lenovo 0003:17EF:6062.000A: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 173.178034][ T1143] hsr_slave_0: left promiscuous mode [ 173.183680][ T1143] hsr_slave_1: left promiscuous mode [ 173.186976][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.187028][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.191392][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.191412][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.264437][ T1143] veth1_macvtap: left promiscuous mode [ 173.266673][ T1143] veth0_macvtap: left promiscuous mode [ 173.266879][ T1143] veth1_vlan: left promiscuous mode [ 173.266972][ T1143] veth0_vlan: left promiscuous mode [ 173.316627][ T5810] usb 5-1: USB disconnect, device number 11 [ 174.010441][ T7730] loop4: detected capacity change from 0 to 64 [ 174.216393][ T7721] loop1: detected capacity change from 0 to 32768 [ 174.264828][ T31] audit: type=1800 audit(1786189409.356:106): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.759" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 174.368459][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 174.429000][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 174.838610][ T7554] team0: Port device team_slave_0 added [ 174.841777][ T7554] team0: Port device team_slave_1 added [ 174.852349][ T5634] Bluetooth: hci5: command tx timeout [ 174.912902][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 175.072943][ T7554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.072983][ T7554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.073026][ T7554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.128256][ T7554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.138755][ T7554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.138832][ T7554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.239620][ T7746] netlink: 60 bytes leftover after parsing attributes in process `syz.4.769'. [ 175.365529][ T7554] hsr_slave_0: entered promiscuous mode [ 175.377848][ T7554] hsr_slave_1: entered promiscuous mode [ 175.378681][ T7554] debugfs: 'hsr0' already exists in 'hsr' [ 175.378728][ T7554] Cannot create hsr debugfs directory [ 175.561649][ T7756] loop4: detected capacity change from 0 to 64 [ 175.629385][ T7760] loop3: detected capacity change from 0 to 8 [ 175.711793][ T7760] unable to read inode lookup table [ 175.795654][ T7756] hfs: cannot create new inode: file count exceeds limit [ 175.817189][ T7764] loop0: detected capacity change from 0 to 128 [ 175.873595][ T7764] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 175.875522][ T7764] hpfs: filesystem error: improperly stopped [ 175.875540][ T7764] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 175.875553][ T7764] hpfs: You really don't want any checks? You are crazy... [ 175.875574][ T7764] hpfs: Code page index out of array [ 175.875582][ T7764] hpfs: code page support is disabled [ 175.883546][ T7764] hpfs: hpfs_map_4sectors(): unaligned read [ 175.883633][ T7764] hpfs: hpfs_map_4sectors(): unaligned read [ 175.883642][ T7764] hpfs: filesystem error: unable to find root dir [ 176.019025][ T7767] loop3: detected capacity change from 0 to 256 [ 176.457547][ T7782] loop9: detected capacity change from 0 to 524287997 [ 176.722078][ T25] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 176.887018][ T25] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 176.899389][ T25] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.899436][ T25] usb 1-1: config 0 has no interface number 0 [ 176.899484][ T25] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.899516][ T25] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.899543][ T25] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.899574][ T25] usb 1-1: config 0 interface 1 has no altsetting 0 [ 176.899612][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.006433][ T25] usb 1-1: config 0 descriptor?? [ 177.166254][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 177.340114][ T7554] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.398266][ T7554] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.407003][ T7554] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.426655][ T7554] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.434975][ T7554] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.482336][ T7554] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.487489][ T7554] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.539595][ T7554] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.646631][ T25] uclogic 0003:145F:0212.000B: pen parameters not found [ 177.655191][ T25] uclogic 0003:145F:0212.000B: interface is invalid, ignoring [ 177.685188][ T25] usb 1-1: USB disconnect, device number 11 [ 178.005100][ T7554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.059222][ T7554] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.104834][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.104969][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.121098][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.121236][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.212155][ T5622] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 178.284921][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 178.310258][ T7823] loop4: detected capacity change from 0 to 32768 [ 178.321974][ T7823] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.794 (7823) [ 178.364355][ T5622] usb 4-1: Using ep0 maxpacket: 16 [ 178.366163][ T5622] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 178.371393][ T5622] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 178.371424][ T5622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.375819][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.375843][ T5622] usb 4-1: Product: syz [ 178.375858][ T5622] usb 4-1: Manufacturer: syz [ 178.375870][ T5622] usb 4-1: SerialNumber: syz [ 178.378797][ T5622] usb 4-1: config 0 descriptor?? [ 178.427215][ T7823] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 178.427249][ T7823] BTRFS info (device loop4): using blake2b checksum algorithm [ 178.453800][ T5622] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 178.453866][ T5622] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 178.471761][ T25] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 178.482334][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.497130][ T7839] loop0: detected capacity change from 0 to 24 [ 178.506991][ T25] usb 2-1: config 0 descriptor?? [ 178.524480][ T25] cp210x 2-1:0.0: cp210x converter detected [ 178.636840][ T7823] BTRFS info (device loop4): enabling ssd optimizations [ 178.644750][ T7823] BTRFS info (device loop4): turning on async discard [ 178.644777][ T7823] BTRFS info (device loop4): enabling free space tree [ 178.644797][ T7823] BTRFS info (device loop4): use zstd compression, level 3 [ 178.776853][ T31] audit: type=1800 audit(1786189413.856:107): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.794" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 179.022050][ T5622] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 179.035062][ T5634] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 179.208886][ T25] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 179.208970][ T25] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 179.225185][ T5622] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 179.228812][ T5622] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 179.228831][ T5622] em28xx 4-1:0.0: No AC97 audio processor [ 179.255436][ T25] usb 2-1: cp210x converter now attached to ttyUSB0 [ 179.270023][ T25] usb 2-1: USB disconnect, device number 11 [ 179.303855][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 179.314263][ T25] cp210x 2-1:0.0: device disconnected [ 179.318876][ T5622] usb 4-1: USB disconnect, device number 8 [ 179.326692][ T5622] em28xx 4-1:0.0: Disconnecting em28xx [ 179.429183][ T5622] em28xx: Freeing device [ 179.587690][ T5616] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 179.803837][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 179.844412][ T7873] loop0: detected capacity change from 0 to 4096 [ 179.988340][ T7873] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 179.990617][ T7880] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.030059][ T7873] Remounting filesystem read-only [ 180.555614][ T7554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.740245][ T7899] loop1: detected capacity change from 0 to 4096 [ 180.857682][ T7908] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.082095][ T5710] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 181.237143][ T5710] usb 4-1: Using ep0 maxpacket: 8 [ 181.263220][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short [ 181.263292][ T5710] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 181.281944][ T5710] usb 4-1: config 117 has an invalid interface number: 163 but max is 0 [ 181.281994][ T5710] usb 4-1: config 117 has no interface number 0 [ 181.282042][ T5710] usb 4-1: config 117 interface 163 has no altsetting 0 [ 181.310579][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.321006][ T5710] usb 4-1: Product: syz [ 181.325515][ T5710] usb 4-1: Manufacturer: syz [ 181.330501][ T5710] usb 4-1: SerialNumber: syz [ 181.743874][ T59] IPVS: starting estimator thread 0... [ 181.832265][ T7925] IPVS: using max 26 ests per chain, 62400 per kthread [ 181.841552][ T7554] veth0_vlan: entered promiscuous mode [ 181.899874][ T7554] veth1_vlan: entered promiscuous mode [ 181.992717][ T5710] f81534a_ctrl 4-1:117.163: probe with driver f81534a_ctrl failed with error -32 [ 182.030760][ T5622] usb 4-1: USB disconnect, device number 9 [ 182.151871][ T7554] veth0_macvtap: entered promiscuous mode [ 182.274258][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 182.283059][ T7554] veth1_macvtap: entered promiscuous mode [ 182.400824][ T7554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.420036][ T7935] loop4: detected capacity change from 0 to 4096 [ 182.434766][ T7935] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 182.469611][ T7554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.535317][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.537432][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.537572][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.537603][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.624754][ T7935] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 182.730051][ T31] audit: type=1800 audit(1786189417.826:108): pid=7935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.815" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 182.992057][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.003780][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.218443][ T7950] loop0: detected capacity change from 0 to 4096 [ 183.270102][ T7950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.390881][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.642093][ T7961] tap0: tun_chr_ioctl cmd 1074025677 [ 183.642227][ T7961] tap0: linktype set to 825 [ 183.654923][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.654944][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.239244][ T7980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.830'. [ 184.438798][ T7991] loop0: detected capacity change from 0 to 64 [ 184.590068][ T7993] loop5: detected capacity change from 0 to 1024 [ 185.368532][ T8018] loop1: detected capacity change from 0 to 64 [ 185.396572][ T8018] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 185.614656][ T8022] loop1: detected capacity change from 0 to 256 [ 185.636364][ T8010] loop0: detected capacity change from 0 to 32768 [ 185.647317][ T8010] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.843 (8010) [ 185.650600][ T8022] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.676210][ T8022] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.714220][ T8010] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 185.724773][ T8010] BTRFS info (device loop0): using crc32c checksum algorithm [ 185.814175][ T8037] loop3: detected capacity change from 0 to 64 [ 185.877054][ T8010] BTRFS info (device loop0): enabling ssd optimizations [ 185.892949][ T8010] BTRFS info (device loop0): turning on async discard [ 185.893005][ T8010] BTRFS info (device loop0): enabling free space tree [ 186.007523][ T5617] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 186.363480][ T8052] loop9: detected capacity change from 0 to 524287936 [ 186.369535][ T8053] loop3: detected capacity change from 0 to 512 [ 186.372762][ T8053] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 186.379130][ T8053] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e01c, mo2=0102] [ 186.379334][ T8053] System zones: 1-12 [ 186.379566][ T8053] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.387700][ T8053] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33619980: comm syz.3.854: invalid block [ 186.387734][ T8053] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 186.390565][ T8053] EXT4-fs error (device loop3) in ext4_process_orphan:346: IO failure [ 186.390592][ T8053] loop3: lost filesystem error report for type 5 error -5 [ 186.392012][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 186.392034][ C0] EXT4-fs (loop3): initial error at time 1786189421: ext4_get_branch:178: inode 11: block 33619980 [ 186.392068][ C0] EXT4-fs (loop3): last error at time 1786189421: ext4_process_orphan:346 [ 186.393008][ T8053] EXT4-fs (loop3): 1 truncate cleaned up [ 186.394919][ T8053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 186.404002][ T8053] EXT4-fs (loop3): shut down requested (1) [ 186.407708][ T8053] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.854: error -EUCLEAN reading directory block [ 186.574271][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 187.909685][ T8097] loop5: detected capacity change from 0 to 256 [ 187.926390][ T8097] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.006002][ T8097] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.078980][ T8103] loop1: detected capacity change from 0 to 512 [ 188.089861][ T8103] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.115141][ T8103] EXT4-fs (loop1): 1 truncate cleaned up [ 188.120941][ T8103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.199417][ T8103] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #2: block 13: comm syz.1.878: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 188.248262][ T8103] EXT4-fs (loop1): Remounting filesystem read-only [ 188.365022][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.506591][ T8117] loop5: detected capacity change from 0 to 2048 [ 188.536100][ T8117] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c029, mo2=0003] [ 188.560034][ T8117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.614950][ T8117] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.881: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 188.677482][ T8117] EXT4-fs (loop5): Remounting filesystem read-only [ 188.836101][ T7554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.899698][ T8165] loop4: detected capacity change from 0 to 128 [ 189.920643][ T8165] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 190.283351][ T31] audit: type=1800 audit(1786189425.376:109): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.900" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 190.546611][ T8178] netlink: 11 bytes leftover after parsing attributes in process `syz.4.904'. [ 190.747976][ T8155] loop0: detected capacity change from 0 to 32768 [ 190.877280][ T8155] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 190.939403][ T8155] (syz.0.895,8155,0):ocfs2_verify_group_and_input:432 ERROR: add a group which is in the current volume. [ 190.939470][ T8155] (syz.0.895,8155,0):ocfs2_group_add:513 ERROR: status = -22 [ 191.107755][ T8174] loop5: detected capacity change from 0 to 40427 [ 191.134067][ T8174] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 191.136656][ T5617] ocfs2: Unmounting device (7,0) on (node local) [ 191.148091][ T8174] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 191.158955][ T8174] F2FS-fs (loop5): Image doesn't support compression [ 191.169502][ T8174] F2FS-fs (loop5): invalid crc value [ 191.345478][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 191.447042][ T8174] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 191.535473][ T8174] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 191.535525][ T8174] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 191.535623][ T8174] F2FS-fs (loop5): Start checkpoint disabled! [ 191.613161][ T8174] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 191.623632][ T8174] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 191.630816][ T8174] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 191.659816][ T8172] loop3: detected capacity change from 0 to 32768 [ 191.671955][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 191.679192][ T8172] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.902 (8172) [ 191.720474][ T8172] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.720551][ T8172] BTRFS info (device loop3): using sha256 checksum algorithm [ 191.747559][ T31] audit: type=1804 audit(1786189426.836:110): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.903" name="/newroot/16/file0/file1" dev="loop5" ino=10 res=1 errno=0 [ 191.819547][ T59] kworker/u8:4: attempt to access beyond end of device [ 191.819547][ T59] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.862347][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 191.862519][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.862551][ T59] Tainted: [L]=SOFTLOCKUP [ 191.862559][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.862573][ T59] Workqueue: writeback wb_workfn (flush-7:5) [ 191.862617][ T59] Call Trace: [ 191.862625][ T59] [ 191.862634][ T59] dump_stack_lvl+0xe8/0x150 [ 191.862665][ T59] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 191.862697][ T59] f2fs_write_end_bio+0x1211/0x16e0 [ 191.862731][ T59] ? blkg_put+0x22/0x240 [ 191.862774][ T59] __submit_merged_bio+0x258/0x6a0 [ 191.862799][ T59] ? rcu_is_watching+0x15/0xb0 [ 191.862828][ T59] __submit_merged_write_cond+0x3c9/0x4e0 [ 191.862865][ T59] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 191.862917][ T59] f2fs_write_data_pages+0x2a27/0x36f0 [ 191.862985][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.863028][ T59] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 191.863099][ T59] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 191.863143][ T59] ? __lock_acquire+0x6df/0x2e50 [ 191.863183][ T59] ? set_shrinker_bit+0x7c/0x350 [ 191.863208][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.863234][ T59] do_writepages+0x338/0x560 [ 191.863264][ T59] ? reacquire_held_locks+0x117/0x1a0 [ 191.863284][ T59] ? writeback_sb_inodes+0x450/0x1b00 [ 191.863316][ T59] __writeback_single_inode+0x136/0x1220 [ 191.863346][ T59] ? do_raw_spin_unlock+0xf5/0x210 [ 191.863374][ T59] writeback_sb_inodes+0x9de/0x1b00 [ 191.863399][ T59] ? __lock_acquire+0x6df/0x2e50 [ 191.863448][ T59] ? lock_acquire+0x115/0x350 [ 191.863482][ T59] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 191.863550][ T59] ? rcu_is_watching+0x15/0xb0 [ 191.863571][ T59] ? queue_io+0x2d3/0x470 [ 191.863600][ T59] wb_writeback+0x41c/0xad0 [ 191.863629][ T59] ? queue_io+0x261/0x470 [ 191.863661][ T59] ? __pfx_wb_writeback+0x10/0x10 [ 191.863684][ T59] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.863723][ T59] wb_workfn+0x431/0x10f0 [ 191.863765][ T59] ? __pfx_wb_workfn+0x10/0x10 [ 191.863789][ T59] ? rcu_is_watching+0x15/0xb0 [ 191.863809][ T59] ? trace_hrtimer_start+0x82/0x200 [ 191.863839][ T59] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.863871][ T59] ? lock_acquire+0x115/0x350 [ 191.863906][ T59] ? rcu_is_watching+0x15/0xb0 [ 191.863928][ T59] ? process_scheduled_works+0x97e/0x1630 [ 191.863951][ T59] process_scheduled_works+0xc4e/0x1630 [ 191.864005][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 191.864034][ T59] ? assign_work+0x3cf/0x5d0 [ 191.864061][ T59] worker_thread+0xa47/0xfb0 [ 191.864112][ T59] kthread+0x388/0x470 [ 191.864138][ T59] ? __pfx_worker_thread+0x10/0x10 [ 191.864159][ T59] ? __pfx_kthread+0x10/0x10 [ 191.864187][ T59] ret_from_fork+0x514/0xb70 [ 191.864218][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 191.864244][ T59] ? __switch_to+0xc89/0x1420 [ 191.864272][ T59] ? __pfx_kthread+0x10/0x10 [ 191.864299][ T59] ret_from_fork_asm+0x1a/0x30 [ 191.864343][ T59] [ 191.864520][ T59] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 191.906940][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.914709][ T25] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 191.914761][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.914782][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.914803][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.914824][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.914862][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.199656][ T8172] BTRFS info (device loop3): enabling ssd optimizations [ 192.199682][ T8172] BTRFS info (device loop3): turning on async discard [ 192.199722][ T8172] BTRFS info (device loop3): enabling free space tree [ 192.199737][ T8172] BTRFS info (device loop3): force clearing of disk cache [ 192.199754][ T8172] BTRFS info (device loop3): force zlib compression, level 3 [ 192.199772][ T8172] BTRFS info (device loop3): max_inline set to 0 [ 192.342121][ T25] usb 1-1: GET_CAPABILITIES returned 0 [ 192.342205][ T25] usbtmc 1-1:16.0: can't read capabilities [ 192.562438][ T5731] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 192.578572][ T25] usb 1-1: USB disconnect, device number 12 [ 192.717561][ T5731] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 192.721067][ T5731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 192.721116][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.749288][ T5731] usb 2-1: config 0 descriptor?? [ 192.753684][ T8218] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 193.071534][ T5619] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.278163][ T5731] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 193.278227][ T5731] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 193.278254][ T5731] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 193.278276][ T5731] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 193.278298][ T5731] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 193.278321][ T5731] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 193.278344][ T5731] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 193.278367][ T5731] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 193.278390][ T5731] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 193.278413][ T5731] logitech-djreceiver 0003:046D:C71F.000C: unknown main item tag 0x0 [ 193.434942][ T5818] usb 2-1: USB disconnect, device number 12 [ 193.533735][ T8238] gretap0: entered promiscuous mode [ 193.541245][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 193.562445][ T8238] gretap0: left promiscuous mode [ 193.832288][ T5731] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 193.983766][ T5731] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 193.984925][ T5731] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.984971][ T5731] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 193.984994][ T5731] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 193.985015][ T5731] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 193.985036][ T5731] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 193.985056][ T5731] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 193.985077][ T5731] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 193.985098][ T5731] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 193.985118][ T5731] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 193.985139][ T5731] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.985157][ T5731] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 193.985177][ T5731] usb 1-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 193.987124][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.987144][ T5731] usb 1-1: Product: syz [ 193.987157][ T5731] usb 1-1: Manufacturer: syz [ 193.987170][ T5731] usb 1-1: SerialNumber: syz [ 193.997132][ T8242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.997268][ T8242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.997395][ T8242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.997946][ T8242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.998075][ T8242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.998200][ T8242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.998348][ T8242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.998480][ T8242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.006717][ T5731] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 194.012819][ T5731] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 7 [ 194.019174][ T5731] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 5 [ 194.027542][ T5731] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 194.043113][ T5731] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 3 [ 194.043203][ T5731] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 4 [ 194.043316][ T5731] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 194.071641][ T5731] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 194.536160][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.536250][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.626543][ T5731] usb 1-1: USB disconnect, device number 13 [ 194.751322][ T5731] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 194.855756][ T5731] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 194.868678][ T5731] keyspan 1-1:1.0: device disconnected [ 194.890675][ T8268] tap0: tun_chr_ioctl cmd 1074025681 [ 194.924225][ T8271] block2mtd: error: cannot open device ›¿Ta4G’gÿò)—Š_ÊÕ¤ÏóÊEvr!4¼Ž>=Z{àBÁyÕ<0\ŠÊi=Å [ 194.924225][ T8271] \©œ!ug‰[ [ 195.136562][ T8279] loop3: detected capacity change from 0 to 128 [ 195.164346][ T8279] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 195.164451][ T8279] hpfs: filesystem error: improperly stopped [ 195.164468][ T8279] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 195.164481][ T8279] hpfs: You really don't want any checks? You are crazy... [ 195.164863][ T8279] hpfs: hpfs_map_sector(): read error [ 195.164874][ T8279] hpfs: code page support is disabled [ 195.165374][ T8279] hpfs: hpfs_map_4sectors(): unaligned read [ 195.165447][ T8279] hpfs: hpfs_map_4sectors(): unaligned read [ 195.165455][ T8279] hpfs: filesystem error: unable to find root dir [ 196.125967][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.944'. [ 196.126039][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.944'. [ 196.651598][ T8317] loop5: detected capacity change from 0 to 4096 [ 196.666051][ T8317] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 196.769622][ T8291] loop3: detected capacity change from 0 to 32768 [ 196.796978][ T8317] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 196.803454][ T8317] ntfs3(loop5): Failed to load $Extend (-22). [ 196.803479][ T8317] ntfs3(loop5): Failed to initialize $Extend. [ 196.986125][ T8291] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 196.986125][ T8291] [ 197.058786][ T8291] ERROR: (device loop3): remounting filesystem as read-only [ 197.058827][ T8291] xtLookup: xtSearch returned -5 [ 197.058859][ T8291] free_index: error reading directory table [ 197.058870][ T8291] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 197.058870][ T8291] [ 197.058899][ T8291] xtLookup: xtSearch returned -5 [ 197.058908][ T8291] free_index: error reading directory table [ 197.058914][ T8291] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 197.058914][ T8291] [ 197.058939][ T8291] xtLookup: xtSearch returned -5 [ 197.058947][ T8291] free_index: error reading directory table [ 197.058954][ T8291] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 197.058954][ T8291] [ 197.058978][ T8291] xtLookup: xtSearch returned -5 [ 197.058986][ T8291] free_index: error reading directory table [ 197.058994][ T8291] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 197.058994][ T8291] [ 197.059017][ T8291] xtLookup: xtSearch returned -5 [ 197.059025][ T8291] free_index: error reading directory table [ 197.059034][ T8291] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 197.059034][ T8291] [ 197.059067][ T8291] xtLookup: xtSearch returned -5 [ 197.059075][ T8291] add_index: get/read_metapage failed! [ 197.059088][ T8291] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 197.059088][ T8291] [ 197.059112][ T8291] xtLookup: xtSearch returned -5 [ 197.059119][ T8291] free_index: error reading directory table [ 197.059127][ T8291] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 197.059127][ T8291] [ 197.059150][ T8291] xtLookup: xtSearch returned -5 [ 197.059158][ T8291] free_index: error reading directory table [ 197.059165][ T8291] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 197.059165][ T8291] [ 197.059188][ T8291] xtLookup: xtSearch returned -5 [ 197.059196][ T8291] free_index: error reading directory table [ 197.167264][ T31] audit: type=1800 audit(1786189432.246:111): pid=8317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.947" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 197.191223][ T8291] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 197.191223][ T8291] [ 197.191264][ T8291] xtLookup: xtSearch returned -5 [ 197.191276][ T8291] add_index: get/read_metapage failed! [ 197.425122][ T8328] loop4: detected capacity change from 0 to 4096 [ 197.596388][ T8303] loop1: detected capacity change from 0 to 32768 [ 197.603056][ T8303] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.942 (8303) [ 197.629484][ T8339] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.651723][ T8303] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 197.651926][ T8303] BTRFS info (device loop1): using blake2b checksum algorithm [ 197.804030][ T8303] BTRFS info (device loop1): enabling ssd optimizations [ 197.804080][ T8303] BTRFS info (device loop1): turning on async discard [ 197.804114][ T8303] BTRFS info (device loop1): enabling free space tree [ 197.804139][ T8303] BTRFS info (device loop1): use zstd compression, level 3 [ 198.243379][ T31] audit: type=1800 audit(1786189433.336:112): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.942" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 198.319847][ T8336] loop0: detected capacity change from 0 to 32768 [ 198.391415][ T8336] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 198.642585][ T8336] XFS (loop0): Ending clean mount [ 198.842246][ T8336] XFS (loop0): Quotacheck needed: Please wait. [ 199.050996][ T5615] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 199.242699][ T8336] XFS (loop0): Quotacheck: Done. [ 199.471787][ T8401] sg_read: process 419 (syz.1.961) changed security contexts after opening file descriptor, this is not allowed. [ 199.757270][ T5617] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.865834][ T8428] loop5: detected capacity change from 0 to 256 [ 201.385644][ T8435] loop4: detected capacity change from 0 to 512 [ 201.462564][ T8435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.462700][ T8435] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.757910][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.808301][ T8430] loop1: detected capacity change from 0 to 32768 [ 201.866779][ T8430] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.973 (8430) [ 201.905681][ T8430] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.905740][ T8430] BTRFS info (device loop1): using crc32c checksum algorithm [ 202.158722][ T8430] BTRFS info (device loop1): setting nodatasum [ 202.167480][ T8430] BTRFS info (device loop1): enabling ssd optimizations [ 202.174656][ T8430] BTRFS info (device loop1): disabling tree log [ 202.181117][ T8430] BTRFS info (device loop1): turning on sync discard [ 202.187993][ T8430] BTRFS info (device loop1): enabling free space tree [ 202.195699][ T8430] BTRFS info (device loop1): max_inline set to 0 [ 202.288198][ T8464] loop5: detected capacity change from 0 to 256 [ 202.300786][ T8464] exfat: Deprecated parameter 'namecase' [ 202.343811][ T8464] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0bdbf928, utbl_chksum : 0xe619d30d) [ 202.372672][ T5818] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 202.502607][ T986] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 202.522936][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 202.530528][ T5818] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.538569][ T5818] usb 1-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=7e.1c [ 202.549184][ T5818] usb 1-1: config 6 interface 0 has no altsetting 0 [ 202.558389][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.558451][ T5818] usb 1-1: Product: syz [ 202.558471][ T5818] usb 1-1: Manufacturer: syz [ 202.558491][ T5818] usb 1-1: SerialNumber: syz [ 202.652063][ T986] usb 5-1: Using ep0 maxpacket: 32 [ 202.658413][ T986] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 202.673399][ T986] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.673492][ T986] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.699663][ T986] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 202.699739][ T986] usb 5-1: Product: syz [ 202.699773][ T986] usb 5-1: Manufacturer: syz [ 202.715344][ T5615] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.748527][ T986] hub 5-1:4.0: USB hub found [ 202.842431][ T5818] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 202.860645][ T5818] pwc: Failed to set LED on/off time (-71) [ 202.870102][ T5818] pwc: send_video_command error -71 [ 202.875975][ T5818] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 202.883937][ T5818] Philips webcam 1-1:6.0: probe with driver Philips webcam failed with error -71 [ 202.914304][ T5818] usb 1-1: USB disconnect, device number 14 [ 203.014799][ T986] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 203.372492][ T5731] usb 5-1: USB disconnect, device number 12 [ 203.500843][ T8482] loop1: detected capacity change from 0 to 64 [ 203.665502][ T8471] loop3: detected capacity change from 0 to 32768 [ 204.661128][ T8514] bridge0: port 2(bridge_slave_1) entered listening state [ 204.686875][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.891426][ T8525] loop0: detected capacity change from 0 to 1024 [ 204.906029][ T8525] ext2: Unknown parameter 'noacl' [ 205.042152][ T5744] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 205.162520][ T8531] loop1: detected capacity change from 0 to 1024 [ 205.183667][ T8531] EXT4-fs: Ignoring removed bh option [ 205.193972][ T5744] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 205.199814][ T5744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.199840][ T5744] usb 6-1: Product: syz [ 205.199886][ T5744] usb 6-1: Manufacturer: syz [ 205.199899][ T5744] usb 6-1: SerialNumber: syz [ 205.217193][ T5744] usb 6-1: config 0 descriptor?? [ 205.253488][ T8531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.316423][ T31] audit: type=1800 audit(1786189440.406:113): pid=8531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1012" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 205.433923][ T5744] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 205.620952][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.020114][ T8547] loop0: detected capacity change from 0 to 512 [ 206.028878][ T8547] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 206.052337][ T8547] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.1017: Invalid block bitmap block 0 in block_group 0 [ 206.052395][ T8547] loop0: lost filesystem error report for type 5 error -117 [ 206.071857][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 206.071898][ C1] EXT4-fs (loop0): initial error at time 1786189441: ext4_read_block_bitmap_nowait:487 [ 206.071946][ C1] EXT4-fs (loop0): last error at time 1786189441: ext4_read_block_bitmap_nowait:487 [ 206.076594][ T8547] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 206.076621][ T8547] loop0: lost filesystem error report for type 5 error -117 [ 206.089394][ T5744] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 206.103819][ T5744] usb 6-1: USB disconnect, device number 2 [ 206.124146][ T8547] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.1017: attempt to clear invalid blocks 983261 len 1 [ 206.124187][ T8547] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 206.132567][ T8547] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.1017: Invalid inode table block 0 in block_group 0 [ 206.132600][ T8547] loop0: lost filesystem error report for type 5 error -117 [ 206.133010][ T8547] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 206.133030][ T8547] loop0: lost filesystem error report for type 5 error -117 [ 206.134189][ T8547] EXT4-fs error (device loop0) in ext4_orphan_del:304: Corrupt filesystem [ 206.134209][ T8547] loop0: lost filesystem error report for type 5 error -117 [ 206.134666][ T8547] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.1017: Invalid inode table block 0 in block_group 0 [ 206.134691][ T8547] loop0: lost filesystem error report for type 5 error -117 [ 206.135050][ T8547] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 206.135071][ T8547] loop0: lost filesystem error report for type 5 error -117 [ 206.135391][ T8547] EXT4-fs error (device loop0): ext4_truncate:4721: inode #11: comm syz.0.1017: mark_inode_dirty error [ 206.135417][ T8547] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 206.136399][ T8547] EXT4-fs error (device loop0) in ext4_process_orphan:346: Corrupt filesystem [ 206.136421][ T8547] loop0: lost filesystem error report for type 5 error -117 [ 206.136890][ T8547] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.1017: Invalid inode table block 0 in block_group 0 [ 206.136917][ T8547] loop0: lost filesystem error report for type 5 error -117 [ 206.137946][ T8547] EXT4-fs (loop0): 1 truncate cleaned up [ 206.151065][ T8547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.323874][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.661679][ T8561] loop0: detected capacity change from 0 to 8 [ 206.707759][ T8561] SQUASHFS error: Failed to read block 0x6e6: -5 [ 206.714990][ T8561] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 206.730196][ T8561] SQUASHFS error: Unable to read directory block [6e4:0] [ 206.860785][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 206.861731][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 206.866254][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 207.073178][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 207.549727][ T8587] loop4: detected capacity change from 0 to 8192 [ 207.619221][ T8587] loop4: p1[EZD] p2 p3 p4 [ 207.626791][ T8587] loop4: partition table partially beyond EOD, truncated [ 207.634517][ T8587] loop4: p1 size 32768 extends beyond EOD, truncated [ 207.654538][ T8587] loop4: p2 start 930308 is beyond EOD, truncated [ 207.654608][ T8587] loop4: p3 start 117772289 is beyond EOD, truncated [ 207.654626][ T8587] loop4: p4 size 262144 extends beyond EOD, truncated [ 207.778705][ T8599] loop1: detected capacity change from 0 to 4096 [ 207.802108][ T986] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 207.823337][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 207.879777][ T8599] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 207.953491][ T986] usb 6-1: Using ep0 maxpacket: 32 [ 207.964059][ T986] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 207.976761][ T986] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 207.985499][ T25] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 207.996187][ T986] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 208.000507][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.000533][ T25] usb 5-1: Product: syz [ 208.000546][ T25] usb 5-1: Manufacturer: syz [ 208.000558][ T25] usb 5-1: SerialNumber: syz [ 208.023570][ T986] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.041424][ T986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.051510][ T986] usb 6-1: Product: syz [ 208.051560][ T986] usb 6-1: Manufacturer: syz [ 208.051580][ T986] usb 6-1: SerialNumber: syz [ 208.128433][ T986] usb 6-1: config 0 descriptor?? [ 208.302618][ T8608] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 208.302618][ T8608] The task syz.0.1044 (8608) triggered the difference, watch for misbehavior. [ 208.395100][ T25] rtl8150 5-1:1.0: couldn't reset the device [ 208.395546][ T25] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 208.430338][ T8610] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 208.430396][ T8610] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1045'. [ 208.430432][ T8610] netlink: 'syz.1.1045': attribute type 2 has an invalid length. [ 208.430447][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 208.499860][ T8612] loop3: detected capacity change from 0 to 8 [ 208.509985][ T25] usb 5-1: USB disconnect, device number 13 [ 208.560885][ T8612] SQUASHFS error: zstd decompression error: 10 [ 208.568294][ T8612] SQUASHFS error: zstd decompression failed, data probably corrupt [ 208.577049][ T8612] SQUASHFS error: Failed to read block 0x60: -5 [ 208.585952][ T8612] SQUASHFS error: zstd decompression error: 10 [ 208.592484][ T8612] SQUASHFS error: zstd decompression failed, data probably corrupt [ 208.600931][ T986] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 208.607637][ T8612] SQUASHFS error: Failed to read block 0x60: -5 [ 208.617978][ T31] audit: type=1800 audit(1786189443.716:114): pid=8612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1046" name="/" dev="loop3" ino=1 res=0 errno=0 [ 208.698048][ T8615] vxcan1: tx drop: invalid da for name 0x0000000000000015 [ 208.806935][ T986] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 208.824536][ T986] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 209.041522][ T8621] loop3: detected capacity change from 0 to 2048 [ 209.047981][ T5731] usb 6-1: USB disconnect, device number 3 [ 209.104933][ T8621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.280073][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.658423][ T8645] loop4: detected capacity change from 0 to 512 [ 209.661439][ T8645] EXT4-fs (loop4): Test dummy encryption mode enabled [ 209.667510][ T8645] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1061: inode has both inline data and extents flags [ 209.667543][ T8645] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 209.667879][ T8645] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1061: couldn't read orphan inode 15 (err -117) [ 209.667905][ T8645] loop4: lost filesystem error report for type 5 error -117 [ 209.669922][ T8645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.765699][ T8651] loop1: detected capacity change from 0 to 512 [ 209.766789][ T8651] EXT4-fs: Ignoring removed nobh option [ 209.774476][ T8651] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 209.778966][ T8651] EXT4-fs (loop1): 1 truncate cleaned up [ 209.781128][ T8651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.873032][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.966119][ T8645] fscrypt: AES-256-XTS using blk-crypto-fallback [ 210.022843][ T8648] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #2: comm syz.4.1061: directory missing '.' [ 210.185505][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.353010][ T8671] ip_tables: iptables: counters copy to user failed while replacing table [ 210.382323][ T5818] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 210.392005][ T25] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 210.537900][ T5818] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 210.548530][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.548599][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.555362][ T25] usb 2-1: not running at top speed; connect to a high speed hub [ 210.555395][ T25] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 210.556513][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.556557][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 210.556596][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.627997][ T5818] usb 6-1: config 0 descriptor?? [ 210.652242][ T25] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 210.684503][ T25] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 210.707844][ T25] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 210.742003][ T25] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 210.742141][ T25] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 210.750316][ T25] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 210.867152][ T5818] usbhid 6-1:0.0: can't add hid device: -71 [ 210.867278][ T5818] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 210.905849][ T5818] usb 6-1: USB disconnect, device number 4 [ 211.237876][ T5634] Bluetooth: hci3: unknown advertising packet type: 0x63 [ 211.237924][ T5634] Bluetooth: hci3: Dropping invalid advertising data [ 211.237977][ T5634] Bluetooth: hci3: Malformed LE Event: 0x02 [ 211.283888][ T5710] usb 2-1: USB disconnect, device number 13 [ 211.300962][ T5710] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 211.310254][ T5710] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 211.317918][ T5710] keyspan 2-1:1.0: device disconnected [ 211.441921][ T5818] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 211.550566][ T8684] loop0: detected capacity change from 0 to 32768 [ 211.565545][ T8684] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 211.591973][ T5818] usb 6-1: Using ep0 maxpacket: 8 [ 211.598226][ T5818] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 211.609539][ T5818] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 211.620934][ T5818] usb 6-1: config 0 has no interface number 0 [ 211.627626][ T5818] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.639163][ T5818] usb 6-1: config 0 interface 52 has no altsetting 0 [ 211.646345][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.658048][ T5818] usb 6-1: config 0 descriptor?? [ 211.678252][ T8684] XFS (loop0): Ending clean mount [ 211.731677][ T8684] XFS (loop0): User initiated shutdown received. [ 211.739988][ T8684] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468). Shutting down filesystem. [ 211.756099][ T8684] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 211.820287][ T5617] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 211.883778][ T5818] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input17 [ 212.038793][ T5710] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 212.106392][ T5818] usb 6-1: USB disconnect, device number 5 [ 212.106415][ C1] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 212.188323][ T4967] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 212.250530][ T5710] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 212.261783][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.264398][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.264446][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.284681][ T5710] usb 5-1: config 0 descriptor?? [ 212.615606][ T8725] loop1: detected capacity change from 0 to 2048 [ 212.649436][ T8725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.678145][ T8727] loop3: detected capacity change from 0 to 128 [ 212.822780][ T5710] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 213.024401][ T25] usb 5-1: USB disconnect, device number 14 [ 213.290669][ T8738] loop5: detected capacity change from 0 to 2048 [ 213.310921][ T8738] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 213.321887][ T8738] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.613941][ T8747] loop5: detected capacity change from 0 to 256 [ 213.644101][ T8733] loop3: detected capacity change from 0 to 32768 [ 213.657305][ T8733] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1094 (8733) [ 213.681063][ T8733] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 213.697135][ T8733] BTRFS info (device loop3): using blake2b checksum algorithm [ 213.945074][ T8733] BTRFS info (device loop3): enabling ssd optimizations [ 213.945131][ T8733] BTRFS info (device loop3): turning on async discard [ 213.947876][ T8733] BTRFS info (device loop3): enabling free space tree [ 213.947902][ T8733] BTRFS info (device loop3): use zstd compression, level 3 [ 214.113158][ T8761] loop4: detected capacity change from 0 to 32768 [ 214.129181][ T31] audit: type=1800 audit(1786189449.226:115): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1094" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 214.194481][ T8761] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 214.286049][ T8761] XFS (loop4): Ending clean mount [ 214.433826][ T8761] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 214.572834][ T5744] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 214.603488][ T5616] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 214.824409][ T5744] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.824496][ T5744] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.829486][ T5744] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 214.829523][ T5744] usb 2-1: can't read configurations, error -71 [ 214.865757][ T5619] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 214.923746][ T8789] loop0: detected capacity change from 0 to 128 [ 214.934937][ T8789] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 214.970065][ T8789] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.266723][ T13] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.775588][ T8784] loop5: detected capacity change from 0 to 32768 [ 215.838141][ T8784] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 215.885965][ T5818] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 215.961505][ T8784] XFS (loop5): Ending clean mount [ 215.988672][ T8784] XFS (loop5): User initiated shutdown received. [ 216.011634][ T8784] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:464). Shutting down filesystem. [ 216.026801][ T8784] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 216.053858][ T5818] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.066109][ T5818] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.076881][ T5818] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.092543][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.143824][ T7554] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 216.347298][ T5818] usb 4-1: GET_CAPABILITIES returned 0 [ 216.353271][ T5818] usbtmc 4-1:16.0: can't read capabilities [ 216.490267][ T8819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1118'. [ 216.601527][ T5818] usb 4-1: USB disconnect, device number 10 [ 216.669815][ T8821] team0: entered allmulticast mode [ 216.675512][ T8821] team_slave_0: entered allmulticast mode [ 216.682163][ T8821] team_slave_1: entered allmulticast mode [ 216.695081][ T8821] team0: left allmulticast mode [ 216.700269][ T8821] team_slave_0: left allmulticast mode [ 216.706480][ T8821] team_slave_1: left allmulticast mode [ 216.813450][ T8823] loop1: detected capacity change from 0 to 256 [ 216.820163][ T8823] exfat: Deprecated parameter 'utf8' [ 216.823773][ T8823] exfat: Deprecated parameter 'utf8' [ 216.845892][ T8823] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 216.865342][ T8827] netlink: 'syz.5.1116': attribute type 1 has an invalid length. [ 217.413108][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'. [ 217.453422][ T8841] loop4: detected capacity change from 0 to 1024 [ 217.487642][ T8841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 217.507815][ T8841] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.604160][ T8841] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.1128: lblock 0 mapped to illegal pblock 0 (length 6) [ 217.669259][ T8852] zero sized request [ 217.709493][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 218.057611][ T8861] pimreg1: tun_chr_ioctl cmd 1074025677 [ 218.058652][ T8861] pimreg1: linktype set to 769 [ 218.267607][ T31] audit: type=1326 audit(1786189453.356:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.4.1141" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc51f9e0d9 code=0x0 [ 218.329145][ T8875] program syz.3.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.545640][ T8887] loop3: detected capacity change from 0 to 64 [ 218.603930][ T5818] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 218.762732][ T5818] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 218.763788][ T5818] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.763814][ T5818] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.763850][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.780123][ T8894] loop3: detected capacity change from 0 to 1024 [ 218.827746][ T8894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 218.827920][ T8894] System zones: 0-1, 3-12 [ 218.834207][ T8894] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.999062][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 219.291399][ T5818] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.000E/input/input18 [ 219.453620][ T5818] rc_core: IR keymap rc-rc6-mce not found [ 219.453665][ T5818] Registered IR keymap rc-empty [ 219.457498][ T5818] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.000E/rc/rc0 [ 219.465062][ T5818] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.000E/rc/rc0/input19 [ 219.502056][ T5818] hid-picolcd 0003:04D8:C002.000E: No report with id 0x92 found [ 219.756591][ T5818] usb 1-1: USB disconnect, device number 15 [ 220.785512][ T5744] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 220.946525][ T5744] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.957488][ T5744] usb 6-1: config 1 has an invalid interface number: 129 but max is 1 [ 220.966490][ T5744] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.977789][ T5744] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 220.977819][ T5744] usb 6-1: config 1 has no interface number 2 [ 220.977882][ T5744] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.977911][ T5744] usb 6-1: config 1 interface 129 has no altsetting 0 [ 221.018338][ T5744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.026650][ T5744] usb 6-1: Product: syz [ 221.026674][ T5744] usb 6-1: Manufacturer: syz [ 221.026689][ T5744] usb 6-1: SerialNumber: syz [ 221.053418][ T5744] cdc_ncm 6-1:1.0: skipping garbage [ 221.061980][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 221.088136][ T8967] sctp: [Deprecated]: syz.1.1180 (pid 8967) Use of int in max_burst socket option deprecated. [ 221.088136][ T8967] Use struct sctp_assoc_value instead [ 221.236926][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 221.243191][ T25] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 221.254939][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 221.255038][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.289579][ T8972] loop1: detected capacity change from 0 to 512 [ 221.299279][ T8972] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 221.319314][ T25] usb 5-1: config 0 descriptor?? [ 221.347238][ T8972] EXT4-fs (loop1): 1 truncate cleaned up [ 221.355401][ T8972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.565227][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.761596][ T25] hid_parser_main: 457 callbacks suppressed [ 221.770816][ T25] belkin 0003:1020:0006.000F: unknown main item tag 0x1 [ 221.778376][ T25] belkin 0003:1020:0006.000F: unknown main item tag 0x0 [ 221.785671][ T25] belkin 0003:1020:0006.000F: unknown main item tag 0x0 [ 221.793270][ T25] belkin 0003:1020:0006.000F: unknown main item tag 0x0 [ 221.800418][ T25] belkin 0003:1020:0006.000F: unknown main item tag 0x0 [ 221.810388][ T25] belkin 0003:1020:0006.000F: unknown main item tag 0x0 [ 221.817927][ T25] belkin 0003:1020:0006.000F: unknown main item tag 0x0 [ 221.825390][ T25] belkin 0003:1020:0006.000F: unknown main item tag 0x0 [ 221.841029][ T25] belkin 0003:1020:0006.000F: hidraw0: USB HID v0.09 Device [HID 1020:0006] on usb-dummy_hcd.4-1/input0 [ 221.888422][ T8988] vxcan1: tx drop: invalid da for name 0x0000000000000015 [ 221.921501][ T5744] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 221.941975][ T5744] cdc_ncm 6-1:1.0: bind() failure [ 221.960714][ T5744] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 221.969663][ T5744] cdc_ncm 6-1:1.1: bind() failure [ 221.992179][ T5744] usb 6-1: USB disconnect, device number 6 [ 222.028906][ T5818] usb 5-1: USB disconnect, device number 15 [ 222.031922][ T5622] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 222.182029][ T5622] usb 1-1: Using ep0 maxpacket: 32 [ 222.184468][ T5622] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 222.185557][ T5622] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 222.187491][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 222.187515][ T5622] usb 1-1: Product: syz [ 222.187529][ T5622] usb 1-1: Manufacturer: syz [ 222.187542][ T5622] usb 1-1: SerialNumber: syz [ 222.190550][ T5622] usb 1-1: config 0 descriptor?? [ 222.192306][ T8984] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 222.196818][ T5622] hub 1-1:0.0: bad descriptor, ignoring hub [ 222.196847][ T5622] hub 1-1:0.0: probe with driver hub failed with error -5 [ 222.328807][ T8998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1195'. [ 222.591984][ T5622] usb 1-1: USB disconnect, device number 16 [ 222.708210][ T9004] loop5: detected capacity change from 0 to 256 [ 222.748338][ T9004] syz.5.1198: attempt to access beyond end of device [ 222.748338][ T9004] loop5: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 222.757697][ T9004] syz.5.1198: attempt to access beyond end of device [ 222.757697][ T9004] loop5: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 222.757729][ T9004] buffer_io_error: 10 callbacks suppressed [ 222.757741][ T9004] Buffer I/O error on dev loop5, logical block 442, async page read [ 222.758004][ T31] audit: type=1800 audit(1786189457.846:117): pid=9004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1198" name="file1" dev="loop5" ino=1048649 res=0 errno=0 [ 222.775689][ T9004] syz.5.1198: attempt to access beyond end of device [ 222.775689][ T9004] loop5: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 222.962165][ T5731] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 223.048334][ T9002] loop1: detected capacity change from 0 to 32768 [ 223.122140][ T5731] usb 1-1: Using ep0 maxpacket: 32 [ 223.128422][ T5731] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 223.139488][ T5731] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 223.168655][ T5731] usb 1-1: string descriptor 0 read error: -22 [ 223.168845][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 223.189966][ T9002] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 223.202788][ T5731] usb 1-1: config 0 descriptor?? [ 223.208673][ T8984] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 223.223431][ T5731] hub 1-1:0.0: bad descriptor, ignoring hub [ 223.230102][ T5731] hub 1-1:0.0: probe with driver hub failed with error -5 [ 223.304178][ T8996] loop3: detected capacity change from 0 to 32768 [ 223.339438][ T9002] XFS (loop1): Ending clean mount [ 223.347776][ T9022] loop4: detected capacity change from 0 to 512 [ 223.357971][ T9022] EXT4-fs (loop4): Test dummy encryption mode enabled [ 223.388199][ T9022] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1203: bg 0: block 7: invalid block bitmap [ 223.388429][ T9022] loop4: lost filesystem error report for type 5 error -117 [ 223.391867][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 223.391891][ C0] EXT4-fs (loop4): initial error at time 1786189458: ext4_validate_block_bitmap:436 [ 223.391912][ C0] EXT4-fs (loop4): last error at time 1786189458: ext4_validate_block_bitmap:436 [ 223.406551][ T9022] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 223.406578][ T9022] loop4: lost filesystem error report for type 5 error -117 [ 223.415114][ T9002] XFS (loop1): Quotacheck needed: Please wait. [ 223.451046][ T9022] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #11: comm syz.4.1203: corrupted xattr block 95: invalid header [ 223.451084][ T9022] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 223.453698][ T9022] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 223.453788][ T9022] EXT4-fs (loop4): 1 orphan inode deleted [ 223.459101][ T9022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.532993][ T5622] usb 1-1: USB disconnect, device number 17 [ 223.555097][ T9022] EXT4-fs (loop4): shut down requested (2) [ 223.785448][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.799479][ T9002] XFS (loop1): Quotacheck: Done. [ 224.075545][ T5615] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 224.192926][ T9020] loop5: detected capacity change from 0 to 32768 [ 224.208916][ T9033] loop3: detected capacity change from 0 to 512 [ 224.293965][ T9020] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 224.423991][ T9020] XFS (loop5): Ending clean mount [ 224.445532][ T9033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.461612][ T9033] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.703528][ T7554] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 224.859763][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.029239][ T9055] loop5: detected capacity change from 0 to 256 [ 225.348568][ T9066] loop1: detected capacity change from 0 to 1024 [ 225.773011][ T9070] loop1: detected capacity change from 0 to 512 [ 225.799875][ T9070] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 225.834492][ T9070] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.1220: bad orphan inode 131083 [ 225.846811][ T9070] loop1: lost filesystem error report for type 5 error -117 [ 225.860133][ T9070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.953235][ T9077] loop5: detected capacity change from 0 to 2048 [ 225.986957][ T9070] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #2: block 13: comm syz.1.1220: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 226.020523][ T9077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.020665][ T9077] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.191566][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.382886][ T5622] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 226.401182][ T7554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.534332][ T5622] usb 5-1: Using ep0 maxpacket: 16 [ 226.543159][ T5622] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 226.547667][ T5622] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.547715][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.547740][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 226.547759][ T5622] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 226.547779][ T5622] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.552354][ T5622] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 226.552377][ T5622] usb 5-1: Manufacturer: syz [ 226.567978][ T5622] usb 5-1: config 0 descriptor?? [ 226.764390][ T5744] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 226.909953][ T9107] sctp: [Deprecated]: syz.0.1233 (pid 9107) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.909953][ T9107] Use struct sctp_sack_info instead [ 226.922817][ T5622] rc_core: IR keymap rc-hauppauge not found [ 226.922836][ T5622] Registered IR keymap rc-empty [ 226.922977][ T5622] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.933198][ T5744] usb 2-1: Using ep0 maxpacket: 8 [ 226.946115][ T5622] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 226.946277][ T5744] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 226.961464][ T5744] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 226.961523][ T5744] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.961545][ T5744] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.961569][ T5744] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.961591][ T5744] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.961633][ T5744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.963293][ T5622] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 226.979957][ T5622] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 226.995237][ T5622] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.002344][ T9082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.009037][ T9082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.018306][ T5622] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.032689][ T5622] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.060613][ T5622] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.075723][ T5622] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.094320][ T5622] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.112217][ T5622] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.134945][ T5622] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.152410][ T5622] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.173547][ T5622] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.198096][ T5622] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 227.198155][ T5622] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 227.352221][ T5622] usb 5-1: USB disconnect, device number 16 [ 227.357933][ T9113] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 227.358224][ T9113] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 227.358251][ T9113] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 227.358275][ T9113] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 227.358299][ T9113] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 227.358323][ T9113] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 227.358348][ T9113] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 227.358374][ T9113] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 227.358399][ T9113] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 227.358421][ T9113] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 227.433491][ T5744] usb 2-1: usb_control_msg returned -32 [ 227.433547][ T5744] usbtmc 2-1:16.0: can't read capabilities [ 227.479304][ T5744] usb 2-1: USB disconnect, device number 16 [ 227.797567][ T9118] loop5: detected capacity change from 0 to 512 [ 227.803549][ T9118] EXT4-fs: Ignoring removed nobh option [ 227.807999][ T9118] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 227.823513][ T9118] EXT4-fs (loop5): 1 truncate cleaned up [ 227.846262][ T9118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.902634][ T9118] EXT4-fs (loop5): resizing filesystem from 256 to 2 blocks [ 227.902684][ T9118] EXT4-fs warning (device loop5): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 228.063371][ T7554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.439180][ T9133] loop0: detected capacity change from 0 to 1024 [ 228.442190][ T5810] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 228.593044][ T5810] usb 5-1: Using ep0 maxpacket: 8 [ 228.595217][ T5810] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 228.596327][ T5810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.596371][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.596394][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.596413][ T5810] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 228.596452][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.599299][ T5810] usb 5-1: config 0 descriptor?? [ 229.043543][ T5810] logitech 0003:046D:C29C.0010: unknown main item tag 0x2 [ 229.043605][ T5810] logitech 0003:046D:C29C.0010: unknown main item tag 0x4 [ 229.043830][ T5810] logitech 0003:046D:C29C.0010: reserved main item tag 0xd [ 229.043863][ T5810] logitech 0003:046D:C29C.0010: unknown main item tag 0x1 [ 229.043887][ T5810] logitech 0003:046D:C29C.0010: unknown main item tag 0x3 [ 229.043910][ T5810] logitech 0003:046D:C29C.0010: unknown main item tag 0x1 [ 229.087153][ T5810] logitech 0003:046D:C29C.0010: hidraw0: USB HID v80.09 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 229.104465][ T9152] loop3: detected capacity change from 0 to 256 [ 229.189877][ T9156] loop5: detected capacity change from 0 to 2048 [ 229.251292][ T9156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.432842][ T59] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 229.447839][ T5810] logitech 0003:046D:C29C.0010: no inputs found [ 229.453760][ T59] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 229.453789][ T59] EXT4-fs (loop5): This should not happen!! Data will be lost [ 229.453789][ T59] [ 229.453802][ T59] EXT4-fs (loop5): Total free blocks count 0 [ 229.453814][ T59] EXT4-fs (loop5): Free/Dirty block details [ 229.453826][ T59] EXT4-fs (loop5): free_blocks=4096 [ 229.453840][ T59] EXT4-fs (loop5): dirty_blocks=32 [ 229.453851][ T59] EXT4-fs (loop5): Block reservation details [ 229.453861][ T59] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 229.455388][ T59] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 229.529161][ T7554] EXT4-fs warning (device loop5): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 229.550970][ T5810] usb 5-1: USB disconnect, device number 17 [ 230.278399][ T9188] input: syz1 as /devices/virtual/input/input21 [ 230.869195][ T9215] loop3: detected capacity change from 0 to 1764 [ 231.307006][ T9228] loop5: detected capacity change from 0 to 8 [ 231.554407][ T9232] loop5: detected capacity change from 0 to 2048 [ 231.619009][ T9232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.619131][ T9232] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.737859][ T9232] fs-verity (loop5, inode 13): Unsupported log_blocksize: 13 [ 231.752929][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 231.910986][ T7554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.943293][ T9245] loop3: detected capacity change from 0 to 128 [ 231.971015][ T9245] FAT-fs (loop3): Directory bread(block 1048) failed [ 231.971078][ T9245] FAT-fs (loop3): Directory bread(block 1049) failed [ 231.971103][ T9245] FAT-fs (loop3): Directory bread(block 1050) failed [ 231.971121][ T9245] FAT-fs (loop3): Directory bread(block 1051) failed [ 231.971141][ T9245] FAT-fs (loop3): Directory bread(block 1052) failed [ 231.971161][ T9245] FAT-fs (loop3): Directory bread(block 1053) failed [ 231.971180][ T9245] FAT-fs (loop3): Directory bread(block 1054) failed [ 231.971199][ T9245] FAT-fs (loop3): Directory bread(block 1055) failed [ 232.004593][ T9245] FAT-fs (loop3): Directory bread(block 1048) failed [ 232.004625][ T9245] FAT-fs (loop3): Directory bread(block 1049) failed [ 232.148531][ T9252] program syz.5.1295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.202219][ T5744] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 232.354575][ T5744] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.355832][ T5744] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.355878][ T5744] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.357505][ T5744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.357546][ T5744] usb 5-1: SerialNumber: syz [ 232.440002][ T9262] loop5: detected capacity change from 0 to 8 [ 232.562367][ T9268] loop3: detected capacity change from 0 to 512 [ 232.692396][ T9268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.692534][ T9268] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.757695][ T9268] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1301: corrupted xattr block 33: invalid checksum [ 232.992746][ T9268] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1301: corrupted xattr block 33: invalid checksum [ 233.054072][ T5744] usb 5-1: USB disconnect, device number 18 [ 233.156450][ T9282] MTRR 1 not used [ 233.323791][ T6326] udevd[6326]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.369391][ T25] kernel read not supported for file /vga_arbiter (pid: 25 comm: kworker/1:0) [ 233.381717][ T9284] loop0: detected capacity change from 0 to 4096 [ 233.397457][ T9284] EXT4-fs (loop0): Test dummy encryption mode enabled [ 233.432285][ T9284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.482208][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.553840][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.670998][ T9295] loop1: detected capacity change from 0 to 256 [ 233.740082][ T9297] loop5: detected capacity change from 0 to 64 [ 233.828885][ T9297] hfs: request for non-existent node 131072 in B*Tree [ 233.828936][ T9297] hfs: request for non-existent node 131072 in B*Tree [ 234.487356][ T9309] loop0: detected capacity change from 0 to 4096 [ 234.493238][ T9309] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 234.538485][ T9309] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 234.538898][ T9309] ntfs3(loop0): Failed to load $Extend (-22). [ 234.538919][ T9309] ntfs3(loop0): Failed to initialize $Extend. [ 234.873479][ T5810] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 235.004989][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 235.005065][ T9331] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1331'. [ 235.031966][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 235.042447][ T5810] usb 6-1: unable to get BOS descriptor or descriptor too short [ 235.042523][ T5810] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.045490][ T5810] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 235.045521][ T5810] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 235.045552][ T5810] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 242, changing to 7 [ 235.045575][ T5810] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 235.049478][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.049505][ T5810] usb 6-1: Product: syz [ 235.049519][ T5810] usb 6-1: Manufacturer: syz [ 235.049532][ T5810] usb 6-1: SerialNumber: syz [ 235.665169][ T5810] usb 6-1: USB disconnect, device number 7 [ 235.928673][ T6326] udevd[6326]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.606600][ T9367] program syz.3.1345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.683817][ T9390] loop5: detected capacity change from 0 to 512 [ 237.720861][ T9390] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.1355: inode has both inline data and extents flags [ 237.720925][ T9390] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 237.721857][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 237.721876][ C0] EXT4-fs (loop5): initial error at time 1786189472: ext4_orphan_get:1403: inode 15 [ 237.721903][ C0] EXT4-fs (loop5): last error at time 1786189472: ext4_orphan_get:1403: inode 15 [ 237.723562][ T9390] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1355: couldn't read orphan inode 15 (err -117) [ 237.723590][ T9390] loop5: lost filesystem error report for type 5 error -117 [ 237.735853][ T9390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.820635][ T9394] loop3: detected capacity change from 0 to 1024 [ 237.905330][ T9394] hfsplus: invalid length 62193 has been corrected to 255 [ 237.917505][ T9394] hfsplus: invalid length 62193 has been corrected to 255 [ 237.926473][ T9394] hfsplus: invalid length 62193 has been corrected to 255 [ 237.934127][ T9394] hfsplus: invalid length 62193 has been corrected to 255 [ 237.943052][ T9394] hfsplus: invalid length 62193 has been corrected to 255 [ 237.957652][ T7554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.995604][ T9394] hfsplus: invalid length 62193 has been corrected to 255 [ 237.995693][ T9394] hfsplus: invalid length 62193 has been corrected to 255 [ 238.300251][ T9404] loop3: detected capacity change from 0 to 64 [ 238.805707][ T5731] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 238.896797][ T9418] netlink: 'syz.1.1366': attribute type 4 has an invalid length. [ 238.916719][ T9421] loop5: detected capacity change from 0 to 1024 [ 238.924994][ T9421] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.966302][ T9421] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 238.966443][ T9421] System zones: 0-1, 3-12 [ 238.980271][ T5731] usb 1-1: Using ep0 maxpacket: 8 [ 238.986385][ T5731] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 238.990190][ T9421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.012015][ T5731] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.012092][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.025702][ T5731] usb 1-1: config 0 descriptor?? [ 239.043424][ T5731] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 239.057938][ T9421] EXT4-fs (loop5): shut down requested (2) [ 239.088703][ T9421] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 239.178381][ T9430] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 239.261171][ T7554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.653160][ T9429] loop1: detected capacity change from 0 to 32768 [ 239.670004][ T9429] (syz.1.1370,9429,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 239.694394][ T9429] (syz.1.1370,9429,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 239.709022][ T9429] (syz.1.1370,9429,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 239.744754][ T9441] loop5: detected capacity change from 0 to 512 [ 239.756695][ T9429] JBD2: Ignoring recovery information on journal [ 239.815454][ T9442] loop4: detected capacity change from 0 to 256 [ 239.851152][ T5731] gspca_vc032x: reg_w err -71 [ 239.851267][ T5731] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 239.858440][ T9429] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 239.877539][ T5731] usb 1-1: USB disconnect, device number 18 [ 239.933355][ T9442] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 240.017303][ T9441] EXT4-fs (loop5): 1 orphan inode deleted [ 240.027623][ T9441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.064187][ T9441] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.070211][ T13] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 240.070404][ T13] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 1 [ 240.280258][ T5615] ocfs2: Unmounting device (7,1) on (node local) [ 240.424074][ T7554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.749152][ T9457] overlayfs: upper fs does not support file handles, falling back to index=off. [ 240.749196][ T9457] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 240.908556][ T9463] loop5: detected capacity change from 0 to 512 [ 240.932274][ T9463] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 241.018320][ T9455] loop3: detected capacity change from 0 to 32768 [ 241.027005][ T9455] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1381 (9455) [ 241.075213][ T9467] loop0: detected capacity change from 0 to 164 [ 241.113404][ T9455] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.124386][ T9455] BTRFS info (device loop3): using crc32c checksum algorithm [ 241.157781][ T9467] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 241.191726][ T9477] Line length is too long: Should be less than 4094 [ 241.305536][ T9455] BTRFS info (device loop3): enabling ssd optimizations [ 241.305592][ T9455] BTRFS info (device loop3): turning on flush-on-commit [ 241.305640][ T9455] BTRFS info (device loop3): enabling free space tree [ 241.305655][ T9455] BTRFS info (device loop3): enabling auto defrag [ 241.305671][ T9455] BTRFS info (device loop3): use lzo compression, level 1 [ 241.305688][ T9455] BTRFS info (device loop3): max_inline set to 4096 [ 241.415938][ T9488] ------------[ cut here ]------------ [ 241.415986][ T9488] err == -EMSGSIZE [ 241.416012][ T9488] WARNING: net/core/rtnetlink.c:4594 at rtmsg_ifinfo_build_skb+0x21c/0x260, CPU#0: syz.0.1390/9488 [ 241.436331][ T9488] Modules linked in: [ 241.440369][ T9488] CPU: 0 UID: 0 PID: 9488 Comm: syz.0.1390 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.451638][ T9488] Tainted: [L]=SOFTLOCKUP [ 241.456281][ T9488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.466454][ T9488] RIP: 0010:rtmsg_ifinfo_build_skb+0x21c/0x260 [ 241.472732][ T9488] Code: f6 ba 01 00 00 00 89 e9 e8 31 ce 3a 00 4c 89 f0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 9b bf 2c 02 cc e8 f5 0c 16 f8 90 <0f> 0b 90 eb 8f 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 8b fe ff ff 4c [ 241.493014][ T9488] RSP: 0018:ffffc900105ee828 EFLAGS: 00010283 [ 241.499129][ T9488] RAX: ffffffff89b1780b RBX: 1ffff1100f5b4821 RCX: 0000000000080000 [ 241.507216][ T9488] RDX: ffffc90003d09000 RSI: 00000000000063b2 RDI: 00000000000063b3 [ 241.516147][ T9488] RBP: 00000000ffffffa6 R08: 0000000000000004 R09: 0000000000000004 [ 241.524553][ T9488] R10: fffff520020bdcac R11: 0000000000000002 R12: 0000000000000000 [ 241.532619][ T9488] R13: 0000000000000000 R14: ffff8880281913c0 R15: ffff88807ada4000 [ 241.540628][ T9488] FS: 00007f1ea722d6c0(0000) GS:ffff888124f0c000(0000) knlGS:0000000000000000 [ 241.549670][ T9488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.556373][ T9488] CR2: 00007fe4b27e919c CR3: 000000007a050000 CR4: 00000000003526f0 [ 241.564559][ T9488] Call Trace: [ 241.567876][ T9488] [ 241.570853][ T9488] rtnetlink_event+0x1b7/0x270 [ 241.575937][ T9488] notifier_call_chain+0x1a5/0x3d0 [ 241.581197][ T9488] netif_disable_lro+0xdd/0x4b0 [ 241.586225][ T9488] ? __pfx_netif_disable_lro+0x10/0x10 [ 241.591882][ T9488] ? neigh_parms_alloc+0x404/0x500 [ 241.597133][ T9488] ? __local_bh_enable_ip+0xd0/0x130 [ 241.602787][ T9488] ? neigh_parms_alloc+0x404/0x500 [ 241.608032][ T9488] ipv6_add_dev+0x479/0x13a0 [ 241.612865][ T9488] addrconf_notify+0x771/0x1050 [ 241.618623][ T9488] notifier_call_chain+0x1a5/0x3d0 [ 241.624066][ T9488] register_netdevice+0x18a4/0x1eb0 [ 241.629330][ T9488] ? __pfx_register_netdevice+0x10/0x10 [ 241.635020][ T9488] macsec_newlink+0x706/0x1200 [ 241.639848][ T9488] ? alloc_netdev_mqs+0xd45/0x12b0 [ 241.645227][ T9488] ? rcu_is_watching+0x15/0xb0 [ 241.650036][ T9488] ? __pfx_macsec_newlink+0x10/0x10 [ 241.655487][ T9488] ? alloc_netdev_mqs+0xd45/0x12b0 [ 241.660725][ T9488] ? __kvmalloc_node_noprof+0x52b/0x820 [ 241.666394][ T9488] ? __kvmalloc_node_noprof+0x343/0x820 [ 241.672141][ T9488] ? alloc_netdev_mqs+0xd45/0x12b0 [ 241.677299][ T9488] ? alloc_netdev_mqs+0xd45/0x12b0 [ 241.682531][ T9488] ? validate_linkmsg+0x765/0x950 [ 241.687622][ T9488] ? rtnl_create_link+0xa04/0xd70 [ 241.692894][ T9488] ? __pfx_macsec_newlink+0x10/0x10 [ 241.698153][ T9488] rtnl_newlink_create+0x305/0x7b0 [ 241.703406][ T9488] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 241.709091][ T9488] ? __pfx___mutex_lock+0x10/0x10 [ 241.714241][ T9488] ? ns_capable+0x89/0xe0 [ 241.719408][ T9488] rtnl_newlink+0x166d/0x1c30 [ 241.724485][ T9488] ? __pfx_rtnl_newlink+0x10/0x10 [ 241.729564][ T9488] ? do_syscall_64+0x166/0x510 [ 241.734679][ T9488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.740917][ T9488] ? kasan_quarantine_put+0xbb/0x1f0 [ 241.746359][ T9488] ? lockdep_hardirqs_on+0x7a/0x110 [ 241.751615][ T9488] ? nlmon_xmit+0xb0/0x100 [ 241.756172][ T9488] ? kmem_cache_free+0x182/0x650 [ 241.761167][ T9488] ? __lock_acquire+0x6df/0x2e50 [ 241.766278][ T9488] ? __dev_queue_xmit+0x29b/0x3820 [ 241.771449][ T9488] ? __local_bh_enable_ip+0xd0/0x130 [ 241.776880][ T9488] ? lockdep_hardirqs_on+0x7a/0x110 [ 241.782185][ T9488] ? __dev_queue_xmit+0x29b/0x3820 [ 241.787343][ T9488] ? __local_bh_enable_ip+0xd0/0x130 [ 241.792854][ T9488] ? __dev_queue_xmit+0x29b/0x3820 [ 241.798030][ T9488] ? lock_acquire+0x115/0x350 [ 241.802845][ T9488] ? __pfx_rtnl_newlink+0x10/0x10 [ 241.808102][ T9488] rtnetlink_rcv_msg+0x802/0xc00 [ 241.814949][ T9488] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 241.820922][ T9488] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 241.826745][ T9488] ? ref_tracker_free+0x689/0x830 [ 241.831882][ T9488] ? __pfx_ref_tracker_free+0x10/0x10 [ 241.837294][ T9488] ? __asan_memcpy+0x40/0x70 [ 241.842042][ T9488] ? __skb_clone+0x5c/0x6c0 [ 241.846598][ T9488] netlink_rcv_skb+0x226/0x4a0 [ 241.851409][ T9488] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 241.857217][ T9488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.862608][ T9488] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.867854][ T9488] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.873217][ T9488] netlink_unicast+0x7bb/0x940 [ 241.878128][ T9488] netlink_sendmsg+0x813/0xb40 [ 241.883037][ T9488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.888381][ T9488] ? lock_acquire+0x115/0x350 [ 241.894446][ T9488] ? aa_sock_msg_perm+0xf1/0x1b0 [ 241.899453][ T9488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.905142][ T9488] sock_sendmsg_nosec+0x13a/0x180 [ 241.910211][ T9488] ____sys_sendmsg+0x54e/0x850 [ 241.915275][ T9488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.921403][ T9488] ? import_iovec+0x73/0xa0 [ 241.926291][ T9488] ___sys_sendmsg+0x2a5/0x360 [ 241.931024][ T9488] ? __lock_acquire+0x6df/0x2e50 [ 241.936197][ T9488] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.941459][ T9488] ? futex_wait+0x2a2/0x390 [ 241.946134][ T9488] ? __fget_files+0x2a/0x420 [ 241.950765][ T9488] ? __fget_files+0x3a2/0x420 [ 241.955584][ T9488] __x64_sys_sendmsg+0x1b1/0x290 [ 241.960572][ T9488] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.966176][ T9488] do_syscall_64+0x166/0x510 [ 241.970815][ T9488] ? trace_irq_disable+0x3b/0x140 [ 241.973595][ T9489] block2mtd: illegal erase size [ 241.981774][ T9488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.989001][ T9488] ? clear_bhb_loop+0x70/0xc0 [ 241.993809][ T9488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.999741][ T9488] RIP: 0033:0x7f1ea639e0d9 [ 242.004370][ T9488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.024976][ T9488] RSP: 002b:00007f1ea722d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.033740][ T9488] RAX: ffffffffffffffda RBX: 00007f1ea6625fa0 RCX: 00007f1ea639e0d9 [ 242.041777][ T9488] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 242.049864][ T9488] RBP: 00007f1ea6435024 R08: 0000000000000000 R09: 0000000000000000 [ 242.058380][ T9488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.067765][ T9488] R13: 00007f1ea6626038 R14: 00007f1ea6625fa0 R15: 00007ffc7a409a58 [ 242.075917][ T9488] [ 242.078978][ T9488] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 242.086293][ T9488] CPU: 0 UID: 0 PID: 9488 Comm: syz.0.1390 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.097166][ T9488] Tainted: [L]=SOFTLOCKUP [ 242.101512][ T9488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.111604][ T9488] Call Trace: [ 242.114909][ T9488] [ 242.117866][ T9488] vpanic+0x56c/0xa60 [ 242.121881][ T9488] ? __pfx__printk+0x10/0x10 [ 242.126495][ T9488] ? __pfx_vpanic+0x10/0x10 [ 242.131030][ T9488] ? is_bpf_text_address+0x292/0x2b0 [ 242.136357][ T9488] ? is_bpf_text_address+0x26/0x2b0 [ 242.141614][ T9488] panic+0xc5/0xd0 [ 242.145374][ T9488] ? __pfx_panic+0x10/0x10 [ 242.149957][ T9488] __warn+0x315/0x4c0 [ 242.153992][ T9488] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 242.159703][ T9488] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 242.165285][ T9488] __report_bug+0x276/0x570 [ 242.169812][ T9488] ? do_syscall_64+0x166/0x510 [ 242.174603][ T9488] ? 0xffffffff81000000 [ 242.178877][ T9488] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 242.184470][ T9488] ? __pfx___report_bug+0x10/0x10 [ 242.189557][ T9488] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 242.195143][ T9488] report_bug+0x16a/0x220 [ 242.199536][ T9488] ? rtmsg_ifinfo_build_skb+0x21c/0x260 [ 242.205123][ T9488] ? rtmsg_ifinfo_build_skb+0x21e/0x260 [ 242.210750][ T9488] handle_bug+0x9c/0x200 [ 242.215042][ T9488] exc_invalid_op+0x1a/0x50 [ 242.219606][ T9488] asm_exc_invalid_op+0x1a/0x20 [ 242.224594][ T9488] RIP: 0010:rtmsg_ifinfo_build_skb+0x21c/0x260 [ 242.230800][ T9488] Code: f6 ba 01 00 00 00 89 e9 e8 31 ce 3a 00 4c 89 f0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 9b bf 2c 02 cc e8 f5 0c 16 f8 90 <0f> 0b 90 eb 8f 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 8b fe ff ff 4c [ 242.251319][ T9488] RSP: 0018:ffffc900105ee828 EFLAGS: 00010283 [ 242.257443][ T9488] RAX: ffffffff89b1780b RBX: 1ffff1100f5b4821 RCX: 0000000000080000 [ 242.265701][ T9488] RDX: ffffc90003d09000 RSI: 00000000000063b2 RDI: 00000000000063b3 [ 242.273714][ T9488] RBP: 00000000ffffffa6 R08: 0000000000000004 R09: 0000000000000004 [ 242.281723][ T9488] R10: fffff520020bdcac R11: 0000000000000002 R12: 0000000000000000 [ 242.289717][ T9488] R13: 0000000000000000 R14: ffff8880281913c0 R15: ffff88807ada4000 [ 242.297727][ T9488] ? rtmsg_ifinfo_build_skb+0x21b/0x260 [ 242.303511][ T9488] ? rtmsg_ifinfo_build_skb+0x21b/0x260 [ 242.309110][ T9488] rtnetlink_event+0x1b7/0x270 [ 242.313922][ T9488] notifier_call_chain+0x1a5/0x3d0 [ 242.319092][ T9488] netif_disable_lro+0xdd/0x4b0 [ 242.324024][ T9488] ? __pfx_netif_disable_lro+0x10/0x10 [ 242.329529][ T9488] ? neigh_parms_alloc+0x404/0x500 [ 242.334710][ T9488] ? __local_bh_enable_ip+0xd0/0x130 [ 242.340053][ T9488] ? neigh_parms_alloc+0x404/0x500 [ 242.345305][ T9488] ipv6_add_dev+0x479/0x13a0 [ 242.350044][ T9488] addrconf_notify+0x771/0x1050 [ 242.355042][ T9488] notifier_call_chain+0x1a5/0x3d0 [ 242.360302][ T9488] register_netdevice+0x18a4/0x1eb0 [ 242.365579][ T9488] ? __pfx_register_netdevice+0x10/0x10 [ 242.371281][ T9488] macsec_newlink+0x706/0x1200 [ 242.376107][ T9488] ? alloc_netdev_mqs+0xd45/0x12b0 [ 242.381293][ T9488] ? rcu_is_watching+0x15/0xb0 [ 242.386098][ T9488] ? __pfx_macsec_newlink+0x10/0x10 [ 242.391343][ T9488] ? alloc_netdev_mqs+0xd45/0x12b0 [ 242.396517][ T9488] ? __kvmalloc_node_noprof+0x52b/0x820 [ 242.402113][ T9488] ? __kvmalloc_node_noprof+0x343/0x820 [ 242.407930][ T9488] ? alloc_netdev_mqs+0xd45/0x12b0 [ 242.413087][ T9488] ? alloc_netdev_mqs+0xd45/0x12b0 [ 242.418232][ T9488] ? validate_linkmsg+0x765/0x950 [ 242.423286][ T9488] ? rtnl_create_link+0xa04/0xd70 [ 242.428417][ T9488] ? __pfx_macsec_newlink+0x10/0x10 [ 242.433639][ T9488] rtnl_newlink_create+0x305/0x7b0 [ 242.438764][ T9488] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 242.444412][ T9488] ? __pfx___mutex_lock+0x10/0x10 [ 242.449470][ T9488] ? ns_capable+0x89/0xe0 [ 242.453901][ T9488] rtnl_newlink+0x166d/0x1c30 [ 242.458695][ T9488] ? __pfx_rtnl_newlink+0x10/0x10 [ 242.463728][ T9488] ? do_syscall_64+0x166/0x510 [ 242.468505][ T9488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.474612][ T9488] ? kasan_quarantine_put+0xbb/0x1f0 [ 242.480022][ T9488] ? lockdep_hardirqs_on+0x7a/0x110 [ 242.485260][ T9488] ? nlmon_xmit+0xb0/0x100 [ 242.489694][ T9488] ? kmem_cache_free+0x182/0x650 [ 242.494738][ T9488] ? __lock_acquire+0x6df/0x2e50 [ 242.499699][ T9488] ? __dev_queue_xmit+0x29b/0x3820 [ 242.504832][ T9488] ? __local_bh_enable_ip+0xd0/0x130 [ 242.510127][ T9488] ? lockdep_hardirqs_on+0x7a/0x110 [ 242.515334][ T9488] ? __dev_queue_xmit+0x29b/0x3820 [ 242.520449][ T9488] ? __local_bh_enable_ip+0xd0/0x130 [ 242.525742][ T9488] ? __dev_queue_xmit+0x29b/0x3820 [ 242.530866][ T9488] ? lock_acquire+0x115/0x350 [ 242.535578][ T9488] ? __pfx_rtnl_newlink+0x10/0x10 [ 242.540637][ T9488] rtnetlink_rcv_msg+0x802/0xc00 [ 242.545620][ T9488] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 242.550838][ T9488] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 242.556308][ T9488] ? ref_tracker_free+0x689/0x830 [ 242.561347][ T9488] ? __pfx_ref_tracker_free+0x10/0x10 [ 242.566900][ T9488] ? __asan_memcpy+0x40/0x70 [ 242.571503][ T9488] ? __skb_clone+0x5c/0x6c0 [ 242.576019][ T9488] netlink_rcv_skb+0x226/0x4a0 [ 242.580815][ T9488] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 242.586340][ T9488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.591690][ T9488] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.596908][ T9488] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.602133][ T9488] netlink_unicast+0x7bb/0x940 [ 242.606928][ T9488] netlink_sendmsg+0x813/0xb40 [ 242.611703][ T9488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.617003][ T9488] ? lock_acquire+0x115/0x350 [ 242.621743][ T9488] ? aa_sock_msg_perm+0xf1/0x1b0 [ 242.626765][ T9488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.632170][ T9488] sock_sendmsg_nosec+0x13a/0x180 [ 242.637237][ T9488] ____sys_sendmsg+0x54e/0x850 [ 242.642027][ T9488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.647339][ T9488] ? import_iovec+0x73/0xa0 [ 242.651874][ T9488] ___sys_sendmsg+0x2a5/0x360 [ 242.656568][ T9488] ? __lock_acquire+0x6df/0x2e50 [ 242.661522][ T9488] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.666727][ T9488] ? futex_wait+0x2a2/0x390 [ 242.671263][ T9488] ? __fget_files+0x2a/0x420 [ 242.675869][ T9488] ? __fget_files+0x3a2/0x420 [ 242.680594][ T9488] __x64_sys_sendmsg+0x1b1/0x290 [ 242.685602][ T9488] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.691110][ T9488] do_syscall_64+0x166/0x510 [ 242.695738][ T9488] ? trace_irq_disable+0x3b/0x140 [ 242.700784][ T9488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.707039][ T9488] ? clear_bhb_loop+0x70/0xc0 [ 242.711729][ T9488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.717711][ T9488] RIP: 0033:0x7f1ea639e0d9 [ 242.722147][ T9488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.741902][ T9488] RSP: 002b:00007f1ea722d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.750352][ T9488] RAX: ffffffffffffffda RBX: 00007f1ea6625fa0 RCX: 00007f1ea639e0d9 [ 242.758339][ T9488] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 242.766314][ T9488] RBP: 00007f1ea6435024 R08: 0000000000000000 R09: 0000000000000000 [ 242.774302][ T9488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.782303][ T9488] R13: 00007f1ea6626038 R14: 00007f1ea6625fa0 R15: 00007ffc7a409a58 [ 242.790303][ T9488] [ 242.793465][ T9488] Kernel Offset: disabled [ 242.797808][ T9488] Rebooting in 86400 seconds..