last executing test programs: 2m44.841819994s ago: executing program 2 (id=4961): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x4000) 2m44.504467709s ago: executing program 2 (id=4969): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) read$msr(r0, 0x0, 0x0) 2m44.268916789s ago: executing program 2 (id=4971): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x20, 0x0, 0xc, 0x0, 0x0, 0xfffffffc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd29, 0x3500}, @sadb_sa={0x2, 0x1, 0x0, 0x60}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x60}}, 0x0) 2m43.703179975s ago: executing program 2 (id=4976): pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x11, 0x1000000000000) 2m43.481913127s ago: executing program 2 (id=4980): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0x1, 0x200, &(0x7f0000006140)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m42.25218354s ago: executing program 2 (id=4997): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x1c, 0x37, 0x1, 0x70bd29, 0x25dfdbfd, {0x2, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x4000) 2m26.1013953s ago: executing program 32 (id=4997): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x1c, 0x37, 0x1, 0x70bd29, 0x25dfdbfd, {0x2, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x4000) 5.128395704s ago: executing program 4 (id=7251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 4.777001143s ago: executing program 4 (id=7252): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x1, 0x34325258, 0x1, @stepwise={0x8, 0x8, 0x8, 0x5, 0x23, 0xda8}}) 4.451189595s ago: executing program 4 (id=7254): r0 = syz_open_dev$video(&(0x7f0000000300), 0x6, 0x149103) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@multiplanar_mmap={0x7, 0x9, 0x4, 0x0, 0x3, {}, {0x3, 0xa, 0xff, 0x4, 0x5, 0x0, "9f158fcb"}, 0x3, 0x1, {&(0x7f0000000700)=[{0x5, 0x1df8, {0x5}}, {0x1, 0x9, {0x6}, 0x1}]}, 0x3}) 4.200694021s ago: executing program 4 (id=7257): r0 = syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000005600)='./file0\x00', 0x1, &(0x7f0000000000), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80809440, &(0x7f0000000180)) 3.327327079s ago: executing program 3 (id=7270): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f00000001c0)) 3.182169356s ago: executing program 5 (id=7272): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) 3.011218295s ago: executing program 3 (id=7275): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) 2.935667358s ago: executing program 5 (id=7277): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x8b, 0x2bb, &(0x7f00000009c0)="$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") unlink(&(0x7f00000002c0)='./file1\x00') 2.759118777s ago: executing program 3 (id=7280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x10, 0x0, &(0x7f0000000580)="2b2043b397737ea4eb59ef3a97aa4399", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.612958767s ago: executing program 6 (id=7282): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000640)=@mmap={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8bf6adb3"}}) 2.503454412s ago: executing program 5 (id=7284): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x61d0, &(0x7f000000cb40)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 2.37566773s ago: executing program 6 (id=7285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008420000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r0, 0x6c}, 0x38) 2.232834405s ago: executing program 3 (id=7287): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) 2.162340667s ago: executing program 6 (id=7289): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0xfffffffe, 0x0, 0x0) 2.025058557s ago: executing program 6 (id=7290): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c34, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x30314752}}) 1.925127194s ago: executing program 4 (id=7292): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x4) 1.82244195s ago: executing program 0 (id=7293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400030400000000000000542d"], 0x44}}, 0x0) 1.821744828s ago: executing program 3 (id=7294): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xc1, 0x66, 0xa0, 0x10, 0x483, 0x1234, 0xff76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0xe4, 0xa8}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, 0x0, 0x0, 0x0}, 0x0) 1.751123114s ago: executing program 6 (id=7295): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0xff, 0x4}, {0x6, 0x24, 0x1a, 0xc, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0x9f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xb, 0x3, 0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403"], 0x0) 1.551445723s ago: executing program 0 (id=7297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb4}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x62}]}}}]}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) 1.53177573s ago: executing program 1 (id=7298): r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000000340)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 1.393876738s ago: executing program 4 (id=7299): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb, 0x52, 0x97, 0x8, 0xe41, 0x4142, 0xd46e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x21, 0xf7, 0x68, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x1, 0xff, 0x7}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.35047673s ago: executing program 1 (id=7300): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x1f00, 0x80, 0x0, 'queue0\x00'}) 1.245560714s ago: executing program 0 (id=7301): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000280)=@v={0x93, 0xe, 0x90, 0xe, @generic=0xc, 0x0, 0x8}) 1.012032032s ago: executing program 1 (id=7302): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0xa18c14, &(0x7f0000000840)={[{@utf8}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@utf8no}, {@numtail}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 964.305653ms ago: executing program 0 (id=7303): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)={0x0, 0x1, 0xffffffff}) 613.760756ms ago: executing program 0 (id=7304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x800) 540.032822ms ago: executing program 1 (id=7305): r0 = fsopen(&(0x7f0000000380)='afs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='sched_switch\x00', &(0x7f0000000400)='sched_switch\x00', 0x0) 539.049272ms ago: executing program 5 (id=7306): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 315.841738ms ago: executing program 0 (id=7307): syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000) 315.204293ms ago: executing program 1 (id=7308): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001a00010029bd700000000000022020050003000000000000080002000a"], 0x34}}, 0x0) 181.164549ms ago: executing program 5 (id=7309): r0 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x0, 0x3c48, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 87.128849ms ago: executing program 5 (id=7310): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 56.583306ms ago: executing program 1 (id=7311): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000400)='./file0\x00', 0x2000002, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@mode={'mode', 0x3d, 0x8}}, {@gid}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@gid}, {@uid}, {@nostrict}, {@anchor={'anchor', 0x3d, 0xf87a}}, {@umask={'umask', 0x3d, 0x70f0}}]}, 0x1, 0xc46, &(0x7f0000000580)="$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") chown(&(0x7f0000000100)='./file2\x00', 0x0, 0x0) 35.084627ms ago: executing program 6 (id=7312): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x5, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0xf001, 0xff, 0x7, 0xfff}, {0x3, 0x1, 0x0, 0xa}, {0xd, 0x5, 0x0, 0x4}, {0x6, 0x1, 0x0, 0x2}]}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d0000000109021200010000000009"], 0x0) 0s ago: executing program 3 (id=7313): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='ns\x00') getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) kernel console output (not intermixed with test programs): LID (0x2) [ 642.392326][ T30] audit: type=1326 audit(1747945974.266:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18628 comm="syz.3.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de98e969 code=0x7ffc0000 [ 642.467117][ T30] audit: type=1326 audit(1747945974.294:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18628 comm="syz.3.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fb4de98e969 code=0x7ffc0000 [ 642.538774][ T30] audit: type=1326 audit(1747945974.294:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18628 comm="syz.3.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de98e969 code=0x7ffc0000 [ 642.585958][ T30] audit: type=1326 audit(1747945974.294:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18628 comm="syz.3.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de98e969 code=0x7ffc0000 [ 642.797564][ T5859] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 643.191502][T18588] bcachefs (baafa011-d992-4344-aaf9-4ff0e0bec0ff): Using encoding defined by superblock: utf8-12.1.0 [ 643.228142][ T5843] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 643.461668][T18588] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=/dev/loop1,erasure_code,noinodes_use_key_cache,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names [ 643.461668][T18588] allowing incompatible features above 0.0: (unknown version) [ 643.595210][T18588] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 643.663332][T18588] bcachefs (loop1): Version upgrade required: [ 643.663332][T18588] Version upgrade from 0.32: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 643.663332][T18588] Doing incompatible version upgrade from 0.32: (unknown version) to 1.25: extent_flags [ 643.663332][T18588] running recovery passes: check_allocations,check_extents_to_backpointers,check_snapshots,check_subvols,check_inodes,check_dirents,set_fs_needs_rebalance [ 643.902868][T18588] bcachefs (loop1): accounting_read... done [ 643.959639][T18588] bcachefs (loop1): alloc_read... done [ 644.009176][T18588] bcachefs (loop1): snapshots_read... done [ 644.034095][T18588] bcachefs (loop1): done starting filesystem [ 644.069495][T18668] loop0: detected capacity change from 0 to 64 [ 644.109281][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 644.115758][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 644.138187][T18631] loop6: detected capacity change from 0 to 32768 [ 644.165726][T18668] hfs: unable to locate alternate MDB [ 644.168197][T18631] XFS: ikeep mount option is deprecated. [ 644.189591][T18631] XFS: noikeep mount option is deprecated. [ 644.200150][T18668] hfs: continuing without an alternate MDB [ 644.242696][ T30] audit: type=1326 audit(1747945975.978:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18669 comm="syz.5.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9258e969 code=0x7ffc0000 [ 644.298706][T18668] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 644.351550][T18631] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 644.391596][ T5840] bcachefs (loop1): shutting down [ 644.431069][ T30] audit: type=1326 audit(1747945975.978:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18669 comm="syz.5.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9258e969 code=0x7ffc0000 [ 644.553047][ T30] audit: type=1326 audit(1747945975.978:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18669 comm="syz.5.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9f9258e969 code=0x7ffc0000 [ 644.577898][ T30] audit: type=1326 audit(1747945975.978:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18669 comm="syz.5.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9258e969 code=0x7ffc0000 [ 644.663804][ T5840] bcachefs (loop1): shutdown complete [ 644.695379][T18631] XFS (loop6): Ending clean mount [ 644.752259][T18631] XFS (loop6): Quotacheck needed: Please wait. [ 644.798857][ T9] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 644.875921][T18631] XFS (loop6): Quotacheck: Done. [ 645.023466][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 645.048692][T17876] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 645.052365][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 645.101293][ T9] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.162781][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 645.196064][ T9] usb 5-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40 [ 645.257678][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.299961][ T9] usb 5-1: Product: syz [ 645.309649][ T9] usb 5-1: Manufacturer: syz [ 645.333415][ T9] usb 5-1: SerialNumber: syz [ 645.386481][T18696] loop3: detected capacity change from 0 to 1024 [ 645.495807][T18696] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=56c018, mo2=0002] [ 645.582308][T18696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.830460][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.853624][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 645.880551][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 645.887009][T18724] netlink: 'syz.0.5622': attribute type 1 has an invalid length. [ 645.896203][T18724] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5622'. [ 645.920149][T18726] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 645.946803][ T9] usb 5-1: USB disconnect, device number 92 [ 646.100114][T18735] loop6: detected capacity change from 0 to 256 [ 646.126888][T18737] loop3: detected capacity change from 0 to 256 [ 646.152903][T18737] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 646.198719][T18735] FAT-fs (loop6): Directory bread(block 64) failed [ 646.215886][T18737] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 646.239167][T18735] FAT-fs (loop6): Directory bread(block 65) failed [ 646.265775][T18735] FAT-fs (loop6): Directory bread(block 66) failed [ 646.272313][T18735] FAT-fs (loop6): Directory bread(block 67) failed [ 646.317239][T18735] FAT-fs (loop6): Directory bread(block 68) failed [ 646.336542][T18737] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 646.339223][T18735] FAT-fs (loop6): Directory bread(block 69) failed [ 646.404461][T18735] FAT-fs (loop6): Directory bread(block 70) failed [ 646.411012][T18735] FAT-fs (loop6): Directory bread(block 71) failed [ 646.478675][T18735] FAT-fs (loop6): Directory bread(block 72) failed [ 646.485234][T18735] FAT-fs (loop6): Directory bread(block 73) failed [ 646.886591][T18769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.367443][T18797] vlan0: entered promiscuous mode [ 648.007432][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5652'. [ 648.028825][T18832] loop3: detected capacity change from 0 to 64 [ 648.078296][T18834] loop4: detected capacity change from 0 to 256 [ 648.394534][T18794] loop0: detected capacity change from 0 to 32768 [ 648.404604][T18844] loop1: detected capacity change from 0 to 1764 [ 648.448957][T18794] (syz.0.5641,18794,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 648.478443][T18844] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 648.494028][T18794] (syz.0.5641,18794,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 648.536613][T18794] JBD2: Ignoring recovery information on journal [ 648.688809][ T30] audit: type=1326 audit(1747945980.149:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.3.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de98e969 code=0x7ffc0000 [ 648.752076][T18794] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 648.835650][ T30] audit: type=1326 audit(1747945980.149:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.3.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de98e969 code=0x7ffc0000 [ 648.926020][T18876] loop6: detected capacity change from 0 to 8 [ 648.955911][ T30] audit: type=1326 audit(1747945980.149:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.3.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fb4de98e969 code=0x7ffc0000 [ 649.061955][ T30] audit: type=1326 audit(1747945980.149:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.3.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de98e969 code=0x7ffc0000 [ 649.085820][T18876] SQUASHFS error: Failed to read block 0x1ec: -5 [ 649.119786][T18876] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 649.193240][ T30] audit: type=1326 audit(1747945980.149:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18866 comm="syz.3.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de98e969 code=0x7ffc0000 [ 649.211267][ T5842] ocfs2: Unmounting device (7,0) on (node local) [ 649.393839][ T30] audit: type=1326 audit(1747945980.813:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 649.448855][T18906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5670'. [ 649.511979][ T30] audit: type=1326 audit(1747945980.813:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 649.612008][ T30] audit: type=1326 audit(1747945980.841:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 649.734271][ T30] audit: type=1326 audit(1747945980.850:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 649.767425][T18920] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.5673'. [ 649.845514][ T30] audit: type=1326 audit(1747945980.850:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18893 comm="syz.1.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 650.208431][T18942] loop4: detected capacity change from 0 to 1024 [ 650.498692][ T36] hfsplus: b-tree write err: -5, ino 4 [ 650.629485][T18973] netlink: 'syz.6.5693': attribute type 2 has an invalid length. [ 650.674848][T18973] netlink: 244 bytes leftover after parsing attributes in process `syz.6.5693'. [ 651.775476][T19029] loop5: detected capacity change from 0 to 1024 [ 651.791467][T18961] loop3: detected capacity change from 0 to 32768 [ 651.806858][T18961] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5688 (18961) [ 651.874189][T18961] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 651.920189][T18961] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 651.963279][T18961] BTRFS info (device loop3): using free-space-tree [ 651.991659][ T36] hfsplus: b-tree write err: -5, ino 4 [ 652.271530][T18961] BTRFS info (device loop3): rebuilding free space tree [ 652.283628][T19070] netlink: 'syz.5.5713': attribute type 10 has an invalid length. [ 652.293936][T19070] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5713'. [ 652.341220][T19070] team0: Port device geneve0 added [ 652.496148][T18993] loop6: detected capacity change from 0 to 32768 [ 652.544622][T18993] bcachefs (/dev/loop6): error reading default superblock: checksum error, type none: got should be [ 652.606594][T18993] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section replicas_v0: invalid device 254 in entry user: 1/1 [254] [ 652.606594][T18993] replicas_v0 (size 24): [ 652.606594][T18993] btree: 1 [0] journal: 1 [0] user: 1 [254] (unknown data_type 255): 255 [255 255 255 255 255 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 249 0 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 179 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 0 0 0 0 0 0 0 0 2 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 16 0 0 0 0 0 0 0 4 1 1 0 0 0 0 0 33 0 0 0 8 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 83 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 25 0] [ 652.606594][T18993] [ 652.735511][ T5844] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 652.798844][T18993] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry [ 652.952633][T19094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.687657][T19132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5734'. [ 653.701492][T19133] ubi31: attaching mtd0 [ 653.752099][T19133] ubi31: scanning is finished [ 653.756821][T19133] ubi31: empty MTD device detected [ 653.861391][T19144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5738'. [ 654.104106][T19133] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 654.154553][T19133] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 654.197561][T19133] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 654.216046][T19133] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 654.250564][T19133] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 654.257517][T19133] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 654.315102][T19133] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3790974715 [ 654.378984][T19133] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 654.515846][T19152] ubi31: background thread "ubi_bgt31d" started, PID 19152 [ 655.031077][ T5845] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 655.107473][T19203] loop4: detected capacity change from 0 to 64 [ 655.254180][T19208] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5758'. [ 655.258112][T19209] loop5: detected capacity change from 0 to 64 [ 655.287338][ T5845] usb 7-1: Using ep0 maxpacket: 16 [ 655.325040][ T5845] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 655.341364][T19212] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5759'. [ 655.363536][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.420070][ T5845] usb 7-1: Product: syz [ 655.448028][ T5845] usb 7-1: Manufacturer: syz [ 655.452685][ T5845] usb 7-1: SerialNumber: syz [ 655.555124][ T5845] r8152-cfgselector 7-1: Unknown version 0x0000 [ 655.598963][ T5845] r8152-cfgselector 7-1: config 0 descriptor?? [ 655.880644][T19227] loop3: detected capacity change from 0 to 4096 [ 655.973498][ T30] audit: type=1326 audit(1747945986.967:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19248 comm="syz.5.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9258e969 code=0x7ffc0000 [ 656.015908][T19227] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 656.049893][ T30] audit: type=1326 audit(1747945986.995:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19248 comm="syz.5.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9258e969 code=0x7ffc0000 [ 656.066065][ T5845] r8152-cfgselector 7-1: USB disconnect, device number 2 [ 656.168640][T19259] loop4: detected capacity change from 0 to 256 [ 656.186813][ T30] audit: type=1326 audit(1747945987.005:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19248 comm="syz.5.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f9f9258e969 code=0x7ffc0000 [ 656.307302][ T30] audit: type=1326 audit(1747945987.005:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19248 comm="syz.5.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9258e969 code=0x7ffc0000 [ 656.337973][T19259] FAT-fs (loop4): Directory bread(block 64) failed [ 656.344585][T19259] FAT-fs (loop4): Directory bread(block 65) failed [ 656.431099][T19259] FAT-fs (loop4): Directory bread(block 66) failed [ 656.464896][ T30] audit: type=1326 audit(1747945987.005:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19248 comm="syz.5.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9258e969 code=0x7ffc0000 [ 656.474489][T19259] FAT-fs (loop4): Directory bread(block 67) failed [ 656.532672][T19259] FAT-fs (loop4): Directory bread(block 68) failed [ 656.562089][T19282] loop5: detected capacity change from 0 to 64 [ 656.572695][T19259] FAT-fs (loop4): Directory bread(block 69) failed [ 656.608751][T19259] FAT-fs (loop4): Directory bread(block 70) failed [ 656.638422][T19259] FAT-fs (loop4): Directory bread(block 71) failed [ 656.659726][T19259] FAT-fs (loop4): Directory bread(block 72) failed [ 656.666292][T19259] FAT-fs (loop4): Directory bread(block 73) failed [ 656.763218][ T970] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 656.857001][T19294] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 656.945730][ T970] usb 4-1: Using ep0 maxpacket: 32 [ 656.964238][ T970] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 656.996502][ T970] usb 4-1: config 0 has no interface number 0 [ 657.026130][T19302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5783'. [ 657.067998][ T970] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 657.090500][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.125631][ T970] usb 4-1: Product: syz [ 657.143365][ T970] usb 4-1: Manufacturer: syz [ 657.180107][ T970] usb 4-1: SerialNumber: syz [ 657.212249][ T970] usb 4-1: config 0 descriptor?? [ 657.371134][ T30] audit: type=1326 audit(1747945988.267:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.1.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 657.443438][ T30] audit: type=1326 audit(1747945988.314:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.1.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 657.467906][ T970] radio-si470x 4-1:0.35: this is not a si470x device. [ 657.565051][ T30] audit: type=1326 audit(1747945988.323:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.1.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 657.678369][ T30] audit: type=1326 audit(1747945988.323:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.1.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 657.689573][ T970] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 657.791636][ T30] audit: type=1326 audit(1747945988.323:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19323 comm="syz.1.5788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 657.834928][ T970] usb 4-1: USB disconnect, device number 97 [ 657.861213][T19348] netlink: 'syz.4.5795': attribute type 7 has an invalid length. [ 658.602688][T19310] loop6: detected capacity change from 0 to 32768 [ 658.616256][T19386] loop1: detected capacity change from 0 to 256 [ 658.695496][T19310] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section members_v2: section too small (11928 > 152) [ 658.695496][T19310] members_v2 (size 152): [ 658.695496][T19310] Device: 0 [ 658.695496][T19310] Label: (none) [ 658.695496][T19310] UUID: 7af6772b-00de-4159-84cd-1faead05aceb [ 658.695496][T19310] Size: 16777216 [ 658.695496][T19310] read errors: 0 [ 658.695496][T19310] write errors: 0 [ 658.695496][T19310] checksum errors: 0 [ 658.695496][T19310] seqread iops: 0 [ 658.695496][T19310] seqwrite iops: 0 [ 658.695496][T19310] randread iops: 0 [ 658.695496][T19310] randwrite iops: 0 [ 658.695496][T19310] Bucket size: 131072 [ 658.695496][T19310] First bucket: 0 [ 658.695496][T19310] Buckets: 128 [ 658.695496][T19310] Last mount: 1714681267 [ 658.695496][T19310] Last superblock write: 42 [ 658.695496][T19310] State: rw [ 658.695496][T19310] Data allowed: journal,btree,user [ 658.695496][T19310] Has data: journal,btree,user [ 658.695496][T19310] Btree allocated bitmap blocksize:256 [ 658.695496][T19310] Btree allocated bitmap: 0000000000000000000001000010000010011000000000000000000000000000 [ 658.695496][T19310] Durability: [ 658.695733][T19310] bcachefs: bch2_fs_get_tree() error: invalid_sb_members [ 658.878950][T19379] loop0: detected capacity change from 0 to 4096 [ 658.916570][T19382] loop5: detected capacity change from 0 to 4096 [ 658.917619][T19379] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 659.573513][T19405] loop1: detected capacity change from 0 to 4096 [ 659.629098][T19405] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 659.799838][T17099] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 660.015364][T17099] usb 4-1: Using ep0 maxpacket: 8 [ 660.057571][T17099] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 660.085458][T17099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.134120][T17099] usb 4-1: Product: syz [ 660.138303][T17099] usb 4-1: Manufacturer: syz [ 660.166214][T17099] usb 4-1: SerialNumber: syz [ 660.207356][T17099] usb 4-1: config 0 descriptor?? [ 660.238321][T17099] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 660.291765][T17099] dvb-usb: bulk message failed: -22 (2/0) [ 660.298514][T17099] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 660.329491][T17099] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 660.371704][T17099] usb 4-1: media controller created [ 660.431263][ T5846] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 660.467030][T17099] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 660.544375][T19478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5828'. [ 660.589710][T17099] dvb-usb: bulk message failed: -22 (1/0) [ 660.609986][T17099] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 660.652635][T17099] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input50 [ 660.665947][ T5846] usb 1-1: Using ep0 maxpacket: 8 [ 660.690752][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 660.718536][T19475] loop4: detected capacity change from 0 to 4096 [ 660.730014][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 660.751704][T17099] dvb-usb: schedule remote query interval to 50 msecs. [ 660.758591][T17099] dvb-usb: bulk message failed: -22 (2/0) [ 660.778908][ T5846] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 660.815812][T19475] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 660.825554][T17099] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 660.836268][T17084] dvb-usb: bulk message failed: -22 (1/0) [ 660.840302][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 660.862525][T17084] dvb-usb: error while querying for an remote control event. [ 660.897432][T17099] usb 4-1: USB disconnect, device number 98 [ 660.905601][T19489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5830'. [ 660.929871][ T5846] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 660.973765][T19475] ntfs3(loop4): ino=1a, mi_enum_attr [ 660.983391][ T5846] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 660.993025][T19475] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 661.015000][T19475] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 661.041459][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.104752][ T5846] usb 1-1: config 0 descriptor?? [ 661.151615][T17099] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 661.154801][T19452] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 661.349754][T19510] loop1: detected capacity change from 0 to 128 [ 661.409570][T19437] loop6: detected capacity change from 0 to 32768 [ 661.490787][T19510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 661.498831][T19510] System zones: 1-3, 19-19, 35-36 [ 661.598332][T19510] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 661.668308][ T5841] Bluetooth: hci7: unexpected event 0x17 length: 43 > 6 [ 661.713674][T19510] ext4 filesystem being mounted at /966/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 661.768590][T19536] loop3: detected capacity change from 0 to 16 [ 661.828342][T19541] netlink: 'syz.5.5837': attribute type 12 has an invalid length. [ 661.858992][T19510] EXT4-fs warning (device loop1): ext4_group_extend:1891: can't read last block, resize aborted [ 661.938924][T17099] usb 1-1: USB disconnect, device number 101 [ 661.948096][ T5848] Bluetooth: hci7: Opcode 0x0c03 failed: -71 [ 662.004055][T19437] bcachefs (baafa011-d992-4344-aaf9-4ff0e0bec0ff): Using encoding defined by superblock: utf8-12.1.0 [ 662.131152][T19559] openvswitch: netlink: Missing key (keys=40, expected=80) [ 662.166693][T19437] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=/dev/loop6,noinodes_use_key_cache,fsck,norecovery,nojournal_transaction_names [ 662.166693][T19437] allowing incompatible features above 0.0: (unknown version) [ 662.227890][T19437] bcachefs (loop6): recovering from clean shutdown, journal seq 13 [ 662.266029][T19437] bcachefs (loop6): Version upgrade required: [ 662.266029][T19437] Version upgrade from 0.32: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 662.266029][T19437] Doing incompatible version upgrade from 0.32: (unknown version) to 1.25: extent_flags [ 662.266029][T19437] running recovery passes: check_allocations,check_extents_to_backpointers,check_snapshots,check_subvols,check_inodes,check_dirents,set_fs_needs_rebalance [ 662.357167][T19566] loop5: detected capacity change from 0 to 256 [ 662.391109][T19566] exfat: Deprecated parameter 'utf8' [ 662.400100][ T5840] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 662.425660][T19566] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xb6d3f729, utbl_chksum : 0xe619d30d) [ 662.491330][T19437] bcachefs (loop6): accounting_read... done [ 662.538880][T19437] bcachefs (loop6): alloc_read... done [ 662.544796][T19437] bcachefs (loop6): snapshots_read... done [ 662.608903][T19437] bcachefs (loop6): done starting filesystem [ 663.008199][T17876] bcachefs (loop6): shutting down [ 663.088215][T17084] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 663.204342][T17876] bcachefs (loop6): shutdown complete [ 663.282937][T19615] loop0: detected capacity change from 0 to 2048 [ 663.316673][T17084] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 663.326410][T17084] usb 5-1: config 0 has no interface number 0 [ 663.383133][T17084] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 663.408505][T17084] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 663.424719][T19615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 663.522384][T17084] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 663.562619][T17084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.584382][T17084] usb 5-1: Product: syz [ 663.595563][T17084] usb 5-1: Manufacturer: syz [ 663.617113][T17084] usb 5-1: SerialNumber: syz [ 663.636850][T17084] usb 5-1: config 0 descriptor?? [ 663.651934][T19585] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 663.661401][T17084] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 663.692546][T17084] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 663.726952][T19641] loop5: detected capacity change from 0 to 16 [ 663.747519][T19641] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 663.900237][T19654] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5865'. [ 664.130591][ T5846] usb 5-1: USB disconnect, device number 93 [ 664.211340][ T5846] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 664.266218][ T5846] cyberjack 5-1:0.69: device disconnected [ 664.388169][T19665] loop5: detected capacity change from 0 to 4096 [ 664.427448][T19665] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 664.546416][T19665] ntfs3(loop5): ino=19, mi_enum_attr [ 664.556739][T19665] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 664.600653][T19665] ntfs3(loop5): failed to convert "c46c" to macinuit [ 664.618916][T19665] ntfs3(loop5): ino=20, mi_enum_attr [ 664.787367][T19700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5876'. [ 665.829782][T19754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.154632][T19711] loop4: detected capacity change from 0 to 32768 [ 666.183127][T19774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5898'. [ 666.233272][T19711] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 666.314788][ T970] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 666.485484][ T5859] ocfs2: Unmounting device (7,4) on (node local) [ 666.503550][ T970] usb 1-1: Using ep0 maxpacket: 8 [ 666.539062][ T970] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 666.556942][ T970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.576656][T19791] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5901'. [ 666.578227][ T970] usb 1-1: config 0 has no interface number 0 [ 666.607078][ T970] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 666.616579][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.663932][ T970] usb 1-1: Product: syz [ 666.668147][ T970] usb 1-1: Manufacturer: syz [ 666.701360][ T970] usb 1-1: SerialNumber: syz [ 666.764132][ T970] usb 1-1: config 0 descriptor?? [ 667.036382][ T970] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 667.059524][ T970] usb 1-1: No valid video chain found. [ 667.166515][T19826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5911'. [ 667.275441][T17099] usb 1-1: USB disconnect, device number 102 [ 667.436945][T19839] loop5: detected capacity change from 0 to 2048 [ 667.509452][T19839] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 667.537801][T19839] NILFS (loop5): mounting unchecked fs [ 667.574090][T19839] NILFS (loop5): recovery required for readonly filesystem [ 667.592274][T19839] NILFS (loop5): write access will be enabled during recovery [ 667.617059][ T5863] udevd[5863]: incorrect nilfs2 checksum on /dev/loop5 [ 667.659236][T19839] NILFS (loop5): norecovery option specified, skipping roll-forward recovery [ 667.732101][T19839] NILFS (loop5): couldn't remount because the filesystem is in an incomplete recovery state [ 667.822042][ T6888] udevd[6888]: incorrect nilfs2 checksum on /dev/loop5 [ 668.083117][T19872] loop0: detected capacity change from 0 to 164 [ 668.133593][T19872] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 668.578041][T19899] loop3: detected capacity change from 0 to 256 [ 668.646435][T19901] loop1: detected capacity change from 0 to 1764 [ 668.700535][T19843] loop6: detected capacity change from 0 to 32768 [ 668.747435][T19843] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5915 (19843) [ 668.783803][T19901] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 668.847941][T19843] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 668.907474][T19843] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 668.946509][T19843] BTRFS info (device loop6): disk space caching is enabled [ 669.011987][T19843] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 669.359314][T19948] mmap: syz.0.5941 (19948): VmData 37466112 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 669.406665][T19843] BTRFS info (device loop6): rebuilding free space tree [ 669.432325][T19953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5943'. [ 669.479270][T19953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5943'. [ 669.487151][T19843] BTRFS info (device loop6): disabling free space tree [ 669.518801][T19957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5942'. [ 669.538815][T19843] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 669.571659][T19843] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 669.841527][T19969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5948'. [ 669.854317][T19967] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 669.883722][T17876] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 669.914593][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5948'. [ 670.686443][T20012] loop4: detected capacity change from 0 to 64 [ 670.786843][T20017] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 671.106041][T20037] netlink: 'syz.3.5970': attribute type 2 has an invalid length. [ 671.401069][T20038] loop1: detected capacity change from 0 to 4096 [ 671.434806][T20038] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 671.830581][T20076] netlink: 'syz.5.5982': attribute type 12 has an invalid length. [ 671.892322][T20076] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5982'. [ 672.147608][T20094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 672.251359][T20100] netlink: 308 bytes leftover after parsing attributes in process `syz.5.5991'. [ 672.285696][T20105] loop0: detected capacity change from 0 to 64 [ 672.385277][T20105] Trying to free block not in datazone [ 672.394225][T20105] minix_free_block (loop0:21): bit already cleared [ 672.858555][ T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 672.895671][T20133] loop0: detected capacity change from 0 to 4096 [ 673.002423][T20151] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6003'. [ 673.060698][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 673.079966][ T9] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 673.100403][ T9] usb 2-1: config 0 has no interface number 0 [ 673.108141][ T9] usb 2-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 673.218272][ T9] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 673.241545][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.278883][ T9] usb 2-1: Product: syz [ 673.306313][ T9] usb 2-1: Manufacturer: syz [ 673.345225][ T9] usb 2-1: SerialNumber: syz [ 673.375529][ T9] usb 2-1: config 0 descriptor?? [ 673.399403][T20119] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 673.520715][T20163] loop6: detected capacity change from 0 to 4096 [ 673.595862][T20163] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 673.646350][T20119] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 673.674180][T20163] ntfs3(loop6): ino=19, mi_enum_attr [ 673.691470][T20163] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 673.740782][ T9] net1080 2-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, 0a:e9:2c:97:d5:79 [ 673.801057][T20187] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 673.823187][T20163] ntfs3(loop6): failed to convert "c46c" to cp737 [ 673.864426][T20163] ntfs3(loop6): ino=20, mi_enum_attr [ 673.889957][T17069] usb 2-1: USB disconnect, device number 103 [ 673.915056][T17069] net1080 2-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT [ 673.935512][T20195] netlink: 'syz.4.6014': attribute type 1 has an invalid length. [ 673.955569][T20195] netlink: 'syz.4.6014': attribute type 2 has an invalid length. [ 674.113234][T20202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6015'. [ 674.153267][T20204] netlink: 'syz.5.6016': attribute type 15 has an invalid length. [ 674.519407][T20226] loop4: detected capacity change from 0 to 8 [ 674.568242][T20226] SQUASHFS error: zlib decompression failed, data probably corrupt [ 674.583446][T20155] loop3: detected capacity change from 0 to 32768 [ 674.614560][T20226] SQUASHFS error: Failed to read block 0x9b: -5 [ 674.649265][T20226] SQUASHFS error: Unable to read metadata cache entry [99] [ 674.664197][T20155] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 674.682957][T20226] SQUASHFS error: Unable to read inode 0x127 [ 674.701277][T20237] bridge_slave_1: left allmulticast mode [ 674.710858][T20237] bridge_slave_1: left promiscuous mode [ 674.719022][T20237] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.790502][T17099] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 674.809291][T20237] bridge_slave_0: left allmulticast mode [ 674.815201][T20237] bridge_slave_0: left promiscuous mode [ 674.823611][T20237] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.841512][T20256] x_tables: duplicate underflow at hook 2 [ 674.888870][T20155] XFS (loop3): Ending clean mount [ 675.037731][T17099] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 675.091908][ T5844] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 675.101247][T17099] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 675.142607][T17099] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 675.198575][T17099] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 675.269926][T17099] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.329422][T17099] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 675.389436][T17099] usb 7-1: invalid MIDI out EP 0 [ 675.810900][T17099] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 675.878995][ T6888] udevd[6888]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 675.906603][T17099] usb 7-1: USB disconnect, device number 3 [ 676.556153][T20357] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 676.641033][T20363] loop0: detected capacity change from 0 to 764 [ 676.685480][T20363] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 676.839981][T20370] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 677.577825][T20406] loop4: detected capacity change from 0 to 256 [ 677.964268][T20350] loop3: detected capacity change from 0 to 32768 [ 677.980455][T20360] loop1: detected capacity change from 0 to 40427 [ 678.017559][T20350] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 678.048163][T20436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6073'. [ 678.059853][T20436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6073'. [ 678.069097][T20436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6073'. [ 678.118311][T20360] F2FS-fs (loop1): invalid crc value [ 678.196349][T20446] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6077'. [ 678.200556][T20350] XFS (loop3): Ending clean mount [ 678.205761][T20446] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6077'. [ 678.234942][T20444] netlink: 'syz.6.6075': attribute type 10 has an invalid length. [ 678.272834][T20444] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 678.282572][T20350] XFS (loop3): Quotacheck needed: Please wait. [ 678.371856][T20451] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.6076'. [ 678.392557][T20350] XFS (loop3): Quotacheck: Done. [ 678.578342][T20360] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 678.739287][ T5844] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 679.106792][T20482] loop0: detected capacity change from 0 to 64 [ 679.543506][T20502] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6093'. [ 679.622640][T20502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6093'. [ 680.425737][T20532] loop1: detected capacity change from 0 to 4096 [ 680.480075][T20495] loop6: detected capacity change from 0 to 32768 [ 680.843954][T20495] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 680.918974][T20495] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 680.918974][T20495] allowing incompatible features above 0.0: (unknown version) [ 680.940974][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.023255][T20495] bcachefs (loop6): initializing new filesystem [ 681.068051][T20495] bcachefs (loop6): going read-write [ 681.113642][T20495] bcachefs (loop6): marking superblocks [ 681.145833][T20520] loop4: detected capacity change from 0 to 32768 [ 681.210602][T20520] (syz.4.6096,20520,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 681.211284][T20495] bcachefs (loop6): initializing freespace [ 681.274523][T20495] bcachefs (loop6): done initializing freespace [ 681.278386][T20520] (syz.4.6096,20520,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 681.293999][T20495] bcachefs (loop6): reading snapshots table [ 681.312332][T20495] bcachefs (loop6): reading snapshots done [ 681.314371][T20522] loop3: detected capacity change from 0 to 32768 [ 681.355744][T20522] btrfs: Deprecated parameter 'usebackuproot' [ 681.396950][T20520] JBD2: Ignoring recovery information on journal [ 681.421834][T20522] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 681.442800][T20495] bcachefs (loop6): done starting filesystem [ 681.504778][T20522] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6097 (20522) [ 681.590058][T17099] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 681.611902][T20520] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 681.651435][T20522] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 681.723458][T20522] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 681.745586][T20522] BTRFS info (device loop3): using free-space-tree [ 681.753887][T17876] bcachefs (loop6): shutting down [ 681.759668][T17876] bcachefs (loop6): going read-only [ 681.780819][T17876] bcachefs (loop6): finished waiting for writes to stop [ 681.786268][T17099] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 681.796254][T17099] usb 2-1: config 0 has no interface number 0 [ 681.802367][T17099] usb 2-1: config 0 interface 83 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 681.854118][T17099] usb 2-1: config 0 interface 83 altsetting 6 has a duplicate endpoint with address 0x83, skipping [ 681.887905][T17876] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3 [ 681.896951][T17099] usb 2-1: config 0 interface 83 has no altsetting 0 [ 681.917052][T17099] usb 2-1: New USB device found, idVendor=0557, idProduct=2001, bcdDevice=6d.a7 [ 681.943898][T17099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.953787][T17099] usb 2-1: Product: syz [ 681.958719][T17099] usb 2-1: Manufacturer: syz [ 681.963803][T17099] usb 2-1: SerialNumber: syz [ 681.979051][T17099] usb 2-1: config 0 descriptor?? [ 682.003850][ T1031] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 682.022056][T20541] loop5: detected capacity change from 0 to 40427 [ 682.042183][T20522] BTRFS warning (device loop3): couldn't read tree root [ 682.055993][ T5859] ocfs2: Unmounting device (7,4) on (node local) [ 682.081182][T17876] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3 [ 682.081224][T20522] BTRFS warning (device loop3): try to load backup roots slot 1 [ 682.110327][T20541] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3fffff [ 682.156083][T17876] bcachefs (loop6): clean shutdown complete, journal seq 4 [ 682.190383][ T1031] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 682.221253][T20541] F2FS-fs (loop5): invalid crc value [ 682.252101][T17099] usb 2-1: USB disconnect, device number 104 [ 682.267989][T17876] bcachefs (loop6): marking filesystem clean [ 682.280605][T20522] BTRFS warning (device loop3): couldn't read tree root [ 682.295570][T20522] BTRFS warning (device loop3): try to load backup roots slot 2 [ 682.352504][ T1031] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 682.437874][T20522] BTRFS warning (device loop3): couldn't read tree root [ 682.456062][T20522] BTRFS warning (device loop3): try to load backup roots slot 3 [ 682.530307][T20522] BTRFS info (device loop3): rebuilding free space tree [ 682.572812][T17876] bcachefs (loop6): shutdown complete [ 682.625814][T20522] BTRFS info (device loop3): checking UUID tree [ 682.651259][T20541] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 683.028644][T20654] loop1: detected capacity change from 0 to 16 [ 683.091779][T20654] erofs (device loop1): mounted with root inode @ nid 36. [ 683.167932][ T5844] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 683.215495][T20654] syz.1.6117: attempt to access beyond end of device [ 683.215495][T20654] loop1: rw=0, sector=48, nr_sectors = 16 limit=16 [ 683.308583][T20654] erofs (device loop1): read error -5 @ 43 of nid 36 [ 683.973852][T20692] loop1: detected capacity change from 0 to 256 [ 683.995670][T20693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6127'. [ 684.147794][T20700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.149867][T20692] FAT-fs (loop1): Directory bread(block 64) failed [ 684.220361][T20692] FAT-fs (loop1): Directory bread(block 65) failed [ 684.227001][T20692] FAT-fs (loop1): Directory bread(block 66) failed [ 684.280919][T20692] FAT-fs (loop1): Directory bread(block 67) failed [ 684.306211][T20692] FAT-fs (loop1): Directory bread(block 68) failed [ 684.336281][T20705] loop3: detected capacity change from 0 to 256 [ 684.342681][T20692] FAT-fs (loop1): Directory bread(block 69) failed [ 684.342813][T20692] FAT-fs (loop1): Directory bread(block 70) failed [ 684.412719][T20692] FAT-fs (loop1): Directory bread(block 71) failed [ 684.435142][T20692] FAT-fs (loop1): Directory bread(block 72) failed [ 684.471940][T20692] FAT-fs (loop1): Directory bread(block 73) failed [ 685.161079][T20751] IPv6: addrconf: prefix option has invalid lifetime [ 685.866923][ T5846] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 686.070646][ T5846] usb 6-1: Using ep0 maxpacket: 8 [ 686.124374][ T5846] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 686.155313][ T5846] usb 6-1: config 2 has no interface number 0 [ 686.170856][ T5846] usb 6-1: config 2 interface 31 has no altsetting 0 [ 686.177290][T20807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6161'. [ 686.209316][ T5846] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 686.253929][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.283569][ T5846] usb 6-1: Product: syz [ 686.287762][ T5846] usb 6-1: Manufacturer: syz [ 686.325331][ T5846] usb 6-1: SerialNumber: syz [ 686.605140][T20824] affs: No valid root block on device nbd0 [ 686.898165][ T5846] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 686.916085][T20837] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 686.973176][ T5846] usb 6-1: USB disconnect, device number 99 [ 687.081123][T20849] loop6: detected capacity change from 0 to 2048 [ 687.227863][T20792] loop3: detected capacity change from 0 to 32768 [ 687.278980][T20849] iocharset maccenteuƒo not found [ 687.469201][T20874] loop1: detected capacity change from 0 to 1764 [ 687.608203][T20884] loop4: detected capacity change from 0 to 64 [ 687.617657][T20886] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6180'. [ 687.716492][T20891] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6182'. [ 687.929566][T20900] netlink: 348 bytes leftover after parsing attributes in process `syz.6.6184'. [ 688.049998][T20911] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.319770][ T5846] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 688.364605][T20930] netlink: 'syz.0.6193': attribute type 7 has an invalid length. [ 688.518453][ T5846] usb 6-1: Using ep0 maxpacket: 8 [ 688.542775][ T5846] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 688.582181][ T5846] usb 6-1: config 0 has no interface number 0 [ 688.633325][ T5846] usb 6-1: config 0 interface 1 has no altsetting 0 [ 688.665091][ T5846] usb 6-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.1d [ 688.718905][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.740782][ T5846] usb 6-1: Product: syz [ 688.759130][ T5846] usb 6-1: Manufacturer: syz [ 688.779181][ T5846] usb 6-1: SerialNumber: syz [ 688.803103][ T5846] usb 6-1: config 0 descriptor?? [ 689.011417][T20960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 689.081989][ T5846] i2c-cp2615 6-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 689.115147][T20969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 689.308473][ T5846] usb 6-1: USB disconnect, device number 100 [ 689.770849][T21014] cgroup: name respecified [ 689.997576][T21024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6217'. [ 690.340391][ T30] audit: type=1326 audit(1747946019.113:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21045 comm="syz.1.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 690.374283][T21050] loop4: detected capacity change from 0 to 64 [ 690.487058][ T30] audit: type=1326 audit(1747946019.113:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21045 comm="syz.1.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 690.591364][ T30] audit: type=1326 audit(1747946019.141:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21045 comm="syz.1.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 690.710077][ T30] audit: type=1326 audit(1747946019.141:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21045 comm="syz.1.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 690.840896][ T30] audit: type=1326 audit(1747946019.141:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21045 comm="syz.1.6225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece398e969 code=0x7ffc0000 [ 690.934886][T21083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6236'. [ 691.613162][T21109] loop0: detected capacity change from 0 to 4096 [ 691.662338][T21109] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 691.765710][T21133] netlink: 'syz.3.6253': attribute type 9 has an invalid length. [ 692.136570][T21160] loop0: detected capacity change from 0 to 256 [ 692.148272][T21160] vfat: Unknown parameter 'iosharset' [ 692.253440][T17084] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 692.344861][T21174] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 692.456398][T17084] usb 5-1: Using ep0 maxpacket: 32 [ 692.507648][T17084] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.540674][T17084] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.581269][T17084] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 692.624227][T17084] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.700355][T17084] usb 5-1: config 0 descriptor?? [ 692.738551][T17084] hub 5-1:0.0: USB hub found [ 692.960815][T17084] hub 5-1:0.0: 1 port detected [ 693.041236][T21210] loop6: detected capacity change from 0 to 64 [ 693.129490][T21214] loop0: detected capacity change from 0 to 64 [ 693.157283][T21220] kernel profiling enabled (shift: 17) [ 693.182230][T17084] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 693.188894][T17084] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 693.242588][T17084] usbhid 5-1:0.0: can't add hid device: -71 [ 693.259082][T17084] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 693.331857][T17084] usb 5-1: USB disconnect, device number 94 [ 694.051394][T21283] openvswitch: netlink: Unknown key attributes 2 [ 694.276578][T21290] loop0: detected capacity change from 0 to 512 [ 694.326695][T21290] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 694.444083][T21290] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 694.473691][T21290] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 694.482210][T21290] System zones: 0-1, 15-15, 18-18, 34-34 [ 694.497860][T21290] EXT4-fs (loop0): orphan cleanup on readonly fs [ 694.505261][T21290] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 694.518495][T21290] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 694.533517][T21290] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 694.568221][T21290] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6295: bg 0: block 40: padding at end of block bitmap is not set [ 694.592086][T21290] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 694.635871][T21290] EXT4-fs (loop0): 1 truncate cleaned up [ 694.643389][T21290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 694.771573][T21290] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 694.835837][T21290] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 694.849896][T21290] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 694.944304][T21332] loop3: detected capacity change from 0 to 512 [ 695.086295][T21332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.143179][T21347] netlink: 'syz.4.6314': attribute type 13 has an invalid length. [ 695.156279][T21332] ext4 filesystem being mounted at /1032/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.157459][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.189372][T21348] SET target dimension over the limit! [ 695.209807][T21347] netlink: 'syz.4.6314': attribute type 27 has an invalid length. [ 695.220091][T21332] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #12: comm syz.3.6307: Directory hole found for htree leaf block 0 [ 695.234778][T21351] syz.1.6313 uses old SIOCAX25GETINFO [ 695.472950][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.553724][T21369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6321'. [ 695.798041][T21380] loop0: detected capacity change from 0 to 2048 [ 695.801534][T21387] bridge2: entered promiscuous mode [ 695.811072][T21389] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 695.917861][T17084] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 695.937179][T21380] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 696.071260][T21402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.123634][T17084] usb 6-1: Using ep0 maxpacket: 32 [ 696.150499][T17084] usb 6-1: config 2 has an invalid interface number: 1 but max is 0 [ 696.181303][T17084] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 696.231913][T17084] usb 6-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 696.252355][T17084] usb 6-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 696.265420][T17084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.307417][T17084] usb 6-1: Product: syz [ 696.318494][T17084] usb 6-1: Manufacturer: syz [ 696.323119][T17084] usb 6-1: SerialNumber: syz [ 696.420654][T17084] cdc_acm 6-1:2.1: probe with driver cdc_acm failed with error -22 [ 696.652724][T17084] usb 6-1: USB disconnect, device number 101 [ 696.902493][T21454] trusted_key: encrypted_key: keylen parameter is missing [ 697.245678][T21470] overlay: Unknown parameter '/' [ 697.551287][T21414] loop0: detected capacity change from 0 to 32768 [ 697.652779][T21414] (syz.0.6331,21414,1):ocfs2_verify_heartbeat:839 ERROR: Heartbeat has to be started to mount a read-write clustered device. [ 697.684902][T21414] (syz.0.6331,21414,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 697.916469][ T9] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 697.996267][T21517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6360'. [ 698.097036][T21525] netlink: 'syz.6.6362': attribute type 29 has an invalid length. [ 698.129321][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 698.160611][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.201353][ T9] usb 5-1: Product: syz [ 698.226826][ T9] usb 5-1: Manufacturer: syz [ 698.234645][ T9] usb 5-1: SerialNumber: syz [ 698.285077][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 698.362771][ T970] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 698.415577][T21414] syz.0.6331: attempt to access beyond end of device [ 698.415577][T21414] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 698.494407][T21414] exFAT-fs (loop0): unable to read boot sector [ 698.512344][T21546] netlink: 'syz.5.6368': attribute type 21 has an invalid length. [ 698.527437][T21414] exFAT-fs (loop0): failed to read boot sector [ 698.557087][T21546] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6368'. [ 698.567163][T21414] exFAT-fs (loop0): failed to recognize exfat type [ 698.604530][T21546] netlink: 'syz.5.6368': attribute type 5 has an invalid length. [ 698.637585][T21546] netlink: 'syz.5.6368': attribute type 6 has an invalid length. [ 698.689632][T21546] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6368'. [ 698.863881][T21562] loop1: detected capacity change from 0 to 164 [ 698.910826][T21562] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 699.004024][T21562] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 699.106772][T21562] Symlink component flag not implemented [ 699.138700][T21562] Symlink component flag not implemented [ 699.175640][T21562] Symlink component flag not implemented (7) [ 699.242319][T21562] Symlink component flag not implemented (116) [ 699.268003][T21576] loop3: detected capacity change from 0 to 256 [ 699.518338][T21583] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6379'. [ 699.673531][ T9] usb 5-1: USB disconnect, device number 95 [ 699.691280][ T970] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 699.698519][ T970] ath9k_htc: Failed to initialize the device [ 699.707880][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 699.913199][T21603] usb usb8: usbfs: process 21603 (syz.3.6383) did not claim interface 2 before use [ 699.969105][T21609] 9p: Unknown Cache mode or invalid value f [ 700.400437][T21632] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 700.547263][T21641] loop0: detected capacity change from 0 to 256 [ 700.581290][T21641] exfat: Deprecated parameter 'utf8' [ 700.601004][T21641] exfat: Deprecated parameter 'namecase' [ 700.685375][T21641] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 701.406796][T21618] loop1: detected capacity change from 0 to 32768 [ 701.452623][T21618] XFS: ikeep mount option is deprecated. [ 701.526972][ T5841] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 701.646585][T21618] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 701.843613][T21717] loop3: detected capacity change from 0 to 2048 [ 701.854076][T21715] xt_hashlimit: max too large, truncated to 1048576 [ 701.871933][T21720] x_tables: unsorted underflow at hook 3 [ 701.890192][T21717] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 701.894173][T21618] XFS (loop1): Ending clean mount [ 701.937759][T21715] No such timeout policy "syz0" [ 701.954141][T21706] loop6: detected capacity change from 0 to 8192 [ 701.986565][T21618] XFS (loop1): Quotacheck needed: Please wait. [ 702.036968][T21706] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 702.076169][T21725] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 702.126516][T21725] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 702.165389][T21618] XFS (loop1): Quotacheck: Done. [ 702.450013][T21740] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6422'. [ 702.473959][ T5840] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 703.441910][ T30] audit: type=1326 audit(1747946031.365:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21780 comm="syz.4.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ab98e969 code=0x7ffc0000 [ 703.583021][ T30] audit: type=1326 audit(1747946031.393:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21780 comm="syz.4.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ab98e969 code=0x7ffc0000 [ 703.668715][ T30] audit: type=1326 audit(1747946031.412:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21780 comm="syz.4.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fd4ab98e969 code=0x7ffc0000 [ 703.787809][ T30] audit: type=1326 audit(1747946031.412:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21780 comm="syz.4.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ab98e969 code=0x7ffc0000 [ 703.849007][T21742] loop5: detected capacity change from 0 to 32768 [ 703.859507][ T30] audit: type=1326 audit(1747946031.412:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21780 comm="syz.4.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ab98e969 code=0x7ffc0000 [ 704.001103][T17084] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 704.040987][T21745] loop3: detected capacity change from 0 to 32768 [ 704.183845][T21745] [ 704.183845][T21745] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 704.183845][T21745] [ 704.185354][T21742] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 704.268749][T17084] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 704.290257][T17084] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.313879][T17084] usb 7-1: Product: syz [ 704.318078][T17084] usb 7-1: Manufacturer: syz [ 704.346660][T17084] usb 7-1: SerialNumber: syz [ 704.354976][T21820] loop1: detected capacity change from 0 to 4096 [ 704.379848][T17084] usb 7-1: config 0 descriptor?? [ 704.413988][T21742] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 704.413988][T21742] allowing incompatible features above 0.0: (unknown version) [ 704.477155][ T5844] [ 704.477155][ T5844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 704.477155][ T5844] [ 704.534910][T21742] bcachefs (loop5): initializing new filesystem [ 704.542365][T21742] bcachefs (loop5): going read-write [ 704.559053][ T5844] [ 704.559053][ T5844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 704.559053][ T5844] [ 704.679539][T21742] bcachefs (loop5): marking superblocks [ 704.686074][T17084] hso 7-1:0.0: Failed to find BULK IN ep [ 704.725991][T17084] usb-storage 7-1:0.0: USB Mass Storage device detected [ 704.735837][T21820] ntfs3(loop1): try to read out of volume at offset 0x3fffffc7000 [ 704.763206][T21742] bcachefs (loop5): initializing freespace [ 704.782245][T21742] bcachefs (loop5): done initializing freespace [ 704.823676][T21742] bcachefs (loop5): reading snapshots table [ 704.829653][T21742] bcachefs (loop5): reading snapshots done [ 704.919987][T17084] usb 7-1: USB disconnect, device number 4 [ 704.941135][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 705.066001][T21742] bcachefs (loop5): done starting filesystem [ 705.143697][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 705.169080][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.229733][ T9] usb 1-1: Product: syz [ 705.254281][ T9] usb 1-1: Manufacturer: syz [ 705.283148][ T9] usb 1-1: SerialNumber: syz [ 705.304309][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 705.352392][ T5846] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 705.528228][T21888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6455'. [ 705.593406][T21888] netlink: 'syz.4.6455': attribute type 1 has an invalid length. [ 705.737057][ T5843] bcachefs (loop5): shutting down [ 705.775365][ T5843] bcachefs (loop5): going read-only [ 705.801506][ T5843] bcachefs (loop5): finished waiting for writes to stop [ 705.860942][ T5843] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2 [ 706.297167][ T5843] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3 [ 706.425168][ T5843] bcachefs (loop5): clean shutdown complete, journal seq 4 [ 706.598391][ T30] audit: type=1326 audit(1747946034.311:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21924 comm="syz.4.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ab98e969 code=0x7ffc0000 [ 706.704925][ T5843] bcachefs (loop5): marking filesystem clean [ 706.794514][ T30] audit: type=1326 audit(1747946034.367:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21924 comm="syz.4.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fd4ab98e969 code=0x7ffc0000 [ 706.952072][T17069] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 707.037106][ T30] audit: type=1326 audit(1747946034.367:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21924 comm="syz.4.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ab98e969 code=0x7ffc0000 [ 707.111614][ T5846] usb 1-1: Service connection timeout for: 256 [ 707.117810][ T5846] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 707.186611][T17069] usb 4-1: Using ep0 maxpacket: 32 [ 707.219222][ T30] audit: type=1326 audit(1747946034.367:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21924 comm="syz.4.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ab98e969 code=0x7ffc0000 [ 707.241543][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.255247][T17069] usb 4-1: config 8 has an invalid interface number: 203 but max is 0 [ 707.320713][ T5843] bcachefs (loop5): shutdown complete [ 707.326241][T17069] usb 4-1: config 8 has no interface number 0 [ 707.395014][T17069] usb 4-1: config 8 interface 203 has no altsetting 0 [ 707.461890][T17069] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 707.536346][T17069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.617293][T17069] usb 4-1: Product: syz [ 707.621490][T17069] usb 4-1: Manufacturer: syz [ 707.678199][T17069] usb 4-1: SerialNumber: syz [ 708.003432][T17069] port100 4-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 708.137529][T17069] usb 4-1: USB disconnect, device number 99 [ 708.298959][T21973] binder: 21969:21973 ioctl c00c6211 0 returned -14 [ 708.505397][ T9] usb 1-1: USB disconnect, device number 103 [ 708.530917][ T5846] ath9k_htc: Failed to initialize the device [ 708.537343][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 708.679836][T21988] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6481'. [ 708.739726][T21994] netlink: 'syz.0.6482': attribute type 1 has an invalid length. [ 708.828060][T21999] ieee802154 phy0 wpan0: encryption failed: -22 [ 709.043897][T22013] loop4: detected capacity change from 0 to 64 [ 709.061571][T22011] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 709.314160][T22030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6494'. [ 709.364814][T22030] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6494'. [ 709.434882][T22019] loop1: detected capacity change from 0 to 4096 [ 709.460943][T22019] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 709.536559][T22019] ntfs3(loop1): ino=19, mi_enum_attr [ 709.549349][T22019] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 709.616552][T22019] ntfs3(loop1): failed to convert "c46c" to cp864 [ 709.677111][T22019] ntfs3(loop1): ino=20, mi_enum_attr [ 709.810753][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 709.827315][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 709.884777][T22056] netlink: 'syz.0.6502': attribute type 21 has an invalid length. [ 709.926661][T22056] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6502'. [ 709.953652][T22056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6502'. [ 709.977413][T22058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6503'. [ 710.492097][T22090] netlink: 'syz.0.6513': attribute type 23 has an invalid length. [ 710.555209][T22094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6514'. [ 710.827496][T22111] netlink: 'syz.1.6521': attribute type 10 has an invalid length. [ 710.891047][T22111] team0: Device ipvlan1 failed to register rx_handler [ 711.064188][T22120] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6523'. [ 711.075930][T22106] loop0: detected capacity change from 0 to 4096 [ 711.120815][T22120] tc_dump_action: action bad kind [ 711.780489][T22186] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 712.060767][ C1] sd 0:0:1:0: [sda] tag#91 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 712.071085][ C1] sd 0:0:1:0: [sda] tag#91 CDB: Read(6) 08 00 00 00 00 2c [ 712.084210][T22200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6536'. [ 712.207544][T22207] sctp: [Deprecated]: syz.0.6540 (pid 22207) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.207544][T22207] Use struct sctp_sack_info instead [ 712.377257][T22215] i2c i2c-0: Invalid block write size 253 [ 712.524196][T22223] loop0: detected capacity change from 0 to 1024 [ 712.531566][T22223] EXT4-fs: inline encryption not supported [ 712.638460][T22223] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 712.868085][T22223] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #3: block 1: comm syz.0.6544: lblock 1 mapped to illegal pblock 1 (length 1) [ 712.930944][T22223] EXT4-fs (loop0): Remounting filesystem read-only [ 712.937527][T22223] Quota error (device loop0): write_blk: dquota write failed [ 712.975280][T22251] netlink: 'syz.5.6553': attribute type 64 has an invalid length. [ 713.007792][T22223] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 713.019110][T22251] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6553'. [ 713.052381][T22223] EXT4-fs (loop0): 1 orphan inode deleted [ 713.082035][T22223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.369222][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.542610][T22205] loop4: detected capacity change from 0 to 40427 [ 713.638059][T22205] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 713.655110][T22296] netlink: 'syz.1.6562': attribute type 6 has an invalid length. [ 713.668024][T22205] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 713.718403][T22205] F2FS-fs (loop4): invalid crc value [ 713.810370][T22309] tmpfs: Bad value for 'mpol' [ 714.080188][ T30] audit: type=1326 audit(1747946041.307:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22321 comm="syz.5.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9258e969 code=0x7ffc0000 [ 714.090039][T22205] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 714.155414][T22205] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 714.199136][ T30] audit: type=1326 audit(1747946041.307:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22321 comm="syz.5.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9258e969 code=0x7ffc0000 [ 714.312915][ T30] audit: type=1326 audit(1747946041.354:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22321 comm="syz.5.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f9f9258e969 code=0x7ffc0000 [ 714.402639][ T30] audit: type=1326 audit(1747946041.354:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22321 comm="syz.5.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9258e969 code=0x7ffc0000 [ 714.530650][ T30] audit: type=1326 audit(1747946041.354:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22321 comm="syz.5.6569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9258e969 code=0x7ffc0000 [ 714.598014][T22341] loop5: detected capacity change from 0 to 256 [ 714.748261][T22353] loop1: detected capacity change from 0 to 16 [ 714.758484][T22341] FAT-fs (loop5): Directory bread(block 64) failed [ 714.765035][T22341] FAT-fs (loop5): Directory bread(block 65) failed [ 714.808325][T22353] erofs (device loop1): mounted with root inode @ nid 36. [ 714.831486][T22354] __nla_validate_parse: 2 callbacks suppressed [ 714.831505][T22354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6579'. [ 714.843862][T22341] FAT-fs (loop5): Directory bread(block 66) failed [ 714.896485][T22341] FAT-fs (loop5): Directory bread(block 67) failed [ 714.930261][T22341] FAT-fs (loop5): Directory bread(block 68) failed [ 714.970240][T22341] FAT-fs (loop5): Directory bread(block 69) failed [ 714.977707][T22341] FAT-fs (loop5): Directory bread(block 70) failed [ 715.005085][T22341] FAT-fs (loop5): Directory bread(block 71) failed [ 715.033198][T22341] FAT-fs (loop5): Directory bread(block 72) failed [ 715.059012][T22359] loop0: detected capacity change from 0 to 4096 [ 715.076383][T22341] FAT-fs (loop5): Directory bread(block 73) failed [ 715.121103][T22359] ntfs3(loop0): It is recommened to use chkdsk. [ 715.158182][T22359] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 715.190190][T22359] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 715.237498][T22359] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 715.245383][T22359] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 715.319954][T22341] syz.5.6575: attempt to access beyond end of device [ 715.319954][T22341] loop5: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 715.355607][T22359] ntfs3(loop0): try to read out of volume at offset 0x3fffffc1c00 [ 715.366174][T22341] syz.5.6575: attempt to access beyond end of device [ 715.366174][T22341] loop5: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 715.374382][T22359] ntfs3(loop0): try to read out of volume at offset 0x3fffffc2c00 [ 715.458725][T22359] ntfs3(loop0): try to read out of volume at offset 0x3fffffc4c00 [ 715.484183][ T30] audit: type=1800 audit(1747946042.607:134): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6575" name="file1" dev="loop5" ino=1048651 res=0 errno=0 [ 715.503632][T22359] ntfs3(loop0): try to read out of volume at offset 0x3fffffc8c00 [ 715.532462][T22359] ntfs3(loop0): try to read out of volume at offset 0x3fffffd0c00 [ 715.659381][T22388] netlink: 300 bytes leftover after parsing attributes in process `syz.1.6589'. [ 715.784127][T22395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6591'. [ 716.067118][T22410] 9pnet_fd: Insufficient options for proto=fd [ 716.481737][T22436] loop4: detected capacity change from 0 to 256 [ 716.641688][T22430] loop1: detected capacity change from 0 to 4096 [ 716.657248][T22430] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 716.698790][T22436] FAT-fs (loop4): Directory bread(block 64) failed [ 716.730031][T22436] FAT-fs (loop4): Directory bread(block 65) failed [ 716.771377][T22436] FAT-fs (loop4): Directory bread(block 66) failed [ 716.806880][T22436] FAT-fs (loop4): Directory bread(block 67) failed [ 716.849095][T22436] FAT-fs (loop4): Directory bread(block 68) failed [ 716.882763][T22430] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 716.905386][T22436] FAT-fs (loop4): Directory bread(block 69) failed [ 716.912015][T22436] FAT-fs (loop4): Directory bread(block 70) failed [ 716.986603][T22436] FAT-fs (loop4): Directory bread(block 71) failed [ 717.008249][T22436] FAT-fs (loop4): Directory bread(block 72) failed [ 717.038909][T22436] FAT-fs (loop4): Directory bread(block 73) failed [ 717.108499][T22468] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6615'. [ 717.132004][ T1106] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 717.138988][ T5840] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 717.168838][ T5840] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 717.208821][ T5840] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 717.231440][ T36] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 717.511985][T22486] loop0: detected capacity change from 0 to 256 [ 717.646707][T22486] FAT-fs (loop0): Directory bread(block 64) failed [ 717.723391][T22486] FAT-fs (loop0): Directory bread(block 65) failed [ 717.767244][T22486] FAT-fs (loop0): Directory bread(block 66) failed [ 717.811018][T22486] FAT-fs (loop0): Directory bread(block 67) failed [ 717.834677][T22486] FAT-fs (loop0): Directory bread(block 68) failed [ 717.856944][T22486] FAT-fs (loop0): Directory bread(block 69) failed [ 717.863559][T22486] FAT-fs (loop0): Directory bread(block 70) failed [ 717.910612][T22486] FAT-fs (loop0): Directory bread(block 71) failed [ 717.917245][T22486] FAT-fs (loop0): Directory bread(block 72) failed [ 717.950775][T22486] FAT-fs (loop0): Directory bread(block 73) failed [ 718.452968][T22467] loop5: detected capacity change from 0 to 32768 [ 718.488880][T22467] jfs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿ' [ 718.787310][T17084] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 719.000946][T17084] usb 2-1: Using ep0 maxpacket: 8 [ 719.024023][T17084] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 719.032267][T17084] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 719.063835][T17084] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 719.108063][T17084] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 719.166173][T17084] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 719.213525][T17084] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 719.251342][T17084] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.568360][T22592] IPVS: set_ctl: invalid protocol: 16608 0.0.0.0:20000 [ 719.778959][ T5846] usb 2-1: USB disconnect, device number 105 [ 720.000240][T22619] Illegal XDP return value 3124964789 on prog (id 392) dev N/A, expect packet loss! [ 720.079074][T22626] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6664'. [ 720.138123][T22568] loop5: detected capacity change from 0 to 32768 [ 720.241116][T22568] [ 720.241116][T22568] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 720.241116][T22568] [ 720.312120][T22568] read_mapping_page failed! [ 720.363559][T22568] ERROR: (device loop5): txCommit: [ 720.363559][T22568] [ 720.589847][ T1159] ERROR: (device loop5): diWrite: ixpxd invalid [ 720.589847][ T1159] [ 720.631460][ T1159] ERROR: (device loop5): txCommit: [ 720.631460][ T1159] [ 720.642903][T22653] netlink: 'syz.4.6674': attribute type 1 has an invalid length. [ 720.663474][ T1159] jfs_write_inode: jfs_commit_inode failed! [ 720.673742][T22653] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6674'. [ 720.701023][ T5843] [ 720.701023][ T5843] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 720.701023][ T5843] [ 720.733233][ T5843] [ 720.733233][ T5843] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 720.733233][ T5843] [ 720.893893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 721.461882][T22688] netlink: 'syz.5.6675': attribute type 10 has an invalid length. [ 721.529812][T22688] team0: Device ipvlan1 failed to register rx_handler [ 721.957859][T22656] loop3: detected capacity change from 0 to 32768 [ 722.003437][T22714] loop4: detected capacity change from 0 to 2048 [ 722.102339][T22714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 722.181772][T22730] delete_channel: no stack [ 722.194024][T22656] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 722.518067][ T5844] ocfs2: Unmounting device (7,3) on (node local) [ 722.976794][T22775] loop6: detected capacity change from 0 to 64 [ 723.059824][T22772] loop3: detected capacity change from 0 to 2048 [ 723.086879][T22775] hfs: filesystem is marked locked, mounting read-only. [ 723.134551][T22772] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 723.154325][T22775] hfs: filesystem is marked locked, leaving read-only. [ 723.534820][T22803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6723'. [ 723.602105][T22811] loop3: detected capacity change from 0 to 256 [ 723.623008][T22803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6723'. [ 723.719385][T22811] FAT-fs (loop3): Directory bread(block 64) failed [ 723.734246][T22803] vxcan3: entered promiscuous mode [ 723.743506][T22811] FAT-fs (loop3): Directory bread(block 65) failed [ 723.770888][T22803] vxcan3: entered allmulticast mode [ 723.776366][T22811] FAT-fs (loop3): Directory bread(block 66) failed [ 723.793239][T22820] netlink: 'syz.0.6726': attribute type 11 has an invalid length. [ 723.817938][T22820] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6726'. [ 723.834236][T22811] FAT-fs (loop3): Directory bread(block 67) failed [ 723.840865][T22811] FAT-fs (loop3): Directory bread(block 68) failed [ 723.879519][T22811] FAT-fs (loop3): Directory bread(block 69) failed [ 723.886227][T22811] FAT-fs (loop3): Directory bread(block 70) failed [ 723.893240][T22811] FAT-fs (loop3): Directory bread(block 71) failed [ 723.904109][T22811] FAT-fs (loop3): Directory bread(block 72) failed [ 723.968285][T22811] FAT-fs (loop3): Directory bread(block 73) failed [ 724.557519][T22789] loop4: detected capacity change from 0 to 32768 [ 724.623454][T22789] (syz.4.6719,22789,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 724.634188][T22855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6737'. [ 724.682515][T22789] (syz.4.6719,22789,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 724.695513][T22855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6737'. [ 724.759021][T22789] JBD2: Ignoring recovery information on journal [ 725.033972][T22789] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 725.232307][T22889] loop6: detected capacity change from 0 to 256 [ 725.443290][ T5859] ocfs2: Unmounting device (7,4) on (node local) [ 725.457030][T22889] FAT-fs (loop6): Directory bread(block 64) failed [ 725.485980][T22889] FAT-fs (loop6): Directory bread(block 65) failed [ 725.526862][T22889] FAT-fs (loop6): Directory bread(block 66) failed [ 725.572257][T22889] FAT-fs (loop6): Directory bread(block 67) failed [ 725.611971][T22889] FAT-fs (loop6): Directory bread(block 68) failed [ 725.646799][T22889] FAT-fs (loop6): Directory bread(block 69) failed [ 725.682242][T22889] FAT-fs (loop6): Directory bread(block 70) failed [ 725.725838][T22889] FAT-fs (loop6): Directory bread(block 71) failed [ 725.752160][T22889] FAT-fs (loop6): Directory bread(block 72) failed [ 725.788616][T22889] FAT-fs (loop6): Directory bread(block 73) failed [ 726.014886][T17084] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 726.230767][T17084] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.264914][T17084] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.329686][T17084] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 726.414105][T17084] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 726.458337][T17084] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.496980][T17084] usb 1-1: config 0 descriptor?? [ 726.520227][T17084] hub 1-1:0.0: USB hub found [ 726.586657][T22960] loop3: detected capacity change from 0 to 64 [ 726.757866][T17084] hub 1-1:0.0: 9 ports detected [ 726.784684][T17084] hub 1-1:0.0: insufficient power available to use all downstream ports [ 726.974810][T17084] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 727.001887][T17084] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 727.007125][T22974] loop6: detected capacity change from 0 to 2048 [ 727.077384][T17084] usb 1-1: USB disconnect, device number 104 [ 727.191005][T22992] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 727.284106][T22974] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 727.382130][T22974] Remounting filesystem read-only [ 728.025317][T23028] loop1: detected capacity change from 0 to 8 [ 728.027492][T23029] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6785'. [ 728.053942][T23028] SQUASHFS error: zlib decompression failed, data probably corrupt [ 728.078485][T23029] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6785'. [ 728.098278][T23028] SQUASHFS error: Failed to read block 0x4e8: -5 [ 728.131155][T23028] SQUASHFS error: Failed to read block 0x4ee: -5 [ 728.148202][T22957] loop4: detected capacity change from 0 to 32768 [ 728.171615][ T30] audit: type=1800 audit(1747946054.485:135): pid=23028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6786" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 728.207688][T23037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 728.381085][T23044] loop6: detected capacity change from 0 to 1024 [ 728.510118][T23044] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 728.643001][T23044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.727538][T23044] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.6790: missing EA_INODE flag [ 728.821323][T23044] EXT4-fs (loop6): Remounting filesystem read-only [ 728.881329][T23076] netlink: 'syz.0.6797': attribute type 10 has an invalid length. [ 728.929738][T23079] netlink: 'syz.3.6799': attribute type 1 has an invalid length. [ 728.944412][T23076] team0: Device hsr_slave_0 failed to register rx_handler [ 728.998010][T23079] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6799'. [ 729.081856][T17876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.466760][T23110] loop4: detected capacity change from 0 to 256 [ 729.511875][T23110] exfat: Deprecated parameter 'utf8' [ 729.569786][T23110] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 729.682970][ T5845] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 729.864160][ T5845] usb 6-1: Using ep0 maxpacket: 32 [ 729.881294][ T5845] usb 6-1: config 0 has an invalid interface number: 150 but max is 0 [ 729.906835][ T9] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 729.920279][ T5845] usb 6-1: config 0 has no interface number 0 [ 729.926388][ T5845] usb 6-1: config 0 interface 150 has no altsetting 0 [ 729.953812][ T5845] usb 6-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01 [ 729.965744][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.992774][ T5845] usb 6-1: Product: syz [ 730.014505][ T5845] usb 6-1: Manufacturer: syz [ 730.024701][ T5845] usb 6-1: SerialNumber: syz [ 730.063549][ T5845] usb 6-1: config 0 descriptor?? [ 730.106816][ T9] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 730.120685][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 730.173536][ T9] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 730.193626][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.203598][ T5845] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 730.249020][ T9] usb 1-1: Product: syz [ 730.253247][ T9] usb 1-1: Manufacturer: syz [ 730.275934][T17069] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 730.284667][ T9] usb 1-1: SerialNumber: syz [ 730.302329][ T5845] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 730.311082][ T5845] pac7311 6-1:0.150: probe with driver pac7311 failed with error -71 [ 730.313158][T17069] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 730.338712][T17069] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 730.362636][ T5845] usb 6-1: USB disconnect, device number 102 [ 730.372981][ T9] usb 1-1: config 0 descriptor?? [ 730.382816][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 730.394648][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 730.464730][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input53 [ 730.484111][T17069] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 730.507641][ T9] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 730.644145][ T9] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 730.752380][ T9] usb 1-1: USB disconnect, device number 105 [ 730.986349][T23198] fido_id[23198]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 731.106797][ T5846] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 731.134812][T23223] loop1: detected capacity change from 0 to 1024 [ 731.216579][T23223] hfsplus: request for non-existent node 211 in B*Tree [ 731.252062][T23223] hfsplus: request for non-existent node 211 in B*Tree [ 731.321877][ T5846] usb 7-1: config 0 has an invalid interface number: 138 but max is 0 [ 731.346039][ T5846] usb 7-1: config 0 has no interface number 0 [ 731.366760][ T5846] usb 7-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 731.412041][ T5846] usb 7-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 731.451802][ T5846] usb 7-1: config 0 interface 138 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 731.474924][ T5846] usb 7-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 731.514705][ T5846] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 731.524462][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 731.555337][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.594223][ T5846] usb 7-1: config 0 descriptor?? [ 731.720038][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 731.754571][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 731.788069][ T9] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 731.857842][ T5846] usb 7-1: string descriptor 0 read error: -71 [ 731.864615][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 731.910375][ T5846] usbtest 7-1:0.138: Linux gadget zero [ 731.916072][ T5846] usbtest 7-1:0.138: full-speed {control in/out bulk-out int-in} tests (+alt) [ 731.936319][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 731.956815][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.984757][ T9] usb 4-1: Product: syz [ 731.992729][ T5846] usb 7-1: USB disconnect, device number 5 [ 732.002903][ T9] usb 4-1: Manufacturer: syz [ 732.007517][ T9] usb 4-1: SerialNumber: syz [ 732.271302][T23224] loop5: detected capacity change from 0 to 32768 [ 732.512355][ T9] usb 4-1: 0:2 : does not exist [ 732.548474][T23298] netlink: 'syz.1.6849': attribute type 3 has an invalid length. [ 732.595685][ T9] usb 4-1: USB disconnect, device number 100 [ 732.790810][T23327] loop5: detected capacity change from 0 to 512 [ 732.867082][ T6888] udevd[6888]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 732.941113][T23327] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 733.002326][T23327] System zones: 0-2, 18-18, 34-34 [ 733.047267][T23327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.069807][T23346] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 733.093639][T23349] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 733.147771][T23327] ext4 filesystem being mounted at /1095/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.147787][T17069] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 733.255266][T23354] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6859'. [ 733.287523][T23354] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6859'. [ 733.313005][T23357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6861'. [ 733.319243][T17069] usb 2-1: Using ep0 maxpacket: 32 [ 733.353921][T23359] loop3: detected capacity change from 0 to 64 [ 733.379503][ T5843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.383066][T17069] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 733.419307][T17069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.520815][T17069] usb 2-1: config 0 descriptor?? [ 733.555624][T17069] gspca_main: sq930x-2.14.0 probing 041e:403c [ 733.704308][T23379] cgroup: none used incorrectly [ 733.893148][T23390] loop6: detected capacity change from 0 to 16 [ 733.906122][T23383] xfrm1: entered allmulticast mode [ 733.966008][T17069] gspca_sq930x: ucbus_write failed -71 [ 733.973159][T23390] erofs (device loop6): mounted with root inode @ nid 36. [ 733.983288][T17069] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 734.013994][T23404] loop0: detected capacity change from 0 to 256 [ 734.028636][T17069] usb 2-1: USB disconnect, device number 106 [ 734.050168][T23390] erofs (device loop6): readahead error at folio 2 @ nid 89 [ 734.076870][T23390] erofs (device loop6): readahead error at folio 0 @ nid 89 [ 734.107515][T23390] erofs (device loop6): read error -117 @ 0 of nid 89 [ 734.215865][ T5845] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 734.408762][ T5845] usb 5-1: Using ep0 maxpacket: 8 [ 734.434522][T23427] autofs4:pid:23427:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294966781.1), cmd(0xc018937e) [ 734.442083][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.474393][ T5845] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 734.487043][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.494901][T23431] netlink: 'syz.3.6877': attribute type 21 has an invalid length. [ 734.501086][T23427] autofs4:pid:23427:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 734.515836][ T5845] usb 5-1: Product: syz [ 734.520118][T23431] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6877'. [ 734.534090][ T5845] usb 5-1: Manufacturer: syz [ 734.550068][ T5845] usb 5-1: SerialNumber: syz [ 734.569958][ T5845] usb 5-1: config 0 descriptor?? [ 734.621231][ T5845] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 734.643266][ T5845] usb 5-1: selecting invalid altsetting 1 [ 735.110012][ T6022] usb 5-1: USB disconnect, device number 96 [ 735.510840][T23496] bond0: (slave rose0): Enslaving as an active interface with an up link [ 735.984792][ T5845] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 736.183572][ T5845] usb 6-1: Using ep0 maxpacket: 8 [ 736.213097][ T5845] usb 6-1: config 1 has an invalid interface number: 6 but max is 0 [ 736.248302][ T5845] usb 6-1: config 1 has no interface number 0 [ 736.276135][ T5845] usb 6-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 736.299450][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.308853][ T5845] usb 6-1: Product: syz [ 736.323762][ T5845] usb 6-1: Manufacturer: syz [ 736.329484][ T5845] usb 6-1: SerialNumber: syz [ 736.341618][T23549] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 736.434904][T23558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6913'. [ 736.595636][ T5845] usb 6-1: palm_os_4_probe - error -71 getting connection info [ 736.628819][ T5845] visor 6-1:1.6: Handspring Visor / Palm OS converter detected [ 736.688461][ T5845] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 736.723327][ T5845] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 736.761072][ T5845] usb 6-1: USB disconnect, device number 103 [ 736.792233][ T5845] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 736.913509][ T5845] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 736.950538][ T5845] visor 6-1:1.6: device disconnected [ 737.178518][T23615] loop3: detected capacity change from 0 to 1024 [ 737.310115][T23615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.471579][T23615] EXT4-fs error (device loop3): ext4_empty_dir:3107: inode #11: block 623: comm syz.3.6925: Attempting to read directory block (623) that is past i_size (638464) [ 737.657258][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.786748][ T6022] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 737.989868][ T6022] usb 1-1: Using ep0 maxpacket: 16 [ 738.019923][ T6022] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.056490][ T6022] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 738.076036][ T6022] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.094886][ T6022] usb 1-1: Product: syz [ 738.105019][ T6022] usb 1-1: Manufacturer: syz [ 738.134698][ T6022] usb 1-1: SerialNumber: syz [ 738.158091][ T6022] usb 1-1: config 0 descriptor?? [ 738.181128][T23673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6941'. [ 738.208348][ T6022] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 738.656906][ T6022] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 738.681707][ T6022] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 738.707955][ T6022] usb 1-1: USB disconnect, device number 106 [ 738.739195][ T5846] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 738.805172][T23647] loop4: detected capacity change from 0 to 32768 [ 738.925068][T23647] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 738.928654][T23722] hsr0 speed is unknown, defaulting to 1000 [ 738.946058][ T5846] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 738.954621][T23722] hsr0 speed is unknown, defaulting to 1000 [ 738.966375][T23722] hsr0 speed is unknown, defaulting to 1000 [ 738.987364][T23722] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 739.013986][ T5846] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 739.038491][T23722] hsr0 speed is unknown, defaulting to 1000 [ 739.064156][T23722] hsr0 speed is unknown, defaulting to 1000 [ 739.064867][ T5846] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 739.074686][T23722] hsr0 speed is unknown, defaulting to 1000 [ 739.101484][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.115220][T23685] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 739.157967][T23647] XFS (loop4): Ending clean mount [ 739.165825][T23722] hsr0 speed is unknown, defaulting to 1000 [ 739.175266][ T5846] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 739.188242][T23647] XFS (loop4): Quotacheck needed: Please wait. [ 739.239670][T23722] hsr0 speed is unknown, defaulting to 1000 [ 739.357423][T23722] hsr0 speed is unknown, defaulting to 1000 [ 739.416820][T23647] XFS (loop4): Quotacheck: Done. [ 739.432839][T23722] hsr0 speed is unknown, defaulting to 1000 [ 739.537574][T17084] usb 7-1: USB disconnect, device number 6 [ 739.688354][ T5859] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 739.745357][T23783] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6960'. [ 739.792724][T23783] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6960'. [ 739.828891][T23788] netlink: 'syz.0.6963': attribute type 4 has an invalid length. [ 739.837995][T23783] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6960'. [ 739.876180][T23788] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6963'. [ 740.154996][T23801] loop1: detected capacity change from 0 to 256 [ 740.815255][T23832] loop1: detected capacity change from 0 to 512 [ 740.911879][T23832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.963586][T23832] ext4 filesystem being mounted at /1165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 741.262204][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.290364][T23794] loop5: detected capacity change from 0 to 32768 [ 741.291248][T23853] loop4: detected capacity change from 0 to 764 [ 741.379978][T23794] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6964 (23794) [ 741.479045][T23794] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 741.528989][T23794] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 741.539232][T23794] BTRFS info (device loop5): using free-space-tree [ 741.810457][ T3445] BTRFS warning (device loop5): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x8243940d level 1 [ 741.911169][T23794] BTRFS warning (device loop5): failed to read fs tree: -5 [ 742.094590][T23794] BTRFS error (device loop5): open_ctree failed: -5 [ 743.185010][T23973] x_tables: duplicate entry at hook 1 [ 743.761986][T24005] syz.4.7024 uses obsolete (PF_INET,SOCK_PACKET) [ 743.766653][T24006] netlink: 88 bytes leftover after parsing attributes in process `syz.6.7023'. [ 744.037764][T24017] loop4: detected capacity change from 0 to 256 [ 744.082955][T24017] exfat: Deprecated parameter 'namecase' [ 744.133857][T24017] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 744.650861][ C1] sd 0:0:1:0: [sda] tag#119 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 744.661202][ C1] sd 0:0:1:0: [sda] tag#119 CDB: Read(6) 08 00 9f d1 fe de [ 745.395984][ T30] audit: type=1326 audit(1747946070.600:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de98e969 code=0x7ffc0000 [ 745.452773][ T30] audit: type=1326 audit(1747946070.600:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de98e969 code=0x7ffc0000 [ 745.534697][ T30] audit: type=1326 audit(1747946070.628:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fb4de98e969 code=0x7ffc0000 [ 745.557039][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.649899][ T30] audit: type=1326 audit(1747946070.628:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de98e969 code=0x7ffc0000 [ 745.770766][ T30] audit: type=1326 audit(1747946070.628:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.3.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4de98e969 code=0x7ffc0000 [ 745.837909][T24107] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7056'. [ 746.657787][T24164] loop1: detected capacity change from 0 to 256 [ 746.754599][T24164] FAT-fs (loop1): Directory bread(block 64) failed [ 746.784298][T24164] FAT-fs (loop1): Directory bread(block 65) failed [ 746.816765][T24164] FAT-fs (loop1): Directory bread(block 66) failed [ 746.854212][T24164] FAT-fs (loop1): Directory bread(block 67) failed [ 746.860840][T24164] FAT-fs (loop1): Directory bread(block 68) failed [ 746.898529][T17099] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 746.930919][T24164] FAT-fs (loop1): Directory bread(block 69) failed [ 747.010627][T24182] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7081'. [ 747.019868][T24164] FAT-fs (loop1): Directory bread(block 70) failed [ 747.047355][T24164] FAT-fs (loop1): Directory bread(block 71) failed [ 747.054007][T24164] FAT-fs (loop1): Directory bread(block 72) failed [ 747.057446][T24188] No such timeout policy "syz0" [ 747.080391][T24182] batadv1: entered allmulticast mode [ 747.121445][ T5848] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 747.132366][T17099] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 747.147068][T24164] FAT-fs (loop1): Directory bread(block 73) failed [ 747.160708][T24191] loop5: detected capacity change from 0 to 1024 [ 747.178127][T17099] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 747.214375][T17099] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 747.243739][T17099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.297628][T24160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 747.344249][T17099] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 747.484761][T24209] netlink: 'syz.6.7087': attribute type 1 has an invalid length. [ 747.713019][T17099] usb 4-1: USB disconnect, device number 101 [ 747.871347][T24245] loop0: detected capacity change from 0 to 512 [ 747.904828][T24245] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 748.003604][T24245] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.7094: bad orphan inode 15 [ 748.080387][T24245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.142103][T24267] batadv1: entered promiscuous mode [ 748.182379][T24269] loop6: detected capacity change from 0 to 512 [ 748.215447][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.261252][T24278] sit0: entered promiscuous mode [ 748.305386][T24269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.306970][T24278] netlink: 'syz.1.7101': attribute type 1 has an invalid length. [ 748.346442][T24269] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 748.378046][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.412193][T24278] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7101'. [ 748.595234][T24269] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #2: block 18: comm syz.6.7100: lblock 23 mapped to illegal pblock 18 (length 1) [ 748.661316][T24269] EXT4-fs (loop6): Remounting filesystem read-only [ 748.682629][T24302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7107'. [ 748.724874][T24302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7107'. [ 748.924737][T17876] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.125165][T24325] overlayfs: conflicting options: metacopy=off,verity=require [ 749.411355][T24340] loop3: detected capacity change from 0 to 16 [ 749.449556][T24340] erofs (device loop3): mounted with root inode @ nid 36. [ 749.528478][T24340] erofs (device loop3): read error -22 @ 43 of nid 36 [ 749.578212][T24353] loop5: detected capacity change from 0 to 256 [ 749.733117][T24353] FAT-fs (loop5): Directory bread(block 64) failed [ 749.769859][T24353] FAT-fs (loop5): Directory bread(block 65) failed [ 749.801989][T24353] FAT-fs (loop5): Directory bread(block 66) failed [ 749.829341][T24353] FAT-fs (loop5): Directory bread(block 67) failed [ 749.861909][T24353] FAT-fs (loop5): Directory bread(block 68) failed [ 749.884551][T24353] FAT-fs (loop5): Directory bread(block 69) failed [ 749.941334][T24353] FAT-fs (loop5): Directory bread(block 70) failed [ 750.008011][T24353] FAT-fs (loop5): Directory bread(block 71) failed [ 750.014691][T24353] FAT-fs (loop5): Directory bread(block 72) failed [ 750.074799][T24371] loop3: detected capacity change from 0 to 4096 [ 750.103494][T24371] ntfs3(loop3): It is recommened to use chkdsk. [ 750.104251][T24353] FAT-fs (loop5): Directory bread(block 73) failed [ 750.133699][T24371] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 750.174176][T24371] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 750.206583][T24371] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 750.255018][T24371] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 750.318162][T24371] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00 [ 750.335612][T24371] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00 [ 750.348206][ T5841] Bluetooth: hci6: command 0x0406 tx timeout [ 750.393542][T24371] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00 [ 750.494359][T24371] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00 [ 750.548489][T24371] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00 [ 750.667153][T24362] loop1: detected capacity change from 0 to 32768 [ 750.720618][T24362] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7126 (24362) [ 750.844167][T24362] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 750.895097][T24362] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 750.946690][T24362] BTRFS info (device loop1): using free-space-tree [ 751.065094][T24429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 751.618134][ T5840] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 752.081973][T24483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7158'. [ 752.167449][T24477] loop5: detected capacity change from 0 to 4096 [ 752.208664][T24477] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 752.333188][T24477] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 752.952377][T24516] loop0: detected capacity change from 0 to 4096 [ 753.489438][T24550] loop6: detected capacity change from 0 to 256 [ 753.563708][T24550] FAT-fs (loop6): Directory bread(block 1285) failed [ 753.593354][T24550] FAT-fs (loop6): Directory bread(block 1286) failed [ 753.656553][T24550] FAT-fs (loop6): Directory bread(block 1287) failed [ 753.685825][T24550] FAT-fs (loop6): Directory bread(block 1288) failed [ 753.716172][T24550] FAT-fs (loop6): Directory bread(block 1289) failed [ 753.733059][T24550] FAT-fs (loop6): Directory bread(block 1290) failed [ 753.803226][T24550] FAT-fs (loop6): Directory bread(block 1291) failed [ 753.810061][T24550] FAT-fs (loop6): Directory bread(block 1292) failed [ 753.855370][T24550] FAT-fs (loop6): Directory bread(block 1293) failed [ 753.862923][T24550] FAT-fs (loop6): Directory bread(block 1294) failed [ 754.663430][T24604] RDS: rds_bind could not find a transport for ::ffff:0.0.0.224, load rds_tcp or rds_rdma? [ 754.775921][T24602] batadv1: entered promiscuous mode [ 755.289746][ T5846] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 755.454382][T24646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7204'. [ 755.486033][T24646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7204'. [ 755.541234][ T5846] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 755.575575][ T5846] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 755.598118][ T5846] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 755.681445][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.726980][T24625] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 755.742256][ T5846] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 755.825410][T24672] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7211'. [ 756.209038][ T6022] usb 2-1: USB disconnect, device number 107 [ 757.110422][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 757.332844][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 757.354575][ T9] usb 7-1: config 179 has no interface number 0 [ 757.360902][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 757.435709][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 757.461640][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 757.481260][T17099] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 757.491880][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 757.514073][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 757.534623][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.606408][ T9] xpad 7-1:179.65: probe with driver xpad failed with error -5 [ 757.663453][T17099] usb 1-1: Using ep0 maxpacket: 16 [ 757.670857][T17099] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.716303][T17099] usb 1-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 757.725884][T17099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.775680][T17099] usb 1-1: Product: syz [ 757.780294][T17099] usb 1-1: Manufacturer: syz [ 757.805567][T17099] usb 1-1: SerialNumber: syz [ 757.837999][T17099] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input54 [ 757.858409][ T10] usb 7-1: USB disconnect, device number 7 [ 757.887722][ T6022] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 757.946741][ T9] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 758.041757][ T5180] bcm5974 1-1:1.0: could not read from device [ 758.061971][ T6022] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 758.082267][ T6022] usb 2-1: config 5 has no interface number 0 [ 758.088386][ T6022] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 758.101203][ T5180] bcm5974 1-1:1.0: could not read from device [ 758.102389][T17099] usb 1-1: USB disconnect, device number 107 [ 758.127010][ T6022] usb 2-1: config 5 interface 123 has no altsetting 0 [ 758.127802][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 758.149205][ T6022] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 758.170035][ T6022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.196620][ T6022] usb 2-1: Product: syz [ 758.206415][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 758.211846][ T6022] usb 2-1: Manufacturer: syz [ 758.238887][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 758.245782][ T6022] usb 2-1: SerialNumber: syz [ 758.258930][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.291104][T24810] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 758.338242][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 758.584940][ T6022] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 758.701427][ T6022] usb 2-1: USB disconnect, device number 108 [ 758.729255][T17069] usb 6-1: USB disconnect, device number 104 [ 758.825080][T24832] loop3: detected capacity change from 0 to 32768 [ 758.896653][T24832] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 759.000814][T24832] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 759.299087][ T5844] ocfs2: Unmounting device (7,3) on (node local) [ 759.790675][T24946] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7267'. [ 760.388966][T24915] loop4: detected capacity change from 0 to 32768 [ 760.414166][T24980] loop5: detected capacity change from 0 to 64 [ 760.471808][T24915] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7257 (24915) [ 760.570925][T24989] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7281'. [ 760.603514][T24915] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 760.650875][T24915] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 760.686040][T24996] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7283'. [ 760.690744][T24915] BTRFS info (device loop4): using free-space-tree [ 761.266681][ T5859] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 761.704535][ T9] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 761.790066][T17084] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 761.875696][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 761.901741][ T9] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 761.923688][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.935887][ T9] usb 4-1: Product: syz [ 761.945816][ T9] usb 4-1: Manufacturer: syz [ 761.971930][ T9] usb 4-1: SerialNumber: syz [ 761.985419][T17084] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 761.999362][ T9] usb 4-1: config 0 descriptor?? [ 762.003997][T17084] usb 7-1: config 0 has no interface number 0 [ 762.065573][T17084] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 762.089811][ T6022] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 762.097523][T17084] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.119177][T17084] usb 7-1: Product: syz [ 762.129978][T17084] usb 7-1: Manufacturer: syz [ 762.134858][T17084] usb 7-1: SerialNumber: syz [ 762.154496][T25003] loop5: detected capacity change from 0 to 32768 [ 762.158766][T17084] usb 7-1: config 0 descriptor?? [ 762.198064][T25003] [ 762.198064][T25003] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 762.198064][T25003] [ 762.248263][ T9] usb 4-1: ignoring: not an USB2CAN converter [ 762.277066][T25085] loop1: detected capacity change from 0 to 256 [ 762.283846][ T6022] usb 5-1: Using ep0 maxpacket: 8 [ 762.288964][T25003] ERROR: (device loop5): diWrite: ixpxd invalid [ 762.288964][T25003] [ 762.316527][ T6022] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 762.324336][T25003] ERROR: (device loop5): txCommit: [ 762.324336][T25003] [ 762.354351][ T6022] usb 5-1: config 0 interface 0 has no altsetting 0 [ 762.373152][ T6022] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 762.382623][ T6022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.432184][ T6022] usb 5-1: Product: syz [ 762.448390][T17084] usb 7-1: Found UVC 0.08 device syz (046d:0823) [ 762.455922][ T6022] usb 5-1: Manufacturer: syz [ 762.474496][T17084] usb 7-1: No valid video chain found. [ 762.480046][ T6022] usb 5-1: SerialNumber: syz [ 762.505225][ T9] usb 4-1: USB disconnect, device number 102 [ 762.518631][ T6022] usb 5-1: config 0 descriptor?? [ 762.524536][T17084] usb 7-1: USB disconnect, device number 8 [ 762.584033][ T6022] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 762.623387][ T5843] [ 762.623387][ T5843] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 762.623387][ T5843] [ 762.699279][ T5843] [ 762.699279][ T5843] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 762.699279][ T5843] [ 762.798122][ T6022] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 762.832359][ T6022] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 762.879170][ T6022] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 762.947787][T25123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7308'. [ 763.029488][T17069] usb 5-1: USB disconnect, device number 97 [ 763.169495][ T31] INFO: task syz-executor:5838 blocked for more than 143 seconds. [ 763.170025][ T5846] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 763.215335][ T31] Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 [ 763.244105][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 763.286440][ T31] task:syz-executor state:D stack:17576 pid:5838 tgid:5838 ppid:1 task_flags:0x400140 flags:0x00004004 [ 763.317096][T25142] loop1: detected capacity change from 0 to 2048 [ 763.329774][ T31] Call Trace: [ 763.340337][ T31] [ 763.343495][ T31] __schedule+0x16e2/0x4cd0 [ 763.351450][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.358958][ T31] ? schedule+0x165/0x360 [ 763.364258][ T31] ? __lock_acquire+0xaac/0xd20 [ 763.368886][T25142] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=26504, location=26504 [ 763.369334][ T31] ? __pfx___schedule+0x10/0x10 [ 763.389765][ T5846] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 763.401093][ T5846] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 763.412929][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.421761][ T31] ? schedule+0x91/0x360 [ 763.430859][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 763.434271][T25142] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 763.444818][ T31] schedule+0x165/0x360 [ 763.455163][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 763.465029][ T31] io_schedule+0x81/0xe0 [ 763.490265][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 763.496641][ T5846] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.511134][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 763.518934][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 763.522172][T17069] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 763.525215][ T31] ? folios_put_refs+0x559/0x640 [ 763.569221][ T5846] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 763.574598][ T31] ? __pfx_find_lock_entries+0x10/0x10 [ 763.582384][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.584359][ T31] __filemap_get_folio+0x139/0xaf0 [ 763.604614][ T31] truncate_inode_pages_range+0x3ed/0xda0 [ 763.614005][ T5846] usb 1-1: Product: syz [ 763.615494][ T31] ? evict+0x847/0x9c0 [ 763.618215][ T5846] usb 1-1: Manufacturer: syz [ 763.636243][ T31] ? evict_inodes+0x636/0x6c0 [ 763.637819][ T5846] usb 1-1: SerialNumber: syz [ 763.646680][ T31] ? generic_shutdown_super+0x9a/0x2c0 [ 763.660093][ T5846] usb 1-1: config 0 descriptor?? [ 763.661777][ T31] ? kill_block_super+0x44/0x90 [ 763.685493][ T31] ? deactivate_locked_super+0xbc/0x130 [ 763.689612][ T5846] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input55 [ 763.709216][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 763.713204][T17069] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 763.719396][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.730833][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.731280][T17069] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.736508][ T31] ? __lock_acquire+0xaac/0xd20 [ 763.736588][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 763.754744][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 763.762393][ T31] evict+0x517/0x9c0 [ 763.766385][ T31] ? __pfx_evict+0x10/0x10 [ 763.770387][T17069] usb 7-1: config 0 descriptor?? [ 763.770994][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.783804][T17069] ums-realtek 7-1:0.0: USB Mass Storage device detected [ 763.790789][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.790825][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 763.790865][ T31] evict_inodes+0x636/0x6c0 [ 763.808737][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.814746][ T31] ? __pfx_evict_inodes+0x10/0x10 [ 763.819885][ T31] generic_shutdown_super+0x9a/0x2c0 [ 763.825591][ T31] kill_block_super+0x44/0x90 [ 763.831802][ T31] deactivate_locked_super+0xbc/0x130 [ 763.839124][ T31] cleanup_mnt+0x425/0x4c0 [ 763.843666][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.849342][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 763.856242][ T31] task_work_run+0x1d4/0x260 [ 763.860870][ T31] ? __pfx_task_work_run+0x10/0x10 [ 763.866074][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.872305][ T31] resume_user_mode_work+0x5e/0x80 [ 763.877569][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 763.883179][ T31] do_syscall_64+0x103/0x210 [ 763.887851][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.893499][ T31] ? exc_page_fault+0x91/0x110 [ 763.898330][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.904247][ T31] RIP: 0033:0x7f3dbef8fc97 [ 763.908767][ T31] RSP: 002b:00007ffc14caf928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 763.917218][ T31] RAX: 0000000000000000 RBX: 00007f3dbf01089d RCX: 00007f3dbef8fc97 [ 763.925514][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc14caf9e0 [ 763.933657][ T31] RBP: 00007ffc14caf9e0 R08: 0000000000000000 R09: 0000000000000000 [ 763.941680][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc14cb0a70 [ 763.949681][ T31] R13: 00007f3dbf01089d R14: 000000000008e591 R15: 00007ffc14cb0ab0 [ 763.957757][ T31] [ 763.963161][ T31] [ 763.963161][ T31] Showing all locks held in the system: [ 763.971042][ T31] 1 lock held by khungtaskd/31: [ 763.977972][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 763.988957][ T31] 1 lock held by acpid/5180: [ 763.993983][ T31] #0: ffff888029741160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mousedev_open_device+0x27/0x150 [ 764.007888][ T31] 1 lock held by udevd/5195: [ 764.013787][ T31] 2 locks held by getty/5582: [ 764.019052][ T31] #0: ffff88814dd600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 764.029644][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 764.039879][ T31] 1 lock held by syz-executor/5838: [ 764.045085][ T31] #0: ffff88807eed60e0 (&type->s_umount_key#126){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 764.056002][ T31] 1 lock held by syz-executor/5840: [ 764.065106][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 764.078160][ T31] 6 locks held by kworker/1:2/17069: [ 764.083460][ T31] #0: ffff88823be1af48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 764.114633][ T31] #1: ffffc900047ffc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 764.152974][ T31] #2: ffff888027862198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 764.161956][ T31] #3: ffff888026222198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 764.171411][ T31] #4: ffff88805a678160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 764.180802][ T31] #5: ffffffff8df43880 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 764.191360][ T31] 4 locks held by syz.0.7307/25120: [ 764.196684][ T31] #0: ffff88814838a160 (&mousedev->mutex/1){+.+.}-{4:4}, at: mixdev_open_devices+0x2b/0x2f0 [ 764.209176][ T31] #1: ffff888029741160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mixdev_open_devices+0xd4/0x2f0 [ 764.219568][ T31] #2: ffff88805ae462c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x53/0x360 [ 764.229259][ T31] #3: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 764.240378][ T31] [ 764.242803][ T31] ============================================= [ 764.242803][ T31] [ 764.254097][ T31] NMI backtrace for cpu 1 [ 764.254115][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 764.254144][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 764.254158][ T31] Call Trace: [ 764.254168][ T31] [ 764.254178][ T31] dump_stack_lvl+0x189/0x250 [ 764.254214][ T31] ? __wake_up_klogd+0xd9/0x110 [ 764.254244][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.254276][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.254312][ T31] ? __pfx__printk+0x10/0x10 [ 764.254353][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 764.254385][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 764.254408][ T31] ? _printk+0xcf/0x120 [ 764.254438][ T31] ? __pfx__printk+0x10/0x10 [ 764.254465][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 764.254496][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 764.254526][ T31] watchdog+0xfee/0x1030 [ 764.254562][ T31] ? watchdog+0x1de/0x1030 [ 764.254604][ T31] kthread+0x711/0x8a0 [ 764.254639][ T31] ? __pfx_watchdog+0x10/0x10 [ 764.254670][ T31] ? __pfx_kthread+0x10/0x10 [ 764.254700][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.254739][ T31] ? __pfx_kthread+0x10/0x10 [ 764.254769][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 764.254797][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.254825][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 764.254858][ T31] ? __pfx_kthread+0x10/0x10 [ 764.254887][ T31] ret_from_fork+0x4e/0x80 [ 764.254914][ T31] ? __pfx_kthread+0x10/0x10 [ 764.254944][ T31] ret_from_fork_asm+0x1a/0x30 [ 764.254986][ T31] [ 764.254996][ T31] Sending NMI from CPU 1 to CPUs 0: [ 764.314265][ T5846] usb 1-1: USB disconnect, device number 108 [ 764.314982][ C0] NMI backtrace for cpu 0 [ 764.314999][ C0] CPU: 0 UID: 0 PID: 5846 Comm: kworker/0:5 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 764.315025][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 764.315039][ C0] Workqueue: usb_hub_wq hub_event [ 764.315074][ C0] RIP: 0010:arch_touch_nmi_watchdog+0x11/0x20 [ 764.315109][ C0] Code: 5d e9 be 19 50 ff cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 67 ca ff ff 65 c6 05 47 3c b6 10 01 95 19 50 ff cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 764.315128][ C0] RSP: 0018:ffffc9000426ef10 EFLAGS: 00000083 [ 764.315146][ C0] RAX: ffffffff81c02769 RBX: dffffc0000000000 RCX: 0000000000100000 [ 764.315163][ C0] RDX: ffffc9001aef2000 RSI: 00000000000019d2 RDI: 00000000000019d3 [ 764.315178][ C0] RBP: ffffffff99b55ed0 R08: ffff888023bc0237 R09: 1ffff11004778046 [ 764.315195][ C0] R10: dffffc0000000000 R11: ffffffff8b556840 R12: 1ffffffff336abda [ 764.315212][ C0] R13: 00000000ffffffff R14: dffffc0000000000 R15: 00000000000007c0 [ 764.315230][ C0] FS: 0000000000000000(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 764.315248][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 764.315263][ C0] CR2: 0000001b30e0bff8 CR3: 0000000031ab6000 CR4: 0000000000350ef0 [ 764.315281][ C0] Call Trace: [ 764.315289][ C0] [ 764.315297][ C0] wait_for_lsr+0x165/0x2f0 [ 764.315333][ C0] serial8250_console_write+0x134c/0x1ba0 [ 764.315370][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.315397][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 764.315427][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.315454][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.315485][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.315513][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.315538][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 764.315564][ C0] ? console_flush_all+0x13a/0xc40 [ 764.315588][ C0] ? console_flush_all+0x13a/0xc40 [ 764.315613][ C0] console_flush_all+0x728/0xc40 [ 764.315640][ C0] ? console_flush_all+0x13a/0xc40 [ 764.315670][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 764.315701][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.315726][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 764.315757][ C0] console_unlock+0xc4/0x270 [ 764.315781][ C0] ? __pfx_console_unlock+0x10/0x10 [ 764.315806][ C0] ? vprintk_emit+0x444/0x7a0 [ 764.315826][ C0] ? vprintk_emit+0x444/0x7a0 [ 764.315848][ C0] vprintk_emit+0x5b7/0x7a0 [ 764.315868][ C0] ? vprintk_emit+0x444/0x7a0 [ 764.315891][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 764.315915][ C0] ? __pfx_snprintf+0x10/0x10 [ 764.315940][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.315971][ C0] dev_vprintk_emit+0x337/0x3f0 [ 764.316007][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 764.316052][ C0] dev_printk_emit+0xe0/0x130 [ 764.316090][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 764.316124][ C0] ? __queue_work+0x103/0xfe0 [ 764.316149][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.316173][ C0] ? __dev_printk+0x131/0x190 [ 764.316205][ C0] _dev_info+0x10a/0x160 [ 764.316241][ C0] ? __pfx__dev_info+0x10/0x10 [ 764.316273][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.316297][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 764.316329][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.316354][ C0] ? kernfs_notify+0x2ee/0x370 [ 764.316379][ C0] usb_disconnect+0xdd/0x910 [ 764.316415][ C0] hub_event+0x1cdb/0x4a00 [ 764.316446][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.316487][ C0] ? __lock_acquire+0xaac/0xd20 [ 764.316522][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.316547][ C0] ? do_raw_spin_lock+0x121/0x290 [ 764.316572][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.316599][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.316630][ C0] ? __lock_acquire+0xaac/0xd20 [ 764.316665][ C0] ? __pfx_hub_event+0x10/0x10 [ 764.316696][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.316724][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.316751][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 764.316776][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 764.316796][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 764.316818][ C0] process_scheduled_works+0xade/0x17a0 [ 764.316859][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 764.316899][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.316930][ C0] worker_thread+0x8a0/0xda0 [ 764.316953][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 764.316985][ C0] ? __kthread_parkme+0x7b/0x200 [ 764.317015][ C0] kthread+0x711/0x8a0 [ 764.317043][ C0] ? __pfx_worker_thread+0x10/0x10 [ 764.317064][ C0] ? __pfx_kthread+0x10/0x10 [ 764.317090][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.317116][ C0] ? __pfx_kthread+0x10/0x10 [ 764.317141][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 764.317166][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.317191][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 764.317218][ C0] ? __pfx_kthread+0x10/0x10 [ 764.317244][ C0] ret_from_fork+0x4e/0x80 [ 764.317267][ C0] ? __pfx_kthread+0x10/0x10 [ 764.317293][ C0] ret_from_fork_asm+0x1a/0x30 [ 764.317325][ C0] [ 764.378817][T17069] usb 7-1: USB disconnect, device number 9 [ 764.495940][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 764.945363][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 764.957176][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 764.967235][ T31] Call Trace: [ 764.970513][ T31] [ 764.973441][ T31] dump_stack_lvl+0x99/0x250 [ 764.978046][ T31] ? __asan_memcpy+0x40/0x70 [ 764.982641][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.987848][ T31] ? __pfx__printk+0x10/0x10 [ 764.992445][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 764.998086][ T31] panic+0x2db/0x790 [ 765.002013][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 765.007654][ T31] ? __pfx_panic+0x10/0x10 [ 765.012080][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 765.017721][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 765.023535][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 765.029169][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 765.034546][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 765.040707][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 765.046344][ T31] watchdog+0x102d/0x1030 [ 765.050680][ T31] ? watchdog+0x1de/0x1030 [ 765.055115][ T31] kthread+0x711/0x8a0 [ 765.059195][ T31] ? __pfx_watchdog+0x10/0x10 [ 765.063879][ T31] ? __pfx_kthread+0x10/0x10 [ 765.068471][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 765.074115][ T31] ? __pfx_kthread+0x10/0x10 [ 765.078714][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 765.083914][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 765.089547][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 765.094749][ T31] ? __pfx_kthread+0x10/0x10 [ 765.099339][ T31] ret_from_fork+0x4e/0x80 [ 765.103755][ T31] ? __pfx_kthread+0x10/0x10 [ 765.108353][ T31] ret_from_fork_asm+0x1a/0x30 [ 765.113129][ T31] [ 765.116343][ T31] Kernel Offset: disabled [ 765.120668][ T31] Rebooting in 86400 seconds..