last executing test programs: 4.285514012s ago: executing program 0 (id=8294): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 4.01414217s ago: executing program 0 (id=8298): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x9, 0x0, 0x5}, 0x20) sendto$inet6(r0, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.79727811s ago: executing program 0 (id=8301): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/xfrm_stat\x00') r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000002ec0)={r0, r0}) 3.755887562s ago: executing program 4 (id=8303): r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x4207, r0) 3.585272553s ago: executing program 0 (id=8305): keyctl$invalidate(0x15, 0x0) ioperm(0x0, 0x5, 0x6) keyctl$describe(0x6, 0x0, 0x0, 0x0) 3.465376233s ago: executing program 2 (id=8306): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b1a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff58"], 0x3, 0x377, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.435624315s ago: executing program 0 (id=8307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x1a, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) 3.381157139s ago: executing program 4 (id=8309): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0)=[{0x32, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) 3.225171493s ago: executing program 4 (id=8310): unshare(0x22020400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x8c, &(0x7f0000000480)}, 0x8) 3.201888568s ago: executing program 0 (id=8311): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0xc, 0x2e, {0x2e, 0x0, "ef20a10ccc5bb250a0f28a6e4b81a51d9c3602702def1411078d2810658aa428bb0de926a4991c80445c18a6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.896756053s ago: executing program 4 (id=8315): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0xa, "b54f1557"}, @global=@item_012={0x2, 0x1, 0x3, "c4cf"}]}}, 0x0}, 0x0) 2.825724651s ago: executing program 2 (id=8316): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 2.596385678s ago: executing program 2 (id=8318): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 2.333538581s ago: executing program 2 (id=8321): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "2742f992"}]}}, 0x0}, 0x0) 1.670811219s ago: executing program 3 (id=8329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) 1.632721081s ago: executing program 1 (id=8330): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='codepage=cp737,session=0x0000000000001000,iocharset=cp1251,session=0xffffffffffffe23d,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0025d25ba8fc88084a8cea488caa4768287a0e"], 0x9, 0x2d7, &(0x7f0000000b00)="$eJzs3U9rE08cx/HPbJI2/UN/+2srghelWtBLsepBvEQkV++eRG1SKIaKbQX1YhWP4gPw7lPwQXhRfAJ68uQD6G1lZifbTbvZNNrNNvX9gobN7Mzsd5j9M98FjQD8s+40v3+8/tP+GamiiqRbUiCpLlUlndHZ+rPNnY2dTruV11HFtbB/RnFLc6jO2mY7q6lt51p4of1W1Wy6DMWIouj2j7KDQOnc1Z8hkCb9dej210ccV1F2pfNlxzBq6Qk2e9rTc82VGA4A4ATwz//APyZmXZFREEjL/rF/qp7/e2UHcLxudA4VRbkNUs9/t7qLjJ3f/9yu/XzPpXB2f9DNEo8STO3A9wnFZ1bPAtMMyipdLMHU+kZVK2uv1Qr0Rg0vVW3RfbbiU7drQLRLGblpjv691XR3Oh6NW1Ee1A1pfaPTnrQbGfEvDHfEv2c+m6/mvgn1Qa1k/VeNjJ0mN1PhgZkKajb+q/17nHGtbC35tL/RaAQ9Vf53Bznnj+ANGGU9OyNJ99l9QbCbRJAXpzv2vHpfK8SjWx3QaiGrVZh869NqsadVxZ8JK2tPOrmvUorRHaJ5b+6ZJf3SJzVT6//Axres1JWZd6s3rqY/M+LxTGTXrLqa4aEnx/7lciGJwJscemyQhnxb9k6PdFNz2y9ePq50Ou0tu/EwY+Pp7JbxJbW3Umad4jcqyqmj3f2SyHoVRUftOSoy+CvH2qG9fyQl9vLJqmyvsqQkGPU0negNe4M6pg6bX5R3Qo7PRhRJfXYVdp/CCbJtupPuC6ZKDgijZtddJs7/3Erer+pcimQ/wpx1en6SqZ4eV5MMrncpOO8+p4fK4Gb6Z3CpI17rkzO6nOviZelSqtAo94ihj/OUME190wPe/wMAAAAAAAAAAAAAAAAAAIybUfxLg7LHCAAAAAAAAAAAAAAAAAAAAADAuPuj3//N+j/i3e//hvz+LzBGfgcAAP//0Id2/A==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0xbb) 1.466158122s ago: executing program 3 (id=8332): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00'], 0x68}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x25, &(0x7f0000000080)=""/255, &(0x7f0000000000)=0xff) 1.37388066s ago: executing program 1 (id=8333): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.292903983s ago: executing program 3 (id=8335): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x21) write$binfmt_elf32(r0, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 1.128753342s ago: executing program 3 (id=8336): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) 994.569599ms ago: executing program 1 (id=8338): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ppoll(&(0x7f0000000f80)=[{r0}], 0x1, &(0x7f0000000fc0)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000001300)=0x3, 0x4) 993.842374ms ago: executing program 3 (id=8339): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x5, 0xac2, 0x0, 0x3, 0x6000000000000, 0xd, 0x3ff, 0x3, 0x6, 0xc, 0x5, 0x5c0, 0x6, 0x7, 0x18, 0x0, {0x9, 0xffff}, 0xbb, 0x75}}) 931.06141ms ago: executing program 5 (id=8340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001"], 0xdc}}, 0x90) 877.37092ms ago: executing program 4 (id=8341): arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$nci(r0, &(0x7f0000000a80)=""/218, 0xda) 842.016866ms ago: executing program 4 (id=8342): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d03"], 0x0) 829.067131ms ago: executing program 3 (id=8343): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50e7, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x10, 0x0, 0xf7) 710.647726ms ago: executing program 5 (id=8344): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 684.751087ms ago: executing program 1 (id=8345): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x10007fffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x6, 0x2, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x37]}}}) 571.560721ms ago: executing program 5 (id=8346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001140)=@raw={'raw\x00', 0xe501, 0x3, 0x250, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x1f0, 0x230, 0x230, 0x1f0, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'dvmrp1\x00', 'veth1_to_team\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 522.592082ms ago: executing program 1 (id=8347): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 365.932778ms ago: executing program 2 (id=8348): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file1\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x670, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x1064}) 365.51911ms ago: executing program 5 (id=8349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) 173.5207ms ago: executing program 5 (id=8350): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000002c0)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 120.03897ms ago: executing program 1 (id=8351): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0xa, &(0x7f0000000380)={[{@errors_remount}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x5f}}, {@errors_remount}, {@data_journal}, {@debug}, {@nogrpid}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3f}}]}, 0x1, 0x44e, &(0x7f0000000780)="$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") chdir(&(0x7f0000000000)='./file0\x00') faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) 104.075035ms ago: executing program 2 (id=8352): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="050000001bbb8389a46eb7225600dde7", @ANYRES64=0x0, @ANYRESDEC], 0x80}}, 0x0) 0s ago: executing program 5 (id=8353): ioperm(0x0, 0x6, 0x3) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kernel console output (not intermixed with test programs): le: port zero only supported in persistent services, check your ipvs configuration [ 604.084799][ T930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.127507][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 604.139627][ T930] usb 6-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 604.180843][ T930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.282145][ T930] usb 6-1: config 0 descriptor?? [ 604.312972][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 604.336718][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.375757][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.396139][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 604.417156][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.473479][ T9] usb 3-1: config 0 descriptor?? [ 604.810493][ T930] wacom 0003:056A:032F.0027: hidraw0: USB HID v0.00 Device [HID 056a:032f] on usb-dummy_hcd.5-1/input0 [ 604.950168][ T9] mcp2200 0003:04D8:00DF.0028: unknown main item tag 0x0 [ 604.978774][ T9] mcp2200 0003:04D8:00DF.0028: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.2-1/input0 [ 605.013528][ T930] usb 6-1: USB disconnect, device number 30 [ 605.177839][ T9] usb 3-1: USB disconnect, device number 37 [ 606.598559][T21949] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7140'. [ 606.601775][T21951] loop0: detected capacity change from 0 to 256 [ 606.628781][T21951] exfat: Deprecated parameter 'namecase' [ 606.663534][T21951] exfat: Deprecated parameter 'utf8' [ 606.709420][T21951] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 607.524941][T21969] loop4: detected capacity change from 0 to 2048 [ 607.580139][T21983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7156'. [ 607.669200][T21988] loop5: detected capacity change from 0 to 512 [ 607.887255][T21987] loop2: detected capacity change from 0 to 32768 [ 607.888208][T21969] loop4: p3 p4 < > [ 607.904857][T21987] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7160 (21987) [ 607.942100][T21969] loop4: p3 size 2098944 extends beyond EOD, truncated [ 607.988844][T21987] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 607.999589][T21987] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 608.035071][T21987] BTRFS info (device loop2): using free-space-tree [ 608.040448][T21988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.100142][T21988] ext4 filesystem being mounted at /583/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.160026][T22006] netlink: 'syz.0.7163': attribute type 1 has an invalid length. [ 608.223634][T22006] netlink: 9380 bytes leftover after parsing attributes in process `syz.0.7163'. [ 608.346032][ T5238] udevd[5238]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 608.405319][T22014] loop4: detected capacity change from 0 to 136 [ 608.432812][T21988] EXT4-fs: Ignoring removed mblk_io_submit option [ 608.439364][T21988] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 608.546970][T21988] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 608.634857][T21988] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 608.789688][T13250] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.819185][ T5230] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 608.959297][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 608.999866][ T5327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.145249][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 609.170321][ T9] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 609.198403][ T9] usb 4-1: config 0 has no interface number 0 [ 609.241926][ T9] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 609.269523][ T9] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 609.308677][ T9] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 609.338043][ T9] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 609.362402][ T9] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 609.381666][ T9] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 609.421052][ T9] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 609.439515][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.469532][ T9] usb 4-1: Product: syz [ 609.476344][ T9] usb 4-1: Manufacturer: syz [ 609.487346][ T9] usb 4-1: SerialNumber: syz [ 609.509395][ T9] usb 4-1: config 0 descriptor?? [ 609.531024][T22020] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 609.543266][T22020] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 609.693547][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.802917][ T9] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 609.897958][T22023] loop4: detected capacity change from 0 to 32768 [ 609.958590][T22023] JBD2: Ignoring recovery information on journal [ 610.019946][ T9] etas_es58x 4-1:0.219: could not parse product info: '䑸' [ 610.139193][T22023] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 610.253941][ T5327] usb 4-1: USB disconnect, device number 36 [ 610.272120][ T5327] etas_es58x 4-1:0.219: Disconnecting syz syz [ 610.273681][T22023] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 610.326776][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 610.340721][T22023] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 610.390737][T22023] OCFS2: File system is now read-only. [ 610.423222][T22023] (syz.4.7167,22023,1):ocfs2_trim_mainbm:7610 ERROR: status = -30 [ 610.533667][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 610.570892][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.595425][T20043] ocfs2: Unmounting device (7,4) on (node local) [ 610.615926][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.650584][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 610.697040][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 610.733513][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.799775][ T9] usb 6-1: config 0 descriptor?? [ 610.948220][T22032] loop0: detected capacity change from 0 to 32768 [ 611.019005][T22032] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 611.121187][T22032] XFS (loop0): Ending clean mount [ 611.213806][ T5286] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 611.314949][ T9] microsoft 0003:045E:07DA.0029: ignoring exceeding usage max [ 611.355648][ T5223] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 611.361375][ T9] microsoft 0003:045E:07DA.0029: No inputs registered, leaving [ 611.417119][ T9] microsoft 0003:045E:07DA.0029: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 611.432977][ T9] microsoft 0003:045E:07DA.0029: no inputs found [ 611.439488][ T9] microsoft 0003:045E:07DA.0029: could not initialize ff, continuing anyway [ 611.539051][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.550429][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.571291][ T5286] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 611.580401][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.712328][ T5290] usb 6-1: USB disconnect, device number 31 [ 611.814432][ T5286] usb 3-1: config 0 descriptor?? [ 612.278919][ T5286] zydacron 0003:13EC:0006.002A: item fetching failed at offset 4/5 [ 612.319323][ T5286] zydacron 0003:13EC:0006.002A: parse failed [ 612.368720][ T5286] zydacron 0003:13EC:0006.002A: probe with driver zydacron failed with error -22 [ 612.546585][ T5286] usb 3-1: USB disconnect, device number 38 [ 612.656496][T22097] sp0: Synchronizing with TNC [ 612.712825][T22095] [U] è [ 612.841397][T22069] loop4: detected capacity change from 0 to 40427 [ 612.887194][T22069] F2FS-fs (loop4): invalid crc value [ 612.925811][T22069] F2FS-fs (loop4): Found nat_bits in checkpoint [ 613.156598][T22069] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 613.364778][T22119] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 613.554838][ T5290] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 613.738210][ T5290] usb 4-1: Using ep0 maxpacket: 32 [ 613.772589][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.804304][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.849566][ T5290] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 613.924749][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.985810][ T5290] usb 4-1: config 0 descriptor?? [ 614.179552][T22132] loop4: detected capacity change from 0 to 32768 [ 614.226500][ T79] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 614.262644][T22132] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 614.425802][ T79] usb 3-1: Using ep0 maxpacket: 32 [ 614.434282][ T79] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 614.442811][ T79] usb 3-1: config 0 has no interface number 0 [ 614.448952][ T79] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 614.476465][ T5290] waltop 0003:172F:0501.002B: item fetching failed at offset 2/5 [ 614.490245][ T5290] waltop 0003:172F:0501.002B: probe with driver waltop failed with error -22 [ 614.500760][ T79] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 614.514381][T22132] XFS (loop4): Ending clean mount [ 614.522036][ T79] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 614.535229][ T79] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 614.551680][T22132] XFS (loop4): Quotacheck needed: Please wait. [ 614.560646][ T79] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 614.571047][ T79] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 614.589391][ T79] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 614.599326][ T79] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.608502][T22132] XFS (loop4): Quotacheck: Done. [ 614.646522][ T79] usb 3-1: Product: syz [ 614.657334][ T79] usb 3-1: Manufacturer: syz [ 614.700946][ T79] usb 3-1: SerialNumber: syz [ 614.709797][ T5290] usb 4-1: USB disconnect, device number 37 [ 614.719710][ T79] usb 3-1: config 0 descriptor?? [ 614.756739][T22133] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 614.772438][T20043] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 614.774528][T22133] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 615.100121][ T79] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 615.319148][ T79] etas_es58x 3-1:0.219: could not parse product info: '䑸' [ 615.574167][ T9] usb 3-1: USB disconnect, device number 39 [ 615.581722][ T9] etas_es58x 3-1:0.219: Disconnecting syz syz [ 616.001014][ T2519] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 616.555061][ T5286] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 616.631907][ T5290] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 616.719109][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.740183][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.771815][ T5286] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 616.780900][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.836699][ T5290] usb 5-1: Using ep0 maxpacket: 8 [ 616.843004][ T5286] usb 4-1: config 0 descriptor?? [ 616.851461][ T5290] usb 5-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=c9.bc [ 616.869566][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.885135][ T5290] usb 5-1: Product: syz [ 616.900512][ T5290] usb 5-1: Manufacturer: syz [ 616.909507][ T5290] usb 5-1: SerialNumber: syz [ 616.926701][ T5290] usb 5-1: config 0 descriptor?? [ 616.937872][ T5290] s2255 5-1:0.0: Could not find bulk-in endpoint [ 616.944288][ T5290] Sensoray 2255 driver load failed: 0xfffffff4 [ 616.968651][ T5290] s2255 5-1:0.0: probe with driver s2255 failed with error -12 [ 617.315491][ T5286] arvo 0003:1E7D:30D4.002C: unknown main item tag 0x0 [ 617.356760][ T5286] arvo 0003:1E7D:30D4.002C: unknown main item tag 0x0 [ 617.540685][T22210] loop2: detected capacity change from 0 to 256 [ 617.547925][T22210] exfat: Deprecated parameter 'namecase' [ 617.553703][T22210] exfat: Deprecated parameter 'utf8' [ 617.569581][ T5286] arvo 0003:1E7D:30D4.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 617.649286][ T5327] usb 4-1: USB disconnect, device number 38 [ 617.749836][T22210] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 617.908501][T22205] loop5: detected capacity change from 0 to 32768 [ 617.951512][T22205] JBD2: Ignoring recovery information on journal [ 618.169635][ T5327] usb 5-1: USB disconnect, device number 28 [ 618.264179][T22205] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 618.381511][T22205] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 618.488757][T22205] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 618.515983][T22205] OCFS2: File system is now read-only. [ 618.536317][T22205] (syz.5.7223,22205,1):ocfs2_trim_mainbm:7610 ERROR: status = -30 [ 618.684323][T13250] ocfs2: Unmounting device (7,5) on (node local) [ 618.875233][T22234] loop4: detected capacity change from 0 to 32768 [ 618.898701][T22234] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7242 (22234) [ 618.919740][T22234] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 618.930211][T22234] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 618.939217][T22234] BTRFS info (device loop4): using free-space-tree [ 619.057936][ T5290] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 619.317764][ T5290] usb 4-1: Using ep0 maxpacket: 8 [ 619.415526][ T5327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 619.545313][ T5290] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 619.554405][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.567429][ T5290] usb 4-1: Product: syz [ 619.571622][ T5290] usb 4-1: Manufacturer: syz [ 619.576229][ T5290] usb 4-1: SerialNumber: syz [ 619.611011][ T5290] usb 4-1: config 0 descriptor?? [ 619.644269][ T5290] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 620.163133][T20043] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 620.476509][ T5290] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 620.486931][ T5290] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 620.496878][ T5290] usb 4-1: USB disconnect, device number 39 [ 621.029576][ T5290] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 621.224844][ T5290] usb 6-1: Using ep0 maxpacket: 8 [ 621.247391][ T5291] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 621.256910][ T5290] usb 6-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=c9.bc [ 621.266025][ T5290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.282198][ T5290] usb 6-1: Product: syz [ 621.288184][ T5290] usb 6-1: Manufacturer: syz [ 621.298294][ T5290] usb 6-1: SerialNumber: syz [ 621.312092][ T5290] usb 6-1: config 0 descriptor?? [ 621.323171][ T5290] s2255 6-1:0.0: Could not find bulk-in endpoint [ 621.329573][ T5290] Sensoray 2255 driver load failed: 0xfffffff4 [ 621.337734][ T5290] s2255 6-1:0.0: probe with driver s2255 failed with error -12 [ 621.424483][ T5290] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 621.432921][ T5291] usb 3-1: Using ep0 maxpacket: 32 [ 621.460217][ T5291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.482611][ T5291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.492791][ T5290] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 621.505731][ T5291] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 621.550189][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.573612][ T5291] usb 3-1: config 0 descriptor?? [ 621.832003][ T5290] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 621.846775][T22314] program syz.4.7261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.059537][ T5290] usb 2-1: Using ep0 maxpacket: 16 [ 622.068589][ T5291] waltop 0003:172F:0501.002E: item fetching failed at offset 2/5 [ 622.077998][ T5291] waltop 0003:172F:0501.002E: probe with driver waltop failed with error -22 [ 622.112926][ T5290] usb 2-1: config 0 has no interfaces? [ 622.118433][ T5290] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 622.127625][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.147058][ T5288] usb 6-1: USB disconnect, device number 32 [ 622.154597][ T5290] usb 2-1: config 0 descriptor?? [ 622.169421][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.308748][ T5327] usb 3-1: USB disconnect, device number 40 [ 622.444864][ T5286] usb 2-1: USB disconnect, device number 21 [ 622.583034][T22327] loop5: detected capacity change from 0 to 1024 [ 622.617677][T22327] hfsplus: bad catalog entry type [ 622.699834][ T2519] hfsplus: b-tree write err: -5, ino 4 [ 623.018258][T22339] loop5: detected capacity change from 0 to 1024 [ 623.068775][T22339] EXT4-fs: Ignoring removed orlov option [ 623.099190][T22339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 623.132419][T22339] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 623.151830][T22339] System zones: 0-1, 3-36 [ 623.171514][T22339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.327438][T13250] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.853241][T22366] loop2: detected capacity change from 0 to 4096 [ 624.020562][T22366] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 624.104478][T22366] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 624.125843][T22378] loop0: detected capacity change from 0 to 128 [ 624.136148][T22377] tipc: Enabling of bearer rejected, failed to enable media [ 624.212957][T22379] FAT-fs (loop0): FAT read failed (blocknr 234) [ 624.442532][T22382] netlink: 'syz.4.7292': attribute type 10 has an invalid length. [ 624.503007][T22382] team0: Device ipvlan1 failed to register rx_handler [ 625.204016][T22411] loop4: detected capacity change from 0 to 4096 [ 625.211755][ T5327] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 625.238062][T22411] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 625.314464][T20048] Bluetooth: hci6: unexpected event for opcode 0x1003 [ 625.363477][T22411] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 625.399139][ T5327] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 625.407647][ T5327] usb 3-1: config 0 has no interface number 0 [ 625.434305][ T5327] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 625.471616][ T5327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.524253][ T5327] usb 3-1: config 0 descriptor?? [ 625.554916][ T5327] ums-realtek 3-1:0.5: USB Mass Storage device detected [ 625.578473][T22424] loop5: detected capacity change from 0 to 256 [ 625.601614][T22424] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 625.636933][ T5286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 625.648186][T22424] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 625.694618][T22424] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 625.792347][ T5291] usb 3-1: USB disconnect, device number 41 [ 626.483252][T22435] loop2: detected capacity change from 0 to 1024 [ 626.490491][T22435] EXT4-fs: Ignoring removed orlov option [ 626.496156][T22435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 626.624236][T22435] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 626.649733][T22435] System zones: 0-1, 3-36 [ 626.662128][T22435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.971474][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.689686][T22465] netlink: 'syz.2.7343': attribute type 1 has an invalid length. [ 627.941388][T22458] loop4: detected capacity change from 0 to 40427 [ 627.967945][T22458] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 627.976036][T22458] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 628.005749][T22458] F2FS-fs (loop4): invalid crc value [ 628.200242][T22458] F2FS-fs (loop4): Found nat_bits in checkpoint [ 628.321309][ T79] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 628.367514][T22483] loop2: detected capacity change from 0 to 1764 [ 628.375774][T22458] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 628.398245][T22458] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 628.415240][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 628.450618][T22483] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 628.511933][ T79] usb 4-1: Using ep0 maxpacket: 8 [ 628.668513][ T79] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice= 1.ef [ 628.677626][ T79] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 628.686147][ T79] usb 4-1: SerialNumber: syz [ 628.694660][ T79] usb 4-1: config 0 descriptor?? [ 628.949462][ T5327] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 628.969506][ T5286] usb 4-1: USB disconnect, device number 40 [ 629.133562][ T5327] usb 3-1: Using ep0 maxpacket: 32 [ 629.142416][ T5327] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 629.152160][ T5327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.176927][ T5327] usb 3-1: Product: syz [ 629.181143][ T5327] usb 3-1: Manufacturer: syz [ 629.185775][ T5327] usb 3-1: SerialNumber: syz [ 629.211577][ T5327] usb 3-1: config 0 descriptor?? [ 629.637677][ T930] IPVS: starting estimator thread 0... [ 629.783955][T22509] IPVS: using max 17 ests per chain, 40800 per kthread [ 629.803218][ T5286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.889375][ T5327] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 629.926583][T22513] loop4: detected capacity change from 0 to 512 [ 629.960879][ T930] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 629.969664][T22513] EXT4-fs: Ignoring removed nobh option [ 630.019270][T22513] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 630.028365][ T5327] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 630.045676][ T5327] usb 3-1: USB disconnect, device number 42 [ 630.054547][T22513] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.7350: attempt to clear invalid blocks 2 len 1 [ 630.114378][T22513] EXT4-fs (loop4): Remounting filesystem read-only [ 630.130373][ T930] usb 6-1: Using ep0 maxpacket: 8 [ 630.136374][T22513] EXT4-fs (loop4): 1 truncate cleaned up [ 630.149793][ T930] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice= 1.ef [ 630.150147][T22513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.174567][ T930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 630.193584][ T930] usb 6-1: SerialNumber: syz [ 630.211619][ T930] usb 6-1: config 0 descriptor?? [ 630.257298][T22513] EXT4-fs: user quota file already specified [ 630.369681][T20043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.456036][ T79] usb 6-1: USB disconnect, device number 33 [ 630.650677][T22522] loop2: detected capacity change from 0 to 1024 [ 630.665174][T22522] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 630.738204][T22522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.859324][T22522] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #2: comm syz.2.7352: corrupted in-inode xattr: bad e_name length [ 630.902136][T22522] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #2: comm syz.2.7352: corrupted in-inode xattr: bad e_name length [ 631.002209][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.291962][T22530] netlink: 236 bytes leftover after parsing attributes in process `syz.3.7357'. [ 631.533030][T22531] loop5: detected capacity change from 0 to 1764 [ 631.578943][T22531] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 632.028439][ T930] IPVS: starting estimator thread 0... [ 632.150221][T22550] program syz.3.7369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.221497][T22546] IPVS: using max 17 ests per chain, 40800 per kthread [ 632.471373][T22562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7372'. [ 632.904600][T22574] loop2: detected capacity change from 0 to 512 [ 632.911979][T22574] EXT4-fs: Ignoring removed oldalloc option [ 633.094976][T22574] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.7380: Parent and EA inode have the same ino 15 [ 633.108212][T22574] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.7380: Parent and EA inode have the same ino 15 [ 633.383845][T22574] EXT4-fs (loop2): 1 orphan inode deleted [ 633.393674][T22574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.554844][T22591] program syz.1.7385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 633.670189][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.015149][T22605] loop4: detected capacity change from 0 to 512 [ 634.212452][T22608] sg_write: data in/out 8192/1 bytes for SCSI command 0xf2-- guessing data in; [ 634.212452][T22608] program syz.1.7392 not setting count and/or reply_len properly [ 634.215538][T22605] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.7391: attempt to clear invalid blocks 2 len 1 [ 634.287508][T22605] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 634.345831][T22605] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.7391: invalid indirect mapped block 1819239214 (level 0) [ 634.393172][T22605] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.7391: invalid indirect mapped block 1819239214 (level 1) [ 634.419658][T22599] loop5: detected capacity change from 0 to 40427 [ 634.436624][T22605] EXT4-fs (loop4): 1 truncate cleaned up [ 634.449507][T22605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.507355][T22599] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 634.515224][T22599] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 634.587902][T22599] F2FS-fs (loop5): invalid crc value [ 634.636526][T22599] F2FS-fs (loop5): Found nat_bits in checkpoint [ 634.648957][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 634.673651][T20043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.079241][T22599] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 635.086673][T22599] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 635.132889][T22626] loop4: detected capacity change from 0 to 4096 [ 635.193526][T22626] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 635.235937][T22626] ntfs3(loop4): Failed to load $Extend (-22). [ 635.276910][T22626] ntfs3(loop4): Failed to initialize $Extend. [ 635.361902][T22626] ntfs3(loop4): ino=21, "memory.current" mmap(write) compressed not supported [ 635.537181][ T5291] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 635.752634][ T5291] usb 3-1: Using ep0 maxpacket: 8 [ 635.798503][ T5291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.804881][ T5248] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 635.819751][ T5248] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 635.829838][ T5248] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 635.835786][ T5291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.838125][ T5248] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 635.854939][ T5248] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 635.862546][ T5248] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 635.905234][ T5291] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 635.980853][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.079202][ T5291] usb 3-1: config 0 descriptor?? [ 636.164800][ T930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.295523][T22662] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode [ 636.332713][T22657] loop4: detected capacity change from 0 to 256 [ 636.360675][T22662] macvlan2: entered promiscuous mode [ 636.370095][T22657] FAT-fs (loop4): Directory bread(block 64) failed [ 636.378209][T22657] FAT-fs (loop4): Directory bread(block 65) failed [ 636.385776][T22657] FAT-fs (loop4): Directory bread(block 66) failed [ 636.396125][T22657] FAT-fs (loop4): Directory bread(block 67) failed [ 636.400354][T22662] macvlan2: entered allmulticast mode [ 636.402744][T22657] FAT-fs (loop4): Directory bread(block 68) failed [ 636.457119][T22662] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 636.495080][T22657] FAT-fs (loop4): Directory bread(block 69) failed [ 636.501961][T22657] FAT-fs (loop4): Directory bread(block 70) failed [ 636.528460][T22657] FAT-fs (loop4): Directory bread(block 71) failed [ 636.556764][T22657] FAT-fs (loop4): Directory bread(block 72) failed [ 636.563757][T22657] FAT-fs (loop4): Directory bread(block 73) failed [ 636.604357][ T5291] saitek 0003:06A3:0CCD.002F: unknown main item tag 0x0 [ 636.611692][ T5291] saitek 0003:06A3:0CCD.002F: unknown main item tag 0x0 [ 636.613608][T22662] mac80211_hwsim hwsim30 wlan1: left allmulticast mode [ 636.618816][ T5291] saitek 0003:06A3:0CCD.002F: unknown main item tag 0x0 [ 636.618850][ T5291] saitek 0003:06A3:0CCD.002F: unknown main item tag 0x0 [ 636.639879][ T5291] saitek 0003:06A3:0CCD.002F: unknown main item tag 0x0 [ 636.647020][T22662] mac80211_hwsim hwsim30 wlan1: left promiscuous mode [ 636.654161][ T5291] saitek 0003:06A3:0CCD.002F: unknown main item tag 0x0 [ 636.661218][ T5291] saitek 0003:06A3:0CCD.002F: unknown main item tag 0x0 [ 636.668282][ T5291] saitek 0003:06A3:0CCD.002F: unknown main item tag 0x0 [ 636.675294][ T5291] saitek 0003:06A3:0CCD.002F: unknown main item tag 0x0 [ 636.682260][ T5291] saitek 0003:06A3:0CCD.002F: unknown main item tag 0x0 [ 636.689334][ T5291] saitek 0003:06A3:0CCD.002F: unknown main item tag 0x0 [ 636.710991][ T5291] saitek 0003:06A3:0CCD.002F: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.2-1/input0 [ 636.830347][ T79] usb 3-1: USB disconnect, device number 43 [ 637.211615][T22684] loop4: detected capacity change from 0 to 256 [ 637.303587][T22688] nbd: must specify a size in bytes for the device [ 637.328432][T22648] chnl_net:caif_netlink_parms(): no params data found [ 637.423317][ T5291] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 637.664993][T22706] loop5: detected capacity change from 0 to 512 [ 637.697391][T22706] EXT4-fs: Ignoring removed oldalloc option [ 637.962272][T22706] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.7431: Parent and EA inode have the same ino 15 [ 637.991567][T22706] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.7431: Parent and EA inode have the same ino 15 [ 638.011729][ T5291] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 638.040574][T22706] EXT4-fs (loop5): 1 orphan inode deleted [ 638.059483][T22706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.131885][T22715] loop2: detected capacity change from 0 to 32768 [ 638.147114][ T5248] Bluetooth: hci9: command tx timeout [ 638.149659][T22715] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7433 (22715) [ 638.176917][T22648] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.184517][T22648] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.192245][ T5291] usb 4-1: Using ep0 maxpacket: 32 [ 638.239681][ T5291] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 638.259856][T22648] bridge_slave_0: entered allmulticast mode [ 638.281166][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.302711][T22715] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 638.306615][T22648] bridge_slave_0: entered promiscuous mode [ 638.319431][T22715] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 638.330212][ T5291] usb 4-1: Product: syz [ 638.342692][ T5291] usb 4-1: Manufacturer: syz [ 638.347455][ T5291] usb 4-1: SerialNumber: syz [ 638.353641][T22715] BTRFS info (device loop2): using free-space-tree [ 638.376638][T13250] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.400110][T22648] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.407267][T22648] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.421797][ T5291] usb 4-1: config 0 descriptor?? [ 638.472929][T22648] bridge_slave_1: entered allmulticast mode [ 638.508529][T22648] bridge_slave_1: entered promiscuous mode [ 638.689683][T22715] BTRFS error (device loop2): balance: mixed groups data and metadata options must be the same [ 638.861855][T22648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.934307][ T5230] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 638.953325][T22648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.180402][ T5291] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 639.225009][T22648] team0: Port device team_slave_0 added [ 639.278850][T22648] team0: Port device team_slave_1 added [ 639.425693][ T5291] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 639.451277][ T5291] usb 4-1: USB disconnect, device number 41 [ 639.849640][T22648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.856631][T22648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.915190][T22648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.937418][T22648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.955416][T22648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.998271][T22648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.076478][T22751] loop5: detected capacity change from 0 to 32768 [ 640.084194][T22751] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7442 (22751) [ 640.113928][T22751] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 640.150000][T22751] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 640.184215][T22648] hsr_slave_0: entered promiscuous mode [ 640.190979][T22751] BTRFS info (device loop5): using free-space-tree [ 640.198415][ T930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.211425][ T5327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.222496][ T5286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.294615][T22648] hsr_slave_1: entered promiscuous mode [ 640.337833][T22648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 640.345521][T22648] Cannot create hsr debugfs directory [ 640.369243][ T5248] Bluetooth: hci9: command tx timeout [ 640.567366][T22789] loop2: detected capacity change from 0 to 128 [ 640.576454][T22789] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 640.661303][ T29] audit: type=1800 audit(1728893905.127:2064): pid=22789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7452" name="file2" dev="loop2" ino=95 res=0 errno=0 [ 640.694220][T13250] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 640.699845][ T930] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 640.808428][T22755] loop4: detected capacity change from 0 to 32768 [ 640.816595][T22755] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7446 (22755) [ 640.891710][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.921271][ T930] usb 2-1: Using ep0 maxpacket: 8 [ 640.935339][T22755] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 640.960448][T22755] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 641.006710][T22755] BTRFS info (device loop4): using free-space-tree [ 641.105449][ T930] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice= 1.ef [ 641.114555][ T930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 641.118449][T22799] loop2: detected capacity change from 0 to 16 [ 641.122770][ T930] usb 2-1: SerialNumber: syz [ 641.137145][ T930] usb 2-1: config 0 descriptor?? [ 641.247397][T22799] erofs: (device loop2): mounted with root inode @ nid 36. [ 641.603169][T22648] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.769396][ T5290] usb 2-1: USB disconnect, device number 22 [ 642.087369][T22648] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.111919][T20043] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 642.301357][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 642.607211][T22648] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.622536][ T5248] Bluetooth: hci9: command tx timeout [ 643.237583][T22648] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.710878][T22648] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 643.759306][T22648] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 643.811059][T22648] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 643.900953][T22648] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 644.234042][T22648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.328517][T22648] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.403163][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.409577][T22865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7482'. [ 644.410308][ T2519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.422241][ T2519] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.433834][ T2519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.707171][T22841] loop4: detected capacity change from 0 to 32768 [ 644.876061][ T5248] Bluetooth: hci9: command tx timeout [ 644.945102][T22841] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 644.970358][T22873] netlink: 'syz.2.7494': attribute type 10 has an invalid length. [ 644.978425][T22841] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 645.038292][T22873] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7494'. [ 645.046209][T22841] gfs2: fsid=syz:syz.s: journal 0 mapped with 1 extents in 0ms [ 645.056193][ T5288] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 645.225259][T22861] loop5: detected capacity change from 0 to 32768 [ 645.306499][T22861] syz.5.7480: attempt to access beyond end of device [ 645.306499][T22861] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 645.330761][T22861] lbmIODone: I/O error in JFS log [ 645.340928][T22861] *** Log Format Error ! *** [ 645.366044][T22861] lmLogInit: exit(-22) [ 645.371608][T22841] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 645.409514][T22861] lmLogOpen: exit(-22) [ 646.245243][T22648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.447154][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 646.491620][T22894] loop4: detected capacity change from 0 to 24 [ 646.552558][T22892] loop5: detected capacity change from 0 to 4096 [ 646.560234][T22648] veth0_vlan: entered promiscuous mode [ 646.624230][T22648] veth1_vlan: entered promiscuous mode [ 646.753528][T22648] veth0_macvtap: entered promiscuous mode [ 646.823116][T22648] veth1_macvtap: entered promiscuous mode [ 646.892144][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.944820][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.965930][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.026019][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.053874][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.085895][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.113344][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.165315][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.198196][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.231980][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.265209][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.303008][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.334689][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.370157][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.399512][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.423433][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.444533][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.467498][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.502024][T22648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.564424][T22906] tipc: MTU too low for tipc bearer [ 647.598203][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.619875][T22904] sp0: Synchronizing with TNC [ 647.640085][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.692608][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.736149][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.779950][ T29] audit: type=1800 audit(1728893911.727:2065): pid=22915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7503" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 647.826279][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.847903][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.908654][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.948011][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.996213][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.032810][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.072025][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.115380][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.147299][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.171071][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.191086][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.213142][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.222988][T22648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.236312][T22892] nfs4: Deprecated parameter 'intr' [ 648.246442][T22648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.315880][T22648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.445828][T22648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.472041][T22648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.498425][T22648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.518084][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.537932][T22648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.636138][ T930] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 648.810700][ T930] usb 5-1: Using ep0 maxpacket: 8 [ 648.820755][ T930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.863104][ T930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.879817][ T2519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.905271][ T930] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 648.932126][ T2519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.949849][ T930] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 648.993238][ T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.003333][ T930] usb 5-1: config 0 descriptor?? [ 649.231232][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.239224][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.493252][ T930] sony 0003:054C:0268.0030: item fetching failed at offset 6/70 [ 649.520811][ T930] sony 0003:054C:0268.0030: parse failed [ 649.557227][ T930] sony 0003:054C:0268.0030: probe with driver sony failed with error -22 [ 649.750057][ T930] usb 5-1: USB disconnect, device number 29 [ 649.787916][T22956] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7520'. [ 649.830599][T22956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7520'. [ 650.252654][T22972] loop5: detected capacity change from 0 to 64 [ 650.638223][ T930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 650.663768][ T5327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 650.688430][ T5286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 651.486311][T23006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7542'. [ 651.610522][T23011] [U] ^@ÿ [ 651.806770][T23021] loop2: detected capacity change from 0 to 256 [ 652.171774][ T5291] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 652.351715][T23040] autofs: Bad value for 'fd' [ 652.362468][ T5291] usb 2-1: Using ep0 maxpacket: 16 [ 652.384896][ T5291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.405436][ T5291] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 652.436499][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.503128][ T5291] usb 2-1: config 0 descriptor?? [ 652.678091][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.687657][ T5288] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.894483][T23048] loop5: detected capacity change from 0 to 256 [ 652.980662][T23048] exfat: Deprecated parameter 'utf8' [ 653.044834][T23048] exfat: Deprecated parameter 'utf8' [ 653.058341][T23048] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 653.124464][T23030] loop4: detected capacity change from 0 to 32768 [ 653.131606][ T5291] lenovo 0003:17EF:60A3.0031: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.1-1/input0 [ 653.157555][T23030] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7553 (23030) [ 653.283235][T23030] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 653.293505][T23030] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 653.315668][T23030] BTRFS info (device loop4): using free-space-tree [ 653.329077][ T5286] usb 2-1: USB disconnect, device number 23 [ 653.373576][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 653.474243][T23036] loop2: detected capacity change from 0 to 40427 [ 653.590594][T23036] F2FS-fs (loop2): Invalid segment/section count (458776 != 24 * 1) [ 653.598963][T23036] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 653.674625][T23036] F2FS-fs (loop2): invalid crc value [ 653.720518][T23036] F2FS-fs (loop2): Found nat_bits in checkpoint [ 653.934293][T23036] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 653.941562][T23036] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 654.020181][T23075] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7568'. [ 654.060408][T20043] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 654.071582][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 655.279473][T23105] loop4: detected capacity change from 0 to 1024 [ 655.454433][ T2519] hfsplus: b-tree write err: -5, ino 4 [ 655.844480][T23121] loop4: detected capacity change from 0 to 1024 [ 655.897769][T23121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.078633][T23121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 656.110997][T23121] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 656.166240][T23121] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 656.298744][T23129] loop5: detected capacity change from 0 to 256 [ 656.340776][T20043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.387709][T23119] loop2: detected capacity change from 0 to 32768 [ 656.407181][T23119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7587 (23119) [ 656.469540][T23119] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 656.481137][T23129] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 656.490158][T23119] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 656.511732][T23119] BTRFS info (device loop2): using free-space-tree [ 656.600437][T23129] Process accounting resumed [ 656.655067][T23148] loop4: detected capacity change from 0 to 64 [ 656.945028][ T5291] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 657.140590][ T5230] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 657.176192][T23157] loop5: detected capacity change from 0 to 512 [ 657.230136][ T5291] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 657.241018][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.242155][T23157] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 657.277599][T23157] EXT4-fs (loop5): 1 truncate cleaned up [ 657.285800][ T5291] usb 2-1: config 0 descriptor?? [ 657.375487][ T79] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 657.412484][T23157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.454362][ T29] audit: type=1800 audit(1728893920.643:2066): pid=23157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7597" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 657.626533][ T79] usb 5-1: Using ep0 maxpacket: 8 [ 657.673329][ T79] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 657.683966][ T79] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.692049][ T79] usb 5-1: Product: syz [ 657.711744][ T79] usb 5-1: Manufacturer: syz [ 657.725031][ T79] usb 5-1: SerialNumber: syz [ 657.736814][T13250] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.771526][ T79] usb 5-1: config 0 descriptor?? [ 657.797524][ T79] gspca_main: se401-2.14.0 probing 047d:5003 [ 657.827216][ T5291] kye 0003:0458:5005.0032: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 657.844888][ T5291] kye 0003:0458:5005.0032: unknown main item tag 0x0 [ 657.865698][ T5291] kye 0003:0458:5005.0032: unknown main item tag 0x0 [ 657.909499][ T5291] kye 0003:0458:5005.0032: unknown main item tag 0x0 [ 657.928320][T23168] loop5: detected capacity change from 0 to 1024 [ 657.941996][ T5291] kye 0003:0458:5005.0032: unknown main item tag 0x0 [ 657.957951][ T5291] kye 0003:0458:5005.0032: unknown main item tag 0x0 [ 657.989642][T23168] hfsplus: Filesystem is marked locked, mounting read-only. [ 657.999770][ T5291] kye 0003:0458:5005.0032: unknown main item tag 0x0 [ 658.006555][ T5291] kye 0003:0458:5005.0032: unknown main item tag 0x0 [ 658.059546][ T5291] kye 0003:0458:5005.0032: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 658.073479][ T5291] kye 0003:0458:5005.0032: tablet-enabling feature report not found [ 658.081563][ T5291] kye 0003:0458:5005.0032: tablet enabling failed [ 658.146935][ T5291] usb 2-1: USB disconnect, device number 24 [ 658.266930][ T79] gspca_se401: ExtraFeatures: 243 [ 658.274824][ T79] gspca_se401: Too many frame sizes [ 658.281780][T23178] netlink: 'syz.0.7606': attribute type 58 has an invalid length. [ 658.602986][ T5290] usb 5-1: USB disconnect, device number 30 [ 658.941116][ T1102] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 659.567032][ T5290] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 659.621260][ T79] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 659.760871][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.772681][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.782530][ T5290] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 659.809513][ T79] usb 6-1: Using ep0 maxpacket: 16 [ 659.859819][ T5290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.885033][T23180] loop2: detected capacity change from 0 to 32768 [ 659.891751][ T79] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.913741][ T5290] usb 5-1: config 0 descriptor?? [ 659.918855][ T79] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 659.941088][T23180] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 659.950311][ T79] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.049045][T23180] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 660.065295][ T79] usb 6-1: config 0 descriptor?? [ 660.268528][T23180] gfs2: fsid=syz:syz.s: journal 0 mapped with 1 extents in 0ms [ 660.309658][ T1102] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 660.502667][ T5290] lg-g15 0003:046D:C222.0033: unknown main item tag 0x0 [ 660.546706][T23180] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 660.553238][ T5290] lg-g15 0003:046D:C222.0033: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 660.730398][ T79] lenovo 0003:17EF:60A3.0034: hidraw1: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.5-1/input0 [ 660.756794][ T79] usb 5-1: USB disconnect, device number 31 [ 660.833371][ T5286] usb 6-1: USB disconnect, device number 34 [ 660.999518][ T930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 661.013300][ T5327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 661.170079][T23216] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7625'. [ 661.690723][ T5291] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 661.864079][ T5291] usb 4-1: Using ep0 maxpacket: 8 [ 661.873496][ T5291] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 661.893719][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.925365][ T5291] usb 4-1: Product: syz [ 661.939752][ T5291] usb 4-1: Manufacturer: syz [ 661.958192][ T5291] usb 4-1: SerialNumber: syz [ 661.973184][ T5291] usb 4-1: config 0 descriptor?? [ 661.997516][ T5291] gspca_main: se401-2.14.0 probing 047d:5003 [ 662.069702][ T5286] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 662.129034][T23252] loop2: detected capacity change from 0 to 64 [ 662.263420][ T5286] usb 6-1: Using ep0 maxpacket: 16 [ 662.276069][ T5286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.285868][ T5286] usb 6-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 662.315454][ T5286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.436140][ T5286] usb 6-1: config 0 descriptor?? [ 662.439995][ T5291] gspca_se401: ExtraFeatures: 243 [ 662.470930][ T5291] gspca_se401: Too many frame sizes [ 662.672474][ T5291] usb 4-1: USB disconnect, device number 42 [ 662.741524][ T930] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 662.909178][ T930] usb 3-1: Using ep0 maxpacket: 16 [ 662.923548][ T5286] wacom 0003:056A:0000.0035: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 662.948701][ T5286] wacom 0003:056A:0000.0035: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.5-1/input0 [ 662.973617][ T930] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 662.993901][ T930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.003700][ T5286] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0000.0035/input/input40 [ 663.029736][ T930] usb 3-1: Product: syz [ 663.034094][ T930] usb 3-1: Manufacturer: syz [ 663.038705][ T930] usb 3-1: SerialNumber: syz [ 663.065955][ T930] usb 3-1: config 0 descriptor?? [ 663.094846][ T930] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 663.164446][ T5286] usb 6-1: USB disconnect, device number 35 [ 663.353637][T23250] loop4: detected capacity change from 0 to 40427 [ 663.406088][T23250] F2FS-fs (loop4): invalid crc value [ 663.540463][ T930] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 663.545362][T23250] F2FS-fs (loop4): Found nat_bits in checkpoint [ 663.560495][ T930] visor 3-1:0.0: probe with driver visor failed with error -71 [ 663.620038][ T930] usb 3-1: USB disconnect, device number 44 [ 663.694836][T23250] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 663.766337][T23262] f2fs_ckpt-7:4: attempt to access beyond end of device [ 663.766337][T23262] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 663.804740][T23262] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 665.020795][T23274] loop5: detected capacity change from 0 to 32768 [ 665.053434][T23274] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7650 (23274) [ 665.103141][T23274] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 665.123940][T23274] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 665.146550][T23274] BTRFS info (device loop5): using free-space-tree [ 665.157866][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 665.765232][T23307] loop4: detected capacity change from 0 to 40427 [ 665.993914][T23307] F2FS-fs (loop4): Found nat_bits in checkpoint [ 666.208894][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7677'. [ 666.349622][T13250] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 666.422323][T23354] netlink: 'syz.3.7683': attribute type 10 has an invalid length. [ 666.490155][T23307] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 666.523548][T23360] loop2: detected capacity change from 0 to 64 [ 666.632682][T23360] syz.2.7682: attempt to access beyond end of device [ 666.632682][T23360] loop2: rw=0, sector=548, nr_sectors = 2 limit=64 [ 666.673293][T20043] syz-executor: attempt to access beyond end of device [ 666.673293][T20043] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 666.693339][T23360] Buffer I/O error on dev loop2, logical block 274, async page read [ 666.718381][ T5248] Bluetooth: hci7: command 0x0405 tx timeout [ 666.725757][T20043] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 666.788976][T23360] syz.2.7682: attempt to access beyond end of device [ 666.788976][T23360] loop2: rw=0, sector=548, nr_sectors = 2 limit=64 [ 666.815013][T23360] Buffer I/O error on dev loop2, logical block 274, async page read [ 666.864064][ T29] audit: type=1800 audit(1728893929.338:2067): pid=23360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7682" name="file3" dev="loop2" ino=6 res=0 errno=0 [ 667.194902][T23374] loop2: detected capacity change from 0 to 64 [ 667.307820][T23374] hfs: bad catalog entry type 0 [ 668.132455][T23404] loop5: detected capacity change from 0 to 256 [ 668.763269][T23399] loop2: detected capacity change from 0 to 32768 [ 669.271162][T23428] loop4: detected capacity change from 0 to 32768 [ 669.278479][T23428] XFS: noikeep mount option is deprecated. [ 669.351305][T23428] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 669.382747][ T5330] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 669.411005][T23428] XFS (loop4): Ending clean mount [ 669.419621][T23428] XFS (loop4): Quotacheck needed: Please wait. [ 669.687687][ T5330] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.698126][ T5330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 669.707043][ T5330] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 669.724176][ T5330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.748672][ T5330] usb 6-1: config 0 descriptor?? [ 669.794989][T23428] XFS (loop4): Quotacheck: Done. [ 669.939542][T20043] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 669.978729][ T5286] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 670.368698][T23450] loop2: detected capacity change from 0 to 32768 [ 670.406478][ T5330] Bluetooth: Can't get state to change to load configuration err [ 670.414621][T23450] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7719 (23450) [ 670.427669][ T5330] Bluetooth: Loading sysconfig file failed [ 670.434508][ T5330] ath3k 6-1:0.0: probe with driver ath3k failed with error -16 [ 670.479940][ T5286] usb 4-1: Using ep0 maxpacket: 8 [ 670.510229][ T5330] usb 6-1: USB disconnect, device number 36 [ 670.672989][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.684345][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.694241][ T5286] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 670.695782][T23450] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 670.703274][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.724255][ T5286] usb 4-1: config 0 descriptor?? [ 670.748129][T23450] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 670.756986][T23450] BTRFS info (device loop2): using free-space-tree [ 671.261925][ T5286] belkin 0003:1020:0006.0036: unknown main item tag 0xd [ 671.363318][ T5286] belkin 0003:1020:0006.0036: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.3-1/input0 [ 671.431245][ T2519] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 671.472810][ T930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 671.521924][ T5286] usb 4-1: USB disconnect, device number 43 [ 671.701849][ T29] audit: type=1326 audit(1728893933.796:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23498 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4157dff9 code=0x7ffc0000 [ 671.767496][ T5230] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 671.791596][ T29] audit: type=1326 audit(1728893933.805:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23498 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f8f4157dff9 code=0x7ffc0000 [ 671.845644][ T29] audit: type=1326 audit(1728893933.805:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23498 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4157dff9 code=0x7ffc0000 [ 671.960675][ T29] audit: type=1326 audit(1728893933.805:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23498 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4157dff9 code=0x7ffc0000 [ 672.080905][ T29] audit: type=1326 audit(1728893933.805:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23498 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f8f4157dff9 code=0x7ffc0000 [ 672.277473][ T29] audit: type=1326 audit(1728893933.805:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23498 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4157dff9 code=0x7ffc0000 [ 672.362242][ T29] audit: type=1326 audit(1728893933.805:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23498 comm="syz.0.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4157dff9 code=0x7ffc0000 [ 672.866529][T23534] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7754'. [ 672.936852][T23534] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7754'. [ 673.708860][T23563] loop4: detected capacity change from 0 to 64 [ 673.828836][T23525] loop2: detected capacity change from 0 to 32768 [ 673.987023][T23542] loop5: detected capacity change from 0 to 32768 [ 673.988348][T23525] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7750 (23525) [ 673.995058][T23542] XFS: ikeep mount option is deprecated. [ 674.068182][T23525] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 674.111491][T23525] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 674.135293][T23525] BTRFS info (device loop2): using free-space-tree [ 674.168586][T23542] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 674.451280][T23573] block device autoloading is deprecated and will be removed. [ 674.482781][T23542] XFS (loop5): Ending clean mount [ 674.492227][T23573] syz.3.7767: attempt to access beyond end of device [ 674.492227][T23573] loop255: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 674.496910][T23542] XFS (loop5): Quotacheck needed: Please wait. [ 674.633730][T23542] XFS (loop5): Quotacheck: Done. [ 674.795808][T13250] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 674.810932][T23603] Bluetooth: MGMT ver 1.23 [ 674.904542][ T5230] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 674.935684][T23577] loop4: detected capacity change from 0 to 32768 [ 675.271387][T23577] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 675.567229][ T5290] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 675.621531][T23630] xt_bpf: check failed: parse error [ 675.731684][ T5290] usb 4-1: Using ep0 maxpacket: 32 [ 675.769888][ T5290] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 675.793513][ T5290] usb 4-1: config 0 has no interface number 0 [ 675.820726][ T5290] usb 4-1: config 0 interface 113 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 675.844340][ T5290] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 675.854985][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.925001][ T5290] usb 4-1: Product: syz [ 675.936051][ T5290] usb 4-1: Manufacturer: syz [ 675.945806][ T5290] usb 4-1: SerialNumber: syz [ 675.970985][ T5290] usb 4-1: config 0 descriptor?? [ 675.982016][T23612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 676.242009][ T5290] net1080 4-1:0.113: probe with driver net1080 failed with error -71 [ 676.312991][ T5290] usb 4-1: USB disconnect, device number 44 [ 676.425485][T20043] ocfs2: Unmounting device (7,4) on (node local) [ 676.889280][T23647] loop5: detected capacity change from 0 to 40427 [ 676.948370][T23647] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 676.948402][T23647] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 677.184204][T23647] F2FS-fs (loop5): Found nat_bits in checkpoint [ 677.379092][T23647] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 677.386277][T23647] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 677.641386][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 677.804614][T23679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7795'. [ 677.884636][T23685] loop4: detected capacity change from 0 to 128 [ 677.967942][T23685] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 678.083951][T20048] Bluetooth: hci9: Controller not accepting commands anymore: ncmd = 0 [ 678.098961][T20048] Bluetooth: hci9: Injecting HCI hardware error event [ 678.109194][T20048] Bluetooth: hci9: hardware error 0x00 [ 678.353585][ T29] audit: type=1800 audit(1728893939.934:2075): pid=23685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7796" name="file2" dev="loop4" ino=95 res=0 errno=0 [ 678.374293][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.347498][T23706] loop4: detected capacity change from 0 to 32768 [ 679.745426][T23721] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7814'. [ 679.780219][T23721] netlink: 'syz.2.7814': attribute type 2 has an invalid length. [ 680.698144][T20048] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 680.720882][T23751] loop5: detected capacity change from 0 to 64 [ 680.969787][T23755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7830'. [ 681.113592][ T5330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 681.207543][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 682.017011][T23793] openvswitch: netlink: Actions may not be safe on all matching packets [ 682.092254][ T5290] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 682.276006][ T5290] usb 3-1: Using ep0 maxpacket: 8 [ 682.314508][ T5290] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 682.329596][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 682.363129][ T5290] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 682.417360][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 682.459725][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 682.537305][ T5290] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 682.544753][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 682.589694][ T5290] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 682.622109][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 682.654674][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 682.699295][ T5290] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 682.706783][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 682.770281][ T5290] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 682.814120][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 682.859718][ T5290] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 682.906512][ T5290] usb 3-1: string descriptor 0 read error: -22 [ 682.912819][ T5290] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 682.937005][ T5290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.968017][ T5290] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 683.018529][T23781] loop4: detected capacity change from 0 to 40427 [ 683.035359][T23781] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 683.043121][T23781] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 683.065006][T23822] loop5: detected capacity change from 0 to 2048 [ 683.075882][T23781] F2FS-fs (loop4): Found nat_bits in checkpoint [ 683.134612][T23822] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 683.249516][ T5290] usb 3-1: USB disconnect, device number 45 [ 683.288719][T23781] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 683.299577][T23781] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 683.880273][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 684.724271][ T5290] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 684.899211][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.921503][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.957162][ T5290] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 685.011421][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.042272][ T5290] usb 3-1: config 0 descriptor?? [ 685.428335][ T79] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 685.491489][ T5290] elecom 0003:056E:010C.0037: unknown main item tag 0x0 [ 685.500893][ T5290] elecom 0003:056E:010C.0037: unknown main item tag 0x0 [ 685.517329][ T5290] elecom 0003:056E:010C.0037: unknown main item tag 0x0 [ 685.536647][ T5290] elecom 0003:056E:010C.0037: unknown main item tag 0x0 [ 685.551130][ T5290] elecom 0003:056E:010C.0037: unknown main item tag 0x0 [ 685.571045][ T5290] elecom 0003:056E:010C.0037: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.2-1/input0 [ 685.590814][ T5330] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 685.613265][ T79] usb 5-1: Using ep0 maxpacket: 16 [ 685.631868][ T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.645864][ T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.662842][ T79] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 685.677400][ T79] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.692253][ T79] usb 5-1: config 0 descriptor?? [ 685.721588][ T5290] usb 3-1: USB disconnect, device number 46 [ 685.776919][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.799329][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.829317][ T5330] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 685.871600][ T5330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.894426][ T5330] usb 4-1: config 0 descriptor?? [ 686.153910][ T79] corsair 0003:1B1C:1B02.0038: unbalanced collection at end of report description [ 686.198565][ T79] corsair 0003:1B1C:1B02.0038: parse failed [ 686.204573][ T79] corsair 0003:1B1C:1B02.0038: probe with driver corsair failed with error -22 [ 686.346767][ T5330] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 686.365270][ T5330] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 686.381099][ T79] usb 5-1: USB disconnect, device number 32 [ 686.394567][ T5330] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 686.445912][ T5330] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 686.463988][ T5330] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 686.471649][ T5330] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 686.479302][ T5330] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 686.491690][ T5330] petalynx 0003:18B1:0037.0039: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.3-1/input0 [ 686.623609][ T5330] usb 4-1: USB disconnect, device number 45 [ 687.043525][T23918] loop5: detected capacity change from 0 to 512 [ 687.062275][T23918] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 687.131790][T23918] EXT4-fs (loop5): 1 truncate cleaned up [ 687.155459][T23918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.357585][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 687.440475][T13250] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.454027][T23925] ebtables: ebtables: counters copy to user failed while replacing table [ 687.803302][T23947] loop2: detected capacity change from 0 to 8 [ 687.918460][T23949] loop4: detected capacity change from 0 to 1024 [ 688.048844][T23955] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7921'. [ 688.082728][T23955] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7921'. [ 688.097972][T23959] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7923'. [ 688.136396][ T33] hfsplus: b-tree write err: -5, ino 4 [ 688.315088][T23965] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 688.363119][T23965] overlayfs: missing 'lowerdir' [ 688.748054][T23979] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 688.773751][T23978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7933'. [ 688.786459][ T5290] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 688.960534][T23986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7934'. [ 688.984883][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.008795][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.065491][ T5290] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 689.091223][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.110494][ T5290] usb 4-1: config 0 descriptor?? [ 689.160223][T23988] loop4: detected capacity change from 0 to 1024 [ 689.198636][ T79] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 689.389656][ T79] usb 6-1: Using ep0 maxpacket: 16 [ 689.406811][ T79] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.430386][ T79] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.459659][ T79] usb 6-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 689.479931][ T79] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.539274][ T79] usb 6-1: config 0 descriptor?? [ 689.580878][ T5290] cougar 0003:060B:700A.003A: item fetching failed at offset 2/5 [ 689.589841][ T5290] cougar 0003:060B:700A.003A: parse failed [ 689.595804][ T5290] cougar 0003:060B:700A.003A: probe with driver cougar failed with error -22 [ 689.808866][ T5287] usb 4-1: USB disconnect, device number 46 [ 689.849088][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7941'. [ 689.992667][ T79] razer 0003:1532:010D.003B: item fetching failed at offset 4/6 [ 690.018574][ T79] razer 0003:1532:010D.003B: probe with driver razer failed with error -22 [ 690.114208][T24002] sp0: Synchronizing with TNC [ 690.127287][ T2519] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 690.209539][ T5330] usb 6-1: USB disconnect, device number 37 [ 690.279378][T23990] loop2: detected capacity change from 0 to 40427 [ 690.329829][T23990] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 690.359279][T23990] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 690.367542][T23990] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1fffff [ 690.395789][T23990] F2FS-fs (loop2): invalid crc value [ 690.428794][T23990] F2FS-fs (loop2): Found nat_bits in checkpoint [ 690.478013][T24011] netlink: 'syz.4.7946': attribute type 58 has an invalid length. [ 690.640025][T23990] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 690.653373][T23990] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 690.757743][ T5230] syz-executor: attempt to access beyond end of device [ 690.757743][ T5230] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 690.791248][ T5230] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 690.912490][T24022] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 690.954168][ T5287] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 690.967424][T24022] macvlan2: entered promiscuous mode [ 690.973190][T24022] macvlan2: entered allmulticast mode [ 690.986472][T24022] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 691.084288][T24022] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 691.091521][T24022] mac80211_hwsim hwsim23 wlan1: left promiscuous mode [ 691.365591][ T5287] usb 4-1: Using ep0 maxpacket: 16 [ 691.377748][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.388016][ T5287] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 691.407542][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.434362][ T5287] usb 4-1: config 0 descriptor?? [ 691.505548][T24018] loop4: detected capacity change from 0 to 32768 [ 691.527924][T24018] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7949 (24018) [ 691.715902][T24018] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 691.729876][T24018] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 691.739649][T24018] BTRFS info (device loop4): using free-space-tree [ 692.050373][ T5287] wacom 0003:056A:0000.003C: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 692.061320][ T5287] wacom 0003:056A:0000.003C: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.3-1/input0 [ 692.078953][ T5287] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0000.003C/input/input44 [ 692.201432][ T5330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 692.276206][ T5330] usb 4-1: USB disconnect, device number 47 [ 692.375239][T24038] loop2: detected capacity change from 0 to 32768 [ 692.401786][T24038] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7956 (24038) [ 692.470681][T24038] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 692.522740][T24038] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 692.577766][T24038] BTRFS info (device loop2): using free-space-tree [ 692.607624][T20043] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 692.894442][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 693.211591][T24079] netlink: 'syz.3.7961': attribute type 1 has an invalid length. [ 693.226637][T24079] netlink: 9384 bytes leftover after parsing attributes in process `syz.3.7961'. [ 693.260812][ T5230] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 693.563257][T24092] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 693.671622][ T29] audit: type=1326 audit(1728893954.065:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24094 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff6b3d74fa7 code=0x7ffc0000 [ 693.828814][ T29] audit: type=1326 audit(1728893954.065:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24094 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff6b3d19959 code=0x7ffc0000 [ 693.911391][ T29] audit: type=1326 audit(1728893954.065:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24094 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff6b3d74fa7 code=0x7ffc0000 [ 693.942577][T24098] netlink: 'syz.3.7972': attribute type 31 has an invalid length. [ 693.978092][ T29] audit: type=1326 audit(1728893954.065:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24094 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff6b3d19959 code=0x7ffc0000 [ 694.052335][ T29] audit: type=1326 audit(1728893954.065:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24094 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff6b3d74fa7 code=0x7ffc0000 [ 694.117130][ T5800] udevd[5800]: failed to send result of seq 25814 to main daemon: Connection refused [ 694.159442][ T29] audit: type=1326 audit(1728893954.065:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24094 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff6b3d19959 code=0x7ffc0000 [ 694.234521][ T29] audit: type=1326 audit(1728893954.065:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24094 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff6b3d74fa7 code=0x7ffc0000 [ 694.257591][ T29] audit: type=1326 audit(1728893954.065:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24094 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff6b3d19959 code=0x7ffc0000 [ 694.280561][ T29] audit: type=1326 audit(1728893954.065:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24094 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff6b3d74fa7 code=0x7ffc0000 [ 694.303836][ T29] audit: type=1326 audit(1728893954.065:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24094 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff6b3d19959 code=0x7ffc0000 [ 695.055155][T24101] loop4: detected capacity change from 0 to 32768 [ 695.156079][T24101] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 695.212805][ T5330] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 695.256481][ T5290] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 695.265386][T24101] XFS (loop4): Ending clean mount [ 695.352819][ T5327] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 695.361277][T20043] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 695.444811][ T5330] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 695.453519][ T5330] usb 3-1: config 179 has no interface number 0 [ 695.459817][ T5330] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 695.468513][T24150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7994'. [ 695.473758][ T5330] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 695.490813][ T5330] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 695.502989][ T5330] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 695.517310][ T5330] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 695.531340][ T5330] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 695.535540][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.541073][ T5330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.580636][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.623337][ T5290] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 695.657659][ T5327] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 695.666850][T24134] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 695.674308][ T5327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.678292][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.701222][ T5330] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 695.714878][ T5330] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 695.737388][ T5290] usb 2-1: config 0 descriptor?? [ 695.775849][ T5327] usb 6-1: config 0 descriptor?? [ 695.795930][ T5327] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 695.940785][ T79] usb 3-1: USB disconnect, device number 47 [ 696.274962][ T5290] monterey 0003:0566:3004.003D: item fetching failed at offset 0/8 [ 696.301729][ T5290] monterey 0003:0566:3004.003D: probe with driver monterey failed with error -22 [ 696.334901][T24165] autofs: Bad value for 'fd' [ 696.361095][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 696.501829][ T5290] usb 2-1: USB disconnect, device number 25 [ 696.540976][ T5327] gp8psk: usb out operation failed. [ 696.551811][ T5327] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 696.565819][ T5327] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 696.588266][ T5327] usb 6-1: USB disconnect, device number 38 [ 697.003135][T24164] loop4: detected capacity change from 0 to 40427 [ 697.018628][T24164] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 697.029742][T24164] F2FS-fs (loop4): invalid crc value [ 697.044513][T24164] F2FS-fs (loop4): Found nat_bits in checkpoint [ 697.203820][T24164] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 697.879365][ T5327] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 697.939882][T24171] loop2: detected capacity change from 0 to 32768 [ 698.018125][T24171] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 698.133958][ T5327] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 698.143464][ T5327] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 698.205007][ T5327] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 698.226342][ T5327] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 698.251277][ T5327] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 698.346335][ T5327] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 698.354590][ T5327] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 698.364793][ T5327] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 698.374877][ T5327] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 698.386390][ T5327] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 698.406818][ T5327] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 698.409445][T24171] XFS (loop2): Ending clean mount [ 698.414774][ T5327] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 698.430758][ T5327] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 698.494460][ T5327] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 698.516059][ T5327] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 698.529852][ T5327] usb 4-1: string descriptor 0 read error: -22 [ 698.536123][ T5327] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 698.553858][ T5327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.575143][ T5327] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 698.719676][ T5230] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 698.909510][ T5287] usb 4-1: USB disconnect, device number 48 [ 699.136272][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 699.305187][T24259] loop2: detected capacity change from 0 to 1024 [ 699.437045][T24257] loop4: detected capacity change from 0 to 4096 [ 699.460575][T24257] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 699.508860][T24259] hfsplus: bad catalog entry type [ 699.590461][ T11] hfsplus: b-tree write err: -5, ino 4 [ 699.663786][T24257] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 700.141420][ T5290] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 700.330351][ T5290] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.362761][ T5290] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 700.384685][ T5290] usb 3-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=43.58 [ 700.418211][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.432999][T24262] loop5: detected capacity change from 0 to 32768 [ 700.456268][ T5290] usb 3-1: config 0 descriptor?? [ 700.477797][T24262] XFS: noikeep mount option is deprecated. [ 700.596345][T24262] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 700.688638][ T5288] usb 3-1: USB disconnect, device number 48 [ 700.711343][T24292] loop4: detected capacity change from 0 to 4096 [ 700.718636][T24262] XFS (loop5): Ending clean mount [ 700.736068][T24262] XFS (loop5): Quotacheck needed: Please wait. [ 700.775069][T24292] ntfs3(loop4): ino=0, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 700.917065][T24262] XFS (loop5): Quotacheck: Done. [ 701.063168][T13250] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 701.523023][T24324] loop5: detected capacity change from 0 to 1024 [ 701.604727][ T5327] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 701.853060][ T5327] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 701.861281][ T5327] usb 5-1: config 0 has no interface number 0 [ 701.874977][ T5327] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 701.885403][ T5327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.895310][ T5327] usb 5-1: Product: syz [ 701.897852][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 701.897870][ T29] audit: type=1326 audit(1728893961.661:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24341 comm="syz.3.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23537dff9 code=0x7ffc0000 [ 701.906162][ T5327] usb 5-1: Manufacturer: syz [ 701.944804][ T5327] usb 5-1: SerialNumber: syz [ 701.958759][ T5327] usb 5-1: config 0 descriptor?? [ 701.978060][ T29] audit: type=1326 audit(1728893961.717:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24341 comm="syz.3.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23537dff9 code=0x7ffc0000 [ 702.001470][ T5288] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 702.062032][ T29] audit: type=1326 audit(1728893961.717:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24341 comm="syz.3.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb23537dff9 code=0x7ffc0000 [ 702.110876][ T29] audit: type=1326 audit(1728893961.717:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24341 comm="syz.3.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23537dff9 code=0x7ffc0000 [ 702.156224][ T29] audit: type=1326 audit(1728893961.717:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24341 comm="syz.3.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23537dff9 code=0x7ffc0000 [ 702.209817][ T29] audit: type=1326 audit(1728893961.717:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24341 comm="syz.3.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb23537dff9 code=0x7ffc0000 [ 702.246931][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.264917][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.274717][ T5288] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 702.285403][ T29] audit: type=1326 audit(1728893961.744:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24341 comm="syz.3.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23537dff9 code=0x7ffc0000 [ 702.340455][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.373997][ T5288] usb 3-1: config 0 descriptor?? [ 702.406016][T24352] openvswitch: netlink: Message has 213 unknown bytes. [ 702.417177][ T5327] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 702.446103][T24352] openvswitch: netlink: Actions may not be safe on all matching packets [ 702.456007][ T5327] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 702.476820][ T5327] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 702.495757][ T5327] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 702.525838][ T5327] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 702.611896][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 702.656673][ T5327] usb 5-1: USB disconnect, device number 33 [ 702.668661][ T5327] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 702.699279][ T5327] keyspan 5-1:0.133: device disconnected [ 702.830879][ T5288] cp2112 0003:10C4:EA90.003E: unknown main item tag 0x0 [ 702.862265][ T5288] cp2112 0003:10C4:EA90.003E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 703.045355][ T5288] cp2112 0003:10C4:EA90.003E: error requesting version [ 703.067226][ T5288] cp2112 0003:10C4:EA90.003E: probe with driver cp2112 failed with error -71 [ 703.085211][ T5288] usb 3-1: USB disconnect, device number 49 [ 703.558686][T24381] loop4: detected capacity change from 0 to 4096 [ 703.566584][T24381] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 703.635659][T24381] ntfs3(loop4): Inode r=b is not in use! [ 703.641767][T24381] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 703.670618][T24381] ntfs3(loop4): Failed to load $Extend (-116). [ 703.683949][T24381] ntfs3(loop4): Failed to initialize $Extend. [ 703.938045][T24395] loop2: detected capacity change from 0 to 64 [ 704.261750][ T29] audit: type=1326 audit(1728893963.858:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24406 comm="syz.3.8110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb23537dff9 code=0x0 [ 704.337127][T24410] Dead loop on virtual device ip6_vti0, fix it urgently! [ 704.443465][ T5330] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 704.682285][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 704.757542][ T5330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.768917][ T5330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.800001][ T5330] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 704.834516][ T5330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.866748][ T5330] usb 5-1: config 0 descriptor?? [ 704.922537][ T5288] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 705.159121][ T5288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.171526][ T5288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.222450][ T5288] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 705.253450][ T5288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.282240][ T5288] usb 6-1: config 0 descriptor?? [ 705.363444][ T5330] wacom 0003:056A:032C.003F: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.4-1/input0 [ 705.507413][T24434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8121'. [ 705.522920][T24414] loop2: detected capacity change from 0 to 32768 [ 705.547678][T20048] Bluetooth: hci8: command tx timeout [ 705.581606][ T5327] usb 5-1: USB disconnect, device number 34 [ 705.589433][T24414] JBD2: Ignoring recovery information on journal [ 705.736492][T24414] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 705.768015][ T5288] stadia 0003:18D1:9400.0040: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.5-1/input0 [ 705.807811][ T5288] stadia 0003:18D1:9400.0040: no inputs found [ 705.839915][ T5288] stadia 0003:18D1:9400.0040: force feedback init failed [ 705.986268][ T5288] usb 6-1: USB disconnect, device number 39 [ 706.026447][ T5230] ocfs2: Unmounting device (7,2) on (node local) [ 706.997616][ T5290] kernel write not supported for file /input/event0 (pid: 5290 comm: kworker/1:6) [ 707.160462][T24475] loop4: detected capacity change from 0 to 1764 [ 707.202037][T24475] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 707.731734][T24508] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8154'. [ 707.772199][T24508] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 708.148528][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 708.269723][T24528] sp0: Synchronizing with TNC [ 708.840630][T24510] loop5: detected capacity change from 0 to 32768 [ 708.910560][T24510] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 709.181427][T13250] ocfs2: Unmounting device (7,5) on (node local) [ 709.651411][T24578] loop5: detected capacity change from 0 to 2048 [ 709.683140][T24578] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 709.707684][T24578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 709.867391][T24556] loop2: detected capacity change from 0 to 32768 [ 709.895435][T24556] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8176 (24556) [ 709.912713][T24556] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 709.934528][T24556] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 709.968393][T24556] BTRFS info (device loop2): using free-space-tree [ 710.020281][T24562] loop4: detected capacity change from 0 to 32768 [ 710.043182][T24584] loop5: detected capacity change from 0 to 2048 [ 710.064623][T24584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 710.076204][ T5288] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 710.095220][T24562] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 710.219207][T24556] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 710.258574][T24562] XFS (loop4): Ending clean mount [ 710.263843][ T5288] usb 4-1: Using ep0 maxpacket: 16 [ 710.281007][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31551, setting to 1024 [ 710.295283][ T5288] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 710.336667][ T5288] usb 4-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=8f.9a [ 710.346008][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.350169][T20043] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 710.354233][ T5288] usb 4-1: Product: syz [ 710.366728][ T5288] usb 4-1: Manufacturer: syz [ 710.371405][ T5288] usb 4-1: SerialNumber: syz [ 710.394555][ T5288] usb 4-1: config 0 descriptor?? [ 710.400206][T24582] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 710.435096][ T5288] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 710.538979][ T5230] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 710.751164][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 710.761290][ T5288] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 710.782524][ T5288] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 710.826051][ T5288] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 710.882904][ T5288] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 710.922415][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 711.032525][ T5288] usb 4-1: USB disconnect, device number 49 [ 711.043653][ T5288] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 711.095465][ T5288] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 711.133593][ T5288] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 711.172769][ T5288] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 711.196018][ T5288] quatech2 4-1:0.0: device disconnected [ 711.428937][T24631] loop2: detected capacity change from 0 to 512 [ 711.658412][ T5287] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 711.824992][T24644] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8207'. [ 711.853123][ T5287] usb 2-1: Using ep0 maxpacket: 16 [ 711.866391][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.906179][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.936634][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 711.971876][ T5287] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 711.994360][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.015490][ T5288] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 712.025799][ T5287] usb 2-1: config 0 descriptor?? [ 712.194443][ T5288] usb 5-1: config 0 has an invalid interface number: 175 but max is 0 [ 712.214975][ T5288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.248045][ T5288] usb 5-1: config 0 has no interface number 0 [ 712.263467][ T5288] usb 5-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 712.299872][ T5288] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 712.353421][ T5288] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 712.375355][ T5288] usb 5-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 712.414562][ T5288] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 712.427383][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.435514][ T5288] usb 5-1: Product: syz [ 712.472296][ T5288] usb 5-1: Manufacturer: syz [ 712.476998][ T5288] usb 5-1: SerialNumber: syz [ 712.484535][ T5288] usb 5-1: config 0 descriptor?? [ 712.494615][ T5288] symbolserial 5-1:0.175: symbol converter detected [ 712.506750][ T5288] usb 5-1: symbol converter now attached to ttyUSB0 [ 712.519319][ T5287] microsoft 0003:045E:07DA.0041: ignoring exceeding usage max [ 712.552612][ T5287] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0041/input/input51 [ 712.693775][ T5287] microsoft 0003:045E:07DA.0041: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 712.727333][ T5330] usb 5-1: USB disconnect, device number 35 [ 712.737384][ T5330] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 712.774717][T24664] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 712.776797][ T5330] symbolserial 5-1:0.175: device disconnected [ 712.918690][ T5288] usb 2-1: USB disconnect, device number 26 [ 713.002599][ T5327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 713.208289][T24652] loop2: detected capacity change from 0 to 40427 [ 713.252809][T24652] F2FS-fs (loop2): heap/no_heap options were deprecated [ 713.273918][T24652] F2FS-fs (loop2): invalid crc value [ 713.302790][T24652] F2FS-fs (loop2): Found nat_bits in checkpoint [ 713.454772][T24658] loop5: detected capacity change from 0 to 32768 [ 713.498614][T24658] XFS: ikeep mount option is deprecated. [ 713.530679][T24658] XFS: ikeep mount option is deprecated. [ 713.565123][T24652] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 713.662726][ T5230] syz-executor: attempt to access beyond end of device [ 713.662726][ T5230] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 713.677152][ T5230] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 713.772511][T24692] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 713.781380][T24658] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 714.100678][T24658] XFS (loop5): Ending clean mount [ 714.108447][T24658] XFS (loop5): Quotacheck needed: Please wait. [ 714.167793][T24658] XFS (loop5): Quotacheck: Done. [ 714.225653][ T5330] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 714.281212][T13250] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 714.390486][ T5330] usb 4-1: Using ep0 maxpacket: 16 [ 714.412581][ T5330] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 714.422904][ T5330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.430927][ T5330] usb 4-1: Product: syz [ 714.461182][ T5330] usb 4-1: Manufacturer: syz [ 714.475359][ T5330] usb 4-1: SerialNumber: syz [ 714.504364][ T5330] usb 4-1: config 0 descriptor?? [ 714.558926][ T5330] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 714.766986][ T5330] usb 4-1: USB disconnect, device number 50 [ 714.935859][T24721] loop4: detected capacity change from 0 to 1024 [ 715.157492][ T930] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 715.341961][ T930] usb 2-1: Using ep0 maxpacket: 16 [ 715.354142][ T930] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 715.373749][ T930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.408510][ T930] usb 2-1: config 0 descriptor?? [ 715.914223][ T930] logitech 0003:046D:CA04.0042: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.1-1/input0 [ 715.984811][ T930] logitech 0003:046D:CA04.0042: no inputs found [ 716.137663][ T930] usb 2-1: USB disconnect, device number 27 [ 716.616035][T24731] loop4: detected capacity change from 0 to 40427 [ 716.666534][T24731] F2FS-fs (loop4): invalid crc value [ 716.699806][T24731] F2FS-fs (loop4): Found nat_bits in checkpoint [ 716.859241][T24770] loop5: detected capacity change from 0 to 4096 [ 716.911937][T24753] loop2: detected capacity change from 0 to 32768 [ 716.920422][T24731] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 716.933478][T24753] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8254 (24753) [ 716.950540][T24753] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 716.973188][T24753] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 716.996488][T24753] BTRFS info (device loop2): using free-space-tree [ 717.047470][T24764] f2fs_ckpt-7:4: attempt to access beyond end of device [ 717.047470][T24764] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 717.062270][T24764] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 717.163085][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 717.514254][T24753] BTRFS error (device loop2): balance: invalid convert metadata profile raid1c4 [ 717.675282][ T5230] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 717.692689][ T930] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 717.879760][ T930] usb 4-1: Using ep0 maxpacket: 16 [ 717.900591][ T930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.931862][ T930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.996006][ T930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.027718][ T930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 718.061001][ T930] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 718.193789][ T930] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 718.203083][ T930] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 718.211095][ T930] usb 4-1: Manufacturer: syz [ 718.224586][ T930] usb 4-1: config 0 descriptor?? [ 718.241411][ T930] usbhid 4-1:0.0: can't add hid device: -22 [ 718.251686][ T930] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 718.359038][T24795] loop5: detected capacity change from 0 to 40427 [ 718.378016][T24795] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 718.409521][T24795] F2FS-fs (loop5): Image doesn't support compression [ 718.423725][T24795] F2FS-fs (loop5): Image doesn't support compression [ 718.445044][T24795] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4 [ 718.464339][ T930] usb 4-1: USB disconnect, device number 51 [ 718.484504][T24795] F2FS-fs (loop5): invalid crc value [ 718.493534][T24795] F2FS-fs (loop5): Found nat_bits in checkpoint [ 718.574699][T24810] loop4: detected capacity change from 0 to 1024 [ 718.617956][T24795] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 718.628216][ T29] audit: type=1800 audit(1728893977.103:2106): pid=24810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8272" name="bus" dev="loop4" ino=25 res=0 errno=0 [ 718.737695][T24813] trusted_key: encrypted_key: insufficient parameters specified [ 718.768200][T13250] syz-executor: attempt to access beyond end of device [ 718.768200][T13250] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 718.808343][T13250] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 719.156860][T24821] loop4: detected capacity change from 0 to 512 [ 719.245384][T24821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 719.320815][T24821] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.495525][T20043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 719.940733][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 720.126941][T24861] loop4: detected capacity change from 0 to 4096 [ 720.219190][T24868] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 720.489432][T24877] loop2: detected capacity change from 0 to 24 [ 720.496316][T24877] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 720.553383][T24877] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 720.789695][T24887] loop2: detected capacity change from 0 to 256 [ 720.805220][T24890] loop5: detected capacity change from 0 to 256 [ 720.946405][T24890] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 721.057213][T24898] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8312'. [ 721.084581][T24887] FAT-fs (loop2): Directory bread(block 64) failed [ 721.091637][T24887] FAT-fs (loop2): Directory bread(block 65) failed [ 721.128034][T24887] FAT-fs (loop2): Directory bread(block 66) failed [ 721.150606][T24887] FAT-fs (loop2): Directory bread(block 67) failed [ 721.178029][T24887] FAT-fs (loop2): Directory bread(block 68) failed [ 721.191463][T24887] FAT-fs (loop2): Directory bread(block 69) failed [ 721.198231][T24887] FAT-fs (loop2): Directory bread(block 70) failed [ 721.204960][T24887] FAT-fs (loop2): Directory bread(block 71) failed [ 721.211568][T24887] FAT-fs (loop2): Directory bread(block 72) failed [ 721.218266][T24887] FAT-fs (loop2): Directory bread(block 73) failed [ 721.549859][ T5287] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 721.723259][ T5287] usb 5-1: Using ep0 maxpacket: 16 [ 721.733465][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.766432][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.798504][ T5287] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 721.833821][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.864731][ T5287] usb 5-1: config 0 descriptor?? [ 722.123896][ T930] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 722.296651][ T930] usb 3-1: Using ep0 maxpacket: 8 [ 722.319040][ T5287] hid-led 0003:1294:1320.0043: unbalanced delimiter at end of report description [ 722.363884][ T5287] hid-led 0003:1294:1320.0043: probe with driver hid-led failed with error -22 [ 722.424944][ T930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.436189][ T930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.446127][ T930] usb 3-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 722.455716][ T930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.482223][ T930] usb 3-1: config 0 descriptor?? [ 722.536237][ T5287] usb 5-1: USB disconnect, device number 36 [ 722.932197][ T930] wacom 0003:056A:0333.0044: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.2-1/input0 [ 723.146802][ T5291] usb 3-1: USB disconnect, device number 50 [ 723.286932][T24961] netlink: 92 bytes leftover after parsing attributes in process `syz.5.8340'. [ 723.404638][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 723.608407][ T5288] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 723.815391][ T5288] usb 5-1: Using ep0 maxpacket: 16 [ 723.824051][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 723.852096][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 723.875012][ T5288] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 723.894603][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.922677][ T5288] usb 5-1: Product: syz [ 723.926874][ T5288] usb 5-1: Manufacturer: syz [ 723.940655][ T5288] usb 5-1: SerialNumber: syz [ 723.956216][ T5288] usb 5-1: config 0 descriptor?? [ 723.977797][ T5288] hub 5-1:0.0: bad descriptor, ignoring hub [ 723.983931][ T5288] hub 5-1:0.0: probe with driver hub failed with error -5 [ 724.011803][ T5288] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 724.096000][ T30] INFO: task syz.3.6680:20760 blocked for more than 143 seconds. [ 724.103762][ T30] Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 724.133214][ T5288] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 724.149857][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 724.158890][ T30] task:syz.3.6680 state:D stack:25872 pid:20760 tgid:20759 ppid:5224 flags:0x00004006 [ 724.170021][ T30] Call Trace: [ 724.173526][ T30] [ 724.176570][ T30] __schedule+0x1895/0x4b30 [ 724.181264][ T30] ? __pfx___schedule+0x10/0x10 [ 724.188058][ T30] ? __pfx_lock_release+0x10/0x10 [ 724.193464][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 724.221847][ T30] ? schedule+0x90/0x320 [ 724.226525][ T30] schedule+0x14b/0x320 [ 724.230812][ T30] schedule_preempt_disabled+0x13/0x30 [ 724.236429][ T30] __mutex_lock+0x6a7/0xd70 [ 724.241098][ T30] ? __mutex_lock+0x52a/0xd70 [ 724.245881][ T30] ? exfat_sync_fs+0xb0/0x160 [ 724.252121][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 724.257261][ T30] ? super_lock+0x2d6/0x400 [ 724.264746][ T30] ? __pfx_super_lock+0x10/0x10 [ 724.270256][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.276052][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 724.281385][ T30] exfat_sync_fs+0xb0/0x160 [ 724.286004][ T30] iterate_supers+0xc8/0x190 [ 724.301412][ T30] ? __pfx_sync_fs_one_sb+0x10/0x10 [ 724.309121][ T30] ksys_sync+0xdb/0x1c0 [ 724.317354][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 724.331083][ T30] ? do_syscall_64+0x100/0x230 [ 724.336337][ T5288] usb 5-1: USB disconnect, device number 37 [ 724.352899][ T30] ? do_syscall_64+0xb6/0x230 [ 724.367738][ T30] __do_sys_sync+0xe/0x20 [ 724.376986][ T30] do_syscall_64+0xf3/0x230 [ 724.388073][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.394017][ T30] RIP: 0033:0x7ff05ed7dff9 [ 724.398464][ T30] RSP: 002b:00007ff05faaf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 724.409724][ T30] RAX: ffffffffffffffda RBX: 00007ff05ef35f80 RCX: 00007ff05ed7dff9 [ 724.417728][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 724.425787][ T30] RBP: 00007ff05edf0296 R08: 0000000000000000 R09: 0000000000000000 [ 724.433879][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.441897][ T30] R13: 0000000000000000 R14: 00007ff05ef35f80 R15: 00007fff5c4ee198 [ 724.457063][ T30] [ 724.463981][ T30] [ 724.463981][ T30] Showing all locks held in the system: [ 724.472965][ T30] 5 locks held by kworker/u8:1/12: [ 724.482760][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 724.493053][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 724.504611][ T30] #2: ffff88805d230768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 [ 724.514760][ T30] #3: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: ieee80211_sta_active_ibss+0xc7/0x330 [ 724.529095][ T30] #4: ffffffff9a64d398 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x234/0x580 [ 724.539920][ T30] 1 lock held by khungtaskd/30: [ 724.544796][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 724.554909][ T30] 4 locks held by kworker/u8:2/33: [ 724.560080][ T30] 2 locks held by getty/4979: [ 724.564840][ T30] #0: ffff88814b9220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 724.574930][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 724.585803][ T30] 3 locks held by syz-executor/5235: [ 724.591780][ T30] 2 locks held by syz.3.6680/20760: [ 724.597071][ T30] #0: ffff8880634260e0 (&type->s_umount_key#57){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 724.607057][ T30] #1: ffff8880634240e8 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_sync_fs+0xb0/0x160 [ 724.616793][ T30] 2 locks held by syz.0.7289/22378: [ 724.622097][ T30] #0: ffff8880634260e0 (&type->s_umount_key#57){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 724.632094][ T30] #1: ffff8880634240e8 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_sync_fs+0xb0/0x160 [ 724.641564][ T30] 1 lock held by syz.4.8342/24963: [ 724.646688][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 724.657741][ T30] [ 724.660490][ T30] ============================================= [ 724.660490][ T30] [ 724.669845][ T30] NMI backtrace for cpu 1 [ 724.674188][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 724.684697][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 724.694759][ T30] Call Trace: [ 724.698038][ T30] [ 724.701013][ T30] dump_stack_lvl+0x241/0x360 [ 724.705705][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 724.710910][ T30] ? __pfx__printk+0x10/0x10 [ 724.715540][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 724.720492][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 724.725965][ T30] ? _printk+0xd5/0x120 [ 724.730136][ T30] ? __pfx__printk+0x10/0x10 [ 724.734745][ T30] ? __wake_up_klogd+0xcc/0x110 [ 724.739614][ T30] ? __pfx__printk+0x10/0x10 [ 724.744218][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.749857][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 724.754993][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 724.761026][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 724.767021][ T30] watchdog+0xff4/0x1040 [ 724.771282][ T30] ? watchdog+0x1ea/0x1040 [ 724.775716][ T30] ? __pfx_watchdog+0x10/0x10 [ 724.780404][ T30] kthread+0x2f2/0x390 [ 724.784502][ T30] ? __pfx_watchdog+0x10/0x10 [ 724.789192][ T30] ? __pfx_kthread+0x10/0x10 [ 724.793788][ T30] ret_from_fork+0x4d/0x80 [ 724.798219][ T30] ? __pfx_kthread+0x10/0x10 [ 724.802822][ T30] ret_from_fork_asm+0x1a/0x30 [ 724.807626][ T30] [ 724.810824][ T30] Sending NMI from CPU 1 to CPUs 0: [ 724.816048][ C0] NMI backtrace for cpu 0 [ 724.816064][ C0] CPU: 0 UID: 0 PID: 33 Comm: kworker/u8:2 Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 724.816090][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 724.816106][ C0] Workqueue: bat_events batadv_nc_worker [ 724.816141][ C0] RIP: 0010:__lock_acquire+0xc8b/0x2050 [ 724.816181][ C0] Code: 83 3d 28 90 cc 18 00 75 39 48 63 9c 24 88 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 88 2c 94 be 08 00 00 00 e8 05 31 8e 00 <48> bf 00 00 00 00 00 fc ff df 48 0f a3 1d b3 1e bc 12 0f 83 11 09 [ 724.816201][ C0] RSP: 0018:ffffc90000a978f0 EFLAGS: 00000056 [ 724.816225][ C0] RAX: 0000000000000001 RBX: 0000000000000022 RCX: ffffffff8170693b [ 724.816242][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942c8800 [ 724.816259][ C0] RBP: ffff88801e696530 R08: ffffffff942c8807 R09: 1ffffffff2859100 [ 724.816280][ C0] R10: dffffc0000000000 R11: fffffbfff2859101 R12: ffff88801e695a00 [ 724.816298][ C0] R13: ffff88801e6964d8 R14: 0000000000000000 R15: ffff88801e696550 [ 724.816319][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 724.816339][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 724.816356][ C0] CR2: 00007f79bc308178 CR3: 000000007e870000 CR4: 0000000000350ef0 [ 724.816375][ C0] Call Trace: [ 724.816384][ C0] [ 724.816394][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 724.816424][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 724.816461][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 724.816499][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 724.816532][ C0] ? nmi_handle+0x151/0x5a0 [ 724.816558][ C0] ? nmi_handle+0x2a/0x5a0 [ 724.816584][ C0] ? __lock_acquire+0xc8b/0x2050 [ 724.816620][ C0] ? default_do_nmi+0x63/0x160 [ 724.816651][ C0] ? exc_nmi+0x123/0x1f0 [ 724.816679][ C0] ? end_repeat_nmi+0xf/0x53 [ 724.816707][ C0] ? __lock_acquire+0xc8b/0x2050 [ 724.816743][ C0] ? __lock_acquire+0xc8b/0x2050 [ 724.816779][ C0] ? __lock_acquire+0xc8b/0x2050 [ 724.816816][ C0] ? __lock_acquire+0xc8b/0x2050 [ 724.816852][ C0] [ 724.816860][ C0] [ 724.816878][ C0] lock_acquire+0x1ed/0x550 [ 724.816913][ C0] ? batadv_nc_worker+0xcb/0x610 [ 724.816949][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 724.816984][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.817012][ C0] ? batadv_nc_worker+0xcb/0x610 [ 724.817042][ C0] ? __pfx_lock_release+0x10/0x10 [ 724.817080][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 724.817121][ C0] batadv_nc_worker+0xec/0x610 [ 724.817151][ C0] ? batadv_nc_worker+0xcb/0x610 [ 724.817181][ C0] ? batadv_nc_worker+0xcb/0x610 [ 724.817217][ C0] ? process_scheduled_works+0x976/0x1850 [ 724.817251][ C0] process_scheduled_works+0xa65/0x1850 [ 724.817299][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 724.817338][ C0] ? assign_work+0x364/0x3d0 [ 724.817372][ C0] worker_thread+0x870/0xd30 [ 724.817413][ C0] ? __kthread_parkme+0x169/0x1d0 [ 724.817450][ C0] ? __pfx_worker_thread+0x10/0x10 [ 724.817484][ C0] kthread+0x2f2/0x390 [ 724.817506][ C0] ? __pfx_worker_thread+0x10/0x10 [ 724.817540][ C0] ? __pfx_kthread+0x10/0x10 [ 724.817564][ C0] ret_from_fork+0x4d/0x80 [ 724.817598][ C0] ? __pfx_kthread+0x10/0x10 [ 724.817622][ C0] ret_from_fork_asm+0x1a/0x30 [ 724.817664][ C0] [ 724.818053][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 725.146993][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 725.157495][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 725.167548][ T30] Call Trace: [ 725.170823][ T30] [ 725.173751][ T30] dump_stack_lvl+0x241/0x360 [ 725.178440][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.183642][ T30] ? __pfx__printk+0x10/0x10 [ 725.188595][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 725.194619][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.200259][ T30] ? vscnprintf+0x5d/0x90 [ 725.204599][ T30] panic+0x349/0x880 [ 725.208508][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.214151][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 725.220313][ T30] ? __pfx_panic+0x10/0x10 [ 725.224744][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 725.230124][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.235761][ T30] ? __irq_work_queue_local+0x137/0x410 [ 725.241322][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.246971][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 725.252359][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 725.258526][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 725.264691][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.270325][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 725.276494][ T30] watchdog+0x1033/0x1040 [ 725.280839][ T30] ? watchdog+0x1ea/0x1040 [ 725.285271][ T30] ? __pfx_watchdog+0x10/0x10 [ 725.289957][ T30] kthread+0x2f2/0x390 [ 725.294034][ T30] ? __pfx_watchdog+0x10/0x10 [ 725.298722][ T30] ? __pfx_kthread+0x10/0x10 [ 725.303315][ T30] ret_from_fork+0x4d/0x80 [ 725.307742][ T30] ? __pfx_kthread+0x10/0x10 [ 725.312334][ T30] ret_from_fork_asm+0x1a/0x30 [ 725.317124][ T30] [ 725.320518][ T30] Kernel Offset: disabled [ 725.324837][ T30] Rebooting in 86400 seconds..