last executing test programs: 2m51.098252927s ago: executing program 1 (id=396): r0 = memfd_secret(0x0) fchmod(r0, 0x134) 2m50.896004606s ago: executing program 1 (id=401): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x28, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m50.678046216s ago: executing program 1 (id=406): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x8, 0x2, 0x5}) 2m50.528004782s ago: executing program 1 (id=409): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000140)={[{@uid}, {@creator={'creator', 0x3d, "aa80aaf6"}}, {@dir_umask}, {@creator={'creator', 0x3d, "0de07c34"}}, {@codepage={'codepage', 0x3d, 'cp949'}}, {@dir_umask}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@dir_umask={'dir_umask', 0x3d, 0x200}}, {}, {@umask={'umask', 0x3d, 0x16}}]}, 0x7, 0x318, &(0x7f00000004c0)="$eJzs3U1rE08cB/Dv7CZp8m/pf20rBY/VgqfS1oPixSLFi2/AgxRrm0LpWkEraEGMnkW8CYJHb55F34JexDegpx7Ek16CB1dmZmcf0tnNQ9tsQr4faJrszsNvdnayMynpgohG1tXVb28vHMgfUQbgArgMOACqQAnAacxWH+zube/59c28glyVQ/4I6JziUJqN3botq8yncoQ8+aqEieQ2OhlBEATf26b61ZdYqDhCj/1DHGAsHJ1qf7XvkZ2Mhm7XaEn0sGiiiYeYLDIcIiIqXnj9d8KrxEQ4f3ccYD6chw/79T81v2kWF8dAiK7/jn4dCHl8/le74vWeWsLJ3nfMKtFWlvWcCOLDXYE+s1IdINqtKlUsTm1r268vNFQBz3AllEg2ox43YRqiZEVb0b/mLGvTHHltzzeu2lCWbVjOiH+66xo//sAre3VrnzuISXwSX8Sa8PAam9H8rxQIeXDU8fFaekrHv5hdomqlp1OlWhmv30+pSs6YHvjwLm5lLeu4VuHKWGxkKaJ1/u6ZOF9WsnNhCumPFXTrlrJbp3JNW3MtR6//WHPNtOaqbZX9+sLGXT/3o5RjY13RiRfihpjDT7zHamL+78jU88gemalRLlTK8MzIbU9JpczoxxQ1gO90NTJJuWbt6HzPcRuXMHn/0f7Ouu/X7xX/xAyVAYlHn4jh6Si3yN+JNKjKJ2UAx1bp3yAIrLtK6EeTy6qpF9/ETd7fWRcN/fJoVaARFWh2rWQnBrACINxi3hF6qf1JlGssLrCj7L9lb6st9hPSRNWHE9JUldrlYqyjkVLrodLrj3fW/Z7eiWjIxJ2O2ZtFB0NFkPMuodd/ifXKonrXkQ9ezmokaFd4osSljBXQlHr8r7MVXFRs5jxx3Dxps+Y6ex4411KjA1Pj09ZivTBODOJfJbv/U4ZYxVfc4uf/RERERERERERERERERERERERERETDpttvI/TydYJ0jQcj+I83iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOJnH/X8BVd4ypFH7/X7eD+/+a+1IQUc/+BQAA//8KX2Ch") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m50.247955184s ago: executing program 1 (id=413): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x11, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m49.692116918s ago: executing program 1 (id=422): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000040)) 2m49.433383669s ago: executing program 32 (id=422): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000040)) 1m49.720407152s ago: executing program 3 (id=1377): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getresgid(&(0x7f0000000b40), 0xfffffffffffffffe, 0x0) 1m49.52601751s ago: executing program 3 (id=1381): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102", @ANYRES64], 0x0) 1m47.391188452s ago: executing program 3 (id=1420): r0 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 1m47.194044891s ago: executing program 3 (id=1425): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000140)={[{@uid}, {@creator={'creator', 0x3d, "aa80aaf6"}}, {@dir_umask}, {@creator={'creator', 0x3d, "0de07c34"}}, {@codepage={'codepage', 0x3d, 'cp949'}}, {@dir_umask}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@dir_umask={'dir_umask', 0x3d, 0x200}}, {}, {@umask={'umask', 0x3d, 0x16}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m46.962496541s ago: executing program 3 (id=1431): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b//\\o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98/\\/\\\xf9\rmD\x94)U\xdb\x15m.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8\t\x00\x00\x00\x00\x00\x00\x00\xc5n\xeb\xab\xf70\x99\xef\x8b (05ac:8501) [ 227.992315][ T5582] usb 3-1: Failed to create links for entity 255 [ 227.998769][ T5582] usb 3-1: Failed to register entities (-22). [ 228.042889][ T4260] hdpvr 6-1:0.0: firmware version 0x0 dated [ 228.048959][ T4260] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 228.202059][ T5582] usb 3-1: USB disconnect, device number 13 [ 228.252879][ T4260] hdpvr 6-1:0.0: device init failed [ 228.258228][ T4260] hdpvr: probe of 6-1:0.0 failed with error -12 [ 228.267959][ T4260] usb 6-1: USB disconnect, device number 13 [ 228.302121][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2587'. [ 228.401962][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2578'. [ 228.454071][T10823] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2578'. [ 228.711352][T10844] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 228.781829][T10846] binder: 10845:10846 ioctl 40046210 0 returned -14 [ 228.847411][T10848] openvswitch: netlink: Message has 4 unknown bytes. [ 228.952798][ T5582] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 228.980305][T10858] loop5: detected capacity change from 0 to 1024 [ 228.990068][T10857] ceph: No source [ 229.051995][T10858] hfsplus: failed to extend attributes file [ 229.202802][ T5582] usb 5-1: Using ep0 maxpacket: 8 [ 229.273460][T10876] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2604'. [ 229.322992][ T5582] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.393308][T10879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.400608][T10879] IPv6: NLM_F_CREATE should be set when creating new route [ 229.408002][T10879] IPv6: NLM_F_CREATE should be set when creating new route [ 229.513117][ T5582] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 229.557099][ T5582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.585746][ T5582] usb 5-1: Product: syz [ 229.589986][ T5582] usb 5-1: Manufacturer: syz [ 229.601579][T10890] loop5: detected capacity change from 0 to 256 [ 229.638606][ T5582] usb 5-1: SerialNumber: syz [ 229.646831][ T5582] usb 5-1: config 0 descriptor?? [ 229.695069][ T5582] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 229.708986][T10890] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.725914][ T5582] usb 5-1: selecting invalid altsetting 1 [ 229.912786][ T5582] gspca_stk014: init reg: 0x00 [ 229.917761][ T5582] stk014: probe of 5-1:0.0 failed with error -5 [ 230.136458][ T5582] usb 5-1: USB disconnect, device number 16 [ 230.244334][T10926] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 230.327365][T10922] loop6: detected capacity change from 0 to 4096 [ 230.542362][T10945] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 231.180916][T10983] kAFS: unable to lookup cell '(/' [ 231.618710][T11005] loop4: detected capacity change from 0 to 2048 [ 231.698117][T11011] loop0: detected capacity change from 0 to 2048 [ 231.713593][T11005] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 231.785557][T11011] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.799361][T11015] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.055523][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2677'. [ 232.074961][T11025] loop0: detected capacity change from 0 to 1024 [ 232.140739][T11025] hfsplus: Filesystem is marked locked, mounting read-only. [ 232.199362][T11025] hfsplus: filesystem is marked locked, leaving read-only. [ 232.238771][T11030] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 232.581090][T11046] loop5: detected capacity change from 0 to 256 [ 232.602124][T11042] loop0: detected capacity change from 0 to 4096 [ 232.678411][T11042] __ntfs_warning: 7 callbacks suppressed [ 232.678427][T11042] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 232.782167][T11042] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 232.797417][T11046] FAT-fs (loop5): Directory bread(block 64) failed [ 232.824677][T11046] FAT-fs (loop5): Directory bread(block 65) failed [ 232.844960][T11042] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 232.862961][T11046] FAT-fs (loop5): Directory bread(block 66) failed [ 232.883847][T11050] loop6: detected capacity change from 0 to 4096 [ 232.890531][T11046] FAT-fs (loop5): Directory bread(block 67) failed [ 232.913896][T11042] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 232.928664][T11042] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 232.948942][T11050] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 232.958361][T11046] FAT-fs (loop5): Directory bread(block 68) failed [ 232.989982][T11046] FAT-fs (loop5): Directory bread(block 69) failed [ 233.017757][T11046] FAT-fs (loop5): Directory bread(block 70) failed [ 233.029275][T11042] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 233.057834][T11046] FAT-fs (loop5): Directory bread(block 71) failed [ 233.074606][T11042] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 233.097058][T11042] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 233.106583][T11046] FAT-fs (loop5): Directory bread(block 72) failed [ 233.111904][T11042] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 233.159950][T11046] FAT-fs (loop5): Directory bread(block 73) failed [ 233.252721][T11042] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 233.302919][T11042] ntfs: volume version 3.1. [ 233.563369][T11064] loop4: detected capacity change from 0 to 1024 [ 233.610844][T11034] loop2: detected capacity change from 0 to 40427 [ 233.667072][T11034] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 233.680494][T11073] netlink: 372 bytes leftover after parsing attributes in process `syz.6.2698'. [ 233.703012][T11034] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 233.713499][T11073] netlink: 'syz.6.2698': attribute type 3 has an invalid length. [ 233.733155][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2698'. [ 233.746313][ T5626] hfsplus: b-tree write err: -5, ino 4 [ 233.768758][T11034] F2FS-fs (loop2): invalid crc value [ 233.800435][T11076] loop0: detected capacity change from 0 to 256 [ 233.813407][T11034] F2FS-fs (loop2): Found nat_bits in checkpoint [ 233.857831][T11080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2699'. [ 233.868024][T11076] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 233.876346][T11069] loop5: detected capacity change from 0 to 4096 [ 233.997201][T11069] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 234.042154][T11034] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 234.059628][T11034] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 234.251666][T11069] ntfs3: loop5: failed to convert "c46c" to cp861 [ 234.565134][T11104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.618949][T11104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.659525][T11104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.798028][T11104] device geneve2 left promiscuous mode [ 235.177843][T11133] loop5: detected capacity change from 0 to 64 [ 235.191121][T11136] netlink: 'syz.0.2728': attribute type 32 has an invalid length. [ 235.240055][T11136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2728'. [ 235.408627][T11143] xt_nat: multiple ranges no longer supported [ 235.700044][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2737'. [ 235.717414][T11144] loop2: detected capacity change from 0 to 8192 [ 235.747628][T11154] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2737'. [ 235.772127][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2737'. [ 235.807422][T11144] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 235.820317][T11154] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2737'. [ 235.831238][T11144] REISERFS (device loop2): using ordered data mode [ 235.846199][T11144] reiserfs: using flush barriers [ 235.863433][T11144] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 235.893103][T11144] REISERFS (device loop2): checking transaction log (loop2) [ 235.900949][T11154] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2737'. [ 235.922199][T11144] REISERFS (device loop2): Using r5 hash to sort names [ 235.944823][T11144] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 235.970611][T11144] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 236.025924][T11137] loop4: detected capacity change from 0 to 32768 [ 236.158657][T11137] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page [ 236.158657][T11137] [ 236.216529][T11137] ERROR: (device loop4): remounting filesystem as read-only [ 236.250683][T11137] ialloc: diAlloc returned -5! [ 236.513754][T11180] loop6: detected capacity change from 0 to 64 [ 236.582897][ T4445] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 236.886537][ T4445] usb 6-1: Using ep0 maxpacket: 32 [ 237.005539][ T4445] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 237.022871][ T4445] usb 6-1: config 0 has no interface number 0 [ 237.035342][ T4445] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 237.060611][T11208] loop0: detected capacity change from 0 to 2048 [ 237.090665][ T4445] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 237.110316][T11214] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.142714][ T4445] usb 6-1: config 0 interface 126 has no altsetting 0 [ 237.190524][T11216] JFS: discard option not supported on device [ 237.229167][T11216] Mount JFS Failure: -22 [ 237.229169][T11208] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.249777][T11218] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 237.267329][T11216] jfs_mount failed w/return code = -22 [ 237.332939][ T4445] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 237.362441][ T4445] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.412697][ T4445] usb 6-1: Product: syz [ 237.417060][ T4445] usb 6-1: Manufacturer: syz [ 237.421744][ T4445] usb 6-1: SerialNumber: syz [ 237.458699][ T4445] usb 6-1: config 0 descriptor?? [ 237.466002][T11223] netlink: 'syz.2.2772': attribute type 1 has an invalid length. [ 237.508311][T11223] netlink: 'syz.2.2772': attribute type 2 has an invalid length. [ 237.523109][T11168] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 237.530218][T11168] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 237.706202][T11231] __nla_validate_parse: 2 callbacks suppressed [ 237.706222][T11231] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2775'. [ 237.706242][T11231] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2775'. [ 237.706259][T11231] netlink: 'syz.2.2775': attribute type 3 has an invalid length. [ 237.706274][T11231] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2775'. [ 237.788038][T11197] loop6: detected capacity change from 0 to 32768 [ 237.891229][ T4445] ir_usb 6-1:0.126: IR Dongle converter detected [ 237.902883][ T4445] usb 6-1: IRDA class descriptor not found, device not bound [ 237.909880][ T4445] usb 6-1: USB disconnect, device number 14 [ 237.959370][T11239] program syz.2.2779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.449963][T11256] loop6: detected capacity change from 0 to 4096 [ 238.591843][T11275] loop4: detected capacity change from 0 to 256 [ 238.592888][T11256] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 238.641857][T11256] ntfs3: loop6: ntfs_sync_fs r=9 failed, -22. [ 238.708644][T11275] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 238.750143][T11275] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 238.753256][ T8041] ntfs3: loop6: ntfs_sync_fs r=9 failed, -22. [ 238.779749][ T8041] ntfs3: loop6: ntfs_evict_inode r=9 failed, -22. [ 239.034698][T11295] tmpfs: Bad value for 'mpol' [ 239.382399][T11317] loop5: detected capacity change from 0 to 256 [ 239.443285][T11324] loop6: detected capacity change from 0 to 256 [ 239.535008][T11317] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 239.571572][T11324] FAT-fs (loop6): Directory bread(block 64) failed [ 239.588165][T11317] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 239.598855][T11324] FAT-fs (loop6): Directory bread(block 65) failed [ 239.640993][T11324] FAT-fs (loop6): Directory bread(block 66) failed [ 239.661494][T11324] FAT-fs (loop6): Directory bread(block 67) failed [ 239.693470][T11324] FAT-fs (loop6): Directory bread(block 68) failed [ 239.700072][T11324] FAT-fs (loop6): Directory bread(block 69) failed [ 239.706923][T11334] loop2: detected capacity change from 0 to 1024 [ 239.759125][T11324] FAT-fs (loop6): Directory bread(block 70) failed [ 239.781289][T11324] FAT-fs (loop6): Directory bread(block 71) failed [ 239.827080][T11324] FAT-fs (loop6): Directory bread(block 72) failed [ 239.857980][T11324] FAT-fs (loop6): Directory bread(block 73) failed [ 239.878125][T11334] attempt to access beyond end of device [ 239.878125][T11334] loop2: rw=0, want=201326594, limit=1024 [ 239.910374][T11342] misc userio: The device must be registered before sending interrupts [ 239.941341][T11334] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 240.023071][T11334] hfsplus: unable to mark blocks free: error -5 [ 240.063898][T11334] hfsplus: can't free extent [ 240.142754][ T4445] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 240.193192][T11350] loop4: detected capacity change from 0 to 64 [ 240.311716][T11350] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 240.432977][ T4445] usb 1-1: Using ep0 maxpacket: 16 [ 240.505713][T11362] loop6: detected capacity change from 0 to 256 [ 240.563673][ T4445] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 240.578493][ T4445] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.620185][ T4445] usb 1-1: config 0 has no interface number 0 [ 240.715988][T11369] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.755427][T11369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.787137][T11369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.826089][T11371] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 240.848248][ T4445] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 240.867953][ T4445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.898466][T11371] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 240.906372][ T4445] usb 1-1: Product: syz [ 240.910682][ T4445] usb 1-1: Manufacturer: syz [ 240.926059][ T4445] usb 1-1: SerialNumber: syz [ 240.934624][T11371] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 240.955038][ T4445] usb 1-1: config 0 descriptor?? [ 240.984468][T11371] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 241.033464][T11371] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 241.054762][T11371] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 241.098507][T11371] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 241.242972][ T4445] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 241.263001][ T4445] usb 1-1: No valid video chain found. [ 241.306045][ T4445] usb 1-1: USB disconnect, device number 18 [ 241.459285][T11391] loop4: detected capacity change from 0 to 128 [ 241.518153][T11365] loop2: detected capacity change from 0 to 32768 [ 241.589986][T11391] befs: Unrecognized mount option "¹#" or missing value [ 241.641862][T11365] XFS (loop2): Mounting V5 Filesystem [ 241.931110][T11365] XFS (loop2): Ending clean mount [ 242.110529][ T4186] XFS (loop2): Unmounting Filesystem [ 242.507325][T11393] loop6: detected capacity change from 0 to 32768 [ 242.795276][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2882'. [ 242.945379][T11466] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2885'. [ 243.281207][T11490] netlink: 'syz.6.2894': attribute type 13 has an invalid length. [ 243.475381][T11500] sctp: [Deprecated]: syz.0.2909 (pid 11500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.475381][T11500] Use struct sctp_sack_info instead [ 243.488630][T11498] loop5: detected capacity change from 0 to 512 [ 243.615260][T11498] EXT4-fs (loop5): Test dummy encryption mode enabled [ 243.665885][T11498] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 243.714454][T11498] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 243.804137][T11498] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000ffffffff,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 243.804472][T11473] loop2: detected capacity change from 0 to 32768 [ 243.945585][T11523] x_tables: duplicate underflow at hook 3 [ 243.991181][T11498] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.2899: Directory hole found for htree leaf block 0 [ 244.087646][T11473] XFS (loop2): Mounting V5 Filesystem [ 244.381696][T11473] XFS (loop2): Ending clean mount [ 244.390066][T11473] XFS (loop2): Quotacheck needed: Please wait. [ 244.496738][T11554] loop5: detected capacity change from 0 to 1024 [ 244.544581][T11473] XFS (loop2): Quotacheck: Done. [ 244.567203][T11554] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 244.650023][ T4186] XFS (loop2): Unmounting Filesystem [ 245.109465][T11579] loop6: detected capacity change from 0 to 1024 [ 245.186894][T11584] device bond3 entered promiscuous mode [ 245.206603][T11584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.279525][T11579] attempt to access beyond end of device [ 245.279525][T11579] loop6: rw=0, want=201326594, limit=1024 [ 245.356162][T11592] loop4: detected capacity change from 0 to 64 [ 245.363193][T11579] Buffer I/O error on dev loop6, logical block 100663296, async page read [ 245.388230][T11579] hfsplus: unable to mark blocks free: error -5 [ 245.409519][T11579] hfsplus: can't free extent [ 245.659587][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2942'. [ 245.726608][T11599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.979416][T11610] netlink: 'syz.4.2946': attribute type 10 has an invalid length. [ 245.987948][T11607] loop2: detected capacity change from 0 to 512 [ 246.012999][T11610] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2946'. [ 246.028345][T11613] loop6: detected capacity change from 0 to 16 [ 246.046730][T11610] device team0 entered promiscuous mode [ 246.053587][T11562] loop0: detected capacity change from 0 to 40427 [ 246.062852][T11610] device team_slave_0 entered promiscuous mode [ 246.077792][T11607] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 246.102355][T11610] device team_slave_1 entered promiscuous mode [ 246.116445][T11607] ext4 filesystem being mounted at /605/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.128670][T11610] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 246.159466][T11613] erofs: (device loop6): mounted with root inode @ nid 36. [ 246.172764][T11562] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 246.180666][T11562] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 246.218496][T11607] fscrypt (loop2, inode 15): Error -61 getting encryption context [ 246.234218][T11613] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 246.280416][T11562] F2FS-fs (loop0): invalid crc value [ 246.311801][T11613] erofs: (device loop6): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 246.326805][T11562] F2FS-fs (loop0): Found nat_bits in checkpoint [ 246.369448][T11613] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 246.432397][T11613] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 246.465801][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 246.465817][ T26] audit: type=1800 audit(1763551260.014:15): pid=11613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2948" name="file3" dev="loop6" ino=89 res=0 errno=0 [ 246.624126][T11631] loop4: detected capacity change from 0 to 2048 [ 246.668712][T11562] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 246.685747][T11631] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.694922][T11562] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 246.842544][T11637] loop2: detected capacity change from 0 to 256 [ 246.938142][T11637] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.959403][T11637] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 247.003777][T11637] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 247.083369][T11637] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 247.132744][T11637] exFAT-fs (loop2): Filesystem has been set read-only [ 247.174411][T11637] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f014260 iblock : 9, err : -5) [ 247.231588][T11637] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 247.269526][T11637] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 247.343574][T11648] loop6: detected capacity change from 0 to 1024 [ 247.388417][T11648] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 247.437946][T11648] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 247.458865][T11648] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 247.499929][T11648] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,sysvgroups,inode_readahead_blks=0x0000000000004000,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 247.728514][T11640] loop4: detected capacity change from 0 to 32768 [ 247.756215][T11661] loop2: detected capacity change from 0 to 1024 [ 247.892934][T11661] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.941719][T11661] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.2979: casefold flag without casefold feature [ 248.223463][T11675] loop0: detected capacity change from 0 to 256 [ 248.264781][T11675] exfat: Deprecated parameter 'utf8' [ 248.287397][T11675] exfat: Deprecated parameter 'utf8' [ 248.350100][T11675] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 248.635161][T11691] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 248.670081][T11691] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 248.827119][T11697] loop4: detected capacity change from 0 to 512 [ 248.880087][T11702] netlink: 'syz.6.2987': attribute type 24 has an invalid length. [ 248.924472][T11697] EXT4-fs (loop4): orphan cleanup on readonly fs [ 248.948460][T11697] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 248.980186][T11697] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 249.069019][T11707] loop6: detected capacity change from 0 to 1024 [ 249.097103][T11697] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.2985: Failed to acquire dquot type 0 [ 249.172972][T11707] EXT4-fs (loop6): Ignoring removed orlov option [ 249.179620][T11697] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 249.235110][T11697] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 249.237593][T11721] loop5: detected capacity change from 0 to 128 [ 249.281710][T11697] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.2985: Failed to acquire dquot type 0 [ 249.298641][T11721] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 249.300421][T11707] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 249.347950][T11721] ext4 filesystem being mounted at /462/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.350746][T11712] loop2: detected capacity change from 0 to 4096 [ 249.376348][T11697] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2985: bg 0: block 64: padding at end of block bitmap is not set [ 249.398435][T11721] binder: Bad value for 'stats' [ 249.403674][T11712] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 249.412873][T11697] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 249.426936][T11697] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 249.442982][T11697] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 249.454821][T11697] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.2985: Failed to acquire dquot type 0 [ 249.475612][T11697] EXT4-fs (loop4): 1 orphan inode deleted [ 249.484731][T11697] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nolazytime,,errors=continue. Quota mode: writeback. [ 249.629991][T11726] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 249.650208][T11712] ntfs3: loop2: failed to convert "c46c" to macroman [ 249.708122][T11730] ip6t_srh: unknown srh invflags 4000 [ 249.758672][T11726] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 249.816670][T11726] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 249.873379][T11726] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 250.116075][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3006'. [ 250.166196][T11747] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3006'. [ 250.285369][T11754] loop5: detected capacity change from 0 to 256 [ 250.352699][ T13] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 250.405418][T11754] FAT-fs (loop5): Directory bread(block 64) failed [ 250.413703][T11754] FAT-fs (loop5): Directory bread(block 65) failed [ 250.432658][T11754] FAT-fs (loop5): Directory bread(block 66) failed [ 250.439436][T11754] FAT-fs (loop5): Directory bread(block 67) failed [ 250.446413][T11754] FAT-fs (loop5): Directory bread(block 68) failed [ 250.459675][T11754] FAT-fs (loop5): Directory bread(block 69) failed [ 250.472744][T11754] FAT-fs (loop5): Directory bread(block 70) failed [ 250.479330][T11754] FAT-fs (loop5): Directory bread(block 71) failed [ 250.513392][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3016'. [ 250.525542][T11754] FAT-fs (loop5): Directory bread(block 72) failed [ 250.542394][T11754] FAT-fs (loop5): Directory bread(block 73) failed [ 250.596394][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 250.722920][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 250.763060][ T5926] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 250.904048][ T13] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 250.916221][ T13] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 250.925122][ T13] usb 5-1: Product: syz [ 250.929323][ T13] usb 5-1: Manufacturer: syz [ 250.934329][ T13] usb 5-1: SerialNumber: syz [ 251.133458][ T5926] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 251.148306][ T5926] usb 3-1: config 0 has no interface number 1 [ 251.156202][T11797] netlink: 'syz.0.3043': attribute type 9 has an invalid length. [ 251.164909][ T5926] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 251.192745][ T13] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 251.205278][T11797] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3043'. [ 251.215667][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.224620][ T13] usb 5-1: Handspring Visor / Palm OS: port 0, is for Remote File System use [ 251.243538][ T5926] usb 3-1: config 0 descriptor?? [ 251.262650][ T13] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 251.274792][ T13] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 251.317290][ T5926] usb 3-1: MIDIStreaming interface descriptor not found [ 251.337549][T11805] loop5: detected capacity change from 0 to 256 [ 251.371843][ T5926] gspca_main: spca561-2.14.0 probing abcd:cdee [ 251.402738][ T13] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 251.423655][ T13] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 251.436209][ T13] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 251.486555][ T13] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 251.508429][T11805] FAT-fs (loop5): Directory bread(block 64) failed [ 251.523015][T11805] FAT-fs (loop5): Directory bread(block 65) failed [ 251.540011][ T13] usb 5-1: USB disconnect, device number 17 [ 251.550118][T11805] FAT-fs (loop5): Directory bread(block 66) failed [ 251.583015][ T5926] spca561: probe of 3-1:0.0 failed with error -22 [ 251.594692][ T13] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 251.632695][ T5926] usb 3-1: USB disconnect, device number 14 [ 251.642824][T11805] FAT-fs (loop5): Directory bread(block 67) failed [ 251.649481][T11805] FAT-fs (loop5): Directory bread(block 68) failed [ 251.677298][ T13] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 251.703225][T11805] FAT-fs (loop5): Directory bread(block 69) failed [ 251.713290][ T13] visor 5-1:1.0: device disconnected [ 251.747020][T11805] FAT-fs (loop5): Directory bread(block 70) failed [ 251.764218][T11805] FAT-fs (loop5): Directory bread(block 71) failed [ 251.776739][T11805] FAT-fs (loop5): Directory bread(block 72) failed [ 251.797557][T11805] FAT-fs (loop5): Directory bread(block 73) failed [ 252.062721][ T5582] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 252.099946][T11831] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3046'. [ 252.117761][T11831] IPv6: sit1: Disabled Multicast RS [ 252.286706][T11839] loop5: detected capacity change from 0 to 1024 [ 252.302951][ T5582] usb 7-1: Using ep0 maxpacket: 16 [ 252.374819][T11835] loop0: detected capacity change from 0 to 4096 [ 252.382872][T11839] attempt to access beyond end of device [ 252.382872][T11839] loop5: rw=0, want=201326594, limit=1024 [ 252.421770][T11839] Buffer I/O error on dev loop5, logical block 100663296, async page read [ 252.422859][ T5582] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 252.439183][T11839] hfsplus: unable to mark blocks free: error -5 [ 252.451759][T11839] hfsplus: can't free extent [ 252.460304][ T5582] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 252.495829][ T5582] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 252.545760][ T5582] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 252.582703][ T5582] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 252.611295][T11835] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 252.711746][T11835] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 252.784717][ T5582] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 252.812698][ T5582] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.835400][ T5582] usb 7-1: Product: syz [ 252.839631][ T5582] usb 7-1: Manufacturer: syz [ 252.865407][ T5582] usb 7-1: SerialNumber: syz [ 252.871768][ T4183] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 252.889307][ T5582] usb 7-1: config 0 descriptor?? [ 252.905306][ T4183] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 252.936224][T11857] ufs: Invalid option: "Ûàßä0…(áeêªLüêd9(@ ûŸÀ8ìL´)uH\dKzLVÚÁR<%ï5rÆŒËze ~I2~ [ 252.936224][T11857] r0Rpyëhå:ã‰ÝèÖY³‡ [ 252.936224][T11857] òO©÷‰\›z«Y" or missing value [ 252.943031][T11819] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 253.002917][T11819] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 253.023468][T11857] ufs: wrong mount options [ 253.030648][ T5582] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 253.043062][ C0] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 253.049253][ C0] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 253.297441][ T5926] usb 7-1: USB disconnect, device number 9 [ 253.309150][ T5926] mcba_usb 7-1:0.0 can0: device disconnected [ 253.896426][T11906] loop2: detected capacity change from 0 to 512 [ 253.968231][T11906] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 253.977579][T11910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3076'. [ 254.128008][T11906] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback. [ 254.212899][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3079'. [ 254.231649][T11906] ext4 filesystem being mounted at /628/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.333748][T11929] loop4: detected capacity change from 0 to 256 [ 254.340898][T11926] syz.0.3083 uses old SIOCAX25GETINFO [ 254.424411][T11929] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 254.592826][ T5582] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 254.702388][T11948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3094'. [ 254.832778][ T5582] usb 6-1: Using ep0 maxpacket: 8 [ 255.020634][T11968] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 255.020634][T11968] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ×ðÚ<“™+`# ÷Ž¢k²–' [ 255.112902][ T5582] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 255.135833][ T5582] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.162330][ T5582] usb 6-1: Product: syz [ 255.173534][ T5582] usb 6-1: Manufacturer: syz [ 255.188434][ T5582] usb 6-1: SerialNumber: syz [ 255.200903][ T5582] usb 6-1: config 0 descriptor?? [ 255.254980][ T5582] gspca_main: sq930x-2.14.0 probing 2770:930c [ 255.296276][T11983] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.3111'. [ 255.417267][ T4445] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 255.419407][T11990] xt_TCPMSS: Only works on TCP SYN packets [ 255.553146][T11996] loop4: detected capacity change from 0 to 64 [ 255.642839][ T13] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 255.688047][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.694585][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.702974][ T5582] gspca_sq930x: ucbus_write failed -71 [ 255.708546][ T5582] sq930x: probe of 6-1:0.0 failed with error -71 [ 255.753387][ T5582] usb 6-1: USB disconnect, device number 15 [ 255.862478][T12010] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3124'. [ 255.893124][ T4445] usb 1-1: unable to get BOS descriptor or descriptor too short [ 255.912821][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 255.987893][ T4445] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 255.997745][ T4445] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 256.016851][ T4445] usb 1-1: config 1 interface 0 has no altsetting 1 [ 256.032939][ T13] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 256.056692][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.092667][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 256.121992][ T13] usb 3-1: config 1 has no interface number 0 [ 256.140321][ T13] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.212944][ T4445] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 256.242676][ T4445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.250733][ T4445] usb 1-1: Product: syz [ 256.272878][ T4445] usb 1-1: Manufacturer: syz [ 256.277533][ T4445] usb 1-1: SerialNumber: syz [ 256.313462][ T13] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.333043][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.354811][ T4445] smsusb:smsusb_probe: board id=8, interface number 0 [ 256.359176][ T13] usb 3-1: Product: syz [ 256.381139][ T13] usb 3-1: Manufacturer: syz [ 256.396484][ T13] usb 3-1: SerialNumber: syz [ 256.446027][ T13] cdc_wdm 3-1:1.128: skipping garbage [ 256.452703][ T13] cdc_wdm 3-1:1.128: invalid descriptor buffer length [ 256.471895][ T13] cdc_wdm: probe of 3-1:1.128 failed with error -22 [ 256.571176][ T4445] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 256.571920][T12032] loop5: detected capacity change from 0 to 4096 [ 256.587120][ T4445] smsusb: probe of 1-1:1.0 failed with error -71 [ 256.612141][ T4445] usb 1-1: USB disconnect, device number 19 [ 256.642457][T12032] NILFS (loop5): mounting unchecked fs [ 256.656282][ T5582] usb 3-1: USB disconnect, device number 15 [ 256.673044][T12032] NILFS (loop5): recovery required for readonly filesystem [ 256.702973][T12032] NILFS (loop5): write access will be enabled during recovery [ 256.729399][T12032] NILFS (loop5): invalid segment: Checksum error in segment payload [ 256.739417][T12036] loop6: detected capacity change from 0 to 4096 [ 256.755961][T12032] NILFS (loop5): trying rollback from an earlier position [ 256.793975][T12032] NILFS (loop5): recovery complete [ 256.838054][T12036] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 256.865693][T12036] ntfs3: loop6: Failed to load $Extend. [ 256.883871][T12043] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.382871][ T13] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 257.707478][T12076] loop0: detected capacity change from 0 to 4096 [ 257.788031][T12076] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 257.793123][ T13] usb 7-1: unable to get BOS descriptor or descriptor too short [ 257.821592][T12080] loop2: detected capacity change from 0 to 2048 [ 257.852783][ T13] usb 7-1: not running at top speed; connect to a high speed hub [ 257.871555][T12080] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 257.898707][T12080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.923494][T12076] ntfs3: loop0: failed to convert "c46c" to maccroatian [ 257.942852][ T13] usb 7-1: config 4 has an invalid interface number: 32 but max is 0 [ 257.957310][T12062] loop5: detected capacity change from 0 to 32768 [ 257.966215][ T13] usb 7-1: config 4 has no interface number 0 [ 258.158731][ T13] usb 7-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 258.198060][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.222668][T12093] loop4: detected capacity change from 0 to 256 [ 258.231597][ T13] usb 7-1: Product: syz [ 258.241981][ T13] usb 7-1: Manufacturer: syz [ 258.261035][ T13] usb 7-1: SerialNumber: syz [ 258.289595][T12062] XFS (loop5): Mounting V5 Filesystem [ 258.303780][T12093] FAT-fs (loop4): Directory bread(block 64) failed [ 258.319845][T12093] FAT-fs (loop4): Directory bread(block 65) failed [ 258.372873][T12093] FAT-fs (loop4): Directory bread(block 66) failed [ 258.379553][T12093] FAT-fs (loop4): Directory bread(block 67) failed [ 258.396206][T12062] XFS (loop5): Ending clean mount [ 258.434947][T12062] XFS (loop5): Quotacheck needed: Please wait. [ 258.443828][T12093] FAT-fs (loop4): Directory bread(block 68) failed [ 258.456719][T12093] FAT-fs (loop4): Directory bread(block 69) failed [ 258.468117][T12101] loop0: detected capacity change from 0 to 512 [ 258.489988][T12093] FAT-fs (loop4): Directory bread(block 70) failed [ 258.511107][T12062] XFS (loop5): Quotacheck: Done. [ 258.542993][T12093] FAT-fs (loop4): Directory bread(block 71) failed [ 258.549678][T12093] FAT-fs (loop4): Directory bread(block 72) failed [ 258.571380][T12093] FAT-fs (loop4): Directory bread(block 73) failed [ 258.604665][T12101] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 258.673936][ T5331] XFS (loop5): Unmounting Filesystem [ 258.692777][ T13] usb 7-1: Found UVC 0.02 device syz (17dc:0202) [ 258.698534][T12101] ext4 filesystem being mounted at /631/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.699177][ T13] usb 7-1: No valid video chain found. [ 258.791257][ T13] usb 7-1: USB disconnect, device number 10 [ 259.213055][T12123] loop0: detected capacity change from 0 to 2048 [ 259.271068][T12123] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.385280][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3180'. [ 259.421992][T12142] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3183'. [ 259.777320][T12164] netlink: 'syz.4.3194': attribute type 12 has an invalid length. [ 259.816326][T12164] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3194'. [ 260.071738][T12185] loop4: detected capacity change from 0 to 64 [ 260.219632][T12191] netlink: 'syz.5.3207': attribute type 1 has an invalid length. [ 260.751416][T12162] loop0: detected capacity change from 0 to 32768 [ 260.921820][T12162] XFS (loop0): Mounting V5 Filesystem [ 260.988808][T12230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.089003][T12162] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 261.172943][T12241] loop2: detected capacity change from 0 to 8 [ 261.208925][T12162] XFS (loop0): Starting recovery (logdev: internal) [ 261.274876][T12162] XFS (loop0): Ending recovery (logdev: internal) [ 261.293483][T12241] SQUASHFS error: Failed to read block 0x1ec: -5 [ 261.302732][T12241] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 261.399472][ T4183] XFS (loop0): Unmounting Filesystem [ 261.427722][T12192] loop6: detected capacity change from 0 to 32768 [ 261.485353][T12254] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3236'. [ 261.634760][T12192] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 261.714224][T12192] (syz.6.3208,12192,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 261.744245][T12266] netlink: 'syz.4.3241': attribute type 21 has an invalid length. [ 261.752292][T12192] (syz.6.3208,12192,0):ocfs2_search_one_group:1684 ERROR: status = -12 [ 261.792181][T12192] (syz.6.3208,12192,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -12 [ 261.899420][T12192] (syz.6.3208,12192,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -12 [ 261.951970][T12192] (syz.6.3208,12192,0):ocfs2_claim_new_inode:2216 ERROR: status = -12 [ 261.999240][T12273] loop2: detected capacity change from 0 to 2048 [ 262.031307][T12192] (syz.6.3208,12192,0):ocfs2_claim_new_inode:2231 ERROR: status = -12 [ 262.042892][T12192] (syz.6.3208,12192,1):ocfs2_mknod_locked:639 ERROR: status = -12 [ 262.100515][T12192] (syz.6.3208,12192,1):ocfs2_mknod:385 ERROR: status = -12 [ 262.175679][T12192] (syz.6.3208,12192,1):ocfs2_mknod:502 ERROR: status = -12 [ 262.188276][T12273] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 262.257566][T12192] (syz.6.3208,12192,1):ocfs2_create:676 ERROR: status = -12 [ 262.272721][T12286] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.275825][T12273] attempt to access beyond end of device [ 262.275825][T12273] loop2: rw=524288, want=33554432, limit=2048 [ 262.401087][ T8041] ocfs2: Unmounting device (7,6) on (node local) [ 262.472780][T12273] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=32, inode=11, rec_len=151, name_len=6 [ 262.584692][T12273] Remounting filesystem read-only [ 262.712272][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3257'. [ 262.771394][T12302] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3257'. [ 262.975707][T12312] tc_dump_action: action bad kind [ 263.051195][T12320] netlink: 'syz.2.3266': attribute type 12 has an invalid length. [ 263.386562][T12345] binfmt_misc: register: failed to install interpreter file ./file0 [ 263.445758][T12352] loop2: detected capacity change from 0 to 8 [ 263.480375][T12354] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3283'. [ 263.743339][T12366] loop0: detected capacity change from 0 to 2048 [ 263.783384][T12366] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 263.825989][T12366] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.984653][ T5582] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 264.125277][T12395] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3304'. [ 264.224078][ T5582] usb 6-1: Using ep0 maxpacket: 16 [ 264.343079][ T5582] usb 6-1: config 254 has an invalid interface number: 235 but max is 0 [ 264.355307][ T5582] usb 6-1: config 254 has no interface number 0 [ 264.385122][ T5582] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 264.432746][ T5582] usb 6-1: config 254 interface 235 has no altsetting 0 [ 264.446897][T12411] loop6: detected capacity change from 0 to 2048 [ 264.486744][T12405] [ 264.489133][T12405] ====================================================== [ 264.496168][T12405] WARNING: possible circular locking dependency detected [ 264.503218][T12405] syzkaller #0 Not tainted [ 264.507693][T12405] ------------------------------------------------------ [ 264.514732][T12405] syz.0.3310/12405 is trying to acquire lock: [ 264.520817][T12405] ffff88801f808c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 264.531913][T12405] [ 264.531913][T12405] but task is already holding lock: [ 264.539303][T12405] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 264.549017][T12405] [ 264.549017][T12405] which lock already depends on the new lock. [ 264.549017][T12405] [ 264.559448][T12405] [ 264.559448][T12405] the existing dependency chain (in reverse order) is: [ 264.568484][T12405] [ 264.568484][T12405] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 264.576533][T12405] __mutex_lock_common+0x1eb/0x2390 [ 264.582473][T12405] mutex_lock_nested+0x17/0x20 [ 264.587801][T12405] rfkill_register+0x33/0x8a0 [ 264.593055][T12405] hci_register_dev+0x452/0x970 [ 264.598459][T12405] vhci_create_device+0x32c/0x5c0 [ 264.604043][T12405] vhci_write+0x391/0x450 [ 264.608925][T12405] vfs_write+0x712/0xd00 [ 264.612845][ T5582] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 264.613719][T12405] ksys_write+0x14d/0x250 [ 264.613744][T12405] do_syscall_64+0x4c/0xa0 [ 264.631942][ T5582] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.632821][T12405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.632852][T12405] [ 264.632852][T12405] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 264.653235][ T5582] usb 6-1: Product: syz [ 264.655235][T12405] __mutex_lock_common+0x1eb/0x2390 [ 264.660805][ T5582] usb 6-1: Manufacturer: syz [ 264.665130][T12405] mutex_lock_nested+0x17/0x20 [ 264.665159][T12405] vhci_send_frame+0x88/0x100 [ 264.665178][T12405] hci_send_frame+0x1a9/0x2e0 [ 264.665199][T12405] hci_tx_work+0x9f9/0x1710 [ 264.680108][ T5582] usb 6-1: SerialNumber: syz [ 264.680380][T12405] process_one_work+0x863/0x1000 [ 264.700870][T12405] worker_thread+0xaa8/0x12a0 [ 264.706108][T12405] kthread+0x436/0x520 [ 264.710736][T12405] ret_from_fork+0x1f/0x30 [ 264.715709][T12405] [ 264.715709][T12405] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 264.724964][T12405] __flush_work+0xdd/0x1b0 [ 264.729944][T12405] hci_dev_do_close+0x1e7/0x1030 [ 264.735446][T12405] hci_unregister_dev+0x2d7/0x580 [ 264.741037][T12405] vhci_release+0x73/0xc0 [ 264.745922][T12405] __fput+0x234/0x930 [ 264.750565][T12405] task_work_run+0x125/0x1a0 [ 264.752923][T12372] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 264.755800][T12405] do_exit+0x61e/0x20a0 [ 264.767462][T12405] do_group_exit+0x12e/0x300 [ 264.772709][T12405] __x64_sys_exit_group+0x3b/0x40 [ 264.778298][T12405] do_syscall_64+0x4c/0xa0 [ 264.783354][T12405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.789805][T12405] [ 264.789805][T12405] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 264.797493][T12405] __mutex_lock_common+0x1eb/0x2390 [ 264.803251][T12405] mutex_lock_nested+0x17/0x20 [ 264.808570][T12405] bg_scan_update+0x44/0x3b0 [ 264.813718][T12405] process_one_work+0x863/0x1000 [ 264.819211][T12405] worker_thread+0xaa8/0x12a0 [ 264.824442][T12405] kthread+0x436/0x520 [ 264.829068][T12405] ret_from_fork+0x1f/0x30 [ 264.834037][T12405] [ 264.834037][T12405] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 264.843895][T12405] __lock_acquire+0x2c33/0x7c60 [ 264.849388][T12405] lock_acquire+0x197/0x3f0 [ 264.854444][T12405] __flush_work+0xdd/0x1b0 [ 264.859426][T12405] __cancel_work_timer+0x3ac/0x520 [ 264.865117][T12405] hci_request_cancel_all+0xcc/0x300 [ 264.870960][T12405] hci_dev_do_close+0x4e/0x1030 [ 264.876461][T12405] hci_rfkill_set_block+0x10a/0x190 [ 264.882220][T12405] rfkill_set_block+0x1c6/0x420 [ 264.887623][T12405] rfkill_fop_write+0x458/0x560 [ 264.893035][T12405] vfs_write+0x300/0xd00 [ 264.897826][T12405] ksys_write+0x14d/0x250 [ 264.902707][T12405] do_syscall_64+0x4c/0xa0 [ 264.907671][T12405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.914120][T12405] [ 264.914120][T12405] other info that might help us debug this: [ 264.914120][T12405] [ 264.924367][T12405] Chain exists of: [ 264.924367][T12405] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 264.924367][T12405] [ 264.940134][T12405] Possible unsafe locking scenario: [ 264.940134][T12405] [ 264.947607][T12405] CPU0 CPU1 [ 264.952997][T12405] ---- ---- [ 264.958379][T12405] lock(rfkill_global_mutex); [ 264.963261][T12405] lock(&data->open_mutex); [ 264.970392][T12405] lock(rfkill_global_mutex); [ 264.977797][T12405] lock((work_completion)(&hdev->bg_scan_update)); [ 264.984514][T12405] [ 264.984514][T12405] *** DEADLOCK *** [ 264.984514][T12405] [ 264.992678][T12405] 1 lock held by syz.0.3310/12405: [ 264.997809][T12405] #0: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 265.007949][T12405] [ 265.007949][T12405] stack backtrace: [ 265.013946][T12405] CPU: 1 PID: 12405 Comm: syz.0.3310 Not tainted syzkaller #0 [ 265.021434][T12405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.026257][T12372] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 265.031811][T12405] Call Trace: [ 265.042129][T12405] [ 265.045084][T12405] dump_stack_lvl+0x168/0x230 [ 265.049799][T12405] ? load_image+0x3b0/0x3b0 [ 265.053562][ T5582] usbtest 6-1:254.235: Linux gadget zero [ 265.054326][T12405] ? show_regs_print_info+0x20/0x20 [ 265.059977][ T5582] usbtest 6-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 265.065175][T12405] ? print_circular_bug+0x12b/0x1a0 [ 265.065202][T12405] check_noncircular+0x274/0x310 [ 265.065224][T12405] ? add_chain_block+0x940/0x940 [ 265.065241][T12405] ? lockdep_lock+0xdc/0x1e0 [ 265.065266][T12405] ? __lock_acquire+0x12d9/0x7c60 [ 265.099093][T12405] ? lockdep_lock+0x1e0/0x1e0 [ 265.103907][T12405] ? mark_lock+0x94/0x320 [ 265.108276][T12405] __lock_acquire+0x2c33/0x7c60 [ 265.113168][T12405] ? verify_lock_unused+0x140/0x140 [ 265.118409][T12405] ? verify_lock_unused+0x140/0x140 [ 265.123706][T12405] lock_acquire+0x197/0x3f0 [ 265.128248][T12405] ? __flush_work+0xc1/0x1b0 [ 265.132954][T12405] ? __lock_acquire+0x7c60/0x7c60 [ 265.138015][T12405] ? read_lock_is_recursive+0x10/0x10 [ 265.143711][T12405] ? start_flush_work+0x776/0x820 [ 265.148769][T12405] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 265.154696][T12405] ? _raw_spin_unlock+0x40/0x40 [ 265.159581][T12405] __flush_work+0xdd/0x1b0 [ 265.164031][T12405] ? __flush_work+0xc1/0x1b0 [ 265.168661][T12405] ? flush_work+0x20/0x20 [ 265.173022][T12405] ? try_to_grab_pending+0xf3/0x7e0 [ 265.178245][T12405] ? lockdep_hardirqs_off+0x70/0x100 [ 265.183562][T12405] ? mark_lock+0x94/0x320 [ 265.187933][T12405] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 265.193956][T12405] ? lock_chain_count+0x20/0x20 [ 265.198847][T12405] ? mark_lock+0x94/0x320 [ 265.203218][T12405] ? __cancel_work_timer+0x331/0x520 [ 265.208540][T12405] __cancel_work_timer+0x3ac/0x520 [ 265.213712][T12405] ? cancel_work_sync+0x20/0x20 [ 265.218693][T12405] ? __cancel_work+0x1f4/0x2d0 [ 265.223489][T12405] ? lockdep_hardirqs_on+0x94/0x140 [ 265.228722][T12405] ? __cancel_work+0x26f/0x2d0 [ 265.233514][T12405] ? cancel_work+0x20/0x20 [ 265.237961][T12405] ? lock_chain_count+0x20/0x20 [ 265.242860][T12405] hci_request_cancel_all+0xcc/0x300 [ 265.248187][T12405] hci_dev_do_close+0x4e/0x1030 [ 265.253083][T12405] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 265.259019][T12405] ? _raw_spin_unlock+0x40/0x40 [ 265.263908][T12405] hci_rfkill_set_block+0x10a/0x190 [ 265.269164][T12405] ? rcu_lock_release+0x20/0x20 [ 265.274055][T12405] rfkill_set_block+0x1c6/0x420 [ 265.278942][T12405] rfkill_fop_write+0x458/0x560 [ 265.281472][ T5582] usb 6-1: USB disconnect, device number 16 [ 265.284027][T12405] ? rfkill_fop_read+0x4b0/0x4b0 [ 265.284057][T12405] ? common_file_perm+0x130/0x1c0 [ 265.284081][T12405] ? fsnotify_perm+0x5d/0x560 [ 265.284103][T12405] ? security_file_permission+0x75/0xa0 [ 265.310297][T12405] ? rfkill_fop_read+0x4b0/0x4b0 [ 265.315283][T12405] vfs_write+0x300/0xd00 [ 265.319560][T12405] ? file_end_write+0x250/0x250 [ 265.324457][T12405] ? __fget_files+0x40f/0x480 [ 265.329171][T12405] ? __fdget_pos+0x1e2/0x370 [ 265.333796][T12405] ? ksys_write+0x71/0x250 [ 265.338245][T12405] ksys_write+0x14d/0x250 [ 265.342605][T12405] ? __ia32_sys_read+0x80/0x80 [ 265.347399][T12405] ? lockdep_hardirqs_on+0x94/0x140 [ 265.352630][T12405] do_syscall_64+0x4c/0xa0 [ 265.357081][T12405] ? clear_bhb_loop+0x30/0x80 [ 265.361790][T12405] ? clear_bhb_loop+0x30/0x80 [ 265.366508][T12405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.372444][T12405] RIP: 0033:0x7fcd80ce0749 [ 265.376898][T12405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.396541][T12405] RSP: 002b:00007fcd7ef47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.404989][T12405] RAX: ffffffffffffffda RBX: 00007fcd80f36fa0 RCX: 00007fcd80ce0749 [ 265.412994][T12405] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 265.421002][T12405] RBP: 00007fcd80d64f91 R08: 0000000000000000 R09: 0000000000000000 [ 265.429001][T12405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.437005][T12405] R13: 00007fcd80f37038 R14: 00007fcd80f36fa0 R15: 00007fff82751868 [ 265.445021][T12405] [ 265.505022][T12411] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 265.535447][T12411] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)