last executing test programs: 3.527282994s ago: executing program 1 (id=2647): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x403, 0x97c1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x0, 'D'}, @main=@item_4={0x3, 0x0, 0xb, "58611047"}]}}, 0x0}, 0x0) 1.488022972s ago: executing program 0 (id=2688): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x2}]}}}]}, 0x44}}, 0x0) 1.474449522s ago: executing program 3 (id=2689): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 1.380098194s ago: executing program 0 (id=2691): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x48}}, 0x0) 1.336240585s ago: executing program 1 (id=2692): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)) 1.336122365s ago: executing program 2 (id=2693): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x1002, &(0x7f0000002500)=""/4106, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x10, 0x4}, 0x25) 1.247150547s ago: executing program 1 (id=2694): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x6, 0x101}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x2, 0x0, 0x1, {0x8}}]}]}, 0x3c}}, 0x0) 1.245898417s ago: executing program 2 (id=2695): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x4000040d}) close(r0) 1.237077487s ago: executing program 3 (id=2696): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x7ffffffffffe, 0x2, 0x8001, 0xffffffffffffffff}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3c1c}, 0x0, 0x0, 0x0) 1.168235808s ago: executing program 0 (id=2697): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r0, &(0x7f0000000300)="240000001a005f03e494d9ecfd8900a9c4244b4b0a150c000800e6331d8ddcccfe66fcd7", 0x24) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/17, 0x11}}], 0x53, 0x0, 0x0) 1.096850509s ago: executing program 3 (id=2698): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a66c310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25512d52b43a773f9cd35d70e03d69b2af2ead1c39ef1c55"], 0xfa, 0x621b, &(0x7f0000012cc0)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 1.06733683s ago: executing program 1 (id=2699): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280040012000500160001"], 0x48}}, 0x0) 1.0641767s ago: executing program 2 (id=2700): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0xfffffffffffffffc}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r1, 0x0, {0x2, 0xf1, 0x3}, 0xff}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4) 908.182663ms ago: executing program 2 (id=2701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 883.228524ms ago: executing program 1 (id=2702): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x199e, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x800002}], 0x1, 0x0, 0x0) 791.951665ms ago: executing program 1 (id=2703): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}]}}) llistxattr(&(0x7f0000000a00)='./file0\x00', 0x0, 0x8c) 753.882156ms ago: executing program 2 (id=2704): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40008d4) 628.212958ms ago: executing program 2 (id=2705): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x8028c003, 0x0) 480.760031ms ago: executing program 4 (id=2707): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) 408.157363ms ago: executing program 4 (id=2708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xfffffe40, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(r0) 407.926003ms ago: executing program 4 (id=2709): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6a, &(0x7f0000000a40)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffff, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @local, @rand_addr=' \x01\x00'}}}}}}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) 379.982073ms ago: executing program 4 (id=2710): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r1, &(0x7f0000000280)="ab", 0x1, 0xef1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x8, r1, 0x0, 0x0, 0x1}]) 310.529085ms ago: executing program 0 (id=2711): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="10008100c23b88a8", 0x8, 0x0, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) 264.015195ms ago: executing program 3 (id=2712): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0x0, 0xffeffffe}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 237.065196ms ago: executing program 4 (id=2713): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20080, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000100)) 220.719636ms ago: executing program 0 (id=2714): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x1}) 156.274977ms ago: executing program 3 (id=2715): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x80040, 0x0) io_uring_setup(0x2a77, 0x0) fcntl$setflags(r0, 0x2, 0x0) 105.811698ms ago: executing program 0 (id=2716): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0xfffffda2, 0x5, 0x48}]}]}, 0x38}}, 0x0) 76.150209ms ago: executing program 3 (id=2717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x97a6, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x31) 0s ago: executing program 4 (id=2718): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x6, 0x4, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000004850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000b00)={r2, 0x2, 0x0}, 0x10) kernel console output (not intermixed with test programs): .275162][ T4597] usb 3-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 198.294204][ T4597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.302787][ T4598] usb 4-1: GET_CAPABILITIES returned 0 [ 198.303053][ T8381] loop1: detected capacity change from 0 to 256 [ 198.309119][ T4598] usbtmc 4-1:16.0: can't read capabilities [ 198.329747][ T4597] usb 3-1: config 0 descriptor?? [ 198.366452][ T8381] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d) [ 198.418183][ T5049] usb 1-1: USB disconnect, device number 16 [ 198.425576][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 198.438132][ T5049] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 198.507584][ T4598] usb 4-1: USB disconnect, device number 13 [ 198.801851][ T8371] loop2: detected capacity change from 0 to 8 [ 198.854463][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 198.927150][ T8371] SQUASHFS error: zlib decompression failed, data probably corrupt [ 198.945386][ T8371] SQUASHFS error: Failed to read block 0x9b: -5 [ 198.962263][ T8371] SQUASHFS error: Unable to read metadata cache entry [99] [ 198.976819][ T8371] SQUASHFS error: Unable to read inode 0x127 [ 199.118762][ T4597] wacom 0003:056A:0002.0014: Unknown device_type for 'HID 056a:0002'. Ignoring. [ 199.319363][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 199.331730][ T5048] usb 3-1: USB disconnect, device number 13 [ 199.408775][ T8402] loop1: detected capacity change from 0 to 32768 [ 199.467461][ T4597] hid-generic 0000:0004:0000.0015: unknown main item tag 0x0 [ 199.478684][ T4597] hid-generic 0000:0004:0000.0015: unknown main item tag 0x0 [ 199.491836][ T4597] hid-generic 0000:0004:0000.0015: unknown main item tag 0x0 [ 199.538812][ T8402] XFS (loop1): Mounting V5 Filesystem [ 199.548258][ T4597] hid-generic 0000:0004:0000.0015: hidraw0: HID v0.05 Device [syz0] on syz0 [ 199.684960][ T26] audit: type=1326 audit(1759253038.492:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.3.1487" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d7a987ec9 code=0x0 [ 199.724305][ T8402] XFS (loop1): Ending clean mount [ 199.739186][ T8402] XFS (loop1): Quotacheck needed: Please wait. [ 199.754841][ T8434] fido_id[8434]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 199.842528][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1489'. [ 199.896801][ T8402] XFS (loop1): Quotacheck: Done. [ 200.071232][ T4185] XFS (loop1): Unmounting Filesystem [ 200.085498][ T8452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.346594][ T8463] Falling back ldisc for ttyprintk. [ 200.672212][ T5048] kernel write not supported for file /645/clear_refs (pid: 5048 comm: kworker/1:12) [ 201.019493][ T8489] loop4: detected capacity change from 0 to 4096 [ 201.075390][ T8489] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 201.177785][ T8499] loop0: detected capacity change from 0 to 512 [ 201.278635][ T8499] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 201.371608][ T5048] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 201.390460][ T8499] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1508: inode #255: comm syz.0.1508: iget: illegal inode # [ 201.439997][ T8499] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1508: error while reading EA inode 255 err=-117 [ 201.470539][ T8499] EXT4-fs (loop0): 1 orphan inode deleted [ 201.485308][ T8499] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.582770][ T26] audit: type=1800 audit(1759253040.392:24): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1508" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 201.815539][ T5048] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 201.835681][ T5048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.873118][ T5048] usb 2-1: config 0 descriptor?? [ 201.936420][ T5048] cp210x 2-1:0.0: cp210x converter detected [ 202.157047][ T8537] Falling back ldisc for ttyprintk. [ 202.282717][ T8540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.362220][ T8523] loop2: detected capacity change from 0 to 32768 [ 202.610603][ T5048] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 202.626316][ T5048] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 202.663573][ T5048] usb 2-1: cp210x converter now attached to ttyUSB0 [ 202.704200][ T5048] usb 2-1: USB disconnect, device number 9 [ 202.747191][ T5048] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 202.775952][ T5048] cp210x 2-1:0.0: device disconnected [ 203.098570][ T8581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.165187][ T5052] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 203.455173][ T5052] usb 3-1: Using ep0 maxpacket: 8 [ 203.556461][ T8586] loop1: detected capacity change from 0 to 32768 [ 203.564014][ T8590] loop0: detected capacity change from 0 to 32768 [ 203.585395][ T5052] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.595788][ T5052] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.606341][ T5052] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.617223][ T5052] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.631015][ T5052] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 203.639055][ T8586] XFS (loop1): Mounting V5 Filesystem [ 203.640562][ T5052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.771285][ T8590] XFS (loop0): Mounting V5 Filesystem [ 203.877940][ T8586] XFS (loop1): Ending clean mount [ 203.896816][ T8586] XFS (loop1): Quotacheck needed: Please wait. [ 203.915498][ T5052] usb 3-1: GET_CAPABILITIES returned 0 [ 203.925236][ T5052] usbtmc 3-1:16.0: can't read capabilities [ 203.961883][ T8590] XFS (loop0): Ending clean mount [ 203.971636][ T8590] XFS (loop0): Quotacheck needed: Please wait. [ 204.017015][ T8586] XFS (loop1): Quotacheck: Done. [ 204.045545][ T8590] XFS (loop0): Quotacheck: Done. [ 204.153241][ T5052] usb 3-1: USB disconnect, device number 14 [ 204.163515][ T4185] XFS (loop1): Unmounting Filesystem [ 204.226526][ T8614] loop4: detected capacity change from 0 to 2048 [ 204.282727][ T4188] XFS (loop0): Unmounting Filesystem [ 204.291303][ T8614] NILFS (loop4): invalid segment: Inconsistency found [ 204.333574][ T8614] NILFS (loop4): trying rollback from an earlier position [ 204.400746][ T8614] NILFS (loop4): recovery complete [ 204.453402][ T8615] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.075394][ T5049] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 205.113658][ T5049] Bluetooth: hci1: Injecting HCI hardware error event [ 205.138843][ T146] Bluetooth: hci1: hardware error 0x00 [ 205.149441][ T8635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.208781][ T8645] Falling back ldisc for ttyprintk. [ 205.261486][ T8647] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 205.855146][ T4261] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 206.115371][ T4261] usb 2-1: Using ep0 maxpacket: 32 [ 206.235401][ T4261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.270760][ T8663] loop4: detected capacity change from 0 to 32768 [ 206.335167][ T4261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.349414][ T4261] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 206.362776][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.374810][ T4261] usb 2-1: config 0 descriptor?? [ 206.411081][ T8663] XFS (loop4): Mounting V5 Filesystem [ 206.599011][ T8663] XFS (loop4): Ending clean mount [ 206.656342][ T8663] XFS (loop4): Quotacheck needed: Please wait. [ 206.791327][ T8663] XFS (loop4): Quotacheck: Done. [ 206.870830][ T26] audit: type=1800 audit(1759253045.682:25): pid=8663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1580" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 206.893469][ T4261] hid_mf 0003:0079:1801.0016: item fetching failed at offset 0/2 [ 206.906609][ T4193] XFS (loop4): Unmounting Filesystem [ 206.913391][ T4261] hid_mf 0003:0079:1801.0016: HID parse failed. [ 206.945200][ T4261] hid_mf: probe of 0003:0079:1801.0016 failed with error -22 [ 207.119780][ T4604] usb 2-1: USB disconnect, device number 10 [ 207.542763][ T8718] siw: device registration error -23 [ 208.211988][ T8756] siw: device registration error -23 [ 208.561496][ T8743] loop1: detected capacity change from 0 to 32768 [ 208.581640][ T8769] loop2: detected capacity change from 0 to 64 [ 208.610598][ T8746] loop0: detected capacity change from 0 to 32768 [ 208.645527][ T8769] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 208.775305][ T4604] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 209.035210][ T4604] usb 5-1: Using ep0 maxpacket: 32 [ 209.155428][ T4604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.167734][ T4604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.178002][ T4604] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 209.187379][ T4604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.221887][ T4604] usb 5-1: config 0 descriptor?? [ 209.486751][ T8793] loop0: detected capacity change from 0 to 1024 [ 209.586806][ T8793] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.597740][ T8793] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.713109][ T4604] hid_mf 0003:0079:1801.0017: item fetching failed at offset 0/2 [ 209.755748][ T4604] hid_mf 0003:0079:1801.0017: HID parse failed. [ 209.762057][ T4604] hid_mf: probe of 0003:0079:1801.0017 failed with error -22 [ 209.946317][ T4604] usb 5-1: USB disconnect, device number 18 [ 210.165665][ T150] block nbd0: Possible stuck request ffff888020890000: control (read@0,4096B). Runtime 60 seconds [ 210.176529][ T5052] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 210.425172][ T5052] usb 3-1: Using ep0 maxpacket: 8 [ 210.545358][ T5052] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 210.565218][ T5052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.617351][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 210.627513][ T5052] pvrusb2: Hardware description: Terratec Grabster AV400 [ 210.640405][ T5052] pvrusb2: ********** [ 210.644496][ T5052] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 210.655986][ T5052] pvrusb2: Important functionality might not be entirely working. [ 210.663823][ T5052] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 210.675759][ T5052] pvrusb2: ********** [ 210.688972][ T8833] nbd1: detected capacity change from 0 to 549764202496 [ 210.703661][ T4192] block nbd1: Receive control failed (result -104) [ 210.707778][ T8835] device macsec0 entered promiscuous mode [ 210.724226][ T8835] device macsec0 left promiscuous mode [ 210.839360][ T2426] pvrusb2: Invalid write control endpoint [ 210.845705][ T4261] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 210.949120][ T2426] pvrusb2: Invalid write control endpoint [ 210.958805][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 210.961357][ T8845] loop0: detected capacity change from 0 to 1024 [ 210.968651][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 211.005195][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 211.029610][ T2426] pvrusb2: Device being rendered inoperable [ 211.045202][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 211.058714][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 211.067425][ T5048] usb 3-1: USB disconnect, device number 15 [ 211.076309][ T8851] autofs4:pid:8851:autofs_fill_super: pipe file descriptor does not contain proper ops [ 211.100105][ T2426] pvrusb2: Attached sub-driver cx25840 [ 211.110232][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 211.136413][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 211.147788][ T6182] hfsplus: b-tree write err: -5, ino 4 [ 211.161938][ T8853] loop4: detected capacity change from 0 to 128 [ 211.245482][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.273991][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.316353][ T4261] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 211.339746][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.363552][ T4261] usb 4-1: config 0 descriptor?? [ 211.720249][ T8859] loop0: detected capacity change from 0 to 32768 [ 211.853984][ T8859] XFS (loop0): Mounting V5 Filesystem [ 211.878703][ T4261] hkems 0003:2006:0118.0018: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.3-1/input0 [ 211.889987][ T4261] hkems 0003:2006:0118.0018: no inputs found [ 211.896286][ T4597] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 211.904037][ T4261] hkems 0003:2006:0118.0018: force feedback init failed [ 211.986207][ T8859] XFS (loop0): Ending clean mount [ 212.012855][ T8859] XFS (loop0): Quotacheck needed: Please wait. [ 212.124948][ T5049] usb 4-1: USB disconnect, device number 14 [ 212.157625][ T8859] XFS (loop0): Quotacheck: Done. [ 212.214182][ T4188] XFS (loop0): Unmounting Filesystem [ 212.304290][ T8865] loop2: detected capacity change from 0 to 32768 [ 212.400049][ T8869] loop4: detected capacity change from 0 to 32768 [ 212.430347][ T8865] XFS (loop2): Mounting V5 Filesystem [ 212.470362][ T8869] jfs_mkdir: dtInsert returned -EIO [ 212.475730][ T8869] ERROR: (device loop4): jfs_mkdir: [ 212.475730][ T8869] [ 212.484026][ T8869] ERROR: (device loop4): remounting filesystem as read-only [ 212.577924][ T4597] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 212.587182][ T4597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.605554][ T4597] usb 2-1: Product: syz [ 212.609806][ T4597] usb 2-1: Manufacturer: syz [ 212.614414][ T4597] usb 2-1: SerialNumber: syz [ 212.652593][ T8865] XFS (loop2): Ending clean mount [ 212.660826][ T4597] usb 2-1: config 0 descriptor?? [ 212.672628][ T8865] XFS (loop2): Quotacheck needed: Please wait. [ 212.789029][ T8891] mkiss: ax0: crc mode is auto. [ 212.912049][ T8865] XFS (loop2): Quotacheck: Done. [ 212.976439][ T4261] usb 2-1: USB disconnect, device number 11 [ 213.049708][ T26] audit: type=1800 audit(1759253051.862:26): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1659" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 213.122265][ T7685] XFS (loop2): Unmounting Filesystem [ 213.285912][ T5049] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 213.394146][ T8901] loop2: detected capacity change from 0 to 2048 [ 213.442910][ T8901] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.443844][ T8903] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1672'. [ 213.472029][ T8903] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1672'. [ 213.536501][ T5049] usb 1-1: Using ep0 maxpacket: 16 [ 213.655404][ T5049] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.668442][ T5049] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.682319][ T5049] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.689897][ T5049] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 213.699566][ T5049] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.709531][ T5049] usb 1-1: config 0 descriptor?? [ 213.753002][ T8909] loop4: detected capacity change from 0 to 256 [ 213.793786][ T8909] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.804999][ T8909] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 213.819642][ T8909] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 213.852334][ T8913] nbd2: detected capacity change from 0 to 549764202496 [ 213.891742][ T8915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1677'. [ 213.902745][ T4192] block nbd2: Receive control failed (result -104) [ 213.918183][ T8909] exFAT-fs (loop4): hint_cluster is invalid (17) [ 214.143700][ T8926] loop1: detected capacity change from 0 to 2048 [ 214.176973][ T5049] hid (null): invalid report_size 42190 [ 214.182685][ T5049] hid (null): report_id 4263223746 is invalid [ 214.205193][ T5049] hid (null): unknown global tag 0xe [ 214.222055][ T8926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.255242][ T5049] hid (null): global environment stack underflow [ 214.261671][ T5049] hid (null): global environment stack underflow [ 214.288534][ T5049] hid (null): global environment stack underflow [ 214.305385][ T5049] hid (null): report_id 0 is invalid [ 214.321360][ T5049] hid (null): unknown global tag 0xc [ 214.345274][ T5049] hid (null): unknown global tag 0xd [ 214.367500][ T5049] hid (null): unknown global tag 0xc [ 214.403392][ T5049] hid (null): global environment stack underflow [ 214.433833][ T5049] hid (null): bogus close delimiter [ 214.493553][ T5049] usb 1-1: USB disconnect, device number 17 [ 214.781280][ T8922] loop2: detected capacity change from 0 to 32768 [ 214.805175][ T4261] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 214.835009][ T8922] jfs_mkdir: dtInsert returned -EIO [ 214.841525][ T8922] ERROR: (device loop2): jfs_mkdir: [ 214.841525][ T8922] [ 214.863870][ T8922] ERROR: (device loop2): remounting filesystem as read-only [ 215.032879][ T8932] loop4: detected capacity change from 0 to 32768 [ 215.075281][ T4261] usb 2-1: Using ep0 maxpacket: 8 [ 215.381694][ T8948] loop2: detected capacity change from 0 to 4096 [ 215.395425][ T4261] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 215.404521][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.437906][ T4261] usb 2-1: Product: syz [ 215.453649][ T4261] usb 2-1: Manufacturer: syz [ 215.458594][ T4261] usb 2-1: SerialNumber: syz [ 215.476025][ T4261] usb 2-1: config 0 descriptor?? [ 215.497115][ T8948] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 215.537636][ T4261] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 215.552993][ T8948] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 215.609876][ T8950] loop4: detected capacity change from 0 to 4096 [ 215.620333][ T8948] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 215.663346][ T8948] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 215.703872][ T8950] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 215.715961][ T8948] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 215.747452][ T8948] ntfs: volume version 3.1. [ 215.770941][ T8950] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 215.786402][ T8948] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 215.793326][ T8950] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 215.873713][ T8950] ntfs: volume version 3.1. [ 216.097164][ T8944] loop0: detected capacity change from 0 to 40427 [ 216.136661][ T8944] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 216.146738][ T8944] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 216.166851][ T8956] loop4: detected capacity change from 0 to 256 [ 216.188446][ T8944] F2FS-fs (loop0): invalid crc value [ 216.201992][ T8944] F2FS-fs (loop0): Found nat_bits in checkpoint [ 216.245023][ T8944] F2FS-fs (loop0): Start checkpoint disabled! [ 216.258645][ T8944] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 216.278786][ T8956] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.325302][ T8956] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 216.345277][ T5049] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 216.367755][ T8956] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe829cd32, utbl_chksum : 0xe619d30d) [ 216.405402][ T4261] gspca_sonixj: reg_r err -71 [ 216.410274][ T4261] sonixj: probe of 2-1:0.0 failed with error -71 [ 216.446885][ T4261] usb 2-1: USB disconnect, device number 12 [ 216.571013][ T4453] attempt to access beyond end of device [ 216.571013][ T4453] loop0: rw=2049, want=40976, limit=40427 [ 216.705254][ T5049] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.716369][ T5049] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 216.728912][ T5049] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.738286][ T5049] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 216.750235][ T5049] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 216.885881][ T5049] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.905917][ T5049] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.913959][ T5049] usb 3-1: Product: syz [ 216.925337][ T5049] usb 3-1: Manufacturer: syz [ 216.996453][ T5049] cdc_wdm 3-1:1.0: skipping garbage [ 217.012026][ T5049] cdc_wdm 3-1:1.0: skipping garbage [ 217.036996][ T8963] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1711'. [ 217.037174][ T5049] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 217.058097][ T8962] Falling back ldisc for ptm0. [ 217.063117][ T5049] cdc_wdm 3-1:1.0: Unknown control protocol [ 217.117726][ T8966] loop0: detected capacity change from 0 to 2048 [ 217.219011][ T8966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.256545][ T5049] usb 3-1: USB disconnect, device number 16 [ 217.662409][ T8985] loop0: detected capacity change from 0 to 1764 [ 217.771947][ T8974] loop4: detected capacity change from 0 to 32768 [ 217.915391][ T8974] XFS (loop4): Mounting V5 Filesystem [ 218.103250][ T8974] XFS (loop4): Ending clean mount [ 218.210755][ T4193] XFS (loop4): Unmounting Filesystem [ 218.535461][ T9021] loop2: detected capacity change from 0 to 256 [ 218.562548][ T9021] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.587701][ T9021] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 218.603601][ T9021] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 218.653688][ T9021] exFAT-fs (loop2): hint_cluster is invalid (17) [ 219.092414][ T9016] loop1: detected capacity change from 0 to 131072 [ 219.101310][ T5049] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 219.175008][ T9016] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 219.183324][ T9016] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 219.191905][ T5052] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 219.255237][ T9016] F2FS-fs (loop1): invalid crc value [ 219.330148][ T9016] F2FS-fs (loop1): Found nat_bits in checkpoint [ 219.369332][ T5049] usb 4-1: Using ep0 maxpacket: 8 [ 219.390669][ T9016] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 219.398046][ T9016] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 219.436066][ T5052] usb 1-1: Using ep0 maxpacket: 32 [ 219.517681][ T9033] loop2: detected capacity change from 0 to 2048 [ 219.555536][ T5052] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 219.593459][ T5052] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 219.606995][ T9033] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 219.631224][ T5052] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 219.634764][ T4305] udevd[4305]: incorrect nilfs2 checksum on /dev/loop2 [ 219.656097][ T5049] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 219.682900][ T5049] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.687762][ T9033] NILFS (loop2): mounting unchecked fs [ 219.695326][ T5052] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 219.723126][ T5049] usb 4-1: Product: syz [ 219.735193][ T5049] usb 4-1: Manufacturer: syz [ 219.740136][ T5049] usb 4-1: SerialNumber: syz [ 219.745014][ T5052] usb 1-1: config 0 interface 0 has no altsetting 0 [ 219.748273][ T9033] NILFS (loop2): recovery complete [ 219.768491][ T5049] usb 4-1: config 0 descriptor?? [ 219.807626][ T5049] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 219.820603][ T9039] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.905654][ T5052] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 219.916215][ T5052] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 219.924686][ T5052] usb 1-1: Product: syz [ 219.929956][ T5052] usb 1-1: Manufacturer: syz [ 219.934608][ T5052] usb 1-1: SerialNumber: syz [ 219.950784][ T5052] usb 1-1: config 0 descriptor?? [ 219.996989][ T5052] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 220.016245][ T5052] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 220.247342][ T4231] usb 1-1: USB disconnect, device number 18 [ 220.266965][ T4231] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 220.384200][ T9052] loop4: detected capacity change from 0 to 512 [ 220.499622][ T9052] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.670137][ T5049] gspca_sonixj: reg_r err -71 [ 220.690964][ T5049] sonixj: probe of 4-1:0.0 failed with error -71 [ 220.714233][ T5049] usb 4-1: USB disconnect, device number 15 [ 220.737970][ T9058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1737'. [ 220.890692][ T9064] loop4: detected capacity change from 0 to 1024 [ 220.915222][ T4597] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 221.224755][ T9079] loop0: detected capacity change from 0 to 2048 [ 221.329886][ T9079] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.345541][ T4597] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 221.354198][ T4597] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 221.400490][ T4597] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 221.422536][ T4597] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 221.442281][ T4597] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 221.505188][ T5049] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 221.595479][ T4597] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 221.604605][ T4597] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 221.613239][ T4597] usb 2-1: Product: syz [ 221.617627][ T4597] usb 2-1: Manufacturer: syz [ 221.666311][ T4597] cdc_wdm 2-1:1.0: skipping garbage [ 221.671553][ T4597] cdc_wdm 2-1:1.0: skipping garbage [ 221.681027][ T4597] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 221.689442][ T4597] cdc_wdm 2-1:1.0: Unknown control protocol [ 221.715536][ T5052] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 221.755240][ T5049] usb 5-1: Using ep0 maxpacket: 16 [ 221.875365][ T5049] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.887539][ T5049] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.888605][ T4597] usb 2-1: USB disconnect, device number 13 [ 221.897476][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 221.897498][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 221.897512][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 221.899189][ T5049] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 221.934305][ T5049] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.946593][ T5049] usb 5-1: config 0 descriptor?? [ 222.095363][ T5052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.115173][ T5052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.128613][ T5052] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 222.138014][ T5052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.151211][ T5052] usb 1-1: config 0 descriptor?? [ 222.429213][ T5049] corsair 0003:1B1C:1B02.001A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 222.638045][ T5052] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0 [ 222.647010][ T9101] loop2: detected capacity change from 0 to 512 [ 222.665683][ T5052] arvo 0003:1E7D:30D4.001B: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 222.720596][ T9101] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 222.855272][ T5052] arvo 0003:1E7D:30D4.001B: couldn't init struct arvo_device [ 222.883116][ T5052] arvo 0003:1E7D:30D4.001B: couldn't install keyboard [ 222.891569][ T5049] usb 5-1: USB disconnect, device number 19 [ 222.904465][ T5052] arvo: probe of 0003:1E7D:30D4.001B failed with error -71 [ 222.942716][ T5052] usb 1-1: USB disconnect, device number 19 [ 223.025547][ T9109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1757'. [ 223.054118][ T9105] fido_id[9105]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 223.197239][ T9111] loop2: detected capacity change from 0 to 4096 [ 223.239002][ T9111] __ntfs_error: 25 callbacks suppressed [ 223.239023][ T9111] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 223.275091][ T9111] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 223.307965][ T9111] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 223.355164][ T9111] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 223.380091][ T9111] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 223.412565][ T9111] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 223.498464][ T9111] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 223.547763][ T9111] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 223.587147][ T9111] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 223.656915][ T9111] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 223.722630][ T9117] loop0: detected capacity change from 0 to 32768 [ 223.727965][ T9111] ntfs: volume version 3.1. [ 223.800895][ T9123] loop1: detected capacity change from 0 to 47 [ 223.819222][ T9117] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1760 (9117) [ 223.842175][ T9117] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 223.842775][ T9119] loop4: detected capacity change from 0 to 4096 [ 223.851934][ T9117] BTRFS info (device loop0): force zlib compression, level 3 [ 223.864972][ T9117] BTRFS info (device loop0): enabling auto defrag [ 223.871628][ T9117] BTRFS info (device loop0): setting nodatasum [ 223.877923][ T9117] BTRFS info (device loop0): force clearing of disk cache [ 223.885143][ T9117] BTRFS info (device loop0): using free space tree [ 223.891718][ T9117] BTRFS info (device loop0): has skinny extents [ 223.931077][ T9117] BTRFS info (device loop0): enabling ssd optimizations [ 223.964029][ T9117] BTRFS info (device loop0): clearing free space tree [ 223.971180][ T9117] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.980958][ T9117] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 224.030520][ T9119] ntfs: volume version 3.1. [ 224.049376][ T9117] BTRFS info (device loop0): creating free space tree [ 224.057677][ T9117] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 224.067394][ T9117] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 224.324870][ T9146] loop2: detected capacity change from 0 to 512 [ 224.349305][ T9153] loop1: detected capacity change from 0 to 256 [ 224.506512][ T9146] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1766: casefold flag without casefold feature [ 224.561230][ T9146] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1766: couldn't read orphan inode 15 (err -117) [ 224.576979][ T9146] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 224.609221][ T9159] loop4: detected capacity change from 0 to 512 [ 224.777498][ T9159] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,abort,auto_da_alloc,norecovery,user_xattr,,errors=continue. Quota mode: writeback. [ 224.921136][ T9159] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.099644][ T9159] EXT4-fs warning (device loop4): __ext4_unlink:3335: inode #16: comm syz.4.1773: Deleting file 'file3' with no links [ 225.464688][ T9164] mkiss: ax0: crc mode is auto. [ 225.660619][ T9172] Falling back ldisc for ptm0. [ 225.770429][ T9177] loop0: detected capacity change from 0 to 4096 [ 225.830205][ T9177] ntfs: volume version 3.1. [ 226.031153][ T9183] loop0: detected capacity change from 0 to 47 [ 226.264287][ T9170] loop4: detected capacity change from 0 to 32768 [ 226.540001][ T9170] XFS (loop4): Mounting V5 Filesystem [ 226.602534][ T9170] XFS (loop4): Ending clean mount [ 226.939102][ T4193] XFS (loop4): Unmounting Filesystem [ 227.590865][ T9217] mkiss: ax0: crc mode is auto. [ 227.739715][ T9207] loop0: detected capacity change from 0 to 32768 [ 227.805939][ T9207] XFS: ikeep mount option is deprecated. [ 227.920550][ T9207] XFS (loop0): Mounting V5 Filesystem [ 228.014547][ T9207] XFS (loop0): Ending clean mount [ 228.021871][ T9207] XFS (loop0): Quotacheck needed: Please wait. [ 228.066404][ T9207] XFS (loop0): Quotacheck: Done. [ 228.108040][ T4188] XFS (loop0): Unmounting Filesystem [ 228.250373][ T9236] netlink: 'syz.3.1800': attribute type 11 has an invalid length. [ 228.286615][ T9240] loop2: detected capacity change from 0 to 47 [ 228.586899][ T9249] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1803'. [ 229.189094][ T9278] loop1: detected capacity change from 0 to 2048 [ 229.251833][ T9278] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 229.266458][ T9278] NILFS (loop1): mounting unchecked fs [ 229.290822][ T8026] udevd[8026]: incorrect nilfs2 checksum on /dev/loop1 [ 229.318669][ T9278] NILFS (loop1): recovery complete [ 229.351514][ T9280] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.564369][ T9263] loop2: detected capacity change from 0 to 32768 [ 229.629534][ T9263] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1809 (9263) [ 229.703100][ T9263] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 229.736753][ T9263] BTRFS info (device loop2): using free space tree [ 229.743317][ T9263] BTRFS info (device loop2): has skinny extents [ 229.860196][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1820'. [ 230.131512][ T9263] BTRFS info (device loop2): enabling ssd optimizations [ 230.155227][ T5048] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 230.395136][ T5048] usb 4-1: Using ep0 maxpacket: 32 [ 230.450670][ T9331] loop0: detected capacity change from 0 to 64 [ 230.520557][ T5048] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 230.529126][ T5048] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 230.565857][ T5048] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 230.585121][ T5048] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 230.622608][ T5048] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.812008][ T5048] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 230.825162][ T5048] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 230.835824][ T5048] usb 4-1: Product: syz [ 230.840112][ T5048] usb 4-1: Manufacturer: syz [ 230.850037][ T5048] usb 4-1: SerialNumber: syz [ 230.908999][ T5048] usb 4-1: config 0 descriptor?? [ 230.914982][ T9325] loop4: detected capacity change from 0 to 40427 [ 230.946739][ T5048] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 230.982031][ T9325] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 230.986890][ T5048] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 231.005022][ T9325] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 231.104153][ T9325] F2FS-fs (loop4): invalid crc value [ 231.232210][ T9325] F2FS-fs (loop4): Found nat_bits in checkpoint [ 231.248960][ T5048] usb 4-1: USB disconnect, device number 16 [ 231.268449][ T5048] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 231.316278][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'. [ 231.409621][ T9325] F2FS-fs (loop4): Start checkpoint disabled! [ 231.457520][ T9325] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 231.464605][ T9325] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 231.664603][ T9372] loop0: detected capacity change from 0 to 256 [ 231.759884][ T9372] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 231.886027][ T9372] exFAT-fs (loop0): hint_cluster is invalid (17) [ 231.897038][ T6185] attempt to access beyond end of device [ 231.897038][ T6185] loop4: rw=2049, want=41000, limit=40427 [ 231.978945][ T9383] loop1: detected capacity change from 0 to 512 [ 232.099947][ T9389] loop0: detected capacity change from 0 to 128 [ 232.162679][ T9383] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 232.236075][ T9389] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.315456][ T9389] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.622775][ T1106] hid-generic 0005:046D:0A0E.001C: collection stack underflow [ 232.661152][ T1106] hid-generic 0005:046D:0A0E.001C: item 0 0 0 12 parsing failed [ 232.701738][ T1106] hid-generic: probe of 0005:046D:0A0E.001C failed with error -22 [ 232.929446][ T9427] loop0: detected capacity change from 0 to 8192 [ 232.971772][ T9435] loop1: detected capacity change from 0 to 256 [ 232.986354][ T9427] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 233.008328][ T9427] REISERFS (device loop0): using ordered data mode [ 233.014973][ T9427] reiserfs: using flush barriers [ 233.021943][ T9427] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 233.025189][ T9435] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 233.039262][ T9427] REISERFS (device loop0): checking transaction log (loop0) [ 233.081479][ T9427] REISERFS (device loop0): Using r5 hash to sort names [ 233.099685][ T9427] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 233.119038][ T9435] exFAT-fs (loop1): hint_cluster is invalid (17) [ 233.177046][ T9427] overlayfs: upper fs needs to support d_type. [ 233.183686][ T9427] overlayfs: upper fs does not support tmpfile. [ 233.193332][ T9427] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 233.200608][ T9427] overlayfs: failed to set xattr on upper [ 233.207192][ T9427] overlayfs: ...falling back to index=off,metacopy=off. [ 233.337206][ T9439] loop1: detected capacity change from 0 to 128 [ 233.557628][ T9441] loop0: detected capacity change from 0 to 512 [ 233.640972][ T9441] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 233.700351][ T9445] loop2: detected capacity change from 0 to 64 [ 233.703486][ T9444] loop1: detected capacity change from 0 to 65 [ 233.791872][ T9444] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 234.203329][ T9463] loop1: detected capacity change from 0 to 2048 [ 234.275759][ T9463] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 234.311163][ T9463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.368478][ T6275] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 234.626532][ T9459] loop2: detected capacity change from 0 to 40427 [ 234.635166][ T6275] usb 5-1: Using ep0 maxpacket: 8 [ 234.686942][ T9459] F2FS-fs (loop2): invalid crc value [ 234.696514][ T9459] F2FS-fs (loop2): Found nat_bits in checkpoint [ 234.785522][ T6275] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 234.829348][ T9472] loop1: detected capacity change from 0 to 2364 [ 234.850748][ T9459] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 234.995371][ T6275] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 235.012477][ T6275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.032339][ T6275] usb 5-1: Product: syz [ 235.036987][ T6275] usb 5-1: Manufacturer: syz [ 235.041599][ T6275] usb 5-1: SerialNumber: syz [ 235.051525][ T7685] attempt to access beyond end of device [ 235.051525][ T7685] loop2: rw=2049, want=45104, limit=40427 [ 235.063458][ T6275] usb 5-1: config 0 descriptor?? [ 235.112804][ T6275] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 235.122899][ T6275] usb 5-1: setting power ON [ 235.128962][ T6275] dvb-usb: bulk message failed: -22 (2/0) [ 235.144511][ T6275] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.175177][ T5048] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 235.175537][ T6275] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 235.191557][ T6275] usb 5-1: media controller created [ 235.221622][ T6275] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.285453][ T6275] usb 5-1: selecting invalid altsetting 6 [ 235.291321][ T6275] usb 5-1: digital interface selection failed (-22) [ 235.298028][ T6275] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 235.316341][ T9461] dvb-usb: bulk message failed: -22 (3/0) [ 235.322106][ T9461] dvb-usb: bulk message failed: -22 (5/0) [ 235.329456][ T9461] dvb-usb: bulk message failed: -22 (3/0) [ 235.365408][ T6275] usb 5-1: setting power OFF [ 235.370142][ T6275] dvb-usb: bulk message failed: -22 (2/0) [ 235.376060][ T6275] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 235.386616][ T6275] (NULL device *): no alternate interface [ 235.402059][ T6275] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 235.421341][ T6275] usb 5-1: USB disconnect, device number 20 [ 235.425305][ T5048] usb 4-1: Using ep0 maxpacket: 32 [ 235.555940][ T5048] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 235.564206][ T5048] usb 4-1: config 0 has no interface number 0 [ 235.725262][ T5048] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 235.734476][ T5048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.742575][ T5048] usb 4-1: Product: syz [ 235.746820][ T5048] usb 4-1: Manufacturer: syz [ 235.751500][ T5048] usb 4-1: SerialNumber: syz [ 235.758152][ T5048] usb 4-1: config 0 descriptor?? [ 235.796595][ T5048] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 235.949432][ T9487] loop4: detected capacity change from 0 to 512 [ 236.021846][ T9487] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 236.028937][ T5048] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 236.066081][ T5048] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 236.260456][ T9492] loop0: detected capacity change from 0 to 4096 [ 236.299724][ T9492] NILFS (loop0): invalid segment: Inconsistency found [ 236.343159][ T9492] NILFS (loop0): trying rollback from an earlier position [ 236.384378][ T9492] NILFS (loop0): recovery complete [ 236.412306][ T9500] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.468355][ T1106] usb 4-1: USB disconnect, device number 17 [ 236.485148][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 236.510316][ T1106] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 236.543115][ T1106] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 236.560371][ T1106] quatech2 4-1:0.51: device disconnected [ 236.955139][ T5048] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 237.279087][ T9515] loop0: detected capacity change from 0 to 40427 [ 237.315272][ T5048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.329056][ T5048] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 237.351277][ T9515] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 237.381530][ T9515] F2FS-fs (loop0): invalid crc value [ 237.387231][ T5048] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 237.401511][ T5048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.414220][ T5048] usb 3-1: config 0 descriptor?? [ 237.421976][ T9515] F2FS-fs (loop0): Found nat_bits in checkpoint [ 237.472125][ T9515] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 237.584773][ T9515] F2FS-fs (loop0) : inject dquot initialize in f2fs_dquot_initialize of f2fs_unlink+0x204/0xba0 [ 237.608851][ T9515] overlayfs: cleanup of 'work/#d' failed (-3) [ 237.634418][ T9515] overlayfs: failed to resolve './file0': -2 [ 237.701322][ T9542] loop4: detected capacity change from 0 to 1024 [ 237.760119][ T4188] attempt to access beyond end of device [ 237.760119][ T4188] loop0: rw=2049, want=45112, limit=40427 [ 237.775221][ T5048] usbhid 3-1:0.0: can't add hid device: -71 [ 237.793102][ T5048] usbhid: probe of 3-1:0.0 failed with error -71 [ 237.802961][ T5048] usb 3-1: USB disconnect, device number 17 [ 237.902889][ T9542] EXT4-fs (loop4): Ignoring removed nobh option [ 237.909262][ T9542] EXT4-fs (loop4): Ignoring removed bh option [ 237.925316][ T9542] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 238.016268][ T9542] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 238.793573][ T9557] loop0: detected capacity change from 0 to 40427 [ 238.851783][ T9557] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 238.863866][ T9557] F2FS-fs (loop0): invalid crc value [ 238.879001][ T9557] F2FS-fs (loop0): Found nat_bits in checkpoint [ 238.952215][ T9557] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 238.990019][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 238.990035][ T26] audit: type=1800 audit(1759253077.802:35): pid=9557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1911" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 239.025415][ T9557] attempt to access beyond end of device [ 239.025415][ T9557] loop0: rw=2049, want=45112, limit=40427 [ 240.004395][ T9603] loop0: detected capacity change from 0 to 512 [ 240.077736][ T9603] EXT4-fs (loop0): Ignoring removed oldalloc option [ 240.130700][ T9603] EXT4-fs (loop0): 1 truncate cleaned up [ 240.163644][ T9603] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 240.245607][ T150] block nbd0: Possible stuck request ffff888020890000: control (read@0,4096B). Runtime 90 seconds [ 240.314163][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'. [ 240.344952][ T9603] EXT4-fs (loop0): shut down requested (1) [ 240.373705][ T9610] loop4: detected capacity change from 0 to 512 [ 240.554151][ T9610] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1938: inode #1: comm syz.4.1938: iget: illegal inode # [ 240.662139][ T9610] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1938: error while reading EA inode 1 err=-117 [ 240.794862][ T9610] EXT4-fs (loop4): 1 orphan inode deleted [ 240.827587][ T9610] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.885341][ T150] block nbd1: Possible stuck request ffff888020938000: control (read@0,4096B). Runtime 30 seconds [ 240.927307][ T5048] hid-generic 0005:046D:0A0E.001D: collection stack underflow [ 240.944403][ T5048] hid-generic 0005:046D:0A0E.001D: item 0 0 0 12 parsing failed [ 240.960973][ T5048] hid-generic: probe of 0005:046D:0A0E.001D failed with error -22 [ 241.405219][ T5049] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 241.775375][ T5049] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.784694][ T5049] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 241.801949][ T5049] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.811484][ T5049] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 241.828636][ T5049] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 241.955271][ T5049] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.969224][ T5049] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.980110][ T5049] usb 5-1: Product: syz [ 241.984415][ T5049] usb 5-1: Manufacturer: syz [ 242.026309][ T5049] cdc_wdm 5-1:1.0: skipping garbage [ 242.033402][ T5049] cdc_wdm 5-1:1.0: skipping garbage [ 242.048601][ T5049] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 242.054797][ T5049] cdc_wdm 5-1:1.0: Unknown control protocol [ 242.228719][ T9679] loop2: detected capacity change from 0 to 256 [ 242.354113][ T9679] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 242.481485][ T9679] exFAT-fs (loop2): hint_cluster is invalid (17) [ 242.536715][ T26] audit: type=1800 audit(1759253081.352:36): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1968" name="file1" dev="loop2" ino=1048667 res=0 errno=0 [ 242.685224][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 242.848330][ T1106] usb 5-1: USB disconnect, device number 21 [ 243.725745][ T9725] sctp: [Deprecated]: syz.4.1986 (pid 9725) Use of int in maxseg socket option. [ 243.725745][ T9725] Use struct sctp_assoc_value instead [ 243.785103][ T9722] loop2: detected capacity change from 0 to 32768 [ 243.826114][ T9727] xt_recent: Unsupported userspace flags (000000b2) [ 243.847671][ T9722] XFS (loop2): Mounting V5 Filesystem [ 243.929894][ T9722] XFS (loop2): Ending clean mount [ 244.006713][ T7685] XFS (loop2): Unmounting Filesystem [ 244.107411][ T1283] block nbd2: Possible stuck request ffff8880209a8000: control (read@0,4096B). Runtime 30 seconds [ 244.305356][ T13] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 244.520943][ T9755] loop4: detected capacity change from 0 to 4096 [ 244.609369][ T9755] ntfs: volume version 3.1. [ 244.647313][ T9755] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 244.666773][ T9755] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 244.718536][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 244.733089][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 244.743415][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 244.754794][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 244.957575][ T13] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 244.984408][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.995493][ T13] usb 4-1: Product: syz [ 244.999850][ T13] usb 4-1: Manufacturer: syz [ 245.012662][ T13] usb 4-1: SerialNumber: syz [ 245.030683][ T13] usb 4-1: config 0 descriptor?? [ 245.108196][ T9774] loop0: detected capacity change from 0 to 128 [ 245.183987][ T9780] loop2: detected capacity change from 0 to 128 [ 245.255410][ T9782] loop4: detected capacity change from 0 to 4096 [ 245.306600][ T9782] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 245.333625][ T13] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 245.374987][ T9782] ntfs: volume version 3.1. [ 245.450905][ T9785] loop0: detected capacity change from 0 to 64 [ 245.519318][ T13] usb 4-1: USB disconnect, device number 18 [ 245.885865][ T9801] loop0: detected capacity change from 0 to 64 [ 245.961253][ T9807] loop2: detected capacity change from 0 to 128 [ 245.979650][ T9805] loop4: detected capacity change from 0 to 2048 [ 246.080169][ T9807] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 246.109889][ T9805] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.141850][ T9807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.388877][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2023'. [ 246.523768][ T9822] loop4: detected capacity change from 0 to 64 [ 246.615384][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2029'. [ 246.784777][ T9836] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.303172][ T9865] loop2: detected capacity change from 0 to 512 [ 247.408005][ T9865] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2048: inode #1: comm syz.2.2048: iget: illegal inode # [ 247.471239][ T9865] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2048: error while reading EA inode 1 err=-117 [ 247.524402][ T9865] EXT4-fs (loop2): 1 orphan inode deleted [ 247.568026][ T9865] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.788812][ T9873] loop0: detected capacity change from 0 to 32768 [ 247.893448][ T9873] ERROR: (device loop0): dbAdjCtl: the maximum free buddy is not the old root [ 247.893448][ T9873] [ 247.953641][ T9873] ERROR: (device loop0): remounting filesystem as read-only [ 248.106839][ T9877] loop4: detected capacity change from 0 to 32768 [ 248.165516][ T9877] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2054 (9877) [ 248.201646][ T9877] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 248.211094][ T9877] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 248.222265][ T9877] BTRFS info (device loop4): trying to use backup root at mount time [ 248.230892][ T9877] BTRFS info (device loop4): setting nodatasum [ 248.237494][ T9877] BTRFS info (device loop4): force clearing of disk cache [ 248.244642][ T9877] BTRFS info (device loop4): turning on flush-on-commit [ 248.254248][ T9877] BTRFS info (device loop4): enabling disk space caching [ 248.261630][ T9877] BTRFS info (device loop4): disk space caching is enabled [ 248.269316][ T9877] BTRFS info (device loop4): has skinny extents [ 248.323186][ T9877] BTRFS info (device loop4): enabling ssd optimizations [ 248.339659][ T9877] BTRFS info (device loop4): clearing free space tree [ 248.351478][ T9877] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 248.364075][ T9877] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 248.440676][ T26] audit: type=1800 audit(1759253087.252:37): pid=9877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2054" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 248.774598][ T9910] loop2: detected capacity change from 0 to 4096 [ 249.164230][ T7685] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 249.185474][ T7685] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 249.552763][ T9923] loop4: detected capacity change from 0 to 128 [ 249.642576][ T9923] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 249.671647][ T9923] hpfs: filesystem error: improperly stopped [ 249.691316][ T9923] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 249.727536][ T9923] hpfs: You really don't want any checks? You are crazy... [ 249.764735][ T9923] hpfs: hpfs_map_sector(): read error [ 249.779382][ T9923] hpfs: code page support is disabled [ 249.795658][ T9923] hpfs: hpfs_map_4sectors(): unaligned read [ 249.815276][ T9923] hpfs: hpfs_map_4sectors(): unaligned read [ 249.828230][ T9909] overlayfs: failed to resolve './file0': -2 [ 249.829009][ T9923] hpfs: filesystem error: unable to find root dir [ 250.062405][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2069'. [ 250.225239][ T5049] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 250.241245][ T9928] loop0: detected capacity change from 0 to 32768 [ 250.309944][ T9928] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2067 (9928) [ 250.338875][ T9928] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 250.358815][ T9928] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 250.372147][ T9928] BTRFS info (device loop0): trying to use backup root at mount time [ 250.382646][ T9928] BTRFS info (device loop0): setting nodatasum [ 250.390464][ T9928] BTRFS info (device loop0): force clearing of disk cache [ 250.399433][ T9928] BTRFS info (device loop0): turning on flush-on-commit [ 250.407656][ T9928] BTRFS info (device loop0): enabling disk space caching [ 250.415232][ T9928] BTRFS info (device loop0): disk space caching is enabled [ 250.422646][ T9928] BTRFS info (device loop0): has skinny extents [ 250.585411][ T5049] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.594422][ T5049] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 250.646954][ T5049] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.661898][ T9928] BTRFS info (device loop0): enabling ssd optimizations [ 250.671009][ T9928] BTRFS info (device loop0): clearing free space tree [ 250.678792][ T9928] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 250.687698][ T5049] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 250.689115][ T9928] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 250.726001][ T9968] loop2: detected capacity change from 0 to 512 [ 250.759472][ T26] audit: type=1800 audit(1759253089.572:38): pid=9928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2067" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 250.793388][ T5049] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 250.831812][ T9968] EXT4-fs (loop2): Ignoring removed oldalloc option [ 250.889270][ T9968] EXT4-fs (loop2): 1 truncate cleaned up [ 250.911362][ T9968] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 250.970218][ T8026] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop0 scanned by udevd (8026) [ 251.015808][ T5049] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 251.031192][ T5049] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 251.051907][ T5049] usb 4-1: Product: syz [ 251.060777][ T5049] usb 4-1: Manufacturer: syz [ 251.073965][ T9968] EXT4-fs (loop2): shut down requested (1) [ 251.155602][ T5049] cdc_wdm 4-1:1.0: skipping garbage [ 251.160973][ T5049] cdc_wdm 4-1:1.0: skipping garbage [ 251.170296][ T5049] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 251.177048][ T5049] cdc_wdm 4-1:1.0: Unknown control protocol [ 251.540524][ T9978] loop4: detected capacity change from 0 to 1024 [ 251.667832][ T9982] loop0: detected capacity change from 0 to 4096 [ 251.687303][ T9978] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 251.716534][ T9978] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.757437][ T9978] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 1: comm syz.4.2078: lblock 1 mapped to illegal pblock 1 (length 1) [ 251.790799][ T9982] ntfs3: loop0: ino=3, Correct links count -> 2. [ 251.805151][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 251.905165][ T4453] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 251.951175][ T9987] program syz.1.2081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.970654][ T9976] loop2: detected capacity change from 0 to 32768 [ 251.975646][ T4602] usb 4-1: USB disconnect, device number 19 [ 251.991954][ T4453] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 252.015315][ T9982] ntfs3: loop0: ino=21, "file1" fallocate(0x10) is not supported [ 252.042957][ T4453] EXT4-fs (loop4): This should not happen!! Data will be lost [ 252.042957][ T4453] [ 252.070688][ T9976] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root [ 252.070688][ T9976] [ 252.153008][ T9976] ERROR: (device loop2): remounting filesystem as read-only [ 252.706290][T10019] loop2: detected capacity change from 0 to 1024 [ 252.742748][T10016] loop0: detected capacity change from 0 to 4096 [ 252.813619][T10019] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 252.827279][T10019] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.872535][T10019] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 1: comm syz.2.2094: lblock 1 mapped to illegal pblock 1 (length 1) [ 252.956456][ T6182] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 1: comm kworker/u4:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 253.026985][ T6182] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 253.103252][ T4188] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 253.116462][ T4188] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 253.121015][ T6182] EXT4-fs (loop2): This should not happen!! Data will be lost [ 253.121015][ T6182] [ 253.548946][T10044] sctp: [Deprecated]: syz.2.2106 (pid 10044) Use of int in maxseg socket option. [ 253.548946][T10044] Use struct sctp_assoc_value instead [ 253.619439][T10026] loop4: detected capacity change from 0 to 32768 [ 253.635332][ T5058] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 253.783939][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 253.875152][ T5058] usb 1-1: Using ep0 maxpacket: 32 [ 254.012461][T10058] loop4: detected capacity change from 0 to 256 [ 254.155498][ T5058] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 254.164852][ T5058] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.190022][T10058] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d) [ 254.214028][ T5058] usb 1-1: Product: syz [ 254.229375][ T5058] usb 1-1: Manufacturer: syz [ 254.236123][ T5058] usb 1-1: SerialNumber: syz [ 254.242773][ T5058] usb 1-1: config 0 descriptor?? [ 254.297289][ T5058] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 254.528103][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 254.664573][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'. [ 254.685204][ T5048] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 254.755249][ T1106] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 254.835234][ T4232] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 254.925330][ T5048] usb 5-1: Using ep0 maxpacket: 8 [ 254.995213][ T1106] usb 2-1: Using ep0 maxpacket: 16 [ 255.046452][ T5048] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.056372][ T5048] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.066458][ T5048] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 255.076711][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 255.081927][ T5048] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.094999][ T5048] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 255.104331][ T5048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.115267][ T1106] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.126011][ T1106] usb 2-1: config 0 has no interfaces? [ 255.165356][ T5058] gspca_ov534_9: reg_w failed -71 [ 255.205560][ T4232] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 255.213889][ T4232] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 255.228730][ T4232] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 255.239828][ T4232] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 255.253207][ T4232] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.305375][ T1106] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 255.314551][ T1106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.326906][ T1106] usb 2-1: Product: syz [ 255.331070][ T1106] usb 2-1: Manufacturer: syz [ 255.337389][ T1106] usb 2-1: SerialNumber: syz [ 255.344520][ T1106] usb 2-1: config 0 descriptor?? [ 255.365390][ T5048] usb 5-1: GET_CAPABILITIES returned 0 [ 255.370921][ T5048] usbtmc 5-1:16.0: can't read capabilities [ 255.415369][ T4232] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 255.424496][ T4232] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 255.433125][ T4232] usb 4-1: Product: syz [ 255.437586][ T4232] usb 4-1: Manufacturer: syz [ 255.442182][ T4232] usb 4-1: SerialNumber: syz [ 255.448645][ T4232] usb 4-1: config 0 descriptor?? [ 255.488366][ T4232] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 255.498661][ T4232] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 255.573237][ T13] usb 5-1: USB disconnect, device number 22 [ 255.585202][ T5058] gspca_ov534_9: Unknown sensor 0000 [ 255.585263][ T5058] ov534_9: probe of 1-1:0.0 failed with error -22 [ 255.607936][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.626031][ T5058] usb 1-1: USB disconnect, device number 20 [ 255.656729][ T4232] usb 2-1: USB disconnect, device number 14 [ 255.684472][T10092] loop2: detected capacity change from 0 to 256 [ 255.738887][ T4593] usb 4-1: USB disconnect, device number 20 [ 255.747782][T10092] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d) [ 255.763430][ T4593] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 256.127999][ T5048] kernel write not supported for file /366/clear_refs (pid: 5048 comm: kworker/1:12) [ 256.137976][ T5058] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 256.361309][ T26] audit: type=1326 audit(1759253095.172:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.2140" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb51acbbec9 code=0x0 [ 256.385108][ T5058] usb 1-1: Using ep0 maxpacket: 8 [ 256.505878][ T5058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.537539][ T5058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.552644][ T5058] usb 1-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 256.563797][ T5058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.591138][ T5058] usb 1-1: config 0 descriptor?? [ 257.060519][T10094] loop0: detected capacity change from 0 to 8 [ 257.119529][T10094] SQUASHFS error: zlib decompression failed, data probably corrupt [ 257.143112][T10094] SQUASHFS error: Failed to read block 0x9b: -5 [ 257.178396][T10094] SQUASHFS error: Unable to read metadata cache entry [99] [ 257.250725][T10094] SQUASHFS error: Unable to read inode 0x127 [ 257.308960][ T13] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 257.364242][ T5058] wacom 0003:056A:0002.001E: Unknown device_type for 'HID 056a:0002'. Ignoring. [ 257.411616][T10146] loop2: detected capacity change from 0 to 4096 [ 257.540452][T10146] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 257.555174][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 257.585570][ T5058] usb 1-1: USB disconnect, device number 21 [ 257.685340][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.715100][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 257.725712][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 257.737631][ T13] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.769753][ T13] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.784626][ T4593] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 257.801370][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2156'. [ 257.811600][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.879677][T10158] loop2: detected capacity change from 0 to 128 [ 258.065557][ T13] usb 2-1: GET_CAPABILITIES returned 0 [ 258.071113][ T13] usbtmc 2-1:16.0: can't read capabilities [ 258.095230][ T4593] usb 5-1: Using ep0 maxpacket: 32 [ 258.175569][T10163] loop0: detected capacity change from 0 to 512 [ 258.202776][T10163] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 258.229678][T10163] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 258.245369][ T4593] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 258.251432][T10163] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 258.262229][ T4593] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 258.268724][T10163] System zones: 0-2, 18-18, 34-35 [ 258.282823][T10163] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 258.283561][ T4593] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 258.315239][ T5058] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 258.327962][T10163] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 258.338453][T10163] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 258.365843][T10163] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: none. [ 258.379736][ T26] audit: type=1800 audit(1759253097.192:40): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2160" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 258.407513][T10163] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2160: bg 0: block 353: padding at end of block bitmap is not set [ 258.448893][ T4593] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 258.465367][ T4593] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.505699][ T4594] usb 2-1: USB disconnect, device number 15 [ 258.555261][ T5058] usb 3-1: Using ep0 maxpacket: 32 [ 258.662417][ T4593] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 258.691989][ T4593] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 258.695485][ T5058] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 258.707020][ T4593] usb 5-1: Product: syz [ 258.729580][ T5058] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 258.735684][ T4593] usb 5-1: Manufacturer: syz [ 258.750957][ T5058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 258.760343][ T4593] usb 5-1: SerialNumber: syz [ 258.762599][ T4593] usb 5-1: config 0 descriptor?? [ 258.785176][ T5058] usb 3-1: config 1 has no interface number 0 [ 258.795388][ T5058] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.816986][ T5058] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 258.822367][ T4593] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 258.846093][ T5058] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 258.868629][ T5058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.886335][ T4593] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 258.927964][ T26] audit: type=1326 audit(1759253097.742:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10172 comm="syz.1.2164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bcd90aec9 code=0x0 [ 258.968049][ T5058] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 259.090033][ T4593] usb 5-1: USB disconnect, device number 23 [ 259.096203][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 259.111931][ T4593] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 259.181001][ T5058] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 259.694116][T10184] loop0: detected capacity change from 0 to 4096 [ 259.714622][T10184] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 259.942350][ T5048] usb 3-1: USB disconnect, device number 18 [ 259.955960][ T5048] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 260.145228][ T5058] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 260.385114][ T5058] usb 5-1: Using ep0 maxpacket: 8 [ 260.505339][ T5058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.520847][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2176'. [ 260.531200][ T5058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.541103][ T5058] usb 5-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 260.562052][ T5058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.587566][ T5058] usb 5-1: config 0 descriptor?? [ 261.098053][T10189] loop4: detected capacity change from 0 to 8 [ 261.222651][T10189] SQUASHFS error: zlib decompression failed, data probably corrupt [ 261.240975][T10189] SQUASHFS error: Failed to read block 0x9b: -5 [ 261.255175][T10189] SQUASHFS error: Unable to read metadata cache entry [99] [ 261.262548][T10189] SQUASHFS error: Unable to read inode 0x127 [ 261.449090][ T5058] wacom 0003:056A:0002.001F: Unknown device_type for 'HID 056a:0002'. Ignoring. [ 261.477945][T10207] loop2: detected capacity change from 0 to 32768 [ 261.602868][T10207] XFS (loop2): Mounting V5 Filesystem [ 261.674845][ T5058] usb 5-1: USB disconnect, device number 24 [ 261.756984][T10211] loop0: detected capacity change from 0 to 32768 [ 261.841835][T10211] loop0: p9 p11 p16 [ 261.940094][T10207] XFS (loop2): Ending clean mount [ 261.966255][T10207] XFS (loop2): Quotacheck needed: Please wait. [ 262.083104][T10207] XFS (loop2): Quotacheck: Done. [ 262.364825][ T7685] XFS (loop2): Unmounting Filesystem [ 262.618337][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2187'. [ 263.492466][T10257] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 263.522960][T10257] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 263.538670][ T5058] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 263.799162][ T5058] usb 3-1: Using ep0 maxpacket: 16 [ 263.926928][ T5058] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.952131][ T5058] usb 3-1: config 0 has no interfaces? [ 264.156051][ T5058] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 264.176061][ T5058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.211058][T10275] loop4: detected capacity change from 0 to 64 [ 264.216594][ T5058] usb 3-1: Product: syz [ 264.221544][ T5058] usb 3-1: Manufacturer: syz [ 264.250923][ T5058] usb 3-1: SerialNumber: syz [ 264.275431][ T5058] usb 3-1: config 0 descriptor?? [ 264.381560][T10283] loop0: detected capacity change from 0 to 64 [ 264.597854][ T5058] usb 3-1: USB disconnect, device number 19 [ 264.920014][T10289] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 264.930399][T10289] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 265.263949][T10302] loop2: detected capacity change from 0 to 2048 [ 265.331925][T10302] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.362688][T10286] loop4: detected capacity change from 0 to 32768 [ 265.369543][ T5048] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 265.430993][ T4305] loop4: p9 p11 p16 [ 265.475315][ T4602] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 265.533889][T10286] loop4: p9 p11 p16 [ 265.615475][ T5048] usb 1-1: Using ep0 maxpacket: 32 [ 265.698153][T10314] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 265.735366][ T5048] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 265.745244][T10314] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 265.748050][ T5048] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 265.766454][ T5048] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 265.775783][ T5048] usb 1-1: config 1 has no interface number 0 [ 265.782105][ T5048] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.794111][ T5048] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 265.815637][ T5048] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 265.835160][ T5048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.905815][ T5048] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 265.935713][ T4602] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 265.957401][ T4602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.992862][ T4602] usb 4-1: config 0 descriptor?? [ 266.060082][ T4602] cp210x 4-1:0.0: cp210x converter detected [ 266.116130][ T5048] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 266.123938][ T4305] udevd[4305]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory [ 266.127907][ T8029] udevd[8029]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory [ 266.152736][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory [ 266.216491][ T8029] udevd[8029]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory [ 266.217641][ T4305] udevd[4305]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory [ 266.248505][ T8026] udevd[8026]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory [ 266.538393][T10316] loop4: detected capacity change from 0 to 32768 [ 266.593294][T10316] JBD2: Ignoring recovery information on journal [ 266.631727][T10316] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 266.715303][ T4602] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 266.733413][ T4602] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 266.743045][ T4602] usb 4-1: cp210x converter now attached to ttyUSB0 [ 266.765333][ T4602] usb 4-1: USB disconnect, device number 21 [ 266.804592][ T4602] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.832877][ T4602] cp210x 4-1:0.0: device disconnected [ 266.877891][ T4593] usb 1-1: USB disconnect, device number 22 [ 266.896887][ T4593] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 267.025961][T10316] (syz.4.2222,10316,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 267.034848][T10316] (syz.4.2222,10316,1):ocfs2_read_locked_inode:521 ERROR: status = -12 [ 267.075842][T10316] (syz.4.2222,10316,0):ocfs2_rename:1282 ERROR: status = -12 [ 267.093757][T10316] (syz.4.2222,10316,0):ocfs2_rename:1687 ERROR: status = -12 [ 267.197222][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 267.775394][ T4593] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 267.832548][T10339] loop2: detected capacity change from 0 to 764 [ 267.877546][T10343] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 267.986677][T10339] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 268.020042][T10339] Symlink component flag not implemented [ 268.046833][T10339] Symlink component flag not implemented (7) [ 268.075453][ T4593] usb 5-1: Using ep0 maxpacket: 16 [ 268.195467][ T4593] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.210022][T10348] loop2: detected capacity change from 0 to 256 [ 268.216304][ T4593] usb 5-1: config 0 has no interfaces? [ 268.430979][ T4593] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 268.454116][ T4593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.469187][ T4593] usb 5-1: Product: syz [ 268.473885][ T4593] usb 5-1: Manufacturer: syz [ 268.478986][ T4593] usb 5-1: SerialNumber: syz [ 268.486123][ T4593] usb 5-1: config 0 descriptor?? [ 268.545275][ T5058] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 268.871109][ T4232] usb 5-1: USB disconnect, device number 25 [ 268.906442][ T5058] usb 4-1: unable to get BOS descriptor or descriptor too short [ 268.975310][ T5058] usb 4-1: no configurations [ 268.980071][ T5058] usb 4-1: can't read configurations, error -22 [ 269.047811][T10350] loop2: detected capacity change from 0 to 40427 [ 269.075153][ T5048] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 269.104837][T10350] F2FS-fs (loop2): invalid crc value [ 269.120654][T10350] F2FS-fs (loop2): Found nat_bits in checkpoint [ 269.175553][T10350] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 269.235442][ T7685] attempt to access beyond end of device [ 269.235442][ T7685] loop2: rw=2049, want=45104, limit=40427 [ 269.315166][ T5048] usb 2-1: Using ep0 maxpacket: 32 [ 269.445350][ T5048] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 269.456847][ T5048] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 269.502921][ T5048] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 269.538111][ T5048] usb 2-1: config 1 has no interface number 0 [ 269.544733][ T5048] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.575155][ T5048] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 269.616056][ T5048] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 269.638717][ T5048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.729570][ T5048] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 269.762371][T10371] device veth0_to_team entered promiscuous mode [ 269.898031][T10376] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 269.936137][ T5048] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 270.002866][T10379] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 270.079352][T10383] loop4: detected capacity change from 0 to 764 [ 270.172067][T10389] loop2: detected capacity change from 0 to 1024 [ 270.229397][T10383] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 270.266540][T10383] Symlink component flag not implemented [ 270.294136][T10383] Symlink component flag not implemented (7) [ 270.335421][ T150] block nbd0: Possible stuck request ffff888020890000: control (read@0,4096B). Runtime 120 seconds [ 270.375507][ T4453] hfsplus: b-tree write err: -5, ino 4 [ 270.777781][ T5048] usb 2-1: USB disconnect, device number 16 [ 270.795630][ T5048] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 270.965557][ T150] block nbd1: Possible stuck request ffff888020938000: control (read@0,4096B). Runtime 60 seconds [ 270.975741][T10387] loop0: detected capacity change from 0 to 40427 [ 271.015206][T10387] F2FS-fs (loop0): invalid crc value [ 271.066699][T10387] F2FS-fs (loop0): Found nat_bits in checkpoint [ 271.146860][T10387] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 271.257043][ T4188] attempt to access beyond end of device [ 271.257043][ T4188] loop0: rw=2049, want=45104, limit=40427 [ 271.486051][T10408] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 272.398367][T10444] loop2: detected capacity change from 0 to 512 [ 272.549299][T10444] EXT4-fs (loop2): 1 truncate cleaned up [ 272.554996][T10444] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.586315][ T4593] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 272.641615][T10444] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2276: invalid indirect mapped block 234881024 (level 0) [ 272.806949][T10422] loop4: detected capacity change from 0 to 40427 [ 272.832986][ T4593] usb 1-1: Using ep0 maxpacket: 16 [ 272.852270][T10422] F2FS-fs (loop4): invalid crc value [ 272.926993][T10422] F2FS-fs (loop4): Found nat_bits in checkpoint [ 272.965309][ T4593] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.991776][ T4593] usb 1-1: config 0 has no interfaces? [ 273.110771][T10422] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 273.200736][ T4593] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 273.235133][ T4593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.243227][ T4593] usb 1-1: Product: syz [ 273.255068][ T4593] usb 1-1: Manufacturer: syz [ 273.259784][ T4593] usb 1-1: SerialNumber: syz [ 273.287224][ T4593] usb 1-1: config 0 descriptor?? [ 273.388835][ T4193] attempt to access beyond end of device [ 273.388835][ T4193] loop4: rw=2049, want=45104, limit=40427 [ 273.641550][ T4602] usb 1-1: USB disconnect, device number 23 [ 273.930242][T10459] loop2: detected capacity change from 0 to 32768 [ 273.985613][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2289'. [ 274.044769][T10459] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.2282 (10459) [ 274.115226][T10459] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 274.149867][T10459] BTRFS info (device loop2): using free space tree [ 274.157116][T10459] BTRFS info (device loop2): has skinny extents [ 274.165531][ T1283] block nbd2: Possible stuck request ffff8880209a8000: control (read@0,4096B). Runtime 60 seconds [ 274.391742][T10490] device veth0_to_team entered promiscuous mode [ 274.451368][T10492] netlink: 'syz.4.2294': attribute type 4 has an invalid length. [ 274.459481][T10459] BTRFS info (device loop2): enabling ssd optimizations [ 274.664381][T10512] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 274.886202][T10522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2301'. [ 274.929507][T10523] input: syz1 as /devices/virtual/input/input22 [ 275.415094][ T4593] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 275.641584][T10538] device veth0_to_team entered promiscuous mode [ 275.655399][ T4593] usb 1-1: Using ep0 maxpacket: 16 [ 275.736744][T10542] netlink: 'syz.2.2309': attribute type 4 has an invalid length. [ 275.775446][ T4593] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.820003][ T4593] usb 1-1: config 0 has no interfaces? [ 275.886610][T10549] program syz.1.2312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.003226][ T4593] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 276.041131][ T4593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.065363][ T4593] usb 1-1: Product: syz [ 276.069584][ T4593] usb 1-1: Manufacturer: syz [ 276.096728][T10556] misc userio: Can't change port type on an already running userio instance [ 276.102088][ T4593] usb 1-1: SerialNumber: syz [ 276.116451][ T4593] usb 1-1: config 0 descriptor?? [ 276.412646][ T4602] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 276.429960][ T13] usb 1-1: USB disconnect, device number 24 [ 276.580179][T10569] loop4: detected capacity change from 0 to 512 [ 276.675241][ T4602] usb 4-1: Using ep0 maxpacket: 8 [ 276.752583][T10575] loop2: detected capacity change from 0 to 1764 [ 276.799090][ T4602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 276.867045][ T4602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.906196][ T4602] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.972986][ T4602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 277.025071][ T4602] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 277.049652][ T4602] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 277.090650][T10586] loop4: detected capacity change from 0 to 2048 [ 277.094110][ T4602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.154110][ T4602] usb 4-1: config 0 descriptor?? [ 277.188384][T10559] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 277.221434][T10586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.529493][ T4192] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 277.537832][ T4192] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 277.545001][ T4192] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 277.552254][ T4192] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 277.560034][ T4192] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 277.685752][T10598] misc userio: Can't change port type on an already running userio instance [ 277.727649][ T5046] usb 4-1: USB disconnect, device number 24 [ 277.803704][T10596] loop4: detected capacity change from 0 to 32768 [ 277.842179][T10596] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2336 (10596) [ 277.907101][T10596] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 277.941495][T10596] BTRFS info (device loop4): using free space tree [ 277.959249][T10596] BTRFS info (device loop4): has skinny extents [ 278.177186][T10596] BTRFS info (device loop4): enabling ssd optimizations [ 278.465348][ T4594] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 278.568419][ T8026] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop4 scanned by udevd (8026) [ 278.747317][T10626] device veth0_to_team entered promiscuous mode [ 278.971955][ T5053] kernel write not supported for file /vcsa1 (pid: 5053 comm: kworker/1:17) [ 278.985348][ T4594] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 279.018268][ T4594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.038307][ T21] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 279.051081][ T4594] usb 2-1: Product: syz [ 279.061257][ T4594] usb 2-1: Manufacturer: syz [ 279.080841][ T4594] usb 2-1: SerialNumber: syz [ 279.101389][T10648] netlink: 'syz.3.2350': attribute type 21 has an invalid length. [ 279.116802][T10646] loop4: detected capacity change from 0 to 1764 [ 279.130133][T10648] netlink: 'syz.3.2350': attribute type 1 has an invalid length. [ 279.146265][ T4594] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 279.167989][T10648] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2350'. [ 279.330479][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 279.459538][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.494185][ T21] usb 3-1: config 0 has no interfaces? [ 279.695245][ T21] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 279.704339][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.742861][ T21] usb 3-1: Product: syz [ 279.749765][ T21] usb 3-1: Manufacturer: syz [ 279.754731][ T21] usb 3-1: SerialNumber: syz [ 279.780883][ T21] usb 3-1: config 0 descriptor?? [ 279.846862][ T4594] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 280.088551][T10657] loop0: detected capacity change from 0 to 32768 [ 280.148743][ T5053] usb 3-1: USB disconnect, device number 20 [ 280.240498][T10672] netlink: 'syz.0.2363': attribute type 21 has an invalid length. [ 280.266690][T10672] netlink: 'syz.0.2363': attribute type 1 has an invalid length. [ 280.286306][T10672] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2363'. [ 280.394709][T10677] rtc_cmos 00:00: Alarms can be up to one day in the future [ 280.486293][ T4602] usb 2-1: USB disconnect, device number 17 [ 280.775383][ T21] kernel write not supported for file /vcsa1 (pid: 21 comm: kworker/1:0) [ 281.108972][ T4593] rtc_cmos 00:00: Alarms can be up to one day in the future [ 281.125117][ T4594] usb 2-1: Service connection timeout for: 256 [ 281.136563][ T4594] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 281.155309][ T4593] rtc_cmos 00:00: Alarms can be up to one day in the future [ 281.194828][ T4594] ath9k_htc: Failed to initialize the device [ 281.201414][ T4593] rtc_cmos 00:00: Alarms can be up to one day in the future [ 281.232056][ T4602] usb 2-1: ath9k_htc: USB layer deinitialized [ 281.240361][ T4593] rtc_cmos 00:00: Alarms can be up to one day in the future [ 281.263524][T10709] netlink: 'syz.1.2377': attribute type 21 has an invalid length. [ 281.272698][ T4593] rtc rtc0: __rtc_set_alarm: err=-22 [ 281.293480][T10710] rtc_cmos 00:00: Alarms can be up to one day in the future [ 281.323567][T10679] loop4: detected capacity change from 0 to 32768 [ 281.331441][T10709] netlink: 'syz.1.2377': attribute type 1 has an invalid length. [ 281.376253][T10709] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2377'. [ 281.468242][T10679] [ 281.468242][T10679] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.468242][T10679] [ 281.542196][T10679] jfs_rename did not expect dtDelete to return rc = -5 [ 281.578375][T10679] ERROR: (device loop4): jfs_rename: [ 281.578375][T10679] [ 281.796298][ T144] [ 281.796298][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.796298][ T144] [ 281.796323][ T144] [ 281.796323][ T144] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.796323][ T144] [ 281.796484][ T4193] [ 281.796484][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.796484][ T4193] [ 281.802557][ T4193] [ 281.802557][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.802557][ T4193] [ 281.802679][ T275] [ 281.802679][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.802679][ T275] [ 282.028383][ T4602] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 282.110948][ T4594] rtc_cmos 00:00: Alarms can be up to one day in the future [ 282.147254][ T4594] rtc_cmos 00:00: Alarms can be up to one day in the future [ 282.175948][ T4594] rtc_cmos 00:00: Alarms can be up to one day in the future [ 282.185752][ T4594] rtc_cmos 00:00: Alarms can be up to one day in the future [ 282.200428][ T4594] rtc rtc0: __rtc_set_alarm: err=-22 [ 282.296244][ T4602] usb 3-1: Using ep0 maxpacket: 8 [ 282.381712][T10735] rtc_cmos 00:00: Alarms can be up to one day in the future [ 282.428480][ T4602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 282.458409][ T4602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.491963][ T4602] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.532668][ T4602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 282.559856][ T4602] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 282.594227][ T4602] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 282.607805][T10740] loop0: detected capacity change from 0 to 8192 [ 282.644353][ T4602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.672344][T10740] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 282.681948][T10740] REISERFS (device loop0): using ordered data mode [ 282.689088][T10740] reiserfs: using flush barriers [ 282.705407][T10740] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 282.722470][T10740] REISERFS (device loop0): checking transaction log (loop0) [ 282.726430][ T4602] usb 3-1: config 0 descriptor?? [ 282.835595][T10724] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 282.845276][ T4594] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 283.027715][T10758] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2401'. [ 283.044189][T10740] REISERFS (device loop0): Using tea hash to sort names [ 283.070903][T10740] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 283.108151][ T4602] rtc_cmos 00:00: Alarms can be up to one day in the future [ 283.118530][ T4602] rtc_cmos 00:00: Alarms can be up to one day in the future [ 283.127263][ T4195] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 283.134952][ T4195] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 283.139403][ T4602] rtc_cmos 00:00: Alarms can be up to one day in the future [ 283.142159][ T4195] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 283.157204][ T4195] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 283.164375][ T4195] Bluetooth: hci6: Received unexpected HCI Event 00000000 [ 283.180420][T10760] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2413'. [ 283.214327][ T4602] rtc_cmos 00:00: Alarms can be up to one day in the future [ 283.271142][ T4602] rtc rtc0: __rtc_set_alarm: err=-22 [ 283.351059][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351126][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351150][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351173][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351196][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351219][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351241][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351264][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351286][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351309][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351331][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351354][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351376][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351399][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351421][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351443][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.351466][ T4602] hid-generic 0006:0004:0009.0020: unknown main item tag 0x0 [ 283.361786][ T5053] usb 3-1: USB disconnect, device number 21 [ 283.372826][ T4602] hid-generic 0006:0004:0009.0020: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 283.516063][ T4594] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 283.526181][ T4594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.526210][ T4594] usb 5-1: Product: syz [ 283.526227][ T4594] usb 5-1: Manufacturer: syz [ 283.526243][ T4594] usb 5-1: SerialNumber: syz [ 283.586118][ T4594] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 284.151264][ T4602] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 284.151913][T10778] loop2: detected capacity change from 0 to 4096 [ 284.188115][T10786] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 284.202641][T10786] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 284.312518][T10778] ntfs: volume version 3.1. [ 284.381414][T10778] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 284.420623][T10778] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 284.436503][T10778] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 284.785000][ T13] usb 5-1: USB disconnect, device number 26 [ 284.823294][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2425'. [ 284.980157][T10819] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 284.980383][T10819] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 285.381632][T10828] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 285.455348][ T4602] usb 5-1: Service connection timeout for: 256 [ 285.466097][ T4602] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 285.565813][ T4602] ath9k_htc: Failed to initialize the device [ 285.572183][ T13] usb 5-1: ath9k_htc: USB layer deinitialized [ 285.797089][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2440'. [ 286.157695][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2443'. [ 286.257319][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2443'. [ 286.301580][T10853] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.311392][T10853] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.320317][T10853] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.329692][T10853] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.575199][ T4593] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 287.160010][ T4593] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 287.174961][ T4593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.198608][ T4593] usb 1-1: Product: syz [ 287.208574][ T4593] usb 1-1: Manufacturer: syz [ 287.225104][ T4593] usb 1-1: SerialNumber: syz [ 287.302050][ T4593] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 288.075497][ T4593] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 288.583904][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'. [ 288.603662][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2463'. [ 288.639586][T10896] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.648487][T10896] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.657484][T10896] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.666353][T10896] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.700455][ T4594] usb 1-1: USB disconnect, device number 25 [ 289.375278][ T4593] usb 1-1: Service connection timeout for: 256 [ 289.381618][ T4593] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 289.445442][ T4593] ath9k_htc: Failed to initialize the device [ 289.485282][ T4594] usb 1-1: ath9k_htc: USB layer deinitialized [ 289.855440][ T4594] Bluetooth: hci3: command 0x0405 tx timeout [ 290.980286][T10951] loop0: detected capacity change from 0 to 2048 [ 291.016047][T10951] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 291.023739][T10951] UDF-fs: Scanning with blocksize 512 failed [ 291.039212][T10951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.158987][T10922] loop2: detected capacity change from 0 to 32768 [ 291.238133][T10922] [ 291.238133][T10922] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.238133][T10922] [ 291.243300][T10961] netlink: 'syz.0.2493': attribute type 6 has an invalid length. [ 291.329656][T10922] jfs_rename did not expect dtDelete to return rc = -5 [ 291.410577][T10922] ERROR: (device loop2): jfs_rename: [ 291.410577][T10922] [ 291.507252][T10971] jfs: add_missing_indices: Invalid stbl[1] = -128 for inode 2, block = 0 [ 291.592840][ T6185] [ 291.592840][ T6185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.592840][ T6185] [ 291.647592][ T6185] [ 291.647592][ T6185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.647592][ T6185] [ 291.692050][ T275] [ 291.692050][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.692050][ T275] [ 291.726658][ T7685] [ 291.726658][ T7685] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.726658][ T7685] [ 291.743789][ T7685] [ 291.743789][ T7685] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 291.743789][ T7685] [ 291.893113][T10994] netlink: 'syz.1.2508': attribute type 6 has an invalid length. [ 292.024430][T11000] loop0: detected capacity change from 0 to 512 [ 292.144872][T11000] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 292.216522][T11000] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 292.441691][T11000] EXT4-fs (loop0): 1 truncate cleaned up [ 292.452281][T11000] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,resgid=0x0000000000000000,nomblk_io_submit,nombcache,resgid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 292.729353][T11017] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2514'. [ 292.780867][T11017] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2514'. [ 293.243123][T11020] loop4: detected capacity change from 0 to 4096 [ 293.394013][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2517'. [ 293.415799][T11020] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 293.881877][T11007] loop2: detected capacity change from 0 to 262144 [ 293.973393][T11007] F2FS-fs (loop2): invalid crc value [ 293.998923][T11007] F2FS-fs (loop2): Found nat_bits in checkpoint [ 294.046192][T11007] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 294.251060][T11032] loop0: detected capacity change from 0 to 8192 [ 294.521359][T11040] loop2: detected capacity change from 0 to 4096 [ 294.719375][T11057] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.797080][T11040] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 294.885315][T11040] Remounting filesystem read-only [ 295.226236][T11082] loop2: detected capacity change from 0 to 65 [ 295.317329][T11082] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 295.435457][T11092] loop4: detected capacity change from 0 to 164 [ 295.592394][T11095] loop2: detected capacity change from 0 to 1024 [ 295.690928][T11095] EXT4-fs (loop2): Ignoring removed nobh option [ 295.710402][T11095] EXT4-fs (loop2): Ignoring removed bh option [ 295.741891][T11095] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 295.810071][T11101] loop0: detected capacity change from 0 to 2048 [ 295.851030][T11095] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004005b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 295.911698][T11110] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2553'. [ 295.955207][T11111] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.085375][T11095] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.2548: Allocating blocks 497-513 which overlap fs metadata [ 296.197384][T11095] EXT4-fs (loop2): Remounting filesystem read-only [ 296.244367][T11095] EXT4-fs (loop2): pa ffff88807520de00: logic 128, phys. 385, len 8 [ 296.253339][T11095] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 296.368974][T11124] netlink: 'syz.1.2559': attribute type 1 has an invalid length. [ 296.394961][T11095] EXT4-fs (loop2): Remounting filesystem read-only [ 296.440108][T11124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.448357][T11124] IPv6: NLM_F_CREATE should be set when creating new route [ 296.713622][T11146] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2567'. [ 296.771556][T11146] netlink: 'syz.3.2567': attribute type 6 has an invalid length. [ 296.793806][T11146] netlink: 'syz.3.2567': attribute type 5 has an invalid length. [ 296.812366][T11146] netlink: 'syz.3.2567': attribute type 4 has an invalid length. [ 297.547898][T11181] loop0: detected capacity change from 0 to 4096 [ 297.637238][T11138] loop4: detected capacity change from 0 to 32768 [ 297.676843][T11181] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 297.721543][T11138] (syz.4.2565,11138,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 297.739892][T11138] (syz.4.2565,11138,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 297.776279][T11138] (syz.4.2565,11138,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 297.829009][T11197] EXT4-fs (loop0): shut down requested (1) [ 297.842784][ T4593] kernel write not supported for file /cpu/0/msr (pid: 4593 comm: kworker/0:7) [ 297.856460][T11138] JBD2: Ignoring recovery information on journal [ 297.936919][ T6185] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 297.955992][T11138] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 297.963745][ T6185] Quota error (device loop0): write_blk: dquota write failed [ 298.029561][ T6185] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 298.137662][T11200] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.146779][T11200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.308099][T11210] loop6: detected capacity change from 0 to 524287999 [ 298.338799][T11138] (syz.4.2565,11138,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb68296ec, computed 0xec517776. Applying ECC. [ 298.344726][T11206] (syz.4.2565,11206,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 298.368100][T11138] (syz.4.2565,11138,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xb68296ec, computed 0xccb4c126 [ 298.382747][T11206] (syz.4.2565,11206,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 298.406228][T11206] (syz.4.2565,11206,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 298.425229][T11138] (syz.4.2565,11138,0):ocfs2_trim_mainbm:7604 ERROR: status = -5 [ 298.482453][T11206] (syz.4.2565,11206,1):ocfs2_quota_read:201 ERROR: status = -5 [ 298.527011][T11206] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 5 [ 298.574083][T11206] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 298.604335][T11219] loop2: detected capacity change from 0 to 64 [ 298.624298][T11206] (syz.4.2565,11206,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 298.647476][T11206] (syz.4.2565,11206,1):ocfs2_mknod:314 ERROR: status = -5 [ 298.674432][T11206] (syz.4.2565,11206,1):ocfs2_mknod:502 ERROR: status = -5 [ 298.700332][T11219] attempt to access beyond end of device [ 298.700332][T11219] loop2: rw=0, want=1026, limit=64 [ 298.704224][T11206] (syz.4.2565,11206,1):ocfs2_mkdir:659 ERROR: status = -5 [ 298.755508][T11219] Buffer I/O error on dev loop2, logical block 512, async page read [ 298.782761][T11219] attempt to access beyond end of device [ 298.782761][T11219] loop2: rw=0, want=113154, limit=64 [ 298.809109][T11219] Buffer I/O error on dev loop2, logical block 56576, async page read [ 298.810376][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 298.995124][ T5053] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 299.143153][T11235] loop2: detected capacity change from 0 to 736 [ 299.247661][ T5053] usb 2-1: Using ep0 maxpacket: 32 [ 299.278593][T11239] loop4: detected capacity change from 0 to 4096 [ 299.332438][T11239] ntfs: (device loop4): parse_options(): The umask option requires an argument. [ 299.366486][ T5053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.402341][ T5053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.463406][ T5053] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 299.489440][ T5053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.563118][ T5053] usb 2-1: config 0 descriptor?? [ 299.583099][T11244] loop2: detected capacity change from 0 to 2048 [ 299.642370][ T5053] hub 2-1:0.0: USB hub found [ 299.653623][T11247] loop4: detected capacity change from 0 to 256 [ 299.712084][T11247] exfat: Deprecated parameter 'namecase' [ 299.737484][T11244] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 299.770679][T11247] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 299.770854][T11244] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.855230][ T5053] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 299.994804][ T26] audit: type=1800 audit(1759253138.802:42): pid=11244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2612" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 300.303188][ T5053] hid-generic 0003:046D:C31C.0021: item fetching failed at offset 0/1 [ 300.331460][ T5053] hid-generic: probe of 0003:046D:C31C.0021 failed with error -22 [ 300.345123][ T4602] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 300.405312][ T150] block nbd0: Possible stuck request ffff888020890000: control (read@0,4096B). Runtime 150 seconds [ 300.605328][ T4602] usb 5-1: Using ep0 maxpacket: 16 [ 300.628919][ T4594] usb 2-1: USB disconnect, device number 18 [ 300.682142][T11279] loop2: detected capacity change from 0 to 256 [ 300.741523][ T13] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 300.915565][ T4602] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 300.935513][ T4602] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 300.944251][ T4602] usb 5-1: Product: syz [ 300.951196][ T4602] usb 5-1: Manufacturer: syz [ 300.957042][ T4602] usb 5-1: SerialNumber: syz [ 300.963776][ T4602] usb 5-1: config 0 descriptor?? [ 301.045115][ T150] block nbd1: Possible stuck request ffff888020938000: control (read@0,4096B). Runtime 90 seconds [ 301.175415][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 301.239390][T11310] veth1_virt_wifi: Device is already in use. [ 301.241038][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.275514][ T13] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 301.300644][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.336361][ T13] usb 1-1: config 0 descriptor?? [ 301.344060][ T4602] usb 5-1: USB disconnect, device number 27 [ 301.410489][T11317] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.2646'. [ 301.431326][T11317] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 301.487267][T11322] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2648'. [ 301.705308][ T4175] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 301.832879][ T13] bigben 0003:146B:0902.0022: unexpected rdesc, please submit for review [ 301.852185][ T13] bigben 0003:146B:0902.0022: item fetching failed at offset 2/5 [ 301.867827][ T13] bigben 0003:146B:0902.0022: parse failed [ 301.884209][ T13] bigben: probe of 0003:146B:0902.0022 failed with error -22 [ 301.910342][T11343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2658'. [ 301.913773][T11342] loop4: detected capacity change from 0 to 512 [ 301.956634][ T4175] usb 2-1: Using ep0 maxpacket: 8 [ 301.995315][T11342] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 302.005784][T11348] loop2: detected capacity change from 0 to 128 [ 302.042400][T11342] UDF-fs: Scanning with blocksize 512 failed [ 302.044890][ T13] usb 1-1: USB disconnect, device number 26 [ 302.064551][T11342] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 302.085278][ T4175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.113724][ T4175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.136121][T11342] UDF-fs: Scanning with blocksize 1024 failed [ 302.172989][ T4175] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.189609][T11342] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 302.204581][T11342] UDF-fs: Scanning with blocksize 2048 failed [ 302.208899][ T4175] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 302.220425][T11342] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 302.227870][ T4175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.249764][T11342] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.270038][ T26] audit: type=1800 audit(1759253141.082:43): pid=11342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2657" name="file1" dev="loop4" ino=36 res=0 errno=0 [ 302.293782][ T4175] usb 2-1: config 0 descriptor?? [ 302.752270][T11376] input: syz0 as /devices/virtual/input/input25 [ 302.789092][ T4175] hid-retrode 0003:0403:97C1.0023: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.1-1/input0 [ 302.891882][T11381] loop0: detected capacity change from 0 to 1024 [ 302.940051][T11381] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 302.981614][T11381] EXT4-fs (loop0): invalid journal inode [ 302.993286][T11381] EXT4-fs (loop0): can't get journal size [ 302.993695][ T4175] usb 2-1: USB disconnect, device number 19 [ 303.008902][T11381] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #2: comm syz.0.2675: blocks 48-48 from inode overlap system zone [ 303.029820][T11381] EXT4-fs (loop0): failed to initialize system zone (-117) [ 303.038322][T11381] EXT4-fs (loop0): mount failed [ 303.226853][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2682'. [ 303.317711][T11402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2684'. [ 303.500023][T11413] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2689'. [ 303.524424][T11413] device ip6gretap0 entered promiscuous mode [ 303.534394][T11414] netlink: 'syz.2.2690': attribute type 5 has an invalid length. [ 303.551681][T11416] batman_adv: Cannot find parent device [ 303.564071][T11416] batman_adv: batadv0: Adding interface: ip6gretap1 [ 303.579981][T11416] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.622227][T11416] batman_adv: batadv0: Interface activated: ip6gretap1 [ 303.637515][T11413] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2689'. [ 303.732235][T11422] nbd: socks must be embedded in a SOCK_ITEM attr [ 303.931195][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2699'. [ 304.245223][ T1283] block nbd2: Possible stuck request ffff8880209a8000: control (read@0,4096B). Runtime 90 seconds [ 304.575357][ T13] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 304.722690][T11461] loop4: detected capacity change from 0 to 1024 [ 304.845109][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 304.886124][ T27] INFO: task udevd:4306 blocked for more than 143 seconds. [ 304.893370][ T27] Not tainted syzkaller #0 [ 304.907973][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.925063][ T27] task:udevd state:D stack:23296 pid: 4306 ppid: 3562 flags:0x00004002 [ 304.934587][ T27] Call Trace: [ 304.950097][ T27] [ 304.956673][ T27] __schedule+0x11bb/0x4390 [ 304.964666][ T27] ? preempt_schedule+0xa7/0xb0 [ 304.975531][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.984658][ T27] ? release_firmware_map_entry+0x190/0x190 [ 304.992278][ T13] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 304.994203][ T27] ? preempt_schedule+0xa7/0xb0 [ 305.015193][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 305.031381][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.045356][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 305.056757][ T13] usb 3-1: config 0 descriptor?? [ 305.062624][ T27] ? lock_chain_count+0x20/0x20 [ 305.067997][ T27] schedule+0x11b/0x1e0 [ 305.072267][ T27] io_schedule+0x7c/0xd0 [ 305.076959][ T27] wait_on_page_bit_common+0x815/0xe00 [ 305.082543][ T27] ? wait_on_page_bit+0x50/0x50 [ 305.087884][ T27] ? blkdev_fallocate+0x4d0/0x4d0 [ 305.093026][ T27] ? rcu_lock_release+0x20/0x20 [ 305.098383][ T27] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 305.103970][ T27] do_read_cache_page+0xb05/0x1030 [ 305.109544][ T27] read_part_sector+0xd4/0x4f0 [ 305.114440][ T27] ? string+0x26d/0x2b0 [ 305.119074][ T27] adfspart_check_ICS+0xbf/0xe00 [ 305.124569][ T27] ? vsnprintf+0x1905/0x1a00 [ 305.129659][ T27] ? adfspart_check_ADFS+0x830/0x830 [ 305.135350][ T27] ? snprintf+0xd7/0x120 [ 305.140043][ T27] ? vscnprintf+0x80/0x80 [ 305.144641][ T27] bdev_disk_changed+0x917/0x16b0 [ 305.150229][ T27] ? blkdev_get_by_dev+0x157/0xa60 [ 305.155759][ T27] ? blk_drop_partitions+0x1a0/0x1a0 [ 305.161163][ T27] ? _atomic_dec_and_lock+0x8f/0x110 [ 305.168272][ T27] blkdev_get_whole+0x2f9/0x390 [ 305.173232][ T27] blkdev_get_by_dev+0x2d0/0xa60 [ 305.178652][ T27] blkdev_open+0x12d/0x2c0 [ 305.183163][ T27] ? block_ioctl+0xf0/0xf0 [ 305.188080][ T27] do_dentry_open+0x7ff/0xf80 [ 305.192880][ T27] path_openat+0x2682/0x2f30 [ 305.197966][ T27] ? __kasan_slab_alloc+0xb3/0xd0 [ 305.203108][ T27] ? __kasan_slab_alloc+0x9c/0xd0 [ 305.208569][ T27] ? slab_post_alloc_hook+0x4c/0x380 [ 305.213980][ T27] ? verify_lock_unused+0x140/0x140 [ 305.219623][ T27] ? __x64_sys_openat+0x135/0x160 [ 305.224755][ T27] ? do_filp_open+0x3e0/0x3e0 [ 305.229871][ T27] do_filp_open+0x1b3/0x3e0 [ 305.234468][ T27] ? vfs_tmpfile+0x300/0x300 [ 305.239553][ T27] ? _raw_spin_unlock+0x24/0x40 [ 305.244803][ T27] ? alloc_fd+0x598/0x630 [ 305.249692][ T27] do_sys_openat2+0x142/0x4a0 [ 305.254597][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 305.260066][ T27] ? do_sys_open+0xe0/0xe0 [ 305.264637][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 305.271051][ T27] ? lock_chain_count+0x20/0x20 [ 305.277719][ T27] ? vtime_user_exit+0x2dc/0x400 [ 305.282798][ T27] __x64_sys_openat+0x135/0x160 [ 305.288477][ T27] do_syscall_64+0x4c/0xa0 [ 305.293009][ T27] ? clear_bhb_loop+0x30/0x80 [ 305.298152][ T27] ? clear_bhb_loop+0x30/0x80 [ 305.302966][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 305.309270][ T27] RIP: 0033:0x7fe09f80a407 [ 305.313805][ T27] RSP: 002b:00007ffee1e9cb30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 305.331894][ T13] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 305.341910][ T27] RAX: ffffffffffffffda RBX: 00007fe09f71c880 RCX: 00007fe09f80a407 [ 305.370851][ T27] RDX: 00000000000a0800 RSI: 0000558e6bc222d0 RDI: ffffffffffffff9c [ 305.383711][ T27] RBP: 0000558e6bc21910 R08: 0000000000000000 R09: 0000000000000000 [ 305.393613][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 0000558e6bc3b320 [ 305.402245][ T27] R13: 0000558e6bc39410 R14: 0000000000000000 R15: 0000558e6bc3b320 [ 305.410626][ T27] [ 305.414444][ T27] [ 305.414444][ T27] Showing all locks held in the system: [ 305.485201][ T27] 1 lock held by khungtaskd/27: [ 305.491015][ T27] #0: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 305.509981][ T27] 3 locks held by kworker/u4:1/144: [ 305.517953][ T27] 3 locks held by kworker/u4:4/1262: [ 305.542162][ T27] #0: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa5/0x140 [ 305.553468][ T27] #1: ffff8880b9027888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x4d6/0x810 [ 305.558669][ T4602] usb 3-1: USB disconnect, device number 22 [ 305.568243][ T27] #2: ffff8880b90280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 305.582430][ T27] 1 lock held by udevd/3562: [ 305.587465][ T27] 2 locks held by getty/3947: [ 305.592241][ T27] #0: ffff88802ba3d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 305.602447][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 305.621834][ T27] 2 locks held by kworker/1:3/4175: [ 305.627261][ T27] #0: ffff888016872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 305.637857][ T27] #1: ffffc90002defd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 305.649619][ T27] 1 lock held by udevd/4306: [ 305.654413][ T27] #0: ffff88802031e918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 [ 305.664658][ T27] 1 lock held by udevd/4307: [ 305.669307][ T27] #0: ffff888020840518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 [ 305.679489][ T27] 3 locks held by kworker/0:16/4602: [ 305.684796][ T27] #0: ffff8881423b0138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 305.695790][ T27] #1: ffffc90003847d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 305.707130][ T27] #2: ffff888147f7a220 (&dev->mutex){....}-{3:3}, at: hub_event+0x1a7/0x5560 [ 305.716191][ T27] 1 lock held by udevd/4874: [ 305.720790][ T27] #0: ffff88802061b918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 [ 305.731978][ T27] 3 locks held by kworker/1:17/5053: [ 305.737413][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 305.747892][ T27] #1: ffffc900032e7d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 305.760717][ T27] #2: ffffffff8c1210e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x347/0x6b0 [ 305.771902][ T27] [ 305.774240][ T27] ============================================= [ 305.774240][ T27] [ 305.783775][ T27] NMI backtrace for cpu 1 [ 305.788116][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 305.795322][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.805375][ T27] Call Trace: [ 305.808647][ T27] [ 305.811568][ T27] dump_stack_lvl+0x168/0x230 [ 305.816244][ T27] ? show_regs_print_info+0x20/0x20 [ 305.821442][ T27] ? load_image+0x3b0/0x3b0 [ 305.825970][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 305.831335][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 305.836450][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 305.841412][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 305.847569][ T27] ? _printk+0xcc/0x110 [ 305.851742][ T27] ? load_image+0x3b0/0x3b0 [ 305.856241][ T27] ? load_image+0x3b0/0x3b0 [ 305.860743][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 305.866805][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 305.872778][ T27] watchdog+0xe0f/0xe50 [ 305.876930][ T27] kthread+0x436/0x520 [ 305.880987][ T27] ? hungtask_pm_notify+0x40/0x40 [ 305.886011][ T27] ? kthread_blkcg+0xd0/0xd0 [ 305.890617][ T27] ret_from_fork+0x1f/0x30 [ 305.895067][ T27] [ 305.898130][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.905085][ T27] Sending NMI from CPU 1 to CPUs 0: [ 305.910314][ C0] NMI backtrace for cpu 0 [ 305.910324][ C0] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 305.910339][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.910348][ C0] Workqueue: bat_events batadv_nc_worker [ 305.910369][ C0] RIP: 0010:mark_lock+0xe2/0x320 [ 305.910389][ C0] Code: 03 42 0f b6 04 28 84 c0 0f 85 06 02 00 00 83 3d e3 7f af 14 00 74 36 45 31 ff 49 83 c7 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 ff e8 74 83 5f 00 b8 01 00 00 00 45 85 27 74 50 48 83 [ 305.910402][ C0] RSP: 0018:ffffc900010bf740 EFLAGS: 00000046 [ 305.910413][ C0] RAX: 1ffffffff1f33c5a RBX: ffff88801afb9dc0 RCX: ffffffff815caf64 [ 305.910424][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ffbc1b0 [ 305.910434][ C0] RBP: 0000000000000002 R08: dffffc0000000000 R09: fffffbfff1ff7837 [ 305.910448][ C0] R10: fffffbfff1ff7837 R11: 1ffffffff1ff7836 R12: 0000000000000004 [ 305.910458][ C0] R13: dffffc0000000000 R14: ffff88801afba900 R15: ffffffff8f99e2d0 [ 305.910469][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 305.910481][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.910492][ C0] CR2: 00007f62f19922f8 CR3: 00000000299cb000 CR4: 00000000003506f0 [ 305.910505][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 305.910514][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 305.910523][ C0] Call Trace: [ 305.910527][ C0] [ 305.910534][ C0] __lock_acquire+0xcef/0x7c60 [ 305.910559][ C0] ? mark_lock+0x94/0x320 [ 305.910576][ C0] ? verify_lock_unused+0x140/0x140 [ 305.910598][ C0] ? verify_lock_unused+0x140/0x140 [ 305.910613][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x836/0xc10 [ 305.910631][ C0] ? mark_lock+0x94/0x320 [ 305.910648][ C0] lock_acquire+0x197/0x3f0 [ 305.910664][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 305.910678][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 305.910697][ C0] ? read_lock_is_recursive+0x10/0x10 [ 305.910713][ C0] ? __local_bh_disable_ip+0xfb/0x190 [ 305.910728][ C0] ? __bpf_trace_softirq+0x10/0x10 [ 305.910741][ C0] ? __local_bh_enable_ip+0x12a/0x1b0 [ 305.910754][ C0] ? _local_bh_enable+0xa0/0xa0 [ 305.910769][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 305.910783][ C0] _raw_spin_lock_bh+0x32/0x50 [ 305.910800][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 305.910813][ C0] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 305.910827][ C0] batadv_nc_purge_paths+0xe7/0x3b0 [ 305.910845][ C0] batadv_nc_worker+0x327/0x5c0 [ 305.910865][ C0] process_one_work+0x863/0x1000 [ 305.910886][ C0] ? worker_detach_from_pool+0x240/0x240 [ 305.910901][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 305.910917][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 305.910933][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 305.910951][ C0] ? wq_worker_running+0x97/0x170 [ 305.910965][ C0] worker_thread+0xaa8/0x12a0 [ 305.910981][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 305.910998][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 305.911012][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 305.911033][ C0] kthread+0x436/0x520 [ 305.911045][ C0] ? rcu_lock_release+0x20/0x20 [ 305.911059][ C0] ? kthread_blkcg+0xd0/0xd0 [ 305.911072][ C0] ret_from_fork+0x1f/0x30 [ 305.911094][ C0] [ 305.913127][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 306.240589][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 306.247786][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 306.257855][ T27] Call Trace: [ 306.261146][ T27] [ 306.264086][ T27] dump_stack_lvl+0x168/0x230 [ 306.268766][ T27] ? show_regs_print_info+0x20/0x20 [ 306.273981][ T27] ? load_image+0x3b0/0x3b0 [ 306.278514][ T27] panic+0x2c9/0x7f0 [ 306.282401][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 306.288030][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 306.292532][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 306.298698][ T27] watchdog+0xe4e/0xe50 [ 306.302855][ T27] kthread+0x436/0x520 [ 306.306919][ T27] ? hungtask_pm_notify+0x40/0x40 [ 306.311957][ T27] ? kthread_blkcg+0xd0/0xd0 [ 306.316555][ T27] ret_from_fork+0x1f/0x30 [ 306.320992][ T27] [ 306.324317][ T27] Kernel Offset: disabled [ 306.328659][ T27] Rebooting in 86400 seconds..