last executing test programs: 2m46.574815182s ago: executing program 0 (id=1021): syz_emit_ethernet(0xae, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0x0, 0x0, {0x21, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{}, {@dev}]}, @rr={0x7, 0x23, 0x60, [@remote, @rand_addr=0x64010102, @private=0xa010100, @private=0xa010100, @local, @multicast2, @rand_addr=0x64010100, @private=0xa010101]}, @ssrr={0x89, 0x3}, @timestamp_prespec={0x44, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}]}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0xfe}}]}]}}}}}}}, 0x0) 2m46.3678385s ago: executing program 0 (id=1024): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) 2m46.238710061s ago: executing program 0 (id=1025): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 2m46.224387384s ago: executing program 0 (id=1027): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1700000004000000080000000c0000000000", @ANYRES32, @ANYBLOB="ec26b704c626bce9a93827b600"/32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4, 0x0, 0x0, @void, @value}, 0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0x0, 0x80000) inotify_init1(0x80800) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) io_uring_setup(0x70f8, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000100)="8000102e", 0x4}, {&(0x7f0000000280)="d7ced286", 0x4}], 0x2}}], 0x1, 0x0) socket(0x1, 0x2, 0x0) 2m45.206171845s ago: executing program 0 (id=1030): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c6469726563745f696f2c6e6f7265636f766572792c766572795f64656772616465642c6a6f75726e616c5f666c7573685f64697361626c65642c6e6f7265636f766572792c76657273696f6e5f757067726164653d6e6f6e652c62747265655f6e6f64655f6d656d5f7074725f6f7074696d697a6174696f6e2c6e6f5f646174615f696f2c62747265655f6e6f64655f6d656d5f7074725f0759c71e6f7074696d697a6174696f6e2c7375626a5f726f6c653d2f7b5c7b915e3a5b5e5d3a2c6f626a5f757365723dc58d252f40d6c1c883a409975714e773"], 0x1, 0x5906, &(0x7f0000010b40)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x44) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000001b40)="a7", 0x1}], 0x1, 0x8000, 0x0, 0x0) 2m42.941630349s ago: executing program 0 (id=1042): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1700000004000000080000000c0000000000", @ANYRES32, @ANYBLOB="ec26b704c626bce9a93827b600"/32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4, 0x0, 0x0, @void, @value}, 0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0x0, 0x80000) inotify_init1(0x80800) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) io_uring_setup(0x70f8, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000100)="8000102e", 0x4}, {&(0x7f0000000280)="d7ced286", 0x4}], 0x2}}], 0x1, 0x0) socket(0x1, 0x2, 0x0) 2m27.104502252s ago: executing program 32 (id=1042): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1700000004000000080000000c0000000000", @ANYRES32, @ANYBLOB="ec26b704c626bce9a93827b600"/32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4, 0x0, 0x0, @void, @value}, 0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0x0, 0x80000) inotify_init1(0x80800) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) io_uring_setup(0x70f8, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000100)="8000102e", 0x4}, {&(0x7f0000000280)="d7ced286", 0x4}], 0x2}}], 0x1, 0x0) socket(0x1, 0x2, 0x0) 7.618048751s ago: executing program 4 (id=1777): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d49fbc0000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0x1a, 0x23, "cc1cbc9515c8c0c890c08de3b9aeef09a0d4edfd1351d8db3f8ef40fd7c8f5b5f4b39b"}, 0x0, 0x0, 0x0, 0x0}) 5.42174794s ago: executing program 5 (id=1792): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001006873720014", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0500110002"], 0x48}}, 0x0) 5.185177467s ago: executing program 5 (id=1795): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000161}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.163477728s ago: executing program 4 (id=1796): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r1, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010000100000000000000000053000000", @ANYRES32=r3, @ANYBLOB="efdd0e4af11f02000a0001"], 0x2c}}, 0x0) 4.907363383s ago: executing program 5 (id=1798): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000001c0)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.743763325s ago: executing program 4 (id=1801): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 4.449878058s ago: executing program 3 (id=1802): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000100)="d82363", 0x3}], 0x1}}], 0x1, 0x40) 4.282792641s ago: executing program 2 (id=1804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x120}, {}], 0x2, 0x0, 0x0, 0x0) 4.260410798s ago: executing program 3 (id=1805): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000000500020000000000850500000000"], 0x0, 0x5, 0xff9, &(0x7f0000000a80)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{}]}) 3.914122545s ago: executing program 6 (id=1808): r0 = timerfd_create(0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000180)={0x1, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001240)="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", 0x324}], 0x1}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r7 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x10041, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r8, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x5, 0x7, 0x0, @generic=0x386a2156}) 3.086230947s ago: executing program 6 (id=1809): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d49fbc0000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0x1a, 0x26, "cc1cbc9515c8c0c890c08de3b9aeef09a0d4edfd1351d8db3f8ef40fd7c8f5b5f4b39b012627"}, 0x0, 0x0, 0x0, 0x0}) 3.078155826s ago: executing program 2 (id=1811): r0 = syz_io_uring_setup(0x68f1, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000380)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000161}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.077581501s ago: executing program 3 (id=1812): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYRESDEC], 0x0, 0x648, &(0x7f00000019c0)="$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") chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x2) 2.866794153s ago: executing program 2 (id=1814): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0) pipe2$watch_queue(&(0x7f0000000540), 0x80) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.794218807s ago: executing program 3 (id=1816): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f0000000900)="$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") r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x28, 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f00000010c0)="aabf", 0x2}, {&(0x7f0000000400)="c021", 0x2}], 0x2, 0xf1, 0x7) 2.342772594s ago: executing program 3 (id=1819): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 2.279077609s ago: executing program 1 (id=1820): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001006873720014", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0500110002"], 0x48}}, 0x0) 2.157381517s ago: executing program 1 (id=1821): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c83020001c0001000b0204004c0000000208040003000308030308"], 0x25) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.830268882s ago: executing program 5 (id=1822): socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = epoll_create1(0x0) socket(0x1, 0x80802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x40000000}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.829733975s ago: executing program 2 (id=1823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000000000000100000005000700000000000800090003000000060002000100000008000a000000000008001800e0000002080019"], 0x44}}, 0x0) 1.586910339s ago: executing program 4 (id=1824): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x120}, {}], 0x2, 0x0, 0x0, 0x0) 1.568143225s ago: executing program 2 (id=1825): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="a6af891d142bbbe86c2b6c42ac9eefc3f3124a519189b105d77c5f5267121c170995cd3bb174096f3c", @ANYBLOB="a51b7d19e69bbcb11700c2dcb2d851f79d44e9bb8469d2a5dd66597db213ade6acfaffd88afce31be876c207fb5d362b6e91010b006a4279f2d4d02752a02b76b5413c5e7cd22d3cfad489bd1b84a85aa8ad47cc69d09522d51cf5cf88cf9da13593310d5e0d03a6e17940ddd391c7796ad75f4fa75bd62cb78c43c92e61de110508c5d605a2f981314c38526ac5aac6e4445e32d7cf128b440ca715e901f8b4299226dfd9bfec7a37f3bf63e1906fe520b65051ea9c14827e9cd737a6952d478ff3cb4436a913", @ANYRES8, @ANYRESOCT, @ANYRES64], 0x0, 0x1e8, &(0x7f0000000700)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r0, 0x20049549e2a2d659) 1.458682085s ago: executing program 2 (id=1826): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.153582018s ago: executing program 6 (id=1827): r0 = syz_io_uring_setup(0x68f1, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000380)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000161}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.007050324s ago: executing program 6 (id=1828): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="2c8ef6fff25f71854bb02441c2edff2c66736dbdda08da0968bf8783e49a23113d307830303030303000bd2551db78fc65240062c543fd92499a55c4676e4ab57351fab1f21354c2000000000000a36961e03f1f9b339e1208fe76adf824d531e4f11e82cd11bccd3e4d4cd5b4502ba9708a2827923cada4e88ec20e806b355ece7f4afbb71f1eafd72d05729509434e51cc55317bb19441bd11c979ca9786b51118d9b1c2246f0b40ab6700000000000000da855836b2ae2ca015a89c5a93917ce89bf9b25873b64212817b398012e71c56a6e54fff0f5a90c26a2b31fa0443dc5e59649e4678b04b917313b3ae5df833cf837087331201356ac926fc24fb7c21d65244421f457d954663ffc16a2f5eaf7a3033e71490413eb81a78125fbe905813b0fa518e44ce2779b29087ca0c5af3a3c05c64d6d98098d8d6c16eaa61179eb9acdbb0b8523c0fb26684c472244428cd27b2c4fa7d92d28776bff943ac830c7f4e70aa6cb4352cc2c57f79ae038939e36a954e5db9ed0cd416f21922632de28ceabe2930fc2f646809fa96a6f2e6eebdcef590508b859cb3bbefab67826828f4b7a7161e15b7b6333643fd5c2f023e5fcc4d97b3c68aaff91f7d85b5d3ea153079a7fc71cb6e8675d03eb5e1dce7d6aefde356c9b1122b888d45a8e636648a127ab8b100b7aa18234d", @ANYRES16, @ANYRES32, @ANYRESDEC], 0x0, 0x648, &(0x7f00000019c0)="$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") chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x2) 786.866388ms ago: executing program 5 (id=1829): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0884123, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000180)) 770.132056ms ago: executing program 6 (id=1830): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 743.552957ms ago: executing program 5 (id=1831): gettid() syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 594.820866ms ago: executing program 4 (id=1832): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f0000000900)="$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") r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x28, 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f00000010c0)="aabf", 0x2}, {&(0x7f0000000400)="c021", 0x2}], 0x2, 0xf1, 0x7) 529.265317ms ago: executing program 1 (id=1833): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0500110002"], 0x48}}, 0x0) 488.017114ms ago: executing program 6 (id=1834): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000001c0)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 447.509335ms ago: executing program 1 (id=1835): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x400}) r1 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 420.764629ms ago: executing program 3 (id=1836): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 359.70949ms ago: executing program 1 (id=1837): waitid(0x0, 0x0, 0x0, 0x4, 0x0) 101.335407ms ago: executing program 1 (id=1838): gettid() syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000000)='8', 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 4 (id=1839): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f0000000340), 0x10, 0xfffffffb, @void, @value}, 0x94) connect(0xffffffffffffffff, &(0x7f00000004c0)=@rc={0x1f, @any, 0x8}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000400)={0xd7, 0xb687, 0xc, 0x7336, 0x3, 0x0, 0x3, 0x5, 0x0, 0x8, 0x200, 0x37fc, 0x8001, 0x101, 0x8, 0x6, 0xc, 0x8000000000000001, 0xa, 0xf, 0x3, 0x1, 0x1, 0x9cf, 0x1}) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="740000000301010300000000000000000000000314000180060003400002000006000340000400001400198008000200000300000800010002000000100004800c0002800500020002000000200004801c0003800800024000000004080002400000000505000100d300000008"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20000804) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f00000002c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c000b"], 0x34}}, 0xc000) kernel console output (not intermixed with test programs): usb 5-1: config 0 descriptor?? [ 239.603864][ T9272] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 239.616390][ T1191] smsc95xx v2.0.0 [ 239.753004][ T5905] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 239.762932][ T9239] qrtr: Invalid version 18 [ 239.770413][ T46] gspca_sn9c20x: Write register 1000 failed -71 [ 239.780022][ T46] gspca_sn9c20x: Device initialization failed [ 239.801439][ T46] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 239.813036][ T46] usb 3-1: USB disconnect, device number 24 [ 239.966591][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.977255][ T5905] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 239.986833][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.004495][ T5905] usb 4-1: config 0 descriptor?? [ 240.017076][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 240.044126][ T1191] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 240.055858][ T1191] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 240.221746][ T5905] pwc: send_video_command error -71 [ 240.222552][ T9282] loop5: detected capacity change from 0 to 128 [ 240.228178][ T5905] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 240.272081][ T5905] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 240.295755][ T9282] EXT4-fs (loop5): Test dummy encryption mode enabled [ 240.315399][ T5905] usb 4-1: USB disconnect, device number 33 [ 240.455943][ T9282] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.515593][ T9280] loop6: detected capacity change from 0 to 32768 [ 240.531632][ T9282] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.556590][ T9282] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 240.603164][ T9278] loop1: detected capacity change from 0 to 32768 [ 240.620199][ T9278] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1268 (9278) [ 240.652481][ T9278] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 240.668907][ T9278] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 240.679477][ T9278] BTRFS info (device loop1): using free-space-tree [ 240.712704][ T9280] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 240.769856][ T5840] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.920532][ T1191] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 240.937643][ T1191] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 240.965269][ T1191] usb 5-1: USB disconnect, device number 21 [ 241.017833][ T5905] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 241.189582][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.200144][ T8743] ocfs2: Unmounting device (7,6) on (node local) [ 241.206643][ T5905] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 241.206695][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.208906][ T5905] usb 4-1: config 0 descriptor?? [ 241.249088][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 241.625112][ T5857] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 241.648456][ T5905] pwc: recv_control_msg error -32 req 02 val 2b00 [ 241.657839][ T5905] pwc: recv_control_msg error -32 req 02 val 2700 [ 241.677203][ T5905] pwc: recv_control_msg error -32 req 02 val 2c00 [ 241.686827][ T5905] pwc: recv_control_msg error -32 req 04 val 1000 [ 241.696871][ T5905] pwc: recv_control_msg error -32 req 04 val 1300 [ 241.723620][ T5905] pwc: recv_control_msg error -32 req 04 val 1400 [ 242.164820][ T9319] loop2: detected capacity change from 0 to 64 [ 243.479430][ T5905] pwc: recv_control_msg error -71 req 02 val 2100 [ 243.498232][ T5905] pwc: recv_control_msg error -71 req 04 val 1500 [ 243.508293][ T5905] pwc: recv_control_msg error -71 req 02 val 2500 [ 243.903241][ T9310] loop5: detected capacity change from 0 to 32768 [ 243.923002][ T5905] pwc: recv_control_msg error -71 req 02 val 2400 [ 243.930203][ T5905] pwc: recv_control_msg error -71 req 02 val 2600 [ 243.937221][ T5905] pwc: recv_control_msg error -71 req 02 val 2900 [ 243.953279][ T5905] pwc: recv_control_msg error -71 req 02 val 2800 [ 243.962962][ T5905] pwc: recv_control_msg error -71 req 04 val 1100 [ 244.010136][ T5905] pwc: recv_control_msg error -71 req 04 val 1200 [ 244.018304][ T5905] pwc: Registered as video103. [ 244.024794][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 244.091652][ T5905] usb 4-1: USB disconnect, device number 34 [ 244.189266][ T9310] workqueue: Failed to create a rescuer kthread for wq "bcachefs_journal": -EINTR [ 244.189361][ T9310] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 244.381112][ T9310] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 244.516342][ T9339] loop6: detected capacity change from 0 to 64 [ 245.542306][ T9347] loop1: detected capacity change from 0 to 164 [ 245.579133][ T9349] loop5: detected capacity change from 0 to 512 [ 245.606432][ T9347] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 245.654220][ T9349] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 245.732992][ T5905] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 245.781184][ T9324] loop4: detected capacity change from 0 to 32768 [ 245.803968][ T9324] XFS: ikeep mount option is deprecated. [ 245.867907][ T9349] EXT4-fs error (device loop5): ext4_orphan_get:1388: inode #15: comm syz.5.1283: iget: bad i_size value: -67835469387268086 [ 245.881787][ T9354] loop2: detected capacity change from 0 to 2048 [ 245.893023][ T5905] usb 4-1: device descriptor read/64, error -71 [ 245.959177][ T9349] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.1283: couldn't read orphan inode 15 (err -117) [ 245.975784][ T9349] EXT4-fs (loop5): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.026872][ T9324] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 246.039615][ T9349] ext2 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.043246][ T9354] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 246.087358][ T9354] UDF-fs: Scanning with blocksize 512 failed [ 246.139254][ T5905] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 246.146439][ T9324] XFS (loop4): Ending clean mount [ 246.155108][ T9354] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.216677][ T9324] XFS (loop4): Quotacheck needed: Please wait. [ 246.285382][ T5840] EXT4-fs (loop5): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 246.330022][ T9371] bond0: entered promiscuous mode [ 246.340063][ T9371] bond_slave_0: entered promiscuous mode [ 246.415793][ T9324] XFS (loop4): Quotacheck: Done. [ 246.443902][ T9371] bond_slave_1: entered promiscuous mode [ 246.495137][ T5905] usb 4-1: device descriptor read/64, error -71 [ 246.604429][ T5905] usb usb4-port1: attempt power cycle [ 247.674685][ T5905] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 247.697103][ T5905] usb 4-1: device descriptor read/8, error -71 [ 247.766413][ T5853] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 248.115273][ T9384] loop5: detected capacity change from 0 to 64 [ 248.814774][ T5851] UDF-fs: warning (device loop2): udf_evict_inode: Inode 818 (mode 100755) has inode size 134220898 different from extent length 134221824. Filesystem need not be standards compliant. [ 249.810992][ T9394] loop3: detected capacity change from 0 to 512 [ 250.057565][ T9402] ptrace attach of "./syz-executor exec"[5857] was attempted by ""[9402] [ 250.172751][ T9394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.185806][ T9394] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.361046][ T9418] loop1: detected capacity change from 0 to 512 [ 250.403170][ T9418] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 250.420616][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.433403][ T5902] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 250.454474][ T9418] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.1302: iget: bad i_size value: -67835469387268086 [ 250.523416][ T9418] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1302: couldn't read orphan inode 15 (err -117) [ 250.614430][ T9418] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.694982][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.713032][ T5906] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 250.722661][ T5902] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 250.740551][ T9418] ext2 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.775237][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.805481][ T5902] usb 5-1: config 0 descriptor?? [ 250.818329][ T5902] pwc: Askey VC010 type 2 USB webcam detected. [ 250.850281][ T9430] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1308'. [ 250.863140][ T5906] usb 6-1: device descriptor read/64, error -71 [ 250.933825][ T5905] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 250.961248][ T5857] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 251.023173][ T5902] pwc: send_video_command error -71 [ 251.028456][ T5902] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 251.045702][ T5902] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 251.093122][ T5905] usb 3-1: device descriptor read/64, error -71 [ 251.109804][ T5906] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 251.293203][ T5906] usb 6-1: device descriptor read/64, error -71 [ 251.317316][ T5902] usb 5-1: USB disconnect, device number 22 [ 251.633375][ T5902] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 251.944995][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.977685][ T5902] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 251.999800][ T9426] loop3: detected capacity change from 0 to 32768 [ 252.013206][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.065496][ T5902] usb 5-1: config 0 descriptor?? [ 252.095882][ T5902] pwc: Askey VC010 type 2 USB webcam detected. [ 252.129609][ T5905] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 252.140705][ T5906] usb usb6-port1: attempt power cycle [ 252.224052][ T9426] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 252.247808][ T9426] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 252.485930][ T9448] loop6: detected capacity change from 0 to 64 [ 252.493643][ T5905] usb 3-1: device descriptor read/64, error -71 [ 252.497550][ T5902] pwc: recv_control_msg error -32 req 02 val 2b00 [ 252.560593][ T5902] pwc: recv_control_msg error -32 req 02 val 2700 [ 252.577499][ T5902] pwc: recv_control_msg error -32 req 02 val 2c00 [ 252.586396][ T5902] pwc: recv_control_msg error -32 req 04 val 1000 [ 252.596819][ T5902] pwc: recv_control_msg error -32 req 04 val 1300 [ 252.613316][ T9426] bcachefs: bch2_fs_get_tree() error: EINVAL [ 252.629961][ T5905] usb usb3-port1: attempt power cycle [ 252.714561][ T5906] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 252.775336][ T5906] usb 6-1: device descriptor read/8, error -71 [ 252.820625][ T5902] pwc: recv_control_msg error -32 req 04 val 1400 [ 252.853841][ T5902] pwc: recv_control_msg error -32 req 02 val 2000 [ 252.874729][ T5902] pwc: recv_control_msg error -32 req 02 val 2100 [ 252.882086][ T5902] pwc: recv_control_msg error -32 req 04 val 1500 [ 252.890543][ T5902] pwc: recv_control_msg error -32 req 02 val 2500 [ 252.926981][ T5902] pwc: recv_control_msg error -32 req 02 val 2400 [ 252.940658][ T5902] pwc: recv_control_msg error -32 req 02 val 2600 [ 252.964919][ T5902] pwc: recv_control_msg error -32 req 02 val 2900 [ 252.979667][ T5902] pwc: recv_control_msg error -32 req 02 val 2800 [ 252.993494][ T5905] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 253.019378][ T5906] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 253.166130][ T5905] usb 3-1: device descriptor read/8, error -71 [ 253.219903][ T5902] pwc: recv_control_msg error -71 req 04 val 1200 [ 253.252101][ T5902] pwc: Registered as video103. [ 253.274329][ T5902] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 253.341376][ T5902] usb 5-1: USB disconnect, device number 23 [ 253.358309][ T9471] loop3: detected capacity change from 0 to 512 [ 253.385375][ T5906] usb 6-1: device not accepting address 36, error -71 [ 253.413232][ T5906] usb usb6-port1: unable to enumerate USB device [ 253.453500][ T9471] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 253.460954][ T9472] loop5: detected capacity change from 0 to 1024 [ 253.489775][ T9472] EXT4-fs: Ignoring removed orlov option [ 253.543198][ T5905] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 253.556927][ T9472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.577808][ T5905] usb 3-1: device descriptor read/8, error -71 [ 253.596289][ T9471] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.1321: iget: bad i_size value: -67835469387268086 [ 253.620282][ T9471] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1321: couldn't read orphan inode 15 (err -117) [ 253.635099][ T9472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.641546][ T9471] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.662730][ T9471] ext2 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.693604][ T5905] usb usb3-port1: unable to enumerate USB device [ 254.116070][ T5837] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 255.275251][ T9487] x_tables: duplicate underflow at hook 1 [ 255.624211][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.630720][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.750222][ T9489] fuse: Invalid rootmode [ 255.963600][ T9467] loop6: detected capacity change from 0 to 32768 [ 255.974535][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.113129][ T5902] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 256.273055][ T46] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 256.453217][ T46] usb 5-1: device descriptor read/64, error -71 [ 256.459926][ T9467] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 256.653086][ T5902] usb 2-1: device descriptor read/64, error -71 [ 256.692979][ T46] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 256.717149][ T9491] loop2: detected capacity change from 0 to 40427 [ 256.731786][ T9467] XFS (loop6): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 256.758878][ T9467] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop6": -EINTR [ 256.759539][ T9467] XFS (loop6): log mount failed [ 256.863275][ T46] usb 5-1: device descriptor read/64, error -71 [ 256.901080][ T9491] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff [ 256.910214][ T5902] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 256.926578][ T9491] F2FS-fs (loop2): Image doesn't support compression [ 256.933644][ T9491] F2FS-fs (loop2): Image doesn't support compression [ 256.980883][ T9491] F2FS-fs (loop2): invalid crc value [ 257.004747][ T46] usb usb5-port1: attempt power cycle [ 257.017631][ T9491] F2FS-fs (loop2): Found nat_bits in checkpoint [ 257.037026][ T9522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1336'. [ 257.103064][ T5902] usb 2-1: device descriptor read/64, error -71 [ 257.171185][ T9491] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 257.223652][ T5902] usb usb2-port1: attempt power cycle [ 257.302437][ T5851] syz-executor: attempt to access beyond end of device [ 257.302437][ T5851] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 257.318687][ T5851] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 257.512603][ T9520] loop3: detected capacity change from 0 to 32768 [ 257.528471][ T9520] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1335 (9520) [ 257.554119][ T9520] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.564450][ T9520] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 257.573287][ T9520] BTRFS info (device loop3): using free-space-tree [ 257.591088][ T46] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 257.626578][ T46] usb 5-1: device descriptor read/8, error -71 [ 257.663743][ T5902] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 257.688206][ T5902] usb 2-1: device descriptor read/8, error -71 [ 257.693008][ T5905] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 257.773700][ T5906] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 257.865502][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.875910][ T46] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 257.884174][ T5905] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 257.905631][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.923596][ T46] usb 5-1: device descriptor read/8, error -71 [ 257.934254][ T5902] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 257.938403][ T5905] usb 7-1: config 0 descriptor?? [ 257.947304][ T5906] usb 6-1: device descriptor read/64, error -71 [ 257.971425][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 257.990899][ T5837] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 258.001678][ T5902] usb 2-1: device descriptor read/8, error -71 [ 258.113457][ T5902] usb usb2-port1: unable to enumerate USB device [ 258.283508][ T5905] pwc: send_video_command error -71 [ 258.288917][ T5905] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 258.297360][ T46] usb usb5-port1: unable to enumerate USB device [ 258.303973][ T5905] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 258.324705][ T5905] usb 7-1: USB disconnect, device number 2 [ 258.423609][ T5906] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 259.033229][ T5906] usb 6-1: device descriptor read/64, error -71 [ 259.203390][ T5906] usb usb6-port1: attempt power cycle [ 259.209890][ T9554] fuse: Invalid rootmode [ 259.271435][ T9555] loop1: detected capacity change from 0 to 4096 [ 259.315244][ T5905] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 259.349708][ T9555] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 259.510233][ T9562] loop3: detected capacity change from 0 to 4096 [ 259.603143][ T5946] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 259.626006][ T9562] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 259.683010][ T5906] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 259.713424][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.726731][ T5906] usb 6-1: device descriptor read/8, error -71 [ 259.810872][ T5905] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 259.821631][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.063229][ T5906] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 260.737466][ T5906] usb 6-1: device descriptor read/8, error -71 [ 260.799453][ T5905] usb 7-1: config 0 descriptor?? [ 260.856338][ T5905] usb 7-1: can't set config #0, error -71 [ 260.897519][ T5906] usb usb6-port1: unable to enumerate USB device [ 260.931113][ T5905] usb 7-1: USB disconnect, device number 3 [ 261.005608][ T9573] loop6: detected capacity change from 0 to 128 [ 261.013078][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 261.046045][ T5946] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 261.055661][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.076759][ T5946] usb 5-1: Product: syz [ 261.081000][ T5946] usb 5-1: Manufacturer: syz [ 261.158175][ T5946] usb 5-1: SerialNumber: syz [ 262.065803][ T5946] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 262.653255][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1351'. [ 262.732991][ T5856] Bluetooth: hci0: command 0x0406 tx timeout [ 263.043608][ T5906] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 263.250173][ T5906] usb 3-1: device descriptor read/64, error -71 [ 263.616824][ T9598] loop3: detected capacity change from 0 to 2048 [ 263.625292][ T5906] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 263.687034][ T9598] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.820822][ T9603] fuse: Invalid rootmode [ 263.858988][ T5906] usb 3-1: device descriptor read/64, error -71 [ 264.081292][ T9598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.151457][ T5906] usb usb3-port1: attempt power cycle [ 264.211638][ T5946] gspca_stk1135: reg_w 0x203 err -71 [ 264.218651][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 264.290179][ T9615] Cannot find set identified by id 0 to match [ 264.583447][ T5906] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 264.727797][ T5906] usb 3-1: device descriptor read/8, error -71 [ 265.030125][ T5946] gspca_stk1135: Sensor write failed [ 265.035704][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 265.042362][ T5946] gspca_stk1135: Sensor write failed [ 265.047902][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 265.054338][ T5946] gspca_stk1135: Sensor read failed [ 265.059580][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 265.066040][ T5946] gspca_stk1135: Sensor read failed [ 265.071265][ T5946] gspca_stk1135: Detected sensor type unknown (0x0) [ 265.079016][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 265.086374][ T5946] gspca_stk1135: Sensor read failed [ 265.091638][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 265.096658][ T9588] loop6: detected capacity change from 0 to 32768 [ 265.098044][ T5946] gspca_stk1135: Sensor read failed [ 265.109831][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 265.116280][ T5946] gspca_stk1135: Sensor write failed [ 265.121601][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 265.128173][ T5946] gspca_stk1135: Sensor write failed [ 265.133651][ T5946] stk1135 5-1:64.0: probe with driver stk1135 failed with error -71 [ 265.182156][ T5946] usb 5-1: USB disconnect, device number 28 [ 265.193146][ T5906] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 265.253553][ T5906] usb 3-1: device descriptor read/8, error -71 [ 265.285017][ T9588] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop6": -EINTR [ 265.338923][ T9621] ptrace attach of "./syz-executor exec"[5840] was attempted by ""[9621] [ 265.401379][ T5906] usb usb3-port1: unable to enumerate USB device [ 265.438625][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 265.463096][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 265.470646][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 265.515333][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 265.890980][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 265.931539][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 265.970121][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.042938][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.050410][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.073265][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.080701][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.102916][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.110352][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.132954][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.140404][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.162958][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.170424][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.192943][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.200409][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.220530][ T9632] loop6: detected capacity change from 0 to 128 [ 266.226958][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.237502][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.245300][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.252718][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.260406][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.267894][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.275349][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.282752][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.290524][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.297994][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.305477][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.313944][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.321360][ T5905] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 266.431835][ T5905] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 266.520958][ T9610] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 266.766293][ T9610] EXT4-fs (loop3): Remounting filesystem read-only [ 266.817128][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.839162][ T9641] loop2: detected capacity change from 0 to 512 [ 266.891090][ T9641] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 267.021616][ T9647] No control pipe specified [ 267.103113][ T5946] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 267.152929][ T9649] fuse: Bad value for 'rootmode' [ 267.190773][ T9641] EXT4-fs (loop2): 1 truncate cleaned up [ 267.197968][ T9641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.284009][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 267.308525][ T5946] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 267.332480][ T5946] usb 5-1: config 0 has no interface number 0 [ 267.391270][ T5946] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 267.419056][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.467310][ T5946] usb 5-1: Product: syz [ 267.485278][ T5946] usb 5-1: Manufacturer: syz [ 267.498629][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.513243][ T5960] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 267.530550][ T5946] usb 5-1: SerialNumber: syz [ 267.614693][ T5946] usb 5-1: config 0 descriptor?? [ 267.652662][ T5946] smsc95xx v2.0.0 [ 267.693082][ T5960] usb 7-1: Using ep0 maxpacket: 16 [ 267.721906][ T5960] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 267.753692][ T5960] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 267.863134][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 267.886061][ T9660] loop2: detected capacity change from 0 to 16 [ 268.014339][ T9660] erofs: (device loop2): mounted with root inode @ nid 36. [ 268.315628][ T5960] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 268.625647][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.698424][ T5960] usb 7-1: Product: syz [ 268.703041][ T5960] usb 7-1: Manufacturer: syz [ 269.255907][ T5960] usb 7-1: SerialNumber: syz [ 269.261975][ T5946] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 269.272961][ T5946] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 269.288891][ T5960] usb 7-1: config 0 descriptor?? [ 269.302278][ T5960] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 269.330317][ T5946] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 269.931883][ T9680] loop5: detected capacity change from 0 to 128 [ 270.126863][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 270.132439][ T5946] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 270.140851][ T5960] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 270.302379][ T9682] Cannot find set identified by id 0 to match [ 270.853207][ T1191] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 270.856295][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 270.869485][ T9] usb 4-1: can't read configurations, error -71 [ 270.925197][ T5960] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 270.936284][ T5960] em28xx 7-1:0.0: Config register raw data: 0x56 [ 270.955198][ T9691] fuse: Bad value for 'rootmode' [ 271.003335][ T1191] usb 3-1: device descriptor read/64, error -71 [ 271.040449][ T9693] loop5: detected capacity change from 0 to 512 [ 271.069197][ T9693] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 271.128237][ T9693] EXT4-fs (loop5): 1 truncate cleaned up [ 271.134334][ T5960] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 271.141526][ T5960] em28xx 7-1:0.0: No AC97 audio processor [ 271.168459][ T9693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.263049][ T1191] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 271.319875][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.413543][ T1191] usb 3-1: device descriptor read/64, error -71 [ 271.539269][ T1191] usb usb3-port1: attempt power cycle [ 271.597116][ T5905] usb 5-1: USB disconnect, device number 29 [ 271.642148][ T9705] loop3: detected capacity change from 0 to 32768 [ 271.665686][ T9705] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1391 (9705) [ 271.707709][ T9705] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 271.723023][ T9705] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 271.731791][ T9705] BTRFS info (device loop3): using free-space-tree [ 272.005135][ T1191] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 272.953320][ T1191] usb 3-1: device descriptor read/8, error -71 [ 274.043681][ T5905] usb 7-1: USB disconnect, device number 4 [ 274.066937][ T5905] em28xx 7-1:0.0: Disconnecting em28xx [ 274.158134][ T5837] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 274.196650][ T5905] em28xx 7-1:0.0: Freeing device [ 274.262304][ T9737] fuse: Bad value for 'rootmode' [ 274.479251][ T9751] loop1: detected capacity change from 0 to 512 [ 274.505575][ T9751] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 274.590227][ T9751] EXT4-fs (loop1): 1 truncate cleaned up [ 274.607796][ T9751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.620126][ T46] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 274.863984][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 274.882594][ T46] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 274.888395][ T9756] loop2: detected capacity change from 0 to 4096 [ 274.907713][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.930751][ T9756] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 274.938295][ T46] usb 5-1: Product: syz [ 274.939884][ T9756] ntfs3(loop2): RAW NTFS volume: Filesystem size 8192.00 Gb > volume size 0.00 Gb. Mount in read-only. [ 274.953753][ T46] usb 5-1: Manufacturer: syz [ 274.974754][ T9756] ntfs3(loop2): NTFS 8192.00 Gb is too big to use 32 bits per cluster. [ 274.997347][ T9756] ntfs3(loop2): try to read out of volume at offset 0x1ffe00 [ 275.002115][ T46] usb 5-1: SerialNumber: syz [ 275.030700][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.085776][ T46] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 275.826945][ T5841] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 276.021885][ T46] gspca_stk1135: reg_w 0x0 err -110 [ 276.028267][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 276.082292][ T46] gspca_stk1135: Sensor write failed [ 276.110526][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 276.161838][ T46] gspca_stk1135: Sensor write failed [ 276.212410][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 276.262578][ T46] gspca_stk1135: Sensor read failed [ 276.269860][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 276.301309][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 276.324385][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 276.330800][ T46] gspca_stk1135: Sensor read failed [ 276.353060][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 276.364179][ T46] gspca_stk1135: Detected sensor type unknown (0x0) [ 276.371112][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 276.388347][ T46] gspca_stk1135: Sensor read failed [ 276.394484][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 276.400935][ T46] gspca_stk1135: Sensor read failed [ 276.406786][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 276.413503][ T46] gspca_stk1135: Sensor write failed [ 276.418837][ T46] gspca_stk1135: serial bus timeout: status=0x00 [ 276.425303][ T46] gspca_stk1135: Sensor write failed [ 276.430675][ T46] stk1135 5-1:64.0: probe with driver stk1135 failed with error -110 [ 276.611634][ T9767] loop2: detected capacity change from 0 to 32768 [ 276.658048][ T9767] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1408 (9767) [ 276.681627][ T5841] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 276.697539][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.737169][ T5841] usb 4-1: Product: syz [ 276.755357][ T5841] usb 4-1: Manufacturer: syz [ 276.760102][ T5841] usb 4-1: SerialNumber: syz [ 276.771083][ T5841] usb 4-1: config 0 descriptor?? [ 276.777450][ T9767] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 276.788192][ T9767] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 276.796800][ T9767] BTRFS info (device loop2): using free-space-tree [ 276.803019][ T5960] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 276.805024][ T9787] fuse: Unknown parameter 'use00000000000000000000' [ 277.200087][ T5841] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 277.210157][ T5841] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 277.697875][ T9767] BTRFS info (device loop2): rebuilding free space tree [ 277.743848][ T5960] usb 7-1: device descriptor read/64, error -71 [ 277.872985][ T9] usb 5-1: USB disconnect, device number 30 [ 277.945313][ T5841] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 277.952225][ T5841] em28xx 4-1:0.0: Config register raw data: 0x56 [ 277.988481][ T9818] loop1: detected capacity change from 0 to 512 [ 278.013444][ T5960] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 278.035190][ T9818] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 278.143085][ T5960] usb 7-1: device descriptor read/64, error -71 [ 278.148873][ T9818] EXT4-fs (loop1): 1 truncate cleaned up [ 278.156386][ T5841] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 278.212136][ T9818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.213746][ T5841] em28xx 4-1:0.0: No AC97 audio processor [ 278.263040][ T5960] usb usb7-port1: attempt power cycle [ 278.360174][ T5851] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 278.429578][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.644732][ T5960] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 278.713879][ T5960] usb 7-1: device descriptor read/8, error -71 [ 279.505173][ T5841] usb 4-1: USB disconnect, device number 41 [ 279.512197][ T5841] em28xx 4-1:0.0: Disconnecting em28xx [ 279.559521][ T5841] em28xx 4-1:0.0: Freeing device [ 279.693079][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 279.740498][ T9844] fuse: Unknown parameter 'use00000000000000000000' [ 280.038573][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.029978][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 281.647782][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.667667][ T9] usb 2-1: config 0 descriptor?? [ 281.735885][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 281.845297][ T9] pwc: send_video_command error -71 [ 281.850585][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 281.858834][ T9] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 281.885970][ T9860] loop5: detected capacity change from 0 to 512 [ 281.916992][ T9] usb 2-1: USB disconnect, device number 34 [ 281.930641][ T9860] EXT4-fs: Ignoring removed i_version option [ 282.005709][ T9860] EXT4-fs: Ignoring removed nobh option [ 282.028978][ T9860] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 282.218871][ T9860] EXT4-fs (loop5): 1 truncate cleaned up [ 282.226658][ T9860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.292693][ T9872] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1433'. [ 283.193997][ T9874] loop1: detected capacity change from 0 to 512 [ 283.231622][ T9874] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 283.286967][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.363867][ T9874] EXT4-fs (loop1): 1 truncate cleaned up [ 283.394104][ T9874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.200571][ T5905] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 284.258354][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.330101][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1444'. [ 284.352378][ T5841] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 284.373119][ T5905] usb 7-1: Using ep0 maxpacket: 16 [ 284.385796][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1444'. [ 284.425358][ T5905] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 284.443072][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 284.460671][ T5905] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 284.470272][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.471681][ T9901] fuse: Unknown parameter 'use00000000000000000000' [ 284.478451][ T5905] usb 7-1: Product: syz [ 284.478482][ T5905] usb 7-1: Manufacturer: syz [ 284.478514][ T5905] usb 7-1: SerialNumber: syz [ 284.480828][ T5905] usb 7-1: config 0 descriptor?? [ 284.508350][ T5905] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 284.533000][ T5905] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 284.603462][ T5841] usb 4-1: no configurations [ 284.608178][ T5841] usb 4-1: can't read configurations, error -22 [ 284.743370][ T5960] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 284.898000][ T5960] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.911308][ T5960] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 284.921212][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.934170][ T5841] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 285.453338][ T46] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 285.462914][ T1191] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 285.623651][ T5960] usb 6-1: config 0 descriptor?? [ 285.653806][ T5960] pwc: Askey VC010 type 2 USB webcam detected. [ 285.738308][ T5905] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 285.752796][ T5905] em28xx 7-1:0.0: Config register raw data: 0x56 [ 285.873047][ T5960] pwc: send_video_command error -71 [ 285.878335][ T5960] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 285.886162][ T5960] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 285.903777][ T5960] usb 6-1: USB disconnect, device number 41 [ 285.904197][ T5841] usb 4-1: no configurations [ 285.915665][ T46] usb 5-1: config 0 has no interfaces? [ 285.921250][ T46] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 285.932000][ T5841] usb 4-1: can't read configurations, error -22 [ 285.938922][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.947770][ T5905] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 285.955180][ T5905] em28xx 7-1:0.0: No AC97 audio processor [ 285.976679][ T1191] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 285.989645][ T5841] usb usb4-port1: attempt power cycle [ 285.996412][ T1191] usb 3-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 286.006514][ T1191] usb 3-1: Manufacturer: syz [ 286.012164][ T46] usb 5-1: config 0 descriptor?? [ 286.031387][ T1191] usb 3-1: config 0 descriptor?? [ 286.353716][ T5841] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 286.383839][ T5960] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 286.555569][ T5960] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.566412][ T5960] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 286.600016][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.651026][ T5960] usb 6-1: config 0 descriptor?? [ 286.664393][ T5841] usb 4-1: device descriptor read/8, error -71 [ 286.672533][ T1191] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 286.696797][ T5960] pwc: Askey VC010 type 2 USB webcam detected. [ 286.833119][ T1191] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 286.842492][ T1191] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 287.391547][ T1191] usb 3-1: USB disconnect, device number 37 [ 287.479413][ T5905] usb 5-1: USB disconnect, device number 31 [ 287.499919][ T5904] usb 7-1: USB disconnect, device number 9 [ 287.507921][ T5904] em28xx 7-1:0.0: Disconnecting em28xx [ 287.570838][ T5960] pwc: recv_control_msg error -32 req 02 val 2b00 [ 287.578123][ T5960] pwc: recv_control_msg error -32 req 02 val 2700 [ 287.585251][ T5960] pwc: recv_control_msg error -32 req 02 val 2c00 [ 287.592326][ T5960] pwc: recv_control_msg error -32 req 04 val 1000 [ 287.599719][ T5960] pwc: recv_control_msg error -32 req 04 val 1300 [ 287.613688][ T5904] em28xx 7-1:0.0: Freeing device [ 287.628539][ T5960] pwc: recv_control_msg error -32 req 04 val 1400 [ 287.642078][ T5960] pwc: recv_control_msg error -32 req 02 val 2000 [ 287.666229][ T5960] pwc: recv_control_msg error -32 req 02 val 2100 [ 287.683688][ T9927] binder: 9926:9927 unknown command 0 [ 287.689152][ T9927] binder: 9926:9927 ioctl c0306201 200001c0 returned -22 [ 287.710631][ T9933] loop1: detected capacity change from 0 to 512 [ 287.723347][ T5960] pwc: recv_control_msg error -32 req 04 val 1500 [ 287.735398][ T9932] loop6: detected capacity change from 0 to 512 [ 287.763607][ T5960] pwc: recv_control_msg error -32 req 02 val 2500 [ 287.785591][ T5960] pwc: recv_control_msg error -32 req 02 val 2400 [ 287.801683][ T9933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.814488][ T9932] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 287.827777][ T9933] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.835190][ T5960] pwc: recv_control_msg error -32 req 02 val 2600 [ 287.865170][ T9932] EXT4-fs (loop6): 1 truncate cleaned up [ 287.918773][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.927124][ T5960] pwc: recv_control_msg error -32 req 02 val 2900 [ 287.953850][ T9932] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.975506][ T5960] pwc: recv_control_msg error -32 req 02 val 2800 [ 288.183945][ T5960] pwc: recv_control_msg error -71 req 04 val 1200 [ 288.215317][ T5960] pwc: Registered as video103. [ 288.236153][ T9947] loop1: detected capacity change from 0 to 512 [ 288.244710][ T5960] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30 [ 288.295130][ T9947] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 288.356077][ T9947] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.1459: iget: bad i_size value: -67835469387268086 [ 288.422288][ T9947] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1459: couldn't read orphan inode 15 (err -117) [ 288.475311][ T5960] usb 6-1: USB disconnect, device number 42 [ 288.499547][ T9947] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.511271][ T8743] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.871178][ T9953] loop2: detected capacity change from 0 to 4096 [ 288.992051][ T9953] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 289.003888][ T9953] ntfs3(loop2): Failed to load $Volume (-22). [ 289.385272][ T9947] ext2 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.648524][ T5857] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 289.723224][ T1191] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 289.740515][ T5904] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 290.601750][ T9970] loop5: detected capacity change from 0 to 8192 [ 290.875357][ T1191] usb 4-1: no configurations [ 290.880015][ T1191] usb 4-1: can't read configurations, error -22 [ 290.945841][ T9967] loop6: detected capacity change from 0 to 32768 [ 290.962462][ T5904] usb 3-1: config 0 has no interfaces? [ 290.972725][ T5904] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 290.992564][ T5987] loop5: p1 p2 p4 [ 290.996866][ T5987] loop5: p1 size 108986237 extends beyond EOD, truncated [ 291.043326][ T1191] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 291.071432][ T5987] loop5: p2 start 65535 is beyond EOD, truncated [ 291.083064][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.095632][ T5904] usb 3-1: config 0 descriptor?? [ 291.103377][ T5987] loop5: p4 start 50331648 is beyond EOD, truncated [ 291.121100][ T9967] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 291.134856][ T9967] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 291.345792][ T1191] usb 4-1: no configurations [ 291.350552][ T1191] usb 4-1: can't read configurations, error -22 [ 291.389541][ T6993] udevd[6993]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 291.390400][ T9987] loop1: detected capacity change from 0 to 256 [ 291.411374][ T1191] usb usb4-port1: attempt power cycle [ 291.418279][ T9987] exfat: Deprecated parameter 'namecase' [ 291.429914][ T9987] exfat: Deprecated parameter 'namecase' [ 291.463797][ T9987] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 291.571223][ T9967] bcachefs: bch2_fs_get_tree() error: EINVAL [ 291.601338][ T9991] loop5: detected capacity change from 0 to 512 [ 291.650710][ T9991] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 291.703705][ T9995] loop4: detected capacity change from 0 to 512 [ 291.727691][ T9991] EXT4-fs (loop5): 1 truncate cleaned up [ 291.734711][ T9991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.751084][ T5857] exFAT-fs (loop1): invalid start cluster (4278190088) [ 291.794816][ T9995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.833029][ T1191] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 291.843370][ T9995] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.864401][ T1191] usb 4-1: no configurations [ 291.869053][ T1191] usb 4-1: can't read configurations, error -22 [ 292.002477][ T5841] usb 3-1: USB disconnect, device number 38 [ 292.012173][ T1191] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 292.027891][ T9999] loop1: detected capacity change from 0 to 512 [ 292.050128][ T5853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.066453][ T1191] usb 4-1: no configurations [ 292.071343][ T1191] usb 4-1: can't read configurations, error -22 [ 292.083975][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.130926][ T1191] usb usb4-port1: unable to enumerate USB device [ 292.150238][ T9999] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1476: corrupted in-inode xattr: invalid ea_ino [ 292.183873][T10005] loop2: detected capacity change from 0 to 2048 [ 292.215412][ T9999] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1476: couldn't read orphan inode 15 (err -117) [ 292.241828][T10009] loop4: detected capacity change from 0 to 512 [ 292.244931][ T9999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.266330][T10005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.279003][T10005] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.314711][T10009] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 292.327329][ T9999] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1476: invalid indirect mapped block 234881024 (level 0) [ 292.360621][T10005] fs-verity: sha512 using implementation "sha512-avx2" [ 292.408619][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.430447][T10009] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.1480: iget: bad i_size value: -67835469387268086 [ 292.445408][ T1191] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 292.476548][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.531871][T10009] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1480: couldn't read orphan inode 15 (err -117) [ 292.581862][T10009] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.614461][T10009] ext2 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.727326][ T1191] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.738143][ T1191] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 292.798222][ T1191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.835979][ T1191] usb 7-1: config 0 descriptor?? [ 292.851691][ T5853] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 292.878426][ T1191] pwc: Askey VC010 type 2 USB webcam detected. [ 293.850139][ T1191] pwc: send_video_command error -71 [ 293.856560][ T1191] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 293.868503][ T1191] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 293.885039][ T1191] usb 7-1: USB disconnect, device number 10 [ 294.203056][ T1191] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 294.234364][T10043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1493'. [ 294.262797][T10041] tipc: Started in network mode [ 294.268480][T10041] tipc: Node identity 1, cluster identity 4711 [ 294.295759][T10041] tipc: Node number set to 1 [ 294.379125][ T1191] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.405355][T10029] loop4: detected capacity change from 0 to 32768 [ 294.410052][ T1191] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 294.489203][ T1191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.566609][ T1191] usb 7-1: config 0 descriptor?? [ 294.592591][T10029] (syz.4.1486,10029,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 294.626055][ T1191] pwc: Askey VC010 type 2 USB webcam detected. [ 294.648781][ T8] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 294.711406][T10029] (syz.4.1486,10029,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 296.209812][T10059] openvswitch: netlink: Actions may not be safe on all matching packets [ 296.393061][ T1191] pwc: send_video_command error -71 [ 296.398315][ T1191] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 296.406023][ T1191] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 296.454469][T10064] loop3: detected capacity change from 0 to 256 [ 296.495063][ T1191] usb 7-1: USB disconnect, device number 11 [ 296.526350][T10029] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 296.528694][T10029] (syz.4.1486,10029,0):ocfs2_initialize_super:2281 ERROR: status = -12 [ 296.549717][T10064] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x1380c30a, utbl_chksum : 0xe619d30d) [ 296.552798][ T8] usb 3-1: config 0 has no interfaces? [ 296.567456][ T8] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 296.576621][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.600664][ T8] usb 3-1: config 0 descriptor?? [ 296.615538][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'. [ 296.634120][T10029] (syz.4.1486,10029,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 296.838889][T10074] loop6: detected capacity change from 0 to 65 [ 296.856002][T10075] loop3: detected capacity change from 0 to 128 [ 296.901008][T10074] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway [ 296.925498][T10075] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.994456][T10074] BFS-fs: bfs_fill_super(): Last block not available on loop6: 262208 [ 297.073590][T10075] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.125431][T10083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1506'. [ 297.340960][T10085] xt_CT: No such helper "pptp" [ 297.354656][T10090] netlink: 'syz.4.1511': attribute type 10 has an invalid length. [ 297.356502][ T5837] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.145247][ T5904] usb 3-1: USB disconnect, device number 39 [ 298.281192][T10090] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 299.016752][T10109] openvswitch: netlink: Actions may not be safe on all matching packets [ 299.524232][ T5841] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 299.603407][ T5904] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 299.744757][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.841079][ T5841] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 299.973435][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 300.202944][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.616394][ T5841] usb 2-1: config 0 descriptor?? [ 300.625932][ T5841] pwc: Askey VC010 type 2 USB webcam detected. [ 300.905373][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.173581][ T5904] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 301.470248][ T5841] pwc: send_video_command error -71 [ 301.512269][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.530511][ T5841] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 302.392046][ T5904] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 302.401515][ T5841] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 302.412086][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.459249][ T5841] usb 2-1: USB disconnect, device number 35 [ 302.481483][ T5904] usb 3-1: config 0 descriptor?? [ 302.487576][ T5904] usb 3-1: can't set config #0, error -71 [ 302.501786][ T5904] usb 3-1: USB disconnect, device number 40 [ 302.780260][ T5960] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 303.152476][T10161] loop2: detected capacity change from 0 to 4096 [ 303.159943][T10162] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 303.168771][T10161] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 303.186036][ T5960] usb 5-1: config 0 has no interfaces? [ 303.191956][ T5960] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 303.201862][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.215664][ T5960] usb 5-1: config 0 descriptor?? [ 303.273778][ T5904] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 303.538626][T10139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.790731][ T5904] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.803670][T10139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.937643][ T1191] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 303.956358][ T1191] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 303.969599][ T5904] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 304.151761][ T1191] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 304.171336][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.198372][T10167] random: crng reseeded on system resumption [ 304.425386][ T5904] usb 7-1: config 0 descriptor?? [ 304.577719][ T5904] pwc: Askey VC010 type 2 USB webcam detected. [ 305.231326][ T5904] pwc: send_video_command error -71 [ 305.238137][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1541'. [ 305.253072][ T5904] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 305.274496][ T5904] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 305.345866][ T5904] usb 7-1: USB disconnect, device number 12 [ 305.367758][ T46] usb 5-1: USB disconnect, device number 32 [ 305.616026][T10185] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 305.633217][ T5841] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 305.653175][T10185] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 305.683148][ T5904] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 305.813414][ T5841] usb 2-1: Using ep0 maxpacket: 8 [ 305.889389][ T5904] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.911708][ T5841] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 305.932928][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.942123][ T5841] usb 2-1: Product: syz [ 305.946532][ T5904] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 305.962943][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.971081][ T5841] usb 2-1: Manufacturer: syz [ 305.976027][ T5841] usb 2-1: SerialNumber: syz [ 305.994073][ T5841] usb 2-1: config 0 descriptor?? [ 306.000618][ T5904] usb 7-1: config 0 descriptor?? [ 306.025639][ T5904] pwc: Askey VC010 type 2 USB webcam detected. [ 306.226933][ T5841] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 306.398593][ T1191] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 306.407777][ T1191] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 306.454493][ T5904] pwc: recv_control_msg error -32 req 02 val 2b00 [ 306.462332][ T5904] pwc: recv_control_msg error -32 req 02 val 2700 [ 306.491757][ T5904] pwc: recv_control_msg error -32 req 02 val 2c00 [ 306.514206][ T1191] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 306.530619][ T5904] pwc: recv_control_msg error -32 req 04 val 1000 [ 306.586653][ T5904] pwc: recv_control_msg error -32 req 04 val 1300 [ 306.614366][ T5904] pwc: recv_control_msg error -32 req 04 val 1400 [ 306.657004][ T5904] pwc: recv_control_msg error -32 req 02 val 2000 [ 306.682303][ T5904] pwc: recv_control_msg error -32 req 02 val 2100 [ 306.723886][ T5904] pwc: recv_control_msg error -32 req 04 val 1500 [ 306.836526][T10197] loop5: detected capacity change from 0 to 32768 [ 306.845931][T10197] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1550 (10197) [ 306.860456][ T8] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 306.929608][T10208] loop2: detected capacity change from 0 to 512 [ 306.947389][T10208] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 306.967353][ T5904] pwc: recv_control_msg error -71 req 02 val 2400 [ 306.976322][T10197] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.012235][ T5904] pwc: recv_control_msg error -71 req 02 val 2600 [ 307.030191][T10197] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 307.033480][T10208] EXT4-fs (loop2): 1 truncate cleaned up [ 307.046519][T10208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.070986][ T5904] pwc: recv_control_msg error -71 req 02 val 2900 [ 307.078518][ T5904] pwc: recv_control_msg error -71 req 02 val 2800 [ 307.085679][ T5904] pwc: recv_control_msg error -71 req 04 val 1100 [ 307.092386][T10197] BTRFS info (device loop5): using free-space-tree [ 307.103806][ T5904] pwc: recv_control_msg error -71 req 04 val 1200 [ 307.107017][ T8] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 307.111840][ T5904] pwc: Registered as video103. [ 307.125284][ T5904] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input32 [ 307.129273][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.145869][ T5904] usb 7-1: USB disconnect, device number 13 [ 307.224184][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1556'. [ 307.253371][ T8] usb 5-1: config 0 has no interface number 0 [ 307.314854][ T8] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 307.326262][ T8] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.339784][ T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 307.349032][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.354958][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.364491][ T8] usb 5-1: config 0 descriptor?? [ 307.376027][ T8] ldusb 5-1:0.55: Interrupt in endpoint not found [ 307.485110][T10231] loop3: detected capacity change from 0 to 512 [ 307.535908][T10231] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 307.612516][T10231] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.1558: iget: bad i_size value: -67835469387268086 [ 307.642008][ T8] usb 5-1: USB disconnect, device number 33 [ 307.669210][T10231] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1558: couldn't read orphan inode 15 (err -117) [ 307.739523][T10231] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.923479][T10231] ext2 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.058527][ T5841] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 308.077750][ T5841] usb 2-1: USB disconnect, device number 37 [ 308.157936][ T4947] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 308.814853][ T5840] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 308.882786][ T5837] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 309.010131][T10248] loop4: detected capacity change from 0 to 8 [ 309.103734][T10248] Major/Minor mismatch, trying to mount newer 4.6 filesystem [ 309.134741][T10248] Please update your kernel [ 309.249435][T10247] loop6: detected capacity change from 0 to 32768 [ 309.684981][T10258] loop4: detected capacity change from 0 to 512 [ 309.700337][ T9] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 309.760525][T10258] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 309.789330][ T5960] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 309.800382][ T5960] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 309.874922][T10258] EXT4-fs (loop4): 1 truncate cleaned up [ 309.902171][T10258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.110039][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.141719][ T5960] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 310.163676][ T9] usb 3-1: config 0 has no interfaces? [ 310.184341][ T9] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 310.222939][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.286540][ T9] usb 3-1: config 0 descriptor?? [ 310.423018][ T5853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.506616][T10270] loop6: detected capacity change from 0 to 2048 [ 310.520369][T10270] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 310.563251][T10270] EXT4-fs (loop6): group descriptors corrupted! [ 310.630412][ T5841] usb 3-1: USB disconnect, device number 41 [ 310.683095][ T5960] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 310.829407][T10280] loop6: detected capacity change from 0 to 512 [ 310.873973][ T5960] usb 6-1: Using ep0 maxpacket: 16 [ 310.879654][T10280] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 310.901817][ T5960] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.912675][ T5960] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.923830][ T5960] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.933766][ T5960] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 310.947231][ T5960] usb 6-1: config 0 interface 0 has no altsetting 0 [ 310.955282][ T5960] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 310.965239][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.967344][T10280] EXT4-fs error (device loop6): ext4_orphan_get:1388: inode #15: comm syz.6.1577: iget: bad i_size value: -67835469387268086 [ 310.995614][ T5960] usb 6-1: config 0 descriptor?? [ 311.020282][T10280] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.1577: couldn't read orphan inode 15 (err -117) [ 311.052618][T10280] EXT4-fs (loop6): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.083262][ T9] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 311.091396][T10280] ext2 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.173240][ T5841] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 311.248463][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 311.257162][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.294037][ T9] usb 2-1: config 0 has no interface number 0 [ 311.309526][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 311.326113][ T8743] EXT4-fs (loop6): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 311.336221][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.394924][ T5841] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.410721][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 311.420234][ T5841] usb 3-1: config 0 has no interfaces? [ 311.443888][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.453156][ T5841] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 311.462235][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.481836][ T9] usb 2-1: config 0 descriptor?? [ 311.494279][ T5960] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5010.0015/input/input33 [ 311.526738][ T9] ldusb 2-1:0.55: Interrupt in endpoint not found [ 311.526863][ T5841] usb 3-1: config 0 descriptor?? [ 311.609418][ T5960] kye 0003:0458:5010.0015: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 311.658721][ T5960] usb 6-1: USB disconnect, device number 43 [ 311.660675][T10287] loop4: detected capacity change from 0 to 32768 [ 311.673589][T10287] XFS: ikeep mount option is deprecated. [ 311.716751][T10287] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 311.747711][ T5904] usb 2-1: USB disconnect, device number 38 [ 311.775711][T10287] XFS (loop4): Ending clean mount [ 311.784471][T10287] XFS (loop4): Quotacheck needed: Please wait. [ 311.821700][T10287] XFS (loop4): Quotacheck: Done. [ 311.833594][ T5841] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 311.890071][ T5853] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 312.034351][ T5841] usb 4-1: config 0 has no interfaces? [ 312.051988][ T5841] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 312.062453][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.076945][ T5841] usb 4-1: config 0 descriptor?? [ 312.229705][T10306] loop4: detected capacity change from 0 to 512 [ 312.240471][T10306] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 312.296381][T10293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.306737][T10293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.393473][T10306] EXT4-fs (loop4): 1 truncate cleaned up [ 312.429369][T10306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.589063][ T1191] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 312.610915][ T1191] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 312.653802][ T5853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.676649][ T1191] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 312.884126][ T1191] usb 3-1: USB disconnect, device number 42 [ 312.978614][ T5960] usb 4-1: USB disconnect, device number 50 [ 312.984050][T10320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 313.256770][T10333] loop1: detected capacity change from 0 to 512 [ 313.293672][T10320] bond1: entered promiscuous mode [ 313.299027][T10320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.316111][T10333] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 313.403824][T10333] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.1594: iget: bad i_size value: -67835469387268086 [ 313.528942][T10333] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1594: couldn't read orphan inode 15 (err -117) [ 313.637177][T10333] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.661207][T10333] ext2 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.932394][ T5857] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 314.084910][T10338] loop6: detected capacity change from 0 to 32768 [ 314.199083][T10327] loop3: detected capacity change from 0 to 32768 [ 314.207294][T10327] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1592 (10327) [ 314.327203][T10340] loop5: detected capacity change from 0 to 32768 [ 314.335168][T10340] XFS: ikeep mount option is deprecated. [ 314.341223][T10327] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 314.343005][ T9] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 314.379165][T10327] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 314.394679][T10327] BTRFS info (device loop3): using free-space-tree [ 314.497765][T10338] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 314.521516][T10340] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 314.547393][T10338] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 314.554051][ T5960] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 314.604975][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 314.613293][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.624913][ T9] usb 5-1: config 0 has no interface number 0 [ 314.631036][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 314.652463][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.653951][ T5841] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 314.674715][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 314.710363][T10340] XFS (loop5): Ending clean mount [ 314.712947][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.728693][T10340] XFS (loop5): Quotacheck needed: Please wait. [ 314.743062][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 314.775204][ T5960] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.803303][ T5960] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.852909][ T5960] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.864320][ T9] usb 5-1: config 0 descriptor?? [ 314.865339][T10340] XFS (loop5): Quotacheck: Done. [ 314.878449][T10338] bcachefs: bch2_fs_get_tree() error: EINVAL [ 314.881444][ T9] ldusb 5-1:0.55: Interrupt in endpoint not found [ 314.894052][ T5841] usb 3-1: config 0 has no interfaces? [ 314.894216][ T5960] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 314.900155][ T5837] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 314.923056][ T5841] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 314.932375][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.960911][ T5841] usb 3-1: config 0 descriptor?? [ 315.020318][ T5960] usb 2-1: config 0 interface 0 has no altsetting 0 [ 315.044919][ T5960] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 315.055007][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.067316][ T5960] usb 2-1: config 0 descriptor?? [ 315.147414][ T9] usb 5-1: USB disconnect, device number 34 [ 315.149082][ T5840] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 315.202108][T10359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.221331][T10359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.293884][T10338] loop6: detected capacity change from 0 to 22 [ 315.301499][T10338] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 315.354668][T10338] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 315.531846][ T5960] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5010.0017/input/input34 [ 315.650397][ T5960] kye 0003:0458:5010.0017: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 315.660173][T10393] loop3: detected capacity change from 0 to 256 [ 315.700569][T10393] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 315.792012][ T5960] usb 2-1: USB disconnect, device number 39 [ 315.942067][ T9] usb 3-1: USB disconnect, device number 43 [ 316.234266][ T1191] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 317.063950][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.066744][T10405] openvswitch: netlink: Actions may not be safe on all matching packets [ 317.070449][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.462123][T10399] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 317.481421][T10399] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 317.714107][T10409] loop2: detected capacity change from 0 to 512 [ 317.775569][T10414] loop4: detected capacity change from 0 to 1024 [ 317.782957][T10414] EXT4-fs: Ignoring removed nomblk_io_submit option [ 317.798210][T10409] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 317.859245][T10416] loop5: detected capacity change from 0 to 512 [ 318.021551][T10409] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.1613: iget: bad i_size value: -67835469387268086 [ 318.076810][T10414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.091917][T10416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.106162][T10409] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1613: couldn't read orphan inode 15 (err -117) [ 318.120359][ T1191] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 318.123028][T10416] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.131039][ T1191] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 318.149984][ T1191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.188383][T10409] EXT4-fs (loop2): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.203351][T10409] ext2 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.269371][ T1191] usb 7-1: config 0 descriptor?? [ 318.386367][ T5853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.501136][ T5851] EXT4-fs (loop2): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 318.613964][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.683120][ T5854] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 318.795690][T10430] loop4: detected capacity change from 0 to 32768 [ 318.796261][T10421] loop1: detected capacity change from 0 to 32768 [ 318.814380][T10421] XFS: ikeep mount option is deprecated. [ 318.953441][T10421] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 319.002832][T10430] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 319.028323][T10430] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 319.050224][T10421] XFS (loop1): Ending clean mount [ 319.082005][T10421] XFS (loop1): Quotacheck needed: Please wait. [ 319.353261][ T5904] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 319.474283][T10430] bcachefs: bch2_fs_get_tree() error: EINVAL [ 319.515199][ T5904] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 319.545378][ T5904] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.568617][ T5904] usb 6-1: config 0 has no interface number 0 [ 319.586190][ T5904] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 319.603019][ T5841] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 319.633112][ T5904] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 319.642345][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.686965][ T1191] usb 7-1: USB disconnect, device number 14 [ 319.693848][T10421] XFS (loop1): Quotacheck: Done. [ 319.700309][ T5904] usb 6-1: config 0 descriptor?? [ 319.708932][ T5904] ldusb 6-1:0.55: Interrupt in endpoint not found [ 319.839352][ T5841] usb 3-1: config 0 has no interfaces? [ 319.845733][ T5841] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 319.855112][ T5857] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 319.874800][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.935987][T10430] loop4: detected capacity change from 0 to 22 [ 319.944771][ T5841] usb 3-1: config 0 descriptor?? [ 319.966632][T10430] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 319.988988][T10430] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 319.998984][ T5841] usb 6-1: USB disconnect, device number 44 [ 320.079022][ T5960] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 320.184141][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.198965][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.239006][T10461] loop1: detected capacity change from 0 to 2048 [ 320.268611][T10461] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.295720][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 320.298040][ T1191] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 320.308833][ T5960] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 320.322945][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 320.364255][ T5960] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 320.375363][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.384826][ T5960] usb 4-1: Product: syz [ 320.389128][ T5960] usb 4-1: Manufacturer: syz [ 320.394099][ T5960] usb 4-1: SerialNumber: syz [ 320.400841][ T5960] usb 4-1: config 0 descriptor?? [ 320.416834][ T5960] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 320.431833][ T5960] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 320.463746][ T1191] usb 7-1: Using ep0 maxpacket: 16 [ 320.475732][ T1191] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.504356][ T1191] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.545790][ T1191] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 320.593470][ T1191] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 320.680440][ T1191] usb 7-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 320.782355][ T1191] usb 7-1: config 0 interface 0 has no altsetting 0 [ 320.815318][ T8] usb 3-1: USB disconnect, device number 44 [ 320.822042][ T1191] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 320.836314][ T1191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.077182][T10472] openvswitch: netlink: Actions may not be safe on all matching packets [ 321.205490][ T1191] usb 7-1: config 0 descriptor?? [ 321.482391][T10476] loop2: detected capacity change from 0 to 512 [ 321.553055][T10476] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 321.641243][T10476] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.1632: iget: bad i_size value: -67835469387268086 [ 321.686586][T10476] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1632: couldn't read orphan inode 15 (err -117) [ 321.739215][T10476] EXT4-fs (loop2): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.768898][T10476] ext2 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.884983][ T5960] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 322.621789][ T5960] em28xx 4-1:0.0: Config register raw data: 0x56 [ 322.677099][ T1191] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5010.0018/input/input35 [ 322.697254][ T5851] EXT4-fs (loop2): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 322.722196][ T5960] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 322.738475][ T5960] em28xx 4-1:0.0: No AC97 audio processor [ 322.946389][ T1191] kye 0003:0458:5010.0018: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 322.999185][ T1191] usb 7-1: USB disconnect, device number 15 [ 323.285718][ T5841] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 323.470646][ T5841] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.500499][ T5841] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 323.578116][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.590614][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1639'. [ 323.618070][ T5841] usb 3-1: config 0 descriptor?? [ 323.762601][T10508] loop6: detected capacity change from 0 to 1024 [ 323.790192][T10508] EXT4-fs: Ignoring removed orlov option [ 323.814765][T10508] EXT4-fs (loop6): Test dummy encryption mode enabled [ 323.839455][T10484] loop1: detected capacity change from 0 to 32768 [ 323.848859][T10508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.907340][T10484] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 323.953894][ T8] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 324.035700][ T8743] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.056042][T10495] loop4: detected capacity change from 0 to 32768 [ 324.066297][T10495] XFS: ikeep mount option is deprecated. [ 324.126687][T10495] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 324.127484][ T8] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 324.146765][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.158242][ T8] usb 6-1: config 0 has no interface number 0 [ 324.165953][ T8] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.177027][T10484] XFS (loop1): Ending clean mount [ 324.182983][ T8] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 324.192200][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.204421][ T8] usb 6-1: config 0 descriptor?? [ 324.245001][ T5841] usb 4-1: USB disconnect, device number 51 [ 324.245398][ T5857] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 324.251881][ T5841] em28xx 4-1:0.0: Disconnecting em28xx [ 324.269854][ T8] ldusb 6-1:0.55: Interrupt in endpoint not found [ 324.280124][ T5841] em28xx 4-1:0.0: Freeing device [ 324.348826][T10495] XFS (loop4): Ending clean mount [ 324.366402][T10495] XFS (loop4): Quotacheck needed: Please wait. [ 324.488870][ T5841] usb 6-1: USB disconnect, device number 45 [ 324.499091][T10495] XFS (loop4): Quotacheck: Done. [ 325.502324][ T5853] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 325.592606][T10542] loop3: detected capacity change from 0 to 512 [ 325.609164][T10542] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 325.657390][T10542] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.1648: iget: bad i_size value: -67835469387268086 [ 325.688337][T10542] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1648: couldn't read orphan inode 15 (err -117) [ 325.735671][T10542] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.749459][T10542] ext2 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.868563][ T8] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 325.948889][ T5837] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 326.045191][ T8] usb 2-1: config 0 has no interfaces? [ 326.050851][ T5841] usb 3-1: USB disconnect, device number 45 [ 326.059227][ T8] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 326.129370][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.184620][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1653'. [ 326.203031][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1653'. [ 326.222986][T10557] netlink: 'syz.2.1653': attribute type 6 has an invalid length. [ 326.370861][T10543] loop6: detected capacity change from 0 to 40427 [ 326.388746][ T8] usb 2-1: config 0 descriptor?? [ 326.402282][T10543] F2FS-fs (loop6): invalid crc value [ 326.462028][T10543] F2FS-fs (loop6): Found nat_bits in checkpoint [ 326.606216][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.633393][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.693657][T10543] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 326.758299][T10568] Cannot find set identified by id 0 to match [ 327.419733][T10574] loop4: detected capacity change from 0 to 2048 [ 327.478228][T10574] EXT4-fs: Ignoring removed mblk_io_submit option [ 327.506766][ T5841] usb 2-1: USB disconnect, device number 40 [ 327.611105][ T46] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 327.721850][ T8743] syz-executor: attempt to access beyond end of device [ 327.721850][ T8743] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 327.741850][T10574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.786782][ T8743] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 327.814581][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.825582][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 327.843240][ T46] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.853821][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.870501][ T46] usb 3-1: config 0 descriptor?? [ 327.885625][ T46] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 327.945604][T10583] loop1: detected capacity change from 0 to 4096 [ 328.897262][T10590] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.924955][ T5853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.095013][T10592] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1664'. [ 329.135589][T10570] loop5: detected capacity change from 0 to 32768 [ 329.167036][T10570] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 329.193143][T10601] loop4: detected capacity change from 0 to 128 [ 329.281100][T10601] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 329.482379][T10609] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 329.518732][T10609] FAT-fs (loop4): Filesystem has been set read-only [ 329.529670][T10570] XFS (loop5): Ending clean mount [ 329.595266][T10609] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 329.709856][ T5840] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 330.062082][T10617] loop6: detected capacity change from 0 to 32768 [ 330.069584][T10617] XFS: attr2 mount option is deprecated. [ 330.179357][T10617] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 330.267801][T10631] loop5: detected capacity change from 0 to 256 [ 330.285712][ T5853] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 330.301367][T10631] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 330.598388][ T8] usb 3-1: USB disconnect, device number 46 [ 330.623223][ T5841] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 330.743381][T10617] XFS (loop6): Ending clean mount [ 330.988734][ T5841] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.286564][ T5841] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 331.333666][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.344064][T10617] XFS (loop6): Quotacheck needed: Please wait. [ 331.392053][ T5841] usb 2-1: config 0 descriptor?? [ 331.436492][T10617] XFS (loop6): Quotacheck: Done. [ 331.594566][T10643] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1677'. [ 331.607778][ T8743] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 331.617362][ T5902] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 332.513661][ T8] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 332.604792][ T5902] usb 5-1: config 0 has no interfaces? [ 332.610508][ T5902] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 332.621334][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.654235][ T5902] usb 5-1: config 0 descriptor?? [ 332.665318][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.676031][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 332.713723][ T8] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 332.743862][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.787606][ T8] usb 3-1: config 0 descriptor?? [ 332.865081][T10633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.895948][T10633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.094518][T10667] loop6: detected capacity change from 0 to 256 [ 333.132115][ T1191] usb 3-1: USB disconnect, device number 47 [ 333.182264][T10653] loop3: detected capacity change from 0 to 32768 [ 333.232014][T10653] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 333.366714][ T46] usb 2-1: USB disconnect, device number 41 [ 333.451943][T10653] XFS (loop3): Ending clean mount [ 333.855039][ T8] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 334.007549][ T1191] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 334.048675][ T5837] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 334.165412][ T5854] Bluetooth: hci6: command 0x0406 tx timeout [ 334.545379][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.612822][ T5902] usb 5-1: USB disconnect, device number 35 [ 334.651027][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 334.681274][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.690546][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.702092][ T8] usb 6-1: config 0 descriptor?? [ 334.741867][ T8] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 334.832009][T10693] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1693'. [ 334.953275][ T5904] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 335.107101][ T5904] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 335.117175][ T5904] usb 2-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 335.129844][ T5904] usb 2-1: Manufacturer: syz [ 335.144740][ T5904] usb 2-1: config 0 descriptor?? [ 335.556294][ T5904] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 335.763027][ T5904] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 335.771757][ T5904] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 335.965079][ T5904] usb 2-1: USB disconnect, device number 42 [ 336.273222][ T5960] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 336.289232][T10713] loop2: detected capacity change from 0 to 32768 [ 336.323097][ T5841] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 336.332422][T10713] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.415389][ T5904] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 336.437278][T10713] XFS (loop2): Ending clean mount [ 336.453053][ T5960] usb 7-1: Using ep0 maxpacket: 16 [ 336.463056][ T5841] usb 4-1: device descriptor read/64, error -71 [ 336.476186][ T5960] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.524805][ T5960] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.543039][ T5960] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.554182][ T5960] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 336.568154][ T5960] usb 7-1: config 0 interface 0 has no altsetting 0 [ 336.575231][ T5960] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 336.575557][ T5904] usb 5-1: config 0 has no interfaces? [ 336.584565][ T5960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.599684][ T5960] usb 7-1: config 0 descriptor?? [ 336.623055][ T5851] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.642377][ T5904] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 336.653270][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.681813][ T5904] usb 5-1: config 0 descriptor?? [ 336.733048][ T5841] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 336.801784][ T5904] usb 6-1: USB disconnect, device number 46 [ 337.005885][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.093533][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.103795][ T5960] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5010.0019/input/input36 [ 337.106461][ T5841] usb 4-1: device descriptor read/64, error -71 [ 337.224347][ T5841] usb usb4-port1: attempt power cycle [ 337.571255][T10739] openvswitch: netlink: Actions may not be safe on all matching packets [ 337.980581][ T5960] kye 0003:0458:5010.0019: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 338.001185][ T5960] usb 7-1: USB disconnect, device number 16 [ 338.033953][T10745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1707'. [ 338.109495][ T5841] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 338.247971][ T5841] usb 4-1: device descriptor read/8, error -71 [ 338.445533][T10760] loop2: detected capacity change from 0 to 512 [ 338.697622][ T5841] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 338.775053][ T5841] usb 4-1: device descriptor read/8, error -71 [ 338.871465][T10760] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 339.067917][T10760] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.1716: iget: bad i_size value: -67835469387268086 [ 339.160302][ T5841] usb usb4-port1: unable to enumerate USB device [ 339.172524][T10760] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1716: couldn't read orphan inode 15 (err -117) [ 339.189725][T10760] EXT4-fs (loop2): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.202824][T10760] ext2 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.272339][ T5841] usb 5-1: USB disconnect, device number 36 [ 339.798865][T10773] loop5: detected capacity change from 0 to 32768 [ 339.945588][T10774] loop3: detected capacity change from 0 to 2048 [ 339.973882][T10774] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.058947][ T5851] EXT4-fs (loop2): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 340.123498][ T46] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 340.655144][T10788] openvswitch: netlink: Actions may not be safe on all matching packets [ 341.144932][T10773] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 341.226449][ T46] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 341.236409][ T46] usb 2-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 341.245249][ T46] usb 2-1: Manufacturer: syz [ 341.252077][ T46] usb 2-1: config 0 descriptor?? [ 341.260802][T10774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.326703][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1727'. [ 341.542560][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.560627][T10773] XFS (loop5): Ending clean mount [ 341.663890][ T46] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 341.740319][ T5840] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 341.752103][T10809] loop3: detected capacity change from 0 to 256 [ 341.769722][T10809] exfat: Deprecated parameter 'namecase' [ 341.793047][ T5960] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 341.815450][T10809] exfat: Deprecated parameter 'namecase' [ 341.864355][ T46] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 341.882586][T10809] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 341.902982][ T46] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 341.984471][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 342.008078][ T5960] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.028444][ T5960] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.047431][ T5960] usb 5-1: config 0 interface 0 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 342.063834][ T5960] usb 5-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 342.068278][ T46] usb 2-1: USB disconnect, device number 43 [ 342.108051][ T5960] usb 5-1: config 0 interface 0 has no altsetting 0 [ 342.118655][ T5960] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 342.119985][T10792] loop2: detected capacity change from 0 to 32768 [ 342.141970][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.167190][ T5960] usb 5-1: config 0 descriptor?? [ 342.257235][T10792] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 342.266586][T10792] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 342.403482][T10792] bcachefs: bch2_fs_get_tree() error: EINVAL [ 342.619240][ T5960] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5010.001A/input/input37 [ 342.646100][T10792] loop2: detected capacity change from 0 to 2048 [ 342.680038][ T5837] exFAT-fs (loop3): invalid start cluster (4278190088) [ 342.736390][ T5960] kye 0003:0458:5010.001A: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 342.762477][T10792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.804025][T10792] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.828644][ T46] usb 5-1: USB disconnect, device number 37 [ 343.877052][T10834] loop6: detected capacity change from 0 to 512 [ 344.416481][T10834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.429816][T10834] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.641179][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.828194][ T8743] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.853632][T10836] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 344.949113][T10844] binder: 10842:10844 unknown command 0 [ 344.955475][T10844] binder: 10842:10844 ioctl c0306201 200001c0 returned -22 [ 345.247485][ T5902] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 345.291351][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'. [ 345.327856][T10857] loop6: detected capacity change from 0 to 8 [ 345.332989][T10851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1743'. [ 345.449624][ T5902] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 345.460797][ T5902] usb 3-1: config 0 has no interface number 0 [ 345.502915][ T5902] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 345.518845][ T5902] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 345.557946][ T5902] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 345.582337][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.601091][ T5902] usb 3-1: Product: syz [ 345.616642][ T5902] usb 3-1: Manufacturer: syz [ 345.642599][ T5902] usb 3-1: SerialNumber: syz [ 345.669392][ T5902] usb 3-1: config 0 descriptor?? [ 345.693505][ T5960] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 345.703661][T10845] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 345.724150][ T5902] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 345.823228][ T46] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 345.875877][ T5960] usb 6-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 345.901350][ T5960] usb 6-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 345.953704][ T5960] usb 6-1: Manufacturer: syz [ 345.962440][ T8] usb 3-1: USB disconnect, device number 49 [ 345.976931][ T5960] usb 6-1: config 0 descriptor?? [ 345.991970][ T8] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 346.002148][ T46] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 346.024293][ T46] usb 4-1: config 0 has no interface number 0 [ 346.030498][ T46] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 346.084034][ T46] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 346.125560][ T46] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 346.151744][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.187047][ T46] usb 4-1: Product: syz [ 346.201023][ T46] usb 4-1: Manufacturer: syz [ 346.216615][ T46] usb 4-1: SerialNumber: syz [ 346.261847][ T46] usb 4-1: config 0 descriptor?? [ 346.287390][T10865] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 346.324053][ T46] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 346.898390][ T5960] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 346.962766][ T5946] usb 4-1: USB disconnect, device number 56 [ 347.001364][ T5946] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 347.193271][ T5960] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 347.203495][ T5960] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 347.215601][T10882] binder: BINDER_SET_CONTEXT_MGR already set [ 347.223027][T10882] binder: 10881:10882 ioctl 4018620d 20000040 returned -16 [ 347.351412][ T5856] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 347.476374][ T5960] usb 6-1: USB disconnect, device number 47 [ 347.484025][T10880] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 347.572971][ T1191] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 347.767176][ T1191] usb 3-1: device descriptor read/64, error -71 [ 347.924387][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'. [ 347.937574][T10898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1762'. [ 348.033081][ T1191] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 348.136144][T10906] loop4: detected capacity change from 0 to 164 [ 348.181227][T10906] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 348.193144][ T1191] usb 3-1: device descriptor read/64, error -71 [ 348.303960][ T1191] usb usb3-port1: attempt power cycle [ 348.448842][T10915] loop1: detected capacity change from 0 to 512 [ 348.463097][T10915] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 348.502950][T10915] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.1770: iget: bad i_size value: -67835469387268086 [ 348.505030][T10917] loop4: detected capacity change from 0 to 256 [ 348.528981][T10915] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1770: couldn't read orphan inode 15 (err -117) [ 348.567060][T10917] exfat: Deprecated parameter 'namecase' [ 348.585689][T10915] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.604987][T10917] exfat: Deprecated parameter 'namecase' [ 348.629781][T10917] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 348.654131][T10915] ext2 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.703476][ T1191] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 348.708370][T10920] binder: BINDER_SET_CONTEXT_MGR already set [ 348.717515][T10920] binder: 10919:10920 ioctl 4018620d 20000040 returned -16 [ 348.723795][ T1191] usb 3-1: device descriptor read/8, error -71 [ 348.778355][T10923] tipc: Started in network mode [ 348.794640][T10923] tipc: Node identity 1, cluster identity 4711 [ 348.812112][T10923] tipc: Node number set to 1 [ 348.819619][ T5857] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 348.867450][ T5853] exFAT-fs (loop4): invalid start cluster (4278190088) [ 348.973191][ T1191] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 349.005752][ T1191] usb 3-1: device descriptor read/8, error -71 [ 349.128209][ T1191] usb usb3-port1: unable to enumerate USB device [ 349.210384][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1778'. [ 349.226652][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1778'. [ 349.373524][T10941] loop6: detected capacity change from 0 to 164 [ 349.382781][T10941] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 349.433182][ T5841] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 349.581212][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1783'. [ 349.586335][ T5841] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 349.606070][ T5841] usb 5-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 349.618329][ T5841] usb 5-1: Manufacturer: syz [ 349.630584][ T5841] usb 5-1: config 0 descriptor?? [ 349.759335][T10949] binder: BINDER_SET_CONTEXT_MGR already set [ 349.766819][T10951] loop1: detected capacity change from 0 to 512 [ 349.769482][T10949] binder: 10948:10949 ioctl 4018620d 20000040 returned -16 [ 349.805111][T10951] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 349.848781][T10951] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.1785: iget: bad i_size value: -67835469387268086 [ 349.877709][T10951] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1785: couldn't read orphan inode 15 (err -117) [ 349.932173][T10951] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.953129][T10951] ext2 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.032614][ T5857] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 350.073033][ T5841] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 350.197677][T10959] loop1: detected capacity change from 0 to 256 [ 350.228072][T10959] exfat: Deprecated parameter 'namecase' [ 350.308823][T10959] exfat: Deprecated parameter 'namecase' [ 350.425951][T10959] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 350.451718][ T5841] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 350.461063][ T5841] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 350.851719][ T5841] usb 5-1: USB disconnect, device number 38 [ 351.313352][ T5856] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 351.352364][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1792'. [ 351.363916][ T5857] exFAT-fs (loop1): invalid start cluster (4278190088) [ 351.395536][T10968] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1792'. [ 351.575451][T10977] loop2: detected capacity change from 0 to 164 [ 351.637639][T10977] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 351.699179][T10977] overlayfs: missing 'lowerdir' [ 351.700269][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1796'. [ 351.969739][T10988] loop2: detected capacity change from 0 to 512 [ 352.016370][T10988] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 352.061614][T10988] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.1799: iget: bad i_size value: -67835469387268086 [ 352.100530][T10988] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1799: couldn't read orphan inode 15 (err -117) [ 352.136270][T10988] EXT4-fs (loop2): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.159824][T10988] ext2 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.243112][ T5841] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 352.313406][ T1191] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 352.373094][ T5841] usb 5-1: device descriptor read/64, error -71 [ 352.389748][ T5851] EXT4-fs (loop2): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 352.453190][ T1191] usb 6-1: device descriptor read/64, error -71 [ 352.699976][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1807'. [ 352.715410][T11006] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1807'. [ 353.249182][ T5841] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 353.657688][ T1191] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 353.685972][T11018] loop1: detected capacity change from 0 to 8 [ 353.698896][T11015] loop3: detected capacity change from 0 to 164 [ 353.734017][T11015] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 353.753051][ T5841] usb 5-1: device descriptor read/64, error -71 [ 353.776065][T11015] overlayfs: missing 'lowerdir' [ 353.833367][ T1191] usb 6-1: device descriptor read/64, error -71 [ 353.872990][ T5946] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 353.885391][ T5841] usb usb5-port1: attempt power cycle [ 353.944043][ T1191] usb usb6-port1: attempt power cycle [ 353.982601][T11026] loop3: detected capacity change from 0 to 512 [ 354.009085][T11026] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 354.057363][ T5946] usb 7-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 354.069557][ T5946] usb 7-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 354.085836][ T5946] usb 7-1: Manufacturer: syz [ 354.091811][T11026] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.1816: iget: bad i_size value: -67835469387268086 [ 354.115678][T11026] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1816: couldn't read orphan inode 15 (err -117) [ 354.129133][ T5946] usb 7-1: config 0 descriptor?? [ 354.171719][T11026] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.202236][T11026] ext2 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.254963][ T5841] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 354.284739][ T5841] usb 5-1: device descriptor read/8, error -71 [ 354.293240][ T1191] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 354.310662][ T5837] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 354.333126][ T1191] usb 6-1: device descriptor read/8, error -71 [ 354.495620][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 354.505102][T11038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1820'. [ 354.542964][ T5841] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 354.565893][ T5946] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 354.583751][ T1191] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 354.592499][ T5841] usb 5-1: device descriptor read/8, error -71 [ 354.633874][ T1191] usb 6-1: device descriptor read/8, error -71 [ 354.713142][ T5841] usb usb5-port1: unable to enumerate USB device [ 354.723211][ T5960] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 354.743212][ T1191] usb usb6-port1: unable to enumerate USB device [ 354.773326][ T5946] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 354.790743][ T5946] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -121 [ 354.915125][ T5960] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.939755][ T5960] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 354.959589][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.976595][ T5841] usb 7-1: USB disconnect, device number 17 [ 355.020336][ T5960] usb 4-1: config 0 descriptor?? [ 355.049851][ T5960] pwc: Askey VC010 type 2 USB webcam detected. [ 355.158451][ T5856] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 355.183450][T11050] loop2: detected capacity change from 0 to 8 [ 355.262675][ T5960] pwc: send_video_command error -71 [ 355.268227][ T5960] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 355.277573][ T5960] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 355.289340][ T5960] usb 4-1: USB disconnect, device number 57 [ 355.594714][ T5902] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 355.717495][T11056] loop6: detected capacity change from 0 to 164 [ 355.752750][T11056] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 355.783030][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 355.791981][ T5902] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 355.821854][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.836446][T11056] overlayfs: missing 'lowerdir' [ 355.852924][ T5902] usb 3-1: Product: syz [ 355.857126][ T5902] usb 3-1: Manufacturer: syz [ 355.861832][ T5902] usb 3-1: SerialNumber: syz [ 355.955124][ T5902] usb 3-1: config 0 descriptor?? [ 356.201202][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1833'. [ 356.210874][T11065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1833'. [ 356.278274][T11066] loop4: detected capacity change from 0 to 512 [ 356.343654][ T5904] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 356.351462][ T5902] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 356.362071][T11066] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 356.449557][T11066] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.1832: iget: bad i_size value: -67835469387268086 [ 356.480936][T11066] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1832: couldn't read orphan inode 15 (err -117) [ 356.505480][T11066] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.529493][T11066] ext2 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.563487][ T5904] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 356.572410][ T5904] usb 6-1: config 0 has no interface number 0 [ 356.578852][ T5904] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 356.606387][ T5904] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 356.633095][ T5841] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 356.645522][ T5904] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 356.657118][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.667679][ T5904] usb 6-1: Product: syz [ 356.671883][ T5904] usb 6-1: Manufacturer: syz [ 356.682786][ T5904] usb 6-1: SerialNumber: syz [ 356.696959][ T5853] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 356.699377][ T5904] usb 6-1: config 0 descriptor?? [ 356.748986][T11061] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 356.777897][ T5904] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 356.803730][ T5841] usb 4-1: no configurations [ 356.809005][ T5841] usb 4-1: can't read configurations, error -22 [ 356.853582][ T8] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 356.994903][ T5960] usb 6-1: USB disconnect, device number 52 [ 357.024149][ T5960] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 357.067406][ T1191] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 357.068285][ T8] usb 7-1: device descriptor read/64, error -71 [ 357.133070][ T5841] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 357.377062][T11081] openvswitch: netlink: Actions may not be safe on all matching packets [ 357.422127][ T1191] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 357.488604][ T1191] usb 2-1: config 0 has no interface number 0 [ 357.510280][ T5841] usb 4-1: no configurations [ 357.590901][ T5841] usb 4-1: can't read configurations, error -22 [ 357.653069][ T1191] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 357.676292][ T30] INFO: task syz-executor:5839 blocked for more than 143 seconds. [ 357.686895][ T30] Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 357.713087][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.722989][ T5841] usb usb4-port1: attempt power cycle [ 357.742503][ T1191] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 357.763197][ T30] task:syz-executor state:D stack:20192 pid:5839 tgid:5839 ppid:1 flags:0x00004004 [ 357.792725][ T30] Call Trace: [ 357.815401][ T1191] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 357.834146][ T30] [ 357.842969][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.861640][ T30] __schedule+0x184f/0x4c30 [ 357.869484][ T30] ? __pfx___schedule+0x10/0x10 [ 357.877138][ T1191] usb 2-1: Product: syz [ 357.887402][ T30] ? __pfx_lock_release+0x10/0x10 [ 357.896010][ T1191] usb 2-1: Manufacturer: syz [ 357.907113][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 357.915625][ T1191] usb 2-1: SerialNumber: syz [ 357.937788][ T30] ? __pfx___bch2_print+0x10/0x10 [ 357.940446][ T1191] usb 2-1: config 0 descriptor?? [ 357.949356][ T30] ? schedule+0x90/0x320 [ 357.953907][ T30] schedule+0x14b/0x320 [ 357.959513][ T30] bch2_fs_read_only+0xa86/0x1200 [ 357.963289][T11077] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 357.965469][ T30] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 357.977380][ T30] ? __bch2_print+0x17a/0x220 [ 357.982778][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 357.989384][ T1191] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 357.990666][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.004196][ T30] ? down_write+0x18c/0x220 [ 358.009313][ T30] ? __pfx_down_write+0x10/0x10 [ 358.025978][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.046294][ T30] ? hook_sb_delete+0xaa0/0xbd0 [ 358.051224][ T30] __bch2_fs_stop+0x105/0x5c0 [ 358.056456][ T30] ? __pfx___bch2_fs_stop+0x10/0x10 [ 358.066698][ T30] ? __pfx_evict_inodes+0x10/0x10 [ 358.071849][ T30] ? bch2_sync_fs+0x110/0x300 [ 358.073148][ T8] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 358.078295][ T30] ? __pfx_bch2_put_super+0x10/0x10 [ 358.090793][ T30] generic_shutdown_super+0x13b/0x2d0 [ 358.096430][ T5841] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 358.104544][ T30] bch2_kill_sb+0x41/0x50 [ 358.109139][ T30] deactivate_locked_super+0xc6/0x130 [ 358.117475][ T30] cleanup_mnt+0x41f/0x4b0 [ 358.121963][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.128008][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 358.133415][ T30] task_work_run+0x251/0x310 [ 358.138116][ T30] ? __pfx_task_work_run+0x10/0x10 [ 358.143635][ T30] ? __x64_sys_umount+0x123/0x170 [ 358.149265][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 358.155380][ T5841] usb 4-1: no configurations [ 358.161244][ T5841] usb 4-1: can't read configurations, error -22 [ 358.168560][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 358.174426][ T30] do_syscall_64+0x100/0x230 [ 358.179167][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.185383][ T30] RIP: 0033:0x7f174df7fa47 [ 358.189906][ T30] RSP: 002b:00007ffc2def8e78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 358.198543][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f174df7fa47 [ 358.210298][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2def8f30 [ 358.218484][ T30] RBP: 00007ffc2def8f30 R08: 0000000000000000 R09: 0000000000000000 [ 358.223196][ T8] usb 7-1: device descriptor read/64, error -71 [ 358.226820][ T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc2def9fb0 [ 358.249724][ T30] R13: 00007f174dff123c R14: 000000000002ebf6 R15: 00007ffc2def9ff0 [ 358.257902][ T30] [ 358.266069][ T30] INFO: task kworker/0:5:5945 blocked for more than 143 seconds. [ 358.274792][ T30] Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 358.282515][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.295420][ T30] task:kworker/0:5 state:D stack:17008 pid:5945 tgid:5945 ppid:2 flags:0x00004000 [ 358.305999][ T5841] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 358.312999][ T30] Workqueue: bcachefs_write_ref bch2_delete_dead_snapshots_work (bcachefs-delete-dead-snapshots/) [ 358.326139][ T30] Call Trace: [ 358.329555][ T30] [ 358.332639][ T30] __schedule+0x184f/0x4c30 [ 358.334920][ T5841] usb 4-1: no configurations [ 358.337579][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.341950][ T5841] usb 4-1: can't read configurations, error -22 [ 358.353241][ T8] usb usb7-port1: attempt power cycle [ 358.362392][ T30] ? __pfx___schedule+0x10/0x10 [ 358.367822][ T5841] usb usb4-port1: unable to enumerate USB device [ 358.376520][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 358.382634][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.388197][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.394195][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.399873][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.405695][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 358.411234][ T30] ? schedule+0x90/0x320 [ 358.415629][ T30] schedule+0x14b/0x320 [ 358.420054][ T30] schedule_timeout+0x1be/0x310 [ 358.428330][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 358.439372][ T30] ? lock_release+0xbf/0xa30 [ 358.444174][ T30] ? __pfx_process_timeout+0x10/0x10 [ 358.450138][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.458932][ T5902] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 358.474086][ T5902] usb 3-1: USB disconnect, device number 54 [ 358.493061][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.498849][ T30] ? closure_put_after_sub+0x1b0/0x330 [ 358.511603][ T30] __closure_sync_timeout+0x2d8/0x450 [ 358.517373][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.522825][ T30] ? __closure_sync_timeout+0x164/0x450 [ 358.529270][ T30] ? __pfx___closure_sync_timeout+0x10/0x10 [ 358.535490][ T30] ? btree_node_unlock+0x13c/0x270 [ 358.540669][ T30] __bch2_wait_on_allocator+0x11a/0x250 [ 358.546660][ T30] bch2_btree_update_start+0x11a2/0x14e0 [ 358.552351][ T30] ? bch2_btree_split_leaf+0x123/0x840 [ 358.558431][ T30] ? __pfx_bch2_btree_update_start+0x10/0x10 [ 358.565024][ T30] ? bch2_delete_dead_snapshots+0x1d31/0x5ae0 [ 358.574683][ T30] ? run_btree_triggers+0x30f/0x1270 [ 358.580208][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.586046][ T30] ? __pfx_closure_sync_fn+0x10/0x10 [ 358.591614][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.597511][ T30] ? __do_six_trylock+0x832/0x9f0 [ 358.602746][ T30] bch2_btree_split_leaf+0x123/0x840 [ 358.609898][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.615708][ T30] bch2_trans_commit_error+0x212/0x1390 [ 358.621491][ T30] ? bch2_delete_dead_snapshots+0x19b6/0x5ae0 [ 358.627749][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.634681][ T30] ? six_unlock_ip+0x2ce/0x3e0 [ 358.639530][ T30] ? bch2_trans_unlock_write+0x892/0xce0 [ 358.646047][ T30] ? __pfx_bch2_trans_commit_error+0x10/0x10 [ 358.652160][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.657981][ T30] ? bch2_btree_path_verify_locks+0x633/0x720 [ 358.664463][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.670178][ T30] ? bch2_trans_verify_locks+0x339/0x3c0 [ 358.677360][ T30] __bch2_trans_commit+0x7ead/0x93c0 [ 358.688121][ T30] ? bch2_snapshot_equiv+0x1f/0x2c0 [ 358.693647][ T8] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 358.710455][ T30] ? __pfx___bch2_trans_commit+0x10/0x10 [ 358.717176][ T30] ? bch2_btree_delete_at+0x17c/0x230 [ 358.722584][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.732885][ T30] ? bch2_btree_delete_at+0x17c/0x230 [ 358.738312][ T30] bch2_delete_dead_snapshots+0x19b6/0x5ae0 [ 358.744792][ T30] ? bch2_delete_dead_snapshots+0x2a5/0x5ae0 [ 358.751457][ T8] usb 7-1: device descriptor read/8, error -71 [ 358.757718][ T30] ? __pfx_bch2_delete_dead_snapshots+0x10/0x10 [ 358.764084][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.769963][ T30] ? preempt_count_add+0x93/0x190 [ 358.776488][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.782164][ T30] ? unwind_next_frame+0x193b/0x22d0 [ 358.787813][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 358.793212][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 358.799422][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.805211][ T30] ? arch_stack_walk+0x11c/0x150 [ 358.810402][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 358.818548][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.824440][ T30] ? stack_trace_save+0x118/0x1d0 [ 358.829512][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 358.835127][ T30] ? check_noncircular+0x259/0x4a0 [ 358.840473][ T30] ? __pfx_lockdep_unlock+0x10/0x10 [ 358.846052][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.851732][ T30] ? validate_chain+0x15c0/0x5920 [ 358.857300][ T30] ? bch2_delete_dead_snapshots+0x2a5/0x5ae0 [ 358.864450][ T30] ? __pfx_validate_chain+0x10/0x10 [ 358.869877][ T30] ? bch2_delete_dead_snapshots+0x2a5/0x5ae0 [ 358.877548][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 358.883294][ T30] ? bch2_delete_dead_snapshots+0x2a5/0x5ae0 [ 358.889388][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.895473][ T30] ? format_decode+0xc5f/0x1bb0 [ 358.900802][ T30] ? bch2_delete_dead_snapshots+0x16dc/0x5ae0 [ 358.907410][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.914513][ T30] ? vsnprintf+0x1ccd/0x1da0 [ 358.919240][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.925562][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 358.930449][ T30] ? lock_acquire+0x264/0x550 [ 358.936262][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.942060][ T30] ? set_worker_desc+0x15d/0x1d0 [ 358.947612][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 358.952769][ T30] ? process_scheduled_works+0xa05/0x1850 [ 358.967303][ T30] ? __pfx_set_worker_desc+0x10/0x10 [ 358.972643][ T30] ? process_scheduled_works+0x976/0x1850 [ 358.979823][ T30] bch2_delete_dead_snapshots_work+0x34/0x40 [ 358.986137][ T30] process_scheduled_works+0xa65/0x1850 [ 359.003002][ T8] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 359.012151][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.023208][ T30] ? assign_work+0x364/0x3d0 [ 359.027884][ T30] worker_thread+0x870/0xd30 [ 359.032635][ T30] ? __kthread_parkme+0x169/0x1d0 [ 359.049950][ T8] usb 7-1: device descriptor read/8, error -71 [ 359.064991][ T30] ? __pfx_worker_thread+0x10/0x10 [ 359.070558][ T30] kthread+0x2f2/0x390 [ 359.074817][ T30] ? __pfx_worker_thread+0x10/0x10 [ 359.079993][ T30] ? __pfx_kthread+0x10/0x10 [ 359.087026][ T30] ret_from_fork+0x4d/0x80 [ 359.091863][ T30] ? __pfx_kthread+0x10/0x10 [ 359.105625][ T30] ret_from_fork_asm+0x1a/0x30 [ 359.110649][ T30] [ 359.119804][ T30] INFO: task bch-reclaim/loo:8520 blocked for more than 144 seconds. [ 359.134316][ T30] Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 359.142003][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.151824][ T30] task:bch-reclaim/loo state:D stack:20336 pid:8520 tgid:8520 ppid:2 flags:0x00004000 [ 359.168458][ T30] Call Trace: [ 359.171803][ T30] [ 359.175191][ T8] usb usb7-port1: unable to enumerate USB device [ 359.182071][ T30] __schedule+0x184f/0x4c30 [ 359.193075][ T30] ? __pfx___schedule+0x10/0x10 [ 359.198445][ T30] ? __pfx_lock_release+0x10/0x10 [ 359.203835][ T30] ? lockdep_init_map_type+0x172/0x910 [ 359.209412][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 359.215890][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.221661][ T30] ? __closure_wake_up+0xa4/0xb0 [ 359.228142][ T30] ? schedule+0x90/0x320 [ 359.232616][ T30] schedule+0x14b/0x320 [ 359.237202][ T30] schedule_timeout+0x1be/0x310 [ 359.242204][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 359.248677][ T30] ? lock_release+0xbf/0xa30 [ 359.254457][ T30] ? __pfx_process_timeout+0x10/0x10 [ 359.259836][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.266417][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.272115][ T30] ? closure_put_after_sub+0x1b0/0x330 [ 359.278311][ T30] __closure_sync_timeout+0x2d8/0x450 [ 359.284036][ T30] ? __pfx_lock_release+0x10/0x10 [ 359.291178][ T30] ? __closure_sync_timeout+0x164/0x450 [ 359.297160][ T30] ? __pfx___closure_sync_timeout+0x10/0x10 [ 359.303313][ T30] ? btree_node_unlock+0x13c/0x270 [ 359.308485][ T30] __bch2_wait_on_allocator+0x11a/0x250 [ 359.314367][ T30] bch2_btree_update_start+0x11a2/0x14e0 [ 359.320071][ T30] ? bch2_btree_split_leaf+0x123/0x840 [ 359.325976][ T30] ? __pfx_bch2_btree_update_start+0x10/0x10 [ 359.332024][ T30] ? bch2_btree_write_buffer_flush_locked+0x4eb9/0x59f0 [ 359.339849][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.348773][ T30] ? __pfx_closure_sync_fn+0x10/0x10 [ 359.354337][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.360121][ T30] ? __do_six_trylock+0x832/0x9f0 [ 359.392007][ T30] bch2_btree_split_leaf+0x123/0x840 [ 359.428133][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.446337][ T30] bch2_trans_commit_error+0x212/0x1390 [ 359.451969][ T30] ? bch2_btree_write_buffer_flush_locked+0x4f03/0x59f0 [ 359.460060][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.468293][ T30] ? six_unlock_ip+0x2ce/0x3e0 [ 359.473200][ T30] ? bch2_trans_unlock_write+0x892/0xce0 [ 359.478882][ T30] ? __pfx_bch2_trans_commit_error+0x10/0x10 [ 359.485123][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.502520][ T30] ? bch2_btree_path_verify_locks+0x633/0x720 [ 359.509161][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.521422][ T30] ? bch2_trans_verify_locks+0x339/0x3c0 [ 359.527280][ T30] __bch2_trans_commit+0x7ead/0x93c0 [ 359.532647][ T30] ? bch2_path_put+0x1a4/0x2150 [ 359.537765][ T30] ? __pfx___bch2_trans_commit+0x10/0x10 [ 359.543527][ T30] ? __asan_memset+0x23/0x50 [ 359.548176][ T30] bch2_btree_write_buffer_flush_locked+0x4f03/0x59f0 [ 359.555576][ T30] ? __pfx_bch2_btree_write_buffer_flush_locked+0x10/0x10 [ 359.562948][ T30] ? __mutex_trylock_common+0x183/0x2e0 [ 359.568571][ T30] ? __pfx___might_resched+0x10/0x10 [ 359.575456][ T30] ? bch2_btree_write_buffer_flush_locked+0x4e1c/0x59f0 [ 359.576508][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 359.582411][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.608559][ T30] ? rcu_is_watching+0x15/0xb0 [ 359.620438][ T30] ? __mutex_lock+0x2ef/0xd70 [ 359.622053][ T5904] usb 2-1: USB disconnect, device number 44 [ 359.627364][ T30] ? __bch2_next_write_buffer_flush_journal_buf+0x287/0x2a0 [ 359.639399][ T5904] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 359.657890][ T30] ? bch2_btree_write_buffer_flush_locked+0x1501/0x59f0 [ 359.680228][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 359.689584][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.697673][ T30] ? bch2_trans_unlock+0x3a6/0x470 [ 359.703643][ T30] btree_write_buffer_flush_seq+0x1a43/0x1bc0 [ 359.709758][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.715841][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 359.720922][ T30] ? __asan_memset+0x23/0x50 [ 359.725909][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 359.731327][ T30] ? __pfx_btree_write_buffer_flush_seq+0x10/0x10 [ 359.738212][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 359.744444][ T30] ? journal_flush_pins+0x597/0xb20 [ 359.749699][ T30] ? __pfx_lock_release+0x10/0x10 [ 359.755204][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.760917][ T30] ? __bch2_trans_get+0x975/0xd20 [ 359.766130][ T30] bch2_btree_write_buffer_journal_flush+0x4e/0x80 [ 359.772729][ T30] ? __pfx_bch2_btree_write_buffer_journal_flush+0x10/0x10 [ 359.780084][ T30] journal_flush_pins+0x5f9/0xb20 [ 359.790055][ T30] __bch2_journal_reclaim+0x789/0xdc0 [ 359.796715][ T30] bch2_journal_reclaim_thread+0x174/0x560 [ 359.804525][ T30] ? bch2_journal_reclaim_thread+0x249/0x560 [ 359.810561][ T30] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 359.817205][ T30] kthread+0x2f2/0x390 [ 359.821316][ T30] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 359.827869][ T30] ? __pfx_kthread+0x10/0x10 [ 359.832573][ T30] ret_from_fork+0x4d/0x80 [ 359.837539][ T30] ? __pfx_kthread+0x10/0x10 [ 359.842179][ T30] ret_from_fork_asm+0x1a/0x30 [ 359.847105][ T30] [ 359.850171][ T30] INFO: task bch-copygc/loop:8523 blocked for more than 145 seconds. [ 359.858399][ T30] Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 359.871088][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.881014][ T30] task:bch-copygc/loop state:D stack:19864 pid:8523 tgid:8523 ppid:2 flags:0x00004000 [ 359.894324][ T30] Call Trace: [ 359.897741][ T30] [ 359.901883][ T30] __schedule+0x184f/0x4c30 [ 359.906599][ T30] ? __pfx___schedule+0x10/0x10 [ 359.911703][ T30] ? __pfx_lock_release+0x10/0x10 [ 359.919350][ T30] ? __asan_memset+0x23/0x50 [ 359.924181][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 359.930154][ T30] ? __pfx___schedule+0x10/0x10 [ 359.935135][ T30] ? schedule+0x90/0x320 [ 359.939529][ T30] schedule+0x14b/0x320 [ 359.943935][ T30] schedule_timeout+0x1be/0x310 [ 359.948843][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 359.954630][ T30] ? __pfx_process_timeout+0x10/0x10 [ 359.960487][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 359.966770][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.973301][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.979162][ T30] ? closure_put_after_sub+0x1b0/0x330 [ 359.984733][ T30] __closure_sync_timeout+0x2d8/0x450 [ 359.990329][ T30] ? irqentry_exit+0x63/0x90 [ 359.995350][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.001026][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 360.007632][ T30] ? __closure_sync_timeout+0x164/0x450 [ 360.015116][ T30] ? __pfx___closure_sync_timeout+0x10/0x10 [ 360.021049][ T30] ? __bch2_wait_on_allocator+0x102/0x250 [ 360.026902][ T30] __bch2_wait_on_allocator+0x11a/0x250 [ 360.032648][ T30] __bch2_write+0x562a/0x5dd0 [ 360.037625][ T30] ? __pfx___might_resched+0x10/0x10 [ 360.043014][ T30] ? __pfx___bch2_write+0x10/0x10 [ 360.048103][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.053855][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.059533][ T30] ? bch2_trans_begin+0x16c1/0x1c00 [ 360.064835][ T30] ? bch2_copygc+0x87b/0x4ca0 [ 360.069555][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.075260][ T30] ? bch2_path_put+0xfd7/0x2150 [ 360.080165][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.086167][ T30] ? validate_chain+0x11e/0x5920 [ 360.091136][ T30] ? bch2_copygc+0x2dfb/0x4ca0 [ 360.096416][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.102087][ T30] ? kfree+0x4e/0x440 [ 360.109582][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.115305][ T30] ? __asan_memset+0x23/0x50 [ 360.119941][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.125760][ T30] bch2_write+0x9b5/0x1760 [ 360.130235][ T30] ? __pfx_validate_chain+0x10/0x10 [ 360.140911][ T30] ? __pfx_bch2_write+0x10/0x10 [ 360.148251][ T30] ? bch2_trans_srcu_unlock+0x43b/0x5b0 [ 360.159236][ T30] ? bch2_data_update_read_done+0xfd/0x330 [ 360.165832][ T30] bch2_data_update_read_done+0x22e/0x330 [ 360.171591][ T30] ? __pfx_bch2_data_update_read_done+0x10/0x10 [ 360.178095][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.183802][ T30] ? bch2_trans_srcu_unlock+0x44a/0x5b0 [ 360.189374][ T30] bch2_moving_ctxt_do_pending_writes+0x44c/0x8d0 [ 360.195868][ T30] ? __pfx_bch2_moving_ctxt_do_pending_writes+0x10/0x10 [ 360.202898][ T30] move_buckets_wait+0x182/0x1290 [ 360.212058][ T30] ? __pfx_move_buckets_wait+0x10/0x10 [ 360.217661][ T30] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 360.223701][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.229631][ T30] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 360.235455][ T30] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 360.241477][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.248544][ T30] bch2_copygc_thread+0x83f/0xc20 [ 360.255077][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.260781][ T30] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 360.266431][ T30] ? bch2_copygc_thread+0x1a2/0xc20 [ 360.271697][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 360.277704][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.283426][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 360.288670][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 360.294984][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.300658][ T30] ? __kthread_parkme+0x169/0x1d0 [ 360.305793][ T30] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 360.312657][ T30] kthread+0x2f2/0x390 [ 360.322725][ T30] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 360.328371][ T30] ? __pfx_kthread+0x10/0x10 [ 360.333180][ T30] ret_from_fork+0x4d/0x80 [ 360.337645][ T30] ? __pfx_kthread+0x10/0x10 [ 360.342253][ T30] ret_from_fork_asm+0x1a/0x30 [ 360.347168][ T30] [ 360.350258][ T30] [ 360.350258][ T30] Showing all locks held in the system: [ 360.358114][ T30] 5 locks held by kworker/u8:1/12: [ 360.363471][ T30] 1 lock held by khungtaskd/30: [ 360.368346][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 360.378388][ T30] 2 locks held by getty/5585: [ 360.383152][ T30] #0: ffff888034e990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 360.393213][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 360.403507][ T30] 2 locks held by syz-executor/5839: [ 360.408832][ T30] #0: ffff88807c20e0e0 (&type->s_umount_key#60){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 360.420401][ T30] #1: ffff888055f00278 (&c->state_lock){+.+.}-{3:3}, at: __bch2_fs_stop+0xfd/0x5c0 [ 360.429985][ T30] 4 locks held by kworker/0:5/5945: [ 360.435254][ T30] #0: ffff88807ebdd948 ((wq_completion)bcachefs_write_ref){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 360.447396][ T30] #1: ffffc9000350fd00 ((work_completion)(&c->snapshot_delete_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 360.460809][ T30] #2: ffff888055f04398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0x97/0x1a0 [ 360.471684][ T30] #3: ffff888055f266d0 (&c->gc_lock){++++}-{3:3}, at: bch2_btree_update_start+0x682/0x14e0 [ 360.482079][ T30] 4 locks held by bch-reclaim/loo/8520: [ 360.487705][ T30] #0: ffff888055f4b0a8 (&j->reclaim_lock){+.+.}-{3:3}, at: bch2_journal_reclaim_thread+0x167/0x560 [ 360.498647][ T30] #1: ffff888055f04398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7de/0xd20 [ 360.509247][ T30] #2: ffff888055f04740 (&wb->flushing.lock){+.+.}-{3:3}, at: btree_write_buffer_flush_seq+0x1a39/0x1bc0 [ 360.521895][ T30] #3: ffff888055f266d0 (&c->gc_lock){++++}-{3:3}, at: bch2_btree_update_start+0x682/0x14e0 [ 360.532380][ T30] [ 360.539528][ T30] ============================================= [ 360.539528][ T30] [ 360.548014][ T30] NMI backtrace for cpu 1 [ 360.552359][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 360.562882][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 360.572980][ T30] Call Trace: [ 360.576257][ T30] [ 360.579189][ T30] dump_stack_lvl+0x241/0x360 [ 360.583921][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.589149][ T30] ? __pfx__printk+0x10/0x10 [ 360.593753][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 360.598715][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 360.604195][ T30] ? _printk+0xd5/0x120 [ 360.608377][ T30] ? __pfx__printk+0x10/0x10 [ 360.613089][ T30] ? __wake_up_klogd+0xcc/0x110 [ 360.618148][ T30] ? __pfx__printk+0x10/0x10 [ 360.622771][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.628417][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 360.633453][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 360.639615][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 360.645636][ T30] watchdog+0xff4/0x1040 [ 360.649901][ T30] ? watchdog+0x1ea/0x1040 [ 360.654349][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.659047][ T30] kthread+0x2f2/0x390 [ 360.663133][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.667825][ T30] ? __pfx_kthread+0x10/0x10 [ 360.672508][ T30] ret_from_fork+0x4d/0x80 [ 360.676951][ T30] ? __pfx_kthread+0x10/0x10 [ 360.681555][ T30] ret_from_fork_asm+0x1a/0x30 [ 360.686351][ T30] [ 360.690389][ T30] Sending NMI from CPU 1 to CPUs 0: [ 360.696382][ C0] NMI backtrace for cpu 0 [ 360.696398][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 360.696426][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 360.696442][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 360.696483][ C0] RIP: 0010:srso_alias_safe_ret+0x0/0x7 [ 360.696518][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc [ 360.696539][ C0] RSP: 0018:ffffc90000107788 EFLAGS: 00000293 [ 360.696559][ C0] RAX: ffffffff8b432a10 RBX: 000000000000006e RCX: ffff88801cacbc00 [ 360.696577][ C0] RDX: 0000000000000000 RSI: 000000000000006e RDI: 00000000000000b4 [ 360.696593][ C0] RBP: 00000000000000b4 R08: ffffffff8b43296c R09: 1ffffffff203a13d [ 360.696611][ C0] R10: dffffc0000000000 R11: fffffbfff203a13e R12: dffffc0000000000 [ 360.696629][ C0] R13: 0000000000000009 R14: ffff88805b6630d0 R15: 0000000000000003 [ 360.696649][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 360.696670][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.696687][ C0] CR2: 00007f2a96f09178 CR3: 0000000032e6c000 CR4: 0000000000350ef0 [ 360.696706][ C0] Call Trace: [ 360.696714][ C0] [ 360.696724][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 360.696761][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 360.696810][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 360.696846][ C0] ? nmi_handle+0x2a/0x5a0 [ 360.696881][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 360.696915][ C0] ? nmi_handle+0x151/0x5a0 [ 360.696940][ C0] ? nmi_handle+0x2a/0x5a0 [ 360.696966][ C0] ? __entry_text_end+0x1020c9/0x1020c9 [ 360.696998][ C0] ? default_do_nmi+0x63/0x160 [ 360.697036][ C0] ? exc_nmi+0x123/0x1f0 [ 360.697072][ C0] ? end_repeat_nmi+0xf/0x53 [ 360.697106][ C0] ? ieee80211_sta_get_rates+0x37c/0x660 [ 360.697139][ C0] ? ieee80211_sta_get_rates+0x420/0x660 [ 360.697174][ C0] ? __entry_text_end+0x1020c9/0x1020c9 [ 360.697207][ C0] ? __entry_text_end+0x1020c9/0x1020c9 [ 360.697242][ C0] ? __entry_text_end+0x1020c9/0x1020c9 [ 360.697275][ C0] [ 360.697283][ C0] [ 360.697291][ C0] srso_alias_return_thunk+0x5/0xfbef5 [ 360.697323][ C0] ieee80211_sta_get_rates+0x420/0x660 [ 360.697365][ C0] ieee80211_ibss_rx_queued_mgmt+0x11e1/0x2d70 [ 360.697415][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 360.697455][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 360.697497][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.697533][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.697565][ C0] ? mark_lock+0x9a/0x360 [ 360.697589][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.697621][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.697661][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.697698][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.697730][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 360.697772][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 360.697807][ C0] cfg80211_wiphy_work+0x2dd/0x490 [ 360.697844][ C0] ? process_scheduled_works+0x976/0x1850 [ 360.697879][ C0] process_scheduled_works+0xa65/0x1850 [ 360.697931][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 360.697971][ C0] ? assign_work+0x364/0x3d0 [ 360.698007][ C0] worker_thread+0x870/0xd30 [ 360.698051][ C0] ? __kthread_parkme+0x169/0x1d0 [ 360.698089][ C0] ? __pfx_worker_thread+0x10/0x10 [ 360.698124][ C0] kthread+0x2f2/0x390 [ 360.698147][ C0] ? __pfx_worker_thread+0x10/0x10 [ 360.698181][ C0] ? __pfx_kthread+0x10/0x10 [ 360.698205][ C0] ret_from_fork+0x4d/0x80 [ 360.698241][ C0] ? __pfx_kthread+0x10/0x10 [ 360.698264][ C0] ret_from_fork_asm+0x1a/0x30 [ 360.698309][ C0] [ 360.703189][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 360.703206][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 360.703237][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 360.703253][ T30] Call Trace: [ 360.703264][ T30] [ 360.703275][ T30] dump_stack_lvl+0x241/0x360 [ 360.703315][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.703350][ T30] ? __pfx__printk+0x10/0x10 [ 360.703378][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.703426][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.703462][ T30] ? vscnprintf+0x5d/0x90 [ 360.703503][ T30] panic+0x349/0x880 [ 360.703539][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.703577][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 360.703619][ T30] ? __pfx_panic+0x10/0x10 [ 360.703646][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 360.703677][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.703712][ T30] ? __irq_work_queue_local+0x137/0x410 [ 360.703750][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.703785][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 360.703813][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 360.703853][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 360.703895][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 360.703930][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 360.703973][ T30] watchdog+0x1033/0x1040 [ 360.704012][ T30] ? watchdog+0x1ea/0x1040 [ 360.704053][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.704089][ T30] kthread+0x2f2/0x390 [ 360.704115][ T30] ? __pfx_watchdog+0x10/0x10 [ 360.704151][ T30] ? __pfx_kthread+0x10/0x10 [ 360.704178][ T30] ret_from_fork+0x4d/0x80 [ 360.704217][ T30] ? __pfx_kthread+0x10/0x10 [ 360.704243][ T30] ret_from_fork_asm+0x1a/0x30 [ 360.704295][ T30] [ 361.252552][ T30] Kernel Offset: disabled [ 361.256879][ T30] Rebooting in 86400 seconds..