last executing test programs: 4.657311861s ago: executing program 3 (id=1560): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x5e, 0x2, [@TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28}]}}]}, 0x64}}, 0x0) 4.21332684s ago: executing program 3 (id=1565): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4}}, @TCA_RATE={0x6}]}, 0x40}}, 0x0) 3.809423475s ago: executing program 3 (id=1570): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x4000000) 3.538733019s ago: executing program 0 (id=1571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x14, r1, 0x321, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) 3.169321092s ago: executing program 3 (id=1574): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@loopback, r1}, 0x14) sendto$inet6(r0, &(0x7f00000005c0)="800037e92208a1ce", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 3.126311405s ago: executing program 0 (id=1575): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002340)={0x0, 0x2e, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500090000000000050008000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 2.936460772s ago: executing program 3 (id=1578): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x29, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000100)}, 0x20) 2.906746735s ago: executing program 0 (id=1579): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x141, 0xc7}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_LLADDR={0xa, 0x2, @random="000200"}]}, 0x30}}, 0x0) 2.660610316s ago: executing program 4 (id=1581): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x24}}, 0x0) 2.597008972s ago: executing program 3 (id=1582): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000a00)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000006740)={0x2c, 0x0, &(0x7f0000006640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x20}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x36, @string={0x36, 0x3, "cb934cb0bd7fc4633038b9657bcbb5d57886982de855197bd3075abbcc50a8ef70098f7313a26d245232eb96b9541da210e5c0b9"}}}, 0x0) 2.501490541s ago: executing program 0 (id=1584): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) 2.170535909s ago: executing program 4 (id=1588): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x0, @empty}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0xca, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.803937562s ago: executing program 4 (id=1590): r0 = syz_io_uring_setup(0x652b, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000880)={0x2, 0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x48031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)=""/114, 0x72}], 0x0, 0x1}, 0x20) 1.768932755s ago: executing program 2 (id=1591): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x0, 0x148, 0x0, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x2, 0x3, 0x7, '\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040000000000080012000300000008001100ff070000080010000000020008000f"], 0x54}}, 0x0) 1.546344594s ago: executing program 1 (id=1593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev, {[@timestamp_addr={0x44, 0x4, 0x8a}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xd}]}}}}}}}, 0x0) 1.488145359s ago: executing program 4 (id=1594): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54c, &(0x7f0000000fc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fff, 0x0) getdents(r0, 0x0, 0x58) 1.477765591s ago: executing program 2 (id=1595): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "750a65a3c93199cd485a10497ead5ac3e112baf740f0853a3660ea0ca01c5078a94a0bb37a8dbd611d75f7d309540c18a222bcb970c5d34d2369ea9659f976", 0x1}, 0x60) close_range(r0, 0xffffffffffffffff, 0x0) 1.36269593s ago: executing program 1 (id=1596): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="e001000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000540016805000018014002c00feffffff00000000000000000000000010000200080000001c09000079d2000028000100ff0300000fb3dd6785ad00000000000000000000000000000000000000000000000000006c011a809c000a801400070000000000000000000000ffffac1414041400070000000000001200000000ffff7f0000010500080004"], 0x1e0}}, 0x0) 1.186620626s ago: executing program 1 (id=1597): syz_mount_image$hfs(&(0x7f000001fa80), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30000c0, &(0x7f0000000680)=ANY=[@ANYBLOB="71756965742c63726561746f723dd4675f162c696f636861727365743d69736f383835392d322c71756965742c636f6465706167653d63703933362c00b24530a1a1e51b95228246cc65c972358b611490e09004a315011a4fe58392211f22a42390912061adb25c406e20585d9fa4109c4a2b201f39c5e48b745085abecadfbfbbcd03215c2cdd68151829c12d7be50cdd55aa9e506d9e28ad8ce2951dd1f560961e92e8d198954d737b45262a26cc3bb46b70e1ad909d3b0c2d7fb8053f47884a9cc46a9d32ce04b2d00544c47d94d5a91538c024918965b"], 0x11, 0x2b6, &(0x7f0000000200)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.021499791s ago: executing program 2 (id=1598): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 977.313215ms ago: executing program 4 (id=1599): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x590}]}}]}, 0x3c}}, 0x0) 912.37272ms ago: executing program 1 (id=1600): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25041100800c0002"], 0x114}], 0x1}, 0x0) 719.219217ms ago: executing program 4 (id=1601): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f16, &(0x7f0000003100)="$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") mkdir(&(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 686.43082ms ago: executing program 2 (id=1602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 536.466823ms ago: executing program 1 (id=1603): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006c40)=[{{0x0, 0x4000000, &(0x7f00000002c0)=[{&(0x7f0000001fc0)="0379956c8275ea0f995e7ac1a79965e56013fc635e5aff847a7bc8b637bbb580f032378f9755ef7cd86aba8c5446f83bdfea5ec48285219273dc78e66aba14", 0xffffffc0}], 0x1}}], 0x1, 0x0) 446.807561ms ago: executing program 0 (id=1604): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x31) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 356.888759ms ago: executing program 2 (id=1605): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="93", 0x34000}], 0x1}, 0x0) 76.164184ms ago: executing program 0 (id=1606): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) 705.96µs ago: executing program 1 (id=1607): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f00000004c0)={[{@autodefrag}, {@acl}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}, {@noenospc_debug}, {@barrier}, {@nodiscard}, {@acl}]}, 0x1, 0x55a4, &(0x7f000000ac40)="$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") chdir(&(0x7f00000007c0)='./file0\x00') r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) faccessat2(r0, &(0x7f00000000c0)='./file1\x00', 0x7, 0x300) 0s ago: executing program 2 (id=1608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): T4652] hub 2-1:4.0: USB hub found [ 121.767906][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.808944][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.858220][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.875842][ T4652] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 121.886317][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.922896][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.929920][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.035124][ T4654] bio_check_eod: 218119 callbacks suppressed [ 122.035143][ T4654] syz.4.324: attempt to access beyond end of device [ 122.035143][ T4654] loop4: rw=3, sector=2953860940808, nr_sectors = 8388600 limit=2048 [ 122.035199][ T4654] syz.4.324: attempt to access beyond end of device [ 122.035199][ T4654] loop4: rw=3, sector=2953869329408, nr_sectors = 8388600 limit=2048 [ 122.035234][ T4654] syz.4.324: attempt to access beyond end of device [ 122.035234][ T4654] loop4: rw=3, sector=2953877718008, nr_sectors = 8388600 limit=2048 [ 122.035268][ T4654] syz.4.324: attempt to access beyond end of device [ 122.035268][ T4654] loop4: rw=3, sector=2953886106608, nr_sectors = 8388600 limit=2048 [ 122.035300][ T4654] syz.4.324: attempt to access beyond end of device [ 122.035300][ T4654] loop4: rw=3, sector=2953894495208, nr_sectors = 8388600 limit=2048 [ 122.035332][ T4654] syz.4.324: attempt to access beyond end of device [ 122.035332][ T4654] loop4: rw=3, sector=2953902883808, nr_sectors = 8388600 limit=2048 [ 122.035363][ T4654] syz.4.324: attempt to access beyond end of device [ 122.035363][ T4654] loop4: rw=3, sector=2953911272408, nr_sectors = 8388600 limit=2048 [ 122.035397][ T4654] syz.4.324: attempt to access beyond end of device [ 122.035397][ T4654] loop4: rw=3, sector=2953919661008, nr_sectors = 8388600 limit=2048 [ 122.035431][ T4654] syz.4.324: attempt to access beyond end of device [ 122.035431][ T4654] loop4: rw=3, sector=2953928049608, nr_sectors = 8388600 limit=2048 [ 122.035461][ T4654] syz.4.324: attempt to access beyond end of device [ 122.035461][ T4654] loop4: rw=3, sector=2953936438208, nr_sectors = 8388600 limit=2048 [ 122.195375][ T3892] usb 2-1: USB disconnect, device number 8 [ 122.798521][ T4957] loop1: detected capacity change from 0 to 22 [ 122.835540][ T4957] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 122.870392][ T4957] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 122.974192][ T3679] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.214189][ T3679] usb 4-1: Using ep0 maxpacket: 16 [ 123.274196][ T153] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.514243][ T3679] usb 4-1: New USB device found, idVendor=0fde, idProduct=ca05, bcdDevice=b5.f3 [ 123.523328][ T3679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.574174][ T3679] usb 4-1: Product: syz [ 123.578415][ T3679] usb 4-1: Manufacturer: syz [ 123.583070][ T3679] usb 4-1: SerialNumber: syz [ 123.625175][ T3679] usb 4-1: config 0 descriptor?? [ 123.644291][ T153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.665362][ T3679] cp210x 4-1:0.0: cp210x converter detected [ 123.674459][ T153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.702528][ T153] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 123.742345][ T153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.775889][ T153] usb 5-1: config 0 descriptor?? [ 124.298884][ T153] wacom 0003:056A:0317.0009: unknown main item tag 0x0 [ 124.334888][ T153] wacom 0003:056A:0317.0009: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 124.381957][ T153] wacom 0003:056A:0317.0009: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.4-1/input0 [ 124.394252][ T3679] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 124.402146][ T3679] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 124.455109][ T3679] usb 4-1: cp210x converter now attached to ttyUSB0 [ 124.494651][ T153] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0317.0009/input/input6 [ 124.528738][ T3679] usb 4-1: USB disconnect, device number 4 [ 124.585100][ T3679] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 124.635334][ T3679] cp210x 4-1:0.0: device disconnected [ 124.647874][ T153] usb 5-1: USB disconnect, device number 3 [ 124.702138][ T4966] loop1: detected capacity change from 0 to 32768 [ 124.756304][ T4966] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.458 (4966) [ 124.841270][ T4966] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.925017][ T4966] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 124.975258][ T4966] BTRFS info (device loop1): using free space tree [ 125.350349][ T4966] BTRFS info (device loop1): enabling ssd optimizations [ 125.548829][ T3636] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 125.714352][ T3682] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 125.964158][ T3682] usb 4-1: Using ep0 maxpacket: 16 [ 125.981555][ T5008] program syz.2.468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.174284][ T3682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.204209][ T3682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.214038][ T3682] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 126.314175][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.376735][ T3682] usb 4-1: config 0 descriptor?? [ 126.413119][ T5017] loop1: detected capacity change from 0 to 64 [ 126.868616][ T3682] apple 0003:05AC:027D.000A: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.3-1/input0 [ 127.049317][ T3912] bio_check_eod: 227611 callbacks suppressed [ 127.049335][ T3912] syz.2.69: attempt to access beyond end of device [ 127.049335][ T3912] loop2: rw=3, sector=6700310364008, nr_sectors = 8388600 limit=2048 [ 127.084227][ T4399] syz.3.241: attempt to access beyond end of device [ 127.084227][ T4399] loop3: rw=3, sector=4495853392808, nr_sectors = 8388600 limit=2048 [ 127.100463][ T4179] syz.0.174: attempt to access beyond end of device [ 127.100463][ T4179] loop0: rw=3, sector=5335912962608, nr_sectors = 8388600 limit=2048 [ 127.119036][ T4654] syz.4.324: attempt to access beyond end of device [ 127.119036][ T4654] loop4: rw=3, sector=3505243618808, nr_sectors = 8388600 limit=2048 [ 127.155108][ T153] usb 4-1: USB disconnect, device number 5 [ 127.166005][ T4399] syz.3.241: attempt to access beyond end of device [ 127.166005][ T4399] loop3: rw=3, sector=4495861781408, nr_sectors = 8388600 limit=2048 [ 127.177250][ T3912] syz.2.69: attempt to access beyond end of device [ 127.177250][ T3912] loop2: rw=3, sector=6700318752608, nr_sectors = 8388600 limit=2048 [ 127.189120][ T4654] syz.4.324: attempt to access beyond end of device [ 127.189120][ T4654] loop4: rw=3, sector=3505252007408, nr_sectors = 8388600 limit=2048 [ 127.216682][ T4179] syz.0.174: attempt to access beyond end of device [ 127.216682][ T4179] loop0: rw=3, sector=5335921351208, nr_sectors = 8388600 limit=2048 [ 127.222434][ T3912] syz.2.69: attempt to access beyond end of device [ 127.222434][ T3912] loop2: rw=3, sector=6700327141208, nr_sectors = 8388600 limit=2048 [ 127.233345][ T4399] syz.3.241: attempt to access beyond end of device [ 127.233345][ T4399] loop3: rw=3, sector=4495870170008, nr_sectors = 8388600 limit=2048 [ 127.877871][ T5053] netlink: 36 bytes leftover after parsing attributes in process `syz.4.489'. [ 127.964282][ T3682] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 128.354394][ T3682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.385877][ T3682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.416217][ T3682] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 128.454302][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.489104][ T3682] usb 2-1: config 0 descriptor?? [ 128.978525][ T3682] hid-retrode 0003:0403:97C1.000B: unbalanced collection at end of report description [ 129.009284][ T3682] hid-retrode: probe of 0003:0403:97C1.000B failed with error -22 [ 129.175055][ T3888] usb 2-1: USB disconnect, device number 9 [ 129.868514][ T5070] loop1: detected capacity change from 0 to 64 [ 130.509383][ T5078] RDS: rds_bind could not find a transport for ::8000:20:0:0, load rds_tcp or rds_rdma? [ 130.997630][ T5089] loop1: detected capacity change from 0 to 4096 [ 131.012111][ T5089] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 131.106454][ T5089] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 131.615775][ T5105] netlink: 'syz.1.513': attribute type 2 has an invalid length. [ 132.054176][ T4399] bio_check_eod: 196596 callbacks suppressed [ 132.054194][ T4399] syz.3.241: attempt to access beyond end of device [ 132.054194][ T4399] loop3: rw=3, sector=4975714867208, nr_sectors = 8388600 limit=2048 [ 132.118700][ T4179] syz.0.174: attempt to access beyond end of device [ 132.118700][ T4179] loop0: rw=3, sector=5768135577608, nr_sectors = 8388600 limit=2048 [ 132.124304][ T3912] syz.2.69: attempt to access beyond end of device [ 132.124304][ T3912] loop2: rw=3, sector=7123875943808, nr_sectors = 8388600 limit=2048 [ 132.153262][ T4654] syz.4.324: attempt to access beyond end of device [ 132.153262][ T4654] loop4: rw=3, sector=3926040960608, nr_sectors = 8388600 limit=2048 [ 132.192588][ T3912] syz.2.69: attempt to access beyond end of device [ 132.192588][ T3912] loop2: rw=3, sector=7123884332408, nr_sectors = 8388600 limit=2048 [ 132.208841][ T4179] syz.0.174: attempt to access beyond end of device [ 132.208841][ T4179] loop0: rw=3, sector=5768143966208, nr_sectors = 8388600 limit=2048 [ 132.220942][ T4399] syz.3.241: attempt to access beyond end of device [ 132.220942][ T4399] loop3: rw=3, sector=4975723255808, nr_sectors = 8388600 limit=2048 [ 132.249831][ T3912] syz.2.69: attempt to access beyond end of device [ 132.249831][ T3912] loop2: rw=3, sector=7123892721008, nr_sectors = 8388600 limit=2048 [ 132.268898][ T4654] syz.4.324: attempt to access beyond end of device [ 132.268898][ T4654] loop4: rw=3, sector=3926049349208, nr_sectors = 8388600 limit=2048 [ 132.291589][ T4399] syz.3.241: attempt to access beyond end of device [ 132.291589][ T4399] loop3: rw=3, sector=4975731644408, nr_sectors = 8388600 limit=2048 [ 132.694394][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.700725][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.844249][ T153] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.124305][ T3893] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 133.274250][ T153] usb 1-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01 [ 133.299652][ T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.350983][ T153] usb 1-1: config 0 descriptor?? [ 133.406604][ T3893] usb 2-1: Using ep0 maxpacket: 16 [ 133.534372][ T3893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.574195][ T3893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.603687][ T3893] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 133.633307][ T3893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.675055][ T3893] usb 2-1: config 0 descriptor?? [ 133.904317][ T153] mxuport 1-1:0.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 133.911940][ T153] mxuport: probe of 1-1:0.0 failed with error -5 [ 134.010421][ T5148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.533'. [ 134.148790][ T3682] usb 1-1: USB disconnect, device number 4 [ 134.167672][ T3893] konepure 0003:1E7D:2DB4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 134.372275][ T3893] usb 2-1: USB disconnect, device number 10 [ 135.432469][ T5175] Illegal XDP return value 32768 on prog (id 35) dev N/A, expect packet loss! [ 135.664472][ T5185] loop1: detected capacity change from 0 to 1024 [ 135.951018][ T46] hfsplus: b-tree write err: -5, ino 4 [ 137.084189][ T4399] bio_check_eod: 192394 callbacks suppressed [ 137.084210][ T4399] syz.3.241: attempt to access beyond end of device [ 137.084210][ T4399] loop3: rw=3, sector=5374802512208, nr_sectors = 8388600 limit=2048 [ 137.114233][ T3912] syz.2.69: attempt to access beyond end of device [ 137.114233][ T3912] loop2: rw=3, sector=7549320570008, nr_sectors = 8388600 limit=2048 [ 137.124137][ T4654] syz.4.324: attempt to access beyond end of device [ 137.124137][ T4654] loop4: rw=3, sector=4297605609008, nr_sectors = 8388600 limit=2048 [ 137.144226][ T4179] syz.0.174: attempt to access beyond end of device [ 137.144226][ T4179] loop0: rw=3, sector=6274110763808, nr_sectors = 8388600 limit=2048 [ 137.195732][ T4399] syz.3.241: attempt to access beyond end of device [ 137.195732][ T4399] loop3: rw=3, sector=5374810900808, nr_sectors = 8388600 limit=2048 [ 137.231087][ T4654] syz.4.324: attempt to access beyond end of device [ 137.231087][ T4654] loop4: rw=3, sector=4297613997608, nr_sectors = 8388600 limit=2048 [ 137.246486][ T4399] syz.3.241: attempt to access beyond end of device [ 137.246486][ T4399] loop3: rw=3, sector=5374819289408, nr_sectors = 8388600 limit=2048 [ 137.254242][ T4179] syz.0.174: attempt to access beyond end of device [ 137.254242][ T4179] loop0: rw=3, sector=6274119152408, nr_sectors = 8388600 limit=2048 [ 137.275806][ T4399] syz.3.241: attempt to access beyond end of device [ 137.275806][ T4399] loop3: rw=3, sector=5374827678008, nr_sectors = 8388600 limit=2048 [ 137.275854][ T4399] syz.3.241: attempt to access beyond end of device [ 137.275854][ T4399] loop3: rw=3, sector=5374836066608, nr_sectors = 8388600 limit=2048 [ 137.484414][ T3890] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 137.764310][ T3890] usb 2-1: Using ep0 maxpacket: 16 [ 137.884377][ T3890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.933035][ T3890] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 137.965201][ T3890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 137.984127][ T3890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17488, setting to 1024 [ 138.104499][ T3890] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 138.123879][ T3890] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 138.144684][ T3890] usb 2-1: Manufacturer: syz [ 138.174873][ T3890] usb 2-1: config 0 descriptor?? [ 138.204640][ T5224] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.496316][ T3890] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 138.522330][ T3890] usb 2-1: USB disconnect, device number 11 [ 139.001448][ T5239] netlink: 48 bytes leftover after parsing attributes in process `syz.4.562'. [ 139.725515][ T5255] loop1: detected capacity change from 0 to 4096 [ 139.784690][ T5255] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 139.925216][ T5255] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 140.044332][ T5268] tipc: Started in network mode [ 140.049273][ T5268] tipc: Node identity ., cluster identity 4711 [ 140.144054][ T5268] tipc: Enabling of bearer rejected, failed to enable media [ 140.182612][ T5273] sctp: [Deprecated]: syz.0.579 (pid 5273) Use of int in max_burst socket option deprecated. [ 140.182612][ T5273] Use struct sctp_assoc_value instead [ 140.390071][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 140.805151][ T5290] loop1: detected capacity change from 0 to 1024 [ 140.890291][ T5293] netlink: 19 bytes leftover after parsing attributes in process `syz.0.589'. [ 140.923227][ T5290] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.135256][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 142.094379][ T4179] bio_check_eod: 171518 callbacks suppressed [ 142.094469][ T4179] syz.0.174: attempt to access beyond end of device [ 142.094469][ T4179] loop0: rw=3, sector=6668525958608, nr_sectors = 8388600 limit=2048 [ 142.132152][ T3912] syz.2.69: attempt to access beyond end of device [ 142.132152][ T3912] loop2: rw=3, sector=7936588677608, nr_sectors = 8388600 limit=2048 [ 142.139819][ T4399] syz.3.241: attempt to access beyond end of device [ 142.139819][ T4399] loop3: rw=3, sector=5738590928408, nr_sectors = 8388600 limit=2048 [ 142.172831][ T4654] syz.4.324: attempt to access beyond end of device [ 142.172831][ T4654] loop4: rw=3, sector=4673381334608, nr_sectors = 8388600 limit=2048 [ 142.214401][ T3912] syz.2.69: attempt to access beyond end of device [ 142.214401][ T3912] loop2: rw=3, sector=7936597066208, nr_sectors = 8388600 limit=2048 [ 142.274195][ T4179] syz.0.174: attempt to access beyond end of device [ 142.274195][ T4179] loop0: rw=3, sector=6668534347208, nr_sectors = 8388600 limit=2048 [ 142.280299][ T3912] syz.2.69: attempt to access beyond end of device [ 142.280299][ T3912] loop2: rw=3, sector=7936605454808, nr_sectors = 8388600 limit=2048 [ 142.334475][ T4654] syz.4.324: attempt to access beyond end of device [ 142.334475][ T4654] loop4: rw=3, sector=4673389723208, nr_sectors = 8388600 limit=2048 [ 142.384853][ T3912] syz.2.69: attempt to access beyond end of device [ 142.384853][ T3912] loop2: rw=3, sector=7936613843408, nr_sectors = 8388600 limit=2048 [ 142.391282][ T4399] syz.3.241: attempt to access beyond end of device [ 142.391282][ T4399] loop3: rw=3, sector=5738599317008, nr_sectors = 8388600 limit=2048 [ 142.648571][ T5338] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 142.852138][ T5319] loop1: detected capacity change from 0 to 32768 [ 143.810387][ T5358] syz.1.620 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 145.744230][ T3682] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 145.825185][ T5414] loop1: detected capacity change from 0 to 1024 [ 146.051590][ T3693] hfsplus: b-tree write err: -5, ino 4 [ 146.124274][ T3682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.146651][ T3682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.184185][ T3682] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 146.213738][ T3682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.255061][ T3682] usb 1-1: config 0 descriptor?? [ 146.739063][ T5435] [U] V [ 146.777819][ T3682] uclogic 0003:5543:0005.000D: unknown main item tag 0x0 [ 146.795318][ T3682] uclogic 0003:5543:0005.000D: unknown main item tag 0x0 [ 146.803087][ T3682] uclogic 0003:5543:0005.000D: No inputs registered, leaving [ 146.866999][ T3682] uclogic 0003:5543:0005.000D: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.0-1/input0 [ 147.035762][ T3893] usb 1-1: USB disconnect, device number 5 [ 147.104237][ T4654] bio_check_eod: 172580 callbacks suppressed [ 147.104256][ T4654] syz.4.324: attempt to access beyond end of device [ 147.104256][ T4654] loop4: rw=3, sector=5012884753808, nr_sectors = 8388600 limit=2048 [ 147.125846][ T4179] syz.0.174: attempt to access beyond end of device [ 147.125846][ T4179] loop0: rw=3, sector=7136702113208, nr_sectors = 8388600 limit=2048 [ 147.132823][ T3912] syz.2.69: attempt to access beyond end of device [ 147.132823][ T3912] loop2: rw=3, sector=8326281090608, nr_sectors = 8388600 limit=2048 [ 147.158358][ T4399] syz.3.241: attempt to access beyond end of device [ 147.158358][ T4399] loop3: rw=3, sector=6073388343008, nr_sectors = 8388600 limit=2048 [ 147.162284][ T4179] syz.0.174: attempt to access beyond end of device [ 147.162284][ T4179] loop0: rw=3, sector=7136710501808, nr_sectors = 8388600 limit=2048 [ 147.233403][ T4179] syz.0.174: attempt to access beyond end of device [ 147.233403][ T4179] loop0: rw=3, sector=7136718890408, nr_sectors = 8388600 limit=2048 [ 147.249390][ T4654] syz.4.324: attempt to access beyond end of device [ 147.249390][ T4654] loop4: rw=3, sector=5012893142408, nr_sectors = 8388600 limit=2048 [ 147.270385][ T4399] syz.3.241: attempt to access beyond end of device [ 147.270385][ T4399] loop3: rw=3, sector=6073396731608, nr_sectors = 8388600 limit=2048 [ 147.298879][ T4179] syz.0.174: attempt to access beyond end of device [ 147.298879][ T4179] loop0: rw=3, sector=7136727279008, nr_sectors = 8388600 limit=2048 [ 147.324214][ T3912] syz.2.69: attempt to access beyond end of device [ 147.324214][ T3912] loop2: rw=3, sector=8326289479208, nr_sectors = 8388600 limit=2048 [ 147.564176][ T153] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 147.834279][ T153] usb 2-1: Using ep0 maxpacket: 8 [ 147.954602][ T153] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 148.003837][ T153] usb 2-1: config 0 has no interface number 0 [ 148.030855][ T153] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.086729][ T153] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.214334][ T153] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 148.243913][ T153] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 148.280503][ T153] usb 2-1: Manufacturer: syz [ 148.307093][ T153] usb 2-1: config 0 descriptor?? [ 148.994749][ T3682] usb 2-1: USB disconnect, device number 12 [ 150.271328][ T5525] loop1: detected capacity change from 0 to 4096 [ 150.407368][ T26] audit: type=1800 audit(1725782730.623:5): pid=5525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.686" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 150.866068][ T5546] netlink: 'syz.0.693': attribute type 3 has an invalid length. [ 151.034168][ T3640] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 151.304175][ T3640] usb 2-1: Using ep0 maxpacket: 16 [ 151.424394][ T3640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.464164][ T3640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.494158][ T3640] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 151.523766][ T3640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.566421][ T3640] usb 2-1: config 0 descriptor?? [ 151.904359][ T3640] usbhid 2-1:0.0: can't add hid device: -71 [ 151.910586][ T3640] usbhid: probe of 2-1:0.0 failed with error -71 [ 151.946019][ T3640] usb 2-1: USB disconnect, device number 13 [ 152.114873][ T4179] bio_check_eod: 184252 callbacks suppressed [ 152.114895][ T4179] syz.0.174: attempt to access beyond end of device [ 152.114895][ T4179] loop0: rw=3, sector=7549328958608, nr_sectors = 8388600 limit=2048 [ 152.134155][ T4399] syz.3.241: attempt to access beyond end of device [ 152.134155][ T4399] loop3: rw=3, sector=6469363817408, nr_sectors = 8388600 limit=2048 [ 152.150279][ T4654] syz.4.324: attempt to access beyond end of device [ 152.150279][ T4654] loop4: rw=3, sector=5403013374008, nr_sectors = 8388600 limit=2048 [ 152.165390][ T3912] syz.2.69: attempt to access beyond end of device [ 152.165390][ T3912] loop2: rw=3, sector=8746549950608, nr_sectors = 8388600 limit=2048 [ 152.203904][ T4654] syz.4.324: attempt to access beyond end of device [ 152.203904][ T4654] loop4: rw=3, sector=5403021762608, nr_sectors = 8388600 limit=2048 [ 152.216210][ T4399] syz.3.241: attempt to access beyond end of device [ 152.216210][ T4399] loop3: rw=3, sector=6469372206008, nr_sectors = 8388600 limit=2048 [ 152.224743][ T4179] syz.0.174: attempt to access beyond end of device [ 152.224743][ T4179] loop0: rw=3, sector=7549337347208, nr_sectors = 8388600 limit=2048 [ 152.248607][ T4654] syz.4.324: attempt to access beyond end of device [ 152.248607][ T4654] loop4: rw=3, sector=5403030151208, nr_sectors = 8388600 limit=2048 [ 152.264129][ T3912] syz.2.69: attempt to access beyond end of device [ 152.264129][ T3912] loop2: rw=3, sector=8746558339208, nr_sectors = 8388600 limit=2048 [ 152.295122][ T4654] syz.4.324: attempt to access beyond end of device [ 152.295122][ T4654] loop4: rw=3, sector=5403038539808, nr_sectors = 8388600 limit=2048 [ 152.444273][ T3640] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 152.464336][ T153] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.704430][ T153] usb 5-1: Using ep0 maxpacket: 8 [ 152.804696][ T3640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.843758][ T3640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.854280][ T3682] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.883594][ T3640] usb 2-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice= 0.00 [ 152.914322][ T3640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.944241][ T3640] usb 2-1: config 0 descriptor?? [ 152.988490][ T3640] HFC-S_USB: probe of 2-1:0.0 failed with error -5 [ 153.054276][ T153] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 153.073762][ T153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.104145][ T153] usb 5-1: Product: syz [ 153.114381][ T153] usb 5-1: Manufacturer: syz [ 153.124376][ T153] usb 5-1: SerialNumber: syz [ 153.141551][ T153] usb 5-1: config 0 descriptor?? [ 153.264375][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.275413][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.284222][ T3640] usbhid 2-1:0.0: can't add hid device: -71 [ 153.295388][ T3640] usbhid: probe of 2-1:0.0 failed with error -71 [ 153.313698][ T3682] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 153.340271][ T3640] usb 2-1: USB disconnect, device number 14 [ 153.345032][ T3682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.414335][ T3682] usb 3-1: config 0 descriptor?? [ 153.434269][ T153] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 153.896168][ T3682] asus 0003:0B05:1822.000F: unknown main item tag 0x0 [ 153.914347][ T32] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.924202][ T153] usb write operation failed. (-71) [ 153.934634][ T3682] asus 0003:0B05:1822.000F: unknown main item tag 0x0 [ 153.966366][ T153] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 153.977119][ T3682] asus 0003:0B05:1822.000F: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.2-1/input0 [ 154.007606][ T153] dvbdev: DVB: registering new adapter (Terratec H7) [ 154.035219][ T3682] asus 0003:0B05:1822.000F: Asus input not registered [ 154.037607][ T153] usb 5-1: media controller created [ 154.054344][ T3640] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 154.066700][ T3682] asus: probe of 0003:0B05:1822.000F failed with error -12 [ 154.104420][ T153] usb read operation failed. (-71) [ 154.108206][ T3682] usb 3-1: USB disconnect, device number 3 [ 154.124238][ T153] usb write operation failed. (-71) [ 154.156127][ T153] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 154.164764][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 154.227655][ T153] usb 5-1: USB disconnect, device number 4 [ 154.284348][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.307061][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.307091][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.307132][ T32] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.307157][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.334919][ T32] usb 4-1: config 0 descriptor?? [ 154.424347][ T3640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.424413][ T3640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.424448][ T3640] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 154.424472][ T3640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.426312][ T3640] usb 1-1: config 0 descriptor?? [ 154.836222][ T32] microsoft 0003:045E:07DA.0010: item 0 0 0 11 parsing failed [ 154.870133][ T32] microsoft 0003:045E:07DA.0010: parse failed [ 154.907137][ T3640] uclogic 0003:145F:0212.0011: interface is invalid, ignoring [ 154.915448][ T32] microsoft: probe of 0003:045E:07DA.0010 failed with error -22 [ 155.059277][ T32] usb 4-1: USB disconnect, device number 6 [ 155.071208][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'. [ 155.107179][ T3893] usb 1-1: USB disconnect, device number 6 [ 155.317449][ T5592] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.897072][ T5602] netlink: 'syz.2.721': attribute type 29 has an invalid length. [ 155.940350][ T5602] netlink: 'syz.2.721': attribute type 29 has an invalid length. [ 156.054276][ T5604] netlink: 'syz.2.721': attribute type 29 has an invalid length. [ 156.086641][ T3893] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 156.141525][ T5609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.724'. [ 156.354200][ T3893] usb 2-1: Using ep0 maxpacket: 16 [ 156.474477][ T3893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.504297][ T3893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.544266][ T3893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.592464][ T3893] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 156.623394][ T3893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.655245][ T3893] usb 2-1: config 0 descriptor?? [ 156.824569][ T5626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.732'. [ 156.924613][ T3682] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 157.125199][ T4654] bio_check_eod: 263641 callbacks suppressed [ 157.125216][ T4654] syz.4.324: attempt to access beyond end of device [ 157.125216][ T4654] loop4: rw=3, sector=6094301122808, nr_sectors = 8388600 limit=2048 [ 157.136817][ T3912] syz.2.69: attempt to access beyond end of device [ 157.136817][ T3912] loop2: rw=3, sector=9327754101608, nr_sectors = 8388600 limit=2048 [ 157.147948][ T3893] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0 [ 157.164847][ T4399] syz.3.241: attempt to access beyond end of device [ 157.164847][ T4399] loop3: rw=3, sector=7051230667808, nr_sectors = 8388600 limit=2048 [ 157.184650][ T4179] syz.0.174: attempt to access beyond end of device [ 157.184650][ T4179] loop0: rw=3, sector=8102716512008, nr_sectors = 8388600 limit=2048 [ 157.201444][ T3893] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0 [ 157.210011][ T4654] syz.4.324: attempt to access beyond end of device [ 157.210011][ T4654] loop4: rw=3, sector=6094309511408, nr_sectors = 8388600 limit=2048 [ 157.233175][ T3893] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0 [ 157.241134][ T3893] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0 [ 157.248888][ T3912] syz.2.69: attempt to access beyond end of device [ 157.248888][ T3912] loop2: rw=3, sector=9327762490208, nr_sectors = 8388600 limit=2048 [ 157.264628][ T4654] syz.4.324: attempt to access beyond end of device [ 157.264628][ T4654] loop4: rw=3, sector=6094317900008, nr_sectors = 8388600 limit=2048 [ 157.273599][ T4399] syz.3.241: attempt to access beyond end of device [ 157.273599][ T4399] loop3: rw=3, sector=7051239056408, nr_sectors = 8388600 limit=2048 [ 157.279910][ T3893] pantherlord 0003:0F30:0111.0012: unknown main item tag 0x0 [ 157.314548][ T4179] syz.0.174: attempt to access beyond end of device [ 157.314548][ T4179] loop0: rw=3, sector=8102724900608, nr_sectors = 8388600 limit=2048 [ 157.329801][ T4654] syz.4.324: attempt to access beyond end of device [ 157.329801][ T4654] loop4: rw=3, sector=6094326288608, nr_sectors = 8388600 limit=2048 [ 157.366338][ T3893] pantherlord 0003:0F30:0111.0012: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.1-1/input0 [ 157.404340][ T3682] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 157.412724][ T3893] pantherlord 0003:0F30:0111.0012: no output reports found [ 157.444300][ T3893] usb 2-1: USB disconnect, device number 15 [ 157.614299][ T3682] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 157.623383][ T3682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.669649][ T3682] usb 5-1: Product: syz [ 157.684538][ T3682] usb 5-1: Manufacturer: syz [ 157.689178][ T3682] usb 5-1: SerialNumber: syz [ 157.735048][ T3682] usb 5-1: config 0 descriptor?? [ 158.195262][ T5652] program syz.3.744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.474517][ T3682] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 158.504913][ T3682] asix: probe of 5-1:0.0 failed with error -71 [ 158.542014][ T3682] usb 5-1: USB disconnect, device number 5 [ 158.603243][ T5658] "syz.3.747" (5658) uses obsolete ecb(arc4) skcipher [ 158.645483][ T5661] loop1: detected capacity change from 0 to 256 [ 158.675130][ T5661] exfat: Deprecated parameter 'namecase' [ 158.732285][ T5661] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfc6d8, utbl_chksum : 0xe619d30d) [ 159.187024][ T5671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.753'. [ 159.401429][ T5682] loop1: detected capacity change from 0 to 256 [ 159.404234][ T5680] program syz.3.756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.484477][ T5682] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 159.515490][ T5682] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 159.564596][ T5682] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 159.572276][ T5682] UDF-fs: Scanning with blocksize 512 failed [ 159.645585][ T5682] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 159.686217][ T5682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.754158][ T5682] UDF-fs: error (device loop1): udf_read_inode: (ino 51) failed ident=257 [ 160.204918][ T5699] netlink: 'syz.1.764': attribute type 29 has an invalid length. [ 160.212985][ T5699] netlink: 'syz.1.764': attribute type 29 has an invalid length. [ 160.314521][ T5700] netlink: 'syz.1.764': attribute type 29 has an invalid length. [ 161.948419][ T5719] loop1: detected capacity change from 0 to 32768 [ 162.127427][ T5719] XFS (loop1): Mounting V5 Filesystem [ 162.134395][ T4179] bio_check_eod: 183955 callbacks suppressed [ 162.134410][ T4179] syz.0.174: attempt to access beyond end of device [ 162.134410][ T4179] loop0: rw=3, sector=8443193008808, nr_sectors = 8388600 limit=2048 [ 162.155335][ T4399] syz.3.241: attempt to access beyond end of device [ 162.155335][ T4399] loop3: rw=3, sector=7448556706808, nr_sectors = 8388600 limit=2048 [ 162.156625][ T5745] random: crng reseeded on system resumption [ 162.177799][ T3912] syz.2.69: attempt to access beyond end of device [ 162.177799][ T3912] loop2: rw=3, sector=9718620918608, nr_sectors = 8388600 limit=2048 [ 162.216667][ T4654] syz.4.324: attempt to access beyond end of device [ 162.216667][ T4654] loop4: rw=3, sector=6581385181808, nr_sectors = 8388600 limit=2048 [ 162.244246][ T4179] syz.0.174: attempt to access beyond end of device [ 162.244246][ T4179] loop0: rw=3, sector=8443201397408, nr_sectors = 8388600 limit=2048 [ 162.244265][ T3912] syz.2.69: attempt to access beyond end of device [ 162.244265][ T3912] loop2: rw=3, sector=9718629307208, nr_sectors = 8388600 limit=2048 [ 162.244299][ T3912] syz.2.69: attempt to access beyond end of device [ 162.244299][ T3912] loop2: rw=3, sector=9718637695808, nr_sectors = 8388600 limit=2048 [ 162.286276][ T5719] XFS (loop1): Ending clean mount [ 162.295986][ T4179] syz.0.174: attempt to access beyond end of device [ 162.295986][ T4179] loop0: rw=3, sector=8443209786008, nr_sectors = 8388600 limit=2048 [ 162.324394][ T4399] syz.3.241: attempt to access beyond end of device [ 162.324394][ T4399] loop3: rw=3, sector=7448565095408, nr_sectors = 8388600 limit=2048 [ 162.339297][ T4654] syz.4.324: attempt to access beyond end of device [ 162.339297][ T4654] loop4: rw=3, sector=6581393570408, nr_sectors = 8388600 limit=2048 [ 162.342404][ T5719] XFS (loop1): Quotacheck needed: Please wait. [ 162.486097][ T5719] XFS (loop1): Quotacheck: Done. [ 162.706691][ T5758] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 162.774603][ T3636] XFS (loop1): Unmounting Filesystem [ 162.844120][ T5758] CIFS mount error: No usable UNC path provided in device string! [ 162.844120][ T5758] [ 162.923795][ T5758] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 163.786018][ T5775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.796'. [ 164.341159][ T5768] loop1: detected capacity change from 0 to 32768 [ 164.375087][ T5784] netlink: 'syz.0.800': attribute type 29 has an invalid length. [ 164.405356][ T5768] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.790 (5768) [ 164.485982][ T5784] netlink: 'syz.0.800': attribute type 29 has an invalid length. [ 164.495283][ T5768] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 164.524244][ T5789] netlink: 'syz.0.800': attribute type 29 has an invalid length. [ 164.532354][ T5768] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 164.564384][ T5768] BTRFS info (device loop1): using free space tree [ 164.680617][ T26] audit: type=1326 audit(1725782744.893:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5794 comm="syz.4.804" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb20f7cef9 code=0x0 [ 165.166282][ T5768] BTRFS info (device loop1): enabling ssd optimizations [ 165.352672][ T3636] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 165.697377][ T5820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.810'. [ 166.304328][ T3682] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 166.690538][ T3726] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 166.882368][ T3682] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 166.902905][ T3682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.941093][ T3682] usb 2-1: Product: syz [ 166.955911][ T3682] usb 2-1: Manufacturer: syz [ 166.960569][ T3682] usb 2-1: SerialNumber: syz [ 166.974207][ T3726] usb 5-1: Using ep0 maxpacket: 16 [ 167.000970][ T3682] usb 2-1: config 0 descriptor?? [ 167.065722][ T3682] ch341 2-1:0.0: ch341-uart converter detected [ 167.120765][ T3726] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 167.139124][ T3726] usb 5-1: config 0 has no interface number 0 [ 167.144990][ T4399] bio_check_eod: 210112 callbacks suppressed [ 167.145005][ T4399] syz.3.241: attempt to access beyond end of device [ 167.145005][ T4399] loop3: rw=3, sector=7864102785008, nr_sectors = 8388600 limit=2048 [ 167.149297][ T4179] syz.0.174: attempt to access beyond end of device [ 167.149297][ T4179] loop0: rw=3, sector=8852430859808, nr_sectors = 8388600 limit=2048 [ 167.151196][ T4399] syz.3.241: attempt to access beyond end of device [ 167.151196][ T4399] loop3: rw=3, sector=7864111173608, nr_sectors = 8388600 limit=2048 [ 167.174125][ T3726] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.181436][ T3912] syz.2.69: attempt to access beyond end of device [ 167.181436][ T3912] loop2: rw=3, sector=10179339607808, nr_sectors = 8388600 limit=2048 [ 167.222787][ T4654] syz.4.324: attempt to access beyond end of device [ 167.222787][ T4654] loop4: rw=3, sector=7144201521608, nr_sectors = 8388600 limit=2048 [ 167.238286][ T4654] syz.4.324: attempt to access beyond end of device [ 167.238286][ T4654] loop4: rw=3, sector=7144209910208, nr_sectors = 8388600 limit=2048 [ 167.263815][ T3726] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 167.264200][ T4179] syz.0.174: attempt to access beyond end of device [ 167.264200][ T4179] loop0: rw=3, sector=8852439248408, nr_sectors = 8388600 limit=2048 [ 167.304355][ T4654] syz.4.324: attempt to access beyond end of device [ 167.304355][ T4654] loop4: rw=3, sector=7144218298808, nr_sectors = 8388600 limit=2048 [ 167.354218][ T4654] syz.4.324: attempt to access beyond end of device [ 167.354218][ T4654] loop4: rw=3, sector=7144226687408, nr_sectors = 8388600 limit=2048 [ 167.361004][ T4399] syz.3.241: attempt to access beyond end of device [ 167.361004][ T4399] loop3: rw=3, sector=7864119562208, nr_sectors = 8388600 limit=2048 [ 167.434713][ T3726] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 167.456000][ T3726] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 167.483538][ T3726] usb 5-1: Product: syz [ 167.504289][ T3726] usb 5-1: SerialNumber: syz [ 167.532855][ T3726] usb 5-1: config 0 descriptor?? [ 167.592677][ T3726] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 167.613419][ T3726] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input10 [ 167.737489][ T3682] usb 2-1: failed to send control message: -71 [ 167.747696][ T3682] ch341-uart: probe of ttyUSB0 failed with error -71 [ 167.774364][ T153] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 167.778100][ T3682] usb 2-1: USB disconnect, device number 16 [ 167.838707][ T3682] ch341 2-1:0.0: device disconnected [ 167.888051][ T3889] usb 5-1: USB disconnect, device number 6 [ 167.894471][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.902140][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 167.943893][ T3889] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 168.134505][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.158675][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.192985][ T153] usb 1-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 168.226444][ T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.257766][ T153] usb 1-1: config 0 descriptor?? [ 168.789658][ T153] input: HID 28bd:0905 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0905.0013/input/input11 [ 168.905140][ T153] uclogic 0003:28BD:0905.0013: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0905] on usb-dummy_hcd.0-1/input0 [ 168.994546][ T3889] usb 1-1: USB disconnect, device number 7 [ 169.049411][ T5857] loop1: detected capacity change from 0 to 8192 [ 169.095803][ T5857] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 169.134347][ T5857] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 169.143579][ T5857] REISERFS (device loop1): using ordered data mode [ 169.254712][ T5857] reiserfs: using flush barriers [ 169.275026][ T5857] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 169.352754][ T5857] REISERFS (device loop1): checking transaction log (loop1) [ 169.406350][ T5857] REISERFS (device loop1): Using r5 hash to sort names [ 169.413267][ T5857] REISERFS (device loop1): using 3.5.x disk format [ 169.444425][ T5857] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 169.914267][ T3889] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 170.034459][ T3651] Bluetooth: hci8: command tx timeout [ 170.154171][ T3889] usb 5-1: Using ep0 maxpacket: 8 [ 170.464264][ T3889] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 170.473399][ T3889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.514125][ T3889] usb 5-1: Product: syz [ 170.518334][ T3889] usb 5-1: Manufacturer: syz [ 170.522930][ T3889] usb 5-1: SerialNumber: syz [ 170.563190][ T3889] usb 5-1: config 0 descriptor?? [ 170.626220][ T3889] gspca_main: sq905-2.14.0 probing 2770:9120 [ 170.704365][ T32] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 171.075229][ T32] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.104654][ T32] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 171.154336][ T32] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.168734][ T32] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 171.217784][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.244895][ T32] usb 2-1: config 0 descriptor?? [ 171.394443][ T3889] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 171.413702][ T3889] sq905: probe of 5-1:0.0 failed with error -71 [ 171.454328][ T3889] usb 5-1: USB disconnect, device number 7 [ 171.729860][ T32] wacom 0003:056A:0000.0014: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 171.789610][ T32] wacom 0003:056A:0000.0014: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.1-1/input0 [ 171.834386][ T32] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0000.0014/input/input12 [ 171.949187][ T32] usb 2-1: USB disconnect, device number 17 [ 172.166918][ T4399] bio_check_eod: 232689 callbacks suppressed [ 172.166935][ T4399] syz.3.241: attempt to access beyond end of device [ 172.166935][ T4399] loop3: rw=3, sector=8310552465608, nr_sectors = 8388600 limit=2048 [ 172.188116][ T4179] syz.0.174: attempt to access beyond end of device [ 172.188116][ T4179] loop0: rw=3, sector=9412378298408, nr_sectors = 8388600 limit=2048 [ 172.206493][ T3912] syz.2.69: attempt to access beyond end of device [ 172.206493][ T3912] loop2: rw=3, sector=10580063029808, nr_sectors = 8388600 limit=2048 [ 172.221865][ T4654] syz.4.324: attempt to access beyond end of device [ 172.221865][ T4654] loop4: rw=3, sector=7809627216608, nr_sectors = 8388600 limit=2048 [ 172.244224][ T4179] syz.0.174: attempt to access beyond end of device [ 172.244224][ T4179] loop0: rw=3, sector=9412386687008, nr_sectors = 8388600 limit=2048 [ 172.252614][ T4399] syz.3.241: attempt to access beyond end of device [ 172.252614][ T4399] loop3: rw=3, sector=8310560854208, nr_sectors = 8388600 limit=2048 [ 172.277316][ T3912] syz.2.69: attempt to access beyond end of device [ 172.277316][ T3912] loop2: rw=3, sector=10580071418408, nr_sectors = 8388600 limit=2048 [ 172.299012][ T4654] syz.4.324: attempt to access beyond end of device [ 172.299012][ T4654] loop4: rw=3, sector=7809635605208, nr_sectors = 8388600 limit=2048 [ 172.304315][ T4399] syz.3.241: attempt to access beyond end of device [ 172.304315][ T4399] loop3: rw=3, sector=8310569242808, nr_sectors = 8388600 limit=2048 [ 172.323871][ T4179] syz.0.174: attempt to access beyond end of device [ 172.323871][ T4179] loop0: rw=3, sector=9412395075608, nr_sectors = 8388600 limit=2048 [ 172.703474][ T5936] overlayfs: unrecognized mount option "\./file0" or missing value [ 175.333321][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.891'. [ 175.714342][ T3648] Bluetooth: hci0: command 0x0406 tx timeout [ 175.714537][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 175.721577][ T3648] Bluetooth: hci2: command 0x0406 tx timeout [ 175.726529][ T3646] Bluetooth: hci4: command 0x0406 tx timeout [ 175.726621][ T3646] Bluetooth: hci3: command 0x0406 tx timeout [ 176.172884][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.900'. [ 177.176959][ T4654] bio_check_eod: 180409 callbacks suppressed [ 177.176978][ T4654] syz.4.324: attempt to access beyond end of device [ 177.176978][ T4654] loop4: rw=3, sector=8214100342808, nr_sectors = 8388600 limit=2048 [ 177.177015][ T4179] syz.0.174: attempt to access beyond end of device [ 177.177015][ T4179] loop0: rw=3, sector=9834089997608, nr_sectors = 8388600 limit=2048 [ 177.182995][ T4654] syz.4.324: attempt to access beyond end of device [ 177.182995][ T4654] loop4: rw=3, sector=8214108731408, nr_sectors = 8388600 limit=2048 [ 177.229072][ T3912] syz.2.69: attempt to access beyond end of device [ 177.229072][ T3912] loop2: rw=3, sector=10972389463208, nr_sectors = 8388600 limit=2048 [ 177.267281][ T4399] syz.3.241: attempt to access beyond end of device [ 177.267281][ T4399] loop3: rw=3, sector=8659862158208, nr_sectors = 8388600 limit=2048 [ 177.315503][ T3912] syz.2.69: attempt to access beyond end of device [ 177.315503][ T3912] loop2: rw=3, sector=10972397851808, nr_sectors = 8388600 limit=2048 [ 177.322510][ T4399] syz.3.241: attempt to access beyond end of device [ 177.322510][ T4399] loop3: rw=3, sector=8659870546808, nr_sectors = 8388600 limit=2048 [ 177.332109][ T4179] syz.0.174: attempt to access beyond end of device [ 177.332109][ T4179] loop0: rw=3, sector=9834098386208, nr_sectors = 8388600 limit=2048 [ 177.365751][ T4654] syz.4.324: attempt to access beyond end of device [ 177.365751][ T4654] loop4: rw=3, sector=8214117120008, nr_sectors = 8388600 limit=2048 [ 177.429164][ T3912] syz.2.69: attempt to access beyond end of device [ 177.429164][ T3912] loop2: rw=3, sector=10972406240408, nr_sectors = 8388600 limit=2048 [ 177.454738][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 178.050990][ T6060] loop1: detected capacity change from 0 to 4096 [ 178.124246][ T6060] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 179.006093][ T6079] loop1: detected capacity change from 0 to 4096 [ 179.081524][ T6079] NILFS (loop1): invalid segment: Checksum error in segment payload [ 179.114932][ T6079] NILFS (loop1): trying rollback from an earlier position [ 179.175316][ T6079] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 179.224431][ T6079] NILFS (loop1): couldn't remount because the filesystem is in an incomplete recovery state [ 180.968188][ T6100] loop1: detected capacity change from 0 to 40427 [ 181.028243][ T6100] F2FS-fs (loop1): invalid crc value [ 181.085027][ T6100] F2FS-fs (loop1): Found nat_bits in checkpoint [ 181.200174][ T6100] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 182.185420][ T3912] bio_check_eod: 180737 callbacks suppressed [ 182.185437][ T3912] syz.2.69: attempt to access beyond end of device [ 182.185437][ T3912] loop2: rw=3, sector=11361737943608, nr_sectors = 8388600 limit=2048 [ 182.197521][ T4179] syz.0.174: attempt to access beyond end of device [ 182.197521][ T4179] loop0: rw=3, sector=10215007935008, nr_sectors = 8388600 limit=2048 [ 182.251417][ T4654] syz.4.324: attempt to access beyond end of device [ 182.251417][ T4654] loop4: rw=3, sector=8624462266208, nr_sectors = 8388600 limit=2048 [ 182.253621][ T4399] syz.3.241: attempt to access beyond end of device [ 182.253621][ T4399] loop3: rw=3, sector=9052247311808, nr_sectors = 8388600 limit=2048 [ 182.280982][ T3912] syz.2.69: attempt to access beyond end of device [ 182.280982][ T3912] loop2: rw=3, sector=11361746332208, nr_sectors = 8388600 limit=2048 [ 182.281028][ T3912] syz.2.69: attempt to access beyond end of device [ 182.281028][ T3912] loop2: rw=3, sector=11361754720808, nr_sectors = 8388600 limit=2048 [ 182.281062][ T3912] syz.2.69: attempt to access beyond end of device [ 182.281062][ T3912] loop2: rw=3, sector=11361763109408, nr_sectors = 8388600 limit=2048 [ 182.281096][ T3912] syz.2.69: attempt to access beyond end of device [ 182.281096][ T3912] loop2: rw=3, sector=11361771498008, nr_sectors = 8388600 limit=2048 [ 182.281129][ T3912] syz.2.69: attempt to access beyond end of device [ 182.281129][ T3912] loop2: rw=3, sector=11361779886608, nr_sectors = 8388600 limit=2048 [ 182.281162][ T3912] syz.2.69: attempt to access beyond end of device [ 182.281162][ T3912] loop2: rw=3, sector=11361788275208, nr_sectors = 8388600 limit=2048 [ 183.075878][ T6116] loop1: detected capacity change from 0 to 32768 [ 183.124824][ T6116] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.942 (6116) [ 183.162695][ T6116] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 183.207301][ T6116] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 183.253921][ T6116] BTRFS info (device loop1): using free space tree [ 183.674184][ T153] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 183.694366][ T6116] BTRFS info (device loop1): enabling ssd optimizations [ 183.834825][ T3636] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 183.934244][ T153] usb 3-1: Using ep0 maxpacket: 32 [ 184.064383][ T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.104303][ T153] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.153726][ T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.204311][ T153] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 184.234332][ T153] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 184.278048][ T153] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 184.334270][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.381347][ T153] usb 3-1: config 0 descriptor?? [ 184.656860][ T153] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 185.454314][ T3682] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 185.778175][ T6158] sch_tbf: peakrate 32768 is lower than or equals to rate 65550 ! [ 185.855160][ T3682] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.884175][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.914945][ T3682] usb 2-1: config 0 descriptor?? [ 185.955503][ T3682] cp210x 2-1:0.0: cp210x converter detected [ 186.384443][ T3682] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 186.404358][ T32] usb 3-1: USB disconnect, device number 4 [ 186.404660][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 186.417339][ T32] usblp0: removed [ 186.435585][ T3682] usb 2-1: cp210x converter now attached to ttyUSB0 [ 186.530781][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 186.627140][ T153] usb 2-1: USB disconnect, device number 18 [ 186.653445][ T153] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.711669][ T153] cp210x 2-1:0.0: device disconnected [ 187.144338][ T3640] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 187.200530][ T4654] bio_check_eod: 209845 callbacks suppressed [ 187.200551][ T4654] syz.4.324: attempt to access beyond end of device [ 187.200551][ T4654] loop4: rw=3, sector=9052809348008, nr_sectors = 8388600 limit=2048 [ 187.205271][ T4179] syz.0.174: attempt to access beyond end of device [ 187.205271][ T4179] loop0: rw=3, sector=10660752973208, nr_sectors = 8388600 limit=2048 [ 187.213641][ T4654] syz.4.324: attempt to access beyond end of device [ 187.213641][ T4654] loop4: rw=3, sector=9052817736608, nr_sectors = 8388600 limit=2048 [ 187.229861][ T4399] syz.3.241: attempt to access beyond end of device [ 187.229861][ T4399] loop3: rw=3, sector=9445035118208, nr_sectors = 8388600 limit=2048 [ 187.237023][ T3912] syz.2.69: attempt to access beyond end of device [ 187.237023][ T3912] loop2: rw=3, sector=11986814472608, nr_sectors = 8388600 limit=2048 [ 187.289152][ T4654] syz.4.324: attempt to access beyond end of device [ 187.289152][ T4654] loop4: rw=3, sector=9052826125208, nr_sectors = 8388600 limit=2048 [ 187.312661][ T4654] syz.4.324: attempt to access beyond end of device [ 187.312661][ T4654] loop4: rw=3, sector=9052834513808, nr_sectors = 8388600 limit=2048 [ 187.334352][ T3912] syz.2.69: attempt to access beyond end of device [ 187.334352][ T3912] loop2: rw=3, sector=11986822861208, nr_sectors = 8388600 limit=2048 [ 187.336524][ T6186] bond0: option mode: unable to set because the bond device has slaves [ 187.358039][ T4654] syz.4.324: attempt to access beyond end of device [ 187.358039][ T4654] loop4: rw=3, sector=9052842902408, nr_sectors = 8388600 limit=2048 [ 187.368300][ T4179] syz.0.174: attempt to access beyond end of device [ 187.368300][ T4179] loop0: rw=3, sector=10660761361808, nr_sectors = 8388600 limit=2048 [ 187.424248][ T3640] usb 5-1: Using ep0 maxpacket: 16 [ 187.544420][ T3640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.574132][ T3640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.583929][ T3640] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.697524][ T3640] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 187.734467][ T3640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.772727][ T3640] usb 5-1: config 0 descriptor?? [ 188.041807][ T6197] IPVS: persistence engine module ip_vs_pe_X not found [ 188.266308][ T3640] koneplus 0003:1E7D:2E22.0015: unknown main item tag 0x0 [ 188.318459][ T3640] koneplus 0003:1E7D:2E22.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 188.532914][ T6211] loop1: detected capacity change from 0 to 512 [ 188.600203][ T6211] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.624188][ T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 188.665795][ T6211] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 188.679305][ T3640] usb 5-1: USB disconnect, device number 8 [ 188.753660][ T6211] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038 (0x7fffffff) [ 188.884169][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 189.004232][ T32] usb 3-1: config 0 has an invalid interface number: 159 but max is 1 [ 189.020829][ T32] usb 3-1: config 0 has an invalid interface number: 249 but max is 1 [ 189.043861][ T32] usb 3-1: config 0 has no interface number 0 [ 189.074351][ T32] usb 3-1: config 0 has no interface number 1 [ 189.080493][ T32] usb 3-1: config 0 interface 159 has no altsetting 0 [ 189.111931][ T32] usb 3-1: config 0 interface 249 has no altsetting 0 [ 189.143157][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 189.284452][ T32] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 189.313945][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.332728][ T32] usb 3-1: Product: syz [ 189.364188][ T32] usb 3-1: Manufacturer: syz [ 189.368830][ T32] usb 3-1: SerialNumber: syz [ 189.414795][ T32] usb 3-1: config 0 descriptor?? [ 189.734346][ T32] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 189.775202][ T32] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 189.783258][ T32] dib0700: firmware download failed at 7 with -22 [ 189.849470][ T6233] hpfs: Bad magic ... probably not HPFS [ 189.883158][ T32] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 189.925040][ T32] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 189.933099][ T32] dib0700: firmware download failed at 7 with -22 [ 189.984280][ T32] usb 3-1: USB disconnect, device number 5 [ 191.436949][ T6267] loop1: detected capacity change from 0 to 128 [ 191.598688][ T3636] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 192.208097][ T3912] bio_check_eod: 204508 callbacks suppressed [ 192.208116][ T3912] syz.2.69: attempt to access beyond end of device [ 192.208116][ T3912] loop2: rw=3, sector=12491137104608, nr_sectors = 8388600 limit=2048 [ 192.212840][ T4654] syz.4.324: attempt to access beyond end of device [ 192.212840][ T4654] loop4: rw=3, sector=9575536568408, nr_sectors = 8388600 limit=2048 [ 192.246193][ T4179] syz.0.174: attempt to access beyond end of device [ 192.246193][ T4179] loop0: rw=3, sector=11058875929208, nr_sectors = 8388600 limit=2048 [ 192.262908][ T4399] syz.3.241: attempt to access beyond end of device [ 192.262908][ T4399] loop3: rw=3, sector=9823025434208, nr_sectors = 8388600 limit=2048 [ 192.271967][ T4179] syz.0.174: attempt to access beyond end of device [ 192.271967][ T4179] loop0: rw=3, sector=11058884317808, nr_sectors = 8388600 limit=2048 [ 192.292303][ T3912] syz.2.69: attempt to access beyond end of device [ 192.292303][ T3912] loop2: rw=3, sector=12491145493208, nr_sectors = 8388600 limit=2048 [ 192.292350][ T3912] syz.2.69: attempt to access beyond end of device [ 192.292350][ T3912] loop2: rw=3, sector=12491153881808, nr_sectors = 8388600 limit=2048 [ 192.292393][ T3912] syz.2.69: attempt to access beyond end of device [ 192.292393][ T3912] loop2: rw=3, sector=12491162270408, nr_sectors = 8388600 limit=2048 [ 192.322191][ T4179] syz.0.174: attempt to access beyond end of device [ 192.322191][ T4179] loop0: rw=3, sector=11058892706408, nr_sectors = 8388600 limit=2048 [ 192.364846][ T4179] syz.0.174: attempt to access beyond end of device [ 192.364846][ T4179] loop0: rw=3, sector=11058901095008, nr_sectors = 8388600 limit=2048 [ 193.088301][ T6283] loop1: detected capacity change from 0 to 32768 [ 193.113444][ T6283] XFS: ikeep mount option is deprecated. [ 193.210032][ T6283] XFS (loop1): Mounting V5 Filesystem [ 193.291355][ T6283] XFS (loop1): Ending clean mount [ 193.321593][ T6283] XFS (loop1): Quotacheck needed: Please wait. [ 193.385047][ T6283] XFS (loop1): Quotacheck: Done. [ 193.575810][ T3636] XFS (loop1): Unmounting Filesystem [ 194.121578][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.127965][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.914680][ T6313] MTD: Couldn't look up 'memory.events': -15 [ 195.882623][ T6329] loop1: detected capacity change from 0 to 4096 [ 195.912117][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 195.968317][ T6329] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 195.994224][ T6329] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 196.036458][ T6329] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 196.094201][ T6329] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 196.142966][ T6329] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 196.208426][ T6329] ntfs: volume version 3.1. [ 196.218959][ T6329] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 196.259090][ T6329] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 196.286727][ T6335] netlink: 'syz.3.1043': attribute type 5 has an invalid length. [ 196.295070][ T6329] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 196.334249][ T6329] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 196.372825][ T6329] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 197.214217][ T4179] bio_check_eod: 184823 callbacks suppressed [ 197.214237][ T4179] syz.0.174: attempt to access beyond end of device [ 197.214237][ T4179] loop0: rw=3, sector=11581401823208, nr_sectors = 8388600 limit=2048 [ 197.214280][ T4179] syz.0.174: attempt to access beyond end of device [ 197.214280][ T4179] loop0: rw=3, sector=11581410211808, nr_sectors = 8388600 limit=2048 [ 197.214316][ T4179] syz.0.174: attempt to access beyond end of device [ 197.214316][ T4179] loop0: rw=3, sector=11581418600408, nr_sectors = 8388600 limit=2048 [ 197.214356][ T4179] syz.0.174: attempt to access beyond end of device [ 197.214356][ T4179] loop0: rw=3, sector=11581426989008, nr_sectors = 8388600 limit=2048 [ 197.214391][ T4179] syz.0.174: attempt to access beyond end of device [ 197.214391][ T4179] loop0: rw=3, sector=11581435377608, nr_sectors = 8388600 limit=2048 [ 197.214425][ T4179] syz.0.174: attempt to access beyond end of device [ 197.214425][ T4179] loop0: rw=3, sector=11581443766208, nr_sectors = 8388600 limit=2048 [ 197.214459][ T4179] syz.0.174: attempt to access beyond end of device [ 197.214459][ T4179] loop0: rw=3, sector=11581452154808, nr_sectors = 8388600 limit=2048 [ 197.214494][ T4179] syz.0.174: attempt to access beyond end of device [ 197.214494][ T4179] loop0: rw=3, sector=11581460543408, nr_sectors = 8388600 limit=2048 [ 197.214528][ T4179] syz.0.174: attempt to access beyond end of device [ 197.214528][ T4179] loop0: rw=3, sector=11581468932008, nr_sectors = 8388600 limit=2048 [ 197.214563][ T4179] syz.0.174: attempt to access beyond end of device [ 197.214563][ T4179] loop0: rw=3, sector=11581477320608, nr_sectors = 8388600 limit=2048 [ 198.310750][ T6372] IPVS: Error connecting to the multicast addr [ 198.858561][ T6386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1066'. [ 199.070593][ T6390] loop1: detected capacity change from 0 to 512 [ 199.188772][ T6390] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 199.245485][ T6390] ext4 filesystem being mounted at /274/bus supports timestamps until 2038 (0x7fffffff) [ 199.487394][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 199.628308][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1060'. [ 199.786876][ T6402] loop1: detected capacity change from 0 to 64 [ 201.136999][ T6417] netlink: 'syz.0.1078': attribute type 29 has an invalid length. [ 201.181796][ T6417] netlink: 'syz.0.1078': attribute type 29 has an invalid length. [ 201.223390][ T6420] netlink: 'syz.0.1078': attribute type 29 has an invalid length. [ 201.296031][ T6417] netlink: 'syz.0.1078': attribute type 29 has an invalid length. [ 201.314236][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 201.794800][ T3681] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 202.083726][ T3681] usb 2-1: Using ep0 maxpacket: 16 [ 202.205640][ T3681] usb 2-1: config 0 has an invalid interface number: 159 but max is 1 [ 202.240779][ T4179] bio_check_eod: 200687 callbacks suppressed [ 202.240798][ T4179] syz.0.174: attempt to access beyond end of device [ 202.240798][ T4179] loop0: rw=3, sector=11967646521608, nr_sectors = 8388600 limit=2048 [ 202.242540][ T3681] usb 2-1: config 0 has an invalid interface number: 249 but max is 1 [ 202.252472][ T4399] syz.3.241: attempt to access beyond end of device [ 202.252472][ T4399] loop3: rw=3, sector=10647406710608, nr_sectors = 8388600 limit=2048 [ 202.280151][ T4654] syz.4.324: attempt to access beyond end of device [ 202.280151][ T4654] loop4: rw=3, sector=10328044320008, nr_sectors = 8388600 limit=2048 [ 202.285744][ T3912] syz.2.69: attempt to access beyond end of device [ 202.285744][ T3912] loop2: rw=3, sector=13346791081808, nr_sectors = 8388600 limit=2048 [ 202.324058][ T4179] syz.0.174: attempt to access beyond end of device [ 202.324058][ T4179] loop0: rw=3, sector=11967654910208, nr_sectors = 8388600 limit=2048 [ 202.332522][ T3681] usb 2-1: config 0 has no interface number 0 [ 202.388919][ T3681] usb 2-1: config 0 has no interface number 1 [ 202.388947][ T4399] syz.3.241: attempt to access beyond end of device [ 202.388947][ T4399] loop3: rw=3, sector=10647415099208, nr_sectors = 8388600 limit=2048 [ 202.417425][ T3681] usb 2-1: config 0 interface 159 has no altsetting 0 [ 202.422998][ T4179] syz.0.174: attempt to access beyond end of device [ 202.422998][ T4179] loop0: rw=3, sector=11967663298808, nr_sectors = 8388600 limit=2048 [ 202.448207][ T3681] usb 2-1: config 0 interface 249 has no altsetting 0 [ 202.450082][ T3912] syz.2.69: attempt to access beyond end of device [ 202.450082][ T3912] loop2: rw=3, sector=13346799470408, nr_sectors = 8388600 limit=2048 [ 202.487475][ T4179] syz.0.174: attempt to access beyond end of device [ 202.487475][ T4179] loop0: rw=3, sector=11967671687408, nr_sectors = 8388600 limit=2048 [ 202.493004][ T4654] syz.4.324: attempt to access beyond end of device [ 202.493004][ T4654] loop4: rw=3, sector=10328052708608, nr_sectors = 8388600 limit=2048 [ 202.644356][ T3681] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 202.684188][ T3681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.692226][ T3681] usb 2-1: Product: syz [ 202.714174][ T3681] usb 2-1: Manufacturer: syz [ 202.718807][ T3681] usb 2-1: SerialNumber: syz [ 202.747647][ T3681] usb 2-1: config 0 descriptor?? [ 202.804248][ T32] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 202.988032][ T153] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.044326][ T3681] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 203.075734][ T153] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 203.084880][ T3681] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 203.133048][ T3681] dib0700: firmware download failed at 7 with -22 [ 203.165077][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.196480][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.214363][ T3681] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 203.251727][ T32] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 203.256624][ T3681] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 203.291600][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.320888][ T3681] dib0700: firmware download failed at 7 with -22 [ 203.326056][ T32] usb 5-1: config 0 descriptor?? [ 203.391997][ T3681] usb 2-1: USB disconnect, device number 19 [ 203.670943][ T6428] syz.1.1073 (6428) used greatest stack depth: 18584 bytes left [ 203.858212][ T32] hid-steam 0003:28DE:1142.0017: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 203.999772][ T32] hid-steam 0003:28DE:1142.0018: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 204.114282][ T32] hid-steam 0003:28DE:1142.0017: Steam wireless receiver connected [ 204.172841][ T32] usb 5-1: USB disconnect, device number 9 [ 204.227114][ T32] hid-steam 0003:28DE:1142.0017: Steam wireless receiver disconnected [ 205.652972][ T6544] sch_tbf: peakrate 32768 is lower than or equals to rate 65550 ! [ 205.912036][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 205.988070][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 206.154288][ T3739] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 206.404380][ T3739] usb 2-1: Using ep0 maxpacket: 8 [ 206.484598][ T32] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 206.524357][ T3739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.552266][ T3739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.582610][ T3739] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 206.633164][ T3739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.678158][ T3739] usb 2-1: config 0 descriptor?? [ 206.755201][ T32] usb 5-1: Using ep0 maxpacket: 16 [ 206.894236][ T32] usb 5-1: config 0 has an invalid interface number: 159 but max is 1 [ 206.902465][ T32] usb 5-1: config 0 has an invalid interface number: 249 but max is 1 [ 206.945610][ T32] usb 5-1: config 0 has no interface number 0 [ 206.979775][ T32] usb 5-1: config 0 has no interface number 1 [ 207.004236][ T32] usb 5-1: config 0 interface 159 has no altsetting 0 [ 207.011056][ T32] usb 5-1: config 0 interface 249 has no altsetting 0 [ 207.168462][ T3739] pantherlord 0003:0810:0001.0019: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.1-1/input0 [ 207.204467][ T3739] pantherlord 0003:0810:0001.0019: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 207.218087][ T32] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 207.238272][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.246290][ T3912] bio_check_eod: 195999 callbacks suppressed [ 207.246307][ T3912] syz.2.69: attempt to access beyond end of device [ 207.246307][ T3912] loop2: rw=3, sector=13739838934808, nr_sectors = 8388600 limit=2048 [ 207.246343][ T3912] syz.2.69: attempt to access beyond end of device [ 207.246343][ T3912] loop2: rw=3, sector=13739847323408, nr_sectors = 8388600 limit=2048 [ 207.246374][ T3912] syz.2.69: attempt to access beyond end of device [ 207.246374][ T3912] loop2: rw=3, sector=13739855712008, nr_sectors = 8388600 limit=2048 [ 207.246552][ T4179] syz.0.174: attempt to access beyond end of device [ 207.246552][ T4179] loop0: rw=3, sector=12348136640408, nr_sectors = 8388600 limit=2048 [ 207.253500][ T4654] syz.4.324: attempt to access beyond end of device [ 207.253500][ T4654] loop4: rw=3, sector=10879284391808, nr_sectors = 8388600 limit=2048 [ 207.295688][ T32] usb 5-1: Product: syz [ 207.321595][ T4399] syz.3.241: attempt to access beyond end of device [ 207.321595][ T4399] loop3: rw=3, sector=11044808247008, nr_sectors = 8388600 limit=2048 [ 207.336343][ T4654] syz.4.324: attempt to access beyond end of device [ 207.336343][ T4654] loop4: rw=3, sector=10879292780408, nr_sectors = 8388600 limit=2048 [ 207.346635][ T4179] syz.0.174: attempt to access beyond end of device [ 207.346635][ T4179] loop0: rw=3, sector=12348145029008, nr_sectors = 8388600 limit=2048 [ 207.383746][ T32] usb 5-1: Manufacturer: syz [ 207.392072][ T32] usb 5-1: SerialNumber: syz [ 207.408054][ T32] usb 5-1: config 0 descriptor?? [ 207.413301][ T4654] syz.4.324: attempt to access beyond end of device [ 207.413301][ T4654] loop4: rw=3, sector=10879301169008, nr_sectors = 8388600 limit=2048 [ 207.439468][ T153] usb 2-1: USB disconnect, device number 20 [ 207.443909][ T3912] syz.2.69: attempt to access beyond end of device [ 207.443909][ T3912] loop2: rw=3, sector=13739864100608, nr_sectors = 8388600 limit=2048 [ 207.584317][ T3739] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 207.734290][ T32] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 207.766616][ T32] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 207.806691][ T32] dib0700: firmware download failed at 7 with -22 [ 207.834301][ T3739] usb 1-1: Using ep0 maxpacket: 32 [ 207.874982][ T32] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 207.905034][ T32] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 207.933484][ T32] dib0700: firmware download failed at 7 with -22 [ 207.959804][ T32] usb 5-1: USB disconnect, device number 10 [ 207.966444][ T3739] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 208.164472][ T3739] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 208.173739][ T3739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.224157][ T3739] usb 1-1: Product: syz [ 208.228432][ T3739] usb 1-1: Manufacturer: syz [ 208.233065][ T3739] usb 1-1: SerialNumber: syz [ 208.284332][ T3739] usb 1-1: config 0 descriptor?? [ 208.304426][ T6573] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 208.352905][ T3739] hub 1-1:0.0: bad descriptor, ignoring hub [ 208.384420][ T3739] hub: probe of 1-1:0.0 failed with error -5 [ 208.443984][ T3739] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 208.573121][ T6602] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 208.619983][ T6602] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 208.654749][ T3681] usb 1-1: USB disconnect, device number 8 [ 208.682284][ T6602] overlayfs: fs on './file1' does not support file handles, falling back to xino=off. [ 208.740773][ T6602] overlayfs: conflicting lowerdir path [ 208.914502][ T3739] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 209.126271][ T6610] loop1: detected capacity change from 0 to 16 [ 209.155010][ T6610] erofs: (device loop1): mounted with root inode @ nid 36. [ 209.185351][ T6610] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 209.213444][ T6610] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 209.244340][ T6610] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 209.434648][ T3739] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=3b.74 [ 209.468152][ T3739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.488848][ T3739] usb 5-1: Product: syz [ 209.497551][ T3739] usb 5-1: Manufacturer: syz [ 209.504708][ T3739] usb 5-1: SerialNumber: syz [ 209.562808][ T3739] usb 5-1: config 0 descriptor?? [ 209.654490][ T3739] as10x_usb: device has been detected [ 209.660278][ T3739] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 209.739575][ T3739] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 209.812286][ T3739] as10x_usb: error during firmware upload part1 [ 209.855838][ T3739] Registered device PCTV Systems picoStick (74e) [ 209.865139][ T3739] usb 5-1: USB disconnect, device number 11 [ 209.907345][ T3739] Unregistered device PCTV Systems picoStick (74e) [ 209.908651][ T3739] as10x_usb: device has been disconnected [ 210.048856][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1147'. [ 211.555340][ T3646] Bluetooth: hci6: command 0x0406 tx timeout [ 212.270710][ T4179] bio_check_eod: 219533 callbacks suppressed [ 212.270731][ T4179] syz.0.174: attempt to access beyond end of device [ 212.270731][ T4179] loop0: rw=3, sector=12884839268408, nr_sectors = 8388600 limit=2048 [ 212.272065][ T4654] syz.4.324: attempt to access beyond end of device [ 212.272065][ T4654] loop4: rw=3, sector=11446764793208, nr_sectors = 8388600 limit=2048 [ 212.304224][ T4399] syz.3.241: attempt to access beyond end of device [ 212.304224][ T4399] loop3: rw=3, sector=11464439573408, nr_sectors = 8388600 limit=2048 [ 212.314420][ T3912] syz.2.69: attempt to access beyond end of device [ 212.314420][ T3912] loop2: rw=3, sector=14150796448808, nr_sectors = 8388600 limit=2048 [ 212.329201][ T4179] syz.0.174: attempt to access beyond end of device [ 212.329201][ T4179] loop0: rw=3, sector=12884847657008, nr_sectors = 8388600 limit=2048 [ 212.371103][ T6663] loop1: detected capacity change from 0 to 2048 [ 212.377780][ T4654] syz.4.324: attempt to access beyond end of device [ 212.377780][ T4654] loop4: rw=3, sector=11446773181808, nr_sectors = 8388600 limit=2048 [ 212.385025][ T4399] syz.3.241: attempt to access beyond end of device [ 212.385025][ T4399] loop3: rw=3, sector=11464447962008, nr_sectors = 8388600 limit=2048 [ 212.395196][ T6663] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 212.417317][ T3912] syz.2.69: attempt to access beyond end of device [ 212.417317][ T3912] loop2: rw=3, sector=14150804837408, nr_sectors = 8388600 limit=2048 [ 212.449877][ T4654] syz.4.324: attempt to access beyond end of device [ 212.449877][ T4654] loop4: rw=3, sector=11446781570408, nr_sectors = 8388600 limit=2048 [ 212.457472][ T4179] syz.0.174: attempt to access beyond end of device [ 212.457472][ T4179] loop0: rw=3, sector=12884856045608, nr_sectors = 8388600 limit=2048 [ 212.484422][ T6663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.565172][ T6663] UDF-fs: unknown compression code (0) [ 213.065687][ T6676] netlink: 'syz.1.1168': attribute type 2 has an invalid length. [ 213.205400][ T6679] autofs4:pid:6679:autofs_fill_super: pipe file descriptor does not contain proper ops [ 214.206597][ T6702] net veth1_virt_wifi : renamed from virt_wifi0 [ 216.612779][ T6717] loop1: detected capacity change from 0 to 32768 [ 216.768217][ T6717] XFS (loop1): Mounting V5 Filesystem [ 216.916133][ T6717] XFS (loop1): Ending clean mount [ 216.945085][ T6717] XFS (loop1): Quotacheck needed: Please wait. [ 217.091490][ T6717] XFS (loop1): Quotacheck: Done. [ 217.225328][ T3636] XFS (loop1): Unmounting Filesystem [ 217.286307][ T4399] bio_check_eod: 207162 callbacks suppressed [ 217.286326][ T4399] syz.3.241: attempt to access beyond end of device [ 217.286326][ T4399] loop3: rw=3, sector=11907827415008, nr_sectors = 8388600 limit=2048 [ 217.308470][ T4179] syz.0.174: attempt to access beyond end of device [ 217.308470][ T4179] loop0: rw=3, sector=13415107840208, nr_sectors = 8388600 limit=2048 [ 217.314696][ T3912] syz.2.69: attempt to access beyond end of device [ 217.314696][ T3912] loop2: rw=3, sector=14638316715008, nr_sectors = 8388600 limit=2048 [ 217.348639][ T4179] syz.0.174: attempt to access beyond end of device [ 217.348639][ T4179] loop0: rw=3, sector=13415116228808, nr_sectors = 8388600 limit=2048 [ 217.376087][ T4399] syz.3.241: attempt to access beyond end of device [ 217.376087][ T4399] loop3: rw=3, sector=11907835803608, nr_sectors = 8388600 limit=2048 [ 217.405304][ T4654] syz.4.324: attempt to access beyond end of device [ 217.405304][ T4654] loop4: rw=3, sector=11849098826408, nr_sectors = 8388600 limit=2048 [ 217.429470][ T4654] syz.4.324: attempt to access beyond end of device [ 217.429470][ T4654] loop4: rw=3, sector=11849107215008, nr_sectors = 8388600 limit=2048 [ 217.440882][ T4399] syz.3.241: attempt to access beyond end of device [ 217.440882][ T4399] loop3: rw=3, sector=11907844192208, nr_sectors = 8388600 limit=2048 [ 217.453779][ T4179] syz.0.174: attempt to access beyond end of device [ 217.453779][ T4179] loop0: rw=3, sector=13415124617408, nr_sectors = 8388600 limit=2048 [ 217.474937][ T4399] syz.3.241: attempt to access beyond end of device [ 217.474937][ T4399] loop3: rw=3, sector=11907852580808, nr_sectors = 8388600 limit=2048 [ 217.959294][ T6755] loop1: detected capacity change from 0 to 2048 [ 218.078293][ T6755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 218.113120][ T6755] EXT4-fs (loop1): shut down requested (2) [ 218.262747][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 218.563865][ T6765] [U] V [ 219.962258][ T6795] loop1: detected capacity change from 0 to 8 [ 221.104172][ T3679] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 221.344190][ T3679] usb 1-1: Using ep0 maxpacket: 16 [ 221.504319][ T3679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.524331][ T3681] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 221.561827][ T3679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.604505][ T3679] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 221.655072][ T3679] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 221.695736][ T3679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.735440][ T3679] usb 1-1: config 0 descriptor?? [ 221.904606][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.949143][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.980343][ T3681] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 222.018676][ T3681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.059807][ T3681] usb 5-1: config 0 descriptor?? [ 222.256067][ T3679] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 222.263362][ T3679] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 222.310386][ T4399] bio_check_eod: 202260 callbacks suppressed [ 222.310404][ T4399] syz.3.241: attempt to access beyond end of device [ 222.310404][ T4399] loop3: rw=3, sector=12407234327408, nr_sectors = 8388600 limit=2048 [ 222.314199][ T3679] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 222.338655][ T4179] syz.0.174: attempt to access beyond end of device [ 222.338655][ T4179] loop0: rw=3, sector=13861482023408, nr_sectors = 8388600 limit=2048 [ 222.343197][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'. [ 222.373034][ T3912] syz.2.69: attempt to access beyond end of device [ 222.373034][ T3912] loop2: rw=3, sector=15033822427808, nr_sectors = 8388600 limit=2048 [ 222.388516][ T4654] syz.4.324: attempt to access beyond end of device [ 222.388516][ T4654] loop4: rw=3, sector=12290557290008, nr_sectors = 8388600 limit=2048 [ 222.388794][ T4179] syz.0.174: attempt to access beyond end of device [ 222.388794][ T4179] loop0: rw=3, sector=13861490412008, nr_sectors = 8388600 limit=2048 [ 222.424141][ T3679] microsoft 0003:045E:07DA.001A: unbalanced collection at end of report description [ 222.433645][ T4399] syz.3.241: attempt to access beyond end of device [ 222.433645][ T4399] loop3: rw=3, sector=12407242716008, nr_sectors = 8388600 limit=2048 [ 222.441320][ T3912] syz.2.69: attempt to access beyond end of device [ 222.441320][ T3912] loop2: rw=3, sector=15033830816408, nr_sectors = 8388600 limit=2048 [ 222.459161][ T3679] microsoft 0003:045E:07DA.001A: parse failed [ 222.472512][ T4654] syz.4.324: attempt to access beyond end of device [ 222.472512][ T4654] loop4: rw=3, sector=12290565678608, nr_sectors = 8388600 limit=2048 [ 222.479341][ T3679] microsoft: probe of 0003:045E:07DA.001A failed with error -22 [ 222.518562][ T4654] syz.4.324: attempt to access beyond end of device [ 222.518562][ T4654] loop4: rw=3, sector=12290574067208, nr_sectors = 8388600 limit=2048 [ 222.555839][ T4399] syz.3.241: attempt to access beyond end of device [ 222.555839][ T4399] loop3: rw=3, sector=12407251104608, nr_sectors = 8388600 limit=2048 [ 222.708742][ T3681] chicony 0003:04F2:1421.001B: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.4-1/input0 [ 222.729134][ T32] usb 1-1: USB disconnect, device number 9 [ 222.949744][ T3679] usb 5-1: USB disconnect, device number 12 [ 223.011386][ T6867] loop1: detected capacity change from 0 to 4096 [ 223.073809][ T6867] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 224.970073][ T6889] loop1: detected capacity change from 0 to 32768 [ 225.067585][ T6889] XFS (loop1): Mounting V5 Filesystem [ 225.240797][ T6889] XFS (loop1): Starting recovery (logdev: internal) [ 225.349236][ T6889] XFS (loop1): Ending recovery (logdev: internal) [ 225.564285][ T3636] XFS (loop1): Unmounting Filesystem [ 226.145786][ T6916] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 226.179149][ T6916] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 226.198595][ T6916] overlayfs: fs on './file1' does not support file handles, falling back to xino=off. [ 226.277141][ T6916] overlayfs: conflicting lowerdir path [ 226.764225][ T14] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 226.915068][ T3646] Bluetooth: hci7: command 0x0406 tx timeout [ 227.014245][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 227.154589][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.226078][ T6935] loop1: detected capacity change from 0 to 256 [ 227.232376][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.232405][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 227.232445][ T14] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 227.232468][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.275344][ T14] usb 5-1: config 0 descriptor?? [ 227.315005][ T4399] bio_check_eod: 221825 callbacks suppressed [ 227.315022][ T4399] syz.3.241: attempt to access beyond end of device [ 227.315022][ T4399] loop3: rw=3, sector=12816681893408, nr_sectors = 8388600 limit=2048 [ 227.321662][ T4654] syz.4.324: attempt to access beyond end of device [ 227.321662][ T4654] loop4: rw=3, sector=12852694153208, nr_sectors = 8388600 limit=2048 [ 227.337177][ T4179] syz.0.174: attempt to access beyond end of device [ 227.337177][ T4179] loop0: rw=3, sector=14432418528008, nr_sectors = 8388600 limit=2048 [ 227.374439][ T3912] syz.2.69: attempt to access beyond end of device [ 227.374439][ T3912] loop2: rw=3, sector=15481278740408, nr_sectors = 8388600 limit=2048 [ 227.379025][ T4654] syz.4.324: attempt to access beyond end of device [ 227.379025][ T4654] loop4: rw=3, sector=12852702541808, nr_sectors = 8388600 limit=2048 [ 227.410819][ T4399] syz.3.241: attempt to access beyond end of device [ 227.410819][ T4399] loop3: rw=3, sector=12816690282008, nr_sectors = 8388600 limit=2048 [ 227.414584][ T4654] syz.4.324: attempt to access beyond end of device [ 227.414584][ T4654] loop4: rw=3, sector=12852710930408, nr_sectors = 8388600 limit=2048 [ 227.451024][ T4654] syz.4.324: attempt to access beyond end of device [ 227.451024][ T4654] loop4: rw=3, sector=12852719319008, nr_sectors = 8388600 limit=2048 [ 227.457183][ T3912] syz.2.69: attempt to access beyond end of device [ 227.457183][ T3912] loop2: rw=3, sector=15481287129008, nr_sectors = 8388600 limit=2048 [ 227.472177][ T4179] syz.0.174: attempt to access beyond end of device [ 227.472177][ T4179] loop0: rw=3, sector=14432426916608, nr_sectors = 8388600 limit=2048 [ 227.563765][ T6935] exfat: Deprecated parameter 'utf8' [ 227.652076][ T6935] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5b52992a, utbl_chksum : 0xe619d30d) [ 227.712488][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 227.712505][ T26] audit: type=1804 audit(1725782807.923:7): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1276" name="/newroot/333/file1/bus" dev="loop1" ino=1048623 res=1 errno=0 [ 227.806241][ T14] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 227.837975][ T14] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001C/input/input16 [ 227.977934][ T14] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 228.052163][ T14] usb 5-1: USB disconnect, device number 13 [ 228.844652][ T3681] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 228.914291][ T14] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 229.184415][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 229.244665][ T3681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.264393][ T3681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.294328][ T3681] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 229.304849][ T14] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 229.334565][ T3681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.358009][ T3681] usb 3-1: config 0 descriptor?? [ 229.512922][ T14] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 229.534539][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.542558][ T14] usb 2-1: Product: syz [ 229.571578][ T14] usb 2-1: Manufacturer: syz [ 229.587350][ T14] usb 2-1: SerialNumber: syz [ 229.608572][ T14] usb 2-1: config 0 descriptor?? [ 229.634799][ T6956] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 229.655184][ T14] hub 2-1:0.0: bad descriptor, ignoring hub [ 229.661124][ T14] hub: probe of 2-1:0.0 failed with error -5 [ 229.689366][ T14] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 229.867121][ T3681] uclogic 0003:145F:0212.001D: interface is invalid, ignoring [ 229.907695][ T14] usb 2-1: USB disconnect, device number 21 [ 229.915577][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 230.106616][ T3681] usb 3-1: USB disconnect, device number 6 [ 231.844379][ T3681] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 232.084171][ T3681] usb 3-1: Using ep0 maxpacket: 8 [ 232.324487][ T4654] bio_check_eod: 288177 callbacks suppressed [ 232.324504][ T4654] syz.4.324: attempt to access beyond end of device [ 232.324504][ T4654] loop4: rw=3, sector=13611468189008, nr_sectors = 8388600 limit=2048 [ 232.333943][ T3912] syz.2.69: attempt to access beyond end of device [ 232.333943][ T3912] loop2: rw=3, sector=16163305474808, nr_sectors = 8388600 limit=2048 [ 232.349016][ T4179] syz.0.174: attempt to access beyond end of device [ 232.349016][ T4179] loop0: rw=3, sector=15031859495408, nr_sectors = 8388600 limit=2048 [ 232.377627][ T3681] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 232.388752][ T4399] syz.3.241: attempt to access beyond end of device [ 232.388752][ T4399] loop3: rw=3, sector=13450256074208, nr_sectors = 8388600 limit=2048 [ 232.403524][ T3681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.411850][ T3912] syz.2.69: attempt to access beyond end of device [ 232.411850][ T3912] loop2: rw=3, sector=16163313863408, nr_sectors = 8388600 limit=2048 [ 232.412360][ T3681] usb 3-1: Product: syz [ 232.426864][ T4179] syz.0.174: attempt to access beyond end of device [ 232.426864][ T4179] loop0: rw=3, sector=15031867884008, nr_sectors = 8388600 limit=2048 [ 232.430997][ T4399] syz.3.241: attempt to access beyond end of device [ 232.430997][ T4399] loop3: rw=3, sector=13450264462808, nr_sectors = 8388600 limit=2048 [ 232.461923][ T4654] syz.4.324: attempt to access beyond end of device [ 232.461923][ T4654] loop4: rw=3, sector=13611476577608, nr_sectors = 8388600 limit=2048 [ 232.473731][ T3912] syz.2.69: attempt to access beyond end of device [ 232.473731][ T3912] loop2: rw=3, sector=16163322252008, nr_sectors = 8388600 limit=2048 [ 232.476652][ T3681] usb 3-1: Manufacturer: syz [ 232.503260][ T3912] syz.2.69: attempt to access beyond end of device [ 232.503260][ T3912] loop2: rw=3, sector=16163330640608, nr_sectors = 8388600 limit=2048 [ 232.544135][ T3681] usb 3-1: SerialNumber: syz [ 232.582460][ T3681] usb 3-1: config 0 descriptor?? [ 232.904675][ T3681] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 233.134218][ T3680] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 233.334517][ T3681] usb write operation failed. (-71) [ 233.361717][ T3681] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 233.413186][ T3681] dvbdev: DVB: registering new adapter (Terratec H7) [ 233.421406][ T3680] usb 5-1: Using ep0 maxpacket: 32 [ 233.429056][ T7001] input: syz0 as /devices/virtual/input/input18 [ 233.446612][ T3681] usb 3-1: media controller created [ 233.484393][ T3681] usb read operation failed. (-71) [ 233.514300][ T3681] usb write operation failed. (-71) [ 233.542434][ T3681] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 233.551319][ T3680] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 233.592124][ T3681] usb 3-1: USB disconnect, device number 7 [ 233.744288][ T3680] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 233.753372][ T3680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.804162][ T3680] usb 5-1: Product: syz [ 233.808373][ T3680] usb 5-1: Manufacturer: syz [ 233.812982][ T3680] usb 5-1: SerialNumber: syz [ 233.881655][ T3680] usb 5-1: config 0 descriptor?? [ 233.934190][ T6993] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 233.955248][ T3680] hub 5-1:0.0: bad descriptor, ignoring hub [ 233.961190][ T3680] hub: probe of 5-1:0.0 failed with error -5 [ 233.991544][ T3680] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19 [ 234.323705][ T7012] bond0: option arp_validate: invalid value (18446744071578845184) [ 234.323824][ T3682] usb 5-1: USB disconnect, device number 14 [ 234.338034][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 234.756805][ T7018] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 235.904283][ T7045] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1313'. [ 235.924975][ T3739] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 236.184215][ T3739] usb 2-1: Using ep0 maxpacket: 32 [ 236.304338][ T3739] usb 2-1: config 0 has no interfaces? [ 236.424381][ T3739] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 236.454578][ T3739] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 236.462957][ T3739] usb 2-1: Product: syz [ 236.494188][ T3739] usb 2-1: Manufacturer: syz [ 236.510893][ T3739] usb 2-1: config 0 descriptor?? [ 236.524249][ T32] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 236.649538][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1321'. [ 236.774150][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 236.789637][ T3739] usb 2-1: USB disconnect, device number 22 [ 236.944276][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.954009][ T32] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.149238][ T32] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 237.184302][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.192331][ T32] usb 1-1: Product: syz [ 237.234930][ T32] usb 1-1: Manufacturer: syz [ 237.239595][ T32] usb 1-1: SerialNumber: syz [ 237.334159][ T3912] bio_check_eod: 229205 callbacks suppressed [ 237.334180][ T3912] syz.2.69: attempt to access beyond end of device [ 237.334180][ T3912] loop2: rw=3, sector=16664943754808, nr_sectors = 8388600 limit=2048 [ 237.336398][ T4179] syz.0.174: attempt to access beyond end of device [ 237.336398][ T4179] loop0: rw=3, sector=15532700858408, nr_sectors = 8388600 limit=2048 [ 237.370683][ T3912] syz.2.69: attempt to access beyond end of device [ 237.370683][ T3912] loop2: rw=3, sector=16664952143408, nr_sectors = 8388600 limit=2048 [ 237.374197][ T4399] syz.3.241: attempt to access beyond end of device [ 237.374197][ T4399] loop3: rw=3, sector=13913524897808, nr_sectors = 8388600 limit=2048 [ 237.414235][ T4654] syz.4.324: attempt to access beyond end of device [ 237.414235][ T4654] loop4: rw=3, sector=14235756189608, nr_sectors = 8388600 limit=2048 [ 237.414296][ T4179] syz.0.174: attempt to access beyond end of device [ 237.414296][ T4179] loop0: rw=3, sector=15532709247008, nr_sectors = 8388600 limit=2048 [ 237.468572][ T4399] syz.3.241: attempt to access beyond end of device [ 237.468572][ T4399] loop3: rw=3, sector=13913533286408, nr_sectors = 8388600 limit=2048 [ 237.503525][ T4179] syz.0.174: attempt to access beyond end of device [ 237.503525][ T4179] loop0: rw=3, sector=15532717635608, nr_sectors = 8388600 limit=2048 [ 237.504218][ T4654] syz.4.324: attempt to access beyond end of device [ 237.504218][ T4654] loop4: rw=3, sector=14235764578208, nr_sectors = 8388600 limit=2048 [ 237.527881][ T3912] syz.2.69: attempt to access beyond end of device [ 237.527881][ T3912] loop2: rw=3, sector=16664960532008, nr_sectors = 8388600 limit=2048 [ 237.550865][ T7071] loop1: detected capacity change from 0 to 64 [ 237.567727][ T32] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 237.808117][ T3681] usb 1-1: USB disconnect, device number 10 [ 237.850669][ T3681] usblp0: removed [ 237.919339][ T7077] loop1: detected capacity change from 0 to 1024 [ 238.015893][ T7077] hfsplus: small dir entry [ 238.211298][ T7081] loop1: detected capacity change from 0 to 64 [ 238.679786][ T7088] loop1: detected capacity change from 0 to 128 [ 238.744444][ T7088] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 239.484373][ T153] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 239.632616][ T7102] loop1: detected capacity change from 0 to 64 [ 239.864495][ T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.894346][ T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.930271][ T153] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 239.954214][ T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.980474][ T153] usb 4-1: config 0 descriptor?? [ 240.322944][ T7109] loop1: detected capacity change from 0 to 8192 [ 240.415745][ T7109] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 240.444473][ T7109] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 240.453810][ T7109] REISERFS (device loop1): using ordered data mode [ 240.498261][ T153] wacom 0003:056A:0003.001E: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 240.516128][ T153] wacom 0003:056A:0003.001E: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.3-1/input0 [ 240.529017][ T153] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0003.001E/input/input20 [ 240.535920][ T7109] reiserfs: using flush barriers [ 240.605503][ T7109] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 240.653399][ T7109] REISERFS (device loop1): checking transaction log (loop1) [ 240.695663][ T7109] REISERFS (device loop1): Using r5 hash to sort names [ 240.702652][ T7109] REISERFS (device loop1): using 3.5.x disk format [ 240.774043][ T7109] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 240.792711][ T32] usb 4-1: USB disconnect, device number 7 [ 241.433773][ T7136] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 242.352000][ T4399] bio_check_eod: 197884 callbacks suppressed [ 242.352020][ T4399] syz.3.241: attempt to access beyond end of device [ 242.352020][ T4399] loop3: rw=3, sector=14422134104408, nr_sectors = 8388600 limit=2048 [ 242.383562][ T4654] syz.4.324: attempt to access beyond end of device [ 242.383562][ T4654] loop4: rw=3, sector=14627201820008, nr_sectors = 8388600 limit=2048 [ 242.399073][ T4179] syz.0.174: attempt to access beyond end of device [ 242.399073][ T4179] loop0: rw=3, sector=15975358891808, nr_sectors = 8388600 limit=2048 [ 242.423500][ T3912] syz.2.69: attempt to access beyond end of device [ 242.423500][ T3912] loop2: rw=3, sector=17061397379408, nr_sectors = 8388600 limit=2048 [ 242.456508][ T4399] syz.3.241: attempt to access beyond end of device [ 242.456508][ T4399] loop3: rw=3, sector=14422142493008, nr_sectors = 8388600 limit=2048 [ 242.472545][ T4179] syz.0.174: attempt to access beyond end of device [ 242.472545][ T4179] loop0: rw=3, sector=15975367280408, nr_sectors = 8388600 limit=2048 [ 242.504252][ T4654] syz.4.324: attempt to access beyond end of device [ 242.504252][ T4654] loop4: rw=3, sector=14627210208608, nr_sectors = 8388600 limit=2048 [ 242.540905][ T4179] syz.0.174: attempt to access beyond end of device [ 242.540905][ T4179] loop0: rw=3, sector=15975375669008, nr_sectors = 8388600 limit=2048 [ 242.556074][ T3912] syz.2.69: attempt to access beyond end of device [ 242.556074][ T3912] loop2: rw=3, sector=17061405768008, nr_sectors = 8388600 limit=2048 [ 242.564562][ T4399] syz.3.241: attempt to access beyond end of device [ 242.564562][ T4399] loop3: rw=3, sector=14422150881608, nr_sectors = 8388600 limit=2048 [ 242.580601][ T7141] loop1: detected capacity change from 0 to 32768 [ 242.624287][ T7141] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1359 (7141) [ 242.679293][ T7141] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.716499][ T7141] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 242.774148][ T7141] BTRFS info (device loop1): using free space tree [ 242.971654][ T7141] BTRFS info (device loop1): enabling ssd optimizations [ 243.144172][ T32] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 243.405991][ T3636] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 243.699968][ T32] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 243.714898][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.733146][ T32] usb 4-1: Product: syz [ 243.737772][ T32] usb 4-1: Manufacturer: syz [ 243.742463][ T32] usb 4-1: SerialNumber: syz [ 243.766991][ T32] r8152-cfgselector 4-1: config 0 descriptor?? [ 244.264295][ T32] r8152-cfgselector 4-1: Unknown version 0x0000 [ 244.284344][ T32] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 244.579394][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1376'. [ 247.354209][ T3912] bio_check_eod: 252485 callbacks suppressed [ 247.354230][ T3912] syz.2.69: attempt to access beyond end of device [ 247.354230][ T3912] loop2: rw=3, sector=17469049785008, nr_sectors = 8388600 limit=2048 [ 247.354233][ T4179] syz.0.174: attempt to access beyond end of device [ 247.354233][ T4179] loop0: rw=3, sector=16605627964208, nr_sectors = 8388600 limit=2048 [ 247.354275][ T4179] syz.0.174: attempt to access beyond end of device [ 247.354275][ T4179] loop0: rw=3, sector=16605636352808, nr_sectors = 8388600 limit=2048 [ 247.362764][ T4654] syz.4.324: attempt to access beyond end of device [ 247.362764][ T4654] loop4: rw=3, sector=15232867128608, nr_sectors = 8388600 limit=2048 [ 247.377455][ T4399] syz.3.241: attempt to access beyond end of device [ 247.377455][ T4399] loop3: rw=3, sector=15102273403808, nr_sectors = 8388600 limit=2048 [ 247.424990][ T3912] syz.2.69: attempt to access beyond end of device [ 247.424990][ T3912] loop2: rw=3, sector=17469058173608, nr_sectors = 8388600 limit=2048 [ 247.450966][ T4179] syz.0.174: attempt to access beyond end of device [ 247.450966][ T4179] loop0: rw=3, sector=16605644741408, nr_sectors = 8388600 limit=2048 [ 247.475241][ T4179] syz.0.174: attempt to access beyond end of device [ 247.475241][ T4179] loop0: rw=3, sector=16605653130008, nr_sectors = 8388600 limit=2048 [ 247.501549][ T4399] syz.3.241: attempt to access beyond end of device [ 247.501549][ T4399] loop3: rw=3, sector=15102281792408, nr_sectors = 8388600 limit=2048 [ 247.528644][ T4399] syz.3.241: attempt to access beyond end of device [ 247.528644][ T4399] loop3: rw=3, sector=15102290181008, nr_sectors = 8388600 limit=2048 [ 247.894884][ T7246] sp0: Synchronizing with TNC [ 248.654153][ T32] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 248.894142][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 249.014315][ T32] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 249.039730][ T32] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 249.071245][ T32] usb 5-1: config 1 has no interface number 1 [ 249.114160][ T32] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 249.154327][ T32] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.334404][ T32] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.343600][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.406874][ T32] usb 5-1: Product: syz [ 249.411071][ T32] usb 5-1: Manufacturer: syz [ 249.435913][ T32] usb 5-1: SerialNumber: syz [ 249.844420][ T32] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 249.996838][ T32] usb 5-1: USB disconnect, device number 15 [ 251.046574][ T7320] binder: 7319:7320 ioctl c00c620f 0 returned -14 [ 251.353979][ T7308] loop1: detected capacity change from 0 to 32768 [ 252.372226][ T4399] bio_check_eod: 201985 callbacks suppressed [ 252.372243][ T4399] syz.3.241: attempt to access beyond end of device [ 252.372243][ T4399] loop3: rw=3, sector=15448689029408, nr_sectors = 8388600 limit=2048 [ 252.382045][ T4179] syz.0.174: attempt to access beyond end of device [ 252.382045][ T4179] loop0: rw=3, sector=17082024946808, nr_sectors = 8388600 limit=2048 [ 252.393359][ T3912] syz.2.69: attempt to access beyond end of device [ 252.393359][ T3912] loop2: rw=3, sector=17862743560208, nr_sectors = 8388600 limit=2048 [ 252.454190][ T4654] syz.4.324: attempt to access beyond end of device [ 252.454190][ T4654] loop4: rw=3, sector=15781699672208, nr_sectors = 8388600 limit=2048 [ 252.489208][ T4654] syz.4.324: attempt to access beyond end of device [ 252.489208][ T4654] loop4: rw=3, sector=15781708060808, nr_sectors = 8388600 limit=2048 [ 252.508898][ T4399] syz.3.241: attempt to access beyond end of device [ 252.508898][ T4399] loop3: rw=3, sector=15448697418008, nr_sectors = 8388600 limit=2048 [ 252.526374][ T3912] syz.2.69: attempt to access beyond end of device [ 252.526374][ T3912] loop2: rw=3, sector=17862751948808, nr_sectors = 8388600 limit=2048 [ 252.568684][ T3912] syz.2.69: attempt to access beyond end of device [ 252.568684][ T3912] loop2: rw=3, sector=17862760337408, nr_sectors = 8388600 limit=2048 [ 252.583928][ T4654] syz.4.324: attempt to access beyond end of device [ 252.583928][ T4654] loop4: rw=3, sector=15781716449408, nr_sectors = 8388600 limit=2048 [ 252.611357][ T4179] syz.0.174: attempt to access beyond end of device [ 252.611357][ T4179] loop0: rw=3, sector=17082033335408, nr_sectors = 8388600 limit=2048 [ 255.194312][ T3681] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 255.454304][ T3681] usb 1-1: Using ep0 maxpacket: 8 [ 255.556309][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.562639][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.601312][ T3681] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.624279][ T3681] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.695893][ T3681] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 255.734469][ T3681] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.784366][ T3681] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 255.793446][ T3681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.826604][ T7377] loop1: detected capacity change from 0 to 2048 [ 255.921686][ T7377] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.184425][ T3681] usb 1-1: GET_CAPABILITIES returned 0 [ 256.189954][ T3681] usbtmc 1-1:16.0: can't read capabilities [ 256.511634][ T3681] usb 1-1: USB disconnect, device number 11 [ 256.624817][ T7386] loop1: detected capacity change from 0 to 128 [ 256.715821][ T7386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 256.794045][ T7386] ext4 filesystem being mounted at /381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 257.051238][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 257.370617][ T7394] loop1: detected capacity change from 0 to 512 [ 257.377807][ T4654] bio_check_eod: 175746 callbacks suppressed [ 257.377823][ T4654] syz.4.324: attempt to access beyond end of device [ 257.377823][ T4654] loop4: rw=3, sector=16122872422808, nr_sectors = 8388600 limit=2048 [ 257.382898][ T3912] syz.2.69: attempt to access beyond end of device [ 257.382898][ T3912] loop2: rw=3, sector=18209108854208, nr_sectors = 8388600 limit=2048 [ 257.383826][ T4654] syz.4.324: attempt to access beyond end of device [ 257.383826][ T4654] loop4: rw=3, sector=16122880811408, nr_sectors = 8388600 limit=2048 [ 257.434500][ T4179] syz.0.174: attempt to access beyond end of device [ 257.434500][ T4179] loop0: rw=3, sector=17593251396608, nr_sectors = 8388600 limit=2048 [ 257.451048][ T4654] syz.4.324: attempt to access beyond end of device [ 257.451048][ T4654] loop4: rw=3, sector=16122889200008, nr_sectors = 8388600 limit=2048 [ 257.454147][ T4399] syz.3.241: attempt to access beyond end of device [ 257.454147][ T4399] loop3: rw=3, sector=15784308526808, nr_sectors = 8388600 limit=2048 [ 257.466317][ T4654] syz.4.324: attempt to access beyond end of device [ 257.466317][ T4654] loop4: rw=3, sector=16122897588608, nr_sectors = 8388600 limit=2048 [ 257.495612][ T3912] syz.2.69: attempt to access beyond end of device [ 257.495612][ T3912] loop2: rw=3, sector=18209117242808, nr_sectors = 8388600 limit=2048 [ 257.509003][ T4179] syz.0.174: attempt to access beyond end of device [ 257.509003][ T4179] loop0: rw=3, sector=17593259785208, nr_sectors = 8388600 limit=2048 [ 257.525173][ T4399] syz.3.241: attempt to access beyond end of device [ 257.525173][ T4399] loop3: rw=3, sector=15784316915408, nr_sectors = 8388600 limit=2048 [ 257.599526][ T7394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 257.633603][ T7394] ext4 filesystem being mounted at /383/bus supports timestamps until 2038 (0x7fffffff) [ 257.855168][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 258.462212][ T7417] loop1: detected capacity change from 0 to 256 [ 258.504764][ T7417] exfat: Deprecated parameter 'utf8' [ 258.552489][ T7417] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 259.343683][ T7432] gfs2: path_lookup on c::;NL;o$: returned error -2 [ 260.350121][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 260.467472][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'. [ 261.263969][ T7473] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 262.104500][ T26] audit: type=1326 audit(1725782842.323:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.3.1496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5030f7cef9 code=0x0 [ 262.384101][ T4399] bio_check_eod: 180942 callbacks suppressed [ 262.384120][ T4399] syz.3.241: attempt to access beyond end of device [ 262.384120][ T4399] loop3: rw=3, sector=16151896978808, nr_sectors = 8388600 limit=2048 [ 262.384828][ T4179] syz.0.174: attempt to access beyond end of device [ 262.384828][ T4179] loop0: rw=3, sector=17967013858208, nr_sectors = 8388600 limit=2048 [ 262.410487][ T4399] syz.3.241: attempt to access beyond end of device [ 262.410487][ T4399] loop3: rw=3, sector=16151905367408, nr_sectors = 8388600 limit=2048 [ 262.424193][ T3912] syz.2.69: attempt to access beyond end of device [ 262.424193][ T3912] loop2: rw=3, sector=18656766493208, nr_sectors = 8388600 limit=2048 [ 262.464151][ T4654] syz.4.324: attempt to access beyond end of device [ 262.464151][ T4654] loop4: rw=3, sector=16535163724208, nr_sectors = 8388600 limit=2048 [ 262.486468][ T4399] syz.3.241: attempt to access beyond end of device [ 262.486468][ T4399] loop3: rw=3, sector=16151913756008, nr_sectors = 8388600 limit=2048 [ 262.519935][ T4399] syz.3.241: attempt to access beyond end of device [ 262.519935][ T4399] loop3: rw=3, sector=16151922144608, nr_sectors = 8388600 limit=2048 [ 262.524217][ T3912] syz.2.69: attempt to access beyond end of device [ 262.524217][ T3912] loop2: rw=3, sector=18656774881808, nr_sectors = 8388600 limit=2048 [ 262.565476][ T4399] syz.3.241: attempt to access beyond end of device [ 262.565476][ T4399] loop3: rw=3, sector=16151930533208, nr_sectors = 8388600 limit=2048 [ 262.566027][ T4654] syz.4.324: attempt to access beyond end of device [ 262.566027][ T4654] loop4: rw=3, sector=16535172112808, nr_sectors = 8388600 limit=2048 [ 262.712627][ T7485] loop1: detected capacity change from 0 to 32768 [ 262.761793][ T7485] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1495 (7485) [ 262.846517][ T7485] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 262.880584][ T7485] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 262.910061][ T7485] BTRFS info (device loop1): using free space tree [ 263.220743][ T7507] tap0: tun_chr_ioctl cmd 1074025673 [ 263.274910][ T7485] BTRFS info (device loop1): enabling ssd optimizations [ 263.515979][ T3636] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 263.805175][ T7517] netlink: 'syz.0.1502': attribute type 12 has an invalid length. [ 263.813159][ T7517] netlink: 'syz.0.1502': attribute type 29 has an invalid length. [ 263.902271][ T7517] netlink: 'syz.0.1502': attribute type 2 has an invalid length. [ 264.004386][ T7517] netlink: 'syz.0.1502': attribute type 2 has an invalid length. [ 264.012248][ T7517] netlink: 'syz.0.1502': attribute type 1 has an invalid length. [ 264.158599][ T7517] netlink: 'syz.0.1502': attribute type 37 has an invalid length. [ 264.202577][ T7517] netlink: 'syz.0.1502': attribute type 2 has an invalid length. [ 264.242639][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.421723][ T4260] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 264.709630][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1511'. [ 264.804520][ T4260] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 264.844191][ T4260] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.874670][ T4260] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.883686][ T4260] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.054387][ T4260] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.063894][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.105294][ T4260] usb 4-1: Product: syz [ 265.109504][ T4260] usb 4-1: Manufacturer: syz [ 265.195488][ T4260] cdc_wdm 4-1:1.0: skipping garbage [ 265.210964][ T4260] cdc_wdm 4-1:1.0: skipping garbage [ 265.231753][ T4260] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 265.261559][ T4260] cdc_wdm 4-1:1.0: Unknown control protocol [ 265.465526][ T3679] usb 4-1: USB disconnect, device number 9 [ 266.032307][ T7545] loop1: detected capacity change from 0 to 32768 [ 266.405813][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 266.898717][ T7563] autofs4:pid:7563:autofs_fill_super: called with bogus options [ 267.343283][ T7573] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1528'. [ 267.394491][ T4179] bio_check_eod: 189706 callbacks suppressed [ 267.394512][ T4179] syz.0.174: attempt to access beyond end of device [ 267.394512][ T4179] loop0: rw=3, sector=18359935882208, nr_sectors = 8388600 limit=2048 [ 267.409274][ T4399] syz.3.241: attempt to access beyond end of device [ 267.409274][ T4399] loop3: rw=3, sector=16713790572608, nr_sectors = 8388600 limit=2048 [ 267.417494][ T4654] syz.4.324: attempt to access beyond end of device [ 267.417494][ T4654] loop4: rw=3, sector=16900134933008, nr_sectors = 8388600 limit=2048 [ 267.454774][ T3912] syz.2.69: attempt to access beyond end of device [ 267.454774][ T3912] loop2: rw=3, sector=19012577350808, nr_sectors = 8388600 limit=2048 [ 267.504301][ T4179] syz.0.174: attempt to access beyond end of device [ 267.504301][ T4179] loop0: rw=3, sector=18359944270808, nr_sectors = 8388600 limit=2048 [ 267.504586][ T3912] syz.2.69: attempt to access beyond end of device [ 267.504586][ T3912] loop2: rw=3, sector=19012585739408, nr_sectors = 8388600 limit=2048 [ 267.526230][ T4399] syz.3.241: attempt to access beyond end of device [ 267.526230][ T4399] loop3: rw=3, sector=16713798961208, nr_sectors = 8388600 limit=2048 [ 267.555139][ T4654] syz.4.324: attempt to access beyond end of device [ 267.555139][ T4654] loop4: rw=3, sector=16900143321608, nr_sectors = 8388600 limit=2048 [ 267.613969][ T4179] syz.0.174: attempt to access beyond end of device [ 267.613969][ T4179] loop0: rw=3, sector=18359952659408, nr_sectors = 8388600 limit=2048 [ 267.617994][ T3912] syz.2.69: attempt to access beyond end of device [ 267.617994][ T3912] loop2: rw=3, sector=19012594128008, nr_sectors = 8388600 limit=2048 [ 268.874349][ T7605] loop1: detected capacity change from 0 to 64 [ 269.002736][ T7605] BFS-fs: bfs_readdir(): Bad f_pos=00008001 for loop1:00000002 [ 270.046969][ T7618] rose0: tun_chr_ioctl cmd 1074025677 [ 270.052563][ T7618] rose0: linktype set to 6 [ 270.493352][ T4260] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 270.874461][ T4260] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.915958][ T4260] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 270.954183][ T4260] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.993849][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.044526][ T7622] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.355077][ T4260] usb 2-1: USB disconnect, device number 23 [ 271.590349][ T7648] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1560'. [ 271.971976][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1565'. [ 272.404595][ T4179] bio_check_eod: 193618 callbacks suppressed [ 272.404616][ T4179] syz.0.174: attempt to access beyond end of device [ 272.404616][ T4179] loop0: rw=3, sector=18766866868208, nr_sectors = 8388600 limit=2048 [ 272.414202][ T3912] syz.2.69: attempt to access beyond end of device [ 272.414202][ T3912] loop2: rw=3, sector=19452316151408, nr_sectors = 8388600 limit=2048 [ 272.454313][ T4399] syz.3.241: attempt to access beyond end of device [ 272.454313][ T4399] loop3: rw=3, sector=17154250792808, nr_sectors = 8388600 limit=2048 [ 272.455537][ T4179] syz.0.174: attempt to access beyond end of device [ 272.455537][ T4179] loop0: rw=3, sector=18766875256808, nr_sectors = 8388600 limit=2048 [ 272.494818][ T4654] syz.4.324: attempt to access beyond end of device [ 272.494818][ T4654] loop4: rw=3, sector=17298660541808, nr_sectors = 8388600 limit=2048 [ 272.534918][ T3912] syz.2.69: attempt to access beyond end of device [ 272.534918][ T3912] loop2: rw=3, sector=19452324540008, nr_sectors = 8388600 limit=2048 [ 272.569729][ T4399] syz.3.241: attempt to access beyond end of device [ 272.569729][ T4399] loop3: rw=3, sector=17154259181408, nr_sectors = 8388600 limit=2048 [ 272.577719][ T4179] syz.0.174: attempt to access beyond end of device [ 272.577719][ T4179] loop0: rw=3, sector=18766883645408, nr_sectors = 8388600 limit=2048 [ 272.584731][ T4654] syz.4.324: attempt to access beyond end of device [ 272.584731][ T4654] loop4: rw=3, sector=17298668930408, nr_sectors = 8388600 limit=2048 [ 272.613775][ T4179] syz.0.174: attempt to access beyond end of device [ 272.613775][ T4179] loop0: rw=3, sector=18766892034008, nr_sectors = 8388600 limit=2048 [ 272.846046][ T7683] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 273.307857][ T7696] bridge_slave_0: default FDB implementation only supports local addresses [ 273.844223][ T155] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 273.898540][ T7713] loop1: detected capacity change from 0 to 136 [ 274.072545][ T7716] syz.2.1587[7716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.072700][ T7716] syz.2.1587[7716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.087744][ T155] usb 4-1: Using ep0 maxpacket: 8 [ 274.299284][ T155] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 274.332759][ T155] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 274.363495][ T155] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.564353][ T155] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.612568][ T155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.651259][ T155] usb 4-1: Product: syz [ 274.664011][ T155] usb 4-1: Manufacturer: syz [ 274.691749][ T155] usb 4-1: SerialNumber: syz [ 274.752866][ T7735] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1596'. [ 274.896489][ T7737] loop1: detected capacity change from 0 to 64 [ 274.986130][ T7737] hfs: walked past end of dir [ 275.275292][ T7743] netlink: 'syz.1.1600': attribute type 2 has an invalid length. [ 275.283062][ T7743] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1600'. [ 275.414622][ T155] usb 4-1: 0:2 : does not exist [ 275.784968][ T4260] usb 4-1: USB disconnect, device number 10 [ 276.034762][ T27] INFO: task segctord:3918 blocked for more than 143 seconds. [ 276.042258][ T27] Not tainted 6.1.109-syzkaller #0 [ 276.081938][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.128903][ T27] task:segctord state:D stack:28248 pid:3918 ppid:2 flags:0x00004000 [ 276.162624][ T27] Call Trace: [ 276.180856][ T27] [ 276.191643][ T27] __schedule+0x143f/0x4570 [ 276.210320][ T27] ? release_firmware_map_entry+0x186/0x186 [ 276.233240][ T27] ? print_irqtrace_events+0x210/0x210 [ 276.253355][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 276.291750][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 276.315200][ T27] schedule+0xbf/0x180 [ 276.329495][ T27] rwsem_down_write_slowpath+0xea1/0x14b0 [ 276.348742][ T27] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 276.369817][ T27] ? down_write_killable_nested+0x90/0x90 [ 276.389686][ T27] ? read_lock_is_recursive+0x10/0x10 [ 276.409312][ T27] ? rcu_is_watching+0x11/0xb0 [ 276.426589][ T27] nilfs_transaction_lock+0x25c/0x4f0 [ 276.444722][ T27] nilfs_segctor_thread+0x547/0x11a0 [ 276.462575][ T27] ? print_irqtrace_events+0x210/0x210 [ 276.480451][ T27] ? nilfs_iput_work_func+0x70/0x70 [ 276.519535][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 276.564169][ T27] ? release_firmware_map_entry+0x186/0x186 [ 276.570118][ T27] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 276.614749][ T27] ? wake_bit_function+0x210/0x210 [ 276.619928][ T27] ? _raw_spin_unlock+0x40/0x40 [ 276.654131][ T27] ? __kthread_parkme+0x168/0x1c0 [ 276.659232][ T27] kthread+0x28d/0x320 [ 276.663317][ T27] ? nilfs_iput_work_func+0x70/0x70 [ 276.714141][ T27] ? kthread_blkcg+0xd0/0xd0 [ 276.718805][ T27] ret_from_fork+0x1f/0x30 [ 276.723272][ T27] [ 276.764174][ T27] [ 276.764174][ T27] Showing all locks held in the system: [ 276.772271][ T27] 2 locks held by kworker/u4:0/9: [ 276.794139][ T27] #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 276.844145][ T27] #1: ffffc900000e7d20 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 276.884174][ T27] 1 lock held by rcu_tasks_kthre/12: [ 276.904256][ T27] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 276.934197][ T27] 1 lock held by rcu_tasks_trace/13: [ 276.939614][ T27] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 276.974198][ T27] 1 lock held by khungtaskd/27: [ 276.979091][ T27] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 277.044126][ T27] 2 locks held by kworker/u4:2/34: [ 277.049289][ T27] 3 locks held by kworker/u5:0/48: [ 277.074452][ T27] #0: ffff8880579bc938 ((wq_completion)hci8){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 277.124121][ T27] #1: ffffc90000b97d20 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 277.161782][ T7760] loop1: detected capacity change from 0 to 32768 [ 277.168941][ T27] #2: ffff8880740110b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1dc/0x400 [ 277.194199][ T27] 2 locks held by getty/3390: [ 277.204863][ T27] #0: ffff88814bd7e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 277.214876][ T7760] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1607 (7760) [ 277.271909][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 277.314449][ T7760] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 277.324773][ T27] 2 locks held by kworker/u4:6/3699: [ 277.330083][ T27] 2 locks held by syz.2.69/3912: [ 277.354208][ T7760] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 277.362914][ T7760] BTRFS info (device loop1): enabling auto defrag [ 277.369466][ T27] 1 lock held by segctord/3918: [ 277.395130][ T27] #0: ffff88802e8462a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25c/0x4f0 [ 277.414276][ T3912] bio_check_eod: 219309 callbacks suppressed [ 277.414296][ T3912] syz.2.69: attempt to access beyond end of device [ 277.414296][ T3912] loop2: rw=3, sector=19894210822208, nr_sectors = 8388600 limit=2048 [ 277.424171][ T7760] BTRFS info (device loop1): max_inline at 0 [ 277.439089][ T4399] syz.3.241: attempt to access beyond end of device [ 277.439089][ T4399] loop3: rw=3, sector=17802865733408, nr_sectors = 8388600 limit=2048 [ 277.440985][ T27] 2 locks held by syz.0.174/4179: [ 277.456194][ T4654] syz.4.324: attempt to access beyond end of device [ 277.456194][ T4654] loop4: rw=3, sector=17676248205008, nr_sectors = 8388600 limit=2048 [ 277.461002][ T4179] syz.0.174: attempt to access beyond end of device [ 277.461002][ T4179] loop0: rw=3, sector=19230907443008, nr_sectors = 8388600 limit=2048 [ 277.489259][ T4399] syz.3.241: attempt to access beyond end of device [ 277.489259][ T4399] loop3: rw=3, sector=17802874122008, nr_sectors = 8388600 limit=2048 [ 277.494704][ T7760] BTRFS info (device loop1): enabling ssd optimizations [ 277.506409][ T3912] syz.2.69: attempt to access beyond end of device [ 277.506409][ T3912] loop2: rw=3, sector=19894219210808, nr_sectors = 8388600 limit=2048 [ 277.506452][ T3912] syz.2.69: attempt to access beyond end of device [ 277.506452][ T3912] loop2: rw=3, sector=19894227599408, nr_sectors = 8388600 limit=2048 [ 277.506484][ T3912] syz.2.69: attempt to access beyond end of device [ 277.506484][ T3912] loop2: rw=3, sector=19894235988008, nr_sectors = 8388600 limit=2048 [ 277.544162][ T27] 1 lock held by segctord/4181: [ 277.565353][ T7760] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 277.583872][ T4399] syz.3.241: attempt to access beyond end of device [ 277.583872][ T4399] loop3: rw=3, sector=17802882510608, nr_sectors = 8388600 limit=2048 [ 277.584190][ T7760] BTRFS info (device loop1): use lzo compression, level 0 [ 277.606878][ T4179] syz.0.174: attempt to access beyond end of device [ 277.606878][ T4179] loop0: rw=3, sector=19230915831608, nr_sectors = 8388600 limit=2048 [ 277.632974][ T27] #0: ffff888073c662a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25c/0x4f0 [ 277.683486][ T27] 2 locks held by syz.3.241/4399: [ 277.694166][ T27] 1 lock held by segctord/4403: [ 277.699189][ T7760] BTRFS info (device loop1): using free space tree [ 277.722462][ T27] #0: ffff8880778942a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25c/0x4f0 [ 277.762092][ T27] 3 locks held by syz.4.324/4654: [ 277.773226][ T27] 1 lock held by segctord/4657: [ 277.818927][ T27] #0: ffff888026e892a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25c/0x4f0 [ 277.874736][ T27] 1 lock held by syz.4.1601/7745: [ 277.880059][ T27] 1 lock held by syz.1.1607/7760: [ 277.885345][ T27] #0: ffff8880291da0e0 (&type->s_umount_key#78/1){+.+.}-{3:3}, at: alloc_super+0x217/0x930 [ 277.895862][ T27] 1 lock held by udevadm/7761: [ 277.900667][ T27] [ 277.902995][ T27] ============================================= [ 277.902995][ T27] [ 277.911916][ T27] NMI backtrace for cpu 1 [ 277.916294][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.109-syzkaller #0 [ 277.924198][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 277.934240][ T27] Call Trace: [ 277.937506][ T27] [ 277.940473][ T27] dump_stack_lvl+0x1e3/0x2cb [ 277.945154][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 277.950610][ T27] ? panic+0x764/0x764 [ 277.954671][ T27] ? vprintk_emit+0x622/0x740 [ 277.959344][ T27] ? printk_sprint+0x490/0x490 [ 277.964108][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 277.969229][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 277.974175][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 277.980324][ T27] ? _printk+0xd1/0x111 [ 277.984468][ T27] ? panic+0x764/0x764 [ 277.988528][ T27] ? __wake_up_klogd+0xcc/0x100 [ 277.993365][ T27] ? panic+0x764/0x764 [ 277.997439][ T27] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 278.003517][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 278.009608][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 278.015600][ T27] watchdog+0xf88/0xfd0 [ 278.019770][ T27] ? watchdog+0x1f8/0xfd0 [ 278.024100][ T27] kthread+0x28d/0x320 [ 278.028164][ T27] ? hungtask_pm_notify+0x50/0x50 [ 278.033268][ T27] ? kthread_blkcg+0xd0/0xd0 [ 278.037851][ T27] ret_from_fork+0x1f/0x30 [ 278.042306][ T27] [ 278.046473][ T27] Sending NMI from CPU 1 to CPUs 0: [ 278.051889][ C0] NMI backtrace for cpu 0 [ 278.051901][ C0] CPU: 0 PID: 3888 Comm: kworker/0:8 Not tainted 6.1.109-syzkaller #0 [ 278.051916][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 278.051925][ C0] Workqueue: events nsim_dev_trap_report_work [ 278.051953][ C0] RIP: 0010:__kmem_cache_alloc_node+0x1de/0x260 [ 278.051972][ C0] Code: c0 74 0a 4c 89 7c 24 18 e9 2d ff ff ff e8 aa 43 1f ff eb ef 48 c7 c7 00 a7 41 8d 4c 89 fe e8 f9 49 83 02 eb a4 e8 e2 5b c5 08 <83> 3d 4b 6a 60 0b 00 0f 85 76 fe ff ff 4c 89 e7 48 8b 34 24 44 89 [ 278.051983][ C0] RSP: 0018:ffffc90004c57a90 EFLAGS: 00000282 [ 278.051995][ C0] RAX: ffff888017c42140 RBX: 0000000000000000 RCX: 0000000000000000 [ 278.052004][ C0] RDX: 0000000000000001 RSI: 0000000000001000 RDI: ffffffff8d41d500 [ 278.052013][ C0] RBP: 0000000000001000 R08: 0000000000082a20 R09: ffff88807e6eb280 [ 278.052023][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888017c42140 [ 278.052032][ C0] R13: 00000000ffffffff R14: 0000000000082a20 R15: ffffffff8658e61c [ 278.052042][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 278.052054][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.052064][ C0] CR2: 0000001b2fd1bff8 CR3: 000000007e44f000 CR4: 00000000003506f0 [ 278.052076][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 278.052085][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 278.052093][ C0] Call Trace: [ 278.052098][ C0] [ 278.052103][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 278.052123][ C0] ? read_lock_is_recursive+0x10/0x10 [ 278.052142][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 278.052161][ C0] ? nmi_handle+0x25/0x440 [ 278.052185][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 278.052203][ C0] ? nmi_handle+0x12e/0x440 [ 278.052221][ C0] ? nmi_handle+0x25/0x440 [ 278.052238][ C0] ? __kmem_cache_alloc_node+0x1de/0x260 [ 278.052253][ C0] ? default_do_nmi+0x62/0x150 [ 278.052275][ C0] ? exc_nmi+0xa8/0x100 [ 278.052287][ C0] ? end_repeat_nmi+0x16/0x31 [ 278.052304][ C0] ? nsim_dev_trap_report_work+0x24c/0xa90 [ 278.052325][ C0] ? __kmem_cache_alloc_node+0x1de/0x260 [ 278.052341][ C0] ? __kmem_cache_alloc_node+0x1de/0x260 [ 278.052357][ C0] ? __kmem_cache_alloc_node+0x1de/0x260 [ 278.052373][ C0] [ 278.052377][ C0] [ 278.052381][ C0] ? nsim_dev_trap_report_work+0x24c/0xa90 [ 278.052398][ C0] ? nsim_dev_trap_report_work+0x24c/0xa90 [ 278.052414][ C0] __kmalloc_node_track_caller+0xa0/0x220 [ 278.052431][ C0] ? nsim_dev_trap_report_work+0x24c/0xa90 [ 278.052447][ C0] __alloc_skb+0x135/0x670 [ 278.052471][ C0] nsim_dev_trap_report_work+0x24c/0xa90 [ 278.052494][ C0] ? process_one_work+0x7a9/0x11d0 [ 278.052508][ C0] process_one_work+0x8a9/0x11d0 [ 278.052529][ C0] ? worker_detach_from_pool+0x260/0x260 [ 278.052546][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 278.052560][ C0] ? kthread_data+0x4e/0xc0 [ 278.052580][ C0] ? wq_worker_running+0x97/0x190 [ 278.052599][ C0] worker_thread+0xa47/0x1200 [ 278.052615][ C0] ? release_firmware_map_entry+0x186/0x186 [ 278.052641][ C0] kthread+0x28d/0x320 [ 278.052652][ C0] ? worker_clr_flags+0x190/0x190 [ 278.052666][ C0] ? kthread_blkcg+0xd0/0xd0 [ 278.052679][ C0] ret_from_fork+0x1f/0x30 [ 278.052702][ C0] [ 278.076471][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 278.076486][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.109-syzkaller #0 [ 278.076506][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 278.076514][ T27] Call Trace: [ 278.076520][ T27] [ 278.076528][ T27] dump_stack_lvl+0x1e3/0x2cb [ 278.076559][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 278.076582][ T27] ? panic+0x764/0x764 [ 278.076599][ T27] ? llist_add_batch+0x160/0x1d0 [ 278.076623][ T27] ? vscnprintf+0x59/0x80 [ 278.076643][ T27] panic+0x318/0x764 [ 278.076660][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 278.076684][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 278.076704][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 278.455311][ T27] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 278.461500][ T27] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 278.467680][ T27] watchdog+0xfc7/0xfd0 [ 278.471854][ T27] ? watchdog+0x1f8/0xfd0 [ 278.476200][ T27] kthread+0x28d/0x320 [ 278.480298][ T27] ? hungtask_pm_notify+0x50/0x50 [ 278.485337][ T27] ? kthread_blkcg+0xd0/0xd0 [ 278.489934][ T27] ret_from_fork+0x1f/0x30 [ 278.494372][ T27] [ 278.497510][ T27] Kernel Offset: disabled [ 278.501826][ T27] Rebooting in 86400 seconds..