last executing test programs: 2m33.327250831s ago: executing program 2 (id=3): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000500)="$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") open(&(0x7f0000000400)='./file2\x00', 0x40, 0x82) 2m32.373453466s ago: executing program 2 (id=32): r0 = syz_open_dev$vbi(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x9, @raw_data="b9d6475284745113417b581ac6222b71c23c77207303e6c6b80477914a56b229a2c26a5373eee41b89cf30e415386f2dc7ce84ed8d7a8969cccc62c5b65b0fb0edb01fe80dcd4ee884fedea2eb3a7dee245ca12ab0ea4ceee94c3e1305c5499ecf1402daefdb7a4d5fa51d3cff708187de19db57084df63d9987f2ec67f5c605c4aa63895b0b73ddd7d1bab2f82a4d63b0b0d207fb0e1bf3033c056d34555db77ca167e0dceabbccb1d0a0eb5007b9185122a08caf5cfba0c9a5bb81109fe1aa3b058ff0fbdc69e2"}) 2m17.33981768s ago: executing program 32 (id=32): r0 = syz_open_dev$vbi(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x9, @raw_data="b9d6475284745113417b581ac6222b71c23c77207303e6c6b80477914a56b229a2c26a5373eee41b89cf30e415386f2dc7ce84ed8d7a8969cccc62c5b65b0fb0edb01fe80dcd4ee884fedea2eb3a7dee245ca12ab0ea4ceee94c3e1305c5499ecf1402daefdb7a4d5fa51d3cff708187de19db57084df63d9987f2ec67f5c605c4aa63895b0b73ddd7d1bab2f82a4d63b0b0d207fb0e1bf3033c056d34555db77ca167e0dceabbccb1d0a0eb5007b9185122a08caf5cfba0c9a5bb81109fe1aa3b058ff0fbdc69e2"}) 1m48.548565478s ago: executing program 3 (id=838): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000006c0)=@v={0x93, 0x7, 0x90, 0x2, @MIDI_NOTEON=@special, 0x0, 0x800}) 1m48.372690391s ago: executing program 3 (id=842): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x2, &(0x7f0000000500)=[{@none}, {@none}]}) 1m48.351448953s ago: executing program 3 (id=843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) 1m48.176705637s ago: executing program 3 (id=846): unshare(0x22020600) mq_notify(0xffffffffffffffff, 0x0) 1m48.098327323s ago: executing program 3 (id=848): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$char_usb(r0, &(0x7f0000000000)="2d3020da", 0x4) 1m48.062277686s ago: executing program 3 (id=849): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m32.958821035s ago: executing program 33 (id=849): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 36.065098099s ago: executing program 4 (id=2184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 35.92053183s ago: executing program 4 (id=2186): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002480)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x0, 0x7, 0x2, 0x8000, 0x9, 0x0, 0x7}}, @authinfo={0x12, 0x84, 0x6, {0x5}}], 0x48, 0xd4}], 0x1, 0x4000800) 35.758695993s ago: executing program 4 (id=2189): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800aac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 35.449535348s ago: executing program 4 (id=2194): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000040)=0x20f, 0x4) 35.311046959s ago: executing program 4 (id=2198): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) 35.136956242s ago: executing program 4 (id=2202): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0080}]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 20.019251552s ago: executing program 34 (id=2202): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0080}]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 3.141297861s ago: executing program 0 (id=2840): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 2.755888152s ago: executing program 0 (id=2841): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000700), 0xa00, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000740)=0x7f) 2.292140428s ago: executing program 0 (id=2855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x94}}, 0x0) 2.133757041s ago: executing program 0 (id=2859): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x5, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) 2.01520606s ago: executing program 0 (id=2849): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000002000000000000000000000d00000000000000000100000d0000000000000000000000000000000000000003000000000208000003"], &(0x7f0000000f40)=""/4089, 0x52, 0xff9, 0x1}, 0x28) 1.879875991s ago: executing program 0 (id=2854): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x410281, 0x0) 1.609634393s ago: executing program 1 (id=2873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x30, 0x18, 0x309, 0x70bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0) 1.527911059s ago: executing program 1 (id=2864): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) 1.335000694s ago: executing program 1 (id=2869): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002ac0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@local, @in=@multicast2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0xd8}}, 0x0) 1.212148214s ago: executing program 7 (id=2872): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1c) 1.211537534s ago: executing program 1 (id=2883): setresuid(0x0, 0xee00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.068585255s ago: executing program 7 (id=2875): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='timerslack_ns\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f0000002dc0)='3', 0x1}], 0x1) 1.058148066s ago: executing program 1 (id=2876): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) 936.058706ms ago: executing program 1 (id=2879): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee01, 0x0) 877.874091ms ago: executing program 6 (id=2880): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000500)={0xc, @win={{0x1, 0x2, 0x8000, 0x1}, 0x4, 0x4, 0x0, 0x2, 0x0, 0x71}}) 832.099824ms ago: executing program 7 (id=2882): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x1000c01, &(0x7f0000000000)=ANY=[], 0x2, 0x231, &(0x7f0000000240)="$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") mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) 708.332134ms ago: executing program 6 (id=2884): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x46, 0x4, 0xfffffffc, 0xfffe, 0x0, 0x4, 0xfc, 0xfa, 0x3, 0x9, 0x7, 0x400, 0xfffe, 0x0, 0x0, 0x40000045, [0x2000]}}) 505.796ms ago: executing program 5 (id=2885): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x13c, 0x10, 0x713, 0x2, 0x0, {{@in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x200000000000000}, {0x0, 0xfffffffffffffffe}, {0x1}, 0x70bd2b, 0x0, 0xa, 0x1, 0x80, 0x66}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) 504.97717ms ago: executing program 6 (id=2896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f00000005c0), 0x0, 0x1}, 0x20) 385.53523ms ago: executing program 7 (id=2886): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000002900)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x11, 0x0, 0x1, [@generic="25b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fafb663cdebaede447dc8f6f61c6615fcf740adda4853b2d23adb37"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@generic="de8c97b31a91a8a023b05393504138093e90b932d665a1a7046ce0a22af9b359fe19fff69fbcbcdfa8f03d4125e94d2fe6648fde4702451992a9ae46d99d6e50fab6bcd25d8fd85e28db5873f59df4b8f35e2d272583f6367dcb714747548d784aecc39baef3bf9fe3802d", @generic="43770b39830585bc959d029bbe724f3d7419014db98cef27243d938963bf0e376585356e35d7e94e8317cf754893c1e3c759f36ba62b6e5d50a512e197997d23c8359703e6835ef80430647061bd67990b3000dac732c78ea611f69cbe309165de8dd756978c974d941ecdff6128012a5b36d152dc5819ceb6c3313cf9d983fd64638384b59950769baa54bcebb76f89fc055b5293e2a443dcf1c76f65f1ff971e30c82881bf33c661ec87f56e32de"]}]}, 0x184}}, 0x0) 384.98528ms ago: executing program 6 (id=2898): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf09050019003c0000001c000400fdff4e224e200000ac1414bb000000000000000000000000ff0002006f666228616e756269732d67656e6572696329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b80500004dcb81766c6493e0f6857fe916c47729c115e4aa273e469615a5355d32be79a363623ccc7dcab2a922bd3b4c2baa17ca5e6ae361450e4c5969f5b4c65210c9ee7c0cf557f211c9571f9f3a87c4b9c8f481f633a22bb7b3b69e4f3817fee2586d30df6463f753076bd5d58289ef320db79dac318a51adeeef0d976bfc5c25a7e754a1821746f695a6515cef439129c0657e512905770fb7efe0ff370a54063c8f79c85b04378c75c6abb588bc56f4fbe71e207936465ca60028001a00ac14142d000000000000000000000000fc0200000000000000000000000000010a00000924000938"], 0x428}}, 0x0) 297.916576ms ago: executing program 5 (id=2887): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/128) 213.279743ms ago: executing program 6 (id=2888): r0 = syz_open_procfs(0x0, &(0x7f00000041c0)='timerslack_ns\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 152.282908ms ago: executing program 5 (id=2889): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0xffffffff, 0x8) 152.174178ms ago: executing program 7 (id=2890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 127.32946ms ago: executing program 6 (id=2891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000010903000000000000000000010000060900010073797a30000000001c0002"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x18044) 114.999571ms ago: executing program 5 (id=2892): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x4}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa3}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 83.495003ms ago: executing program 5 (id=2893): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) 15.920999ms ago: executing program 7 (id=2895): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000100)) 0s ago: executing program 5 (id=2897): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000ed0000000000001c000080851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000002408000000b000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) kernel console output (not intermixed with test programs): ANGE): wlan0: link becomes ready [ 126.473064][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 126.477650][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.497857][ T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 126.557134][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.564874][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 126.564906][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 126.579468][ T6971] loop0: detected capacity change from 0 to 256 [ 126.676882][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.750563][ T6971] FAT-fs (loop0): Directory bread(block 64) failed [ 126.772555][ T6971] FAT-fs (loop0): Directory bread(block 65) failed [ 126.779340][ T6971] FAT-fs (loop0): Directory bread(block 66) failed [ 126.812426][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 126.824525][ T6971] FAT-fs (loop0): Directory bread(block 67) failed [ 126.835356][ T6971] FAT-fs (loop0): Directory bread(block 68) failed [ 126.853393][ T6971] FAT-fs (loop0): Directory bread(block 69) failed [ 126.862555][ T7] usb 5-1: string descriptor 0 read error: -22 [ 126.868977][ T7] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 126.898780][ T6971] FAT-fs (loop0): Directory bread(block 70) failed [ 126.916132][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.934885][ T6971] FAT-fs (loop0): Directory bread(block 71) failed [ 126.941632][ T6971] FAT-fs (loop0): Directory bread(block 72) failed [ 126.964139][ T7] usb 5-1: config 0 descriptor?? [ 126.995819][ T6979] loop5: detected capacity change from 0 to 4096 [ 127.002679][ T6941] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.010148][ T6971] FAT-fs (loop0): Directory bread(block 73) failed [ 127.033147][ T7] hub 5-1:0.0: bad descriptor, ignoring hub [ 127.043245][ T7] hub: probe of 5-1:0.0 failed with error -5 [ 127.052109][ T7] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 127.123862][ T6979] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 127.210306][ T6971] FAT-fs (loop0): Filesystem has been set read-only [ 127.265825][ T26] audit: type=1800 audit(127.219:5): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1221" name="pids.current" dev="loop0" ino=1048600 res=0 errno=0 [ 127.298943][ T6971] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006c61) [ 127.356472][ T4247] usb 5-1: USB disconnect, device number 9 [ 127.396264][ T6971] syz.0.1221 (6971) used greatest stack depth: 20400 bytes left [ 127.452789][ T4290] Bluetooth: hci6: command 0x0419 tx timeout [ 127.624726][ T7005] loop1: detected capacity change from 0 to 256 [ 127.678784][ T7009] validate_nla: 45 callbacks suppressed [ 127.678804][ T7009] netlink: 'syz.6.1239': attribute type 12 has an invalid length. [ 127.729281][ T7011] loop5: detected capacity change from 0 to 256 [ 127.738824][ T7009] netlink: 'syz.6.1239': attribute type 12 has an invalid length. [ 127.751075][ T7009] netlink: 'syz.6.1239': attribute type 12 has an invalid length. [ 127.774441][ T7005] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 127.808161][ T7011] FAT-fs (loop5): Directory bread(block 64) failed [ 127.818164][ T7011] FAT-fs (loop5): Directory bread(block 65) failed [ 127.860960][ T7011] FAT-fs (loop5): Directory bread(block 66) failed [ 127.896190][ T7011] FAT-fs (loop5): Directory bread(block 67) failed [ 127.931574][ T7011] FAT-fs (loop5): Directory bread(block 68) failed [ 127.980498][ T7017] xt_l2tp: v2 doesn't support IP mode [ 127.986391][ T7011] FAT-fs (loop5): Directory bread(block 69) failed [ 128.024779][ T7011] FAT-fs (loop5): Directory bread(block 70) failed [ 128.031861][ T7011] FAT-fs (loop5): Directory bread(block 71) failed [ 128.096736][ T7011] FAT-fs (loop5): Directory bread(block 72) failed [ 128.127402][ T7011] FAT-fs (loop5): Directory bread(block 73) failed [ 128.145995][ T7028] loop4: detected capacity change from 0 to 64 [ 128.297558][ T7032] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1251'. [ 128.685856][ T7053] No such timeout policy "syz0" [ 128.707753][ T7056] loop0: detected capacity change from 0 to 128 [ 129.151039][ T7077] usb usb1: usbfs: process 7077 (syz.5.1273) did not claim interface 0 before use [ 129.233343][ T7079] device erspan1 entered promiscuous mode [ 129.429791][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1278'. [ 129.660247][ T7094] device bridge2 entered promiscuous mode [ 129.737950][ T7099] netlink: 'syz.1.1284': attribute type 21 has an invalid length. [ 129.757341][ T7101] loop5: detected capacity change from 0 to 128 [ 129.776891][ T7060] loop6: detected capacity change from 0 to 32768 [ 129.784386][ T7099] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1284'. [ 129.847109][ T7060] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1265 (7060) [ 129.881720][ T7103] loop0: detected capacity change from 0 to 1024 [ 129.929233][ T7060] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 129.979389][ T7060] BTRFS info (device loop6): using free space tree [ 130.010785][ T7060] BTRFS info (device loop6): has skinny extents [ 130.024483][ T7103] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 130.129118][ T7119] loop5: detected capacity change from 0 to 164 [ 130.194462][ T7103] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 130.281071][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.343342][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.356340][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.390847][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.424244][ T7060] BTRFS info (device loop6): enabling ssd optimizations [ 130.440953][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.464817][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.498920][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.524524][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.538859][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.549541][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.566066][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.580742][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.592150][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.609074][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.617938][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.625856][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.633706][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.641384][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.649351][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.657422][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.665413][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.673160][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.681306][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.689577][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.697606][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.705978][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.714983][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.723211][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.731093][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.739158][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.747209][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.755117][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.763559][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.771477][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.779873][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.788049][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.796082][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.804504][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.813868][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.822752][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.830265][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.847672][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.856248][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.866384][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.875015][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.885179][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.893625][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.901444][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.909565][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.917473][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.925517][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.933018][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.940628][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.948320][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.956742][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.964220][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.971795][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.980121][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.987550][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 130.995292][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.003273][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.011212][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.018776][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.027043][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.034790][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.042717][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.050323][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.058581][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.066214][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.074212][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.081620][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.089446][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.097074][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.105160][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.112951][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.120802][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.128950][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.137469][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.145307][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.153341][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.161089][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.169137][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.176899][ T4247] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.203059][ T4247] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 131.333182][ T7169] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1308'. [ 131.358498][ T7169] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1308'. [ 131.391109][ T7171] netlink: 'syz.1.1309': attribute type 6 has an invalid length. [ 131.928753][ T7186] fido_id[7186]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.162353][ T7203] x_tables: unsorted entry at hook 3 [ 132.575116][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.581877][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.593169][ T7226] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1332'. [ 132.892696][ T7248] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1343'. [ 132.923158][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 133.012393][ T4247] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 133.128052][ T7264] loop0: detected capacity change from 0 to 256 [ 133.221665][ T7264] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 133.252398][ T4247] usb 2-1: Using ep0 maxpacket: 8 [ 133.445422][ T7284] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1361'. [ 133.552555][ T4247] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 133.571688][ T7291] loop5: detected capacity change from 0 to 64 [ 133.588626][ T4247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.610125][ T4247] usb 2-1: Product: syz [ 133.618978][ T4247] usb 2-1: Manufacturer: syz [ 133.629106][ T4247] usb 2-1: SerialNumber: syz [ 133.668093][ T4247] usb 2-1: config 0 descriptor?? [ 133.724699][ T4247] gspca_main: se401-2.14.0 probing 047d:5003 [ 133.892483][ T4782] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 134.182417][ T4247] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 134.201361][ T4247] se401: probe of 2-1:0.0 failed with error -71 [ 134.230861][ T4247] usb 2-1: USB disconnect, device number 8 [ 134.289621][ T7322] tmpfs: Bad value for 'mpol' [ 134.324652][ T4782] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 134.341496][ T4782] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 134.360981][ T4782] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.377385][ T4782] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 134.432306][ T4782] usb 1-1: config 1 has no interface number 0 [ 134.448905][ T4782] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 134.468573][ T4782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.491095][ T7333] netlink: 'syz.4.1385': attribute type 3 has an invalid length. [ 134.540226][ T7333] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1385'. [ 134.566309][ T4782] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 134.802675][ T4782] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 134.835062][ T7354] loop6: detected capacity change from 0 to 8 [ 134.841723][ T4782] snd_usb_pod 1-1:1.1: invalid control EP [ 134.848349][ T4782] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 134.864845][ T4782] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 134.909029][ T4782] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 135.040668][ T4247] usb 1-1: USB disconnect, device number 5 [ 135.137077][ T4290] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 135.229487][ T7373] netlink: 'syz.1.1415': attribute type 2 has an invalid length. [ 135.241758][ T7373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1415'. [ 135.295371][ T7376] loop1: detected capacity change from 0 to 2048 [ 135.359365][ T7377] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.382430][ T4290] usb 6-1: Using ep0 maxpacket: 16 [ 135.388973][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 135.499081][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 135.507050][ T4290] usb 6-1: config 0 has an invalid interface number: 79 but max is 0 [ 135.516648][ T4290] usb 6-1: config 0 has no interface number 0 [ 135.646842][ T21] usb 7-1: Using ep0 maxpacket: 8 [ 135.682635][ T4290] usb 6-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 6.76 [ 135.701335][ T4290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.710736][ T4290] usb 6-1: Product: syz [ 135.725223][ T4290] usb 6-1: Manufacturer: syz [ 135.746505][ T4290] usb 6-1: SerialNumber: syz [ 135.752632][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 135.767024][ T7391] program syz.1.1413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.793868][ T4290] usb 6-1: config 0 descriptor?? [ 135.812933][ T21] usb 7-1: unable to get BOS descriptor or descriptor too short [ 135.833821][ T4290] hub 6-1:0.79: bad descriptor, ignoring hub [ 135.840507][ T4290] hub: probe of 6-1:0.79 failed with error -5 [ 135.856778][ T4290] ftdi_sio 6-1:0.79: FTDI USB Serial Device converter detected [ 135.873182][ T4290] usb 6-1: Detected FT232RL [ 135.922820][ T21] usb 7-1: config 1 has an invalid interface number: 141 but max is 0 [ 135.946809][ T21] usb 7-1: config 1 has no interface number 0 [ 135.962677][ T21] usb 7-1: config 1 interface 141 altsetting 246 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 135.985029][ T21] usb 7-1: config 1 interface 141 altsetting 246 endpoint 0x7 has an invalid bInterval 69, changing to 7 [ 135.999043][ T7393] loop0: detected capacity change from 0 to 4096 [ 136.007994][ T21] usb 7-1: config 1 interface 141 altsetting 246 has an invalid endpoint with address 0x0, skipping [ 136.021671][ T21] usb 7-1: config 1 interface 141 has no altsetting 0 [ 136.043224][ T23] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 136.054062][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.063125][ T4290] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 136.070917][ T23] usb 5-1: Product: syz [ 136.075626][ T23] usb 5-1: Manufacturer: syz [ 136.080246][ T23] usb 5-1: SerialNumber: syz [ 136.085530][ T4290] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 136.105410][ T23] usb 5-1: config 0 descriptor?? [ 136.113178][ T4290] ftdi_sio 6-1:0.79: GPIO initialisation failed: -71 [ 136.132960][ T4290] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 136.172639][ T23] as10x_usb: device has been detected [ 136.178655][ T23] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 136.187777][ T21] usb 7-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=4d.5e [ 136.214927][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.238653][ T21] usb 7-1: Product: syz [ 136.246000][ T4290] usb 6-1: USB disconnect, device number 9 [ 136.257611][ T23] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 136.267733][ T21] usb 7-1: Manufacturer: syz [ 136.273578][ T4290] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 136.283057][ T21] usb 7-1: SerialNumber: syz [ 136.308337][ T4290] ftdi_sio 6-1:0.79: device disconnected [ 136.316650][ T23] as10x_usb: error during firmware upload part1 [ 136.335460][ T23] Registered device Sky IT Digital Key (green led) [ 136.633489][ T21] usb 7-1: USB disconnect, device number 2 [ 137.114893][ T7422] netlink: 'syz.0.1429': attribute type 15 has an invalid length. [ 137.139604][ T7422] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1429'. [ 137.330111][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 137.419628][ T4247] usb 5-1: USB disconnect, device number 10 [ 137.482749][ T4247] Unregistered device Sky IT Digital Key (green led) [ 137.487764][ T4247] as10x_usb: device has been disconnected [ 137.684886][ T7446] loop6: detected capacity change from 0 to 64 [ 137.784826][ T7446] hfs: invalid extent max_key_len 1792 [ 137.791409][ T7446] hfs: unable to open extent tree [ 137.797946][ T7450] Cannot find add_set index 1 as target [ 137.850410][ T7452] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1444'. [ 137.871061][ T7446] hfs: can't find a HFS filesystem on dev loop6 [ 137.957478][ T7456] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 138.082857][ T7463] ipt_CLUSTERIP: Please specify destination IP [ 138.178871][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1454'. [ 138.183161][ T7466] loop0: detected capacity change from 0 to 512 [ 138.228275][ T7472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.329071][ T7466] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 138.369850][ T7474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.409315][ T7477] device bridge2 entered promiscuous mode [ 138.959620][ T7511] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1472'. [ 139.165493][ T7521] xt_TCPMSS: Only works on TCP SYN packets [ 139.233202][ T7527] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1479'. [ 139.279702][ T7527] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 139.326619][ T7533] loop5: detected capacity change from 0 to 256 [ 139.464060][ T7535] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.467371][ T7539] loop1: detected capacity change from 0 to 512 [ 139.655332][ T7539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1485: error while reading EA inode 32 err=-116 [ 139.703722][ T7539] EXT4-fs (loop1): 1 orphan inode deleted [ 139.709507][ T7539] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.737779][ T7558] netlink: 'syz.0.1493': attribute type 12 has an invalid length. [ 139.745851][ T7558] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1493'. [ 140.295172][ T7581] ieee802154 phy0 wpan0: encryption failed: -90 [ 140.621052][ T7592] loop4: detected capacity change from 0 to 256 [ 140.832675][ T7598] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 140.900506][ T7596] loop1: detected capacity change from 0 to 4096 [ 140.990110][ T7596] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 141.006279][ T7551] loop6: detected capacity change from 0 to 32768 [ 141.063228][ T7551] XFS: attr2 mount option is deprecated. [ 141.105450][ T7551] XFS: attr2 mount option is deprecated. [ 141.107476][ T7569] loop0: detected capacity change from 0 to 32768 [ 141.184869][ T7604] loop4: detected capacity change from 0 to 4096 [ 141.231021][ T7596] ntfs3: loop1: failed to convert "c46c" to iso8859-3 [ 141.246198][ T7551] XFS (loop6): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 141.285259][ T7604] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 141.316296][ T7569] XFS (loop0): Mounting V5 Filesystem [ 141.349431][ T7604] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 141.463378][ T7604] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 141.474356][ T7604] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 141.487924][ T7604] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 141.523362][ T6732] XFS (loop6): Unmounting Filesystem [ 141.602661][ T7604] ntfs: volume version 3.1. [ 141.607370][ T7604] ntfs: (device loop4): ntfs_read_locked_inode(): Inode is not in use! [ 141.634585][ T7569] XFS (loop0): Ending clean mount [ 141.789347][ T7604] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 141.830103][ T4184] XFS (loop0): Unmounting Filesystem [ 141.853320][ T7604] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 141.963162][ T7604] ntfs: (device loop4): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 141.999280][ T7604] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 142.174177][ T7647] Unknown options in mask 5 [ 142.208881][ T7649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'. [ 142.585366][ T7667] device batadv1 entered promiscuous mode [ 142.731596][ T7679] netlink: 'syz.0.1545': attribute type 1 has an invalid length. [ 142.755101][ T7679] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1545'. [ 143.194335][ T7715] xt_hashlimit: max too large, truncated to 1048576 [ 143.340430][ T4290] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.380908][ T7729] PKCS8: Unsupported PKCS#8 version [ 143.592992][ T4290] usb 5-1: Using ep0 maxpacket: 32 [ 143.647056][ T7743] loop1: detected capacity change from 0 to 256 [ 143.712540][ T4290] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.850367][ T7743] FAT-fs (loop1): Directory bread(block 64) failed [ 143.862631][ T4290] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 143.888818][ T7743] FAT-fs (loop1): Directory bread(block 65) failed [ 143.909169][ T7743] FAT-fs (loop1): Directory bread(block 66) failed [ 143.947643][ T4290] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 143.972636][ T7743] FAT-fs (loop1): Directory bread(block 67) failed [ 143.979899][ T7743] FAT-fs (loop1): Directory bread(block 68) failed [ 144.026548][ T4290] usb 5-1: Product: syz [ 144.031006][ T4290] usb 5-1: Manufacturer: syz [ 144.042340][ T7743] FAT-fs (loop1): Directory bread(block 69) failed [ 144.049749][ T7743] FAT-fs (loop1): Directory bread(block 70) failed [ 144.116029][ T7743] FAT-fs (loop1): Directory bread(block 71) failed [ 144.134217][ T4290] hub 5-1:4.0: USB hub found [ 144.172593][ T7743] FAT-fs (loop1): Directory bread(block 72) failed [ 144.179191][ T7743] FAT-fs (loop1): Directory bread(block 73) failed [ 144.361410][ T7743] FAT-fs (loop1): Filesystem has been set read-only [ 144.392628][ T4290] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 144.432352][ T7743] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006c61) [ 144.452958][ T4290] usb 5-1: USB disconnect, device number 11 [ 144.689913][ T7736] loop5: detected capacity change from 0 to 32768 [ 144.774213][ T7736] XFS: attr2 mount option is deprecated. [ 144.779365][ T7777] PKCS8: Unsupported PKCS#8 version [ 144.806657][ T7736] XFS: attr2 mount option is deprecated. [ 144.949745][ T7736] XFS (loop5): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 145.189655][ T7797] loop6: detected capacity change from 0 to 2048 [ 145.242538][ T5062] XFS (loop5): Unmounting Filesystem [ 145.323924][ T7792] loop1: detected capacity change from 0 to 32768 [ 145.384328][ T7797] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.468257][ T7810] loop0: detected capacity change from 0 to 8 [ 145.486133][ T7792] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 145.673506][ T4190] ocfs2: Unmounting device (7,1) on (node local) [ 145.689601][ T7810] SQUASHFS error: Corrupted symlink [ 146.137654][ T7836] deleting an unspecified loop device is not supported. [ 146.224281][ T7841] loop4: detected capacity change from 0 to 512 [ 146.372006][ T7853] netlink: 'syz.5.1624': attribute type 1 has an invalid length. [ 146.388052][ T7841] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noquota,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 146.427750][ T7853] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1624'. [ 146.685461][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.702311][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.718938][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.747419][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.782367][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.802015][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.815619][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.832389][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.871861][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.884590][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.894280][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.915484][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.942373][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 146.965668][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.002435][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.004624][ T7897] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.023715][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.045895][ T7897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.053909][ T7897] IPv6: NLM_F_CREATE should be set when creating new route [ 147.054199][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.099079][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.112411][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.122631][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.130318][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.140351][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.162319][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.169857][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.193589][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.213130][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.224060][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.231931][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.239932][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.247704][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.255539][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.263307][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.271215][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.279071][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.286717][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.310472][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.314746][ T7911] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 147.325411][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.342544][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.350536][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.358058][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.366331][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.374170][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.387635][ T4783] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.391475][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.403407][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.418064][ T7913] loop6: detected capacity change from 0 to 8 [ 147.424853][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.434507][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.442104][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.450201][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.457404][ T7907] loop4: detected capacity change from 0 to 8192 [ 147.458651][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.472719][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.480467][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.488467][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.501470][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.510129][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.517330][ T7907] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 147.519844][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.538943][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.541648][ T7913] cramfs: Error -3 while decompressing! [ 147.546760][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.546788][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.546809][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.546829][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.546848][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.546867][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.546887][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.546906][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.546926][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.546945][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.546964][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.546981][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.562110][ T7913] cramfs: ffffffff961e6028(26)->ffff888054f1a000(4096) [ 147.569943][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.605068][ T7913] cramfs: Error -3 while decompressing! [ 147.610892][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.634432][ T7913] cramfs: ffffffff961e6042(2074)->ffff88805527a000(4096) [ 147.638423][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.662455][ T4783] usb 1-1: Using ep0 maxpacket: 32 [ 147.674674][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.681160][ T7913] cramfs: bad data blocksize 4294965264 [ 147.696295][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.708554][ T7913] cramfs: Error -3 while decompressing! [ 147.724222][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.730333][ T7913] cramfs: ffffffff961e6028(26)->ffff888054f1a000(4096) [ 147.734534][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.741282][ T7919] fuse: blksize only supported for fuseblk [ 147.747584][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.760938][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.769575][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.782659][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.800591][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.809997][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.819257][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.827415][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.855282][ T21] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.03 Device [syz1] on syz1 [ 147.882317][ T4783] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 147.893933][ T4783] usb 1-1: config 0 has no interface number 0 [ 147.900171][ T4783] usb 1-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 147.953399][ T7907] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 147.980545][ T7907] ntfs3: loop4: Failed to load $Extend. [ 148.093587][ T4783] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 148.119836][ T4783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.142637][ T4783] usb 1-1: Product: syz [ 148.146858][ T4783] usb 1-1: Manufacturer: syz [ 148.180251][ T4783] usb 1-1: SerialNumber: syz [ 148.194221][ T4783] usb 1-1: config 0 descriptor?? [ 148.211307][ T7937] nftables ruleset with unbound set [ 148.217287][ T7903] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.468435][ T7903] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.562136][ T4783] net1080 1-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, 06:42:44:f5:18:07 [ 148.677217][ T7963] xt_l2tp: v2 doesn't support IP mode [ 148.814742][ T4247] usb 1-1: USB disconnect, device number 6 [ 148.855275][ T4247] net1080 1-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 148.981622][ T7933] loop5: detected capacity change from 0 to 32768 [ 149.050292][ T7933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1661 (7933) [ 149.219458][ T7977] loop1: detected capacity change from 0 to 4096 [ 149.321075][ T7933] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 149.357744][ T7977] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 149.374450][ T7933] BTRFS info (device loop5): using free space tree [ 149.389135][ T7978] fido_id[7978]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 149.446562][ T7933] BTRFS info (device loop5): has skinny extents [ 149.529640][ T3066] ntfs3: loop1: ntfs3_write_inode r=9 failed, -22. [ 149.547292][ T4190] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 149.564269][ T4190] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 149.882146][ T7933] BTRFS info (device loop5): enabling ssd optimizations [ 149.980392][ T7976] loop4: detected capacity change from 0 to 32768 [ 150.061936][ T8013] loop1: detected capacity change from 0 to 256 [ 150.139375][ T8013] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 150.829674][ T8025] loop0: detected capacity change from 0 to 4096 [ 150.885517][ T8025] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 151.212575][ T23] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 151.325622][ T8048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1708'. [ 151.340361][ T8049] netlink: 'syz.1.1709': attribute type 1 has an invalid length. [ 151.373825][ T8049] netlink: 'syz.1.1709': attribute type 3 has an invalid length. [ 151.381728][ T8049] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1709'. [ 151.549217][ T8018] loop6: detected capacity change from 0 to 32768 [ 151.593205][ T23] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 151.602477][ T23] usb 5-1: config 6 has no interface number 0 [ 151.634632][ T23] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 151.676005][ T23] usb 5-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 151.726200][ T8018] XFS (loop6): Mounting V5 Filesystem [ 151.892685][ T23] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 151.895005][ T8018] XFS (loop6): Ending clean mount [ 151.903689][ T23] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 151.942360][ T23] usb 5-1: Product: syz [ 151.946686][ T23] usb 5-1: Manufacturer: syz [ 151.951368][ T23] usb 5-1: SerialNumber: syz [ 151.959452][ T8018] XFS (loop6): Quotacheck needed: Please wait. [ 152.031634][ T23] hso 5-1:6.2: Failed to find INT IN ep [ 152.113542][ T8018] XFS (loop6): Quotacheck: Done. [ 152.176308][ T8091] dlm: Unknown command passed to DLM device : 0 [ 152.176308][ T8091] [ 152.281842][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 152.296205][ T23] usb 5-1: USB disconnect, device number 12 [ 152.364731][ T6732] XFS (loop6): Unmounting Filesystem [ 152.710145][ T8119] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 152.765854][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1742'. [ 153.388746][ T8158] kAFS: unparsable volume name [ 153.392619][ T8157] netlink: 'syz.0.1759': attribute type 1 has an invalid length. [ 153.535239][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 153.624613][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1767'. [ 153.783136][ T8185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.816339][ T8189] netlink: 'syz.0.1774': attribute type 1 has an invalid length. [ 153.834015][ T8189] netlink: 'syz.0.1774': attribute type 2 has an invalid length. [ 153.857382][ T8189] netlink: 'syz.0.1774': attribute type 2 has an invalid length. [ 153.902929][ T8189] netlink: 'syz.0.1774': attribute type 2 has an invalid length. [ 153.932570][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1774'. [ 154.006849][ T8202] netlink: 'syz.4.1780': attribute type 10 has an invalid length. [ 154.046562][ T8202] device veth1_macvtap left promiscuous mode [ 154.112045][ T8202] bridge0: port 3(macsec0) entered blocking state [ 154.169827][ T8202] bridge0: port 3(macsec0) entered disabled state [ 154.201871][ T8202] device macsec0 entered promiscuous mode [ 154.390775][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1795'. [ 154.399290][ T8221] loop0: detected capacity change from 0 to 2048 [ 154.565830][ T8233] loop4: detected capacity change from 0 to 1764 [ 154.586710][ T8221] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,lazytime,stripe=0x0000000000001200,quota,,errors=continue. Quota mode: writeback. [ 154.731316][ T8221] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.1791: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 154.812539][ T4783] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 154.914705][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'. [ 155.242656][ T4783] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 155.258879][ T8264] loop0: detected capacity change from 0 to 256 [ 155.267113][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 155.276879][ T4783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.294703][ T4783] usb 6-1: config 0 descriptor?? [ 155.305031][ T8270] loop4: detected capacity change from 0 to 256 [ 155.311437][ T8264] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.352337][ T8264] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 155.381359][ T8264] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 155.437965][ T8270] FAT-fs (loop4): Directory bread(block 64) failed [ 155.463666][ T8270] FAT-fs (loop4): Directory bread(block 65) failed [ 155.479468][ T8270] FAT-fs (loop4): Directory bread(block 66) failed [ 155.503761][ T4786] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 155.522114][ T8270] FAT-fs (loop4): Directory bread(block 67) failed [ 155.552729][ T8270] FAT-fs (loop4): Directory bread(block 68) failed [ 155.576469][ T8270] FAT-fs (loop4): Directory bread(block 69) failed [ 155.602441][ T8270] FAT-fs (loop4): Directory bread(block 70) failed [ 155.609449][ T8270] FAT-fs (loop4): Directory bread(block 71) failed [ 155.635678][ T8270] FAT-fs (loop4): Directory bread(block 72) failed [ 155.664443][ T8270] FAT-fs (loop4): Directory bread(block 73) failed [ 155.802330][ T4783] [drm:udl_init] *ERROR* Selecting channel failed [ 155.813123][ T4786] usb 7-1: Using ep0 maxpacket: 32 [ 155.825371][ T8284] loop0: detected capacity change from 0 to 2048 [ 155.843156][ T8282] loop1: detected capacity change from 0 to 2048 [ 155.848695][ T4783] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 155.868504][ T4783] [drm] Initialized udl on minor 2 [ 155.902540][ T4783] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 155.925797][ T4783] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 155.936617][ T4783] usb 6-1: USB disconnect, device number 10 [ 155.943689][ T8284] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,data_err=ignore,max_batch_time=0x0000000000000009,sysvgroups,,errors=continue. Quota mode: none. [ 155.945920][ T4306] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 155.971119][ T4786] usb 7-1: config 0 has an invalid interface number: 9 but max is 0 [ 155.980142][ T4786] usb 7-1: config 0 has no interface number 0 [ 156.005365][ T4306] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 156.023826][ T4306] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 156.036336][ T8282] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,stripe=0x0000000000001200,quota,,errors=continue. Quota mode: writeback. [ 156.111673][ T8282] EXT4-fs error (device loop1): ext4_find_extent:929: inode #2: comm syz.1.1820: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 156.192510][ T4786] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 156.202628][ T4786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.210653][ T4786] usb 7-1: Product: syz [ 156.216171][ T4786] usb 7-1: Manufacturer: syz [ 156.220799][ T4786] usb 7-1: SerialNumber: syz [ 156.228325][ T4786] usb 7-1: config 0 descriptor?? [ 156.265716][ T4786] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 156.419701][ T8298] netlink: 'syz.0.1825': attribute type 10 has an invalid length. [ 156.452575][ T8298] bridge0: port 3(macsec0) entered blocking state [ 156.486756][ T8298] bridge0: port 3(macsec0) entered disabled state [ 156.505190][ T8298] device macsec0 entered promiscuous mode [ 156.524671][ T8298] bridge0: mtu less than device minimum [ 156.702511][ T4786] gspca_topro: reg_w err -71 [ 156.742444][ T4786] gspca_topro: Sensor soi763a [ 156.783197][ T4786] usb 7-1: USB disconnect, device number 3 [ 157.038783][ T8294] loop4: detected capacity change from 0 to 32768 [ 157.082327][ T8327] netlink: 'syz.5.1838': attribute type 1 has an invalid length. [ 157.084429][ T8329] __nla_validate_parse: 53 callbacks suppressed [ 157.084444][ T8329] netlink: 612 bytes leftover after parsing attributes in process `syz.0.1839'. [ 157.113637][ T8294] XFS: noikeep mount option is deprecated. [ 157.282504][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 157.313388][ T8294] XFS (loop4): Mounting V5 Filesystem [ 157.388053][ T8349] loop5: detected capacity change from 0 to 764 [ 157.533687][ T8349] rock: directory entry would overflow storage [ 157.540584][ T8349] rock: sig=0x5245, size=8, remaining=5 [ 157.603593][ T8294] XFS (loop4): Ending clean mount [ 157.621040][ T8294] XFS (loop4): Quotacheck needed: Please wait. [ 157.628811][ T8354] loop6: detected capacity change from 0 to 16 [ 157.637207][ T8344] loop0: detected capacity change from 0 to 32768 [ 157.672765][ T7] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 157.691441][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.709517][ T7] usb 2-1: config 0 has no interface number 0 [ 157.716557][ T8354] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 157.718399][ T7] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 157.735098][ T7] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 157.768669][ T7] usb 2-1: config 0 interface 49 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.825468][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 157.862098][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.899595][ T7] usb 2-1: config 0 descriptor?? [ 157.936366][ T8294] XFS (loop4): Quotacheck: Done. [ 157.984246][ T7] xbox_remote_probe: Unexpected endpoint_in [ 158.145722][ T4195] XFS (loop4): Unmounting Filesystem [ 158.249816][ T4783] usb 2-1: USB disconnect, device number 9 [ 158.569091][ T8382] x_tables: duplicate entry at hook 3 [ 158.709723][ T8386] loop6: detected capacity change from 0 to 64 [ 159.143976][ T8413] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1875'. [ 159.152169][ T8414] loop4: detected capacity change from 0 to 736 [ 159.232439][ T4786] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 159.392463][ T21] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 159.463151][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.502337][ T4786] usb 6-1: Using ep0 maxpacket: 32 [ 159.528583][ T8429] bpf: Bad value for 'mode' [ 159.598072][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 159.642764][ T4786] usb 6-1: config 0 has an invalid interface number: 183 but max is 0 [ 159.651685][ T4786] usb 6-1: config 0 has no interface number 0 [ 159.658894][ T4786] usb 6-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 159.722676][ T4783] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.752768][ T21] usb 7-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=31.44 [ 159.771154][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.809375][ T21] usb 7-1: config 0 descriptor?? [ 159.822671][ T23] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 159.831786][ T23] usb 1-1: config 0 has no interface number 0 [ 159.838291][ T23] usb 1-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 159.849201][ T23] usb 1-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 159.862824][ T4786] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 159.869894][ T21] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 159.883615][ T4786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.889265][ T23] usb 1-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 159.895979][ T4786] usb 6-1: Product: syz [ 159.909351][ T4786] usb 6-1: Manufacturer: syz [ 159.932747][ T4786] usb 6-1: SerialNumber: syz [ 159.946923][ T4786] usb 6-1: config 0 descriptor?? [ 159.982775][ T8398] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 160.087525][ T23] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 160.114182][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.129541][ T23] usb 1-1: Product: syz [ 160.134889][ T23] usb 1-1: Manufacturer: syz [ 160.139536][ T23] usb 1-1: SerialNumber: syz [ 160.152674][ T4783] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 160.165183][ T4783] usb 2-1: config 0 has no interface number 0 [ 160.165803][ T23] usb 1-1: config 0 descriptor?? [ 160.182608][ T4783] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 160.193485][ T4783] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.203235][ T8417] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 160.222671][ T8398] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 160.240520][ T8417] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 160.270261][ T4786] net1080 6-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.5-1, NetChip TurboCONNECT, e6:63:3f:04:8e:53 [ 160.302504][ T21] pwc: send_video_command error -71 [ 160.308756][ T21] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 160.337446][ T21] Philips webcam: probe of 7-1:0.0 failed with error -71 [ 160.368792][ T21] usb 7-1: USB disconnect, device number 4 [ 160.402616][ T4783] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 160.422628][ T4783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.441121][ T4783] usb 2-1: Product: syz [ 160.451393][ T8455] loop4: detected capacity change from 0 to 32768 [ 160.460285][ T4783] usb 2-1: Manufacturer: syz [ 160.475725][ T8417] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 160.492467][ T4783] usb 2-1: SerialNumber: syz [ 160.504537][ T4783] usb 2-1: config 0 descriptor?? [ 160.509969][ T8417] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 160.532808][ T4786] usb 6-1: USB disconnect, device number 11 [ 160.539780][ T4786] net1080 6-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.5-1, NetChip TurboCONNECT [ 160.550367][ T8423] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 160.574085][ T4783] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 160.599839][ T8455] XFS (loop4): Mounting V5 Filesystem [ 160.607046][ T4783] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 160.749684][ T8455] XFS (loop4): Ending clean mount [ 160.758127][ T8455] XFS (loop4): Quotacheck needed: Please wait. [ 160.782483][ T23] usb 1-1: Incompatible driver and firmware versions [ 160.804511][ T23] usb 1-1: USB disconnect, device number 7 [ 160.866771][ T8455] XFS (loop4): Quotacheck: Done. [ 160.983583][ T4195] XFS (loop4): Unmounting Filesystem [ 161.113323][ T4783] usb 2-1: USB disconnect, device number 10 [ 161.153216][ T4783] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 161.189922][ T4783] cyberjack 2-1:0.69: device disconnected [ 161.470803][ T8495] loop5: detected capacity change from 0 to 64 [ 161.531820][ T8499] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1908'. [ 161.665855][ T8495] hfs: request for non-existent node 16777216 in B*Tree [ 161.722417][ T8495] hfs: request for non-existent node 16777216 in B*Tree [ 162.081506][ T8529] loop1: detected capacity change from 0 to 2048 [ 162.143191][ T8529] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.172509][ T23] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 162.331709][ T8545] netlink: 'syz.5.1924': attribute type 1 has an invalid length. [ 162.403624][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1924'. [ 162.552688][ T23] usb 7-1: config 127 has an invalid interface number: 218 but max is 0 [ 162.563560][ T23] usb 7-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 162.608376][ T8558] loop5: detected capacity change from 0 to 47 [ 162.622192][ T23] usb 7-1: config 127 has no interface number 0 [ 162.639389][ T23] usb 7-1: config 127 interface 218 altsetting 2 bulk endpoint 0xF has invalid maxpacket 32 [ 162.651777][ T8562] cgroup: Invalid name [ 162.670378][ T23] usb 7-1: config 127 interface 218 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 162.690990][ T8565] loop4: detected capacity change from 0 to 256 [ 162.698262][ T23] usb 7-1: config 127 interface 218 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 0 [ 162.730401][ T23] usb 7-1: config 127 interface 218 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.760181][ T23] usb 7-1: config 127 interface 218 has no altsetting 0 [ 162.778949][ T8565] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.932825][ T23] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 3.5c [ 162.991701][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.027723][ T23] usb 7-1: Product: syz [ 163.037695][ T8574] loop5: detected capacity change from 0 to 2048 [ 163.047579][ T23] usb 7-1: Manufacturer: syz [ 163.063958][ T23] usb 7-1: SerialNumber: syz [ 163.111191][ T8578] UBIFS error (pid: 8578): cannot open "./file0", error -22 [ 163.122741][ T8519] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 163.166450][ T8574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.284816][ T8582] tmpfs: Bad value for 'mpol' [ 163.427758][ T8587] loop0: detected capacity change from 0 to 256 [ 163.434466][ T8588] loop5: detected capacity change from 0 to 512 [ 163.442678][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 163.451176][ T8590] loop4: detected capacity change from 0 to 1024 [ 163.464951][ T23] etas_es58x 7-1:127.218: Starting syz syz (Serial Number syz) driver version 1.00 [ 163.488709][ T8588] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 163.493283][ T23] usb 7-1: USB disconnect, device number 5 [ 163.519166][ T8588] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #2: block 4: comm syz.5.1943: lblock 0 mapped to illegal pblock 4 (length 1) [ 163.544265][ T8588] EXT4-fs (loop5): Remounting filesystem read-only [ 163.551307][ T8588] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.1943: error -117 reading directory block [ 163.566356][ T8588] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 163.573345][ T8587] exFAT-fs (loop0): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 163.576056][ T8588] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,mblk_io_submit,abort,init_itable,grpquota,grpjquota=.i_version,errors=remount-ro,jqfmt=vfsv1,discard,,. Quota mode: writeback. [ 163.693410][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 163.766356][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 163.766373][ T26] audit: type=1800 audit(163.719:7): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1945" name="file1" dev="loop0" ino=1048609 res=0 errno=0 [ 163.805100][ T8587] exFAT-fs (loop0): invalid start cluster (520) [ 163.842536][ T7] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 163.871946][ T9] hfsplus: b-tree write err: -5, ino 4 [ 163.873485][ T7] usb 2-1: config 127 has no interface number 1 [ 163.926521][ T7] usb 2-1: config 127 interface 0 altsetting 10 has an invalid endpoint with address 0xC1, skipping [ 163.944387][ T7] usb 2-1: config 127 interface 171 has no altsetting 0 [ 163.970079][ T7] usb 2-1: config 127 interface 0 has no altsetting 0 [ 164.081050][ T8599] [U]  [ 164.093960][ T8602] loop6: detected capacity change from 0 to 256 [ 164.173775][ T8602] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.222534][ T7] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 164.247109][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.286398][ T7] usb 2-1: Product: syz [ 164.290717][ T7] usb 2-1: Manufacturer: syz [ 164.342055][ T7] usb 2-1: SerialNumber: syz [ 164.622481][ T4306] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 164.622499][ T21] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 164.673791][ T7] xr_serial 2-1:127.171: xr_serial converter detected [ 164.693178][ T7] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 164.722771][ T7] xr_serial: probe of ttyUSB0 failed with error -71 [ 164.772091][ T7] usb 2-1: USB disconnect, device number 11 [ 164.783777][ T7] xr_serial 2-1:127.171: device disconnected [ 164.962585][ T4306] usb 6-1: Using ep0 maxpacket: 16 [ 164.982646][ T21] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 164.996925][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.027762][ T21] usb 5-1: config 0 descriptor?? [ 165.285030][ T4306] usb 6-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 165.304202][ T4306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.322335][ T4306] usb 6-1: Product: syz [ 165.332597][ T4306] usb 6-1: Manufacturer: syz [ 165.342956][ T4306] usb 6-1: SerialNumber: syz [ 165.368834][ T4306] usb 6-1: config 0 descriptor?? [ 165.400997][ T8649] loop1: detected capacity change from 0 to 128 [ 165.433618][ T4306] usb-storage 6-1:0.0: USB Mass Storage device detected [ 165.453658][ T4306] usb-storage 6-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 165.471716][ T4306] usb-storage 6-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 5.15.189-syzkaller) [ 165.471716][ T4306] Please send a copy of this message to and [ 165.522505][ T21] [drm:udl_init] *ERROR* Selecting channel failed [ 165.545345][ T21] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 165.558149][ T21] [drm] Initialized udl on minor 2 [ 165.582422][ T21] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 165.593977][ T21] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 165.619741][ T21] usb 5-1: USB disconnect, device number 13 [ 165.638264][ T4226] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 165.652587][ T4226] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 165.684038][ T4226] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 165.760701][ T4306] usb 6-1: USB disconnect, device number 12 [ 165.813431][ T8649] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.867012][ T8649] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 4095 (only 1 groups) [ 166.448683][ T8692] ax25_connect(): syz.6.1992 uses autobind, please contact jreuter@yaina.de [ 166.503224][ T8689] device wlan0 entered promiscuous mode [ 166.523187][ T8689] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 166.811818][ T8710] netlink: 'syz.6.1999': attribute type 46 has an invalid length. [ 166.853898][ T8713] loop1: detected capacity change from 0 to 256 [ 166.913225][ T8713] exfat: Deprecated parameter 'utf8' [ 166.935257][ T8720] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 166.974105][ T8724] loop0: detected capacity change from 0 to 128 [ 167.001546][ T8713] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 167.063287][ T8724] FAT-fs (loop0): Directory bread(block 32) failed [ 167.090863][ T8724] FAT-fs (loop0): Directory bread(block 33) failed [ 167.111227][ T8724] FAT-fs (loop0): Directory bread(block 34) failed [ 167.132915][ T8724] FAT-fs (loop0): Directory bread(block 35) failed [ 167.158651][ T8724] FAT-fs (loop0): Directory bread(block 36) failed [ 167.181833][ T8724] FAT-fs (loop0): Directory bread(block 37) failed [ 167.209426][ T8724] FAT-fs (loop0): Directory bread(block 38) failed [ 167.231870][ T8724] FAT-fs (loop0): Directory bread(block 39) failed [ 167.269640][ T8724] FAT-fs (loop0): Directory bread(block 40) failed [ 167.320503][ T8724] FAT-fs (loop0): Directory bread(block 41) failed [ 167.395096][ T8742] netlink: 'syz.6.2016': attribute type 4 has an invalid length. [ 167.415723][ T8744] netlink: 'syz.1.2017': attribute type 9 has an invalid length. [ 167.422335][ T8742] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2016'. [ 167.475463][ T8744] netlink: 'syz.1.2017': attribute type 6 has an invalid length. [ 168.186740][ T8728] loop4: detected capacity change from 0 to 32768 [ 168.242471][ T4226] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 168.258857][ T8728] XFS (loop4): Mounting V5 Filesystem [ 168.342596][ T8728] XFS (loop4): Ending clean mount [ 168.365289][ T8728] XFS (loop4): Quotacheck needed: Please wait. [ 168.442710][ T21] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 168.472005][ T8728] XFS (loop4): Quotacheck: Done. [ 168.612498][ T4226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 168.632348][ T4226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 168.812687][ T4226] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 168.832557][ T4226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.841232][ T4226] usb 6-1: Product: syz [ 168.845865][ T4226] usb 6-1: Manufacturer: syz [ 168.850611][ T4226] usb 6-1: SerialNumber: syz [ 168.856914][ T4195] XFS (loop4): Unmounting Filesystem [ 168.868496][ T4226] usb 6-1: config 0 descriptor?? [ 168.928597][ T8776] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2028'. [ 168.965329][ T4226] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input15 [ 168.981721][ T8778] loop6: detected capacity change from 0 to 764 [ 169.018721][ T21] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 169.044823][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.062150][ T21] usb 2-1: Product: syz [ 169.067016][ T21] usb 2-1: Manufacturer: syz [ 169.071811][ T21] usb 2-1: SerialNumber: syz [ 169.098367][ T8782] loop0: detected capacity change from 0 to 2048 [ 169.129445][ T21] usb 2-1: config 0 descriptor?? [ 169.185050][ T21] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 169.300559][ T8782] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 169.334812][ T4226] usb 6-1: USB disconnect, device number 13 [ 169.352343][ T5751] udevd[5751]: incorrect nilfs2 checksum on /dev/loop0 [ 169.363351][ T8782] NILFS (loop0): mounting unchecked fs [ 169.369471][ T8782] NILFS (loop0): recovery required for readonly filesystem [ 169.431192][ T4177] udevd[4177]: incorrect nilfs2 checksum on /dev/loop0 [ 169.458171][ T8782] NILFS (loop0): write access will be enabled during recovery [ 169.481428][ T8782] NILFS (loop0): recovery complete [ 169.581537][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop0 [ 169.611444][ T8790] dlm: no locking on control device [ 169.657406][ T8792] binder: 8791:8792 ioctl c018620b 0 returned -14 [ 169.660768][ T21] gspca_sunplus: reg_w_riv err -71 [ 169.689979][ T21] sunplus: probe of 2-1:0.0 failed with error -71 [ 169.753631][ T21] usb 2-1: USB disconnect, device number 12 [ 169.934974][ T8805] xt_TCPMSS: Only works on TCP SYN packets [ 170.350357][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 170.374502][ T8825] loop1: detected capacity change from 0 to 1764 [ 170.382003][ T8832] netlink: 408 bytes leftover after parsing attributes in process `syz.5.2056'. [ 170.771677][ T26] audit: type=1326 audit(170.719:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.6.2068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff81eb17be9 code=0x0 [ 171.198668][ T8890] program syz.5.2083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.386870][ T8907] xt_socket: unknown flags 0xc [ 171.390863][ T8904] loop4: detected capacity change from 0 to 256 [ 171.551823][ T8904] FAT-fs (loop4): Directory bread(block 64) failed [ 171.552473][ T8916] Restarting kernel threads ... [ 171.562901][ T8904] FAT-fs (loop4): Directory bread(block 65) failed [ 171.578652][ T8904] FAT-fs (loop4): Directory bread(block 66) failed [ 171.596160][ T8904] FAT-fs (loop4): Directory bread(block 67) failed [ 171.605544][ T8904] FAT-fs (loop4): Directory bread(block 68) failed [ 171.612570][ T8916] done. [ 171.616784][ T8904] FAT-fs (loop4): Directory bread(block 69) failed [ 171.653984][ T8904] FAT-fs (loop4): Directory bread(block 70) failed [ 171.690396][ T8904] FAT-fs (loop4): Directory bread(block 71) failed [ 171.721958][ T8904] FAT-fs (loop4): Directory bread(block 72) failed [ 171.747794][ T8904] FAT-fs (loop4): Directory bread(block 73) failed [ 172.108745][ T8946] loop4: detected capacity change from 0 to 128 [ 172.180903][ T8950] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 172.222463][ T8946] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 172.281183][ T8946] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.309945][ T8957] loop1: detected capacity change from 0 to 256 [ 172.460702][ T8946] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.2110: checksumming directory block 0 [ 172.509970][ T8957] FAT-fs (loop1): Directory bread(block 64) failed [ 172.537057][ T8957] FAT-fs (loop1): Directory bread(block 65) failed [ 172.612821][ T8957] FAT-fs (loop1): Directory bread(block 66) failed [ 172.642561][ T4306] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 172.662651][ T8957] FAT-fs (loop1): Directory bread(block 67) failed [ 172.669783][ T8957] FAT-fs (loop1): Directory bread(block 68) failed [ 172.673502][ T8969] netlink: 'syz.5.2122': attribute type 2 has an invalid length. [ 172.742179][ T8971] loop0: detected capacity change from 0 to 1024 [ 172.749663][ T8957] FAT-fs (loop1): Directory bread(block 69) failed [ 172.757172][ T8969] netlink: 'syz.5.2122': attribute type 1 has an invalid length. [ 172.766404][ T8957] FAT-fs (loop1): Directory bread(block 70) failed [ 172.778030][ T8957] FAT-fs (loop1): Directory bread(block 71) failed [ 172.830463][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2122'. [ 172.879600][ T8957] FAT-fs (loop1): Directory bread(block 72) failed [ 172.888503][ T8971] attempt to access beyond end of device [ 172.888503][ T8971] loop0: rw=0, want=1835016, limit=1024 [ 172.905079][ T4306] usb 7-1: Using ep0 maxpacket: 32 [ 172.915194][ T8957] FAT-fs (loop1): Directory bread(block 73) failed [ 172.981599][ T8971] Buffer I/O error on dev loop0, logical block 458753, async page read [ 173.021025][ T8971] attempt to access beyond end of device [ 173.021025][ T8971] loop0: rw=0, want=1835016, limit=1024 [ 173.076647][ T8971] Buffer I/O error on dev loop0, logical block 458753, async page read [ 173.092663][ T4306] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.305198][ T8982] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2128'. [ 173.328400][ T4306] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 173.349231][ T4306] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.371150][ T8986] netlink: 'syz.0.2129': attribute type 6 has an invalid length. [ 173.382438][ T4306] usb 7-1: Product: syz [ 173.400564][ T4306] usb 7-1: Manufacturer: syz [ 173.420851][ T4306] usb 7-1: SerialNumber: syz [ 173.483051][ T4306] usb 7-1: config 0 descriptor?? [ 173.574251][ T4306] usb 7-1: bad CDC descriptors [ 173.579583][ T4306] usb 7-1: unsupported MDLM descriptors [ 173.797432][ T4786] usb 7-1: USB disconnect, device number 6 [ 173.809472][ T9003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.969019][ T9013] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 173.997134][ T9013] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 174.089683][ T9019] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 174.122044][ T9021] netlink: 'syz.1.2147': attribute type 10 has an invalid length. [ 174.167850][ T9021] team0: Port device wlan1 added [ 174.759700][ T9053] loop4: detected capacity change from 0 to 512 [ 174.896778][ T9053] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,barrier=0x0000000000001003,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 174.912457][ T9064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2166'. [ 174.992558][ T9064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2166'. [ 175.002501][ T4786] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 175.034606][ T9023] loop0: detected capacity change from 0 to 32768 [ 175.208442][ T9023] XFS (loop0): Mounting V5 Filesystem [ 175.344531][ T9023] XFS (loop0): Ending clean mount [ 175.417619][ T4184] XFS (loop0): Unmounting Filesystem [ 175.427243][ T4306] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 175.593744][ T4786] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 175.612949][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 175.619715][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 175.625560][ T4786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.650185][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 175.655096][ T4786] usb 6-1: Product: syz [ 175.662503][ T4786] usb 6-1: Manufacturer: syz [ 175.683042][ T4786] usb 6-1: SerialNumber: syz [ 175.690330][ T4786] usb 6-1: config 0 descriptor?? [ 175.707810][ T4783] Bluetooth: hci2: command 0x0406 tx timeout [ 175.711832][ T9097] netlink: 'syz.4.2181': attribute type 32 has an invalid length. [ 175.721331][ T4783] Bluetooth: hci0: command 0x0406 tx timeout [ 175.730670][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2181'. [ 175.754948][ T4786] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 175.852436][ T4306] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 175.871020][ T4306] usb 2-1: config 0 has no interface number 0 [ 175.901699][ T9105] netlink: 'syz.6.2185': attribute type 1 has an invalid length. [ 175.907143][ T4306] usb 2-1: config 0 interface 101 has no altsetting 0 [ 176.122773][ T4306] usb 2-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=ef.18 [ 176.132128][ T4306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.165136][ T9115] kernel read not supported for file / lhOb~h3JyxvL=QRnFGrqςû~QV7"qHd0 (pid: 9115 comm: syz.0.2175) [ 176.184946][ T4306] usb 2-1: Product: syz [ 176.189249][ T4306] usb 2-1: Manufacturer: syz [ 176.209078][ T9117] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2189'. [ 176.222338][ T4306] usb 2-1: SerialNumber: syz [ 176.228484][ T4290] usb 6-1: USB disconnect, device number 14 [ 176.229708][ T4306] usb 2-1: config 0 descriptor?? [ 176.247353][ T26] audit: type=1800 audit(176.199:9): pid=9115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2175" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B90E0E dev="mqueue" ino=48889 res=0 errno=0 [ 176.369824][ T4306] usb 2-1: bad CDC descriptors [ 176.397464][ T4306] usb 2-1: bad CDC descriptors [ 176.413906][ T4306] option 2-1:0.101: GSM modem (1-port) converter detected [ 176.673593][ T23] usb 2-1: USB disconnect, device number 13 [ 176.688114][ T23] option 2-1:0.101: device disconnected [ 177.052804][ T9160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2208'. [ 177.369549][ T9169] loop5: detected capacity change from 0 to 4096 [ 177.397150][ T9177] loop6: detected capacity change from 0 to 1024 [ 177.400046][ T9179] loop1: detected capacity change from 0 to 256 [ 177.443729][ T9179] FAT-fs (loop1): Directory bread(block 64) failed [ 177.450741][ T9179] FAT-fs (loop1): Directory bread(block 65) failed [ 177.458086][ T9179] FAT-fs (loop1): Directory bread(block 66) failed [ 177.465195][ T9179] FAT-fs (loop1): Directory bread(block 67) failed [ 177.472003][ T9179] FAT-fs (loop1): Directory bread(block 68) failed [ 177.500546][ T9177] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 177.524758][ T9179] FAT-fs (loop1): Directory bread(block 69) failed [ 177.537729][ T9179] FAT-fs (loop1): Directory bread(block 70) failed [ 177.567114][ T9179] FAT-fs (loop1): Directory bread(block 71) failed [ 177.585487][ T9179] FAT-fs (loop1): Directory bread(block 72) failed [ 177.592788][ T9179] FAT-fs (loop1): Directory bread(block 73) failed [ 177.622524][ T4290] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 177.795685][ T9183] netlink: 'syz.5.2222': attribute type 11 has an invalid length. [ 177.882528][ T4290] usb 1-1: Using ep0 maxpacket: 16 [ 178.002716][ T4290] usb 1-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 178.024648][ T4290] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.156508][ T9207] loop6: detected capacity change from 0 to 64 [ 178.157261][ T4290] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 178.205473][ T4290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 178.215691][ T4290] usb 1-1: SerialNumber: syz [ 178.269397][ T9214] netlink: 'syz.5.2236': attribute type 5 has an invalid length. [ 178.277359][ T4290] usb 1-1: 0:2 : does not exist [ 178.277710][ T9214] netlink: 'syz.5.2236': attribute type 11 has an invalid length. [ 178.526974][ T4290] usb 1-1: USB disconnect, device number 8 [ 178.850058][ T9242] kAFS: unable to lookup cell '(/' [ 178.982960][ T9248] loop1: detected capacity change from 0 to 1024 [ 179.122625][ T9257] netlink: 'syz.5.2257': attribute type 4 has an invalid length. [ 179.256663][ T9266] loop5: detected capacity change from 0 to 512 [ 179.301429][ T9271] loop0: detected capacity change from 0 to 256 [ 179.304117][ T9270] ax25_connect(): syz.6.2264 uses autobind, please contact jreuter@yaina.de [ 179.390306][ T9266] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 179.473803][ T9266] EXT4-fs (loop5): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 179.634994][ T9286] netlink: 'syz.0.2269': attribute type 3 has an invalid length. [ 179.840778][ T9300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.920230][ T9303] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 179.992830][ T9303] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 180.065981][ T9309] loop6: detected capacity change from 0 to 256 [ 180.269683][ T9318] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.2287'. [ 180.369768][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2289'. [ 180.432434][ T9324] netlink: 'syz.6.2289': attribute type 1 has an invalid length. [ 180.703784][ T4290] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 180.768245][ T9347] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 180.982479][ T4290] usb 2-1: Using ep0 maxpacket: 16 [ 181.131059][ T4290] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 181.142905][ T4290] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 181.167500][ T4290] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 181.183429][ T4290] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 181.222387][ T4290] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 181.242437][ T4290] usb 2-1: config 1 interface 0 has no altsetting 0 [ 181.259501][ T4290] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 181.285360][ T4290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.353804][ T4290] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 181.539155][ T9385] loop5: detected capacity change from 0 to 4096 [ 181.540439][ T9387] loop0: detected capacity change from 0 to 1024 [ 181.566555][ T9385] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 181.588938][ T4290] scsi host1: usb-storage 2-1:1.0 [ 181.605177][ T9385] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 181.752476][ T9387] EXT4-fs (loop0): Ignoring removed oldalloc option [ 181.800985][ T21] usb 2-1: USB disconnect, device number 14 [ 181.850473][ T9387] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,oldalloc,,errors=continue. Quota mode: none. [ 181.955590][ T9387] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz.0.2320: directory missing '..' [ 182.041127][ T9407] loop6: detected capacity change from 0 to 736 [ 182.087821][ T9411] Option ' ˴-]' to dns_resolver key: bad/missing value [ 182.206102][ T9407] rock: directory entry would overflow storage [ 182.221834][ T9407] rock: sig=0x3b10, size=4, remaining=3 [ 182.235164][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2333'. [ 182.849962][ T9447] loop1: detected capacity change from 0 to 2048 [ 182.955353][ T9447] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.683887][ T9450] loop5: detected capacity change from 0 to 32768 [ 183.792919][ T9490] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2369'. [ 183.802310][ T9450] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.2349 (9450) [ 183.852902][ T9450] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 183.909944][ T9450] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 183.961864][ T9450] BTRFS info (device loop5): use zstd compression, level 3 [ 183.999878][ T9467] loop6: detected capacity change from 0 to 32768 [ 184.013223][ T9450] BTRFS info (device loop5): using free space tree [ 184.028764][ T9450] BTRFS info (device loop5): has skinny extents [ 184.059139][ T9492] loop1: detected capacity change from 0 to 4096 [ 184.119800][ T9467] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 184.227173][ T9492] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 184.310179][ T9450] BTRFS info (device loop5): enabling ssd optimizations [ 184.320464][ T6732] ocfs2: Unmounting device (7,6) on (node local) [ 184.369455][ T4786] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 184.495559][ T9492] ntfs3: loop1: failed to convert "c46c" to macroman [ 184.832774][ T4786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.862299][ T4786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.892754][ T4786] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.947696][ T4786] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.991874][ T4786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.025267][ T4786] usb 1-1: config 0 descriptor?? [ 185.073305][ T4786] hub 1-1:0.0: USB hub found [ 185.241392][ T9548] xt_l2tp: missing protocol rule (udp|l2tpip) [ 185.292806][ T4786] hub 1-1:0.0: 14 ports detected [ 185.312572][ T4786] hub 1-1:0.0: insufficient power available to use all downstream ports [ 185.350136][ T9556] loop6: detected capacity change from 0 to 16 [ 185.449546][ T9560] loop1: detected capacity change from 0 to 1024 [ 185.485431][ T9556] erofs: (device loop6): mounted with root inode @ nid 36. [ 185.513963][ T4786] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 185.527391][ T4786] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 185.541780][ T9556] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress 1929 in[58, 4038] out[2639] [ 185.599162][ T9556] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 185.608198][ T9560] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 185.622573][ T9560] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 185.633060][ T4786] usb 1-1: USB disconnect, device number 9 [ 185.665351][ T9560] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.2388: Failed to acquire dquot type 0 [ 185.727538][ T9560] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 185.751228][ T9560] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #13: comm syz.1.2388: corrupted inode contents [ 185.766502][ T9560] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #13: comm syz.1.2388: mark_inode_dirty error [ 185.779006][ T9560] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #13: comm syz.1.2388: corrupted inode contents [ 185.795632][ T9560] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #13: comm syz.1.2388: mark_inode_dirty error [ 185.808816][ T9560] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #13: comm syz.1.2388: corrupted inode contents [ 185.842685][ T9560] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 185.878144][ T9560] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #13: comm syz.1.2388: corrupted inode contents [ 185.916093][ T9560] EXT4-fs error (device loop1): ext4_truncate:4273: inode #13: comm syz.1.2388: mark_inode_dirty error [ 185.949178][ T9560] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 185.956922][ T9550] loop5: detected capacity change from 0 to 32768 [ 185.963693][ T9560] EXT4-fs (loop1): 1 truncate cleaned up [ 185.971178][ T9560] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.037836][ T9550] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 186.100295][ T9550] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 186.106369][ T9560] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 186.155899][ T9560] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 186.194351][ T9560] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.2388: Failed to acquire dquot type 0 [ 186.241431][ T9550] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 186.264457][ T9541] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 186.282617][ T9541] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 186.425017][ T9541] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 142ms [ 186.447339][ T9541] gfs2: fsid=syz:syz.0: jid=0: Done [ 186.468072][ T9550] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 186.542813][ T9544] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 186.802339][ T9544] usb 1-1: Using ep0 maxpacket: 8 [ 186.922498][ T9544] usb 1-1: config 162 has an invalid interface number: 161 but max is 1 [ 186.939118][ T9544] usb 1-1: config 162 has an invalid interface number: 187 but max is 1 [ 186.968432][ T9544] usb 1-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 186.982121][ T9544] usb 1-1: config 162 has no interface number 0 [ 187.000958][ T9544] usb 1-1: config 162 has no interface number 1 [ 187.008537][ T9544] usb 1-1: config 162 interface 161 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 187.051475][ T9544] usb 1-1: config 162 interface 187 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.088831][ T9544] usb 1-1: config 162 interface 187 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 187.119045][ T9544] usb 1-1: config 162 interface 161 has no altsetting 0 [ 187.141129][ T9544] usb 1-1: config 162 interface 187 has no altsetting 0 [ 187.198110][ T9606] netlink: 448 bytes leftover after parsing attributes in process `syz.5.2410'. [ 187.244248][ T9606] unsupported nla_type 14345 [ 187.332805][ T9544] usb 1-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7 [ 187.352520][ T9544] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.361336][ T9544] usb 1-1: Product: syz [ 187.375927][ T9544] usb 1-1: Manufacturer: syz [ 187.380589][ T9544] usb 1-1: SerialNumber: syz [ 187.460628][ T9622] device vlan0 entered promiscuous mode [ 187.578637][ T9541] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 187.707676][ T9544] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 187.772851][ T9544] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 187.793062][ T9544] usb 1-1: USB disconnect, device number 10 [ 187.886895][ T9618] loop5: detected capacity change from 0 to 40427 [ 187.906126][ T9618] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 187.923640][ T9618] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x2 [ 187.938894][ T9618] F2FS-fs (loop5): invalid crc value [ 187.972640][ T9541] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 187.977764][ T9618] F2FS-fs (loop5): Found nat_bits in checkpoint [ 187.992582][ T9541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.023361][ T9541] usb 2-1: config 0 descriptor?? [ 188.055526][ T9618] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 188.083302][ T9541] cp210x 2-1:0.0: cp210x converter detected [ 188.211769][ T9629] loop6: detected capacity change from 0 to 32768 [ 188.239779][ T9629] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2421 (9629) [ 188.382415][ T9629] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 188.412749][ T9629] BTRFS info (device loop6): setting nodatacow, compression disabled [ 188.437031][ T9629] BTRFS info (device loop6): setting datasum, datacow enabled [ 188.452538][ T9629] BTRFS info (device loop6): force zlib compression, level 3 [ 188.471013][ T9629] BTRFS info (device loop6): using free space tree [ 188.493122][ T9629] BTRFS info (device loop6): has skinny extents [ 188.512636][ T9541] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 188.532663][ T9637] device bond1 entered promiscuous mode [ 188.539350][ T9541] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 188.539391][ T9637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.571230][ T9541] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 188.643585][ T9541] usb 2-1: cp210x converter now attached to ttyUSB0 [ 188.664169][ T9541] usb 2-1: USB disconnect, device number 15 [ 188.691952][ T9629] BTRFS info (device loop6): enabling ssd optimizations [ 188.701251][ T9541] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 188.735988][ T9541] cp210x 2-1:0.0: device disconnected [ 189.115339][ T9676] xt_l2tp: invalid flags combination: 0 [ 189.274896][ T9682] loop1: detected capacity change from 0 to 256 [ 189.305328][ T9684] netlink: 'syz.0.2438': attribute type 3 has an invalid length. [ 189.333083][ T9682] exfat: Deprecated parameter 'utf8' [ 189.387308][ T9682] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 189.495054][ T9690] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 189.560385][ T9690] overlayfs: missing 'lowerdir' [ 189.735681][ T9698] loop0: detected capacity change from 0 to 256 [ 189.794291][ T9701] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2430'. [ 189.823920][ T9698] exfat: Deprecated parameter 'utf8' [ 189.892345][ T9698] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 190.199016][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2455'. [ 190.845881][ T9758] netlink: 'syz.5.2473': attribute type 4 has an invalid length. [ 190.910720][ T9758] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2473'. [ 191.132192][ T9771] netlink: 'syz.1.2479': attribute type 4 has an invalid length. [ 191.356537][ T9781] loop5: detected capacity change from 0 to 256 [ 191.379858][ T9784] loop1: detected capacity change from 0 to 64 [ 191.388480][ T9744] loop0: detected capacity change from 0 to 32768 [ 191.415705][ T9781] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.431962][ T9744] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2467 (9744) [ 191.448823][ T9781] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 191.521193][ T9744] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 191.562372][ T9744] BTRFS info (device loop0): using free space tree [ 191.569789][ T9781] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 191.578197][ T9744] BTRFS info (device loop0): has skinny extents [ 192.079351][ T9744] BTRFS info (device loop0): enabling ssd optimizations [ 192.175544][ T9823] lo speed is unknown, defaulting to 1000 [ 192.669789][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2507'. [ 192.715082][ T9850] netlink: 'syz.6.2508': attribute type 8 has an invalid length. [ 192.751845][ T9850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.496221][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2521'. [ 193.531228][ T9882] loop6: detected capacity change from 0 to 64 [ 193.589331][ T9823] chnl_net:caif_netlink_parms(): no params data found [ 193.784769][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.802322][ T7212] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 193.857939][ T9903] loop5: detected capacity change from 0 to 128 [ 193.866058][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.890183][ T9823] device bridge_slave_0 entered promiscuous mode [ 193.923031][ T9905] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 193.928383][ T9903] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 193.967677][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.985899][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.004061][ T9823] device bridge_slave_1 entered promiscuous mode [ 194.016406][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.016460][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.107845][ T9911] program syz.6.2535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.135954][ T5062] sysv_free_block: flc_count > flc_size [ 194.182625][ T4306] Bluetooth: hci7: command 0x0409 tx timeout [ 194.195301][ T9823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.217466][ T7212] usb 2-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 194.232683][ T5062] sysv_free_block: flc_count > flc_size [ 194.258158][ T7212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 194.277091][ T5062] sysv_free_block: flc_count > flc_size [ 194.291332][ T7212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 194.322861][ T5062] sysv_free_block: flc_count > flc_size [ 194.325049][ T9823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.332600][ T7212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 194.362384][ T5062] sysv_free_block: flc_count > flc_size [ 194.381806][ T5062] sysv_free_block: flc_count > flc_size [ 194.391938][ T5062] sysv_free_block: flc_count > flc_size [ 194.413872][ T7212] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.432611][ T5062] sysv_free_block: flc_count > flc_size [ 194.450130][ T5062] sysv_free_block: flc_count > flc_size [ 194.463547][ T7212] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 194.474807][ T5062] sysv_free_block: flc_count > flc_size [ 194.491980][ T9823] team0: Port device team_slave_0 added [ 194.495414][ T7212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.509814][ T5062] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 194.540741][ T7212] usb 2-1: config 0 descriptor?? [ 194.571853][ T9823] team0: Port device team_slave_1 added [ 194.579391][ T9923] xt_socket: unknown flags 0xc [ 194.750626][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.775415][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.816705][ T7212] rc_core: IR keymap rc-hauppauge not found [ 194.836834][ T9823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.845937][ T7212] Registered IR keymap rc-empty [ 194.887579][ T9934] Restarting kernel threads ... [ 194.889446][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.895290][ T7212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 194.910381][ T9934] done. [ 194.911878][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.962506][ T7212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.006555][ T7212] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 195.008727][ T9823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.044853][ T7212] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 195.122444][ T7212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.167853][ T9950] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2554'. [ 195.202514][ T7212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.259620][ T9823] device hsr_slave_0 entered promiscuous mode [ 195.273848][ T7212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.290554][ T9823] device hsr_slave_1 entered promiscuous mode [ 195.362621][ T7212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.362715][ T9823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.395260][ T9823] Cannot create hsr debugfs directory [ 195.395352][ T9959] xt_socket: unknown flags 0xc [ 195.432634][ T7212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.465753][ T9961] Restarting kernel threads ... [ 195.501905][ T7212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.514889][ T9961] done. [ 195.592276][ T7212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.643268][ T7212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.712528][ T7212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.772478][ T7212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.785867][ T9971] loop1: detected capacity change from 0 to 2048 [ 195.813808][ T7212] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 195.833537][ T7212] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 195.868269][ T7212] usb 2-1: USB disconnect, device number 16 [ 195.892196][ T9971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.921821][ T9823] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 195.948182][ T9980] loop5: detected capacity change from 0 to 16 [ 195.993386][ T9823] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 196.021078][ T9823] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 196.027192][ T9971] UDF-fs: incorrect filename length (10) [ 196.048864][ T9980] erofs: (device loop5): mounted with root inode @ nid 36. [ 196.049808][ T9823] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.274361][ T9995] xt_hashlimit: max too large, truncated to 1048576 [ 196.303288][ T9995] No such timeout policy "syz1" [ 196.382414][ T9538] Bluetooth: hci7: command 0x041b tx timeout [ 196.560705][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.575604][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.582734][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.606058][ T9823] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.626679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.627408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.627845][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.627923][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.628386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.653083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.653749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.654080][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.654111][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.654481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.673750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.707589][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.709930][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.710636][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.711364][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.730273][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.921132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.931753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.991137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.009109][ T26] audit: type=1326 audit(196.959:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.1.2584" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ea22d4be9 code=0x0 [ 197.073558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.095679][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.166858][T10029] loop5: detected capacity change from 0 to 256 [ 197.266473][T10029] FAT-fs (loop5): Directory bread(block 64) failed [ 197.302787][T10029] FAT-fs (loop5): Directory bread(block 65) failed [ 197.354497][T10029] FAT-fs (loop5): Directory bread(block 66) failed [ 197.392501][T10029] FAT-fs (loop5): Directory bread(block 67) failed [ 197.423376][T10029] FAT-fs (loop5): Directory bread(block 68) failed [ 197.451624][T10029] FAT-fs (loop5): Directory bread(block 69) failed [ 197.479887][T10043] 9pnet_virtio: no channels available for device syz [ 197.489677][T10029] FAT-fs (loop5): Directory bread(block 70) failed [ 197.515860][T10029] FAT-fs (loop5): Directory bread(block 71) failed [ 197.536074][T10029] FAT-fs (loop5): Directory bread(block 72) failed [ 197.558505][T10029] FAT-fs (loop5): Directory bread(block 73) failed [ 197.595606][T10050] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2599'. [ 197.625879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.643838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.668366][ T9823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.688959][T10052] IPv6: Can't replace route, no match found [ 198.037284][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2609'. [ 198.233613][T10079] loop5: detected capacity change from 0 to 22 [ 198.283079][T10079] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 198.343381][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2615'. [ 198.360889][T10079] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 198.416903][ T9536] Bluetooth: hci7: command 0x040f tx timeout [ 198.471033][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.494729][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.591260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.630093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.669398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.701534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.763252][ T9823] device veth0_vlan entered promiscuous mode [ 198.833088][ T9823] device veth1_vlan entered promiscuous mode [ 198.898912][T10116] overlayfs: conflicting options: nfs_export=on,index=off [ 198.916717][T10117] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2627'. [ 199.000226][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.023168][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.063199][ T9823] device veth0_macvtap entered promiscuous mode [ 199.105692][ T9823] device veth1_macvtap entered promiscuous mode [ 199.142370][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.220126][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.270449][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.326623][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.345124][T10139] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 199.382500][T10139] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.411664][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.452186][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.522287][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.562281][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.602328][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.648067][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.693907][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.741795][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.765867][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.819758][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.854591][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.888397][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.930365][T10141] netlink: 'syz.0.2642': attribute type 10 has an invalid length. [ 199.997682][T10141] team0: Port device wlan1 added [ 200.026648][T10147] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 200.052728][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.083088][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.091848][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.183131][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.226088][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.269140][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.290973][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.322815][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.360301][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.384188][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.402388][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.423634][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.446306][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.503334][ T9536] Bluetooth: hci7: command 0x0419 tx timeout [ 200.513840][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.524522][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.535615][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.546244][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.557982][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.569497][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.594385][T10171] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 200.640517][T10178] loop1: detected capacity change from 0 to 1024 [ 200.653330][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.706342][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.787094][ T9823] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.833507][ T9823] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.884576][ T9823] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.898118][T10178] attempt to access beyond end of device [ 200.898118][T10178] loop1: rw=0, want=1835016, limit=1024 [ 200.931827][ T9823] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.961360][T10178] Buffer I/O error on dev loop1, logical block 458753, async page read [ 200.978747][T10194] netlink: 'syz.6.2665': attribute type 10 has an invalid length. [ 200.994570][T10178] attempt to access beyond end of device [ 200.994570][T10178] loop1: rw=0, want=1835016, limit=1024 [ 201.033474][T10178] Buffer I/O error on dev loop1, logical block 458753, async page read [ 201.095662][T10194] team0: Port device wlan1 added [ 201.097897][T10199] loop0: detected capacity change from 0 to 16 [ 201.142832][T10199] erofs: (device loop0): mounted with root inode @ nid 36. [ 201.210888][T10199] attempt to access beyond end of device [ 201.210888][T10199] loop0: rw=524288, want=32, limit=16 [ 201.225131][ T9541] Bluetooth: hci5: command 0x0406 tx timeout [ 201.297385][T10204] loop5: detected capacity change from 0 to 1024 [ 201.309759][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.333691][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.334912][T10199] attempt to access beyond end of device [ 201.334912][T10199] loop0: rw=0, want=24, limit=16 [ 201.373902][ T26] audit: type=1800 audit(201.329:11): pid=10199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2669" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 201.394446][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.441891][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.545180][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.652964][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.682478][T10213] loop6: detected capacity change from 0 to 512 [ 201.689432][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.864690][T10213] EXT4-fs (loop6): mounted filesystem without journal. Opts: acl,barrier=0x0000000000001003,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 202.042853][T10237] kernel read not supported for file / lhOb~h3JyxvL=QRnFGrqςû~QV7"qHd0 (pid: 10237 comm: syz.7.2686) [ 202.061132][ T26] audit: type=1800 audit(202.009:12): pid=10237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2686" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B90E0E dev="mqueue" ino=52071 res=0 errno=0 [ 202.095076][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.262480][ T4306] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 202.341992][T10249] loop7: detected capacity change from 0 to 256 [ 202.369880][T10251] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2693'. [ 202.472383][ T7212] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 202.552367][ T4306] usb 1-1: Using ep0 maxpacket: 32 [ 202.620828][T10264] loop5: detected capacity change from 0 to 1024 [ 202.645643][T10267] Cannot find add_set index 0 as target [ 202.678382][T10269] loop6: detected capacity change from 0 to 256 [ 202.692749][ T4306] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.722038][T10264] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 202.772629][ T7212] usb 2-1: Using ep0 maxpacket: 32 [ 202.856745][T10269] FAT-fs (loop6): Directory bread(block 64) failed [ 202.883266][T10269] FAT-fs (loop6): Directory bread(block 65) failed [ 202.890306][T10269] FAT-fs (loop6): Directory bread(block 66) failed [ 202.932530][ T7212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.943736][ T4306] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 202.962364][T10269] FAT-fs (loop6): Directory bread(block 67) failed [ 202.970453][T10269] FAT-fs (loop6): Directory bread(block 68) failed [ 202.978603][ T4306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.998096][T10269] FAT-fs (loop6): Directory bread(block 69) failed [ 203.005797][ T4306] usb 1-1: Product: syz [ 203.010709][ T4306] usb 1-1: Manufacturer: syz [ 203.022428][T10269] FAT-fs (loop6): Directory bread(block 70) failed [ 203.031176][T10269] FAT-fs (loop6): Directory bread(block 71) failed [ 203.050390][ T4306] usb 1-1: SerialNumber: syz [ 203.064329][ T4306] usb 1-1: config 0 descriptor?? [ 203.071442][T10269] FAT-fs (loop6): Directory bread(block 72) failed [ 203.084355][T10269] FAT-fs (loop6): Directory bread(block 73) failed [ 203.094913][T10285] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2707'. [ 203.113367][ T4306] usb 1-1: bad CDC descriptors [ 203.120605][ T4306] usb 1-1: unsupported MDLM descriptors [ 203.162617][ T7212] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 203.197083][ T7212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.242192][ T7212] usb 2-1: Product: syz [ 203.269135][ T7212] usb 2-1: Manufacturer: syz [ 203.290519][ T7212] usb 2-1: SerialNumber: syz [ 203.324075][ T7212] usb 2-1: config 0 descriptor?? [ 203.361597][ T13] usb 1-1: USB disconnect, device number 11 [ 203.370789][T10289] netlink: 'syz.5.2710': attribute type 10 has an invalid length. [ 203.403378][ T7212] usb 2-1: bad CDC descriptors [ 203.409419][ T7212] usb 2-1: unsupported MDLM descriptors [ 203.528711][T10289] team0: Port device wlan1 added [ 203.550498][T10297] netlink: 'syz.7.2715': attribute type 11 has an invalid length. [ 203.647409][ T7212] usb 2-1: USB disconnect, device number 17 [ 203.936965][T10311] loop5: detected capacity change from 0 to 256 [ 204.026208][T10317] netlink: 'syz.7.2726': attribute type 5 has an invalid length. [ 204.054348][T10317] netlink: 'syz.7.2726': attribute type 11 has an invalid length. [ 204.100783][T10311] FAT-fs (loop5): Directory bread(block 64) failed [ 204.128074][T10311] FAT-fs (loop5): Directory bread(block 65) failed [ 204.153178][T10311] FAT-fs (loop5): Directory bread(block 66) failed [ 204.172390][T10311] FAT-fs (loop5): Directory bread(block 67) failed [ 204.209259][T10311] FAT-fs (loop5): Directory bread(block 68) failed [ 204.279698][T10311] FAT-fs (loop5): Directory bread(block 69) failed [ 204.314045][T10311] FAT-fs (loop5): Directory bread(block 70) failed [ 204.329589][T10311] FAT-fs (loop5): Directory bread(block 71) failed [ 204.360298][T10311] FAT-fs (loop5): Directory bread(block 72) failed [ 204.373591][T10311] FAT-fs (loop5): Directory bread(block 73) failed [ 204.454771][T10329] netlink: 'syz.1.2732': attribute type 11 has an invalid length. [ 204.571227][T10296] loop6: detected capacity change from 0 to 32768 [ 204.805782][T10296] XFS (loop6): Mounting V5 Filesystem [ 204.858165][T10364] ax25_connect(): syz.0.2745 uses autobind, please contact jreuter@yaina.de [ 204.966730][T10371] loop1: detected capacity change from 0 to 1024 [ 205.009693][T10371] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 205.034356][T10374] loop7: detected capacity change from 0 to 256 [ 205.042775][T10296] XFS (loop6): Ending clean mount [ 205.120193][T10374] FAT-fs (loop7): Directory bread(block 64) failed [ 205.127643][ T6732] XFS (loop6): Unmounting Filesystem [ 205.164265][T10374] FAT-fs (loop7): Directory bread(block 65) failed [ 205.205548][T10374] FAT-fs (loop7): Directory bread(block 66) failed [ 205.222451][T10374] FAT-fs (loop7): Directory bread(block 67) failed [ 205.247541][T10374] FAT-fs (loop7): Directory bread(block 68) failed [ 205.254544][ T4786] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 205.272750][T10374] FAT-fs (loop7): Directory bread(block 69) failed [ 205.290052][T10374] FAT-fs (loop7): Directory bread(block 70) failed [ 205.304237][T10374] FAT-fs (loop7): Directory bread(block 71) failed [ 205.340856][T10374] FAT-fs (loop7): Directory bread(block 72) failed [ 205.354334][T10374] FAT-fs (loop7): Directory bread(block 73) failed [ 205.398739][T10386] netlink: 'syz.1.2757': attribute type 4 has an invalid length. [ 205.536008][T10390] ax25_connect(): syz.1.2769 uses autobind, please contact jreuter@yaina.de [ 205.672775][ T4786] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 205.690525][T10396] kAFS: unable to lookup cell '(/' [ 205.700609][ T4786] usb 1-1: config 0 has no interface number 0 [ 205.741218][ T4786] usb 1-1: config 0 interface 101 has no altsetting 0 [ 205.967864][T10410] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 205.983912][ T4786] usb 1-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=ef.18 [ 206.014316][ T4786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.022438][T10410] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 206.054880][ T4786] usb 1-1: Product: syz [ 206.059360][ T4786] usb 1-1: Manufacturer: syz [ 206.092260][ T4786] usb 1-1: SerialNumber: syz [ 206.109865][ T4786] usb 1-1: config 0 descriptor?? [ 206.187290][ T4786] usb 1-1: bad CDC descriptors [ 206.201513][ T4786] usb 1-1: bad CDC descriptors [ 206.222078][ T4786] option 1-1:0.101: GSM modem (1-port) converter detected [ 206.385815][ T9536] usb 1-1: USB disconnect, device number 12 [ 206.397090][ T9536] option 1-1:0.101: device disconnected [ 206.975982][T10429] loop0: detected capacity change from 0 to 256 [ 207.116275][T10435] netlink: 'syz.6.2779': attribute type 4 has an invalid length. [ 207.157710][T10429] FAT-fs (loop0): Directory bread(block 64) failed [ 207.192421][T10429] FAT-fs (loop0): Directory bread(block 65) failed [ 207.199770][T10429] FAT-fs (loop0): Directory bread(block 66) failed [ 207.253506][T10429] FAT-fs (loop0): Directory bread(block 67) failed [ 207.260187][T10429] FAT-fs (loop0): Directory bread(block 68) failed [ 207.284905][T10446] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 207.295857][T10429] FAT-fs (loop0): Directory bread(block 69) failed [ 207.328839][T10429] FAT-fs (loop0): Directory bread(block 70) failed [ 207.383939][T10429] FAT-fs (loop0): Directory bread(block 71) failed [ 207.413851][T10429] FAT-fs (loop0): Directory bread(block 72) failed [ 207.420721][T10429] FAT-fs (loop0): Directory bread(block 73) failed [ 207.481331][T10455] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 207.562432][T10455] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 207.627793][T10461] loop1: detected capacity change from 0 to 256 [ 207.733647][T10467] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.2795'. [ 208.093946][T10489] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 208.316891][T10505] loop5: detected capacity change from 0 to 1024 [ 208.391190][T10505] EXT4-fs (loop5): Ignoring removed oldalloc option [ 208.480372][T10520] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2830'. [ 208.533206][T10505] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,oldalloc,,errors=continue. Quota mode: none. [ 208.654061][T10505] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #11: comm syz.5.2813: directory missing '..' [ 208.802482][ T2348] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 208.836073][T10540] loop0: detected capacity change from 0 to 736 [ 208.844959][T10543] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 208.983617][T10540] rock: directory entry would overflow storage [ 209.002577][T10540] rock: sig=0x3b10, size=4, remaining=3 [ 209.062409][ T2348] usb 7-1: Using ep0 maxpacket: 16 [ 209.192621][ T2348] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 209.221716][ T2348] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 209.252272][ T2348] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 209.312379][ T2348] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 209.323145][ T2348] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 209.344007][ T2348] usb 7-1: config 1 interface 0 has no altsetting 0 [ 209.352097][T10569] loop1: detected capacity change from 0 to 1024 [ 209.362536][ T2348] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 209.376249][ T2348] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.407513][T10569] EXT4-fs (loop1): Ignoring removed oldalloc option [ 209.426913][ T2348] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 209.474221][T10569] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,oldalloc,,errors=continue. Quota mode: none. [ 209.526089][T10569] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz.1.2843: directory missing '..' [ 209.655673][ T2348] scsi host1: usb-storage 7-1:1.0 [ 209.776725][T10582] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 209.872452][ T9537] usb 7-1: USB disconnect, device number 7 [ 210.355779][T10614] xt_l2tp: missing protocol rule (udp|l2tpip) [ 210.571721][T10622] loop6: detected capacity change from 0 to 2048 [ 210.719243][T10622] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.966377][T10600] loop0: detected capacity change from 0 to 32768 [ 211.052538][T10600] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.2854 (10600) [ 211.128808][T10652] loop7: detected capacity change from 0 to 16 [ 211.145129][T10600] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 211.203343][T10600] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 211.231129][T10600] BTRFS info (device loop0): use zstd compression, level 3 [ 211.263940][T10652] erofs: (device loop7): mounted with root inode @ nid 36. [ 211.282279][T10600] BTRFS info (device loop0): using free space tree [ 211.299633][T10600] BTRFS info (device loop0): has skinny extents [ 211.337057][T10652] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress 1929 in[58, 4038] out[2639] [ 211.426097][T10652] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 211.575230][T10673] netlink: 448 bytes leftover after parsing attributes in process `syz.6.2898'. [ 211.763159][T10600] BTRFS info (device loop0): enabling ssd optimizations [ 211.782866][T10646] loop1: detected capacity change from 0 to 32768 [ 211.870330][T10697] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2891'. [ 211.918478][T10646] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 211.933552][ T27] INFO: task syz-executor:4183 blocked for more than 143 seconds. [ 211.966276][T10697] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2891'. [ 211.976159][ T27] Not tainted 5.15.189-syzkaller #0 [ 211.976178][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 211.976189][ T27] task:syz-executor state:D stack:21856 pid: 4183 ppid: 1 flags:0x00004004 [ 211.976229][ T27] Call Trace: [ 211.976238][ T27] [ 211.976250][ T27] __schedule+0x11b8/0x43b0 [ 211.976279][ T27] ? verify_lock_unused+0x140/0x140 [ 211.976326][ T27] ? release_firmware_map_entry+0x190/0x190 [ 211.976349][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 211.976375][ T27] ? lock_chain_count+0x20/0x20 [ 211.976395][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 211.976422][ T27] schedule+0x11b/0x1e0 [ 211.976444][ T27] io_schedule+0x7c/0xd0 [ 211.976467][ T27] wait_on_page_bit_common+0x815/0xe00 [ 212.148872][ T27] ? wait_on_page_bit+0x50/0x50 [ 212.203110][ T27] ? rcu_lock_release+0x20/0x20 [ 212.215154][ T27] truncate_inode_pages_range+0x97f/0xef0 [ 212.230170][ T27] ? invalidate_inode_page+0x360/0x360 [ 212.258470][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 212.275035][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 212.281366][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 212.294820][ T27] evict+0x498/0x870 [ 212.301997][ T27] ? proc_nr_inodes+0x320/0x320 [ 212.311445][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 212.325894][ T27] evict_inodes+0x604/0x690 [ 212.337246][ T27] ? __dentry_kill+0x530/0x650 [ 212.348338][ T27] ? clear_inode+0x150/0x150 [ 212.357595][ T27] ? sync_filesystem+0x103/0x220 [ 212.369055][ T27] generic_shutdown_super+0x93/0x300 [ 212.378692][ T27] kill_block_super+0x7c/0xe0 [ 212.389430][ T27] deactivate_locked_super+0x93/0xf0 [ 212.395716][ T27] cleanup_mnt+0x418/0x4d0 [ 212.400457][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 212.405983][ T27] task_work_run+0x125/0x1a0 [ 212.410993][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 212.417005][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 212.423737][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 212.430271][ T27] do_syscall_64+0x58/0xa0 [ 212.438410][ T27] ? clear_bhb_loop+0x30/0x80 [ 212.445044][ T27] ? clear_bhb_loop+0x30/0x80 [ 212.450211][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.456601][ T27] RIP: 0033:0x7fa446c39f17 [ 212.461338][ T27] RSP: 002b:00007ffffd0af7f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 212.470136][ T27] RAX: 0000000000000000 RBX: 00007fa446cbbc05 RCX: 00007fa446c39f17 [ 212.478722][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffd0af8b0 [ 212.487550][ T27] RBP: 00007ffffd0af8b0 R08: 0000000000000000 R09: 0000000000000000 [ 212.496530][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffffd0b0940 [ 212.505858][ T27] R13: 00007fa446cbbc05 R14: 000000000000e838 R15: 00007ffffd0b0980 [ 212.515072][ T27] [ 212.518828][ T27] [ 212.518828][ T27] Showing all locks held in the system: [ 212.533992][ T27] 1 lock held by khungtaskd/27: [ 212.539641][ T27] #0: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 212.554350][ T27] 2 locks held by getty/3950: [ 212.556386][ T4190] ocfs2: Unmounting device (7,1) on (node local) [ 212.559284][ T27] #0: ffff88814c90d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 212.577195][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 212.588306][ T27] 1 lock held by syz-executor/4183: [ 212.594037][ T27] #0: ffff88807d1020e0 (&type->s_umount_key#53){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 212.605170][ T27] 1 lock held by syz-executor/4184: [ 212.611162][ T27] 2 locks held by syz-executor/4190: [ 212.617074][ T27] #0: ffff8880205c8918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 212.627518][ T27] #1: ffff888020745468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 212.638670][ T27] 3 locks held by kworker/u4:5/4272: [ 212.644427][ T27] 2 locks held by kworker/0:10/4783: [ 212.650152][ T27] 3 locks held by kworker/0:12/4786: [ 212.666631][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 212.680475][ T27] #1: ffffc9000357fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 212.692475][ T27] #2: ffffffff8c120cf0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4b0 [ 212.703396][ T27] 1 lock held by syz.3.849/6151: [ 212.708875][ T27] #0: ffff88807d1020e0 (&type->s_umount_key#53){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 212.719714][ T27] 3 locks held by kworker/0:17/7212: [ 212.725603][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 212.740474][ T27] #1: ffffc900034dfd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 212.754005][ T27] #2: ffffffff8c120de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x320/0x6b0 [ 212.766408][ T27] 1 lock held by syz.4.2202/9149: [ 212.771460][ T27] #0: ffff88807d1020e0 (&type->s_umount_key#53){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 212.784414][ T27] [ 212.787217][ T27] ============================================= [ 212.787217][ T27] [ 212.810795][ T27] NMI backtrace for cpu 1 [ 212.815851][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 212.824304][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.834855][ T27] Call Trace: [ 212.838330][ T27] [ 212.841642][ T27] dump_stack_lvl+0x168/0x230 [ 212.846821][ T27] ? show_regs_print_info+0x20/0x20 [ 212.852412][ T27] ? load_image+0x3b0/0x3b0 [ 212.857219][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 212.862729][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 212.868150][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 212.873315][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 212.879999][ T27] ? _printk+0xcc/0x110 [ 212.884452][ T27] ? load_image+0x3b0/0x3b0 [ 212.889166][ T27] ? load_image+0x3b0/0x3b0 [ 212.893972][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 212.900498][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 212.907153][ T27] watchdog+0xe0f/0xe50 [ 212.911366][ T27] kthread+0x436/0x520 [ 212.915548][ T27] ? hungtask_pm_notify+0x40/0x40 [ 212.920904][ T27] ? kthread_blkcg+0xd0/0xd0 [ 212.925709][ T27] ret_from_fork+0x1f/0x30 [ 212.930168][ T27] [ 212.934373][ T27] Sending NMI from CPU 1 to CPUs 0: [ 212.939763][ C0] NMI backtrace for cpu 0 [ 212.939776][ C0] CPU: 0 PID: 4785 Comm: kworker/0:11 Not tainted 5.15.189-syzkaller #0 [ 212.939795][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.939804][ C0] Workqueue: events pwq_unbound_release_workfn [ 212.939833][ C0] RIP: 0010:zap_class+0x282/0x890 [ 212.939850][ C0] Code: 0f 84 e2 05 00 00 48 c7 c0 80 ef 93 8f 48 8b 1c 24 48 29 c3 48 c1 fb 06 49 0f af dd 48 83 44 24 08 10 31 c0 48 89 1c 24 eb 14 <48> 8b 44 24 10 48 ff c0 48 3d 00 00 08 00 0f 84 11 03 00 00 48 89 [ 212.939862][ C0] RSP: 0018:ffffc9000356fac0 EFLAGS: 00000046 [ 212.939874][ C0] RAX: 1ffffffff1ff94a1 RBX: 0000000000000fb7 RCX: 0000000000001acd [ 212.939884][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8ef02520 [ 212.939893][ C0] RBP: 00000000000035a2 R08: dffffc0000000000 R09: fffffbfff1fed19e [ 212.939904][ C0] R10: fffffbfff1fed19e R11: 1ffffffff1fed19d R12: 0000000000001ad1 [ 212.939913][ C0] R13: 1ffffffff1ff94a0 R14: dffffc0000000000 R15: 0000000000000000 [ 212.939923][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 212.939935][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.939945][ C0] CR2: 0000561d1f21f5f0 CR3: 000000001fc1c000 CR4: 00000000003506f0 [ 212.939960][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.939968][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 212.939977][ C0] Call Trace: [ 212.939983][ C0] [ 212.939992][ C0] lockdep_unregister_key+0x330/0x500 [ 212.940011][ C0] ? lockdep_reset_lock+0x2d0/0x2d0 [ 212.940027][ C0] ? read_lock_is_recursive+0x10/0x10 [ 212.940041][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 212.940058][ C0] ? _raw_spin_unlock+0x40/0x40 [ 212.940073][ C0] pwq_unbound_release_workfn+0x262/0x2b0 [ 212.940089][ C0] process_one_work+0x863/0x1000 [ 212.940108][ C0] ? worker_detach_from_pool+0x240/0x240 [ 212.940121][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 212.940136][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 212.940150][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 212.940166][ C0] ? wq_worker_running+0x97/0x170 [ 212.940179][ C0] worker_thread+0xaa8/0x12a0 [ 212.940202][ C0] kthread+0x436/0x520 [ 212.940213][ C0] ? rcu_lock_release+0x20/0x20 [ 212.940226][ C0] ? kthread_blkcg+0xd0/0xd0 [ 212.940239][ C0] ret_from_fork+0x1f/0x30 [ 212.940258][ C0] [ 213.052356][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 213.199816][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 213.208109][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.218943][ T27] Call Trace: [ 213.222404][ T27] [ 213.225579][ T27] dump_stack_lvl+0x168/0x230 [ 213.230446][ T27] ? show_regs_print_info+0x20/0x20 [ 213.236133][ T27] ? load_image+0x3b0/0x3b0 [ 213.240914][ T27] panic+0x2c9/0x7f0 [ 213.245217][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 213.251642][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 213.256516][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 213.263162][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 213.269604][ T27] watchdog+0xe4e/0xe50 [ 213.273757][ T27] kthread+0x436/0x520 [ 213.278075][ T27] ? hungtask_pm_notify+0x40/0x40 [ 213.283735][ T27] ? kthread_blkcg+0xd0/0xd0 [ 213.288813][ T27] ret_from_fork+0x1f/0x30 [ 213.293557][ T27] [ 213.342010][ T27] Kernel Offset: disabled [ 213.347884][ T27] Rebooting in 86400 seconds..