last executing test programs: 6m18.986086702s ago: executing program 1 (id=3543): pipe(&(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 6m18.736094704s ago: executing program 1 (id=3544): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000001c0)={0x3, [[0x8003, 0xffffffff, 0x0, 0xfffffd6e, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x100001, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x10], [0x91, 0x200, 0x5fffffff]], '\x00', [{0x1, 0x2}, {}, {}, {0x7, 0x8}, {}, {0x0, 0xfffffffc}, {0x2, 0x200000}, {}, {}, {0x1f, 0x1}]}) 6m18.449284756s ago: executing program 1 (id=3548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c0002"], 0x88}, 0x1, 0x0, 0x0, 0x841}, 0x0) 6m18.157143337s ago: executing program 1 (id=3552): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file0\x00', 0x2004400, &(0x7f0000000140)=ANY=[@ANYBLOB="73686f72746164000000000100003030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32, @ANYBLOB="d1217c443d555f38d78e75b51b60120bacfbce63e6767f0d5d8ab142fc8609f8de6a20112275ee6330540ae66f0e8cf9957ddeee8fbcfb6a9c7ee3079323"], 0x1, 0xa1b, &(0x7f0000001f80)="$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") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000440)={[{@nr_inodes={'nr_inodes', 0x3d, [0x37]}}, {@inode32}]}) 6m17.453842006s ago: executing program 1 (id=3561): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m16.682599118s ago: executing program 1 (id=3576): unshare(0x20020400) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000, 0x0) 6m16.22237708s ago: executing program 32 (id=3576): unshare(0x20020400) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000, 0x0) 2m9.955506596s ago: executing program 6 (id=7094): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13", 0x1}], 0x2) 2m9.631674916s ago: executing program 6 (id=7101): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, 0x14, 0x1, 0x20000, 0xfffffffc, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf1fb0e1"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2m9.331242786s ago: executing program 6 (id=7106): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setrlimit(0x3, 0x0) 2m9.095990314s ago: executing program 6 (id=7110): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d6370313235302c6e6f626172726965722c63726561746f723dbd3c66f52c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',force,umask=000000005,\x00'/38], 0x3, 0x6a4, &(0x7f0000000100)="$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") mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) 2m8.584930567s ago: executing program 6 (id=7114): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) 2m7.873703492s ago: executing program 6 (id=7122): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1}) 2m7.699774517s ago: executing program 33 (id=7122): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1}) 8.086972417s ago: executing program 2 (id=8540): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000140)='T', 0x1}], 0x1, 0x7, 0xffffffa3, 0x5) 7.636245413s ago: executing program 5 (id=8542): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x210014, &(0x7f0000000040)=ANY=[], 0x5, 0x1c4, &(0x7f00000002c0)="$eJzsVc1u00AQ/tbexDEHxBWExAEEySGJY36ucEJ5AB6AKDEhwhEQR4JEHMwp74GQ8hocUF+hh1a9pIeqUg/ttapc7e74L4mU/ihNDvtJ9nzz7axn1mvPfg6+BxaACwNtvIOEifvYYwwcwBOmtPeWssdFZWvkH3FlK6T/IbtPNhiNv7R83xssJVEZyCsm5pXVJGZVXGtaSqwrBttqTbhBivUTtmQovNtSdywsbEEIYCvez+YJfT3ID8HYaGF2VjFW/rHrJYznFOu2D0zdt78NnMhetnv6qy3IRwBRFEVC66iLZWNEJ/qvYuR//4jLi5mIkhjR/ITzAsD53/63ejAaV3v9Vtfresx1X75xXjnOa7f+qed7jrqzTAqDPghhKwAsydPxAoADarD3sIi4fBpn9lz5McpPU84oXzw3IsLwL5lLvR3iGR/wHCUAP0J1Eti5CuSSmmAwwaXT4Jk8am0lOVBrf/U7EzAwinSm4DDiaTMUEsdNHJ5LNgEeitKekd8kOyU7E7diembFZxEXPQiH5JVDEfSzNRwOGkJSTGpxzUpzH4TIbJDIelbML+6xtWRXNDQ0NDQ0NDS2GpcBAAD//z7uSuY=") openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x0, 0x4) 7.571855863s ago: executing program 4 (id=8543): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x12}]}]}, 0x2c}}, 0x4c000) 7.36806527s ago: executing program 2 (id=8546): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x8) 6.90126816s ago: executing program 4 (id=8548): syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x2000004, &(0x7f00000000c0)={[{@cruft}, {@hide}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x1, 0xaa3, &(0x7f00000017c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 6.852476064s ago: executing program 5 (id=8551): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x0) write$cgroup_int(r0, &(0x7f00000001c0)=0x722, 0x12) 6.721173761s ago: executing program 2 (id=8553): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22d, &(0x7f0000000a40)="$eJzslb9v00AUx793dpy0gkoMMLCkQyWKRB3bBdSFoexISC0Cxoheq4DbVGmGthJSKxYWZsQfwMbM0ImBDSZmBkBCYqAjC0gcuvM5Ptd22igIhr6PlMv33t27H8/PzyAI4tTy5fOPT89uLixfAXAGM6gb+zcnm8Ot+R9fODUj325MPT6whhqqYQCkzIzuMft7AN4sOsBesqyUmfcr86/WXAbHjOnfAcdlo++CwU/PKjNvAYb7xvxwUw5u050wIhbsQTdeWe3EIlBNqJpotfOyljufOv/hPsOKuaDagVnjWzu7j9ox0EtELFJRk+k+haFUJDcDSoZyYlj89PkWOW5YIVDP697TJ/uq7xt7YMUvBEdo9DwYloxeQB2+7zdNV4TW/S+62fpO8tgS9qrPXRSNUSaPL87N5SzTUEJl+HD3iVio2/61Y/yWQ+bUR16Qmazycin476JansrA6F68WfTyius0zEW1RRzzkpxgd3bUwuyUuHB48K7o9fW/hnc8ARNAe+i5CtSHyTi+Vep1PmeZrnhlPJzVJaEyJZL6wVzgklWfXOur0Oqvb7a2dnbnOuvtNbEmNqJo/npwNQiuRS1dm5PWLndH6l9D16dJa/1aRa30mIftdr/fC7eBfi8c9KOktZJp6XX3u/bhuv5xzP6SMv286Bcv/VCy/B7M/Lj+V2rWqTgOQRAEQRAEQRAEQRAEQRDECfhp6SYY3k8NurIcN7qth/8EAAD//7LLT5w=") mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) 6.160768101s ago: executing program 5 (id=8556): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) read(r0, 0x0, 0xeffd) 5.77240368s ago: executing program 4 (id=8558): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.485397704s ago: executing program 7 (id=8559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 5.481463057s ago: executing program 5 (id=8560): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x4000000) 4.967596011s ago: executing program 4 (id=8562): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0xffffffff, 0x0, 0x20, 0xfffff733, 0x1a5e00}) 4.928594207s ago: executing program 2 (id=8563): ioperm(0x0, 0x3d, 0xe) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) 4.577234325s ago: executing program 5 (id=8565): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000700)={0xffffffffffffff8c, 0x7d, 0x0, {{0x500, 0xfd, 0x0, 0x3, {0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x61, '\xf8\xf6i\xfbqm\xcf1^\xca\xb3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xd5\x8cc\xd6C\x05\xc4\xd4\xf1\xf1\xc4\xae\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23e) 4.550808928s ago: executing program 7 (id=8566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'wlan1\x00', &(0x7f0000000240)=@ethtool_regs={0x4, 0x54a}}) 4.236358421s ago: executing program 4 (id=8568): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@fat=@errors_continue}, {@uni_xlate}, {@utf8}, {@utf8}, {@numtail}, {@numtail}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp855'}}]}, 0x3, 0x35a, &(0x7f00000009c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.kill\x00', 0x275a, 0x0) 3.871651674s ago: executing program 5 (id=8570): syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x208c1b, &(0x7f0000000480), 0x1, 0x1278f, &(0x7f000003eac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000f00)={0x7, 0xc, 0x2, 0x1, 0x0, 0x0, 0x0, 0xefffffffffffffff, 0xffffef11}) 3.800575691s ago: executing program 7 (id=8571): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x757, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 3.456597236s ago: executing program 3 (id=8572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.306471806s ago: executing program 0 (id=8573): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x68, {0x2, 0x0, @empty}, 'ip6_vti0\x00'}) 2.804698922s ago: executing program 3 (id=8574): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400080000000b000002687e"], 0x20, 0x6044}, 0x6) 2.647828955s ago: executing program 0 (id=8575): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) 2.411530897s ago: executing program 2 (id=8576): r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x1, 0x5, 0xffffffff}) 2.35093734s ago: executing program 7 (id=8577): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, 0x14a, 0x0) 2.198918489s ago: executing program 3 (id=8578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x38, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 2.161061774s ago: executing program 4 (id=8579): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "e0021deb", {0x3, 0x100, 0x0, 0xf9, 0x9e, 0x6, 0x72}}) 2.034698397s ago: executing program 0 (id=8580): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x800000000000404, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xdd2fcb245114ab72}}) 1.553358345s ago: executing program 3 (id=8581): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1400, 0x2b}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@coaddr={0x14, 0xe, @in=@loopback}]}, 0x104}}, 0x0) 1.395008918s ago: executing program 0 (id=8582): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @local}}) 1.197974003s ago: executing program 7 (id=8583): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd2088a8006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.010633293s ago: executing program 2 (id=8584): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34565348}}) 940.094863ms ago: executing program 3 (id=8585): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000000180)={0x18, 0x4}, 0x18) 773.44167ms ago: executing program 0 (id=8586): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f000036c000/0x1000)=nil, 0x1000, 0x16) 426.951552ms ago: executing program 7 (id=8587): r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x3, 0x20000000, 0x4) 216.450666ms ago: executing program 3 (id=8588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001f0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000100003"], 0xc0}}, 0x0) 0s ago: executing program 0 (id=8589): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) kernel console output (not intermixed with test programs): bcdDevice=9a.eb [ 719.592332][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.612575][ T5897] usb 6-1: Product: syz [ 719.616811][ T5897] usb 6-1: Manufacturer: syz [ 719.621618][ T5897] usb 6-1: SerialNumber: syz [ 719.628606][T14268] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 719.639514][ T5897] usb 6-1: config 0 descriptor?? [ 719.640571][T22082] ntfs3(loop2): try to read out of volume at offset 0x3fffffc7000 [ 719.765853][T22085] netlink: 'syz.3.6868': attribute type 1 has an invalid length. [ 719.915204][T22090] loop4: detected capacity change from 0 to 64 [ 720.089879][T22099] overlayfs: conflicting options: userxattr,metacopy=on [ 720.089915][ T5897] usb 6-1: USB disconnect, device number 94 [ 720.239742][T22103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6876'. [ 720.301554][T22103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6876'. [ 720.347768][T22106] netlink: 'syz.3.6877': attribute type 5 has an invalid length. [ 720.634745][T22116] loop6: detected capacity change from 0 to 2048 [ 720.663938][T22116] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=3424, location=3424 [ 720.715653][T22116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 720.923603][T22131] netlink: 'syz.0.6886': attribute type 1 has an invalid length. [ 720.936298][T22131] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6886'. [ 721.162057][T22137] loop5: detected capacity change from 0 to 128 [ 721.981984][T22169] IPv6: addrconf: prefix option has invalid lifetime [ 722.121222][T22173] binder: 22172:22173 ioctl c0306201 20000580 returned -22 [ 722.393114][T22180] loop4: detected capacity change from 0 to 2048 [ 722.439480][T22188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6915'. [ 722.665065][T22180] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 723.619911][T22228] loop3: detected capacity change from 0 to 512 [ 723.840128][T22228] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 723.869080][T22228] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.6937: attempt to clear invalid blocks 1024 len 1 [ 724.016997][T22228] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.6937: invalid indirect mapped block 1819239214 (level 0) [ 724.058973][T22228] EXT4-fs (loop3): 1 truncate cleaned up [ 724.065634][T22228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.101064][T22241] 8021q: adding VLAN 0 to HW filter on device bond2 [ 724.111986][T22246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6943'. [ 724.274010][T22228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.138525][T22278] openvswitch: netlink: nsh attr 9472 is out of range max 3 [ 725.378851][T22249] syz.6.6945 (22249): drop_caches: 2 [ 725.662526][T22302] usb usb8: usbfs: process 22302 (syz.2.6970) did not claim interface 0 before use [ 725.722680][T22300] netlink: 'syz.0.6969': attribute type 5 has an invalid length. [ 726.113975][T22320] syz.0.6977: attempt to access beyond end of device [ 726.113975][T22320] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 726.141957][T22322] loop4: detected capacity change from 0 to 256 [ 726.221272][T22320] vxfs: unable to read disk superblock at 1 [ 726.258243][T22320] syz.0.6977: attempt to access beyond end of device [ 726.258243][T22320] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 726.324086][T22328] --map-set only usable from mangle table [ 726.324501][T22320] vxfs: unable to read disk superblock at 8 [ 726.387021][T22320] vxfs: can't find superblock. [ 726.834199][T22344] loop0: detected capacity change from 0 to 256 [ 727.017588][T22344] FAT-fs (loop0): Directory bread(block 64) failed [ 727.049554][T22346] veth3: entered promiscuous mode [ 727.072793][T22344] FAT-fs (loop0): Directory bread(block 65) failed [ 727.126731][T22344] FAT-fs (loop0): Directory bread(block 66) failed [ 727.127256][T22307] loop5: detected capacity change from 0 to 32768 [ 727.179593][T22344] FAT-fs (loop0): Directory bread(block 67) failed [ 727.201066][T22344] FAT-fs (loop0): Directory bread(block 68) failed [ 727.222674][T22344] FAT-fs (loop0): Directory bread(block 69) failed [ 727.231169][T22344] FAT-fs (loop0): Directory bread(block 70) failed [ 727.290821][T22307] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 727.314193][T22344] FAT-fs (loop0): Directory bread(block 71) failed [ 727.340246][T22344] FAT-fs (loop0): Directory bread(block 72) failed [ 727.346839][T22344] FAT-fs (loop0): Directory bread(block 73) failed [ 727.528788][T22307] (syz.5.6972,22307,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 727.699221][ T5836] ocfs2: Unmounting device (7,5) on (node local) [ 727.762356][ T970] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 727.864310][T22369] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.6995'. [ 727.949323][ T970] usb 5-1: Using ep0 maxpacket: 16 [ 727.965060][ T970] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 727.992212][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 728.037046][ T970] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 728.056475][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7000'. [ 728.067593][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.075714][ T970] usb 5-1: Product: syz [ 728.088803][ T970] usb 5-1: Manufacturer: syz [ 728.093465][ T970] usb 5-1: SerialNumber: syz [ 728.106366][T22375] loop2: detected capacity change from 0 to 764 [ 728.123974][T22374] netlink: 'syz.0.7000': attribute type 2 has an invalid length. [ 728.142067][ T970] usb 5-1: config 0 descriptor?? [ 728.161453][T22375] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 728.163564][T22356] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 728.524670][T22390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7005'. [ 728.545889][ T51] usb 5-1: USB disconnect, device number 93 [ 728.552243][T22381] xt_CT: No such helper "syz0" [ 728.825120][T22400] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7010'. [ 729.060040][T22405] netlink: 'syz.6.7013': attribute type 21 has an invalid length. [ 729.083119][T22405] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7013'. [ 729.434770][T22412] loop6: detected capacity change from 0 to 2048 [ 729.500590][T22412] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 729.629480][T22386] loop2: detected capacity change from 0 to 32768 [ 729.702746][T22386] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7004 (22386) [ 729.879062][T22386] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 729.898591][T22386] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 729.916627][T22386] BTRFS info (device loop2): using free-space-tree [ 730.460149][T22467] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7036'. [ 730.780366][ T5839] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 731.059063][T22490] loop4: detected capacity change from 0 to 4096 [ 731.069643][T22490] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 731.183522][T22490] ntfs3(loop4): failed to convert "c46c" to cp861 [ 731.210056][ T5917] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 731.247808][T22494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7049'. [ 731.306928][T22494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7049'. [ 731.402504][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 731.411225][ T5917] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 731.456200][ T5917] usb 6-1: config 0 has no interface number 0 [ 731.484361][ T5917] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 731.512058][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.558211][ T5917] usb 6-1: Product: syz [ 731.562551][ T5917] usb 6-1: Manufacturer: syz [ 731.609179][T22498] loop3: detected capacity change from 0 to 2048 [ 731.617103][ T5917] usb 6-1: SerialNumber: syz [ 731.635196][T22500] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7053'. [ 731.660650][ T5917] usb 6-1: config 0 descriptor?? [ 731.681800][T22507] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 731.690591][T22500] netlink: 'syz.0.7053': attribute type 2 has an invalid length. [ 731.765812][T22500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7053'. [ 731.863161][T22498] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 731.914338][ T5917] usb 6-1: selecting invalid altsetting 1 [ 731.923245][ T5917] speedtch 6-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 731.945176][ T5917] speedtch 6-1:0.1: usbatm_usb_probe: bind failed: -22! [ 731.968176][ T5917] speedtch 6-1:0.1: probe with driver speedtch failed with error -22 [ 731.981074][T22511] loop2: detected capacity change from 0 to 136 [ 732.016823][ T5917] usb 6-1: USB disconnect, device number 95 [ 732.116415][T22498] Remounting filesystem read-only [ 732.671989][T22537] netlink: 'syz.3.7069': attribute type 1 has an invalid length. [ 732.929285][T22544] loop0: detected capacity change from 0 to 16 [ 732.970308][T22544] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 733.805579][T22561] loop2: detected capacity change from 0 to 512 [ 733.834539][T22565] netlink: 'syz.6.7081': attribute type 10 has an invalid length. [ 733.948479][T22561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 734.119403][T22561] EXT4-fs (loop2): 1 truncate cleaned up [ 734.161489][T22561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.251812][T22561] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.7084: corrupted in-inode xattr: overlapping e_value [ 734.367171][T22561] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1772: inode #15: comm syz.2.7084: unable to update i_inline_off [ 734.429833][T22561] EXT4-fs error (device loop2): ext4_xattr_ibody_get:653: inode #15: comm syz.2.7084: corrupted in-inode xattr: overlapping e_value [ 734.587783][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.805786][T22600] __nla_validate_parse: 1 callbacks suppressed [ 734.805811][T22600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7098'. [ 734.844959][T22606] netlink: 'syz.0.7100': attribute type 1 has an invalid length. [ 735.488587][T22624] loop6: detected capacity change from 0 to 1024 [ 735.716962][T22608] loop5: detected capacity change from 0 to 40427 [ 735.774677][T14268] hfsplus: bad catalog entry type [ 735.808913][T22608] F2FS-fs (loop5): invalid crc value [ 735.827409][T22608] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10240907051000858085) [ 735.960493][T22608] F2FS-fs (loop5): Start checkpoint disabled! [ 736.204404][T22626] loop2: detected capacity change from 0 to 32768 [ 736.212329][T22608] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 736.377428][T16192] hfsplus: b-tree write err: -5, ino 4 [ 736.444969][T22626] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 736.811842][T22657] loop0: detected capacity change from 0 to 256 [ 736.892552][ T1131] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.987697][T22657] FAT-fs (loop0): Directory bread(block 64) failed [ 736.988700][T22626] XFS (loop2): Ending clean mount [ 737.002188][T22657] FAT-fs (loop0): Directory bread(block 65) failed [ 737.030574][T22657] FAT-fs (loop0): Directory bread(block 66) failed [ 737.052124][T22657] FAT-fs (loop0): Directory bread(block 67) failed [ 737.074480][T22657] FAT-fs (loop0): Directory bread(block 68) failed [ 737.082272][T22657] FAT-fs (loop0): Directory bread(block 69) failed [ 737.088922][T22657] FAT-fs (loop0): Directory bread(block 70) failed [ 737.096217][T22657] FAT-fs (loop0): Directory bread(block 71) failed [ 737.114490][T22657] FAT-fs (loop0): Directory bread(block 72) failed [ 737.121249][T22657] FAT-fs (loop0): Directory bread(block 73) failed [ 737.186337][T22667] netlink: 'syz.3.7129': attribute type 4 has an invalid length. [ 737.194241][T22667] netlink: 'syz.3.7129': attribute type 11 has an invalid length. [ 737.270666][T22667] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7129'. [ 737.346867][T17811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 737.370672][T17811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 737.411794][T17811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 737.416625][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 737.416644][ T29] audit: type=1800 audit(2000000137.110:117): pid=22657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7124" name="file1" dev="loop0" ino=1048655 res=0 errno=0 [ 737.536909][T22675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7133'. [ 737.543235][T17811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 737.561026][ T5839] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 737.583970][T17811] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 737.593305][T17811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 737.620312][ T1131] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.001482][ T1131] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.082942][T22670] lo speed is unknown, defaulting to 1000 [ 738.346232][ T1131] netdevsim netdevsim6 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.747201][ T1131] bridge_slave_1: left allmulticast mode [ 738.752910][ T1131] bridge_slave_1: left promiscuous mode [ 738.785889][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.838553][T22712] loop3: detected capacity change from 0 to 256 [ 738.845045][ T1131] bridge_slave_0: left allmulticast mode [ 738.850815][ T1131] bridge_slave_0: left promiscuous mode [ 738.885798][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.931664][T22712] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 739.110625][ T5897] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 739.270311][T22721] ax25_connect(): syz.3.7155 uses autobind, please contact jreuter@yaina.de [ 739.318269][ T5897] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 739.355044][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.397272][ T5897] usb 5-1: Product: syz [ 739.408196][ T5897] usb 5-1: Manufacturer: syz [ 739.408940][T22695] loop2: detected capacity change from 0 to 32768 [ 739.414369][ T5897] usb 5-1: SerialNumber: syz [ 739.442209][ T5897] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 739.460424][T22695] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7132 (22695) [ 739.469663][ T970] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 739.511006][T22725] loop0: detected capacity change from 0 to 16 [ 739.585967][T22725] erofs (device loop0): mounted with root inode @ nid 36. [ 739.644043][T22695] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 739.689058][T22695] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 739.719447][T22695] BTRFS info (device loop2): using free-space-tree [ 739.815971][T17811] Bluetooth: hci1: command tx timeout [ 740.211222][ T5839] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 740.585996][ T970] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 740.593566][ T970] ath9k_htc: Failed to initialize the device [ 740.649136][ T970] usb 5-1: ath9k_htc: USB layer deinitialized [ 740.795630][ T1131] bond0 (unregistering): (slave 0@ÿ): Releasing backup interface [ 740.811155][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.825769][ T1131] bond0 (unregistering): Released all slaves [ 740.874008][T22755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7163'. [ 740.902234][ T5917] usb 5-1: USB disconnect, device number 94 [ 741.720455][T22795] loop4: detected capacity change from 0 to 1024 [ 741.748007][T22795] hfsplus: Bad value for 'uid' [ 741.833240][T22799] loop0: detected capacity change from 0 to 128 [ 741.890198][T22799] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 741.924538][T22795] nfs4: Deprecated parameter 'intr' [ 742.005452][T22808] loop4: detected capacity change from 0 to 256 [ 742.055594][T17811] Bluetooth: hci1: command tx timeout [ 742.079991][ T5831] sysv_free_block: flc_count > flc_size [ 742.093503][ T5831] sysv_free_block: flc_count > flc_size [ 742.099098][ T5831] sysv_free_block: flc_count > flc_size [ 742.136048][ T5831] sysv_free_block: flc_count > flc_size [ 742.141758][ T5831] sysv_free_block: flc_count > flc_size [ 742.189368][ T5831] sysv_free_block: flc_count > flc_size [ 742.195201][ T5831] sysv_free_block: flc_count > flc_size [ 742.218681][ T5831] sysv_free_block: flc_count > flc_size [ 742.224672][ T5831] sysv_free_block: flc_count > flc_size [ 742.228090][T22808] FAT-fs (loop4): Directory bread(block 64) failed [ 742.230215][ T5831] sysv_free_block: flc_count > flc_size [ 742.259457][T22808] FAT-fs (loop4): Directory bread(block 65) failed [ 742.271578][T22808] FAT-fs (loop4): Directory bread(block 66) failed [ 742.299450][T22808] FAT-fs (loop4): Directory bread(block 67) failed [ 742.306246][T22808] FAT-fs (loop4): Directory bread(block 68) failed [ 742.316401][T22808] FAT-fs (loop4): Directory bread(block 69) failed [ 742.324111][T22808] FAT-fs (loop4): Directory bread(block 70) failed [ 742.331051][ T5831] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 742.413883][T22808] FAT-fs (loop4): Directory bread(block 71) failed [ 742.420679][T22808] FAT-fs (loop4): Directory bread(block 72) failed [ 742.427859][T22808] FAT-fs (loop4): Directory bread(block 73) failed [ 742.916567][T22670] chnl_net:caif_netlink_parms(): no params data found [ 742.958995][ T51] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 743.119367][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 743.141434][ T51] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 743.150605][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.222534][ T51] usb 3-1: Product: syz [ 743.237525][ T51] usb 3-1: Manufacturer: syz [ 743.253502][ T51] usb 3-1: SerialNumber: syz [ 743.350762][ T51] usb 3-1: config 0 descriptor?? [ 743.598951][ T51] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 743.693858][ T51] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 743.888319][ T51] usb 3-1: USB disconnect, device number 88 [ 743.917517][T22832] loop3: detected capacity change from 0 to 32768 [ 743.956754][ T1131] hsr_slave_0: left promiscuous mode [ 743.974295][ T1131] hsr_slave_1: left promiscuous mode [ 743.991451][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.004250][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.026172][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.033938][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.046979][T22832] JBD2: Ignoring recovery information on journal [ 744.117799][ T1131] veth1_macvtap: left promiscuous mode [ 744.138206][ T1131] veth0_macvtap: left promiscuous mode [ 744.162945][T22832] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 744.193010][ T1131] veth1_vlan: left promiscuous mode [ 744.223190][ T1131] veth0_vlan: left promiscuous mode [ 744.265184][T17811] Bluetooth: hci1: command tx timeout [ 744.353587][T22874] loop5: detected capacity change from 0 to 256 [ 744.412128][T22874] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 744.473702][ T5834] ocfs2: Unmounting device (7,3) on (node local) [ 745.399546][T22904] loop3: detected capacity change from 0 to 128 [ 745.465556][T22904] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ea7) [ 745.503673][T22904] FAT-fs (loop3): Filesystem has been set read-only [ 745.882310][T22916] loop5: detected capacity change from 0 to 2048 [ 745.944980][T22916] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 746.494678][T17811] Bluetooth: hci1: command tx timeout [ 746.630308][T22921] loop2: detected capacity change from 0 to 32768 [ 746.632892][T22919] loop3: detected capacity change from 0 to 32768 [ 746.650768][T22921] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7227 (22921) [ 746.677290][T22919] BTRFS: device /dev/loop3 (7:3) using temp-fsid aadf1317-956d-4324-93cc-404e540ab441 [ 746.715553][T22921] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 746.728199][T22921] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 746.748872][T22919] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7224 (22919) [ 746.753457][T22921] BTRFS info (device loop2): using free-space-tree [ 746.839483][T22919] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 746.871938][T22919] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 746.880440][T22919] BTRFS info (device loop3): using free-space-tree [ 746.922440][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 747.103839][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 747.215835][ T5834] BTRFS info (device loop3): last unmount of filesystem aadf1317-956d-4324-93cc-404e540ab441 [ 747.238064][ T5839] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 747.757256][T22963] loop2: detected capacity change from 0 to 64 [ 748.026458][ T51] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 748.208111][ T51] usb 4-1: Using ep0 maxpacket: 8 [ 748.215284][ T51] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 748.225948][ T51] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 748.238182][ T51] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 748.248292][ T51] usb 4-1: config 6 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 748.261206][ T51] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 748.270972][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.279522][ T51] usb 4-1: Product: syz [ 748.284371][ T51] usb 4-1: Manufacturer: syz [ 748.289085][ T51] usb 4-1: SerialNumber: syz [ 748.303310][ T51] hso 4-1:6.0: Can't find BULK OUT endpoint [ 748.397871][T22859] netlink: 'syz.4.7202': attribute type 4 has an invalid length. [ 748.408228][T22859] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.7202'. [ 748.450724][T22670] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.498575][T22670] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.515878][T22670] bridge_slave_0: entered allmulticast mode [ 748.531974][T22670] bridge_slave_0: entered promiscuous mode [ 748.551585][T22670] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.558736][T22670] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.577913][T22670] bridge_slave_1: entered allmulticast mode [ 748.585746][T22670] bridge_slave_1: entered promiscuous mode [ 748.694322][ T5917] usb 4-1: USB disconnect, device number 83 [ 748.798885][T22980] loop5: detected capacity change from 0 to 4096 [ 748.819848][T22982] loop4: detected capacity change from 0 to 64 [ 748.838953][T22982] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop4 [ 748.878876][T22982] loop4: detected capacity change from 0 to 512 [ 748.934102][T22982] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 748.961461][T22670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.975544][T22670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.016141][T22980] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 749.075445][ T51] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 749.275166][T22990] xt_TCPMSS: Only works on TCP SYN packets [ 749.311419][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 749.375713][ T51] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 749.384520][ T51] usb 3-1: config 0 has no interface number 0 [ 749.392567][ T51] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 749.419994][T22995] loop3: detected capacity change from 0 to 47 [ 749.426528][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.465848][T22670] team0: Port device team_slave_0 added [ 749.501693][ T51] usb 3-1: Product: syz [ 749.505925][ T51] usb 3-1: Manufacturer: syz [ 749.510636][ T51] usb 3-1: SerialNumber: syz [ 749.546063][T22670] team0: Port device team_slave_1 added [ 749.565016][ T51] usb 3-1: config 0 descriptor?? [ 749.602466][ T51] smsc95xx v2.0.0 [ 749.825989][ T51] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 749.859949][ T51] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 749.893211][ T51] usb 3-1: USB disconnect, device number 89 [ 749.974752][T22670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.981752][T22670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.089596][T22670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.156208][T22670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.170262][T22670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.237371][T22670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.521988][T23030] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.7258'. [ 750.729303][T23006] loop4: detected capacity change from 0 to 32768 [ 750.739505][T23032] loop3: detected capacity change from 0 to 16 [ 750.749684][T23032] erofs (device loop3): mounted with root inode @ nid 36. [ 750.799575][T22670] hsr_slave_0: entered promiscuous mode [ 750.817509][T22670] hsr_slave_1: entered promiscuous mode [ 751.112893][T23041] loop5: detected capacity change from 0 to 512 [ 751.137976][T23041] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 751.187246][T23041] EXT4-fs (loop5): 1 truncate cleaned up [ 751.311009][T23041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.538814][T23041] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 751.787180][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.828358][T22670] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 751.935201][T22670] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 751.999144][T22670] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 752.089685][T22670] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 752.313369][T17811] Bluetooth: hci1: command tx timeout [ 752.467487][T22670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.492295][T22670] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.534965][T22670] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 752.545680][T22670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 752.574804][T14412] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.584298][T14412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.646381][T14412] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.653533][T14412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.769457][T23108] netlink: 'syz.2.7287': attribute type 15 has an invalid length. [ 752.911293][T22670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.190536][T23123] loop3: detected capacity change from 0 to 256 [ 753.304772][T23123] FAT-fs (loop3): Directory bread(block 64) failed [ 753.329702][T23123] FAT-fs (loop3): Directory bread(block 65) failed [ 753.358496][T23123] FAT-fs (loop3): Directory bread(block 66) failed [ 753.376550][T23123] FAT-fs (loop3): Directory bread(block 67) failed [ 753.401988][T23123] FAT-fs (loop3): Directory bread(block 68) failed [ 753.422316][T23123] FAT-fs (loop3): Directory bread(block 69) failed [ 753.441547][T23123] FAT-fs (loop3): Directory bread(block 70) failed [ 753.465465][T23123] FAT-fs (loop3): Directory bread(block 71) failed [ 753.484885][T23123] FAT-fs (loop3): Directory bread(block 72) failed [ 753.515674][T23123] FAT-fs (loop3): Directory bread(block 73) failed [ 753.880871][T22670] veth0_vlan: entered promiscuous mode [ 754.010643][T22670] veth1_vlan: entered promiscuous mode [ 754.096129][T22670] veth0_macvtap: entered promiscuous mode [ 754.106204][T22670] veth1_macvtap: entered promiscuous mode [ 754.124578][T22670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.135370][T22670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.145580][T22670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.172324][T22670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.264065][T22670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.301826][T22670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.350818][T22670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.373567][T22670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.427890][T22670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.474010][T23117] syz.2.7289 (23117): drop_caches: 2 [ 754.492403][T22670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.535635][T22670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.592044][T22670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.619030][T22670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.646522][T22670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.661853][T22670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.684798][T22670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.696064][T22670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.716918][T22670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.730486][T22670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.777133][T22670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.790367][T23140] loop4: detected capacity change from 0 to 32768 [ 754.809141][T23140] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7294 (23140) [ 754.814623][T22670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.839365][T22670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.887575][T23140] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 754.907155][T23140] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 754.943173][T23140] BTRFS info (device loop4): using free-space-tree [ 754.961900][T22670] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.972367][T22670] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.984209][T22670] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.995235][T22670] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.439087][T14411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.447337][T14411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.617693][T23189] netlink: 'syz.3.7305': attribute type 10 has an invalid length. [ 755.704788][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.749438][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.884530][ T5833] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 756.036289][T23201] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7312'. [ 756.087691][T23201] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7312'. [ 756.100867][T23204] loop2: detected capacity change from 0 to 128 [ 756.113391][T23204] FAT-fs (loop2): Directory bread(block 3236) failed [ 756.120374][T23204] FAT-fs (loop2): Directory bread(block 3237) failed [ 756.127679][T23204] FAT-fs (loop2): Directory bread(block 3238) failed [ 756.134723][T23204] FAT-fs (loop2): Directory bread(block 3239) failed [ 756.152262][T23204] FAT-fs (loop2): Directory bread(block 3240) failed [ 756.159040][T23204] FAT-fs (loop2): Directory bread(block 3241) failed [ 756.165929][T23204] FAT-fs (loop2): Directory bread(block 3242) failed [ 756.174472][T23204] FAT-fs (loop2): Directory bread(block 3243) failed [ 756.226433][T23204] FAT-fs (loop2): Directory bread(block 3236) failed [ 756.233933][T23204] FAT-fs (loop2): Directory bread(block 3237) failed [ 756.507235][T23218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7316'. [ 756.603658][T23212] loop0: detected capacity change from 0 to 4096 [ 756.627781][T23222] loop7: detected capacity change from 0 to 2048 [ 756.727022][T23212] ntfs3: Unknown parameter 'nohi' [ 757.044398][ T29] audit: type=1326 audit(2000000155.482:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23240 comm="syz.3.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0752d85d29 code=0x7ffc0000 [ 757.081206][ T29] audit: type=1326 audit(2000000155.482:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23240 comm="syz.3.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f0752d85d29 code=0x7ffc0000 [ 757.107151][T23222] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 757.163687][T23233] loop5: detected capacity change from 0 to 4096 [ 757.170671][ T29] audit: type=1326 audit(2000000155.482:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23240 comm="syz.3.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0752d85d29 code=0x7ffc0000 [ 757.226956][T23245] loop2: detected capacity change from 0 to 512 [ 757.228219][T23244] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 757.262475][ T29] audit: type=1326 audit(2000000155.482:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23240 comm="syz.3.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0752d85d29 code=0x7ffc0000 [ 757.285877][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.444930][T23249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7330'. [ 757.454031][T23249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7330'. [ 757.463231][T23249] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7330'. [ 757.473232][T23245] EXT4-fs: Ignoring removed oldalloc option [ 757.498397][T23245] EXT4-fs: Ignoring removed nobh option [ 757.551381][T23252] loop4: detected capacity change from 0 to 4096 [ 757.588853][T23252] EXT4-fs (loop4): Test dummy encryption mode enabled [ 757.627692][T23258] netlink: 'syz.3.7333': attribute type 21 has an invalid length. [ 757.680015][T23259] netlink: 'syz.0.7331': attribute type 3 has an invalid length. [ 757.692181][T23261] SET target dimension over the limit! [ 757.716245][T23259] netlink: 'syz.0.7331': attribute type 1 has an invalid length. [ 757.824943][T23266] loop3: detected capacity change from 0 to 2048 [ 757.859687][T23266] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 757.944888][T23252] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 757.954180][T23252] System zones: 0-5 [ 758.010487][T23252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.030066][T23245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.052337][T23245] ext4 filesystem being mounted at /1217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 758.361051][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.422737][T23233] ntfs3(loop5): ino=5, "/" directory corrupted [ 758.438924][T23233] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 758.551913][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.226346][T23317] loop5: detected capacity change from 0 to 128 [ 759.719635][T23336] loop0: detected capacity change from 0 to 256 [ 759.789156][T23336] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 759.855986][T23336] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 759.875796][T23336] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 759.925536][T23336] UDF-fs: Scanning with blocksize 512 failed [ 759.958707][T23336] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 760.015042][T23336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 760.180977][T23307] loop7: detected capacity change from 0 to 32768 [ 760.238192][T23360] loop4: detected capacity change from 0 to 256 [ 760.756817][T23367] loop3: detected capacity change from 0 to 4096 [ 760.786243][T23375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7374'. [ 760.822045][T23367] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 760.983407][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7376'. [ 761.065548][T23387] SET target dimension over the limit! [ 761.184581][T23367] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 761.911409][T23424] loop2: detected capacity change from 0 to 128 [ 762.553060][T23448] loop7: detected capacity change from 0 to 4096 [ 762.589414][T23448] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 762.619358][T23448] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 762.685386][T23448] Invalid source name [ 762.689525][T23448] UBIFS error (pid: 23448): cannot open "./file0", error -22 [ 762.753641][T23456] loop3: detected capacity change from 0 to 1024 [ 762.802052][T23456] EXT4-fs: Ignoring removed orlov option [ 762.869748][T23456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.205405][T23454] loop5: detected capacity change from 0 to 32768 [ 763.511759][T23488] loop2: detected capacity change from 0 to 2048 [ 763.585911][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.596355][T23454] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 763.612805][T23488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 763.655573][T23495] misc userio: No port type given on /dev/userio [ 763.978551][T23454] XFS (loop5): Ending clean mount [ 764.002481][T23454] XFS (loop5): Quotacheck needed: Please wait. [ 764.063127][T23513] loop3: detected capacity change from 0 to 16 [ 764.192074][T23513] erofs (device loop3): mounted with root inode @ nid 36. [ 764.268455][T23454] XFS (loop5): Quotacheck: Done. [ 764.589573][T23510] loop4: detected capacity change from 0 to 32768 [ 764.610671][T23510] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7424 (23510) [ 764.665571][ T5836] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 764.769051][T23510] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 764.769115][T23532] loop2: detected capacity change from 0 to 64 [ 764.836997][T23510] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 764.906756][T23510] BTRFS info (device loop4): using free-space-tree [ 765.211529][T23551] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7440'. [ 765.307548][T23559] tmpfs: Group quota inode hardlimit too large. [ 765.608998][T23568] tmpfs: Bad value for 'mpol' [ 765.623135][T23570] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7445'. [ 766.016026][T23580] loop5: detected capacity change from 0 to 4096 [ 766.131637][T23563] loop2: detected capacity change from 0 to 40427 [ 766.144205][T23580] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 766.168472][T23587] netlink: 'syz.3.7452': attribute type 1 has an invalid length. [ 766.483866][ T5833] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 766.632697][T23563] F2FS-fs (loop2): Found nat_bits in checkpoint [ 766.855715][T23563] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 767.208315][T23625] netlink: 'syz.0.7465': attribute type 1 has an invalid length. [ 767.217853][T23628] loop4: detected capacity change from 0 to 1024 [ 767.274552][T23628] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 767.287518][T23628] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 767.344521][T23628] EXT4-fs (loop4): invalid journal inode [ 767.350259][T23628] EXT4-fs (loop4): can't get journal size [ 767.470445][T23628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 767.595445][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.916312][T23650] netlink: 'syz.0.7474': attribute type 1 has an invalid length. [ 768.124963][ T9] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 768.298646][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 768.311241][ T9] usb 5-1: config 5 has an invalid interface number: 148 but max is 0 [ 768.341286][ T9] usb 5-1: config 5 has no interface number 0 [ 768.369579][ T9] usb 5-1: config 5 interface 148 altsetting 1 endpoint 0xC has an invalid bInterval 250, changing to 4 [ 768.426322][ T9] usb 5-1: config 5 interface 148 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 768.474463][ T9] usb 5-1: config 5 interface 148 has no altsetting 0 [ 768.513086][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 768.545997][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.595256][ T9] usb 5-1: Product: syz [ 768.606057][ T9] usb 5-1: Manufacturer: syz [ 768.623353][ T9] usb 5-1: SerialNumber: syz [ 768.781973][T23623] loop3: detected capacity change from 0 to 32768 [ 768.816749][T23623] (syz.3.7466,23623,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 768.875175][T23623] (syz.3.7466,23623,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 768.888257][T23680] loop7: detected capacity change from 0 to 64 [ 768.912136][ T9] ipheth 5-1:5.148: Unable to find endpoints [ 768.979945][T23623] (syz.3.7466,23623,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 769.085156][ T9] usb 5-1: USB disconnect, device number 95 [ 769.199084][T23623] JBD2: Ignoring recovery information on journal [ 769.323442][T23695] loop7: detected capacity change from 0 to 8 [ 769.395916][T23623] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 769.417506][T23695] SQUASHFS error: Failed to read block 0x2d7: -5 [ 769.435228][T23695] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 769.579633][T23693] loop5: detected capacity change from 0 to 32768 [ 769.717631][ T51] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 769.816801][ T5834] ocfs2: Unmounting device (7,3) on (node local) [ 769.865439][T23716] netlink: 'syz.7.7496': attribute type 4 has an invalid length. [ 769.892170][T23693] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 770.030922][T23716] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7496'. [ 770.041060][T23693] bcachefs (loop5): initializing new filesystem [ 770.048421][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 770.054501][T23693] bcachefs (loop5): going read-write [ 770.062408][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 770.092824][T23693] bcachefs (loop5): marking superblocks [ 770.107461][T23716] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 770.134482][ T29] audit: type=1326 audit(2000000167.707:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.3.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0752d85d29 code=0x7ffc0000 [ 770.135777][T23693] bcachefs (loop5): initializing freespace [ 770.164425][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 770.174184][ T51] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 770.185752][T23693] bcachefs (loop5): done initializing freespace [ 770.194140][T23693] bcachefs (loop5): reading snapshots table [ 770.200218][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 770.211815][ T51] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 770.222365][ T51] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 770.230922][T23693] bcachefs (loop5): reading snapshots done [ 770.231494][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.248198][ T51] usb 3-1: config 0 descriptor?? [ 770.263622][T23691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 770.306860][ T29] audit: type=1326 audit(2000000167.707:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.3.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0752d85d29 code=0x7ffc0000 [ 770.331087][ T29] audit: type=1326 audit(2000000167.707:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.3.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f0752d85d29 code=0x7ffc0000 [ 770.354853][ T29] audit: type=1326 audit(2000000167.707:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23717 comm="syz.3.7500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0752d85d29 code=0x7ffc0000 [ 770.546658][T23730] loop3: detected capacity change from 0 to 128 [ 770.616165][T23730] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 770.659864][T23730] ext4 filesystem being mounted at /1323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.685157][T23730] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:105: comm syz.3.7504: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 770.747054][T23693] bcachefs (loop5): done starting filesystem [ 770.796452][ T51] usb 3-1: USB disconnect, device number 90 [ 770.804434][T17811] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 770.869497][T23738] loop4: detected capacity change from 0 to 1024 [ 770.949657][ T5834] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 770.966237][T23738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.988548][T23738] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #11: comm syz.4.7507: directory missing '..' [ 771.009194][ T5836] bcachefs (loop5): shutting down [ 771.014818][ T5836] bcachefs (loop5): going read-only [ 771.020038][ T5836] bcachefs (loop5): finished waiting for writes to stop [ 771.087301][ T5836] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3 [ 771.098196][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.203105][ T5836] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 6 [ 771.226265][ T5836] bcachefs (loop5): shutdown complete, journal seq 7 [ 771.243738][ T5836] bcachefs (loop5): marking filesystem clean [ 771.383211][ T5836] bcachefs (loop5): shutdown complete [ 771.513971][T23758] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7517'. [ 771.845848][T23772] loop2: detected capacity change from 0 to 64 [ 772.194651][ T5917] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 772.344460][T23790] loop7: detected capacity change from 0 to 16 [ 772.352448][T23790] erofs (device loop7): mounted with root inode @ nid 36. [ 772.488691][ T5917] usb 4-1: unable to get BOS descriptor or descriptor too short [ 772.497452][ T5917] usb 4-1: not running at top speed; connect to a high speed hub [ 772.506608][ T5917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.569961][ T5917] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 772.659066][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 772.676960][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 772.686811][ T5917] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 772.713297][ T5917] usb 4-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 772.733174][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.757020][ T5917] usb 4-1: Product: syz [ 772.761222][ T5917] usb 4-1: Manufacturer: syz [ 772.802303][ T5917] usb 4-1: SerialNumber: syz [ 772.847360][ T5917] ipaq 4-1:1.0: PocketPC PDA converter detected [ 773.075564][ T5917] usb 4-1: PocketPC PDA converter now attached to ttyUSB0 [ 773.106015][T23812] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.120024][T23812] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.166784][T23816] IPv6: sit1: Disabled Multicast RS [ 773.426298][ T5917] usb 4-1: USB disconnect, device number 84 [ 773.460432][ T5917] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 773.469038][ T5917] ipaq 4-1:1.0: device disconnected [ 773.925450][T23818] loop7: detected capacity change from 0 to 32768 [ 774.202719][T23848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7557'. [ 774.331329][T23818] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 774.584057][T23831] loop4: detected capacity change from 0 to 32768 [ 774.635388][T23818] OCFS2: ERROR (device loop7): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 774.667398][T23818] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 774.720548][T23818] OCFS2: File system is now read-only. [ 774.737760][T23818] (syz.7.7545,23818,0):ocfs2_reserve_suballoc_bits:854 ERROR: status = -30 [ 774.741896][T23831] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 774.755683][T23831] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 774.780837][T23831] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 774.805878][T23818] (syz.7.7545,23818,1):ocfs2_reserve_new_inode:1095 ERROR: status = -30 [ 774.816187][T23818] (syz.7.7545,23818,1):ocfs2_reserve_new_inode:1118 ERROR: status = -30 [ 774.825389][T23818] (syz.7.7545,23818,1):ocfs2_mknod:306 ERROR: status = -30 [ 774.833061][T23818] (syz.7.7545,23818,1):ocfs2_mknod:502 ERROR: status = -30 [ 774.841185][T23818] (syz.7.7545,23818,1):ocfs2_create:676 ERROR: status = -30 [ 774.929981][T23831] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 774.937610][T22670] ocfs2: Unmounting device (7,7) on (node local) [ 775.127960][T23877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7565'. [ 775.751232][T23894] syz.3.7572: attempt to access beyond end of device [ 775.751232][T23894] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 775.936963][T23903] loop5: detected capacity change from 0 to 164 [ 775.991891][T23903] ISOFS: unable to read i-node block [ 776.000453][T23901] loop0: detected capacity change from 0 to 256 [ 776.049681][T23901] exfat: Deprecated parameter 'utf8' [ 776.055069][T23901] exfat: Deprecated parameter 'namecase' [ 776.067847][T23903] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 776.095724][T23908] tmpfs: Bad value for 'mpol' [ 776.100023][T23901] exfat: Deprecated parameter 'namecase' [ 776.107858][T23901] exfat: Deprecated parameter 'utf8' [ 776.191103][T23901] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 777.189137][T23940] loop7: detected capacity change from 0 to 4096 [ 777.309839][T23940] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 777.384823][T23904] loop2: detected capacity change from 0 to 32768 [ 777.545713][T23904] (syz.2.7574,23904,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 777.598847][T23904] (syz.2.7574,23904,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 777.726532][T23904] JBD2: Ignoring recovery information on journal [ 777.843837][T23975] 9pnet_virtio: no channels available for device syz [ 777.959578][T23904] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 777.973849][T23982] loop7: detected capacity change from 0 to 64 [ 777.993565][T23983] loop3: detected capacity change from 0 to 64 [ 778.270283][ T5839] ocfs2: Unmounting device (7,2) on (node local) [ 778.783581][T24010] netlink: 'syz.5.7615': attribute type 21 has an invalid length. [ 779.107611][T24027] ipt_ECN: cannot use operation on non-tcp rule [ 779.347424][T24033] loop4: detected capacity change from 0 to 512 [ 779.563896][T24033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.609911][T24050] loop5: detected capacity change from 0 to 256 [ 779.635269][T24033] ext4 filesystem being mounted at /1248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 779.783901][T24057] loop2: detected capacity change from 0 to 1764 [ 779.887574][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.912376][T24057] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 780.488330][T24079] loop3: detected capacity change from 0 to 2048 [ 780.670600][T24079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.838202][T24079] overlayfs: conflicting options: userxattr,verity=on [ 781.003873][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.091696][T24087] loop2: detected capacity change from 0 to 32768 [ 781.157339][T24104] netlink: 288 bytes leftover after parsing attributes in process `syz.3.7648'. [ 781.180950][T24087] (syz.2.7639,24087,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 781.267533][T24087] (syz.2.7639,24087,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 781.321290][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 781.327949][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 781.565188][T24087] JBD2: Ignoring recovery information on journal [ 781.701475][T24087] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 781.723433][T24121] tmpfs: Bad value for 'mpol' [ 781.751208][T24082] loop7: detected capacity change from 0 to 32768 [ 781.893946][T24094] loop5: detected capacity change from 0 to 32768 [ 782.084892][T24094] ERROR: (device loop5): diWrite: ixpxd invalid [ 782.084892][T24094] [ 782.161479][T24094] ERROR: (device loop5): remounting filesystem as read-only [ 782.168845][T24094] ERROR: (device loop5): txCommit: [ 782.168845][T24094] [ 782.249712][ T5839] ocfs2: Unmounting device (7,2) on (node local) [ 782.253129][T24082] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 782.364976][T24082] bcachefs (loop7): initializing new filesystem [ 782.392524][T24082] bcachefs (loop7): going read-write [ 782.441189][T24082] bcachefs (loop7): marking superblocks [ 782.483749][T24094] ea_get: invalid extended attribute [ 782.489347][T24094] ffff88805cffdf60: 04 00 00 00 .... [ 782.620895][T24082] bcachefs (loop7): initializing freespace [ 782.653479][T24082] bcachefs (loop7): done initializing freespace [ 782.661827][T24082] bcachefs (loop7): reading snapshots table [ 782.675554][T24082] bcachefs (loop7): reading snapshots done [ 782.769711][T17811] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 782.804842][T24082] bcachefs (loop7): done starting filesystem [ 782.867637][T24163] loop3: detected capacity change from 0 to 1024 [ 782.931248][T24163] hfsplus: failed to load catalog file [ 783.416676][T22670] bcachefs (loop7): shutting down [ 783.421789][T22670] bcachefs (loop7): going read-only [ 783.465972][T22670] bcachefs (loop7): finished waiting for writes to stop [ 783.541640][T24190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7673'. [ 783.572611][T22670] bcachefs (loop7): flushing journal and stopping allocators, journal seq 3 [ 783.611854][T24198] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 783.917364][T22670] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 6 [ 784.128185][T22670] bcachefs (loop7): shutdown complete, journal seq 7 [ 784.152241][T22670] bcachefs (loop7): marking filesystem clean [ 784.357375][T24233] netlink: 'syz.3.7685': attribute type 1 has an invalid length. [ 784.408989][T24233] netlink: 'syz.3.7685': attribute type 2 has an invalid length. [ 784.540518][T22670] bcachefs (loop7): shutdown complete [ 785.403514][T24224] loop2: detected capacity change from 0 to 32768 [ 785.536469][T24236] loop5: detected capacity change from 0 to 32768 [ 785.610382][T24236] JBD2: Ignoring recovery information on journal [ 785.823782][T24284] loop0: detected capacity change from 0 to 8 [ 785.840011][T24284] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 785.875647][T24236] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 785.911830][T24267] loop3: detected capacity change from 0 to 32768 [ 785.927405][T24284] cramfs: Error -3 while decompressing! [ 785.933558][T24284] cramfs: ffffffff9a4e22f8(27)->ffff88805769b000(4096) [ 785.940565][T24284] cramfs: Error -3 while decompressing! [ 785.949605][T24284] cramfs: ffffffff9a4e22f8(27)->ffff88805769b000(4096) [ 785.957474][ T29] audit: type=1800 audit(2000000182.533:126): pid=24284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7706" name="file0" dev="loop0" ino=244 res=0 errno=0 [ 786.020916][ T5897] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 786.070643][ T5836] ocfs2: Unmounting device (7,5) on (node local) [ 786.147827][T24267] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 786.338367][T24267] XFS (loop3): Ending clean mount [ 786.352492][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 786.365131][T24267] XFS (loop3): Quotacheck needed: Please wait. [ 786.373356][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 786.385623][ T5897] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 786.394717][ T5897] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 786.427096][ T5897] usb 5-1: Product: syz [ 786.431647][ T5897] usb 5-1: Manufacturer: syz [ 786.436262][ T5897] usb 5-1: SerialNumber: syz [ 786.465824][T24267] XFS (loop3): Quotacheck: Done. [ 786.475543][T24224] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,norecovery,reconstruct_alloc [ 786.515097][T24224] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 786.534005][T24224] bcachefs (loop2): superblock requires following recovery passes to be run: [ 786.534005][T24224] check_directory_structure [ 786.558697][T24300] netlink: 'syz.5.7711': attribute type 1 has an invalid length. [ 786.566523][T24224] bcachefs (loop2): Version upgrade required: [ 786.566523][T24224] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 786.566523][T24224] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 786.566523][T24224] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_nlinks,set_fs_needs_rebalance [ 786.637390][T24300] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7711'. [ 786.655497][T24224] bcachefs (loop2): dropping and reconstructing all alloc info [ 786.670159][T24302] kAFS: Can only specify source 'none' with -o dyn [ 786.714072][T24224] bcachefs (loop2): accounting_read... [ 786.778403][ T5897] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 786.804335][ T5834] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 786.816270][T24224] done [ 786.819061][T24224] bcachefs (loop2): alloc_read... done [ 786.825980][ T5897] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 786.862640][ T5897] usb 5-1: Handspring Visor / Palm OS: port 20, is for Debugger use [ 786.874493][T24224] bcachefs (loop2): stripes_read... done [ 786.905916][T24224] bcachefs (loop2): snapshots_read... done [ 786.926919][ T5897] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 786.929764][T24224] bcachefs (loop2): check_allocations... [ 786.983946][T24307] ip6tnl0: entered promiscuous mode [ 787.009174][ T5897] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 787.018125][ T5897] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 787.129102][T24309] loop0: detected capacity change from 0 to 256 [ 787.204568][T24224] done [ 787.273803][ T5897] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 787.290012][T24224] bcachefs (loop2): going read-write [ 787.311726][ T5897] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 787.340237][ T5897] usb 5-1: USB disconnect, device number 96 [ 787.366975][T24309] FAT-fs (loop0): Directory bread(block 64) failed [ 787.385154][ T5897] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 787.412930][ T5897] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 787.434401][T24309] FAT-fs (loop0): Directory bread(block 65) failed [ 787.441105][T24224] bcachefs (loop2): bch2_rebalance_start(): error creating rebalance thread EINTR [ 787.463285][ T5897] visor 5-1:1.0: device disconnected [ 787.470174][T24309] FAT-fs (loop0): Directory bread(block 66) failed [ 787.506287][T24224] bcachefs (loop2): error starting rebalance thread [ 787.513065][T24224] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 787.528084][T24309] FAT-fs (loop0): Directory bread(block 67) failed [ 787.535178][T24309] FAT-fs (loop0): Directory bread(block 68) failed [ 787.548417][T24309] FAT-fs (loop0): Directory bread(block 69) failed [ 787.556425][T24224] bcachefs (loop2): shutting down [ 787.562288][T24309] FAT-fs (loop0): Directory bread(block 70) failed [ 787.570914][T24309] FAT-fs (loop0): Directory bread(block 71) failed [ 787.577549][T24309] FAT-fs (loop0): Directory bread(block 72) failed [ 787.590785][T24309] FAT-fs (loop0): Directory bread(block 73) failed [ 787.597452][T24224] bcachefs (loop2): going read-only [ 787.599454][T24322] loop3: detected capacity change from 0 to 64 [ 787.602669][T24224] bcachefs (loop2): finished waiting for writes to stop [ 787.644572][T24224] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 787.653957][T24224] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 787.705513][T24309] tmpfs: Bad value for 'mpol' [ 787.765885][T24224] bcachefs (loop2): unshutdown complete, journal seq 11 [ 788.038627][T24224] bcachefs (loop2): done going read-only, filesystem not clean [ 788.116983][T24224] bcachefs (loop2): shutdown complete [ 788.127264][ T5917] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 788.328191][ T5917] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 788.357544][ T5917] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.379790][ T5917] usb 8-1: config 0 has no interface number 0 [ 788.410743][ T5917] usb 8-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 788.453234][ T5917] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 788.488559][ T5917] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 788.499143][T24350] loop0: detected capacity change from 0 to 512 [ 788.530438][ T5917] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.552099][T24354] loop5: detected capacity change from 0 to 512 [ 788.572541][ T5917] usb 8-1: config 0 interface 52 has no altsetting 0 [ 788.592509][T24350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.593459][ T5917] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 788.618733][T24354] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 788.646629][T24350] ext4 filesystem being mounted at /1327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 788.662028][ T5917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.672698][T24354] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.7732: corrupted in-inode xattr: e_value out of bounds [ 788.683213][ T5917] usb 8-1: config 0 descriptor?? [ 788.693606][ T9] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 788.727597][T24354] EXT4-fs (loop5): Remounting filesystem read-only [ 788.769240][T24354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.853855][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 788.862501][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 788.876769][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.886099][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 788.892327][T24362] netlink: 'syz.3.7735': attribute type 32 has an invalid length. [ 788.899404][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 788.908746][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.917405][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 788.952490][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.960762][ T9] usb 5-1: Product: syz [ 788.964950][ T9] usb 5-1: Manufacturer: syz [ 788.969968][ T9] usb 5-1: SerialNumber: syz [ 788.978527][ T5917] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input46 [ 788.992283][ T9] usb 5-1: config 0 descriptor?? [ 789.068052][T24348] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 789.079222][ T9] mceusb 5-1:0.0: mceusb_dev_probe: device setup failed! [ 789.086317][ T9] mceusb 5-1:0.0: probe with driver mceusb failed with error -12 [ 789.382242][ T970] usb 8-1: USB disconnect, device number 2 [ 789.382369][ C0] synaptics_usb 8-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 789.389692][ T5897] usb 5-1: USB disconnect, device number 97 [ 789.503553][T24374] loop0: detected capacity change from 0 to 512 [ 789.544844][T24374] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 789.566513][T24374] EXT4-fs (loop0): 1 truncate cleaned up [ 789.573294][T24374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.647337][T24374] EXT4-fs error (device loop0): ext4_add_entry:2444: inode #2: comm syz.0.7739: Directory hole found for htree leaf block 0 [ 789.684539][T24374] EXT4-fs (loop0): Remounting filesystem read-only [ 789.728244][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.064475][T24391] delete_channel: no stack [ 790.203079][T24394] binder: 24393:24394 ioctl c018620c 0 returned -14 [ 790.469148][T24406] loop5: detected capacity change from 0 to 2048 [ 790.559111][T24406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 790.656998][T24224] bcachefs: bch2_fs_get_tree() error: EINTR [ 791.512504][T24403] loop4: detected capacity change from 0 to 32768 [ 791.538095][T24435] loop5: detected capacity change from 0 to 8 [ 791.557453][T24435] squashfs image failed sanity check [ 791.574264][T24403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7755 (24403) [ 791.657157][T24403] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 791.699512][T24403] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 791.715939][T24403] BTRFS info (device loop4): using free-space-tree [ 791.818303][T24409] loop3: detected capacity change from 0 to 32768 [ 791.931520][T24444] loop2: detected capacity change from 0 to 1764 [ 791.940233][T24445] nvme_fabrics: missing parameter 'transport=%s' [ 791.947763][T24445] nvme_fabrics: missing parameter 'nqn=%s' [ 792.007641][T24409] JBD2: Ignoring recovery information on journal [ 792.197215][T24409] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 792.245821][ T5833] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 792.500894][ T5834] ocfs2: Unmounting device (7,3) on (node local) [ 793.429617][T24493] ceph: No source [ 793.775846][T24508] netlink: 'syz.7.7795': attribute type 8 has an invalid length. [ 793.992139][T24507] loop4: detected capacity change from 0 to 4096 [ 794.219462][T24522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7805'. [ 794.239469][T24522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7805'. [ 794.445496][T24527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7808'. [ 794.467758][T24532] loop5: detected capacity change from 0 to 256 [ 794.517960][T24534] loop3: detected capacity change from 0 to 64 [ 794.542149][T24534] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 794.750157][T24542] loop7: detected capacity change from 0 to 256 [ 794.766451][T24542] exfat: Deprecated parameter 'utf8' [ 794.816542][T24542] cifs: Unknown parameter '\µbšX1o‘ÿÿÿITäŒ&¬æ:ŨÙ"‚Õëï1:ºÃÃÓ­'Ä4,gCžÊ [ 794.816542][T24542] SÃȘØÈžZ§6ŸÂ' [ 795.225451][ T970] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 795.420708][ T970] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 795.435481][ T970] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.458582][T24562] loop2: detected capacity change from 0 to 8 [ 795.484508][ T970] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 795.527464][ T970] usb 4-1: config 1 has no interface number 1 [ 795.533602][ T970] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 795.574204][T24566] loop4: detected capacity change from 0 to 256 [ 795.580805][ T970] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 795.631314][T24550] loop0: detected capacity change from 0 to 40427 [ 795.688520][ T970] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 795.725814][T24550] F2FS-fs (loop0): invalid crc value [ 795.727518][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.747980][T24550] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 795.759951][T24569] netlink: 'syz.7.7828': attribute type 20 has an invalid length. [ 795.768291][ T970] usb 4-1: Product: syz [ 795.773576][ T970] usb 4-1: Manufacturer: syz [ 795.778202][ T970] usb 4-1: SerialNumber: syz [ 795.891516][T24550] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 795.912859][T24566] FAT-fs (loop4): Directory bread(block 64) failed [ 795.919524][T24566] FAT-fs (loop4): Directory bread(block 65) failed [ 795.971785][T24566] FAT-fs (loop4): Directory bread(block 66) failed [ 796.022653][T24574] loop7: detected capacity change from 0 to 1024 [ 796.030580][T24566] FAT-fs (loop4): Directory bread(block 67) failed [ 796.037308][T24566] FAT-fs (loop4): Directory bread(block 68) failed [ 796.064132][T24566] FAT-fs (loop4): Directory bread(block 69) failed [ 796.071164][T24566] FAT-fs (loop4): Directory bread(block 70) failed [ 796.078471][T24566] FAT-fs (loop4): Directory bread(block 71) failed [ 796.086910][T24566] FAT-fs (loop4): Directory bread(block 72) failed [ 796.093718][T24566] FAT-fs (loop4): Directory bread(block 73) failed [ 796.100124][ T970] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 796.111533][ T970] usb 4-1: 2:1 : invalid channels 0 [ 796.139569][T24574] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 796.192575][ T970] usb 4-1: USB disconnect, device number 85 [ 796.297395][T24574] EXT4-fs warning (device loop7): ext4_empty_dir:3105: inode #11: comm syz.7.7830: directory missing '.' [ 796.362320][T24585] loop2: detected capacity change from 0 to 1024 [ 796.421227][T24585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 796.450486][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 796.507898][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.570330][T22670] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.286315][T24609] loop4: detected capacity change from 0 to 1764 [ 797.575038][T24624] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7853'. [ 797.580427][T24625] loop3: detected capacity change from 0 to 16 [ 797.635019][T24609] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 797.670852][T24625] erofs (device loop3): mounted with root inode @ nid 36. [ 797.713244][T24625] syz.3.7850: attempt to access beyond end of device [ 797.713244][T24625] loop3: rw=524288, sector=34359738360, nr_sectors = 32 limit=16 [ 797.775348][T24625] syz.3.7850: attempt to access beyond end of device [ 797.775348][T24625] loop3: rw=524288, sector=34359738392, nr_sectors = 64 limit=16 [ 797.806222][T24625] syz.3.7850: attempt to access beyond end of device [ 797.806222][T24625] loop3: rw=0, sector=34359738360, nr_sectors = 32 limit=16 [ 797.894515][ T29] audit: type=1800 audit(2000000193.665:127): pid=24625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7850" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 798.149507][T24650] trusted_key: encrypted_key: keylen parameter is missing [ 798.222478][T24651] netlink: 'syz.3.7861': attribute type 2 has an invalid length. [ 798.287401][T24651] netlink: 'syz.3.7861': attribute type 8 has an invalid length. [ 798.340139][T24651] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7861'. [ 798.437572][T24661] IPv6: Can't replace route, no match found [ 798.681740][T24666] netlink: 'syz.4.7872': attribute type 3 has an invalid length. [ 798.716073][T24666] netlink: 'syz.4.7872': attribute type 28 has an invalid length. [ 798.734161][T24666] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7872'. [ 799.041389][T24679] loop0: detected capacity change from 0 to 1024 [ 799.123753][ T12] hfsplus: b-tree write err: -5, ino 4 [ 799.573243][T24697] autofs: Bad value for 'fd' [ 799.721883][T24643] loop2: detected capacity change from 0 to 32768 [ 799.769905][T24643] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7859 (24643) [ 800.014708][T24643] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 800.025199][T24643] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 800.036223][T24643] BTRFS info (device loop2): using free-space-tree [ 800.274060][T24720] netlink: 'syz.4.7899': attribute type 10 has an invalid length. [ 800.286846][T24687] loop0: detected capacity change from 0 to 32768 [ 800.335143][T24720] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7899'. [ 800.345239][T24720] veth0_vlan: entered allmulticast mode [ 800.351802][T24720] bridge0: port 3(veth0_vlan) entered blocking state [ 800.359187][T24720] bridge0: port 3(veth0_vlan) entered disabled state [ 800.431066][T24729] loop3: detected capacity change from 0 to 764 [ 800.449622][T24729] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 800.518949][T24720] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 800.631983][T24740] loop3: detected capacity change from 0 to 256 [ 800.709225][T24740] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 800.860226][T24740] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 801.159690][T24687] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 801.235348][T24687] bcachefs (loop0): initializing new filesystem [ 801.326722][T24687] bcachefs (loop0): going read-write [ 801.380586][T24687] bcachefs (loop0): marking superblocks [ 801.394060][T24687] bcachefs (loop0): initializing freespace [ 801.401596][T24687] bcachefs (loop0): done initializing freespace [ 801.410505][T24687] bcachefs (loop0): reading snapshots table [ 801.417127][T24687] bcachefs (loop0): reading snapshots done [ 801.458214][T24643] BTRFS error (device loop2): open_ctree failed [ 801.498565][T24687] bcachefs (loop0): done starting filesystem [ 801.711743][T24790] loop3: detected capacity change from 0 to 1764 [ 801.944345][ T5831] bcachefs (loop0): shutting down [ 801.949467][ T5831] bcachefs (loop0): going read-only [ 801.971160][ T5831] bcachefs (loop0): finished waiting for writes to stop [ 802.033264][ T5831] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 802.172328][T24798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7931'. [ 802.324007][ T5831] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 5 [ 802.334765][T24804] loop4: detected capacity change from 0 to 1024 [ 802.420000][T24804] hfsplus: invalid extended attribute record [ 802.443310][ T5831] bcachefs (loop0): shutdown complete, journal seq 6 [ 802.451242][ T5831] bcachefs (loop0): marking filesystem clean [ 802.583395][T24814] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551359) [ 802.594311][T24814] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 802.671349][ T5831] bcachefs (loop0): shutdown complete [ 802.686696][ T1131] hfsplus: b-tree write err: -5, ino 8 [ 803.241019][T24822] loop5: detected capacity change from 0 to 32768 [ 803.273479][T24827] loop4: detected capacity change from 0 to 256 [ 803.326798][T24802] loop3: detected capacity change from 0 to 32768 [ 803.334542][T24802] XFS: ikeep mount option is deprecated. [ 803.348760][T24827] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0xae69b4a6, utbl_chksum : 0xe619d30d) [ 803.406855][T24802] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 803.466102][T24802] XFS (loop3): Ending clean mount [ 803.476941][T24802] XFS (loop3): Quotacheck needed: Please wait. [ 803.554511][ T970] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 803.616880][T24841] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7945'. [ 803.638717][T24802] XFS (loop3): Quotacheck: Done. [ 803.743813][ T5834] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 803.759667][ T970] usb 3-1: Using ep0 maxpacket: 32 [ 803.792048][ T970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.823129][ T970] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 803.848054][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.863977][ T970] usb 3-1: Product: syz [ 803.868257][ T970] usb 3-1: Manufacturer: syz [ 803.872870][ T970] usb 3-1: SerialNumber: syz [ 803.930688][ T970] usb 3-1: config 0 descriptor?? [ 804.282142][ T970] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 804.555601][ T5917] usb 3-1: USB disconnect, device number 91 [ 805.093183][ T872] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 805.282544][ T872] usb 4-1: Using ep0 maxpacket: 32 [ 805.304753][ T872] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.335358][ T872] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.386241][ T872] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 805.406995][ T872] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 805.443998][ T872] usb 4-1: Product: syz [ 805.459195][ T872] usb 4-1: Manufacturer: syz [ 805.523947][ T872] hub 4-1:4.0: USB hub found [ 805.771499][ T872] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 805.844822][ T872] usb 4-1: USB disconnect, device number 86 [ 805.962013][T17811] Bluetooth: hci2: command 0x0406 tx timeout [ 806.022878][ T5896] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 806.116332][T24887] loop4: detected capacity change from 0 to 32768 [ 806.165108][T24887] ERROR: (device loop4): dtSearch: DT_GETPAGE: dtree page corrupt [ 806.165108][T24887] [ 806.226119][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 806.241114][ T5896] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 806.241811][T24887] ERROR: (device loop4): remounting filesystem as read-only [ 806.251125][ T5896] usb 3-1: config 0 has no interface number 0 [ 806.278759][ T5896] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 806.302112][ T5896] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 806.312717][T24887] jfs_lookup: dtSearch returned -5 [ 806.334746][ T5896] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 806.364995][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 806.371545][T24923] loop7: detected capacity change from 0 to 512 [ 806.373344][ T5896] usb 3-1: Product: syz [ 806.380468][T24923] EXT4-fs: Ignoring removed mblk_io_submit option [ 806.390746][T24923] EXT4-fs: Ignoring removed bh option [ 806.419519][T24923] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 806.466527][ T5896] usb 3-1: SerialNumber: syz [ 806.542470][ T5896] usb 3-1: config 0 descriptor?? [ 806.677419][ T5896] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 806.685392][ T5896] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input47 [ 806.918076][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 806.925420][T24928] loop5: detected capacity change from 0 to 40427 [ 807.059905][T24928] F2FS-fs (loop5): invalid crc value [ 807.241751][T24928] F2FS-fs (loop5): Found nat_bits in checkpoint [ 807.379599][ T5896] usb 3-1: USB disconnect, device number 92 [ 807.404557][ T5896] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 807.435196][T24928] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 807.818925][ T970] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 807.994018][ T970] usb 4-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53 [ 808.012407][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.035988][ T970] usb 4-1: Product: syz [ 808.040179][ T970] usb 4-1: Manufacturer: syz [ 808.068838][ T970] usb 4-1: SerialNumber: syz [ 808.078878][ T970] usb 4-1: config 0 descriptor?? [ 808.117281][ T970] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 808.422002][T24975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8008'. [ 808.461246][T24975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8008'. [ 808.491342][T24975] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8008'. [ 808.510830][ T970] usb 4-1: USB disconnect, device number 87 [ 808.752614][T24982] loop7: detected capacity change from 0 to 2048 [ 808.808351][T24960] loop4: detected capacity change from 0 to 32768 [ 808.838676][T24982] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 808.867298][T24960] (syz.4.8000,24960,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 808.868236][T24960] (syz.4.8000,24960,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 808.914287][T24960] JBD2: Ignoring recovery information on journal [ 809.022404][T24960] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 809.146264][T24993] xt_hashlimit: max too large, truncated to 1048576 [ 809.440974][ T5833] ocfs2: Unmounting device (7,4) on (node local) [ 809.574051][T25010] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 809.583903][T25010] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 810.456337][T25048] loop4: detected capacity change from 0 to 1024 [ 810.485060][T25051] loop2: detected capacity change from 0 to 256 [ 810.607647][T25051] FAT-fs (loop2): Directory bread(block 64) failed [ 810.615354][T25051] FAT-fs (loop2): Directory bread(block 65) failed [ 810.651956][T25051] FAT-fs (loop2): Directory bread(block 66) failed [ 810.658622][T25051] FAT-fs (loop2): Directory bread(block 67) failed [ 810.696139][T25051] FAT-fs (loop2): Directory bread(block 68) failed [ 810.702730][T25051] FAT-fs (loop2): Directory bread(block 69) failed [ 810.709416][T25051] FAT-fs (loop2): Directory bread(block 70) failed [ 810.728154][T25051] FAT-fs (loop2): Directory bread(block 71) failed [ 810.734775][T25051] FAT-fs (loop2): Directory bread(block 72) failed [ 810.742118][T25051] FAT-fs (loop2): Directory bread(block 73) failed [ 810.803505][ T1131] hfsplus: b-tree write err: -5, ino 4 [ 810.893397][T25021] loop0: detected capacity change from 0 to 32768 [ 810.901556][T25021] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8029 (25021) [ 810.961485][T25021] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 811.012535][T25021] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 811.047510][T25021] BTRFS info (device loop0): using free-space-tree [ 811.312079][T25088] loop7: detected capacity change from 0 to 256 [ 811.492868][T25092] loop5: detected capacity change from 0 to 164 [ 811.557321][T25092] rock: directory entry would overflow storage [ 811.620842][T25092] rock: sig=0x66, size=4, remaining=3 [ 811.663408][T25092] rock: directory entry would overflow storage [ 811.675369][T25092] rock: sig=0x66, size=4, remaining=3 [ 811.936590][T25107] CIFS mount error: No usable UNC path provided in device string! [ 811.936590][T25107] [ 811.946929][T25107] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 812.606719][ T5831] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 813.245217][T25172] ebt_limit: overflow, try lower: 570423552/2483027968 [ 813.572067][T25175] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 813.787372][T25188] loop5: detected capacity change from 0 to 2048 [ 813.799018][T25185] usb usb4: usbfs: process 25185 (syz.2.8092) did not claim interface 0 before use [ 813.819374][T25189] openvswitch: netlink: Key type 164 is out of range max 32 [ 813.932377][T25192] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 814.015688][T25188] syz.5.8095: attempt to access beyond end of device [ 814.015688][T25188] loop5: rw=0, sector=19791209300040, nr_sectors = 2 limit=2048 [ 814.063179][T25188] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=1) [ 814.126868][ T51] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 814.253692][T25196] loop0: detected capacity change from 0 to 2048 [ 814.309293][ T51] usb 8-1: Using ep0 maxpacket: 8 [ 814.323347][ T51] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 814.333002][ T51] usb 8-1: config 179 has no interface number 0 [ 814.343481][ T51] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 814.409551][ T51] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 814.487367][ T51] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 814.551062][ T51] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 814.609690][ T51] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 814.679229][ T51] usb 8-1: config 179 interface 65 has no altsetting 0 [ 814.719835][ T51] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 814.822513][ T51] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.963412][T25223] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8105'. [ 815.103238][T25223] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8105'. [ 815.387699][T25205] loop3: detected capacity change from 0 to 32768 [ 815.399255][ T51] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input48 [ 815.556234][ T5187] input input48: unable to receive magic message: -110 [ 815.832093][ T51] usb 8-1: USB disconnect, device number 3 [ 815.838079][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 815.838221][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 815.858804][T25257] loop4: detected capacity change from 0 to 2048 [ 815.885821][ T51] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 815.985910][T25257] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 816.030796][T25205] [ 816.030796][T25205] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 816.030796][T25205] [ 816.050223][T25257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 816.096797][T25257] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 816.128061][T25205] [ 816.128061][T25205] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 816.128061][T25205] [ 816.190446][T25205] [ 816.190446][T25205] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 816.190446][T25205] [ 816.292546][ T112] [ 816.292546][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 816.292546][ T112] [ 816.439379][T14411] [ 816.439379][T14411] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 816.439379][T14411] [ 816.491107][T14411] [ 816.491107][T14411] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 816.491107][T14411] [ 816.543216][ T5834] [ 816.543216][ T5834] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 816.543216][ T5834] [ 816.603860][ T112] [ 816.603860][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 816.603860][ T112] [ 816.621707][T25279] loop5: detected capacity change from 0 to 256 [ 816.682007][ T5834] [ 816.682007][ T5834] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 816.682007][ T5834] [ 817.151995][T25307] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8133'. [ 817.161214][T25307] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8133'. [ 817.236966][ T29] audit: type=1326 audit(2000000211.746:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25308 comm="syz.3.8123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0752d85d29 code=0x0 [ 817.266985][T25312] loop3: detected capacity change from 0 to 2048 [ 817.446015][ T29] audit: type=1326 audit(2000000211.933:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25316 comm="syz.2.8136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6985d29 code=0x7ffc0000 [ 817.515314][ T29] audit: type=1326 audit(2000000211.933:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25316 comm="syz.2.8136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7faab6985d29 code=0x7ffc0000 [ 817.558105][T25321] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 817.578509][ T29] audit: type=1326 audit(2000000211.933:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25316 comm="syz.2.8136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6985d29 code=0x7ffc0000 [ 817.621470][ T29] audit: type=1326 audit(2000000211.933:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25316 comm="syz.2.8136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab6985d29 code=0x7ffc0000 [ 817.817269][T25334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8145'. [ 817.892773][T25339] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 818.356757][T25312] syz.3.8135: attempt to access beyond end of device [ 818.356757][T25312] loop3: rw=0, sector=19791209300040, nr_sectors = 2 limit=2048 [ 818.372018][T25312] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 818.411742][T25360] loop7: detected capacity change from 0 to 256 [ 818.534492][T25339] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 818.551298][T25339] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 818.561492][T25364] loop5: detected capacity change from 0 to 256 [ 818.621997][T25339] Remounting filesystem read-only [ 818.633317][ T5834] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 818.636163][T25364] exfat: Deprecated parameter 'namecase' [ 818.790959][T25364] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 818.844419][T25370] loop3: detected capacity change from 0 to 64 [ 818.951701][T25375] loop2: detected capacity change from 0 to 512 [ 818.978390][T25375] EXT4-fs: Ignoring removed i_version option [ 819.000168][T25375] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 819.109484][T25375] EXT4-fs (loop2): 1 truncate cleaned up [ 819.116300][T25375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.166085][T25384] loop7: detected capacity change from 0 to 512 [ 819.231533][T25387] loop5: detected capacity change from 0 to 64 [ 819.267954][T25378] loop4: detected capacity change from 0 to 4096 [ 819.305247][ T29] audit: type=1800 audit(2000000213.710:133): pid=25387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8167" name="file2" dev="loop5" ino=6 res=0 errno=0 [ 819.333827][T25384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 819.342821][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.457680][T25384] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.472027][T25384] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.649871][T22670] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.866885][T25407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8178'. [ 819.893010][T25407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8178'. [ 820.132145][T25412] loop2: detected capacity change from 0 to 2048 [ 820.279042][T25424] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 820.330915][T25412] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 820.433399][T25431] loop5: detected capacity change from 0 to 8 [ 820.444106][T25412] Remounting filesystem read-only [ 820.530559][T25431] SQUASHFS error: xz decompression failed, data probably corrupt [ 820.568761][T25431] SQUASHFS error: Failed to read block 0x108: -5 [ 820.589247][T25431] SQUASHFS error: Unable to read metadata cache entry [106] [ 820.619431][T25431] SQUASHFS error: Unable to read inode 0x11f [ 821.103845][ T51] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 821.278456][ T51] usb 6-1: Using ep0 maxpacket: 16 [ 821.305599][ T51] usb 6-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 821.334907][ T51] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 821.386324][ T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 38305, setting to 1024 [ 821.451774][ T51] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 821.467688][T25435] syz.3.8188 (25435): drop_caches: 2 [ 821.487156][ T51] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 821.532399][ T51] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 821.557266][ T51] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 821.595839][ T51] usb 6-1: Manufacturer: syz [ 821.613093][ T51] usb 6-1: config 0 descriptor?? [ 821.632505][T25431] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 821.830748][T25439] loop0: detected capacity change from 0 to 32768 [ 821.854426][T25439] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8192 (25439) [ 821.907679][ T5917] usb 6-1: USB disconnect, device number 96 [ 821.917125][T25465] QAT: Stopping all acceleration devices. [ 821.931381][T25439] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 821.943004][T25439] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 821.961087][T25439] BTRFS info (device loop0): using free-space-tree [ 822.129443][T25443] loop2: detected capacity change from 0 to 32768 [ 822.137210][T25443] XFS: ikeep mount option is deprecated. [ 822.180019][T25483] overlayfs: failed to resolve './file0.': -2 [ 822.183134][T25484] loop7: detected capacity change from 0 to 512 [ 822.304362][T25484] EXT4-fs (loop7): 1 truncate cleaned up [ 822.346884][T25484] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.350013][T25497] loop4: detected capacity change from 0 to 256 [ 822.367596][T25497] exfat: Deprecated parameter 'utf8' [ 822.382378][T25497] exfat: Deprecated parameter 'namecase' [ 822.387830][T25443] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 822.388095][T25497] exfat: Deprecated parameter 'namecase' [ 822.406094][T25497] exfat: Deprecated parameter 'utf8' [ 822.419620][T25497] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 822.441754][T25484] EXT4-fs error (device loop7): ext4_add_entry:2444: inode #2: comm syz.7.8208: Directory hole found for htree leaf block 0 [ 822.458782][ T5831] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 822.479817][ T970] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 822.611623][T25504] loop5: detected capacity change from 0 to 512 [ 822.625989][T25504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 822.639025][T22670] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 822.660423][T25505] loop4: detected capacity change from 0 to 1024 [ 822.674963][T25443] XFS (loop2): Ending clean mount [ 822.682386][T25443] XFS (loop2): Quotacheck needed: Please wait. [ 822.700620][ T970] usb 4-1: Using ep0 maxpacket: 16 [ 822.708938][ T970] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 822.724258][ T970] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 822.725052][T25504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.745561][ T970] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 822.761724][ T970] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 822.773109][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.781658][T25443] XFS (loop2): Quotacheck: Done. [ 822.801270][ T970] usb 4-1: Product: syz [ 822.805476][ T970] usb 4-1: Manufacturer: syz [ 822.811082][ T970] usb 4-1: SerialNumber: syz [ 822.863415][T25504] ext4 filesystem being mounted at /1362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.907989][T25505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.015348][ T5839] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 823.101591][T25505] EXT4-fs error (device loop4): ext4_get_first_dir_block:3561: inode #11: comm syz.4.8212: directory missing '..' [ 823.285448][ T970] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 823.293110][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.307717][ T970] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 823.330784][ T970] usb 4-1: USB disconnect, device number 88 [ 823.357953][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.890794][ T6214] udevd[6214]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.240114][T25538] netlink: 'syz.7.8224': attribute type 1 has an invalid length. [ 824.873068][T25562] loop7: detected capacity change from 0 to 256 [ 824.892693][T25562] exfat: Deprecated parameter 'utf8' [ 824.908223][T25562] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 825.112609][T25568] ieee802154 phy0 wpan0: encryption failed: -22 [ 825.509836][T25574] loop2: detected capacity change from 0 to 4096 [ 825.569799][T25574] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 825.655215][T25587] loop5: detected capacity change from 0 to 128 [ 826.066728][T25600] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 826.202229][T25608] mmap: syz.5.8254 (25608): VmData 37470208 exceed data ulimit 1243. Update limits or use boot option ignore_rlimit_data. [ 826.285919][T25580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 826.295438][T25580] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 826.327536][T25580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 826.341682][T25580] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 826.377336][T25580] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 826.408500][T25580] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 826.479308][T25580] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 826.523591][T25580] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 826.853054][T25632] loop5: detected capacity change from 0 to 256 [ 826.951691][T25632] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4d8996d3, utbl_chksum : 0xe619d30d) [ 826.969198][T25636] misc userio: The device must be registered before sending interrupts [ 827.042412][T25632] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 827.205506][T25645] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 827.949561][T25678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.220900][T25681] loop3: detected capacity change from 0 to 4096 [ 828.262992][T25681] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 828.311104][T25691] loop0: detected capacity change from 0 to 1024 [ 828.352140][T25691] hfsplus: xattr searching failed [ 828.415389][T25689] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 828.430715][T25580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 828.455818][T25580] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 828.809498][T25700] tc_dump_action: action bad kind [ 829.137333][T25722] loop4: detected capacity change from 0 to 256 [ 829.541960][T25738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8303'. [ 829.620241][T25745] loop2: detected capacity change from 0 to 16 [ 829.671344][T25745] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 829.924417][T25758] netlink: 'syz.0.8311': attribute type 1 has an invalid length. [ 830.742463][T25793] loop3: detected capacity change from 0 to 256 [ 831.114790][T25813] loop2: detected capacity change from 0 to 1024 [ 831.235524][T25818] netlink: 'syz.0.8331': attribute type 3 has an invalid length. [ 831.295677][T25818] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8331'. [ 831.301810][T25825] libceph: resolve '0' (ret=-3): failed [ 831.648027][T25813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.996881][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.261193][T25868] x_tables: ip_tables: osf match: only valid for protocol 6 [ 832.665136][T25886] loop0: detected capacity change from 0 to 512 [ 832.869426][T25900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8363'. [ 833.035776][T25880] loop3: detected capacity change from 0 to 32768 [ 833.043175][T25880] XFS: attr2 mount option is deprecated. [ 833.101365][T25906] netlink: 'syz.4.8367': attribute type 7 has an invalid length. [ 833.109492][T25906] netlink: 'syz.4.8367': attribute type 8 has an invalid length. [ 833.223774][T25911] ieee802154 phy0 wpan0: encryption failed: -22 [ 833.301210][T25886] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.8360: invalid indirect mapped block 32768 (level 0) [ 833.375900][T25886] EXT4-fs (loop0): Remounting filesystem read-only [ 833.420949][T25886] EXT4-fs (loop0): 1 truncate cleaned up [ 833.498789][T25886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 833.571986][T25886] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.611174][T25880] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 833.616000][T25936] Invalid ELF header magic: != ELF [ 833.951661][T25915] loop7: detected capacity change from 0 to 32768 [ 834.034293][T25880] XFS (loop3): Quotacheck needed: Please wait. [ 834.231683][T25880] XFS (loop3): Quotacheck: Done. [ 834.246319][T25953] loop4: detected capacity change from 0 to 256 [ 834.360630][T25880] XFS (loop3): syz.3.8356 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 834.443146][T25953] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x59626b74, utbl_chksum : 0xe619d30d) [ 834.494279][T25953] syz.4.8381: attempt to access beyond end of device [ 834.494279][T25953] loop4: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 834.526432][T25953] syz.4.8381: attempt to access beyond end of device [ 834.526432][T25953] loop4: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 834.556888][T25953] syz.4.8381: attempt to access beyond end of device [ 834.556888][T25953] loop4: rw=0, sector=280, nr_sectors = 8 limit=256 [ 834.598536][ T29] audit: type=1800 audit(2000000228.022:134): pid=25953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8381" name="file1" dev="loop4" ino=1048690 res=0 errno=0 [ 834.777294][ T5834] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 834.842795][T25977] loop2: detected capacity change from 0 to 256 [ 834.905797][T25977] exfat: Deprecated parameter 'utf8' [ 835.059782][T25977] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 835.849390][T26013] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 835.979226][ T5917] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 836.195984][T26028] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 836.214282][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 836.221319][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 836.231684][ T5917] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 836.288228][T26028] overlayfs: missing 'lowerdir' [ 836.289386][ T5917] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 836.318064][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.358565][ T5917] usb 6-1: Product: syz [ 836.371062][ T5917] usb 6-1: Manufacturer: syz [ 836.392656][ T5917] usb 6-1: SerialNumber: syz [ 836.422646][ T5917] usb 6-1: config 0 descriptor?? [ 836.699207][T26001] loop7: detected capacity change from 0 to 32768 [ 836.799771][T26001] [ 836.799771][T26001] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 836.799771][T26001] [ 836.832588][T26001] [ 836.832588][T26001] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 836.832588][T26001] [ 836.853465][T26001] [ 836.853465][T26001] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 836.853465][T26001] [ 836.919302][T26001] [ 836.919302][T26001] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 836.919302][T26001] [ 836.941461][T26001] [ 836.941461][T26001] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 836.941461][T26001] [ 836.960851][ T970] usb 6-1: USB disconnect, device number 97 [ 837.050017][ T112] [ 837.050017][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 837.050017][ T112] [ 837.236181][T22670] [ 837.236181][T22670] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 837.236181][T22670] [ 837.283694][T22670] [ 837.283694][T22670] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 837.283694][T22670] [ 837.788176][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8422'. [ 837.832024][T26088] loop4: detected capacity change from 0 to 64 [ 838.012980][T26087] loop2: detected capacity change from 0 to 2048 [ 838.210488][T26091] loop3: detected capacity change from 0 to 32768 [ 838.245013][T26101] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 838.311145][T26103] loop0: detected capacity change from 0 to 128 [ 838.335492][T26103] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 838.382589][T26087] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 838.684154][T26091] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 838.697403][T26123] loop4: detected capacity change from 0 to 1024 [ 838.812188][T26123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.223586][T26091] XFS (loop3): Ending clean mount [ 839.286256][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.420423][ T5917] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 839.508360][ T5834] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 839.570965][T26160] netlink: 'syz.7.8443': attribute type 3 has an invalid length. [ 839.730775][ T970] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 839.862558][T26170] loop0: detected capacity change from 0 to 8 [ 839.889287][ T5917] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 839.898758][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.906931][ T5917] usb 3-1: Product: syz [ 839.911128][ T5917] usb 3-1: Manufacturer: syz [ 839.916039][ T5917] usb 3-1: SerialNumber: syz [ 839.950272][ T970] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 839.961103][ T970] usb 5-1: config 0 has no interface number 0 [ 839.975613][ T5917] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 839.989490][T26170] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 840.022676][ T970] usb 5-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 840.038450][ T872] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 840.070815][ T970] usb 5-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 840.125995][ T970] usb 5-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 840.231053][ T970] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 840.240371][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.265249][ T970] usb 5-1: Product: syz [ 840.269489][ T970] usb 5-1: Manufacturer: syz [ 840.274102][ T970] usb 5-1: SerialNumber: syz [ 840.414689][ T970] usb 5-1: config 0 descriptor?? [ 840.461739][T26154] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 840.469421][T26154] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 840.711299][T26154] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 840.719942][T26154] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 840.769970][ T970] qmi_wwan 5-1:0.197: probe with driver qmi_wwan failed with error -22 [ 840.868039][T26197] loop3: detected capacity change from 0 to 1024 [ 840.977914][T26199] loop7: detected capacity change from 0 to 1024 [ 841.439611][ T970] usb 5-1: USB disconnect, device number 98 [ 841.924164][T26197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.288520][T26224] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8464'. [ 842.450581][T26226] loop7: detected capacity change from 0 to 64 [ 842.540737][T26217] loop0: detected capacity change from 0 to 512 [ 842.686684][T26217] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 842.758641][T26217] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 842.797493][T26217] System zones: 0-1, 15-15, 18-18, 34-34 [ 842.827799][T26217] EXT4-fs (loop0): orphan cleanup on readonly fs [ 842.848068][T26217] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 842.879738][T26217] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 842.916044][T26217] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 843.157763][T26217] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.8462: bad orphan inode 16 [ 843.270808][T26219] loop5: detected capacity change from 0 to 32768 [ 843.294356][T26217] EXT4-fs (loop0): Remounting filesystem read-only [ 843.300920][T26217] ext4_test_bit(bit=15, block=18) = 1 [ 843.318974][T26217] is_bad_inode(inode)=0 [ 843.326038][T26235] loop2: detected capacity change from 0 to 512 [ 843.343817][T26217] NEXT_ORPHAN(inode)=0 [ 843.347914][T26217] max_ino=32 [ 843.351122][T26217] i_nlink=2 [ 843.365206][T26235] EXT4-fs: inline encryption not supported [ 843.384662][T26217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 843.496629][T26217] fscrypt (loop0, inode 16): Error -5 getting encryption context [ 843.640962][T26235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.699637][T26235] ext4 filesystem being mounted at /1388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.780939][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.844837][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.168101][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.463055][T26287] netlink: 'syz.2.8478': attribute type 1 has an invalid length. [ 846.541138][T26287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8478'. [ 846.983396][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 846.990074][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 847.443575][T26302] loop7: detected capacity change from 0 to 16 [ 847.627748][T26302] erofs (device loop7): mounted with root inode @ nid 36. [ 847.761563][T26302] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 847.811854][T26313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8494'. [ 847.912536][T26302] erofs (device loop7): failed to decompress -23 in[64, 4032] out[1851] [ 848.014480][T26302] erofs (device loop7): read error -117 @ 43 of nid 36 [ 848.260011][T26320] loop0: detected capacity change from 0 to 764 [ 848.996567][T26277] loop4: detected capacity change from 0 to 32768 [ 849.217851][T26277] JBD2: Ignoring recovery information on journal [ 849.413999][T26331] 9pnet: Could not find request transport: 0xffffffffffffffff [ 849.587376][T26277] JBD2: journal reset failed [ 849.629709][T26277] (syz.4.8482,26277,1):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 849.757497][T26277] (syz.4.8482,26277,1):ocfs2_check_volume:2428 ERROR: ocfs2 journal load failed! -4 [ 850.592154][T26357] netlink: 'syz.2.8510': attribute type 1 has an invalid length. [ 850.681056][T26357] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8510'. [ 850.763885][ C0] sched: DL replenish lagged too much [ 851.119881][T26367] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8514'. [ 851.455995][T26371] loop0: detected capacity change from 0 to 256 [ 851.724477][T26379] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8519'. [ 851.843145][T26371] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 852.953756][T26393] loop5: detected capacity change from 0 to 24 [ 853.038841][T26393] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 853.219749][T26393] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 853.567252][T26397] loop3: detected capacity change from 0 to 256 [ 853.833384][T26397] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 853.934975][T26398] loop2: detected capacity change from 0 to 4096 [ 854.059700][T26397] syz.3.8526: attempt to access beyond end of device [ 854.059700][T26397] loop3: rw=0, sector=295096, nr_sectors = 1 limit=256 [ 854.114025][T26398] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 854.230179][T26398] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 854.321624][T26398] ntfs3(loop2): Failed to load $Extend (-22). [ 854.366872][T26398] ntfs3(loop2): Failed to initialize $Extend. [ 854.656211][T26377] loop4: detected capacity change from 0 to 32768 [ 854.937516][T26398] ntfs3(loop2): ino=5, "/" directory corrupted [ 855.740894][T26420] loop0: detected capacity change from 0 to 64 [ 856.384341][T26426] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 856.976397][T26438] loop5: detected capacity change from 0 to 8 [ 857.071191][T26440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.118965][T26438] SQUASHFS error: Unable to read inode 0xa7 [ 857.805782][T26450] loop4: detected capacity change from 0 to 1764 [ 857.882452][T26458] loop2: detected capacity change from 0 to 16 [ 857.947544][T26458] erofs (device loop2): mounted with root inode @ nid 36. [ 858.437619][T26458] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 858.546036][T26458] erofs (device loop2): failed to decompress -29 in[58, 4038] out[1851] [ 858.665860][T26458] erofs (device loop2): read error -117 @ 43 of nid 36 [ 859.210933][T26467] loop3: detected capacity change from 0 to 4096 [ 859.300909][T26472] bridge3: entered promiscuous mode [ 859.439756][T26477] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 860.442049][T26491] loop4: detected capacity change from 0 to 256 [ 860.784127][T26491] FAT-fs (loop4): Directory bread(block 64) failed [ 860.874577][T26491] FAT-fs (loop4): Directory bread(block 65) failed [ 860.963431][T26491] FAT-fs (loop4): Directory bread(block 66) failed [ 860.970035][T26491] FAT-fs (loop4): Directory bread(block 67) failed [ 861.025625][T26499] loop7: detected capacity change from 0 to 2048 [ 861.096082][T26491] FAT-fs (loop4): Directory bread(block 68) failed [ 861.161986][T26491] FAT-fs (loop4): Directory bread(block 69) failed [ 861.225664][T26499] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.8571: bad orphan inode 8192 [ 861.237595][T26491] FAT-fs (loop4): Directory bread(block 70) failed [ 861.310594][T26491] FAT-fs (loop4): Directory bread(block 71) failed [ 861.366818][T26491] FAT-fs (loop4): Directory bread(block 72) failed [ 861.373734][T26499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.442723][T26491] FAT-fs (loop4): Directory bread(block 73) failed [ 862.048680][T22670] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.036120][ T5897] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 863.351456][ T5897] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 863.382446][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.467916][ T5897] usb 5-1: Product: syz [ 863.516273][ T5897] usb 5-1: Manufacturer: syz [ 863.566189][ T5897] usb 5-1: SerialNumber: syz [ 863.647307][ T5897] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 863.781581][ T5896] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 867.558122][ T5896] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 869.192657][ T5896] ath9k_htc: Failed to initialize the device [ 977.298232][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 977.305246][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5834/1:b..l P26498/1:b..l P5831/1:b..l [ 977.318936][ C1] rcu: (detected by 1, t=10502 jiffies, g=99837, q=145 ncpus=2) [ 977.326688][ C1] task:syz-executor state:R running task stack:14624 pid:5831 tgid:5831 ppid:5825 flags:0x00000000 [ 977.341705][ C1] Call Trace: [ 977.345103][ C1] [ 977.348060][ C1] __schedule+0x1850/0x4c30 [ 977.352623][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.358310][ C1] ? __pfx___schedule+0x10/0x10 [ 977.363215][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.368896][ C1] ? mark_lock+0x9a/0x360 [ 977.373282][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.378956][ C1] ? preempt_schedule+0xe1/0xf0 [ 977.383854][ C1] preempt_schedule_common+0x84/0xd0 [ 977.389192][ C1] preempt_schedule+0xe1/0xf0 [ 977.393914][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 977.399328][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 977.405364][ C1] ? __page_table_check_ptes_set+0x30f/0x410 [ 977.411745][ C1] ? copy_pmd_range+0x6d6d/0x77a0 [ 977.416797][ C1] preempt_schedule_thunk+0x1a/0x30 [ 977.422035][ C1] _raw_spin_unlock+0x3e/0x50 [ 977.426743][ C1] copy_pmd_range+0x6dc8/0x77a0 [ 977.431681][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 977.436935][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.442720][ C1] ? look_up_lock_class+0x77/0x170 [ 977.447877][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.453538][ C1] ? register_lock_class+0x102/0x980 [ 977.458865][ C1] ? __pfx_mas_destroy+0x10/0x10 [ 977.463841][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.469518][ C1] ? mark_lock+0x9a/0x360 [ 977.473914][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.479584][ C1] ? __lock_acquire+0x1397/0x2100 [ 977.484679][ C1] copy_page_range+0x99f/0xe90 [ 977.489506][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 977.494837][ C1] ? __pfx_up_write+0x10/0x10 [ 977.499556][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.505212][ C1] ? __asan_memset+0x23/0x50 [ 977.509831][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 977.516643][ C1] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 977.522931][ C1] copy_mm+0x1126/0x1fd0 [ 977.527221][ C1] ? __pfx_copy_mm+0x10/0x10 [ 977.531855][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.537517][ C1] ? __init_rwsem+0x122/0x160 [ 977.542236][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.547896][ C1] ? copy_signal+0x51c/0x640 [ 977.552532][ C1] copy_process+0x1845/0x3d50 [ 977.557262][ C1] ? copy_process+0x9fa/0x3d50 [ 977.562056][ C1] ? __lock_acquire+0x1397/0x2100 [ 977.567118][ C1] ? __pfx_copy_process+0x10/0x10 [ 977.572181][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.577928][ C1] kernel_clone+0x226/0x8e0 [ 977.582470][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 977.587827][ C1] __x64_sys_clone+0x258/0x2a0 [ 977.592634][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 977.598419][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 977.604534][ C1] ? exc_page_fault+0x590/0x8b0 [ 977.609593][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.615253][ C1] ? do_syscall_64+0xb6/0x230 [ 977.619970][ C1] do_syscall_64+0xf3/0x230 [ 977.624516][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.630449][ C1] RIP: 0033:0x7fd7b5f7c593 [ 977.634919][ C1] RSP: 002b:00007ffe7a7b1278 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 977.643453][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd7b5f7c593 [ 977.651562][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 977.659571][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 977.667571][ C1] R10: 00005555886bc7d0 R11: 0000000000000246 R12: 0000000000000000 [ 977.675658][ C1] R13: 00000000000c932e R14: 00007ffe7a7b1400 R15: 00000000000005a3 [ 977.683675][ C1] [ 977.686711][ C1] task:syz.5.8570 state:R running task stack:24432 pid:26498 tgid:26495 ppid:5836 flags:0x00004006 [ 977.698517][ C1] Call Trace: [ 977.701814][ C1] [ 977.704765][ C1] __schedule+0x1850/0x4c30 [ 977.709309][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.714967][ C1] ? mark_lock+0x9a/0x360 [ 977.719331][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.724993][ C1] ? __pfx___schedule+0x10/0x10 [ 977.729912][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 977.736012][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 977.742550][ C1] preempt_schedule_notrace+0x100/0x140 [ 977.748131][ C1] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 977.754238][ C1] preempt_schedule_notrace_thunk+0x1a/0x30 [ 977.760270][ C1] rcu_is_watching+0x7e/0xb0 [ 977.764892][ C1] ? percpu_ref_put+0x19/0x180 [ 977.769685][ C1] percpu_ref_put+0x48/0x180 [ 977.774393][ C1] __mem_cgroup_uncharge_folios+0xdf/0x1c0 [ 977.780263][ C1] ? __pfx___mem_cgroup_uncharge_folios+0x10/0x10 [ 977.786735][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 977.793106][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.798765][ C1] ? folio_unqueue_deferred_split+0x98/0x240 [ 977.804778][ C1] folios_put_refs+0x764/0x860 [ 977.809582][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 977.814905][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.820568][ C1] ? free_swap_cache+0x115/0x3e0 [ 977.825580][ C1] free_pages_and_swap_cache+0x2ea/0x690 [ 977.831245][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 977.837478][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.843193][ C1] ? tlb_table_flush+0x143/0x410 [ 977.848169][ C1] ? __pfx_lock_release+0x10/0x10 [ 977.853240][ C1] tlb_flush_mmu+0x3a3/0x680 [ 977.857992][ C1] ? __rcu_read_unlock+0xa1/0x110 [ 977.863234][ C1] unmap_page_range+0x3770/0x4040 [ 977.868339][ C1] ? __lock_acquire+0x1397/0x2100 [ 977.873444][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 977.878860][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.884622][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.890284][ C1] ? mas_next_slot+0xdc6/0xea0 [ 977.895095][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.900756][ C1] ? uprobe_munmap+0x183/0x460 [ 977.905555][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.911238][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 977.916305][ C1] unmap_vmas+0x3cc/0x5f0 [ 977.920680][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 977.925636][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.931299][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 977.937408][ C1] exit_mmap+0x275/0xc20 [ 977.941784][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 977.946597][ C1] ? __pfx_exit_aio+0x10/0x10 [ 977.951320][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.957158][ C1] ? uprobe_clear_state+0x271/0x290 [ 977.962386][ C1] ? mm_update_next_owner+0xa4/0x810 [ 977.967705][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 977.972933][ C1] __mmput+0x115/0x3c0 [ 977.977043][ C1] exit_mm+0x220/0x310 [ 977.981147][ C1] ? __pfx_exit_mm+0x10/0x10 [ 977.985770][ C1] ? taskstats_exit+0x326/0xa60 [ 977.990649][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.996316][ C1] do_exit+0x9ad/0x28e0 [ 978.000529][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.006192][ C1] ? __pfx_do_exit+0x10/0x10 [ 978.010816][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 978.016219][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.021876][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 978.027909][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 978.034312][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 978.039480][ C1] do_group_exit+0x207/0x2c0 [ 978.044109][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 978.049340][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.054998][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 978.060235][ C1] get_signal+0x16b2/0x1750 [ 978.064995][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 978.071030][ C1] ? __pfx_get_signal+0x10/0x10 [ 978.075958][ C1] arch_do_signal_or_restart+0x96/0x860 [ 978.081558][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 978.087761][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 978.093871][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 978.099720][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 978.105309][ C1] do_syscall_64+0x100/0x230 [ 978.109942][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.116222][ C1] RIP: 0033:0x7f0d61f847df [ 978.120670][ C1] RSP: 002b:00007f0d62d54df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 978.129118][ C1] RAX: 0000000000d4b000 RBX: 0000000001000000 RCX: 00007f0d61f847df [ 978.137111][ C1] RDX: 0000000001000000 RSI: 00007f0d57800000 RDI: 0000000000000003 [ 978.145108][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000012789 [ 978.153799][ C1] R10: 0000000000000002 R11: 0000000000000293 R12: 0000000000000003 [ 978.161807][ C1] R13: 00007f0d62d54ef0 R14: 00007f0d62d54eb0 R15: 00007f0d57800000 [ 978.169849][ C1] [ 978.172977][ C1] task:syz-executor state:R running task stack:19488 pid:5834 tgid:5834 ppid:5828 flags:0x00004002 [ 978.184786][ C1] Call Trace: [ 978.188083][ C1] [ 978.191040][ C1] __schedule+0x1850/0x4c30 [ 978.195604][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.201370][ C1] ? __pfx___schedule+0x10/0x10 [ 978.206262][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.211932][ C1] ? mark_lock+0x9a/0x360 [ 978.216318][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.221981][ C1] ? preempt_schedule+0xe1/0xf0 [ 978.226873][ C1] preempt_schedule_common+0x84/0xd0 [ 978.232202][ C1] preempt_schedule+0xe1/0xf0 [ 978.236917][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 978.242329][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 978.248260][ C1] ? __page_table_check_ptes_set+0x30f/0x410 [ 978.254318][ C1] ? copy_pmd_range+0x6d6d/0x77a0 [ 978.259549][ C1] preempt_schedule_thunk+0x1a/0x30 [ 978.264790][ C1] _raw_spin_unlock+0x3e/0x50 [ 978.269499][ C1] copy_pmd_range+0x6dc8/0x77a0 [ 978.274394][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 978.279730][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 978.284968][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.290645][ C1] ? look_up_lock_class+0x77/0x170 [ 978.295802][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.301574][ C1] ? register_lock_class+0x102/0x980 [ 978.306965][ C1] ? __pfx_mas_destroy+0x10/0x10 [ 978.311978][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.317645][ C1] ? mark_lock+0x9a/0x360 [ 978.322016][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.327765][ C1] ? __lock_acquire+0x1397/0x2100 [ 978.332853][ C1] copy_page_range+0x99f/0xe90 [ 978.337670][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 978.342992][ C1] ? __pfx_up_write+0x10/0x10 [ 978.347702][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.353360][ C1] ? __asan_memset+0x23/0x50 [ 978.357973][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 978.364773][ C1] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 978.371060][ C1] copy_mm+0x1126/0x1fd0 [ 978.375351][ C1] ? __pfx_copy_mm+0x10/0x10 [ 978.379983][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.385640][ C1] ? __init_rwsem+0x122/0x160 [ 978.390357][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.396015][ C1] ? copy_signal+0x51c/0x640 [ 978.400667][ C1] copy_process+0x1845/0x3d50 [ 978.405394][ C1] ? copy_process+0x9fa/0x3d50 [ 978.410189][ C1] ? __lock_acquire+0x1397/0x2100 [ 978.415249][ C1] ? __pfx_copy_process+0x10/0x10 [ 978.420309][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.425974][ C1] kernel_clone+0x226/0x8e0 [ 978.430512][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 978.435769][ C1] __x64_sys_clone+0x258/0x2a0 [ 978.440568][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 978.445877][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 978.451897][ C1] ? exc_page_fault+0x590/0x8b0 [ 978.456869][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.462534][ C1] ? do_syscall_64+0xb6/0x230 [ 978.467269][ C1] do_syscall_64+0xf3/0x230 [ 978.471821][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.477760][ C1] RIP: 0033:0x7f0752d7c593 [ 978.482199][ C1] RSP: 002b:00007ffe669e0be8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 978.490646][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0752d7c593 [ 978.498647][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 978.506640][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 978.514633][ C1] R10: 00005555633327d0 R11: 0000000000000246 R12: 0000000000000000 [ 978.522663][ C1] R13: 00000000000c926a R14: 00007ffe669e0d70 R15: 00000000000005e6 [ 978.530767][ C1] [ 978.533807][ C1] rcu: rcu_preempt kthread starved for 10591 jiffies! g99837 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 978.545215][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 978.555293][ C1] rcu: RCU grace-period kthread stack dump: [ 978.561227][ C1] task:rcu_preempt state:R running task stack:26264 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 978.573148][ C1] Call Trace: [ 978.576441][ C1] [ 978.579395][ C1] __schedule+0x1850/0x4c30 [ 978.583979][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.589731][ C1] ? irqentry_exit+0x63/0x90 [ 978.594355][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.600192][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.605893][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 978.611917][ C1] ? __pfx___schedule+0x10/0x10 [ 978.616805][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.622467][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 978.627707][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.633387][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 978.638534][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 978.644302][ C1] ? register_lock_class+0x102/0x980 [ 978.649717][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.655379][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 978.661492][ C1] irqentry_exit+0x5e/0x90 [ 978.665950][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 978.671970][ C1] RIP: 0010:debug_object_assert_init+0x1c/0x4b0 [ 978.678372][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 00 00 00 <49> 89 f5 48 89 7c 24 18 65 48 8b 04 25 28 00 00 00 48 89 84 24 c0 [ 978.698111][ C1] RSP: 0018:ffffc900001678e0 EFLAGS: 00000282 [ 978.704217][ C1] RAX: 1ffff9200002cf48 RBX: ffffc90000167a40 RCX: ffff88801ced0000 [ 978.712262][ C1] RDX: 0000000000000000 RSI: ffffffff8c0ca760 RDI: ffffc90000167bc0 [ 978.720375][ C1] RBP: ffffc900001679f0 R08: ffffffff818c4bd8 R09: 1ffffffff203303e [ 978.728382][ C1] R10: dffffc0000000000 R11: fffffbfff203303f R12: ffffc90000167bc0 [ 978.736387][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200002cf44 [ 978.744496][ C1] ? __timer_delete_sync+0x1e8/0x310 [ 978.749843][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.755525][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 978.761587][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 978.767997][ C1] __try_to_del_timer_sync+0xaa/0x340 [ 978.773414][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.779175][ C1] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 978.785195][ C1] ? __timer_delete_sync+0x234/0x310 [ 978.790609][ C1] __timer_delete_sync+0x245/0x310 [ 978.795757][ C1] ? __pfx___timer_delete_sync+0x10/0x10 [ 978.801432][ C1] ? timer_delete_sync+0xd/0x20 [ 978.806319][ C1] schedule_timeout+0x162/0x290 [ 978.811202][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 978.816603][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.822441][ C1] ? __pfx_process_timeout+0x10/0x10 [ 978.827858][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.833608][ C1] ? prepare_to_swait_event+0x330/0x350 [ 978.839189][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 978.844086][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 978.850052][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 978.855486][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 978.860145][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 978.865408][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 978.871375][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.877392][ C1] ? __kthread_parkme+0x169/0x1d0 [ 978.882633][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 978.887868][ C1] kthread+0x2f2/0x390 [ 978.891972][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 978.897203][ C1] ? __pfx_kthread+0x10/0x10 [ 978.901829][ C1] ret_from_fork+0x4d/0x80 [ 978.906269][ C1] ? __pfx_kthread+0x10/0x10 [ 978.910904][ C1] ret_from_fork_asm+0x1a/0x30 [ 978.915704][ C1] [ 978.918734][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 978.925065][ C1] Sending NMI from CPU 1 to CPUs 0: [ 978.930294][ C0] NMI backtrace for cpu 0 [ 978.930310][ C0] CPU: 0 UID: 0 PID: 5917 Comm: kworker/0:7 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 978.930339][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 978.930356][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 978.930394][ C0] RIP: 0010:usb_anchor_urb+0xc6/0x240 [ 978.930435][ C0] Code: 89 fd 48 c1 ed 03 80 7c 05 00 00 74 08 4c 89 ff e8 1f 57 c4 fa 4d 8b 74 24 08 4c 89 ef 4c 89 f6 4c 89 e2 e8 ec 19 87 fd 84 c0 <0f> 84 96 00 00 00 e8 4f f3 5d fa 48 b8 00 00 00 00 00 fc ff df 80 [ 978.930456][ C0] RSP: 0018:ffffc900000077e0 EFLAGS: 00000002 [ 978.930477][ C0] RAX: 1ffff11029755901 RBX: ffff88814baac200 RCX: 0000000000040000 [ 978.930496][ C0] RDX: ffff88805fa71298 RSI: ffff88814baacb28 RDI: ffff88814baac228 [ 978.930515][ C0] RBP: 1ffff1100bf4e254 R08: ffffffff87419071 R09: 1ffff11029755840 [ 978.930539][ C0] R10: dffffc0000000000 R11: ffffed1029755841 R12: ffff88805fa71298 [ 978.930558][ C0] R13: ffff88814baac228 R14: ffff88814baacb28 R15: ffff88805fa712a0 [ 978.930581][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 978.930602][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 978.930620][ C0] CR2: 0000001b30512ff8 CR3: 000000000e736000 CR4: 0000000000350ef0 [ 978.930640][ C0] Call Trace: [ 978.930650][ C0] [ 978.930660][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 978.930691][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 978.930724][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 978.930753][ C0] ? nmi_handle+0x2a/0x5a0 [ 978.930794][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 978.930818][ C0] ? nmi_handle+0x151/0x5a0 [ 978.930848][ C0] ? nmi_handle+0x2a/0x5a0 [ 978.930879][ C0] ? usb_anchor_urb+0xc6/0x240 [ 978.930914][ C0] ? default_do_nmi+0x63/0x160 [ 978.930942][ C0] ? exc_nmi+0x123/0x1f0 [ 978.930969][ C0] ? end_repeat_nmi+0xf/0x53 [ 978.930996][ C0] ? usb_anchor_urb+0x71/0x240 [ 978.931034][ C0] ? usb_anchor_urb+0xc6/0x240 [ 978.931071][ C0] ? usb_anchor_urb+0xc6/0x240 [ 978.931108][ C0] ? usb_anchor_urb+0xc6/0x240 [ 978.931145][ C0] [ 978.931153][ C0] [ 978.931166][ C0] ath9k_hif_usb_reg_in_cb+0x4c1/0x6e0 [ 978.931205][ C0] ? kcov_remote_start+0x97/0x7d0 [ 978.931236][ C0] __usb_hcd_giveback_urb+0x42e/0x6e0 [ 978.931271][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 978.931306][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 978.931330][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.931360][ C0] dummy_timer+0x856/0x4620 [ 978.931385][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.931416][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 978.931468][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.931511][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 978.931545][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 978.931569][ C0] __hrtimer_run_queues+0x59d/0xd30 [ 978.931605][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 978.931645][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 978.931681][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.931706][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.931730][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 978.931764][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 978.931803][ C0] handle_softirqs+0x2d6/0x9b0 [ 978.931841][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.931872][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 978.931911][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 978.931951][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.931976][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 978.932009][ C0] __irq_exit_rcu+0xf7/0x220 [ 978.932047][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 978.932087][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.932115][ C0] irq_exit_rcu+0x9/0x30 [ 978.932149][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 978.932182][ C0] [ 978.932191][ C0] [ 978.932201][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 978.932239][ C0] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 978.932278][ C0] Code: 8c e8 24 24 67 0a 65 66 8b 05 f4 00 a2 7e 66 85 c0 75 5d bf 01 00 00 00 e8 5d bd 0b 00 e8 08 69 45 00 fb 65 8b 05 b8 00 a2 7e <85> c0 75 05 e8 37 82 a8 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 978.932298][ C0] RSP: 0018:ffffc90003127a80 EFLAGS: 00000282 [ 978.932319][ C0] RAX: 0000000080000000 RBX: 1ffff92000624f54 RCX: ffffffff817b378a [ 978.932338][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5fb020 [ 978.932357][ C0] RBP: ffffc90003127b28 R08: ffffffff942a4937 R09: 1ffffffff2854926 [ 978.932376][ C0] R10: dffffc0000000000 R11: fffffbfff2854927 R12: dffffc0000000000 [ 978.932396][ C0] R13: 1ffff92000624f58 R14: ffffc90003127ac0 R15: 0000000000000201 [ 978.932419][ C0] ? mark_lock+0x9a/0x360 [ 978.932455][ C0] ? neigh_periodic_work+0xbcb/0xde0 [ 978.932488][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 978.932532][ C0] ? neigh_destroy+0x429/0x590 [ 978.932568][ C0] neigh_periodic_work+0xbcb/0xde0 [ 978.932606][ C0] ? process_scheduled_works+0x976/0x1840 [ 978.932633][ C0] process_scheduled_works+0xa68/0x1840 [ 978.932676][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 978.932708][ C0] ? assign_work+0x364/0x3d0 [ 978.932735][ C0] worker_thread+0x870/0xd30 [ 978.932763][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.932790][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 978.932815][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 978.932850][ C0] ? __kthread_parkme+0x169/0x1d0 [ 978.932879][ C0] ? __pfx_worker_thread+0x10/0x10 [ 978.932906][ C0] kthread+0x2f2/0x390 [ 978.932935][ C0] ? __pfx_worker_thread+0x10/0x10 [ 978.932960][ C0] ? __pfx_kthread+0x10/0x10 [ 978.932991][ C0] ret_from_fork+0x4d/0x80 [ 978.933016][ C0] ? __pfx_kthread+0x10/0x10 [ 978.933046][ C0] ret_from_fork_asm+0x1a/0x30 [ 978.933079][ C0] [ 979.572346][ T872] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 979.693174][ T872] ath9k_htc: Failed to initialize the device [ 982.846888][ T5897] usb 5-1: USB disconnect, device number 99 [ 983.484570][ T5897] usb 5-1: ath9k_htc: USB layer deinitialized [ 984.471357][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 984.477716][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 984.486858][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 984.493198][ T1294] ieee802154 phy1 wpan1: encryption failed: -22