last executing test programs: 2m27.016374206s ago: executing program 2 (id=71): r0 = socket$inet(0x2, 0x802, 0x1) getsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2m26.720397601s ago: executing program 2 (id=75): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@discard}, {@nodiscard}, {@nodiscard}, {@nobarrier}]}, 0x1, 0xa18, &(0x7f0000002800)="$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") 2m26.09210405s ago: executing program 2 (id=81): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) 2m25.51027187s ago: executing program 2 (id=87): r0 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000580)={0x53, 0x0, 0x6, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000440)="1518a7a093f1", 0x0, 0x84, 0x0, 0x0, 0x0}) 2m25.275616143s ago: executing program 2 (id=91): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="005901e3fd18fb9c322293c67dcde48bfeffd1843c336e09b34af65ad26aafded7da5cfeeda2b8d8d900c2195f00f646f699eeb47813177405a6a6baf786c0d14f2079a9efa9db8973bcca25eb2973856c6760a483c41d0980c78a4cb096a5affa6b980600000000000000a1eacd2c820176737d4eb55dca564820dd769d8742f6d9ab243775a67afcdf845f978e95365cdf6f30aa43423b381881433e00ccbe6353b21300d8f0ca972589398eef9487db78486fcf174990c488031f8b39cc01bb509f3ea4bcde33d4c9e305ecb4dd88204c5d7bb5e469cabfda0feca3ce70c0acbc34d13e5a5c796eab23abfe3b717834f8e9d7120e1e925c4e210b4152c75210b3e979fbe8ddf23eef2d53733209b22206e0a4afc354c33d7ca2a00116a14d686e4aa86b6ec6a4130178c3ad8c723c0d8506bd7bff780000000000000000004b2ec61cfde813cc124715aaaf5508b93d8cf0860042108b660b74f94b1e4851eeec09fdb7a617eabeeeff8ce8bb99f4b1f9c2896cf31e19c3c24155b0ea7dc3cae1b56acb1946830cad94af3f1caf43ea03b38fc08a7e19480e283a4c0d", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m24.18383354s ago: executing program 2 (id=102): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1a, 0x0) 2m9.065638802s ago: executing program 32 (id=102): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1a, 0x0) 3.21385845s ago: executing program 3 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa}]}]}}}]}, 0x50}}, 0x0) 3.040268773s ago: executing program 1 (id=1968): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="4f300400000002ab0e4b"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.972021094s ago: executing program 3 (id=1969): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x601, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x33) 2.726121068s ago: executing program 3 (id=1975): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) 2.493209611s ago: executing program 3 (id=1980): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xa, 0x0, 0x0) 2.242802635s ago: executing program 3 (id=1984): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2.026219829s ago: executing program 3 (id=1988): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$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") syz_usb_connect(0x3, 0x71, &(0x7f0000000480)=ANY=[@ANYBLOB="120100074ca0b5203360084113cc0102030109025f000107a1407509048002060103ec010905170220009100060725018008ff0009058703ff03d1010702010900100000020000000725"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 1.601720365s ago: executing program 0 (id=1992): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000440)={0x1, 0x2, "ec9fe44d4dbe56a60274fcffffffffffffff14eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f1b46caa357d70ee438f901d76070200004b21482b76f2ad8eaac06f272081f98fd2e3e5a63e009104df635e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bb94b99e6b87de5f79d383d05bb32701daed400785a49788f00faecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) 1.577361135s ago: executing program 4 (id=1994): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@getsadinfo={0x14, 0x23, 0x79801499840ddef3, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000884) 1.467746627s ago: executing program 0 (id=1995): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x59, 0xa, 0x2, "380001000000000000ce3b1b5a3da41b1d00"}) 1.459679557s ago: executing program 4 (id=1996): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3d) 1.435314228s ago: executing program 5 (id=1997): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x10000000) 1.321381139s ago: executing program 0 (id=1998): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x1) 1.31841799s ago: executing program 4 (id=2000): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x6002, 0x4, 0x3f8, 0xf0, 0x0, 0x200, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x1ff, 0x800000}}}, {{@arp={@remote, @remote, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @broadcast, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @local, @dev={0xac, 0x14, 0x14, 0x30}, 0xf, 0x5fa0832aa5fc72f3}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x448) 1.212212321s ago: executing program 5 (id=2002): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001814010000fb00000000000008"], 0x20}}, 0x0) 1.167389402s ago: executing program 1 (id=2003): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0x9, 0x31324d59, 0x3, @stepwise={0xfffffffe, 0x1, 0x3, 0xfffffffd, 0x8}}) 1.127602893s ago: executing program 4 (id=2004): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x1008800, &(0x7f0000000480)=ANY=[], 0x1, 0xda6, &(0x7f0000003c80)="$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") mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) 950.188865ms ago: executing program 1 (id=2005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xdb) 950.056805ms ago: executing program 5 (id=2007): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x0, &(0x7f00000001c0)}) syz_emit_ethernet(0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000242b00fe8000000000000000000000000000aafe8000000000000000000000000000aa2b000000000000003c"], 0x0) 736.685328ms ago: executing program 5 (id=2008): capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x9, 0x0, 0x4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 731.936868ms ago: executing program 0 (id=2009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=ANY=[@ANYBLOB="34000000050601020000000000000000020000090900030063797a30000000000900020073797a3000000000050001"], 0x34}}, 0x844) 664.809419ms ago: executing program 1 (id=2010): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000f80)={'sit0\x00', &(0x7f0000000f40)={'syztnl1\x00', 0x0, 0x8000, 0x7, 0xffff, 0x9, {{0x5, 0x4, 0x1, 0x23, 0x14, 0x68, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @private=0xa010101}}}}) 400.675344ms ago: executing program 0 (id=2011): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x320, 0x1acc02, 0x148, 0x320, 0x10, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x2007, 0x0, 0x78}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x0, 0x80}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xf, 0xfff9, 0x67f, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) 355.752055ms ago: executing program 4 (id=2012): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000230001000000000000000000030100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) 354.907275ms ago: executing program 5 (id=2022): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x255f, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x0, 0x3, 0x4, 0x1000, 0x0, {}, {0x5, 0x2, 0x7f, 0xf9, 0x0, 0x49, "a5595557"}, 0x200, 0x2, {0x0}, 0x5}) 326.932605ms ago: executing program 1 (id=2013): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002200)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0xc000) 151.342407ms ago: executing program 0 (id=2014): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000200)={0x1, 0x8, 0x2}) 124.297578ms ago: executing program 5 (id=2015): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xdf, 0x0, &(0x7f0000000280)="f8ad48cc02cb29dcc8007f5b08009f59d351f20c4daa323693dc0632850f170b71a2f7fed7ffebce9ee657d2f2e0c66696ecbedb1d3eefefedcb355a3a4d062cc89dfe52c0b205587d006c322ff8308ecc5a56ccfa019f254d56ba484c7e7f954a78d429aee58ff38755a769ed97feb4c8530069afb4f981d68c02fc80c850a68a9ad1f543933ccccfd0baee661344b814c85500d7302599", 0x0, 0x4203, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x944}, 0x2c) 68.702459ms ago: executing program 1 (id=2016): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x59, 0xa, 0x2, "380001000000000000ce3b1b5a3da41b1d00"}) 0s ago: executing program 4 (id=2017): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x103000) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000ac0)) kernel console output (not intermixed with test programs): 111.686910][ T5160] JBD2: Ignoring recovery information on journal [ 111.753398][ T5180] ntfs: volume version 3.1. [ 111.772736][ T5160] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.833819][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.866660][ T4483] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.890779][ T4483] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 111.924375][ T4483] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 111.954483][ T4483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.978504][ T4483] usb 2-1: config 0 descriptor?? [ 112.056471][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 112.088979][ T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 112.121581][ T4250] ocfs2: Unmounting device (7,0) on (node local) [ 112.139016][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 112.191839][ T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 112.246545][ T26] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 112.277233][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.305795][ T26] usb 5-1: config 0 descriptor?? [ 112.410078][ T4483] Bluetooth: Can't get version to change to load ram patch err [ 112.410101][ T4483] Bluetooth: Loading patch file failed [ 112.410123][ T4483] ath3k: probe of 2-1:0.0 failed with error -71 [ 112.434185][ T4483] usb 2-1: USB disconnect, device number 3 [ 112.520364][ T26] hdpvr 5-1:0.0: firmware version 0x12 dated [ 112.639180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.684856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.725346][ T26] hdpvr 5-1:0.0: device init failed [ 112.731159][ T26] hdpvr: probe of 5-1:0.0 failed with error -12 [ 112.766023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.779879][ T26] usb 5-1: USB disconnect, device number 3 [ 112.786100][ T4267] Bluetooth: hci5: command 0x040f tx timeout [ 112.794004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.825477][ T5069] device veth0_vlan entered promiscuous mode [ 112.856634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.881265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.923182][ T5069] device veth1_vlan entered promiscuous mode [ 112.999971][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.039567][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.065043][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.089632][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.101325][ T5069] device veth0_macvtap entered promiscuous mode [ 113.129851][ T5069] device veth1_macvtap entered promiscuous mode [ 113.189409][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.207915][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.225942][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.261503][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.272202][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.283305][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.304072][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.321801][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.334718][ T5069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.343301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.353607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.419391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.466704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.489938][ T5213] loop3: detected capacity change from 0 to 256 [ 113.515981][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.537873][ T5215] loop0: detected capacity change from 0 to 256 [ 113.556999][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.567756][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.584081][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.620662][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.637157][ T5213] FAT-fs (loop3): Directory bread(block 64) failed [ 113.647026][ T5213] FAT-fs (loop3): Directory bread(block 65) failed [ 113.671918][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.689706][ T5213] FAT-fs (loop3): Directory bread(block 66) failed [ 113.703902][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.714871][ T5213] FAT-fs (loop3): Directory bread(block 67) failed [ 113.721538][ T5213] FAT-fs (loop3): Directory bread(block 68) failed [ 113.739934][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.755385][ T5212] loop4: detected capacity change from 0 to 4096 [ 113.756907][ T5213] FAT-fs (loop3): Directory bread(block 69) failed [ 113.778841][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.817857][ T5213] FAT-fs (loop3): Directory bread(block 70) failed [ 113.829455][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.868513][ T5213] FAT-fs (loop3): Directory bread(block 71) failed [ 113.896429][ T5069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.904278][ T5213] FAT-fs (loop3): Directory bread(block 72) failed [ 113.914476][ T5213] FAT-fs (loop3): Directory bread(block 73) failed [ 113.935935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.945843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.985955][ T5069] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.032985][ T5069] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.064187][ T5069] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.088820][ T5069] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.139536][ T5212] ntfs: volume version 3.1. [ 114.357812][ T5189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.388181][ T5189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.465437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.561585][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.573627][ T5230] loop1: detected capacity change from 0 to 64 [ 114.584637][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.615394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.863981][ T4267] Bluetooth: hci5: command 0x0419 tx timeout [ 115.054961][ T5249] xt_l2tp: v2 doesn't support IP mode [ 115.225069][ T5254] netlink: 'syz.4.401': attribute type 2 has an invalid length. [ 115.274319][ T5256] loop1: detected capacity change from 0 to 256 [ 115.606377][ T5266] loop4: detected capacity change from 0 to 256 [ 115.671806][ T5266] FAT-fs (loop4): Directory bread(block 64) failed [ 115.740752][ T5266] FAT-fs (loop4): Directory bread(block 65) failed [ 115.791268][ T5266] FAT-fs (loop4): Directory bread(block 66) failed [ 115.823399][ T5266] FAT-fs (loop4): Directory bread(block 67) failed [ 115.849159][ T5266] FAT-fs (loop4): Directory bread(block 68) failed [ 115.873822][ T5266] FAT-fs (loop4): Directory bread(block 69) failed [ 115.884238][ T5266] FAT-fs (loop4): Directory bread(block 70) failed [ 115.902661][ T5266] FAT-fs (loop4): Directory bread(block 71) failed [ 115.942770][ T5266] FAT-fs (loop4): Directory bread(block 72) failed [ 115.980171][ T5266] FAT-fs (loop4): Directory bread(block 73) failed [ 116.343641][ T5260] loop3: detected capacity change from 0 to 32768 [ 116.373879][ T4487] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 116.402162][ T5277] Lens B: ================= START STATUS ================= [ 116.434363][ T5277] Lens B: Focus, Absolute: 0 [ 116.434575][ T5282] deleting an unspecified loop device is not supported. [ 116.439550][ T5277] Lens B: ================== END STATUS ================== [ 116.488093][ T5260] XFS (loop3): Mounting V5 Filesystem [ 116.556906][ T5280] loop0: detected capacity change from 0 to 4096 [ 116.565184][ T5280] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 116.576417][ T4487] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 116.585078][ T4487] usb 6-1: config 8 has no interface number 0 [ 116.591358][ T4487] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 116.602884][ T4487] usb 6-1: config 8 interface 177 has no altsetting 0 [ 116.613058][ T4487] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 116.623364][ T4487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.646840][ T5260] XFS (loop3): Ending clean mount [ 116.668906][ T5272] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 116.681227][ T5260] XFS (loop3): Quotacheck needed: Please wait. [ 116.725120][ T5293] loop4: detected capacity change from 0 to 256 [ 116.751899][ T5293] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.788488][ T5280] ntfs3: loop0: failed to convert "c46c" to cp864 [ 116.811459][ T5293] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 116.854275][ T5291] block device autoloading is deprecated and will be removed. [ 116.862555][ T5260] XFS (loop3): Quotacheck: Done. [ 116.877769][ T5293] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 116.914342][ T4487] usb 6-1: string descriptor 0 read error: -71 [ 116.923452][ C1] ir_toy 6-1:8.177: out urb status: -71 [ 117.171248][ T4249] XFS (loop3): Unmounting Filesystem [ 117.208283][ T5298] loop1: detected capacity change from 0 to 256 [ 117.473963][ T4487] ir_toy 6-1:8.177: could not write reset command: -110 [ 117.491387][ T4487] ir_toy: probe of 6-1:8.177 failed with error -110 [ 117.550992][ T4487] usb 6-1: USB disconnect, device number 2 [ 117.904118][ T4483] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 118.010374][ T5317] loop5: detected capacity change from 0 to 256 [ 118.052628][ T5320] loop4: detected capacity change from 0 to 512 [ 118.095216][ T4483] usb 2-1: not running at top speed; connect to a high speed hub [ 118.104861][ T4483] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 118.153906][ T4483] usb 2-1: config 95 has no interface number 0 [ 118.170213][ T5320] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 118.193823][ T4483] usb 2-1: config 95 interface 1 has no altsetting 0 [ 118.202132][ T5320] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 118.211322][ T5320] System zones: 0-1, 15-15, 18-18, 34-34 [ 118.219768][ T4483] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 118.229335][ T4483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.236159][ T5320] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.237565][ T4483] usb 2-1: Product: syz [ 118.248295][ T4483] usb 2-1: Manufacturer: syz [ 118.252928][ T4483] usb 2-1: SerialNumber: syz [ 118.295165][ T5320] __quota_error: 4 callbacks suppressed [ 118.295181][ T5320] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 118.426328][ T5320] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 118.480248][ T5320] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 118.495660][ T5328] loop0: detected capacity change from 0 to 4096 [ 118.534913][ T5320] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.429: bad orphan inode 16 [ 118.566210][ T5328] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 118.583252][ T5320] ext4_test_bit(bit=15, block=18) = 1 [ 118.591053][ T5320] is_bad_inode(inode)=0 [ 118.598975][ T5328] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 118.619098][ T5320] NEXT_ORPHAN(inode)=0 [ 118.623240][ T5320] max_ino=32 [ 118.629503][ T5328] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 118.655997][ T5320] i_nlink=2 [ 118.656592][ T5328] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 118.659231][ T5320] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 118.704256][ T4483] usb 2-1: USB disconnect, device number 4 [ 118.733412][ T5328] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 118.833732][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.850400][ T5328] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 118.859532][ T5320] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 118.873534][ T5328] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 118.902593][ T5328] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 118.908977][ T5320] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 118.924749][ T5334] xt_ipcomp: unknown flags B [ 118.943194][ T5328] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 118.963436][ T5328] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00 [ 118.995225][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.091503][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 119.270865][ T5338] loop4: detected capacity change from 0 to 8 [ 119.314934][ T5338] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 119.365531][ T4396] udevd[4396]: incorrect cramfs checksum on /dev/loop4 [ 119.387254][ T5337] loop3: detected capacity change from 0 to 2048 [ 119.451367][ T4396] udevd[4396]: incorrect cramfs checksum on /dev/loop4 [ 119.470888][ T5337] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.708161][ T5344] loop4: detected capacity change from 0 to 16 [ 119.776744][ T5344] erofs: (device loop4): mounted with root inode @ nid 36. [ 119.859310][ T5344] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 119.946109][ T5344] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 119.960720][ T5330] loop5: detected capacity change from 0 to 40427 [ 119.971005][ T5344] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 120.016737][ T5330] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 120.076102][ T5330] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 120.152296][ T5330] F2FS-fs (loop5): invalid crc value [ 120.171546][ T5330] F2FS-fs (loop5): Found nat_bits in checkpoint [ 120.188059][ T5357] loop3: detected capacity change from 0 to 256 [ 120.322748][ T5357] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 120.418711][ T5330] F2FS-fs (loop5): recover fsync data on readonly fs [ 120.491731][ T5330] F2FS-fs (loop5): Try to recover 1th superblock, ret: -30 [ 120.537393][ T5330] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 120.744333][ T5330] F2FS-fs (loop5): Try to recover all the superblocks, ret: 0 [ 121.383955][ T4487] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.579442][ T4487] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 121.598208][ T4487] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.633781][ T4487] usb 5-1: config 0 has no interface number 0 [ 121.660760][ T4487] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 121.683817][ T4487] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.736530][ T4487] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 121.773874][ T4487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.802398][ T4487] usb 5-1: Product: syz [ 121.820523][ T4487] usb 5-1: Manufacturer: syz [ 121.829007][ T4487] usb 5-1: SerialNumber: syz [ 121.835603][ T5395] ipt_CLUSTERIP: Please specify destination IP [ 121.855890][ T4487] usb 5-1: config 0 descriptor?? [ 122.142211][ T5385] loop3: detected capacity change from 0 to 32768 [ 122.194131][ T5385] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.459 (5385) [ 122.216893][ T5407] netlink: 'syz.1.469': attribute type 6 has an invalid length. [ 122.236846][ T5385] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 122.289372][ T4487] usb 5-1: USB disconnect, device number 4 [ 122.305313][ T5385] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 122.340058][ T5385] BTRFS info (device loop3): force zlib compression, level 3 [ 122.365431][ T5385] BTRFS info (device loop3): force clearing of disk cache [ 122.395895][ T5385] BTRFS info (device loop3): setting nodatasum [ 122.402145][ T5385] BTRFS info (device loop3): allowing degraded mounts [ 122.415979][ T5385] BTRFS info (device loop3): enabling disk space caching [ 122.423178][ T5385] BTRFS info (device loop3): disk space caching is enabled [ 122.531271][ T5411] loop5: detected capacity change from 0 to 8192 [ 122.557432][ T5411] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.592449][ T5411] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 122.602225][ T5411] FAT-fs (loop5): Filesystem has been set read-only [ 122.633847][ T4253] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.653384][ T5385] BTRFS info (device loop3): rebuilding free space tree [ 122.693996][ T26] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 122.710921][ T5069] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 122.736794][ T5385] BTRFS info (device loop3): disabling free space tree [ 122.759838][ T5385] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.790827][ T5385] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.856397][ T4253] usb 1-1: Using ep0 maxpacket: 16 [ 122.873642][ T4253] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 122.882866][ T4253] usb 1-1: config 0 has no interface number 0 [ 122.893912][ T4253] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.897134][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.930988][ T4253] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 122.934642][ T26] usb 2-1: not running at top speed; connect to a high speed hub [ 122.963936][ T4253] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 122.987560][ T5435] netlink: 'syz.5.474': attribute type 1 has an invalid length. [ 122.997578][ T26] usb 2-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 123.001128][ T4253] usb 1-1: Product: syz [ 123.021667][ T26] usb 2-1: config 219 interface 0 has no altsetting 0 [ 123.043790][ T26] usb 2-1: config 219 interface 0 has no altsetting 1 [ 123.048834][ T4253] usb 1-1: SerialNumber: syz [ 123.072799][ T26] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 123.094563][ T4253] usb 1-1: config 0 descriptor?? [ 123.094663][ T5385] BTRFS info (device loop3): balance: start -sconvert=raid0,devid=0,limit=65537,limit=65537..0,stripes=4294967292..32763 [ 123.120806][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.139528][ T26] usb 2-1: Product: syz [ 123.149517][ T26] usb 2-1: Manufacturer: syz [ 123.158833][ T26] usb 2-1: SerialNumber: syz [ 123.164038][ T4253] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input12 [ 123.206879][ T5385] BTRFS info (device loop3): balance: ended with status: 0 [ 123.362484][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.371468][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.379321][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.386735][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.403904][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.423676][ T26] usb 2-1: selecting invalid altsetting 0 [ 123.434063][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.441421][ T4253] usb 1-1: USB disconnect, device number 4 [ 123.447636][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.454639][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 123.494176][ T4249] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 123.515934][ T4253] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 123.620070][ T26] snd-usb-audio: probe of 2-1:219.0 failed with error -22 [ 123.668653][ T4492] udevd[4492]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.691152][ T26] usb 2-1: USB disconnect, device number 5 [ 124.009138][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 124.092482][ T5457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 124.102182][ T5457] netlink: 'syz.4.484': attribute type 1 has an invalid length. [ 124.319762][ T5463] loop4: detected capacity change from 0 to 256 [ 124.355040][ T5465] xt_SECMARK: invalid mode: 2 [ 124.697589][ T5475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.705549][ T5475] IPv6: NLM_F_CREATE should be set when creating new route [ 124.712916][ T5475] IPv6: NLM_F_CREATE should be set when creating new route [ 124.867823][ T5477] loop4: detected capacity change from 0 to 64 [ 124.957507][ T5482] overlayfs: missing 'lowerdir' [ 125.487444][ T5499] netlink: 112 bytes leftover after parsing attributes in process `syz.5.503'. [ 125.506200][ T5460] loop3: detected capacity change from 0 to 32768 [ 125.525968][ T5499] netlink: 'syz.5.503': attribute type 1 has an invalid length. [ 125.667166][ T5460] XFS (loop3): Mounting V5 Filesystem [ 125.797514][ T5460] XFS (loop3): Ending clean mount [ 125.895107][ T5460] XFS (loop3): Quotacheck needed: Please wait. [ 126.005780][ T5460] XFS (loop3): Quotacheck: Done. [ 126.372665][ T4249] XFS (loop3): Unmounting Filesystem [ 126.772614][ T5539] loop0: detected capacity change from 0 to 4096 [ 126.884604][ T5539] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 126.922768][ T5539] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 127.121421][ T4250] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 127.151099][ T5551] loop5: detected capacity change from 0 to 8 [ 127.159240][ T4250] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 127.534459][ T5535] loop1: detected capacity change from 0 to 32768 [ 127.563197][ T5535] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.517 (5535) [ 127.652735][ T5535] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 127.700507][ T5535] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 127.753172][ T5535] BTRFS info (device loop1): force clearing of disk cache [ 127.775048][ T5535] BTRFS info (device loop1): setting nodatasum [ 127.806208][ T5535] BTRFS info (device loop1): allowing degraded mounts [ 127.825848][ T5535] BTRFS info (device loop1): use zlib compression, level 3 [ 127.858027][ T5567] loop0: detected capacity change from 0 to 256 [ 127.869018][ T5569] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 127.872867][ T5535] BTRFS info (device loop1): using free space tree [ 127.956709][ T5567] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 128.105353][ T5567] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 128.122026][ T27] audit: type=1326 audit(1750717157.805:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2d38e929 code=0x7ffc0000 [ 128.303828][ T27] audit: type=1326 audit(1750717157.865:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fea2d38e929 code=0x7ffc0000 [ 128.331292][ T5535] BTRFS info (device loop1): enabling ssd optimizations [ 128.463925][ T27] audit: type=1326 audit(1750717157.865:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2d38e929 code=0x7ffc0000 [ 128.527673][ T5598] loop5: detected capacity change from 0 to 256 [ 128.544300][ T5600] netlink: 'syz.3.538': attribute type 24 has an invalid length. [ 128.591507][ T27] audit: type=1326 audit(1750717157.865:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2d38e929 code=0x7ffc0000 [ 128.613751][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.662317][ T4252] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 128.875908][ T4791] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by udevd (4791) [ 129.040534][ T5607] netlink: 24 bytes leftover after parsing attributes in process `syz.5.542'. [ 129.313024][ T5616] hsr0: VLAN not yet supported [ 129.430384][ T5618] netlink: 1 bytes leftover after parsing attributes in process `syz.5.549'. [ 129.495718][ T5579] loop4: detected capacity change from 0 to 32768 [ 129.754795][ T5579] XFS (loop4): Mounting V5 Filesystem [ 129.918772][ T5579] XFS (loop4): Ending clean mount [ 129.974691][ T5579] XFS (loop4): Quotacheck needed: Please wait. [ 130.069479][ T5579] XFS (loop4): Quotacheck: Done. [ 130.119474][ T5646] sctp: [Deprecated]: syz.1.559 (pid 5646) Use of int in max_burst socket option deprecated. [ 130.119474][ T5646] Use struct sctp_assoc_value instead [ 130.360540][ T4251] XFS (loop4): Unmounting Filesystem [ 130.556823][ T5658] netlink: 'syz.0.565': attribute type 21 has an invalid length. [ 130.584139][ T5658] netlink: 132 bytes leftover after parsing attributes in process `syz.0.565'. [ 130.954989][ T5671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.367463][ T5687] program syz.0.578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.511707][ T14] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 131.704957][ T14] usb 6-1: Using ep0 maxpacket: 16 [ 131.718061][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.761511][ T14] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 131.771082][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.791405][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.810689][ T14] usb 6-1: Product: syz [ 131.815265][ T14] usb 6-1: Manufacturer: syz [ 131.819904][ T14] usb 6-1: SerialNumber: syz [ 131.868241][ T14] usb 6-1: config 0 descriptor?? [ 131.887645][ T14] hub 6-1:0.0: bad descriptor, ignoring hub [ 131.902648][ T5700] loop0: detected capacity change from 0 to 2048 [ 131.911507][ T14] hub: probe of 6-1:0.0 failed with error -5 [ 131.930332][ T14] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input13 [ 131.952670][ T5700] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 131.961520][ T5680] loop1: detected capacity change from 0 to 32768 [ 131.974243][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 131.994779][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 132.009758][ T7] usb 5-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 132.028504][ T7] usb 5-1: config 8 interface 0 has no altsetting 0 [ 132.043915][ T7] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 132.055289][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.063467][ T7] usb 5-1: Product: syz [ 132.068266][ T7] usb 5-1: Manufacturer: syz [ 132.073158][ T7] usb 5-1: SerialNumber: syz [ 132.080416][ T5700] UDF-fs: unknown compression code (0) [ 132.091930][ T5690] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 132.180171][ T5680] XFS (loop1): Mounting V5 Filesystem [ 132.314922][ T7] usb 5-1: selecting invalid altsetting 0 [ 132.364899][ T14] usb 6-1: USB disconnect, device number 3 [ 132.373031][ T5680] XFS (loop1): Ending clean mount [ 132.402913][ T7] usb 5-1: USB disconnect, device number 5 [ 132.446972][ T5680] XFS (loop1): Quotacheck needed: Please wait. [ 132.546903][ T5680] XFS (loop1): Quotacheck: Done. [ 132.685386][ T4792] udevd[4792]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.713558][ T4252] XFS (loop1): Unmounting Filesystem [ 132.866692][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.873064][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.091033][ T5729] loop4: detected capacity change from 0 to 256 [ 133.197906][ T5735] netlink: 144 bytes leftover after parsing attributes in process `syz.3.600'. [ 133.508486][ T5742] loop1: detected capacity change from 0 to 256 [ 133.632713][ T5742] FAT-fs (loop1): Directory bread(block 64) failed [ 133.648416][ T5742] FAT-fs (loop1): Directory bread(block 65) failed [ 133.681955][ T5742] FAT-fs (loop1): Directory bread(block 66) failed [ 133.730477][ T5742] FAT-fs (loop1): Directory bread(block 67) failed [ 133.770617][ T5742] FAT-fs (loop1): Directory bread(block 68) failed [ 133.796397][ T5742] FAT-fs (loop1): Directory bread(block 69) failed [ 133.820321][ T5742] FAT-fs (loop1): Directory bread(block 70) failed [ 133.846488][ T5742] FAT-fs (loop1): Directory bread(block 71) failed [ 133.866726][ T5742] FAT-fs (loop1): Directory bread(block 72) failed [ 133.878542][ T5755] loop5: detected capacity change from 0 to 64 [ 133.890304][ T5742] FAT-fs (loop1): Directory bread(block 73) failed [ 134.172667][ T5762] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.610'. [ 134.212148][ T5762] netlink: zone id is out of range [ 134.241233][ T5739] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 134.323918][ T4479] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.533896][ T4479] usb 5-1: Using ep0 maxpacket: 16 [ 134.542096][ T4479] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.627411][ T4479] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 134.654282][ T4479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.681283][ T4479] usb 5-1: Product: syz [ 134.691337][ T4479] usb 5-1: Manufacturer: syz [ 134.698441][ T4479] usb 5-1: SerialNumber: syz [ 134.717875][ T4479] usb 5-1: config 0 descriptor?? [ 134.758116][ T4479] hub 5-1:0.0: bad descriptor, ignoring hub [ 134.774547][ T4479] hub: probe of 5-1:0.0 failed with error -5 [ 134.783498][ T4479] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 134.874081][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.063908][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 135.071173][ T7] usb 2-1: config 0 has an invalid interface number: 99 but max is 0 [ 135.099567][ T7] usb 2-1: config 0 has no interface number 0 [ 135.116504][ T7] usb 2-1: config 0 interface 99 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 135.149758][ T7] usb 2-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 135.192715][ T7] usb 2-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=63.0c [ 135.212137][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.232403][ T7] usb 2-1: Product: syz [ 135.236711][ T7] usb 2-1: Manufacturer: syz [ 135.247098][ T7] usb 2-1: SerialNumber: syz [ 135.259703][ T5796] loop5: detected capacity change from 0 to 4096 [ 135.268232][ T7] usb 2-1: config 0 descriptor?? [ 135.273934][ T5778] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 135.283103][ T5778] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 135.290542][ T5796] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 135.302480][ T7] usbtest 2-1:0.99: usb test device [ 135.309953][ T7] usbtest 2-1:0.99: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 135.405674][ T5796] ntfs3: loop5: failed to convert "c46c" to koi8-r [ 135.553582][ T7] usb 2-1: USB disconnect, device number 6 [ 135.672369][ T4479] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 135.790793][ T5811] xt_TCPMSS: Only works on TCP SYN packets [ 135.865583][ T4479] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.887338][ T4479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 135.907539][ T4479] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 135.920772][ T5816] SET target dimension over the limit! [ 135.936735][ T4479] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.978922][ T4479] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 135.989440][ T4479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.997806][ T4479] usb 1-1: Product: syz [ 136.002702][ T4479] usb 1-1: Manufacturer: syz [ 136.007925][ T4479] usb 1-1: SerialNumber: syz [ 136.035944][ T4479] usb 1-1: config 0 descriptor?? [ 136.054105][ T4479] redrat3 1-1:0.0: Couldn't find all endpoints [ 136.276379][ T7] usb 1-1: USB disconnect, device number 5 [ 136.593503][ T5835] loop1: detected capacity change from 0 to 4096 [ 136.667517][ T4253] usb 5-1: USB disconnect, device number 6 [ 136.692041][ T5835] ntfs: volume version 3.1. [ 136.750281][ T5835] ntfs: (device loop1): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 137.274207][ T5855] delete_channel: no stack [ 137.588272][ T5857] loop0: detected capacity change from 0 to 4096 [ 137.632997][ T5857] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 137.677837][ T5871] loop5: detected capacity change from 0 to 64 [ 138.071322][ T5879] xt_TCPMSS: Only works on TCP SYN packets [ 138.197497][ T5881] loop4: detected capacity change from 0 to 4096 [ 138.252011][ T5881] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 138.285180][ T52] block nbd5: Attempted send on invalid socket [ 138.291426][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 138.488135][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.713849][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 138.722071][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 138.786002][ T7] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 138.825837][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.858153][ T5908] loop5: detected capacity change from 0 to 1024 [ 138.865596][ T7] usb 1-1: Product: syz [ 138.869806][ T7] usb 1-1: Manufacturer: syz [ 138.914089][ T7] usb 1-1: SerialNumber: syz [ 138.941015][ T7] usb 1-1: config 0 descriptor?? [ 138.970538][ T7] hub 1-1:0.0: bad descriptor, ignoring hub [ 138.996284][ T7] hub: probe of 1-1:0.0 failed with error -5 [ 139.014872][ T7] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 139.083104][ T5912] loop1: detected capacity change from 0 to 1024 [ 139.383075][ T9] hfsplus: b-tree write err: -5, ino 4 [ 139.510944][ T5922] netlink: 96 bytes leftover after parsing attributes in process `syz.5.686'. [ 139.567676][ T5920] loop3: detected capacity change from 0 to 4096 [ 139.601239][ T5920] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 139.733299][ T5920] ntfs3: loop3: failed to convert "c46c" to koi8-r [ 139.753104][ T5928] loop1: detected capacity change from 0 to 256 [ 140.099424][ T5936] loop5: detected capacity change from 0 to 512 [ 140.155760][ T5936] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.206360][ T5936] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 140.224027][ T5936] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.237663][ T5945] netlink: 2 bytes leftover after parsing attributes in process `syz.3.694'. [ 140.467199][ T5069] EXT4-fs (loop5): unmounting filesystem. [ 140.964391][ T952] usb 1-1: USB disconnect, device number 6 [ 141.053927][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 141.243977][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 141.252391][ T14] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 141.296662][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.317931][ T14] usb 2-1: config 0 has no interface number 0 [ 141.334999][ T14] usb 2-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 141.363960][ T14] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 55438, setting to 1024 [ 141.399735][ T14] usb 2-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 141.434856][ T14] usb 2-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.482919][ T14] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 141.514002][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.541109][ T27] audit: type=1400 audit(1750717172.228:38): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=5984 comm="syz.3.713" [ 141.542864][ T14] usb 2-1: Product: syz [ 141.633804][ T14] usb 2-1: Manufacturer: syz [ 141.660029][ T14] usb 2-1: SerialNumber: syz [ 141.684940][ T14] usb 2-1: config 0 descriptor?? [ 141.694786][ T5962] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 141.704978][ T5962] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 142.016763][ T14] usb 2-1: probing VID:PID(0424:012C) [ 142.031472][ T14] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0B [ 142.052176][ T14] usb 2-1: vub300 testing BULK OUT EndPoint(1) 0F [ 142.065416][ T6005] netlink: 14 bytes leftover after parsing attributes in process `syz.4.721'. [ 142.090302][ T14] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 142.116959][ T14] vub300: probe of 2-1:0.133 failed with error -22 [ 142.162091][ T14] usb 2-1: USB disconnect, device number 7 [ 143.091271][ T4482] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.305459][ T4482] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 143.333812][ T4482] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.351503][ T4482] usb 2-1: config 0 has no interface number 0 [ 143.374105][ T4482] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 143.414656][ T4482] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.466164][ T4482] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 143.505951][ T4482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.526210][ T4482] usb 2-1: Product: syz [ 143.530449][ T4482] usb 2-1: Manufacturer: syz [ 143.562692][ T4482] usb 2-1: SerialNumber: syz [ 143.575450][ T4482] usb 2-1: config 0 descriptor?? [ 144.053335][ T4295] usb 2-1: USB disconnect, device number 8 [ 144.142406][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.758'. [ 144.183862][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.758'. [ 144.197765][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.758'. [ 144.772981][ T6095] netlink: 830 bytes leftover after parsing attributes in process `syz.3.767'. [ 145.283775][ T4482] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 145.493991][ T4482] usb 2-1: Using ep0 maxpacket: 8 [ 145.501700][ T4482] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 145.529516][ T4482] usb 2-1: config 0 has no interface number 0 [ 145.546131][ T4482] usb 2-1: config 0 interface 239 altsetting 0 endpoint 0x3 has invalid maxpacket 51986, setting to 1024 [ 145.608373][ T4482] usb 2-1: config 0 interface 239 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 145.668222][ T4482] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 145.682612][ T6124] tmpfs: Bad value for 'mpol' [ 145.700081][ T4482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.723821][ T4482] usb 2-1: Product: syz [ 145.728052][ T4482] usb 2-1: Manufacturer: syz [ 145.743299][ T4482] usb 2-1: SerialNumber: syz [ 145.762639][ T4482] usb 2-1: config 0 descriptor?? [ 145.789848][ T6101] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 146.022657][ T4482] ath6kl: Failed to submit usb control message: -71 [ 146.033841][ T4482] ath6kl: unable to send the bmi data to the device: -71 [ 146.043405][ T4482] ath6kl: Unable to send get target info: -71 [ 146.066332][ T6135] loop5: detected capacity change from 0 to 1764 [ 146.078411][ T6115] loop4: detected capacity change from 0 to 32768 [ 146.091140][ T4482] ath6kl: Failed to init ath6kl core: -71 [ 146.135334][ T6115] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 146.182818][ T4482] ath6kl_usb: probe of 2-1:0.239 failed with error -71 [ 146.183970][ T6115] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 146.222531][ T4482] usb 2-1: USB disconnect, device number 9 [ 146.247357][ T6115] BTRFS info (device loop4): force zlib compression, level 3 [ 146.295436][ T6135] syz.5.784: attempt to access beyond end of device [ 146.295436][ T6135] loop5: rw=524288, sector=1936, nr_sectors = 256 limit=1764 [ 146.299870][ T6115] BTRFS info (device loop4): force clearing of disk cache [ 146.325836][ T6115] BTRFS info (device loop4): setting nodatasum [ 146.332577][ T6115] BTRFS info (device loop4): allowing degraded mounts [ 146.342958][ T6115] BTRFS info (device loop4): enabling disk space caching [ 146.352029][ T6115] BTRFS info (device loop4): disk space caching is enabled [ 146.362647][ T6135] syz.5.784: attempt to access beyond end of device [ 146.362647][ T6135] loop5: rw=524288, sector=2192, nr_sectors = 256 limit=1764 [ 146.378107][ T6135] syz.5.784: attempt to access beyond end of device [ 146.378107][ T6135] loop5: rw=0, sector=1936, nr_sectors = 8 limit=1764 [ 146.393054][ T27] audit: type=1800 audit(1750717177.078:39): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.784" name="file0" dev="loop5" ino=1986 res=0 errno=0 [ 146.501646][ T6139] loop3: detected capacity change from 0 to 4096 [ 146.539164][ T6139] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 146.635630][ T6115] BTRFS info (device loop4): rebuilding free space tree [ 146.751342][ T6139] ntfs3: loop3: failed to convert "c46c" to cp857 [ 146.764058][ T6115] BTRFS info (device loop4): disabling free space tree [ 146.771144][ T6115] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.854019][ T6115] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.028855][ T6115] BTRFS info (device loop4): balance: start -sconvert=raid0,devid=0,limit=65537,limit=65537..0,stripes=4294967292..32763 [ 147.028992][ T6115] BTRFS info (device loop4): balance: ended with status: 0 [ 147.201314][ T4251] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 147.629018][ T5717] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 13 /dev/loop4 scanned by udevd (5717) [ 147.773403][ T6186] loop3: detected capacity change from 0 to 2048 [ 147.881520][ T6186] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.967903][ T6186] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 148.006146][ T6192] block device autoloading is deprecated and will be removed. [ 148.032646][ T6186] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 148.970635][ T6222] ip6t_srh: unknown srh match flags 5294 [ 149.090902][ T6225] device ip6gretap1 entered promiscuous mode [ 149.324801][ T6228] loop5: detected capacity change from 0 to 4096 [ 149.345207][ T4478] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 149.366473][ T6228] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 149.494918][ T6228] ntfs3: loop5: failed to convert "c46c" to cp857 [ 149.544017][ T4478] usb 1-1: Using ep0 maxpacket: 16 [ 149.569461][ T4478] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 149.622862][ T4478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.658318][ T4478] usb 1-1: Product: syz [ 149.667624][ T4478] usb 1-1: Manufacturer: syz [ 149.672296][ T4478] usb 1-1: SerialNumber: syz [ 149.714759][ T4478] usb 1-1: config 0 descriptor?? [ 149.755706][ T4478] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 149.852215][ T6243] netlink: 'syz.4.828': attribute type 21 has an invalid length. [ 149.882208][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 150.136492][ T4478] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 150.153976][ T4478] visor: probe of 1-1:0.0 failed with error -71 [ 150.171660][ T4478] usb 1-1: USB disconnect, device number 7 [ 150.526145][ T6264] loop1: detected capacity change from 0 to 64 [ 150.773853][ T4478] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 150.955775][ T4478] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 150.991175][ T4478] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.024784][ T4478] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 151.065483][ T4478] usb 5-1: config 1 has no interface number 1 [ 151.097026][ T4478] usb 5-1: too many endpoints for config 1 interface 2 altsetting 116: 104, using maximum allowed: 30 [ 151.123857][ T4478] usb 5-1: config 1 interface 2 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 151.184510][ T4478] usb 5-1: config 1 interface 2 has no altsetting 1 [ 151.217850][ T4478] usb 5-1: string descriptor 0 read error: -22 [ 151.233832][ T4478] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.242935][ T4478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.300971][ T4478] usb 5-1: MIDIStreaming interface descriptor not found [ 151.530520][ T4327] usb 5-1: USB disconnect, device number 7 [ 151.745767][ T6299] loop3: detected capacity change from 0 to 4096 [ 151.779467][ T6299] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 151.847042][ T6299] ntfs3: loop3: failed to convert "c46c" to iso8859-3 [ 152.290079][ T6318] netlink: 32 bytes leftover after parsing attributes in process `syz.1.864'. [ 152.300914][ T6319] loop4: detected capacity change from 0 to 16 [ 152.320934][ T6319] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 152.730495][ T6327] loop0: detected capacity change from 0 to 4096 [ 152.757211][ T6333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.880'. [ 152.826951][ T6327] ntfs: volume version 3.1. [ 153.053945][ T4295] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 153.241329][ T6345] xt_TPROXY: Can be used only with -p tcp or -p udp [ 153.258923][ T4295] usb 6-1: Using ep0 maxpacket: 8 [ 153.266639][ T4295] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 153.294536][ T4295] usb 6-1: config 0 has no interface number 0 [ 153.307102][ T4295] usb 6-1: config 0 interface 239 altsetting 0 endpoint 0x3 has invalid maxpacket 51986, setting to 1024 [ 153.338925][ T4295] usb 6-1: config 0 interface 239 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 153.377420][ T4295] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 153.403775][ T4295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.434357][ T4295] usb 6-1: Product: syz [ 153.438650][ T4295] usb 6-1: Manufacturer: syz [ 153.472344][ T4295] usb 6-1: SerialNumber: syz [ 153.492326][ T4295] usb 6-1: config 0 descriptor?? [ 153.515084][ T6335] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 153.660106][ T6360] loop4: detected capacity change from 0 to 1024 [ 153.734223][ T4295] ath6kl: Failed to submit usb control message: -71 [ 153.749347][ T4295] ath6kl: unable to send the bmi data to the device: -71 [ 153.780052][ T4295] ath6kl: Unable to send get target info: -71 [ 153.804924][ T4295] ath6kl: Failed to init ath6kl core: -71 [ 153.849300][ T6364] loop0: detected capacity change from 0 to 8 [ 153.892843][ T4295] ath6kl_usb: probe of 6-1:0.239 failed with error -71 [ 153.929279][ T4295] usb 6-1: USB disconnect, device number 4 [ 154.081671][ T6364] SQUASHFS error: xz decompression failed, data probably corrupt [ 154.114080][ T6364] SQUASHFS error: Failed to read block 0x60: -5 [ 154.150912][ T6374] kAFS: No cell specified [ 154.164088][ T6364] SQUASHFS error: xz decompression failed, data probably corrupt [ 154.173436][ T6364] SQUASHFS error: Failed to read block 0x60: -5 [ 154.194928][ T27] audit: type=1800 audit(1750717184.885:40): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.885" name="file1" dev="loop0" ino=1 res=0 errno=0 [ 154.390663][ T6381] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.892' sets config #1 [ 154.993816][ T5450] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.195594][ T5450] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 155.234547][ T5450] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 155.253838][ T5450] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 155.273455][ T5450] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.346302][ T5450] usb 5-1: config 0 descriptor?? [ 155.580296][ T14] usb 5-1: USB disconnect, device number 8 [ 155.790841][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 156.006428][ T6437] netlink: 'syz.1.921': attribute type 9 has an invalid length. [ 156.444984][ T6451] loop0: detected capacity change from 0 to 1024 [ 156.577060][ T6451] hfsplus: extend alloc file! (8192,512,16777721) [ 157.055040][ T27] audit: type=1326 audit(1750717187.750:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7898e929 code=0x7ffc0000 [ 157.143854][ T27] audit: type=1326 audit(1750717187.770:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f8d7898e929 code=0x7ffc0000 [ 157.223865][ T27] audit: type=1326 audit(1750717187.770:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7898e929 code=0x7ffc0000 [ 157.333803][ T27] audit: type=1326 audit(1750717187.770:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7898e929 code=0x7ffc0000 [ 157.442716][ T6475] loop5: detected capacity change from 0 to 4096 [ 157.501747][ T6475] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 157.721401][ T6475] ntfs3: loop5: failed to convert "c46c" to iso8859-3 [ 157.748416][ T6489] loop4: detected capacity change from 0 to 256 [ 158.415512][ T6500] loop3: detected capacity change from 0 to 8192 [ 158.420473][ T6501] loop4: detected capacity change from 0 to 4096 [ 158.449505][ T6501] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 158.475340][ T6500] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 158.536393][ T6513] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 158.587279][ T6501] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 158.593813][ T6500] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 158.612958][ T6500] REISERFS (device loop3): using ordered data mode [ 158.630019][ T6500] reiserfs: using flush barriers [ 158.637500][ T6500] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.724934][ T6500] REISERFS (device loop3): checking transaction log (loop3) [ 158.751161][ T6518] loop1: detected capacity change from 0 to 1024 [ 158.767142][ T6500] REISERFS (device loop3): Using tea hash to sort names [ 158.804742][ T6500] REISERFS (device loop3): using 3.5.x disk format [ 159.119721][ T6527] loop5: detected capacity change from 0 to 512 [ 159.196926][ T6527] EXT4-fs: Ignoring removed nobh option [ 159.239563][ T6531] loop4: detected capacity change from 0 to 8 [ 159.327111][ T6527] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.966: invalid indirect mapped block 256 (level 2) [ 159.377229][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.970'. [ 159.415498][ T6527] EXT4-fs (loop5): 2 truncates cleaned up [ 159.435455][ T6527] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 159.493907][ T6531] SQUASHFS error: xz decompression failed, data probably corrupt [ 159.509386][ T6527] EXT4-fs error (device loop5): empty_inline_dir:1877: inode #12: block 7: comm syz.5.966: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 159.530101][ T6538] loop1: detected capacity change from 0 to 256 [ 159.559969][ T6531] SQUASHFS error: Failed to read block 0x60: -5 [ 159.590952][ T6527] EXT4-fs warning (device loop5): empty_inline_dir:1884: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 159.620515][ T6531] SQUASHFS error: xz decompression failed, data probably corrupt [ 159.631556][ T6531] SQUASHFS error: Failed to read block 0x60: -5 [ 159.657979][ T6538] FAT-fs (loop1): Directory bread(block 64) failed [ 159.667545][ T27] audit: type=1800 audit(1750717190.360:45): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.968" name="file1" dev="loop4" ino=1 res=0 errno=0 [ 159.703998][ T6538] FAT-fs (loop1): Directory bread(block 65) failed [ 159.710701][ T6538] FAT-fs (loop1): Directory bread(block 66) failed [ 159.742591][ T5069] EXT4-fs (loop5): unmounting filesystem. [ 159.746852][ T6538] FAT-fs (loop1): Directory bread(block 67) failed [ 159.779291][ T6538] FAT-fs (loop1): Directory bread(block 68) failed [ 159.823997][ T6538] FAT-fs (loop1): Directory bread(block 69) failed [ 159.830697][ T6538] FAT-fs (loop1): Directory bread(block 70) failed [ 159.881898][ T6538] FAT-fs (loop1): Directory bread(block 71) failed [ 159.911503][ T6538] FAT-fs (loop1): Directory bread(block 72) failed [ 159.941087][ T6538] FAT-fs (loop1): Directory bread(block 73) failed [ 159.956324][ T6544] loop3: detected capacity change from 0 to 512 [ 160.029307][ T6544] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 160.073567][ T6544] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.186367][ T6544] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 160.307221][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 160.316258][ T27] audit: type=1400 audit(1750717191.010:46): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=6553 comm="syz.4.977" [ 160.550218][ T6564] netlink: 'syz.1.981': attribute type 4 has an invalid length. [ 160.613859][ T6564] netlink: 152 bytes leftover after parsing attributes in process `syz.1.981'. [ 160.662160][ T6564] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 161.083031][ T6582] loop3: detected capacity change from 0 to 512 [ 161.159754][ T27] audit: type=1326 audit(1750717191.850:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796638e929 code=0x7ffc0000 [ 161.203204][ T6582] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 161.304075][ T6582] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.332944][ T27] audit: type=1326 audit(1750717191.900:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f796638e929 code=0x7ffc0000 [ 161.375312][ T27] audit: type=1326 audit(1750717191.900:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796638e929 code=0x7ffc0000 [ 161.493790][ T27] audit: type=1326 audit(1750717191.900:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796638e929 code=0x7ffc0000 [ 161.571486][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 162.053301][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1006'. [ 162.095766][ T27] audit: type=1400 audit(1750717192.790:51): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=6613 comm="syz.5.1005" [ 162.234042][ T4478] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 162.297563][ T6622] netlink: 'syz.4.1008': attribute type 16 has an invalid length. [ 162.314123][ T6622] netlink: 'syz.4.1008': attribute type 17 has an invalid length. [ 162.338812][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.355113][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.375831][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.400225][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.426802][ T4478] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 162.450341][ T4478] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 162.450777][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 162.474146][ T4478] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 162.492410][ T4478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.519454][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 162.574793][ T4478] usb 4-1: config 0 descriptor?? [ 162.688597][ T6631] netlink: 'syz.5.1015': attribute type 21 has an invalid length. [ 162.747584][ T6631] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1015'. [ 162.821595][ T4478] usb 4-1: USB disconnect, device number 4 [ 163.357688][ T6652] device xfrm1 entered promiscuous mode [ 163.593101][ T6658] loop5: detected capacity change from 0 to 256 [ 164.623924][ T6688] netlink: 'syz.3.1044': attribute type 16 has an invalid length. [ 164.694455][ T6688] netlink: 'syz.3.1044': attribute type 17 has an invalid length. [ 164.738867][ T6688] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.752758][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1045'. [ 164.781758][ T6688] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.807948][ T6688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.835211][ T6688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.864700][ T6688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.912565][ T6688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.960163][ T6688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.017493][ T6698] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1047'. [ 165.468858][ T6715] loop1: detected capacity change from 0 to 1024 [ 165.475359][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1056'. [ 165.621918][ T6715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 165.786540][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 166.101135][ T6737] netlink: 'syz.3.1066': attribute type 10 has an invalid length. [ 166.192676][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.202279][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.310941][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.318174][ T6737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.326904][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.334106][ T6737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.396905][ T6737] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 166.416707][ T6749] loop5: detected capacity change from 0 to 128 [ 166.585086][ T6749] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 166.651119][ T6749] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.788979][ T5069] EXT4-fs (loop5): unmounting filesystem. [ 167.463406][ T6784] loop5: detected capacity change from 0 to 2048 [ 167.499700][ T6784] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.614107][ T6784] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 167.653885][ T6784] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has too big (65320) entry at pos 0 [ 167.876694][ T6763] loop0: detected capacity change from 0 to 32768 [ 167.971270][ T6763] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1076 (6763) [ 168.044520][ T6763] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.082766][ T6763] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 168.136566][ T6763] BTRFS info (device loop0): using free space tree [ 168.178351][ T6772] loop4: detected capacity change from 0 to 32768 [ 168.363908][ T6772] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 168.542812][ T6763] BTRFS info (device loop0): enabling ssd optimizations [ 168.683121][ T6829] loop5: detected capacity change from 0 to 128 [ 168.695162][ T4251] ocfs2: Unmounting device (7,4) on (node local) [ 168.747490][ T4250] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.785688][ T6829] befs: Unrecognized mount option "syzkaller0" or missing value [ 169.231447][ T4791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4791) [ 169.311257][ T6842] loop1: detected capacity change from 0 to 256 [ 169.404322][ T6842] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe55691ff, utbl_chksum : 0xe619d30d) [ 169.473262][ T6842] syz.1.1107: attempt to access beyond end of device [ 169.473262][ T6842] loop1: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 169.923175][ T6862] overlayfs: conflicting options: nfs_export=on,index=off [ 169.973948][ T6860] XFS (nullb0): Invalid superblock magic number [ 170.272390][ T6879] netlink: 'syz.4.1122': attribute type 13 has an invalid length. [ 170.306980][ T6879] netlink: 'syz.4.1122': attribute type 14 has an invalid length. [ 170.353859][ T6879] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1122'. [ 170.535429][ T6884] loop3: detected capacity change from 0 to 2048 [ 170.587135][ T27] audit: type=1326 audit(1750717201.280:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7898e929 code=0x7ffc0000 [ 170.659027][ T6884] loop3: p2 < > [ 170.669380][ T27] audit: type=1326 audit(1750717201.300:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f8d7898e929 code=0x7ffc0000 [ 170.736363][ T3623] loop3: p2 < > [ 170.770055][ T27] audit: type=1326 audit(1750717201.300:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7898e929 code=0x7ffc0000 [ 170.833776][ T27] audit: type=1326 audit(1750717201.300:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.4.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7898e929 code=0x7ffc0000 [ 170.897796][ T6899] loop4: detected capacity change from 0 to 128 [ 170.956434][ T4791] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.995129][ T6899] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 171.123969][ T6899] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.326635][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 171.417412][ T4791] udevd[4791]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 171.747955][ T6931] loop1: detected capacity change from 0 to 1024 [ 171.776825][ T6933] netlink: 'syz.5.1144': attribute type 10 has an invalid length. [ 171.797847][ T6931] EXT4-fs: Ignoring removed orlov option [ 171.819125][ T6931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.845408][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.853020][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.898233][ T6931] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 171.910494][ T6936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1149'. [ 171.957814][ T6931] System zones: 0-1, 3-36 [ 171.969504][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.976760][ T6933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.984271][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.991448][ T6933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.996447][ T6931] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 172.009967][ T6933] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 172.100074][ T6942] loop0: detected capacity change from 0 to 128 [ 172.110769][ T6941] loop4: detected capacity change from 0 to 512 [ 172.185082][ T6942] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 172.207040][ T6946] loop3: detected capacity change from 0 to 256 [ 172.267661][ T6942] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.286422][ T6941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.304033][ T6941] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.385895][ T6946] FAT-fs (loop3): Directory bread(block 64) failed [ 172.392504][ T6946] FAT-fs (loop3): Directory bread(block 65) failed [ 172.400708][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 172.439059][ T6946] FAT-fs (loop3): Directory bread(block 66) failed [ 172.479433][ T6946] FAT-fs (loop3): Directory bread(block 67) failed [ 172.500079][ T6946] FAT-fs (loop3): Directory bread(block 68) failed [ 172.513548][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 172.542220][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 172.546882][ T6946] FAT-fs (loop3): Directory bread(block 69) failed [ 172.570852][ T6946] FAT-fs (loop3): Directory bread(block 70) failed [ 172.597722][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1155'. [ 172.606801][ T6946] FAT-fs (loop3): Directory bread(block 71) failed [ 172.613483][ T6946] FAT-fs (loop3): Directory bread(block 72) failed [ 172.648280][ T6946] FAT-fs (loop3): Directory bread(block 73) failed [ 172.717919][ T6946] syz.3.1153: attempt to access beyond end of device [ 172.717919][ T6946] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 172.813568][ T6946] syz.3.1153: attempt to access beyond end of device [ 172.813568][ T6946] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 172.850961][ T6957] netlink: 'syz.1.1157': attribute type 16 has an invalid length. [ 172.873395][ T27] audit: type=1800 audit(1750717203.560:56): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1153" name="file1" dev="loop3" ino=1048615 res=0 errno=0 [ 172.891621][ T6957] netlink: 'syz.1.1157': attribute type 17 has an invalid length. [ 172.929960][ T6957] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.952987][ T6957] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.996682][ T6957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.044120][ T6957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.176454][ T6949] loop5: detected capacity change from 0 to 32768 [ 173.291806][ T6949] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 173.446717][ T6949] (syz.5.1154,6949,1):ocfs2_symlink:2065 ERROR: status = -2 [ 173.667624][ T5069] (syz-executor,5069,1):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 173.717965][ T5069] ocfs2: Unmounting device (7,5) on (node local) [ 173.787986][ T27] audit: type=1400 audit(1750717204.480:57): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B706212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD503EAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C68502F7F549FA66F30E7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE16559268A265EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FD [ 174.720746][ T7017] loop5: detected capacity change from 0 to 512 [ 174.909248][ T7025] netlink: 'syz.4.1191': attribute type 5 has an invalid length. [ 175.264108][ T7017] Quota error (device loop5): v2_read_file_info: Can't read info structure [ 175.341197][ T7017] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 175.381084][ T7044] loop0: detected capacity change from 0 to 256 [ 175.399358][ T7042] loop1: detected capacity change from 0 to 2048 [ 175.432351][ T7017] EXT4-fs (loop5): mount failed [ 175.437717][ T7042] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 175.541838][ T7042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.000646][ T7041] loop4: detected capacity change from 0 to 32768 [ 176.542193][ T7033] loop3: detected capacity change from 0 to 40427 [ 176.621602][ T7033] F2FS-fs (loop3): invalid crc value [ 176.695467][ T7033] F2FS-fs (loop3): Found nat_bits in checkpoint [ 176.808656][ T7076] device bridge1 entered promiscuous mode [ 176.962160][ T7033] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 177.757943][ T7100] loop4: detected capacity change from 0 to 4096 [ 177.773770][ T4478] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 177.803534][ T7108] overlayfs: empty lowerdir [ 177.979066][ T4478] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.014579][ T4478] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 178.049477][ T4478] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.139300][ T4478] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 178.180766][ T4478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.211458][ T4478] usb 1-1: Product: syz [ 178.215939][ T4478] usb 1-1: Manufacturer: syz [ 178.239216][ T4478] usb 1-1: SerialNumber: syz [ 178.272772][ T4478] usb 1-1: config 0 descriptor?? [ 178.514275][ T4478] usb 1-1: Found UVC 34.00 device syz (8086:0b5b) [ 178.532667][ T4478] usb 1-1: No valid video chain found. [ 178.745420][ T4478] usb 1-1: USB disconnect, device number 8 [ 178.872798][ T7136] device bridge1 entered promiscuous mode [ 178.902973][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1244'. [ 179.521879][ T7166] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 179.822113][ T7173] loop1: detected capacity change from 0 to 4096 [ 179.862123][ T7173] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 180.532859][ T7200] device bond1 entered promiscuous mode [ 180.747259][ T7207] loop3: detected capacity change from 0 to 256 [ 180.814635][ T7207] exfat: Deprecated parameter 'utf8' [ 180.851989][ T7207] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 181.216309][ T7203] loop0: detected capacity change from 0 to 32768 [ 181.912423][ T27] audit: type=1326 audit(1750717212.600:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2d38e929 code=0x7ffc0000 [ 182.011867][ T27] audit: type=1326 audit(1750717212.670:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fea2d38e929 code=0x7ffc0000 [ 182.153872][ T27] audit: type=1326 audit(1750717212.670:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.3.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2d38e929 code=0x7ffc0000 [ 182.674553][ T7267] netlink: 'syz.5.1303': attribute type 11 has an invalid length. [ 182.800821][ T7274] loop4: detected capacity change from 0 to 64 [ 182.973972][ T7279] netlink: 'syz.1.1310': attribute type 10 has an invalid length. [ 182.982525][ T7279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1310'. [ 183.076465][ T7279] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 183.672871][ T7300] loop4: detected capacity change from 0 to 2048 [ 183.699153][ T7300] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 183.744003][ T7304] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.039729][ T7278] loop5: detected capacity change from 0 to 32768 [ 184.093588][ T7278] XFS: attr2 mount option is deprecated. [ 184.205528][ T7278] XFS (loop5): Mounting V5 Filesystem [ 184.227626][ T7320] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1326'. [ 184.237049][ T7320] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1326'. [ 184.451216][ T7278] XFS (loop5): Ending clean mount [ 184.482921][ T7278] XFS (loop5): Quotacheck needed: Please wait. [ 184.539854][ T7278] XFS (loop5): Quotacheck: Done. [ 184.701244][ T7297] loop0: detected capacity change from 0 to 32768 [ 184.724646][ T7297] XFS: noikeep mount option is deprecated. [ 184.751767][ T5069] XFS (loop5): Unmounting Filesystem [ 184.883147][ T7297] XFS (loop0): Mounting V5 Filesystem [ 185.064247][ T7297] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 185.230721][ T7297] XFS (loop0): Starting recovery (logdev: internal) [ 185.272913][ T7297] XFS (loop0): Ending recovery (logdev: internal) [ 185.300576][ T7297] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x512/0x640, xfs_finobt block 0x20 [ 185.363789][ T7297] XFS (loop0): Unmount and run xfs_repair [ 185.369870][ T7297] XFS (loop0): Failed to initialize disk quotas. [ 185.493530][ T7359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.554090][ T7359] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 185.555661][ T7297] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x512/0x640, xfs_finobt block 0x20 [ 185.612510][ T7297] XFS (loop0): Unmount and run xfs_repair [ 185.619849][ T7359] bond0: (slave gre0): Error -95 calling set_mac_address [ 185.901513][ T4250] XFS (loop0): Unmounting Filesystem [ 185.902312][ T7371] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1333'. [ 186.407266][ T7376] loop4: detected capacity change from 0 to 8192 [ 186.458084][ T7387] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 186.488967][ T7376] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 186.561627][ T7376] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 186.571874][ T7376] REISERFS (device loop4): using ordered data mode [ 186.578606][ T7376] reiserfs: using flush barriers [ 186.602512][ T7376] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 186.626045][ T7376] REISERFS (device loop4): checking transaction log (loop4) [ 186.706807][ T7376] REISERFS (device loop4): Using tea hash to sort names [ 186.735570][ T7376] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 188.198179][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'. [ 188.442604][ T7462] loop4: detected capacity change from 0 to 256 [ 188.502279][ T7464] loop0: detected capacity change from 0 to 8 [ 188.931796][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 189.026778][ T952] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 189.043974][ T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 189.147327][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 189.159852][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 189.181817][ T14] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 189.200770][ T14] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 189.212911][ T14] usb 1-1: config 7 has an invalid descriptor of length 148, skipping remainder of the config [ 189.231698][ T14] usb 1-1: config 7 has no interface number 0 [ 189.243895][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 189.249729][ T952] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 189.251265][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.261488][ T14] usb 1-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 189.283366][ T952] usb 6-1: config 0 has no interface number 0 [ 189.289949][ T952] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 189.292381][ T22] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 189.308398][ T14] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 189.329649][ T952] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 189.333473][ T22] usb 2-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 189.358533][ T14] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 189.382406][ T952] usb 6-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.393769][ T22] usb 2-1: Product: syz [ 189.400209][ T22] usb 2-1: Manufacturer: syz [ 189.404525][ T14] usb 1-1: config 7 interface 128 has no altsetting 0 [ 189.411902][ T952] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 189.420047][ T22] usb 2-1: SerialNumber: syz [ 189.429946][ T952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.441341][ T14] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 189.443276][ T22] usb 2-1: config 0 descriptor?? [ 189.468361][ T952] usb 6-1: config 0 descriptor?? [ 189.473522][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.490387][ T952] gspca_main: spca561-2.14.0 probing abcd:cdee [ 189.499588][ T14] usb 1-1: Product: syz [ 189.507131][ T14] usb 1-1: Manufacturer: syz [ 189.512168][ T14] usb 1-1: SerialNumber: syz [ 189.541731][ T7464] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 189.637965][ T7493] loop4: detected capacity change from 0 to 128 [ 189.673908][ T4253] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 189.734888][ T952] spca561: probe of 6-1:0.156 failed with error -22 [ 189.771695][ T22] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 189.772165][ T952] usb 6-1: MIDIStreaming interface descriptor not found [ 189.847949][ T14] usb 1-1: MIDIStreaming interface descriptor not found [ 189.865038][ T952] usb 6-1: USB disconnect, device number 5 [ 189.927404][ T4253] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 189.974935][ T14] usb 1-1: USB disconnect, device number 9 [ 189.984314][ T4791] udevd[4791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.000201][ T4253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.015070][ T4332] usb 2-1: USB disconnect, device number 10 [ 190.029161][ T4253] usb 4-1: config 0 descriptor?? [ 190.366065][ T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 190.387887][ T5294] udevd[5294]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.421575][ T4492] udevd[4492]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 190.489176][ T4253] usb 4-1: Cannot set MAC address [ 190.496428][ T4253] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 190.564186][ T4253] usb 4-1: USB disconnect, device number 5 [ 190.593829][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 190.610327][ T22] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 190.660925][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.677779][ T22] usb 5-1: Product: syz [ 190.691554][ T22] usb 5-1: Manufacturer: syz [ 190.703818][ T22] usb 5-1: SerialNumber: syz [ 190.721156][ T22] usb 5-1: config 0 descriptor?? [ 190.947258][ T22] usb 5-1: ignoring: not an USB2CAN converter [ 191.174934][ T14] usb 5-1: USB disconnect, device number 9 [ 191.187362][ T7527] trusted_key: encrypted_key: keyword 'ryptfs' not recognized [ 191.501692][ T7537] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1407'. [ 191.801001][ T7513] loop0: detected capacity change from 0 to 40427 [ 191.873774][ T7513] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 191.888483][ T7513] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 191.959403][ T7513] F2FS-fs (loop0): invalid crc value [ 192.007157][ T7513] F2FS-fs (loop0): Found nat_bits in checkpoint [ 192.231756][ T7513] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 192.269107][ T7513] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 192.411505][ T7567] loop5: detected capacity change from 0 to 64 [ 192.841569][ T7575] loop1: detected capacity change from 0 to 4096 [ 192.854195][ T7579] delete_channel: no stack [ 192.930427][ T7575] NILFS (loop1): invalid segment: Checksum error in segment payload [ 192.989815][ T7575] NILFS (loop1): trying rollback from an earlier position [ 193.077298][ T7575] NILFS (loop1): recovery complete [ 193.134059][ T7585] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.158654][ T7586] Zero length message leads to an empty skb [ 193.548791][ T7594] sp0: Synchronizing with TNC [ 193.572215][ T7592] [U] è [ 193.596163][ T7598] dlm: plock device version mismatch: kernel (1.2.0), user (1.16121856.0) [ 193.694837][ T952] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 193.799056][ T7605] loop1: detected capacity change from 0 to 64 [ 193.888966][ T952] usb 1-1: Using ep0 maxpacket: 16 [ 193.898406][ T952] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 193.957198][ T952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.000324][ T952] usb 1-1: Product: syz [ 194.013780][ T952] usb 1-1: Manufacturer: syz [ 194.018448][ T952] usb 1-1: SerialNumber: syz [ 194.053181][ T952] r8152-cfgselector 1-1: config 0 descriptor?? [ 194.307772][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.314204][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.505173][ T952] r8152-cfgselector 1-1: Unknown version 0x0000 [ 194.514144][ T952] r8152-cfgselector 1-1: bad CDC descriptors [ 194.532453][ T952] r8152-cfgselector 1-1: Unknown version 0x0000 [ 194.575508][ T952] r8152-cfgselector 1-1: USB disconnect, device number 10 [ 195.157541][ T7648] loop1: detected capacity change from 0 to 256 [ 195.207049][ T7648] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.285229][ T7648] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.965401][ T7678] netlink: 'syz.5.1473': attribute type 1 has an invalid length. [ 195.994570][ T7678] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1473'. [ 197.437940][ T7720] loop5: detected capacity change from 0 to 4096 [ 197.470879][ T7720] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 197.513259][ T7720] ntfs3: loop5: mft corrupted [ 197.543836][ T7720] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 197.584242][ T7720] ntfs3: loop5: Failed to load $MFT. [ 197.707544][ T7732] netlink: 'syz.4.1501': attribute type 1 has an invalid length. [ 197.756000][ T7732] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.1501'. [ 198.051732][ T7744] loop3: detected capacity change from 0 to 512 [ 198.147867][ T7744] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.194051][ T7744] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.283887][ T22] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 198.343423][ T7716] loop0: detected capacity change from 0 to 40427 [ 198.351617][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 198.447654][ T7716] F2FS-fs (loop0): invalid crc value [ 198.453041][ T7716] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 198.484250][ T22] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 198.506051][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.520692][ T7757] loop3: detected capacity change from 0 to 64 [ 198.540844][ T22] usb 5-1: Product: syz [ 198.546425][ T7716] F2FS-fs (loop0): Found nat_bits in checkpoint [ 198.563379][ T22] usb 5-1: Manufacturer: syz [ 198.584892][ T22] usb 5-1: SerialNumber: syz [ 198.631335][ T22] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 198.734019][ T7716] F2FS-fs (loop0): recover fsync data on readonly fs [ 198.778927][ T22] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 198.786567][ T7716] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 198.839951][ T7716] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 198.880047][ T7716] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 199.007325][ T7767] loop1: detected capacity change from 0 to 1024 [ 199.017893][ T7769] bond0: Error: Cannot enslave bond to itself. [ 199.218103][ T4327] usb 5-1: USB disconnect, device number 10 [ 199.292198][ T29] hfsplus: b-tree write err: -5, ino 4 [ 199.617765][ T7777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.694017][ T7766] loop3: detected capacity change from 0 to 32768 [ 199.700235][ T7782] loop5: detected capacity change from 0 to 1024 [ 199.763988][ T7766] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1515 (7766) [ 199.805899][ T7782] hfsplus: bad catalog entry type [ 199.819122][ T7766] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.862685][ T7766] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 199.890135][ T7766] BTRFS info (device loop3): using free space tree [ 199.904037][ T22] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 199.926977][ T22] ath9k_htc: Failed to initialize the device [ 199.983457][ T4327] usb 5-1: ath9k_htc: USB layer deinitialized [ 200.070335][ T7799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'. [ 200.090620][ T7792] tc_dump_action: action bad kind [ 200.194684][ T7805] device veth1_virt_wifi entered promiscuous mode [ 200.197129][ T7766] BTRFS info (device loop3): enabling ssd optimizations [ 200.354254][ T7815] device xfrm0 entered promiscuous mode [ 200.472880][ T4249] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 200.808720][ T7829] loop5: detected capacity change from 0 to 1024 [ 201.060153][ T7849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.070890][ T5189] hfsplus: b-tree write err: -5, ino 4 [ 201.228735][ T7851] loop5: detected capacity change from 0 to 64 [ 201.497207][ T7859] loop1: detected capacity change from 0 to 1764 [ 201.503896][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 201.510499][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 201.516782][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 201.528609][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 201.528628][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 201.539574][ T11] kworker/u4:1: attempt to access beyond end of device [ 201.539574][ T11] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 201.555015][ T11] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 201.697977][ T7865] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 201.891923][ T7870] loop4: detected capacity change from 0 to 1024 [ 202.124915][ T27] audit: type=1107 audit(1750717232.810:61): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='L<5' [ 202.141621][ T9] hfsplus: b-tree write err: -5, ino 4 [ 202.333980][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1558'. [ 203.290988][ T7919] capability: warning: `syz.0.1576' uses 32-bit capabilities (legacy support in use) [ 203.456428][ T7923] device bond2 entered promiscuous mode [ 203.471454][ T7923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.703836][ T4478] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 203.870065][ T7914] loop1: detected capacity change from 0 to 32768 [ 203.920887][ T4478] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 203.983850][ T4478] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 204.050861][ T4478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.111145][ T7914] XFS (loop1): Mounting V5 Filesystem [ 204.118097][ T4478] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 204.235401][ T7914] XFS (loop1): Ending clean mount [ 204.341438][ T4327] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 204.353507][ T4327] XFS (loop1): Unmount and run xfs_repair [ 204.381599][ T4327] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 204.401610][ T4327] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 204.420684][ T4327] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 204.439745][ T4327] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 204.480118][ T4327] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 204.521174][ T4327] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 204.535722][ T7962] loop5: detected capacity change from 0 to 256 [ 204.542102][ T4327] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.572037][ T4327] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.592211][ T7962] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 204.607606][ T4327] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 204.633926][ T7914] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x4 len 4 error 74 [ 204.673218][ T7914] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1784/0x1e50 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 204.702075][ T7914] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 204.848385][ T4252] XFS (loop1): Unmounting Filesystem [ 204.896779][ T7972] loop0: detected capacity change from 0 to 256 [ 204.983378][ T7972] FAT-fs (loop0): Directory bread(block 64) failed [ 205.002398][ T7972] FAT-fs (loop0): Directory bread(block 65) failed [ 205.026978][ T7972] FAT-fs (loop0): Directory bread(block 66) failed [ 205.050280][ T7972] FAT-fs (loop0): Directory bread(block 67) failed [ 205.074136][ T7972] FAT-fs (loop0): Directory bread(block 68) failed [ 205.098811][ T7972] FAT-fs (loop0): Directory bread(block 69) failed [ 205.121302][ T7972] FAT-fs (loop0): Directory bread(block 70) failed [ 205.138081][ T7972] FAT-fs (loop0): Directory bread(block 71) failed [ 205.145433][ T7972] FAT-fs (loop0): Directory bread(block 72) failed [ 205.152448][ T7972] FAT-fs (loop0): Directory bread(block 73) failed [ 205.264976][ T4478] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 205.468567][ T4478] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 205.487657][ T4478] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 205.515330][ T4478] usb 4-1: USB disconnect, device number 6 [ 205.769053][ T7990] loop0: detected capacity change from 0 to 1024 [ 205.789077][ T7990] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.907734][ T7990] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 205.917951][ T7990] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.043579][ T8001] netlink: 'syz.3.1611': attribute type 8 has an invalid length. [ 206.124906][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 206.549770][ T8015] loop0: detected capacity change from 0 to 2048 [ 206.659447][ T8015] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 206.660784][ T7980] loop4: detected capacity change from 0 to 32768 [ 206.688087][ T8015] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.732462][ T7980] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 206.741640][ T7980] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 206.841786][ T7980] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 206.909321][ T4478] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 206.927139][ T4478] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 206.945893][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 207.091330][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1623'. [ 207.140264][ T4478] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 213ms [ 207.172087][ T4478] gfs2: fsid=syz:syz.0: jid=0: Done [ 207.186202][ T7980] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 208.602392][ T8076] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 208.669803][ T8076] exFAT-fs (nullb0): invalid boot record signature [ 208.721688][ T8076] exFAT-fs (nullb0): failed to read boot sector [ 208.729356][ T8076] exFAT-fs (nullb0): failed to recognize exfat type [ 209.329103][ T27] audit: type=1326 audit(1750717240.020:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.0.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796638e929 code=0x7ffc0000 [ 209.426022][ T27] audit: type=1326 audit(1750717240.050:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.0.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f796638e929 code=0x7ffc0000 [ 209.459919][ T4265] Bluetooth: hci2: Invalid handle: 0xa900 > 0x0eff [ 209.460243][ T27] audit: type=1326 audit(1750717240.050:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.0.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796638e929 code=0x7ffc0000 [ 209.579678][ T27] audit: type=1326 audit(1750717240.050:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.0.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796638e929 code=0x7ffc0000 [ 210.057579][ T8119] binder: 8118:8119 ioctl c018620c 200000000040 returned -1 [ 210.117442][ T8091] loop1: detected capacity change from 0 to 40427 [ 210.129382][ T8124] loop5: detected capacity change from 0 to 256 [ 210.169931][ T8091] F2FS-fs (loop1): invalid crc value [ 210.259894][ T8124] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 210.312110][ T8091] F2FS-fs (loop1): Found nat_bits in checkpoint [ 210.473793][ T4327] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 210.513917][ T8091] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 210.660196][ T8136] netlink: 'syz.5.1674': attribute type 5 has an invalid length. [ 210.673826][ T4327] usb 5-1: Using ep0 maxpacket: 8 [ 210.681731][ T4327] usb 5-1: config 93 has an invalid interface number: 31 but max is 0 [ 210.719562][ T4327] usb 5-1: config 93 has an invalid descriptor of length 0, skipping remainder of the config [ 210.787242][ T4327] usb 5-1: config 93 has no interface number 0 [ 210.825522][ T4327] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 210.853235][ T4327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.914221][ T4327] usb 5-1: Product: syz [ 210.942439][ T4327] usb 5-1: Manufacturer: syz [ 210.961210][ T4327] usb 5-1: SerialNumber: syz [ 211.000188][ T4327] usb 5-1: Found UVC 0.00 device syz (046d:08c3) [ 211.013801][ T4327] usb 5-1: No valid video chain found. [ 211.096303][ T8144] loop3: detected capacity change from 0 to 2048 [ 211.139547][ T8144] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 211.199952][ T8144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.211574][ T8146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1680'. [ 211.232944][ T4327] usb 5-1: USB disconnect, device number 11 [ 211.548546][ T8155] loop3: detected capacity change from 0 to 128 [ 211.626103][ T8160] loop0: detected capacity change from 0 to 256 [ 211.692841][ T8160] FAT-fs (loop0): Directory bread(block 64) failed [ 211.717752][ T8160] FAT-fs (loop0): Directory bread(block 65) failed [ 211.754156][ T8160] FAT-fs (loop0): Directory bread(block 66) failed [ 211.760813][ T8160] FAT-fs (loop0): Directory bread(block 67) failed [ 211.841537][ T8162] mmap: syz.3.1687 (8162): VmData 37466112 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 211.857708][ T8160] FAT-fs (loop0): Directory bread(block 68) failed [ 211.873148][ T8160] FAT-fs (loop0): Directory bread(block 69) failed [ 211.889830][ T8160] FAT-fs (loop0): Directory bread(block 70) failed [ 211.924041][ T8160] FAT-fs (loop0): Directory bread(block 71) failed [ 211.930770][ T8160] FAT-fs (loop0): Directory bread(block 72) failed [ 211.970337][ T8160] FAT-fs (loop0): Directory bread(block 73) failed [ 212.172348][ T8168] loop4: detected capacity change from 0 to 4096 [ 212.762250][ T8192] process 'syz.0.1702' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 213.549462][ T8218] loop5: detected capacity change from 0 to 1024 [ 213.815318][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1719'. [ 214.280198][ T8218] EXT4-fs (loop5): Test dummy encryption mode enabled [ 214.360580][ T8218] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 214.574612][ T5069] EXT4-fs (loop5): unmounting filesystem. [ 215.213397][ T8280] loop5: detected capacity change from 0 to 1024 [ 215.233869][ T8282] netlink: 'syz.1.1741': attribute type 21 has an invalid length. [ 215.271457][ T8280] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 215.291816][ T8282] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1741'. [ 215.350160][ T8282] netlink: 'syz.1.1741': attribute type 4 has an invalid length. [ 215.358347][ T8282] netlink: 'syz.1.1741': attribute type 5 has an invalid length. [ 215.380057][ T8282] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1741'. [ 215.555450][ T5069] EXT4-fs (loop5): unmounting filesystem. [ 216.096760][ T8312] loop0: detected capacity change from 0 to 512 [ 216.149705][ T8312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.251855][ T8312] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1756: casefold flag without casefold feature [ 216.262451][ T27] audit: type=1326 audit(1750717246.950:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.4.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7898e929 code=0x7ffc0000 [ 216.351218][ T8312] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1756: couldn't read orphan inode 15 (err -117) [ 216.377390][ T8324] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1759'. [ 216.393769][ T27] audit: type=1326 audit(1750717246.980:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.4.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f8d7898e929 code=0x7ffc0000 [ 216.415958][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.434712][ T8324] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1759'. [ 216.463901][ T8312] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 216.473805][ T27] audit: type=1326 audit(1750717246.980:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.4.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7898e929 code=0x7ffc0000 [ 216.496012][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.551222][ T27] audit: type=1326 audit(1750717247.040:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7898e929 code=0x7ffc0000 [ 216.651936][ T27] audit: type=1326 audit(1750717247.040:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f8d7898e929 code=0x7ffc0000 [ 216.676336][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 216.735213][ T27] audit: type=1326 audit(1750717247.040:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7898e929 code=0x7ffc0000 [ 216.950649][ T8338] ipt_CLUSTERIP: Please specify destination IP [ 216.972920][ T8342] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072924056005) [ 217.007790][ T8342] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 217.149674][ T8346] loop1: detected capacity change from 0 to 512 [ 217.256272][ T8346] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 217.329081][ T8346] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 217.510900][ T8346] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.1772: corrupted in-inode xattr [ 217.562157][ T8361] loop0: detected capacity change from 0 to 1764 [ 217.577449][ T8346] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1772: couldn't read orphan inode 15 (err -117) [ 217.654323][ T8346] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 217.885202][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 218.193047][ T8382] loop5: detected capacity change from 0 to 256 [ 218.265623][ T8382] exfat: Deprecated parameter 'utf8' [ 218.351282][ T8386] loop1: detected capacity change from 0 to 1024 [ 218.394996][ T8382] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 218.409370][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1792'. [ 218.443432][ T8386] hfsplus: extend alloc file! (8192,512,16777719) [ 218.654262][ T8390] loop0: detected capacity change from 0 to 4096 [ 218.701672][ T8390] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 218.746137][ T8392] loop4: detected capacity change from 0 to 4096 [ 218.767155][ T8396] sctp: [Deprecated]: syz.5.1796 (pid 8396) Use of int in maxseg socket option. [ 218.767155][ T8396] Use struct sctp_assoc_value instead [ 218.772206][ T8397] binder: 8395:8397 ioctl c00c6211 9999999999999999 returned -14 [ 218.820349][ T8392] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 218.971975][ T8392] ntfs3: loop4: failed to convert "c46c" to cp737 [ 220.190910][ T8400] loop1: detected capacity change from 0 to 32768 [ 220.280507][ T8400] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 220.280507][ T8400] [ 220.301764][ T8400] jfs_create: dtInsert returned -EIO [ 220.310592][ T8400] ERROR: (device loop1): jfs_create: [ 220.310592][ T8400] [ 220.370461][ T8442] netlink: 'syz.4.1820': attribute type 10 has an invalid length. [ 220.382947][ T8442] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1820'. [ 220.441503][ T8442] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 220.717120][ T8450] netlink: 'syz.3.1823': attribute type 11 has an invalid length. [ 221.190538][ T8436] loop0: detected capacity change from 0 to 32768 [ 221.269298][ T8436] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 221.291958][ T8468] loop3: detected capacity change from 0 to 64 [ 221.357030][ T8436] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 221.561442][ T8478] loop5: detected capacity change from 0 to 512 [ 221.572730][ T8436] (syz.0.1816,8436,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 221.625094][ T8436] (syz.0.1816,8436,0):ocfs2_search_chain:1785 ERROR: status = -12 [ 221.664609][ T8436] (syz.0.1816,8436,0):ocfs2_search_chain:1871 ERROR: status = -12 [ 221.687315][ T8480] netlink: 'syz.3.1835': attribute type 10 has an invalid length. [ 221.693849][ T8478] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 221.704337][ T8480] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1835'. [ 221.723547][ T8436] (syz.0.1816,8436,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -12 [ 221.750991][ T8480] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 221.797827][ T8478] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.817008][ T8436] (syz.0.1816,8436,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -12 [ 221.833989][ T8436] (syz.0.1816,8436,0):__ocfs2_claim_clusters:2355 ERROR: status = -12 [ 221.842239][ T8436] (syz.0.1816,8436,0):__ocfs2_claim_clusters:2363 ERROR: status = -12 [ 221.888943][ T8436] (syz.0.1816,8436,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -12 [ 221.904602][ T8436] (syz.0.1816,8436,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -12 [ 221.913379][ T8436] (syz.0.1816,8436,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -12 [ 221.934889][ T5069] EXT4-fs (loop5): unmounting filesystem. [ 222.036580][ T8436] (syz.0.1816,8436,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -12 [ 222.061982][ T8488] device ip6tnl1 entered promiscuous mode [ 222.110542][ T8436] (syz.0.1816,8436,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -12 [ 222.173786][ T8436] (syz.0.1816,8436,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -12 [ 222.183313][ T8436] (syz.0.1816,8436,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -12 [ 222.244734][ T8436] (syz.0.1816,8436,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -12 [ 222.289357][ T8436] (syz.0.1816,8436,1):ocfs2_mknod:357 ERROR: status = -12 [ 222.324849][ T8436] (syz.0.1816,8436,1):ocfs2_mknod:502 ERROR: status = -12 [ 222.332067][ T8436] (syz.0.1816,8436,1):ocfs2_mkdir:659 ERROR: status = -12 [ 222.470020][ T4250] ocfs2: Unmounting device (7,0) on (node local) [ 223.192710][ T27] audit: type=1400 audit(1750717253.880:72): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B706212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD503EAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C68502F7F549FA66F30E7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE16559268A265EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FD [ 223.943780][ T4295] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 224.044771][ T8556] loop3: detected capacity change from 0 to 1024 [ 224.212669][ T4302] hfsplus: b-tree write err: -5, ino 4 [ 224.368515][ T8560] loop3: detected capacity change from 0 to 512 [ 224.383056][ T8538] loop0: detected capacity change from 0 to 32768 [ 224.400156][ T4295] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 224.437320][ T27] audit: type=1326 audit(1750717255.130:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.5.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518ad8e929 code=0x7ffc0000 [ 224.443860][ T4295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.494999][ T8538] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 224.494999][ T8538] [ 224.533791][ T4295] usb 2-1: Product: syz [ 224.540868][ T8538] ERROR: (device loop0): remounting filesystem as read-only [ 224.544081][ T27] audit: type=1326 audit(1750717255.170:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.5.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f518ad8e929 code=0x7ffc0000 [ 224.572538][ T4295] usb 2-1: Manufacturer: syz [ 224.572571][ T8538] jfs_rename: dtInsert returned -EIO [ 224.588714][ T4295] usb 2-1: SerialNumber: syz [ 224.593154][ T8560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 224.614748][ T4295] usb 2-1: config 0 descriptor?? [ 224.622486][ T8560] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.644237][ T27] audit: type=1326 audit(1750717255.170:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.5.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518ad8e929 code=0x7ffc0000 [ 224.785795][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 224.853570][ T8552] loop4: detected capacity change from 0 to 32768 [ 224.918758][ T8552] XFS: ikeep mount option is deprecated. [ 224.931778][ T4483] usb 2-1: USB disconnect, device number 11 [ 225.080430][ T8552] XFS (loop4): Mounting V5 Filesystem [ 225.298157][ T8552] XFS (loop4): Ending clean mount [ 225.330890][ T8552] XFS (loop4): Quotacheck needed: Please wait. [ 225.459876][ T8552] XFS (loop4): Quotacheck: Done. [ 225.613176][ T4251] XFS (loop4): Unmounting Filesystem [ 225.639195][ T8591] loop3: detected capacity change from 0 to 1024 [ 225.820387][ T4320] hfsplus: b-tree write err: -5, ino 4 [ 225.902454][ T8599] loop1: detected capacity change from 0 to 512 [ 226.063395][ T8599] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 226.063500][ T8599] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.199450][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 226.445532][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1899'. [ 226.513836][ T4483] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 226.715319][ T4483] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 226.730483][ T4483] usb 1-1: config 0 has no interface number 0 [ 226.747926][ T4483] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 226.788159][ T4483] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 226.803773][ T4483] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.817886][ T4483] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 226.827330][ T4483] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.844875][ T4483] usb 1-1: config 0 descriptor?? [ 226.857095][ T4483] gspca_main: spca561-2.14.0 probing abcd:cdee [ 227.003795][ T4478] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 227.066426][ T4483] spca561: probe of 1-1:0.156 failed with error -22 [ 227.081967][ T8616] loop1: detected capacity change from 0 to 32768 [ 227.089908][ T4483] usb 1-1: MIDIStreaming interface descriptor not found [ 227.111168][ T4483] usb 1-1: USB disconnect, device number 11 [ 227.146778][ T8616] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 227.146778][ T8616] [ 227.171983][ T8616] ERROR: (device loop1): remounting filesystem as read-only [ 227.197273][ T8616] jfs_rename: dtInsert returned -EIO [ 227.221823][ T4478] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 227.237609][ T4478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.253751][ T4478] usb 5-1: Product: syz [ 227.258699][ T4478] usb 5-1: Manufacturer: syz [ 227.272225][ T4478] usb 5-1: SerialNumber: syz [ 227.279386][ T4478] usb 5-1: config 0 descriptor?? [ 227.536158][ T4295] usb 5-1: USB disconnect, device number 12 [ 227.804955][ T8652] loop3: detected capacity change from 0 to 256 [ 228.323751][ T4483] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 228.530014][ T4483] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 228.563996][ T4483] usb 6-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 228.600750][ T4483] usb 6-1: Product: syz [ 228.613773][ T4483] usb 6-1: Manufacturer: syz [ 228.631049][ T4483] usb 6-1: SerialNumber: syz [ 228.654376][ T4483] usb 6-1: config 0 descriptor?? [ 228.687021][ T4332] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 228.885968][ T4332] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 228.898703][ T4483] hso 6-1:0.0: Failed to find BULK IN ep [ 228.913041][ T4332] usb 2-1: config 0 has no interface number 0 [ 228.919890][ T4332] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 228.934056][ T4483] usb-storage 6-1:0.0: USB Mass Storage device detected [ 228.971613][ T4332] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 229.002789][ T4332] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.046770][ T4332] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 229.075284][ T8695] dlm: plock device version mismatch: kernel (1.2.0), user (1.16121856.0) [ 229.084852][ T4332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.126117][ T4332] usb 2-1: config 0 descriptor?? [ 229.152854][ T4332] gspca_main: spca561-2.14.0 probing abcd:cdee [ 229.156002][ T4478] usb 6-1: USB disconnect, device number 6 [ 229.360996][ T4332] spca561: probe of 2-1:0.156 failed with error -22 [ 229.388012][ T4332] usb 2-1: MIDIStreaming interface descriptor not found [ 229.429883][ T4332] usb 2-1: USB disconnect, device number 12 [ 229.443784][ T4253] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 229.643789][ T4253] usb 1-1: Using ep0 maxpacket: 16 [ 229.651842][ T4253] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.675207][ T4253] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 229.685178][ T4253] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 229.693389][ T4253] usb 1-1: Product: syz [ 229.697850][ T4253] usb 1-1: Manufacturer: syz [ 229.731500][ T4253] usb 1-1: SerialNumber: syz [ 229.760462][ T4253] usb 1-1: config 0 descriptor?? [ 229.768094][ T7502] udevd[7502]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.894782][ T8715] loop3: detected capacity change from 0 to 4096 [ 229.928794][ T8715] NILFS (loop3): invalid segment: Checksum error in segment payload [ 229.968223][ T8715] NILFS (loop3): trying rollback from an earlier position [ 230.056689][ T4253] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 230.072886][ T8715] NILFS (loop3): recovery complete [ 230.104635][ T8723] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.171902][ T4791] udevd[4791]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.258568][ T4253] usb 1-1: USB disconnect, device number 12 [ 230.533933][ T4483] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 230.643425][ T8735] loop5: detected capacity change from 0 to 4096 [ 230.669827][ T8735] NILFS (loop5): invalid segment: Checksum error in segment payload [ 230.678288][ T8735] NILFS (loop5): trying rollback from an earlier position [ 230.705471][ T8735] NILFS (loop5): recovery complete [ 230.731553][ T4483] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 230.750152][ T8740] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.762120][ T4483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.797706][ T4483] usb 5-1: config 0 descriptor?? [ 231.234282][ T4483] usb 5-1: Cannot set MAC address [ 231.239517][ T4483] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 231.275166][ T4483] usb 5-1: USB disconnect, device number 13 [ 231.892714][ T8778] loop0: detected capacity change from 0 to 64 [ 232.113976][ T4253] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 232.224196][ T4261] Bluetooth: hci5: command 0x0406 tx timeout [ 232.313934][ T4253] usb 2-1: Using ep0 maxpacket: 16 [ 232.325167][ T4253] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 232.353780][ T4253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.392630][ T4253] usb 2-1: Product: syz [ 232.403875][ T4253] usb 2-1: Manufacturer: syz [ 232.429379][ T4253] usb 2-1: SerialNumber: syz [ 232.455772][ T4253] r8152-cfgselector 2-1: config 0 descriptor?? [ 232.777825][ T8809] loop3: detected capacity change from 0 to 8 [ 232.872020][ T4253] r8152-cfgselector 2-1: Unknown version 0x0000 [ 232.888679][ T4253] r8152-cfgselector 2-1: bad CDC descriptors [ 232.953876][ T4253] r8152-cfgselector 2-1: Unknown version 0x0000 [ 232.980172][ T4253] r8152-cfgselector 2-1: USB disconnect, device number 13 [ 233.175027][ T4327] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 233.373769][ T4327] usb 4-1: Using ep0 maxpacket: 32 [ 233.381414][ T4327] usb 4-1: unable to get BOS descriptor or descriptor too short [ 233.401186][ T4327] usb 4-1: config 7 has an invalid interface number: 128 but max is 0 [ 233.438778][ T4327] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 233.464119][ T4327] usb 4-1: config 7 has an invalid descriptor of length 148, skipping remainder of the config [ 233.511724][ T4327] usb 4-1: config 7 has no interface number 0 [ 233.528464][ T4327] usb 4-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 233.540369][ T8832] loop0: detected capacity change from 0 to 256 [ 233.583621][ T8832] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 233.584045][ T4327] usb 4-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 233.647975][ T4327] usb 4-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 233.675776][ T8832] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.709084][ T4327] usb 4-1: config 7 interface 128 has no altsetting 0 [ 233.754647][ T4327] usb 4-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 233.769982][ T8838] loop4: detected capacity change from 0 to 4096 [ 233.786792][ T4327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.807107][ T4327] usb 4-1: Product: syz [ 233.815710][ T4327] usb 4-1: Manufacturer: syz [ 233.837344][ T8838] NILFS (loop4): invalid segment: Checksum error in segment payload [ 233.853843][ T4327] usb 4-1: SerialNumber: syz [ 233.868501][ T8838] NILFS (loop4): trying rollback from an earlier position [ 233.893827][ T8809] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.044044][ T8838] NILFS (loop4): recovery complete [ 234.072968][ T8845] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.117516][ T4327] usb 4-1: MIDIStreaming interface descriptor not found [ 234.212551][ T4327] usb 4-1: USB disconnect, device number 7 [ 234.498435][ T8857] netlink: 'syz.4.2012': attribute type 1 has an invalid length. [ 234.564389][ T8857] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2012'. [ 234.624052][ T28] INFO: task syz-executor:4260 blocked for more than 143 seconds. [ 234.632170][ T28] Not tainted 6.1.141-syzkaller #0 [ 234.648459][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.686124][ T28] task:syz-executor state:D stack:22144 pid:4260 ppid:1 flags:0x00004004 [ 234.720586][ T28] Call Trace: [ 234.738332][ T28] [ 234.741357][ T28] __schedule+0x10e9/0x40d0 [ 234.771107][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 234.791207][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 234.830165][ T28] ? lock_chain_count+0x20/0x20 [ 234.842769][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 234.854658][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 234.860118][ T28] schedule+0xb9/0x180 [ 234.875375][ T28] io_schedule+0x7c/0xd0 [ 234.879800][ T28] folio_wait_bit_common+0x6e1/0xf60 [ 234.896949][ T28] ? folio_wait_bit+0x30/0x30 [ 234.901752][ T28] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 234.914751][ T28] ? folio_mapping+0x1ba/0x4d0 [ 234.919645][ T28] truncate_inode_pages_range+0x9a2/0xff0 [ 234.925805][ T28] ? mapping_evict_folio+0x520/0x520 [ 234.931185][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 234.937336][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 234.942757][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 234.948939][ T28] evict+0x498/0x870 [ 234.952945][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 234.957910][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 234.963263][ T28] ? _raw_spin_unlock+0x24/0x40 [ 234.968271][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 234.973528][ T28] evict_inodes+0x604/0x690 [ 234.978206][ T28] ? clear_inode+0x150/0x150 [ 234.982837][ T28] ? dput+0x1c9/0x1d0 [ 234.986967][ T28] ? sync_filesystem+0x103/0x220 [ 234.991976][ T28] generic_shutdown_super+0x93/0x340 [ 234.999612][ T28] kill_block_super+0x7c/0xe0 [ 235.004508][ T28] deactivate_locked_super+0x93/0xf0 [ 235.009832][ T28] cleanup_mnt+0x463/0x4f0 [ 235.017890][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 235.023124][ T28] task_work_run+0x1ca/0x250 [ 235.028034][ T28] ? task_work_cancel+0x230/0x230 [ 235.034352][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 235.039872][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 235.045315][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 235.050929][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 235.056529][ T28] do_syscall_64+0x58/0xa0 [ 235.060993][ T28] ? clear_bhb_loop+0x60/0xb0 [ 235.065810][ T28] ? clear_bhb_loop+0x60/0xb0 [ 235.070653][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.076653][ T28] RIP: 0033:0x7f7da738fc57 [ 235.081121][ T28] RSP: 002b:00007fffefb42fa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 235.089698][ T28] RAX: 0000000000000000 RBX: 00007f7da7410925 RCX: 00007f7da738fc57 [ 235.098218][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffefb43060 [ 235.107174][ T28] RBP: 00007fffefb43060 R08: 0000000000000000 R09: 0000000000000000 [ 235.115476][ T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffefb440f0 [ 235.123534][ T28] R13: 00007f7da7410925 R14: 00000000000160ee R15: 00007fffefb44130 [ 235.132004][ T28] [ 235.135246][ T28] [ 235.135246][ T28] Showing all locks held in the system: [ 235.142997][ T28] 1 lock held by rcu_tasks_kthre/12: [ 235.152179][ T28] #0: ffffffff8c92b430 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 235.162773][ T28] 1 lock held by rcu_tasks_trace/13: [ 235.168293][ T28] #0: ffffffff8c92bc50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 235.187258][ T28] 1 lock held by khungtaskd/28: [ 235.192154][ T28] #0: ffffffff8c92aaa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 235.203780][ T28] 2 locks held by getty/4015: [ 235.208503][ T28] #0: ffff888030a8a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 235.218418][ T28] #1: ffffc9000326b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 235.228796][ T28] 1 lock held by syz-executor/4260: [ 235.234822][ T28] #0: ffff88807af840e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 235.245315][ T28] [ 235.247784][ T28] ============================================= [ 235.247784][ T28] [ 235.260319][ T28] NMI backtrace for cpu 0 [ 235.264702][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.141-syzkaller #0 [ 235.272618][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.282811][ T28] Call Trace: [ 235.286104][ T28] [ 235.289045][ T28] dump_stack_lvl+0x168/0x22e [ 235.293746][ T28] ? irq_work_queue+0xb8/0x140 [ 235.298539][ T28] ? show_regs_print_info+0x12/0x12 [ 235.303762][ T28] ? load_image+0x3b0/0x3b0 [ 235.308277][ T28] ? vprintk_emit+0x571/0x680 [ 235.312975][ T28] ? printk_sprint+0x460/0x460 [ 235.317774][ T28] nmi_cpu_backtrace+0x3f4/0x470 [ 235.322742][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 235.328916][ T28] ? _printk+0xcc/0x110 [ 235.333088][ T28] ? load_image+0x3b0/0x3b0 [ 235.337606][ T28] ? load_image+0x3b0/0x3b0 [ 235.342134][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 235.348222][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 235.354233][ T28] watchdog+0xeee/0xf30 [ 235.358414][ T28] ? watchdog+0x1ed/0xf30 [ 235.362767][ T28] kthread+0x29d/0x330 [ 235.366856][ T28] ? hungtask_pm_notify+0x40/0x40 [ 235.371897][ T28] ? kthread_blkcg+0xd0/0xd0 [ 235.376510][ T28] ret_from_fork+0x1f/0x30 [ 235.380973][ T28] [ 235.386835][ T28] Sending NMI from CPU 0 to CPUs 1: [ 235.392099][ C1] NMI backtrace for cpu 1 [ 235.392111][ C1] CPU: 1 PID: 62 Comm: kworker/u4:4 Not tainted 6.1.141-syzkaller #0 [ 235.392129][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.392139][ C1] Workqueue: bat_events batadv_nc_worker [ 235.392163][ C1] RIP: 0010:batadv_nc_worker+0xef/0x600 [ 235.392184][ C1] Code: 92 f7 4c 8d 2d 00 00 00 00 48 c7 c7 a0 aa 92 8c 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 55 e8 95 57 89 f7 48 83 c4 08 bc 04 36 00 89 c3 31 ff 89 c6 e8 81 47 a7 f7 85 db 74 10 e8 38 [ 235.392200][ C1] RSP: 0018:ffffc900015c7be0 EFLAGS: 00000292 [ 235.392213][ C1] RAX: 53025358bc735e00 RBX: ffff888141392fc0 RCX: 53025358bc735e00 [ 235.392226][ C1] RDX: 0000000000000000 RSI: ffffffff8a6c1160 RDI: ffffffff8abf1360 [ 235.392238][ C1] RBP: ffff888029374248 R08: dffffc0000000000 R09: fffffbfff2117049 [ 235.392251][ C1] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: dffffc0000000000 [ 235.392264][ C1] R13: ffffffff89d9921e R14: ffff8880769e0c80 R15: 0000000000000049 [ 235.392277][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 235.392292][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.392303][ C1] CR2: 00007fea2d581178 CR3: 000000007aa81000 CR4: 00000000003506e0 [ 235.392320][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.392331][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.392341][ C1] Call Trace: [ 235.392346][ C1] [ 235.392355][ C1] ? process_one_work+0x7a1/0x1160 [ 235.392375][ C1] process_one_work+0x898/0x1160 [ 235.392400][ C1] ? worker_detach_from_pool+0x240/0x240 [ 235.392421][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 235.392445][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 235.392468][ C1] ? kthread_data+0x4b/0xc0 [ 235.392494][ C1] worker_thread+0xaa2/0x1250 [ 235.392525][ C1] kthread+0x29d/0x330 [ 235.392548][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 235.392565][ C1] ? kthread_blkcg+0xd0/0xd0 [ 235.392598][ C1] ret_from_fork+0x1f/0x30 [ 235.392627][ C1] [ 235.396203][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 235.396220][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.141-syzkaller #0 [ 235.396244][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.396258][ T28] Call Trace: [ 235.396267][ T28] [ 235.396276][ T28] dump_stack_lvl+0x168/0x22e [ 235.396315][ T28] ? memcpy+0x3c/0x60 [ 235.396350][ T28] ? show_regs_print_info+0x12/0x12 [ 235.396381][ T28] ? load_image+0x3b0/0x3b0 [ 235.396420][ T28] panic+0x2c9/0x710 [ 235.396440][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 235.396472][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 235.396493][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 235.396533][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 235.396571][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 235.396606][ T28] watchdog+0xf2d/0xf30 [ 235.396639][ T28] ? watchdog+0x1ed/0xf30 [ 235.396671][ T28] kthread+0x29d/0x330 [ 235.396702][ T28] ? hungtask_pm_notify+0x40/0x40 [ 235.396728][ T28] ? kthread_blkcg+0xd0/0xd0 [ 235.396764][ T28] ret_from_fork+0x1f/0x30 [ 235.396809][ T28] [ 235.398356][ T28] Kernel Offset: disabled [ 235.710325][ T28] Rebooting in 86400 seconds..