last executing test programs: 2m26.090671959s ago: executing program 2 (id=1115): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast1, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2m26.019436474s ago: executing program 2 (id=1116): mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 2m26.018792734s ago: executing program 2 (id=1117): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000040), 0x10) io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff030f02000000003f420f00000000003bf81b05ff000000", 0x38}]) 2m25.896061872s ago: executing program 2 (id=1118): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000005ac0)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@mode={'mode', 0x3d, 0xe410}}, {@anchor}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@unhide}, {@noadinicb}, {@gid}, {@umask={'umask', 0x3d, 0x8}}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m25.485655759s ago: executing program 2 (id=1122): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ecb1696642cb97380abf69dce83f1c1dd0eb96506352e4c7d6b88109eebe378da654d5d91d6a45e65053658f366b87b26180bdb0a0e2ef4103c4336999ae591f101bac606a7595fc5a131d32d3723526dc1d4b5c1ce2f300a7eb59286590c97f58ae092a495a425b0bec6265"], 0x1, 0x9e15, &(0x7f000000a040)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2m25.060042228s ago: executing program 2 (id=1125): r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/4112, 0x1010}], 0x1}, 0x0) 2m24.862312821s ago: executing program 32 (id=1125): r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/4112, 0x1010}], 0x1}, 0x0) 2m20.630320873s ago: executing program 0 (id=1164): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") setreuid(0x0, 0xee00) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m20.274400598s ago: executing program 0 (id=1168): sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x28008000}, 0x20044804) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) 2m18.985330863s ago: executing program 0 (id=1178): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001300050000000000fcffffff07000017", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c000980"], 0x34}}, 0x10) 2m18.855278572s ago: executing program 0 (id=1180): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000005ac0)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@mode={'mode', 0x3d, 0xe410}}, {@anchor}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@unhide}, {@noadinicb}, {@gid}, {@umask={'umask', 0x3d, 0x8}}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m18.446398299s ago: executing program 0 (id=1183): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}}]}, 0x88}}, 0x0) 2m17.597710826s ago: executing program 0 (id=1186): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x86, &(0x7f00000005c0)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f18f7", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, [], "c4823003"}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0xfffffffc, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) 2m17.408405649s ago: executing program 33 (id=1186): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x86, &(0x7f00000005c0)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f18f7", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, [], "c4823003"}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0xfffffffc, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) 2.776633624s ago: executing program 3 (id=2859): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r2, &(0x7f0000000800), 0x0}, 0x20) 2.642224953s ago: executing program 3 (id=2862): r0 = io_uring_setup(0x21e9, &(0x7f0000002400)={0x0, 0xffffffbc, 0x0, 0x2, 0x176}) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000440), 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 2.372870932s ago: executing program 3 (id=2866): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) 2.174426344s ago: executing program 5 (id=2871): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.893377283s ago: executing program 1 (id=2875): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300, {[@ra={0x94, 0x4}]}}, @address_request}}}}, 0x0) 1.892610473s ago: executing program 4 (id=2886): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r1, 0x0, 0x4, 0x0) 1.876093364s ago: executing program 5 (id=2876): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c6e6f646f74732c636865636b3d7374726963742c666c7573682c6e6f646f74732c6e6f646f74732c71756965742c00a8f43e0a9765c2419bbc93d3bb042cde7dc609bd874b9221aab9404318121ead7505cda193a13e6d2fd30034c9c4f457dc798a67d4d30285c0590475ba33482c83a51b42d7f7ea92b35388ec28309e3b4b8a758575baa63a8679030bf6423a4759c2bb9f9353f43cc4c825234e791353a87ed0bcade85e0808d879b38514fafbba"], 0x1, 0x168, &(0x7f0000000a40)="$eJzs27GK1FAUBuAzJqurNluLRcDGalArS0VWEAOKMoVWCrs2Gxlwmmg1z+AT+GI+gihTTXdFo5OZiDgoMbrzfU0O+RM4t0guJ5Bnl1+eHE1nL6YPF7E/GkV+K4pYjuIgzkQWjXkAAKfJMqX4lFJK5+Zx/l2klIbuCADom/0fAHbPL/f/mwM1BgD0xvwPALvn8ZOn92+X5eGjotiP+DCvJ/WkOTb53Xvl4bXiq4P2rkVdT7JVfr3Js818Ly58y280ebGZn42rV5r8S3bnQdnJL8ZR/8sHAACAnTBeje5r8/3Hdr4fj4vvOvN/U619H+jM73lcyv/eOgCA7c1evzl5XlXHrxT/Q5G3Z96//Qf6UfxQ5FV1vDd8G39cDP1mAvrWPvRDdwIAAAAAAAAAAAAAAPzM7/4hFNn2Fw+9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOj6HAAA//8nKlEY") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000180)='./file1\x00') 1.818280069s ago: executing program 1 (id=2878): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x20, r0, 0x333, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 1.697307907s ago: executing program 1 (id=2879): socket$kcm(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/4080, 0xff0}], 0x1, 0x15f, 0x0) 1.627253761s ago: executing program 1 (id=2881): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x4}) epoll_pwait2(r1, &(0x7f0000000580)=[{}], 0x1, &(0x7f0000000600), 0x0, 0x0) 1.589323694s ago: executing program 3 (id=2882): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x7, 0x0, 0x0) 1.569715315s ago: executing program 4 (id=2883): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) write$sndseq(r0, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 1.531790988s ago: executing program 1 (id=2884): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f0000000340)={[{@fat=@fmask={'fmask', 0x3d, 0x1}}, {@fat=@errors_continue}, {@fat=@debug}, {@dots}, {@fat=@nfs}, {@fat=@flush}]}, 0x1, 0x11d9, &(0x7f0000001240)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x2f) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000100)) 1.474446281s ago: executing program 5 (id=2887): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYRES32=0x0], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x110) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b12455, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80186e84, &(0x7f00000000c0)={@desc={0x1, 0x0, @auto="4477eedf120422bf"}}) 1.429416735s ago: executing program 3 (id=2888): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.319308062s ago: executing program 6 (id=2889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r2}, 0xc) 1.166629682s ago: executing program 6 (id=2890): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)='1', 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000480), 0x4) recvmsg$unix(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40001000) 1.126254154s ago: executing program 4 (id=2891): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x7, 0xb, 0x3d, 0x80, r2}, &(0x7f0000000080)=0x10) 991.415544ms ago: executing program 1 (id=2892): sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) 937.434917ms ago: executing program 6 (id=2893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x95}}, @delba={0x3, 0x2, {{0x0, 0x1}, 0x1f, {0xbd, 0x6, @device_b}}}}}]}, 0x48}}, 0x0) 937.216207ms ago: executing program 4 (id=2894): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x8, &(0x7f0000000000)={[{@dax_inode}, {@sb={'sb', 0x3d, 0x1}}, {@noload}, {@usrjquota_path}, {@noblock_validity}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") lchown(0x0, 0x0, 0xffffffffffffffff) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 858.991522ms ago: executing program 5 (id=2895): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640)={[{@prjquota}, {@delalloc}]}, 0x0, 0x47c, &(0x7f00000001c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x2}, [{0x2, 0x0, 0xee01}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x6}, {0x2, 0x1}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {0x10, 0x5}, {0x20, 0x1}}, 0x5c, 0x3) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x7, 0xb5, 0x5, 0xf, 0x10001}) 726.289392ms ago: executing program 3 (id=2896): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000002"], 0x0, 0x26}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x60, &(0x7f00000002c0), 0x10}, 0x80) 695.674883ms ago: executing program 6 (id=2897): openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 674.599065ms ago: executing program 4 (id=2898): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x150b, &(0x7f0000001d40)="$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") chdir(&(0x7f0000000200)='./file0\x00') truncate(&(0x7f0000000040)='./file0\x00', 0x1b1c) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000200)='./file1\x00') 381.173894ms ago: executing program 6 (id=2899): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) 292.27377ms ago: executing program 4 (id=2900): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 166.941319ms ago: executing program 6 (id=2901): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r0, 0x5300}, {r0}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x800c5011, &(0x7f00000001c0)) 166.583989ms ago: executing program 5 (id=2902): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000004c0)=0x90) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000300)={0x9, 0x3fe, 0xfffffffd, 0xe, 0x3, "04ae080000000000007800000500080100", 0x4, 0x203}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) 0s ago: executing program 5 (id=2903): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) kernel console output (not intermixed with test programs): 01] hpfs: You really don't want any checks? You are crazy... [ 205.550057][ T8501] hpfs: hpfs_map_sector(): read error [ 205.592524][ T8501] hpfs: code page support is disabled [ 205.598018][ T8501] hpfs: hpfs_map_4sectors(): unaligned read [ 205.606996][ T8512] loop1: detected capacity change from 0 to 512 [ 205.677341][ T8501] hpfs: hpfs_map_4sectors(): unaligned read [ 205.678805][ T8512] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,abort,auto_da_alloc,norecovery,user_xattr,,errors=continue. Quota mode: writeback. [ 205.711980][ T8512] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.731847][ T2857] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 205.739552][ T8501] hpfs: filesystem error: unable to find root dir [ 205.827704][ T8501] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 205.941250][ T8512] EXT4-fs warning (device loop1): __ext4_unlink:3335: inode #16: comm syz.1.1492: Deleting file 'file3' with no links [ 206.037584][ T2857] usb 5-1: Using ep0 maxpacket: 32 [ 206.212177][ T2857] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 206.231615][ T2857] usb 5-1: config 0 has no interface number 0 [ 206.248792][ T2857] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 206.299024][ T2857] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 206.339188][ T2857] usb 5-1: config 0 interface 126 has no altsetting 0 [ 206.376582][ T8544] loop1: detected capacity change from 0 to 512 [ 206.458325][ T8544] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 206.478420][ T8544] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 206.542386][ T2857] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 206.553035][ T8544] EXT4-fs (loop1): 1 truncate cleaned up [ 206.558707][ T8544] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,dioread_lock,nodiscard,nomblk_io_submit,noblock_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 206.576109][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.583490][ T2857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.591514][ T2857] usb 5-1: Product: syz [ 206.596551][ T2857] usb 5-1: Manufacturer: syz [ 206.601185][ T2857] usb 5-1: SerialNumber: syz [ 206.613369][ T2857] usb 5-1: config 0 descriptor?? [ 206.632019][ T8507] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 206.639444][ T8507] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 207.056578][ T8575] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1530'. [ 207.066507][ T8575] device ip6gretap0 entered promiscuous mode [ 207.073142][ T8575] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1530'. [ 207.119925][ T2857] ir_usb 5-1:0.126: IR Dongle converter detected [ 207.322774][ T2857] usb 5-1: IRDA class descriptor not found, device not bound [ 207.488416][ T8597] loop1: detected capacity change from 0 to 8 [ 207.612047][ T7708] usb 5-1: USB disconnect, device number 17 [ 208.037469][ T8626] loop1: detected capacity change from 0 to 4096 [ 208.058724][ T8626] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 208.258043][ T8626] ntfs3: Cannot load iocharset cp94./file1 [ 208.359030][ T8637] loop4: detected capacity change from 0 to 4096 [ 208.405571][ T8637] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 208.485138][ T8650] netlink: 'syz.5.1558': attribute type 3 has an invalid length. [ 208.548698][ T26] audit: type=1800 audit(1759800831.358:11): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1553" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 208.747577][ T8665] loop4: detected capacity change from 0 to 64 [ 209.164592][ T8683] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1584'. [ 209.177890][ T8683] device bond0 entered promiscuous mode [ 209.187496][ T8683] device bond_slave_0 entered promiscuous mode [ 209.194071][ T8683] device bond_slave_1 entered promiscuous mode [ 209.203528][ T8683] device bond0 left promiscuous mode [ 209.205519][ T8685] loop4: detected capacity change from 0 to 1024 [ 209.208990][ T8683] device bond_slave_0 left promiscuous mode [ 209.222733][ T7710] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 209.232840][ T8683] device bond_slave_1 left promiscuous mode [ 209.283975][ T26] audit: type=1800 audit(1759800832.098:12): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1574" name="file1" dev="loop4" ino=3 res=0 errno=0 [ 209.377844][ T8687] syz.1.1575 uses obsolete (PF_INET,SOCK_PACKET) [ 209.392980][ T7573] hfsplus: bad catalog file entry [ 209.401093][ T7573] hfsplus: b-tree write err: -5, ino 3 [ 209.403084][ T8687] netlink: 'syz.1.1575': attribute type 10 has an invalid length. [ 209.415394][ T8687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1575'. [ 209.430635][ T8687] device bond0 entered promiscuous mode [ 209.459489][ T8687] device bond_slave_0 entered promiscuous mode [ 209.483264][ T8687] device bond_slave_1 entered promiscuous mode [ 209.493871][ T8687] bridge0: port 3(bond0) entered blocking state [ 209.500325][ T8687] bridge0: port 3(bond0) entered disabled state [ 209.509854][ T8687] bridge0: port 3(bond0) entered blocking state [ 209.525169][ T8687] bridge0: port 3(bond0) entered forwarding state [ 209.627736][ T8695] loop4: detected capacity change from 0 to 256 [ 209.655112][ T7710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.674246][ T7710] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 209.686027][ T7710] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 209.696313][ T7710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.726112][ T8695] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 209.748061][ T5588] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 209.757698][ T7710] usb 4-1: config 0 descriptor?? [ 209.817198][ T7710] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 209.829627][ T7710] dvb-usb: bulk message failed: -22 (3/0) [ 209.860615][ T7710] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 209.882086][ T7710] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 209.897014][ T7710] usb 4-1: media controller created [ 209.910672][ T7710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.934406][ T7710] dvb-usb: bulk message failed: -22 (6/0) [ 209.947722][ T7710] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 210.003155][ T7710] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 210.024870][ T7710] dvb-usb: schedule remote query interval to 150 msecs. [ 210.047375][ T7710] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 210.075220][ T7710] usb 4-1: USB disconnect, device number 13 [ 210.166389][ T7710] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 210.204480][ T5588] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.223474][ T5588] usb 6-1: config 0 has no interface number 0 [ 210.422009][ T5588] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 210.442244][ T5588] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.472344][ T5588] usb 6-1: Product: syz [ 210.480082][ T5588] usb 6-1: Manufacturer: syz [ 210.491684][ T5588] usb 6-1: SerialNumber: syz [ 210.512219][ T5588] usb 6-1: config 0 descriptor?? [ 210.530004][ T8702] loop6: detected capacity change from 0 to 40427 [ 210.659407][ T8702] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff [ 210.709162][ T8702] F2FS-fs (loop6): invalid crc value [ 210.807224][ T8702] F2FS-fs (loop6): Found nat_bits in checkpoint [ 210.821934][ T5588] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 210.865046][ T5588] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 210.928314][ T5588] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 210.981789][ T5588] usb 6-1: media controller created [ 211.018649][ T5588] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.039926][ T8702] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 211.132036][ T5588] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 211.286207][ T7405] attempt to access beyond end of device [ 211.286207][ T7405] loop6: rw=2049, want=45104, limit=40427 [ 211.295477][ T5588] usb 6-1: USB disconnect, device number 2 [ 211.625356][ T8772] loop5: detected capacity change from 0 to 256 [ 211.799230][ T8772] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.831864][ T8772] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 211.929481][ T8772] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 212.381980][ T8793] loop1: detected capacity change from 0 to 8192 [ 212.497152][ T8808] net_ratelimit: 56 callbacks suppressed [ 212.497171][ T8808] IPVS: lc: FWM 3 0x00000003 - no destination available [ 212.795699][ T8818] vivid-003: disconnect [ 212.815232][ T8816] vivid-003: reconnect [ 213.215617][ T8786] loop4: detected capacity change from 0 to 40427 [ 213.329127][ T8806] loop6: detected capacity change from 0 to 32768 [ 213.344494][ T8799] loop5: detected capacity change from 0 to 40427 [ 213.498916][ T8799] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 213.516334][ T8786] F2FS-fs (loop4): invalid crc value [ 213.538386][ T8799] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 213.583474][ T8786] F2FS-fs (loop4): Found nat_bits in checkpoint [ 213.606485][ T8799] F2FS-fs (loop5): invalid crc value [ 213.671282][ T8799] F2FS-fs (loop5): Found nat_bits in checkpoint [ 213.915505][ T8786] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 214.018487][ T8799] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 214.063406][ T8799] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 214.114550][ T4189] attempt to access beyond end of device [ 214.114550][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 214.703344][ T8877] loop1: detected capacity change from 0 to 128 [ 214.918054][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1635'. [ 215.386543][ T8867] loop6: detected capacity change from 0 to 32768 [ 215.597611][ T8867] XFS (loop6): Mounting V5 Filesystem [ 215.776796][ T8867] XFS (loop6): Ending clean mount [ 215.814651][ T8867] XFS (loop6): Quotacheck needed: Please wait. [ 215.945019][ T8867] XFS (loop6): Quotacheck: Done. [ 216.118950][ T8944] binder: 8943:8944 ioctl c0306201 200000000040 returned -14 [ 216.188528][ T7405] XFS (loop6): Unmounting Filesystem [ 216.256751][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1653'. [ 216.424719][ T8955] loop1: detected capacity change from 0 to 512 [ 216.444660][ T8931] loop5: detected capacity change from 0 to 32768 [ 216.468939][ T8955] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 216.524876][ T8955] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 216.540557][ T8952] loop4: detected capacity change from 0 to 8192 [ 216.560228][ T8955] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 216.579760][ T8931] XFS (loop5): Mounting V5 Filesystem [ 216.607403][ T8955] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 216.619526][ T8955] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 216.628836][ T8955] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 216.640817][ T8955] EXT4-fs (loop1): too many log groups per flexible block group [ 216.649121][ T8955] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 216.656474][ T8955] EXT4-fs (loop1): mount failed [ 216.716916][ T8931] XFS (loop5): Ending clean mount [ 216.738888][ T8931] XFS (loop5): Quotacheck needed: Please wait. [ 216.859858][ T8931] XFS (loop5): Quotacheck: Done. [ 216.978205][ T8931] XFS (loop5): User initiated shutdown received. [ 217.018667][ T8931] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 217.041937][ T8931] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 217.201986][ T7205] XFS (loop5): Unmounting Filesystem [ 218.269023][ T8990] loop1: detected capacity change from 0 to 32768 [ 218.428923][ T26] audit: type=1800 audit(1759800841.238:13): pid=8990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1661" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 218.594748][ T9038] block nbd1: server does not support multiple connections per device. [ 218.630429][ T9038] block nbd1: shutting down sockets [ 218.756602][ T9041] block device autoloading is deprecated and will be removed. [ 219.866687][ T9087] netlink: 'syz.3.1683': attribute type 2 has an invalid length. [ 220.087178][ T9067] loop4: detected capacity change from 0 to 131072 [ 220.192185][ T9067] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 220.200351][ T9067] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 220.211206][ T9067] F2FS-fs (loop4): invalid crc value [ 220.288710][ T9067] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.375184][ T9067] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 220.382839][ T9067] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 220.399979][ T9116] loop6: detected capacity change from 0 to 2048 [ 220.421869][ T5074] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 220.469396][ T9067] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 220.529939][ T9116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.671900][ T4240] Bluetooth: hci0: command 0x0405 tx timeout [ 220.701759][ T5074] usb 4-1: Using ep0 maxpacket: 16 [ 220.745163][ T9126] TCP: tcp_parse_options: Illegal window scaling value 255 > 14 received [ 220.809937][ T9130] syz.1.1694[9130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.810035][ T9130] syz.1.1694[9130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.852038][ T5074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.932032][ T5074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.977524][ T5074] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 221.021804][ T5074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.070369][ T5074] usb 4-1: config 0 descriptor?? [ 221.127053][ T9141] loop6: detected capacity change from 0 to 256 [ 221.202511][ T9141] exfat: Deprecated parameter 'utf8' [ 221.226267][ T9141] exfat: Deprecated parameter 'namecase' [ 221.270448][ T9141] exfat: Deprecated parameter 'namecase' [ 221.300994][ T9141] exfat: Deprecated parameter 'utf8' [ 221.318090][ T9139] loop1: detected capacity change from 0 to 8192 [ 221.331861][ T4240] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 221.358947][ T9139] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 221.382995][ T9139] REISERFS (device loop1): using ordered data mode [ 221.385896][ T9141] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 221.389541][ T9139] reiserfs: using flush barriers [ 221.409378][ T9139] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.452075][ T9139] REISERFS (device loop1): checking transaction log (loop1) [ 221.576064][ T5074] corsair 0003:1B1C:1B02.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 221.622123][ T1092] block nbd0: Possible stuck request ffff888020470000: control (read@0,1024B). Runtime 60 seconds [ 221.632957][ T1092] block nbd0: Possible stuck request ffff888020470200: control (read@1024,1024B). Runtime 60 seconds [ 221.644851][ T1092] block nbd0: Possible stuck request ffff888020470400: control (read@2048,1024B). Runtime 60 seconds [ 221.656180][ T1092] block nbd0: Possible stuck request ffff888020470600: control (read@3072,512B). Runtime 60 seconds [ 221.692089][ T4240] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 221.792439][ T5074] corsair 0003:1B1C:1B02.000E: Read invalid backlight brightness: d5. [ 221.870288][ T9139] REISERFS (device loop1): Using tea hash to sort names [ 221.900092][ T9139] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 222.035428][ T5074] usb 4-1: USB disconnect, device number 14 [ 222.402736][ T4240] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 222.422370][ T4240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.456261][ T4240] usb 5-1: config 0 descriptor?? [ 222.513359][ T4240] pwc: Creative Labs Webcam Pro Ex detected. [ 222.519665][ T4240] pwc: Warning: more than 1 configuration available. [ 222.671882][ T7710] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 222.731880][ T4240] pwc: Failed to set LED on/off time (-71) [ 222.758325][ T4240] pwc: send_video_command error -71 [ 222.764060][ T4240] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 222.780324][ T9188] loop1: detected capacity change from 0 to 64 [ 222.820330][ T4240] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 222.860986][ T4240] usb 5-1: USB disconnect, device number 18 [ 222.941815][ T7710] usb 6-1: Using ep0 maxpacket: 16 [ 222.949303][ T9193] loop6: detected capacity change from 0 to 2048 [ 223.008278][ T9193] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.065682][ T7710] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2047, setting to 1024 [ 223.103112][ T7710] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 223.318094][ T7710] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.337644][ T9202] loop1: detected capacity change from 0 to 512 [ 223.347843][ T7710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.376596][ T7710] usb 6-1: Product: syz [ 223.406868][ T7710] usb 6-1: Manufacturer: syz [ 223.416110][ T7710] usb 6-1: SerialNumber: syz [ 223.439160][ T9202] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 223.452691][ T9202] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.772167][ T7710] cdc_ncm 6-1:1.0: bind() failure [ 223.791777][ T7710] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 223.816171][ T7710] cdc_ncm 6-1:1.1: bind() failure [ 223.846258][ T7710] usb 6-1: USB disconnect, device number 3 [ 224.072134][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 224.444134][ T9220] loop4: detected capacity change from 0 to 32768 [ 224.472950][ T9242] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 224.564943][ T9220] JBD2: Ignoring recovery information on journal [ 224.717600][ T9220] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 224.765812][ T9251] loop1: detected capacity change from 0 to 512 [ 224.994371][ T9251] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1723: couldn't read orphan inode 26 (err -116) [ 225.008961][ T9251] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.030119][ T9251] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.048312][ T9269] program syz.3.1731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.100987][ T9251] EXT4-fs (loop1): shut down requested (2) [ 225.168070][ T9271] loop5: detected capacity change from 0 to 4096 [ 225.183462][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 225.217667][ T9273] loop6: detected capacity change from 0 to 512 [ 225.282821][ T9273] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1733: iget: bad extended attribute block 1 [ 225.361764][ T9278] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.399893][ T9273] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1733: couldn't read orphan inode 15 (err -117) [ 225.434648][ T9273] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 225.538498][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1737'. [ 225.561750][ T26] audit: type=1800 audit(1759800848.368:14): pid=9273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1733" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 225.785774][ T9292] loop1: detected capacity change from 0 to 2048 [ 225.810298][ T9294] loop6: detected capacity change from 0 to 1024 [ 225.891852][ T9294] EXT4-fs (loop6): mounted filesystem without journal. Opts: noinit_itable,dax=inode,nolazytime,abort,dax=inode,lazytime,noload,bsddf,noauto_da_alloc,,errors=continue. Quota mode: none. [ 225.913357][ T9292] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 225.990255][ T9292] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.108371][ T9294] EXT4-fs (loop6): shut down requested (1) [ 226.147360][ T9294] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: none. [ 226.157429][ T9312] netlink: 'syz.5.1747': attribute type 10 has an invalid length. [ 226.339996][ T9319] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 227.040510][ T9346] loop1: detected capacity change from 0 to 128 [ 227.129435][ T9346] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.153345][ T9346] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.251854][ T5938] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 227.460095][ T9361] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1767'. [ 227.591849][ T7710] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 227.621925][ T5938] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.630046][ T5938] usb 7-1: config 0 has no interface number 0 [ 227.639335][ T5938] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.653972][ T5938] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.668262][ T5938] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.689006][ T5938] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 227.706473][ T5938] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.766810][ T5938] usb 7-1: config 0 descriptor?? [ 227.831838][ T7710] usb 6-1: Using ep0 maxpacket: 16 [ 227.901907][ T1108] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 227.952079][ T7710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.966777][ T7710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.977013][ T7710] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 227.986155][ T7710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.005242][ T7710] usb 6-1: config 0 descriptor?? [ 228.051860][ T5074] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 228.161795][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 228.252324][ T5938] hid (null): report_id 35660 is invalid [ 228.281954][ T1108] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.291851][ T13] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 228.303465][ T1108] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.316097][ T1108] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.321768][ T5074] usb 5-1: Using ep0 maxpacket: 16 [ 228.328732][ T1108] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.345104][ T1108] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.354200][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.462008][ T5074] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 228.470955][ T5074] usb 5-1: config 0 has no interface number 0 [ 228.488270][ T5938] uclogic 0003:28BD:0042.000F: failed retrieving string descriptor #100: -71 [ 228.497541][ T7710] corsair 0003:1B1C:1B02.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 228.509349][ T5938] uclogic 0003:28BD:0042.000F: failed retrieving pen parameters: -71 [ 228.520855][ T5938] uclogic 0003:28BD:0042.000F: pen probing failed: -71 [ 228.527879][ T5938] uclogic 0003:28BD:0042.000F: failed probing parameters: -71 [ 228.536112][ T5938] uclogic: probe of 0003:28BD:0042.000F failed with error -71 [ 228.543760][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 228.553176][ T5938] usb 7-1: USB disconnect, device number 2 [ 228.612009][ T1108] usb 2-1: GET_CAPABILITIES returned 0 [ 228.617824][ T1108] usbtmc 2-1:16.0: can't read capabilities [ 228.632054][ T5074] usb 5-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 228.642331][ T5074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.650352][ T5074] usb 5-1: Product: syz [ 228.655200][ T5074] usb 5-1: Manufacturer: syz [ 228.659863][ T5074] usb 5-1: SerialNumber: syz [ 228.667162][ T5074] usb 5-1: config 0 descriptor?? [ 228.682030][ T13] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 228.690376][ T13] usb 4-1: config 0 has no interface number 0 [ 228.712109][ T7710] corsair 0003:1B1C:1B02.0010: Read invalid backlight brightness: d5. [ 228.713710][ T5074] usb-storage 5-1:0.102: USB Mass Storage device detected [ 228.751195][ T5074] usb-storage 5-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 228.760299][ T5074] usb-storage 5-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 228.760299][ T5074] Please send a copy of this message to and [ 228.820265][ T5938] usb 2-1: USB disconnect, device number 7 [ 228.919484][ T7710] usb 6-1: USB disconnect, device number 4 [ 228.925914][ T13] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 228.949856][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.960532][ T5587] usb 5-1: USB disconnect, device number 19 [ 228.987400][ T13] usb 4-1: Product: syz [ 228.992926][ T13] usb 4-1: Manufacturer: syz [ 228.997589][ T13] usb 4-1: SerialNumber: syz [ 229.004704][ T13] usb 4-1: config 0 descriptor?? [ 229.043432][ T13] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 229.121290][ T9395] loop6: detected capacity change from 0 to 1024 [ 229.169457][ T9395] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 229.179713][ T9395] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 229.190883][ T9395] EXT4-fs error (device loop6): ext4_get_journal_inode:5160: inode #32: comm syz.6.1783: iget: special inode unallocated [ 229.204992][ T9395] EXT4-fs (loop6): no journal found [ 229.210226][ T9395] EXT4-fs (loop6): can't get journal size [ 229.218326][ T9395] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 229.256631][ T13] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 229.268866][ T13] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 229.461787][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 229.557227][ T9406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1788'. [ 229.565724][ T9408] loop5: detected capacity change from 0 to 256 [ 229.655787][ T5587] usb 4-1: USB disconnect, device number 15 [ 229.671827][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 229.690526][ T5587] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 229.733626][ T5587] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 229.759948][ T9410] loop1: detected capacity change from 0 to 2048 [ 229.762837][ T9414] program syz.6.1791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.788371][ T9410] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 229.793613][ T5587] quatech2 4-1:0.51: device disconnected [ 229.883899][ T9417] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.050245][ T9421] loop6: detected capacity change from 0 to 2048 [ 230.202811][ T9421] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.326021][ T9437] loop1: detected capacity change from 0 to 512 [ 230.468705][ T9437] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 230.532168][ T9437] UDF-fs: Scanning with blocksize 512 failed [ 230.539388][ T9437] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 230.547686][ T9444] netlink: 1028 bytes leftover after parsing attributes in process `syz.6.1803'. [ 230.571696][ T9437] UDF-fs: Scanning with blocksize 1024 failed [ 230.573591][ T9416] loop5: detected capacity change from 0 to 32768 [ 230.601379][ T9444] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 230.605550][ T9437] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 230.634072][ T9437] UDF-fs: Scanning with blocksize 2048 failed [ 230.703268][ T9437] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 230.783083][ T9416] XFS (loop5): Mounting V5 Filesystem [ 230.858351][ T9437] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.970649][ T9416] XFS (loop5): Ending clean mount [ 230.975792][ T9464] loop4: detected capacity change from 0 to 4096 [ 231.008706][ T9416] XFS (loop5): Quotacheck needed: Please wait. [ 231.081916][ T9468] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.119581][ T9469] input: syz1 as /devices/virtual/input/input22 [ 231.201746][ T9416] XFS (loop5): Quotacheck: Done. [ 231.567099][ T9476] loop1: detected capacity change from 0 to 32768 [ 231.605213][ T7205] XFS (loop5): Unmounting Filesystem [ 231.795535][ T9476] XFS (loop1): Mounting V5 Filesystem [ 231.943835][ T9476] XFS (loop1): Ending clean mount [ 231.967389][ T9476] XFS (loop1): Quotacheck needed: Please wait. [ 232.116164][ T9476] XFS (loop1): Quotacheck: Done. [ 232.178542][ T4183] XFS (loop1): Unmounting Filesystem [ 232.666515][ T9482] loop6: detected capacity change from 0 to 40427 [ 232.720927][ T9482] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff [ 232.769558][ T9482] F2FS-fs (loop6): invalid crc value [ 232.841196][ T9482] F2FS-fs (loop6): Found nat_bits in checkpoint [ 232.926972][ T9511] bridge0: port 3(syz_tun) entered blocking state [ 232.966300][ T9511] bridge0: port 3(syz_tun) entered disabled state [ 233.007342][ T9511] device syz_tun entered promiscuous mode [ 233.026099][ T9511] bridge0: port 3(syz_tun) entered blocking state [ 233.033509][ T9511] bridge0: port 3(syz_tun) entered forwarding state [ 233.095259][ T9482] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 233.229027][ T9495] loop4: detected capacity change from 0 to 40427 [ 233.300452][ T9495] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 233.422953][ T9495] F2FS-fs (loop4): invalid crc value [ 233.428162][ T9513] loop1: detected capacity change from 0 to 65536 [ 233.477227][ T9495] F2FS-fs (loop4): Found nat_bits in checkpoint [ 233.601396][ T9513] XFS (loop1): Mounting V5 Filesystem [ 233.675272][ T9513] XFS (loop1): Ending clean mount [ 233.697418][ T9513] XFS (loop1): Unmounting Filesystem [ 233.878264][ T9495] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 234.197647][ T4189] attempt to access beyond end of device [ 234.197647][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 234.603730][ T9552] loop1: detected capacity change from 0 to 64 [ 234.806936][ T9560] loop6: detected capacity change from 0 to 2048 [ 234.918935][ T9560] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.277162][ T9583] loop1: detected capacity change from 0 to 736 [ 235.328460][ T9587] loop6: detected capacity change from 0 to 128 [ 235.530719][ T9583] rock: directory entry would overflow storage [ 235.557345][ T9583] rock: sig=0x3b10, size=4, remaining=3 [ 235.868130][ T7710] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 236.282002][ T7710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 236.298974][ T7710] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 236.330328][ T7710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.359272][ T7710] usb 5-1: config 0 descriptor?? [ 236.509897][ T9605] loop6: detected capacity change from 0 to 40427 [ 236.548084][ T9605] F2FS-fs (loop6): invalid crc value [ 236.578986][ T9605] F2FS-fs (loop6): Found nat_bits in checkpoint [ 236.601735][ T5074] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 236.629016][ T9605] F2FS-fs (loop6): Start checkpoint disabled! [ 236.656897][ T9605] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 236.814171][ T144] attempt to access beyond end of device [ 236.814171][ T144] loop6: rw=2049, want=40984, limit=40427 [ 236.974256][ T5074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 237.001193][ T5074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 237.026131][ T5074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 237.051831][ T5074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 237.231948][ T5074] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 237.249151][ T5074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.257716][ T5074] usb 2-1: Product: syz [ 237.267476][ T5587] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 237.276388][ T5074] usb 2-1: Manufacturer: syz [ 237.281013][ T5074] usb 2-1: SerialNumber: syz [ 237.311623][ T5074] usb 2-1: config 0 descriptor?? [ 237.322022][ T7710] video4linux radio48: keene_cmd_main failed (-71) [ 237.355096][ T7710] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 237.366172][ T9660] loop6: detected capacity change from 0 to 136 [ 237.376085][ T7710] usb 5-1: USB disconnect, device number 20 [ 237.464852][ T13] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 237.500143][ T9660] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 237.585871][ T5074] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 237.622277][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.652106][ T5587] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 237.672939][ T5587] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 237.695600][ T5587] usb 6-1: config 220 interface 0 has no altsetting 0 [ 237.721770][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 237.818203][ T5074] usb 2-1: USB disconnect, device number 8 [ 237.852017][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.871177][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.872830][ T5587] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 237.888079][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 237.907784][ T5587] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.919776][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.942586][ T5587] usb 6-1: Product: syz [ 237.946794][ T5587] usb 6-1: Manufacturer: syz [ 237.953285][ T5587] usb 6-1: SerialNumber: syz [ 237.966622][ T13] usb 4-1: config 0 descriptor?? [ 238.286199][ T9701] loop4: detected capacity change from 0 to 512 [ 238.342029][ T5587] usb 6-1: Found UVC 0.00 device syz (8086:0b07) [ 238.349924][ T5587] usb 6-1: No valid video chain found. [ 238.357717][ T9701] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 238.381265][ T5587] usb 6-1: USB disconnect, device number 5 [ 238.412113][ T9701] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 238.474597][ T13] logitech-hidpp-device 0003:046D:C343.0011: hidraw0: USB HID v3.0e Device [HID 046d:c343] on usb-dummy_hcd.3-1/input0 [ 238.538992][ T9701] EXT4-fs (loop4): orphan cleanup on readonly fs [ 238.606206][ T9709] loop1: detected capacity change from 0 to 4096 [ 238.618107][ T9701] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.1891: bad orphan inode 11 [ 238.684594][ T7708] usb 4-1: USB disconnect, device number 16 [ 238.728368][ T9701] ext4_test_bit(bit=10, block=2) = 0 [ 238.760556][ T9701] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000038b84894,noblock_validity,,errors=continue. Quota mode: none. [ 238.776042][ T9719] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.836461][ T9701] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 239.084012][ T9728] loop1: detected capacity change from 0 to 64 [ 239.120563][ T9723] loop5: detected capacity change from 0 to 4096 [ 239.381330][ T9723] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 239.633816][ T9718] loop6: detected capacity change from 0 to 32768 [ 239.646043][ T9752] loop1: detected capacity change from 0 to 128 [ 239.748433][ T9752] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 239.771849][ T9752] hpfs: filesystem error: improperly stopped [ 239.780386][ T9752] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 239.818677][ T9752] hpfs: You really don't want any checks? You are crazy... [ 239.850522][ T9752] hpfs: hpfs_map_sector(): read error [ 239.911504][ T9752] hpfs: code page support is disabled [ 239.950015][ T9718] non-latin1 character 0x365 found in JFS file name [ 239.959083][ T9752] hpfs: hpfs_map_4sectors(): unaligned read [ 239.987422][ T9718] mount with iocharset=utf8 to access [ 239.991860][ T5074] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 240.002481][ T9752] hpfs: hpfs_map_4sectors(): unaligned read [ 240.020874][ T9752] hpfs: filesystem error: unable to find root dir [ 240.177028][ T13] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 240.242053][ T5074] usb 6-1: Using ep0 maxpacket: 16 [ 240.362224][ T5074] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 240.374015][ T5074] usb 6-1: config 1 has no interface number 0 [ 240.400512][ T5074] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 240.443585][ T5074] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 240.481979][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 240.483857][ T5074] usb 6-1: config 1 interface 105 has no altsetting 0 [ 240.591605][ T9788] nbd: socks must be embedded in a SOCK_ITEM attr [ 240.622000][ T13] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 240.630135][ T13] usb 4-1: config 0 has no interface number 0 [ 240.682224][ T5074] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 240.702323][ T5074] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.724192][ T5074] usb 6-1: Product: syz [ 240.728531][ T5074] usb 6-1: Manufacturer: syz [ 240.744658][ T5074] usb 6-1: SerialNumber: syz [ 240.772063][ T9760] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 240.785008][ T9760] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 240.823659][ T13] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 240.846209][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.846426][ T9802] program syz.1.1917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.870353][ T13] usb 4-1: Product: syz [ 240.881030][ T13] usb 4-1: Manufacturer: syz [ 240.886347][ T13] usb 4-1: SerialNumber: syz [ 240.906245][ T13] usb 4-1: config 0 descriptor?? [ 240.953528][ T13] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 240.960506][ T9806] syz.1.1918[9806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.962645][ T9806] syz.1.1918[9806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.091922][ T2857] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 241.171530][ T13] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 241.206611][ T13] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 241.234206][ T9817] netlink: 'syz.6.1923': attribute type 2 has an invalid length. [ 241.237256][ T9760] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 241.256761][ T9760] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 241.282012][ T9817] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1923'. [ 241.377362][ T2857] usb 5-1: Using ep0 maxpacket: 8 [ 241.493007][ T5074] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 241.511761][ T2857] usb 5-1: unable to get BOS descriptor or descriptor too short [ 241.529866][ T2857] usb 5-1: too many configurations: 73, using maximum allowed: 8 [ 241.542354][ T5074] aqc111: probe of 6-1:1.105 failed with error -71 [ 241.588128][ T5074] usb 6-1: USB disconnect, device number 6 [ 241.612044][ T2857] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 241.613355][ T13] usb 4-1: USB disconnect, device number 17 [ 241.619736][ T2857] usb 5-1: can't read configurations, error -71 [ 241.626092][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 241.670392][ T13] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 241.706143][ T13] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 241.727484][ T13] quatech2 4-1:0.51: device disconnected [ 241.741005][ T9837] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1932'. [ 241.748990][ T9835] loop6: detected capacity change from 0 to 2048 [ 241.788665][ T9839] netlink: 'syz.1.1933': attribute type 1 has an invalid length. [ 241.812875][ T9839] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1933'. [ 241.837518][ T9835] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 241.861351][ T9835] UDF-fs: Scanning with blocksize 512 failed [ 241.875424][ T9835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.157071][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1939'. [ 242.198630][ T9852] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1939'. [ 242.697682][ T9878] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 242.868687][ T9887] binder: 9884:9887 ioctl c018620c 200000000000 returned -22 [ 243.206283][ T9898] xt_CT: No such helper "snmp" [ 243.324621][ T9860] loop4: detected capacity change from 0 to 32768 [ 243.402528][ T9860] XFS: noikeep mount option is deprecated. [ 243.500579][ T9860] XFS (loop4): Mounting V5 Filesystem [ 243.657118][ T9860] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 243.725200][ T9860] XFS (loop4): Starting recovery (logdev: internal) [ 243.775725][ T9860] XFS (loop4): Ending recovery (logdev: internal) [ 243.924628][ T9940] netlink: 'syz.1.1976': attribute type 15 has an invalid length. [ 243.959731][ T9943] CUSE: unknown device info "" [ 243.971768][ T9943] CUSE: zero length info key specified [ 244.017557][ T4189] XFS (loop4): Unmounting Filesystem [ 244.335323][ T9955] loop5: detected capacity change from 0 to 4096 [ 244.387326][ T9960] loop1: detected capacity change from 0 to 764 [ 244.431466][ T9962] loop6: detected capacity change from 0 to 512 [ 244.624025][ T9962] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 244.637662][ T9955] ntfs: (device loop5): parse_options(): NLS character set тШУќ‚У=еsh not found. Using previous one cp869. [ 244.699413][ T9955] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 244.745628][ T9962] EXT4-fs (loop6): 1 orphan inode deleted [ 244.751378][ T9962] EXT4-fs (loop6): 1 truncate cleaned up [ 244.821798][ T9955] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 244.830903][ T9955] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 244.840116][ T9962] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,data_err=ignore,init_itable,debug_want_extra_isize=0x0000000000000006. Quota mode: none. [ 244.852231][ T9965] loop1: detected capacity change from 0 to 512 [ 244.881934][ T9955] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 244.949640][ T9955] ntfs: volume version 3.1. [ 245.017552][ T9965] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 245.084405][ T9962] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.1987: iget: bad extra_isize 46 (inode size 256) [ 245.122259][ T9965] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 245.182077][ T9962] EXT4-fs (loop6): Remounting filesystem read-only [ 245.200191][ T9965] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.1988: Failed to acquire dquot type 1 [ 245.260314][ T9965] EXT4-fs (loop1): 1 truncate cleaned up [ 245.281334][ T9965] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue. Quota mode: writeback. [ 245.325837][ T9965] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.605665][ T9990] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 245.605665][ T9990] [ 245.619573][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.774841][T10042] program syz.4.2021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.818844][T10044] loop5: detected capacity change from 0 to 512 [ 246.873356][T10044] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 246.941562][T10044] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,noload,,errors=continue. Quota mode: writeback. [ 246.966358][T10044] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 247.063225][T10044] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2022: bg 0: block 145: padding at end of block bitmap is not set [ 247.135537][T10052] team0: Device gtp0 is of different type [ 247.156507][T10044] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 247.284787][T10054] program syz.4.2028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.287365][T10034] loop6: detected capacity change from 0 to 32768 [ 247.432077][T10034] ERROR: (device loop6): diAllocBit: iag inconsistent [ 247.432077][T10034] [ 247.534919][T10034] ialloc: diAlloc returned -5! [ 247.783785][T10076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input23 [ 248.266461][T10107] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2047'. [ 248.293670][T10106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2049'. [ 248.336141][T10106] netem: change failed [ 248.336573][ T7710] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 248.422693][T10111] loop1: detected capacity change from 0 to 4096 [ 248.490497][T10118] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.555955][T10113] loop6: detected capacity change from 0 to 4096 [ 248.612962][T10113] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 248.631883][ T7710] usb 6-1: Using ep0 maxpacket: 32 [ 248.663078][T10111] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 248.700150][T10111] Remounting filesystem read-only [ 248.773366][ T7710] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.802208][ T7710] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 248.836325][ T7710] usb 6-1: config 0 interface 0 has no altsetting 0 [ 248.844890][ T4183] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 248.851848][ T7710] usb 6-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 248.878896][ T7710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.908986][ T7710] usb 6-1: config 0 descriptor?? [ 249.253091][T10140] loop6: detected capacity change from 0 to 1024 [ 249.327896][T10140] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 249.398827][T10140] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 249.585128][T10140] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,norecovery,acl,max_batch_time=0x0000000000000007,mblk_io_submit,delalloc,dioread_nolock,,errors=continue. Quota mode: none. [ 249.679962][ T7710] wacom 0003:056A:0094.0012: Using device in hidraw-only mode [ 249.711695][ T26] audit: type=1326 audit(1759800872.498:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.1.2066" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e753c6ec9 code=0x0 [ 249.717738][ T7710] wacom 0003:056A:0094.0012: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.5-1/input0 [ 249.856027][ T7710] usb 6-1: USB disconnect, device number 7 [ 249.897283][T10151] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 249.937283][T10156] loop4: detected capacity change from 0 to 256 [ 250.012470][T10156] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 250.031321][T10155] fido_id[10155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 250.767449][T10188] loop6: detected capacity change from 0 to 1024 [ 250.845551][T10188] EXT4-fs (loop6): Ignoring removed bh option [ 250.876563][T10188] EXT4-fs (loop6): inline encryption not supported [ 250.893124][T10188] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 250.912523][ T5587] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 250.951959][ T2857] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 250.993748][T10188] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 2: comm syz.6.2085: lblock 2 mapped to illegal pblock 2 (length 1) [ 251.107433][T10188] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 251.122230][T10188] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 48: comm syz.6.2085: lblock 0 mapped to illegal pblock 48 (length 1) [ 251.157683][T10188] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 251.171231][T10188] EXT4-fs error (device loop6): ext4_acquire_dquot:6209: comm syz.6.2085: Failed to acquire dquot type 0 [ 251.192036][ T2857] usb 6-1: Using ep0 maxpacket: 8 [ 251.192713][T10188] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 251.211418][T10188] EXT4-fs error (device loop6): ext4_evict_inode:282: inode #11: comm syz.6.2085: mark_inode_dirty error [ 251.223626][T10188] EXT4-fs warning (device loop6): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 251.234559][T10188] EXT4-fs (loop6): 1 orphan inode deleted [ 251.241950][T10188] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 251.261821][ T4228] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 251.281759][ T5587] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 251.321069][ T4228] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 251.330953][ T4228] EXT4-fs error (device loop6): ext4_release_dquot:6245: comm kworker/u4:4: Failed to release dquot type 0 [ 251.351215][ T2857] usb 6-1: config 0 has an invalid interface number: 130 but max is 0 [ 251.371915][ T2857] usb 6-1: config 0 has no interface number 0 [ 251.403978][T10188] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 48: comm syz.6.2085: lblock 0 mapped to illegal pblock 48 (length 1) [ 251.444585][T10188] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=-117 [ 251.471956][ T5587] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 251.481447][ T5587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.511769][ T5587] usb 2-1: Product: syz [ 251.515990][ T5587] usb 2-1: Manufacturer: syz [ 251.520615][ T5587] usb 2-1: SerialNumber: syz [ 251.542057][ T2857] usb 6-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 251.562529][ T2857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.572001][ T2857] usb 6-1: Product: syz [ 251.576482][ T2857] usb 6-1: Manufacturer: syz [ 251.581096][ T2857] usb 6-1: SerialNumber: syz [ 251.606190][ T2857] usb 6-1: config 0 descriptor?? [ 251.615157][ T5587] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input24 [ 251.701873][ T1092] block nbd0: Possible stuck request ffff888020470000: control (read@0,1024B). Runtime 90 seconds [ 251.712732][ T1092] block nbd0: Possible stuck request ffff888020470200: control (read@1024,1024B). Runtime 90 seconds [ 251.724115][ T2857] as10x_usb: device has been detected [ 251.724649][ T1092] block nbd0: Possible stuck request ffff888020470400: control (read@2048,1024B). Runtime 90 seconds [ 251.731439][ T2857] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 251.740463][ T1092] block nbd0: Possible stuck request ffff888020470600: control (read@3072,512B). Runtime 90 seconds [ 251.822810][ T3546] bcm5974 2-1:1.0: could not read from device [ 251.921469][ T5587] usb 2-1: USB disconnect, device number 9 [ 251.961410][ T3546] bcm5974 2-1:1.0: could not read from device [ 251.971871][ T2857] usb 6-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 252.029894][ T2857] as10x_usb: error during firmware upload part1 [ 252.056337][T10208] loop6: detected capacity change from 0 to 64 [ 252.056384][ T2857] Registered device PCTV Systems picoStick (74e) [ 252.066579][ T2857] usb 6-1: USB disconnect, device number 8 [ 252.160759][ T2857] Unregistered device PCTV Systems picoStick (74e) [ 252.183073][ T2857] as10x_usb: device has been disconnected [ 252.247868][T10202] loop4: detected capacity change from 0 to 32768 [ 252.380382][T10202] attempt to access beyond end of device [ 252.380382][T10202] loop4: rw=1, want=4680040, limit=32768 [ 252.405925][T10202] metapage_write_end_io: I/O error [ 252.424145][T10202] ERROR: (device loop4): diWrite: ixpxd invalid [ 252.424145][T10202] [ 252.482033][T10202] ERROR: (device loop4): remounting filesystem as read-only [ 252.492454][T10202] ERROR: (device loop4): txCommit: [ 252.492454][T10202] [ 252.526378][ T275] blkno = 8ed2c, nblocks = 1 [ 252.527602][T10202] blkno = 8ed2c, nblocks = 1 [ 252.531010][ T275] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 252.531010][ T275] [ 252.548432][T10202] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 252.548432][T10202] [ 252.563625][T10202] ERROR: (device loop4): dtSearch: DT_GETPAGE: dtree page corrupt [ 252.563625][T10202] [ 252.605774][T10202] jfs_mkdir: dtSearch returned -5 [ 252.674473][T10202] ERROR: (device loop4): dtSearch: DT_GETPAGE: dtree page corrupt [ 252.674473][T10202] [ 252.730684][T10202] jfs_lookup: dtSearch returned -5 [ 252.806521][ T4189] attempt to access beyond end of device [ 252.806521][ T4189] loop4: rw=1, want=4680040, limit=32768 [ 252.839349][ T4189] metapage_write_end_io: I/O error [ 252.854880][ T4189] JFS: metapage_get_blocks failed [ 252.870283][ T4189] JFS: metapage_get_blocks failed [ 252.880328][ T4189] JFS: metapage_get_blocks failed [ 252.900738][ T4189] JFS: metapage_get_blocks failed [ 253.282476][T10234] loop4: detected capacity change from 0 to 2048 [ 253.337318][T10221] loop5: detected capacity change from 0 to 32768 [ 253.402535][T10234] NILFS (loop4): invalid segment: Magic number mismatch [ 253.417112][T10236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2105'. [ 253.427523][T10234] NILFS (loop4): trying rollback from an earlier position [ 253.437473][T10221] JBD2: Ignoring recovery information on journal [ 253.464193][T10234] NILFS (loop4): recovery complete [ 253.469940][T10221] JBD2: corrupted journal superblock [ 253.488142][T10238] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.517375][T10221] JBD2: error -117 scanning journal [ 253.550784][T10232] loop6: detected capacity change from 0 to 32768 [ 253.554431][T10221] (syz.5.2099,10221,0):ocfs2_journal_wipe:1154 ERROR: status = -117 [ 253.602119][T10221] (syz.5.2099,10221,1):ocfs2_check_volume:2424 ERROR: status = -117 [ 253.629015][T10234] overlayfs: upper fs does not support tmpfile. [ 253.662437][T10232] XFS (loop6): Mounting V5 Filesystem [ 253.666905][T10221] (syz.5.2099,10221,0):ocfs2_check_volume:2493 ERROR: status = -117 [ 253.743773][T10221] (syz.5.2099,10221,0):ocfs2_mount_volume:1824 ERROR: status = -117 [ 253.754383][T10234] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 253.772209][T10234] overlayfs: failed to set xattr on upper [ 253.782102][T10232] XFS (loop6): Ending clean mount [ 253.799037][T10234] overlayfs: ...falling back to xino=off. [ 253.808204][T10232] XFS (loop6): Quotacheck needed: Please wait. [ 253.840124][T10221] (syz.5.2099,10221,0):ocfs2_fill_super:1177 ERROR: status = -117 [ 253.929784][T10232] XFS (loop6): Quotacheck: Done. [ 254.016242][ T7708] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 254.117252][ T7405] XFS (loop6): Unmounting Filesystem [ 254.342036][ T7708] usb 4-1: Using ep0 maxpacket: 16 [ 254.482008][ T7708] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.497023][ T7708] usb 4-1: config 0 interface 0 has no altsetting 0 [ 254.548548][ T7708] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 254.591758][ T7708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.632640][ T7708] usb 4-1: config 0 descriptor?? [ 254.740810][T10269] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input25 [ 254.762278][T10272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2117'. [ 254.900419][T10280] tipc: Started in network mode [ 254.906513][T10280] tipc: Node identity ac14140f, cluster identity 4711 [ 254.913547][T10280] tipc: New replicast peer: 255.255.255.255 [ 254.920062][T10280] tipc: Enabled bearer , priority 10 [ 254.928760][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2122'. [ 255.138495][ T7708] cougar 0003:060B:500A.0013: unexpected long global item [ 255.168979][ T7708] cougar 0003:060B:500A.0013: parse failed [ 255.193650][ T7708] cougar: probe of 0003:060B:500A.0013 failed with error -22 [ 255.325975][ T7708] usb 4-1: USB disconnect, device number 18 [ 255.481795][ T4240] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 255.544131][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.550447][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.701806][ T2857] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 255.852165][ T5938] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 255.872096][ T4240] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 255.880453][ T4240] usb 5-1: config 0 has no interface number 0 [ 255.887300][ T4240] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 255.896497][ T4240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.909372][ T4240] usb 5-1: config 0 descriptor?? [ 255.963227][ T4240] cp210x 5-1:0.32: cp210x converter detected [ 256.033750][ T13] tipc: Node number set to 2886997007 [ 256.109070][T10318] loop6: detected capacity change from 0 to 1024 [ 256.211956][ T5938] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 256.227246][ T5938] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.237410][ T5938] usb 6-1: config 0 interface 0 has no altsetting 0 [ 256.249377][ T5938] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 256.258656][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.272010][ T2857] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 256.294831][ T2857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.298399][ T5938] usb 6-1: config 0 descriptor?? [ 256.326147][ T2857] usb 2-1: Product: syz [ 256.334039][ T2857] usb 2-1: Manufacturer: syz [ 256.338757][ T2857] usb 2-1: SerialNumber: syz [ 256.361151][ T2857] usb 2-1: config 0 descriptor?? [ 256.411939][ T4240] cp210x 5-1:0.32: failed to get vendor val 0x000e size 3: -71 [ 256.437017][ T4240] usb 5-1: cp210x converter now attached to ttyUSB0 [ 256.455454][ T4240] usb 5-1: USB disconnect, device number 23 [ 256.500909][ T4240] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 256.542657][ T4240] cp210x 5-1:0.32: device disconnected [ 256.628916][ T13] usb 2-1: USB disconnect, device number 10 [ 256.782645][ T5938] hid (null): report_id 16680 is invalid [ 256.790972][ T5938] uclogic 0003:5543:0064.0014: collection stack underflow [ 256.804758][ T5938] uclogic 0003:5543:0064.0014: item 0 1 0 12 parsing failed [ 256.815813][ T5938] uclogic 0003:5543:0064.0014: parse failed [ 256.828466][ T5938] uclogic: probe of 0003:5543:0064.0014 failed with error -22 [ 256.964158][T10342] loop4: detected capacity change from 0 to 256 [ 257.004363][ T13] usb 6-1: USB disconnect, device number 9 [ 257.004746][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2151'. [ 257.034736][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2151'. [ 257.068704][T10342] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 257.665788][T10381] loop5: detected capacity change from 0 to 256 [ 257.675215][T10379] loop4: detected capacity change from 0 to 1024 [ 257.732052][T10379] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 257.750418][T10379] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 257.801955][ T5587] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 257.828800][T10379] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,norecovery,acl,max_batch_time=0x0000000000000007,mblk_io_submit,delalloc,dioread_nolock,,errors=continue. Quota mode: none. [ 257.908444][ T13] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 257.988537][T10388] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 258.151991][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 258.192025][ T5587] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 258.228864][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2169'. [ 258.230213][ T5587] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 258.272115][ T13] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 258.278353][ T5587] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.296199][ T13] usb 2-1: config 0 has no interface number 0 [ 258.305847][ T5587] usb 7-1: config 0 descriptor?? [ 258.342130][T10370] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 258.346063][T10395] loop5: detected capacity change from 0 to 1024 [ 258.461598][ T26] audit: type=1800 audit(1759800881.268:16): pid=10395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2171" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 258.482011][ T13] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 258.512339][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.520763][ T13] usb 2-1: Product: syz [ 258.531101][ T13] usb 2-1: Manufacturer: syz [ 258.535873][ T13] usb 2-1: SerialNumber: syz [ 258.543337][ T13] usb 2-1: config 0 descriptor?? [ 258.581440][T10403] loop4: detected capacity change from 0 to 1024 [ 258.589910][ T13] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 258.675139][T10405] loop5: detected capacity change from 0 to 64 [ 258.687160][ T144] hfsplus: b-tree write err: -5, ino 4 [ 258.813526][ T13] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 258.823760][ T5587] kone 0003:1E7D:2CED.0015: hidraw0: USB HID v1.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.6-1/input0 [ 258.844659][ T13] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 259.028432][ T13] usb 7-1: USB disconnect, device number 3 [ 259.034363][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 259.235758][ T7710] usb 2-1: USB disconnect, device number 11 [ 259.251786][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 259.265968][ T7710] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 259.279593][ T7710] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 259.295208][ T7710] quatech2 2-1:0.51: device disconnected [ 259.831871][ T7710] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 259.974185][T10433] tipc: Started in network mode [ 259.985463][T10431] loop1: detected capacity change from 0 to 1024 [ 259.985945][T10433] tipc: Node identity ac14140f, cluster identity 4711 [ 260.018418][T10433] tipc: New replicast peer: 255.255.255.255 [ 260.034972][T10431] EXT4-fs (loop1): Ignoring removed bh option [ 260.050844][T10431] EXT4-fs (loop1): inline encryption not supported [ 260.058602][T10433] tipc: Enabled bearer , priority 10 [ 260.079080][T10431] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 260.079350][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2189'. [ 260.091566][T10431] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm syz.1.2188: lblock 2 mapped to illegal pblock 2 (length 1) [ 260.110968][ T7710] usb 6-1: Using ep0 maxpacket: 16 [ 260.116876][T10431] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 260.186355][T10431] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.2188: lblock 0 mapped to illegal pblock 48 (length 1) [ 260.201909][T10431] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 260.210720][T10431] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.2188: Failed to acquire dquot type 0 [ 260.262107][ T7710] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.279997][T10439] input: syz1 as /devices/virtual/input/input26 [ 260.291785][ T7710] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.313458][ T7710] usb 6-1: config 0 interface 0 has no altsetting 0 [ 260.341328][ T7710] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 260.351482][ T7710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.376427][T10431] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 260.377316][ T7710] usb 6-1: config 0 descriptor?? [ 260.415003][T10431] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.2188: mark_inode_dirty error [ 260.466254][T10431] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 260.497659][T10431] EXT4-fs (loop1): 1 orphan inode deleted [ 260.515532][ T7573] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 260.540098][T10431] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 260.568572][ T7573] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 260.612292][ T7573] EXT4-fs error (device loop1): ext4_release_dquot:6245: comm kworker/u4:9: Failed to release dquot type 0 [ 260.641227][T10445] loop4: detected capacity change from 0 to 256 [ 260.695775][T10445] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 260.770796][T10431] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.2188: lblock 0 mapped to illegal pblock 48 (length 1) [ 260.842699][T10431] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 260.885623][ T7710] cougar 0003:060B:500A.0016: unexpected long global item [ 260.902246][ T7710] cougar 0003:060B:500A.0016: parse failed [ 260.908379][ T7710] cougar: probe of 0003:060B:500A.0016 failed with error -22 [ 261.116345][ T7710] usb 6-1: USB disconnect, device number 10 [ 261.210067][ T5587] tipc: Node number set to 2886997007 [ 261.511790][ T5588] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 261.737833][T10481] loop5: detected capacity change from 0 to 128 [ 261.846822][T10481] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 261.880059][T10481] hpfs: filesystem error: improperly stopped [ 261.882136][ T5588] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.894093][T10481] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 261.916724][ T5588] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.922087][T10481] hpfs: You really don't want any checks? You are crazy... [ 261.959645][T10481] hpfs: hpfs_map_sector(): read error [ 261.965711][T10481] hpfs: code page support is disabled [ 261.977058][T10481] hpfs: hpfs_map_4sectors(): unaligned read [ 261.989678][T10481] hpfs: hpfs_map_4sectors(): unaligned read [ 261.996607][T10481] hpfs: filesystem error: unable to find root dir [ 262.021878][ T5588] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 262.051346][ T5588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 262.071585][ T5588] usb 5-1: SerialNumber: syz [ 262.357750][ T4240] hid-generic 0000:0004:0000.0017: unknown main item tag 0x0 [ 262.369050][ T5588] usb 5-1: 0:2 : does not exist [ 262.388145][ T4240] hid-generic 0000:0004:0000.0017: unknown main item tag 0x0 [ 262.418609][ T5588] usb 5-1: USB disconnect, device number 24 [ 262.427802][ T4240] hid-generic 0000:0004:0000.0017: unknown main item tag 0x0 [ 262.470243][ T4240] hid-generic 0000:0004:0000.0017: hidraw0: HID v0.05 Device [syz0] on syz0 [ 262.617069][T10508] program syz.5.2218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.668132][ T4295] udevd[4295]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.726727][T10507] fido_id[10507]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 262.856552][T10520] netlink: 'syz.3.2226': attribute type 2 has an invalid length. [ 262.868385][T10520] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2226'. [ 263.088196][T10530] loop1: detected capacity change from 0 to 64 [ 263.152859][T10534] loop4: detected capacity change from 0 to 2048 [ 263.257586][T10534] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 263.276571][T10534] UDF-fs: Scanning with blocksize 512 failed [ 263.283338][ T4240] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 263.296738][T10534] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.427021][T10516] loop5: detected capacity change from 0 to 32768 [ 263.591148][T10542] x_tables: duplicate underflow at hook 4 [ 263.662148][ T4240] usb 7-1: config 0 interface 0 altsetting 190 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.684059][ T4240] usb 7-1: config 0 interface 0 altsetting 190 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.725114][ T4240] usb 7-1: config 0 interface 0 has no altsetting 0 [ 263.755366][ T4240] usb 7-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 263.785890][ T4240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.823138][ T4240] usb 7-1: config 0 descriptor?? [ 264.037039][T10561] x_tables: ip_tables: NFQUEUE.3 target: invalid size 8 (kernel) != (user) 0 [ 264.260936][T10538] loop1: detected capacity change from 0 to 32768 [ 264.294518][T10538] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2234 (10538) [ 264.330262][ T4240] wacom 0003:056A:00E3.0018: hidraw0: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.6-1/input0 [ 264.370122][T10538] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 264.391110][T10538] BTRFS info (device loop1): turning on sync discard [ 264.440748][T10538] BTRFS info (device loop1): enabling disk space caching [ 264.471414][T10538] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 264.511870][T10538] BTRFS info (device loop1): trying to use backup root at mount time [ 264.550578][T10538] BTRFS info (device loop1): force clearing of disk cache [ 264.558731][ T4240] usb 7-1: USB disconnect, device number 4 [ 264.578127][T10573] fido_id[10573]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 264.594918][T10538] BTRFS info (device loop1): disk space caching is enabled [ 264.620968][T10538] BTRFS info (device loop1): has skinny extents [ 264.892857][T10538] BTRFS info (device loop1): clearing free space tree [ 264.899744][T10538] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 264.947065][T10538] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 264.995413][T10610] nbd1: detected capacity change from 0 to 549764202496 [ 265.009657][ T4197] block nbd1: Receive control failed (result -32) [ 265.014158][ T150] block nbd1: Send control failed (result -32) [ 265.024165][ T150] block nbd1: Request send failed, requeueing [ 265.033601][ T150] block nbd1: Dead connection, failed to find a fallback [ 265.040670][ T150] block nbd1: shutting down sockets [ 265.051969][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.065287][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 265.075272][ T1092] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.086428][ T1092] Buffer I/O error on dev nbd1, logical block 0, async page read [ 265.094724][ T1092] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.105801][ T1092] Buffer I/O error on dev nbd1, logical block 0, async page read [ 265.117793][ T1092] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.128735][ T1092] Buffer I/O error on dev nbd1, logical block 0, async page read [ 265.137392][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.148473][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 265.156494][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.162152][T10617] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 265.167358][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 265.193176][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.204762][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 265.223113][ T1092] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.234075][ T1092] Buffer I/O error on dev nbd1, logical block 0, async page read [ 265.241976][ T5399] ldm_validate_partition_table(): Disk read failed. [ 265.248755][ T1092] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.259631][ T1092] Buffer I/O error on dev nbd1, logical block 0, async page read [ 265.281933][ T1092] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.293043][ T1092] Buffer I/O error on dev nbd1, logical block 0, async page read [ 265.328493][ T5399] Dev nbd1: unable to read RDB block 0 [ 265.371131][ T5399] nbd1: unable to read partition table [ 265.384136][ T5399] ldm_validate_partition_table(): Disk read failed. [ 265.392162][ T5399] Dev nbd1: unable to read RDB block 0 [ 265.398202][ T5399] nbd1: unable to read partition table [ 265.501950][ T5399] ldm_validate_partition_table(): Disk read failed. [ 265.513246][ T5399] Dev nbd1: unable to read RDB block 0 [ 265.538182][ T5399] nbd1: unable to read partition table [ 265.566520][ T5399] ldm_validate_partition_table(): Disk read failed. [ 265.580876][ T5399] Dev nbd1: unable to read RDB block 0 [ 265.607485][ T5399] nbd1: unable to read partition table [ 265.822020][T10636] loop4: detected capacity change from 0 to 512 [ 265.868925][T10636] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 265.881232][T10636] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 266.019743][T10636] EXT4-fs (loop4): 1 truncate cleaned up [ 266.033919][T10636] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,resgid=0x0000000000000000,nomblk_io_submit,nombcache,resgid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 266.726687][T10649] netlink: 'syz.5.2273': attribute type 1 has an invalid length. [ 266.771670][T10649] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2273'. [ 266.812404][T10651] loop1: detected capacity change from 0 to 8 [ 266.920160][T10657] binder: 10656:10657 ioctl 400c620e 2000000001c0 returned -22 [ 267.159247][T10663] loop1: detected capacity change from 0 to 512 [ 267.373869][T10663] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,,errors=continue. Quota mode: none. [ 267.665301][ T5587] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 267.729291][T10684] loop6: detected capacity change from 0 to 1024 [ 267.786341][T10686] loop1: detected capacity change from 0 to 1024 [ 267.864306][T10665] loop5: detected capacity change from 0 to 32768 [ 267.890522][ T26] audit: type=1800 audit(1759800890.694:17): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2291" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 267.977851][ T26] audit: type=1800 audit(1759800890.724:18): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2289" name="file1" dev="loop6" ino=2 res=0 errno=0 [ 268.023626][T10665] non-latin1 character 0x365 found in JFS file name [ 268.041841][T10665] mount with iocharset=utf8 to access [ 268.071921][ T5587] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 268.107551][ T5587] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.161421][ T5587] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 268.194795][ T5587] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 268.391953][ T5587] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 268.410718][ T5587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.450334][ T5587] usb 5-1: Product: syz [ 268.456194][ T5587] usb 5-1: Manufacturer: syz [ 268.460980][ T5587] usb 5-1: SerialNumber: syz [ 268.482701][ T5587] usb 5-1: config 0 descriptor?? [ 268.747294][ T5587] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 268.915284][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2303'. [ 268.936689][T10705] loop1: detected capacity change from 0 to 32768 [ 268.986121][ T5587] usb 5-1: USB disconnect, device number 25 [ 269.034314][T10705] (syz.1.2300,10705,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 269.049097][T10705] (syz.1.2300,10705,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 269.084188][T10718] loop5: detected capacity change from 0 to 256 [ 269.089062][T10705] JBD2: Ignoring recovery information on journal [ 269.148477][T10705] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 269.176944][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2306'. [ 269.217195][T10718] FAT-fs (loop5): Directory bread(block 64) failed [ 269.265394][T10718] FAT-fs (loop5): Directory bread(block 65) failed [ 269.279032][T10705] ocfs2: Unmounting device (7,1) on (node local) [ 269.300483][T10718] FAT-fs (loop5): Directory bread(block 66) failed [ 269.348924][T10718] FAT-fs (loop5): Directory bread(block 67) failed [ 269.371369][T10718] FAT-fs (loop5): Directory bread(block 68) failed [ 269.435604][T10718] FAT-fs (loop5): Directory bread(block 69) failed [ 269.480122][T10718] FAT-fs (loop5): Directory bread(block 70) failed [ 269.505676][T10718] FAT-fs (loop5): Directory bread(block 71) failed [ 269.512566][T10718] FAT-fs (loop5): Directory bread(block 72) failed [ 269.519216][T10718] FAT-fs (loop5): Directory bread(block 73) failed [ 269.645999][T10738] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2312'. [ 269.729221][T10740] kvm [10739]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x6 [ 269.810868][T10743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2315'. [ 269.831247][T10743] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2315'. [ 270.036151][T10754] loop5: detected capacity change from 0 to 1024 [ 270.189626][T10732] loop6: detected capacity change from 0 to 32768 [ 270.190629][ T26] audit: type=1800 audit(1759800892.994:19): pid=10754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2320" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 270.277868][T10732] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2311 (10732) [ 270.372951][T10732] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 270.389453][T10732] BTRFS info (device loop6): using free space tree [ 270.439749][T10732] BTRFS info (device loop6): has skinny extents [ 270.641800][ T5938] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 270.791070][T10732] BTRFS info (device loop6): enabling ssd optimizations [ 270.862232][T10802] loop1: detected capacity change from 0 to 128 [ 270.890561][T10802] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 270.963904][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2332'. [ 271.000598][T10802] hpfs: filesystem error: improperly stopped [ 271.015481][T10802] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 271.033657][T10802] hpfs: You really don't want any checks? You are crazy... [ 271.073119][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 271.092258][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 271.102223][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 271.111503][T10802] hpfs: hpfs_map_sector(): read error [ 271.113688][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 271.133020][T10802] hpfs: code page support is disabled [ 271.175516][T10802] hpfs: hpfs_map_4sectors(): unaligned read [ 271.230100][T10802] hpfs: hpfs_map_4sectors(): unaligned read [ 271.241746][T10802] hpfs: filesystem error: unable to find root dir [ 271.327576][ T5938] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 271.346978][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.377718][T10802] hpfs: hpfs_map_4sectors(): unaligned read [ 271.380925][ T5938] usb 4-1: Product: syz [ 271.408922][ T5938] usb 4-1: Manufacturer: syz [ 271.427997][ T5938] usb 4-1: SerialNumber: syz [ 271.439461][T10802] hpfs: hpfs_map_sector(): read error [ 271.452666][T10818] xt_CT: No such helper "snmp" [ 271.464359][ T4228] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 271.489527][ T5938] usb 4-1: config 0 descriptor?? [ 271.781566][ T5938] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 272.187775][T10848] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 272.187775][T10848] [ 272.224339][ T7710] usb 4-1: USB disconnect, device number 19 [ 272.542820][T10863] loop4: detected capacity change from 0 to 256 [ 272.707537][T10874] loop5: detected capacity change from 0 to 256 [ 272.804388][T10874] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 272.913269][T10878] loop4: detected capacity change from 0 to 128 [ 273.007995][T10878] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 273.040004][T10878] hpfs: filesystem error: improperly stopped [ 273.085833][T10878] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 273.111294][T10878] hpfs: You really don't want any checks? You are crazy... [ 273.149836][T10878] hpfs: hpfs_map_sector(): read error [ 273.177664][T10878] hpfs: code page support is disabled [ 273.204006][T10878] hpfs: hpfs_map_4sectors(): unaligned read [ 273.234592][T10878] hpfs: hpfs_map_4sectors(): unaligned read [ 273.240535][T10878] hpfs: filesystem error: unable to find root dir [ 273.262477][T10890] loop6: detected capacity change from 0 to 512 [ 273.353494][T10890] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.378139][T10859] loop1: detected capacity change from 0 to 32768 [ 273.392925][T10894] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2373'. [ 273.419667][T10890] ext4 filesystem being mounted at / supports timestamps until 2038-01-19 (0x7fffffff) [ 273.463773][T10859] XFS (loop1): Mounting V5 Filesystem [ 273.539655][T10908] kvm [10907]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 273.715235][T10859] XFS (loop1): Ending clean mount [ 273.768409][T10917] loop4: detected capacity change from 0 to 256 [ 273.768518][T10859] XFS (loop1): Quotacheck needed: Please wait. [ 273.848737][T10917] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 273.996414][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2383'. [ 274.015467][T10859] XFS (loop1): Quotacheck: Done. [ 274.192897][ T4183] XFS (loop1): Unmounting Filesystem [ 274.397867][T10940] loop4: detected capacity change from 0 to 128 [ 274.518530][T10940] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.541936][T10940] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.267785][ T26] audit: type=1326 audit(1759800898.074:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.5.2396" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91eb1beec9 code=0x0 [ 275.879900][T10973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.897332][T10973] bond0: (slave bond1): Enslaving as an active interface with an up link [ 276.035143][T10953] loop4: detected capacity change from 0 to 32768 [ 276.145859][T10953] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 276.232541][T10953] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 276.333738][T10980] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2406'. [ 276.361059][T10953] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 276.411064][ T2857] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 276.430740][ T2857] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 276.509381][T10959] loop1: detected capacity change from 0 to 32768 [ 276.752827][T10959] XFS (loop1): Mounting V5 Filesystem [ 276.800094][ T2857] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 369ms [ 276.884695][ T2857] gfs2: fsid=syz:syz.0: jid=0: Done [ 276.889979][T10953] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 276.952908][T10959] XFS (loop1): Ending clean mount [ 276.967141][T10959] XFS (loop1): Quotacheck needed: Please wait. [ 277.031630][ C0] sched: RT throttling activated [ 277.179177][T10959] XFS (loop1): Quotacheck: Done. [ 277.238188][T11000] device netdevsim0 entered promiscuous mode [ 277.275209][T11000] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 277.324886][ T4183] XFS (loop1): Unmounting Filesystem [ 277.540561][ T26] audit: type=1800 audit(1759800900.344:21): pid=11012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2417" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 277.575664][T11014] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 278.122836][T11038] netlink: 'syz.4.2430': attribute type 2 has an invalid length. [ 278.335209][T11055] bridge0: port 3(syz_tun) entered blocking state [ 278.397725][T11055] bridge0: port 3(syz_tun) entered disabled state [ 278.437227][T11055] device syz_tun entered promiscuous mode [ 278.479585][T11055] bridge0: port 3(syz_tun) entered blocking state [ 278.486207][T11055] bridge0: port 3(syz_tun) entered forwarding state [ 278.622491][T11066] xt_CT: No such helper "snmp" [ 278.643634][T11071] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 278.616136][T11070] bridge0: port 3(syz_tun) entered blocking state [ 278.672974][T11070] bridge0: port 3(syz_tun) entered disabled state [ 278.684273][T11070] device syz_tun entered promiscuous mode [ 278.698058][T11070] bridge0: port 3(syz_tun) entered blocking state [ 278.704637][T11070] bridge0: port 3(syz_tun) entered forwarding state [ 279.220982][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2454'. [ 279.267781][ T5070] hid-generic 0005:15C2:8002.0019: collection stack underflow [ 279.290737][ T5070] hid-generic 0005:15C2:8002.0019: item 0 0 0 12 parsing failed [ 279.300114][ T5070] hid-generic: probe of 0005:15C2:8002.0019 failed with error -22 [ 279.341864][ T5587] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 279.375731][T11059] loop5: detected capacity change from 0 to 32768 [ 279.558710][T11110] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.568779][T11110] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.702099][ T5587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.727446][ T5587] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 279.752990][ T5587] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 279.762631][ T5587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.773081][ T5587] usb 4-1: config 0 descriptor?? [ 279.884956][T11126] loop4: detected capacity change from 0 to 512 [ 279.905837][T11128] bridge0: port 3(syz_tun) entered blocking state [ 279.917516][T11128] bridge0: port 3(syz_tun) entered disabled state [ 279.928393][T11128] device syz_tun entered promiscuous mode [ 280.034565][T11126] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.074038][T11126] ext4 filesystem being mounted at / supports timestamps until 2038-01-19 (0x7fffffff) [ 280.172013][ T5587] usbhid 4-1:0.0: can't add hid device: -71 [ 280.178210][ T5587] usbhid: probe of 4-1:0.0 failed with error -71 [ 280.216816][ T5587] usb 4-1: USB disconnect, device number 20 [ 280.859694][T11168] ptrace attach of "./syz-executor exec"[4189] was attempted by " аџ №Ѕ Рџ Рџ аџ рџ №џ Аџ Рџ џџџџ    џџџџ   џџџџ  [ 280.869087][T11169] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2484'. [ 280.904453][ T5587] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 281.019410][T11170] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2484'. [ 281.193352][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'. [ 281.321937][ T5587] usb 2-1: Using ep0 maxpacket: 16 [ 281.354523][T11184] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 281.441907][ T5587] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.461747][ T5587] usb 2-1: config 0 has no interfaces? [ 281.632171][ T5587] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 281.653080][ T5587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.680824][ T5587] usb 2-1: Product: syz [ 281.701592][ T5587] usb 2-1: Manufacturer: syz [ 281.731993][ T5587] usb 2-1: SerialNumber: syz [ 281.759046][ T5587] usb 2-1: config 0 descriptor?? [ 281.791885][ T1092] block nbd0: Possible stuck request ffff888020470000: control (read@0,1024B). Runtime 120 seconds [ 281.803153][ T1092] block nbd0: Possible stuck request ffff888020470200: control (read@1024,1024B). Runtime 120 seconds [ 281.816820][ T1092] block nbd0: Possible stuck request ffff888020470400: control (read@2048,1024B). Runtime 120 seconds [ 281.827913][ T1092] block nbd0: Possible stuck request ffff888020470600: control (read@3072,512B). Runtime 120 seconds [ 282.215886][ T7710] usb 2-1: USB disconnect, device number 12 [ 282.398695][T11212] loop5: detected capacity change from 0 to 32768 [ 282.537419][T11212] XFS (loop5): Mounting V5 Filesystem [ 282.625327][ T6853] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 282.665180][T11212] XFS (loop5): Ending clean mount [ 282.681794][ T5587] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 282.742669][ T7205] XFS (loop5): Unmounting Filesystem [ 282.942105][ T5587] usb 7-1: Using ep0 maxpacket: 32 [ 283.078017][ T5587] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.087094][ T6853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 283.100174][ T5587] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.125558][ T6853] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 283.135995][ T6853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.153782][ T6853] usb 5-1: config 0 descriptor?? [ 283.183082][T11226] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 283.292276][ T5587] usb 7-1: New USB device found, idVendor=0a53, idProduct=4b85, bcdDevice=f5.de [ 283.305446][ T5587] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.326102][ T5587] usb 7-1: Product: syz [ 283.331914][ T5587] usb 7-1: Manufacturer: syz [ 283.336567][ T5587] usb 7-1: SerialNumber: syz [ 283.354446][ T5587] usb 7-1: config 0 descriptor?? [ 283.596747][T11231] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2514'. [ 283.598903][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2532'. [ 283.627915][ T5588] usb 7-1: USB disconnect, device number 5 [ 283.692547][ T6853] kone 0003:1E7D:2CED.001A: hidraw0: USB HID v1.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 283.913694][ T5588] usb 5-1: USB disconnect, device number 26 [ 283.966380][T11286] loop1: detected capacity change from 0 to 256 [ 284.455226][T11298] Falling back ldisc for ttyS3. [ 285.666503][T11357] tap0: tun_chr_ioctl cmd 2147767519 [ 285.738349][T11306] loop1: detected capacity change from 0 to 32768 [ 285.796768][T11363] IPv6: Can't replace route, no match found [ 285.807786][T11364] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2563'. [ 285.982881][T11376] netlink: 'syz.5.2567': attribute type 1 has an invalid length. [ 286.020800][T11306] XFS (loop1): Mounting V5 Filesystem [ 286.180444][T11306] XFS (loop1): Ending clean mount [ 286.269326][ T6853] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 286.290773][ T4183] XFS (loop1): Unmounting Filesystem [ 286.426572][T11397] netlink: 'syz.5.2575': attribute type 15 has an invalid length. [ 286.437707][T11397] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2575'. [ 286.581692][ T6853] usb 5-1: Using ep0 maxpacket: 32 [ 286.747754][ T6853] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 286.781669][ T6853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.825809][ T6853] usb 5-1: config 0 descriptor?? [ 286.899524][ T6853] gspca_main: sunplus-2.14.0 probing 041e:400b [ 286.981958][ T7] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 287.402249][ T7] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 287.411360][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.435747][ T7] usb 6-1: config 0 descriptor?? [ 287.492786][ T7] cp210x 6-1:0.0: cp210x converter detected [ 287.501947][ T5588] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 287.741868][ T6853] gspca_sunplus: reg_r err -71 [ 287.751760][ T6853] sunplus: probe of 5-1:0.0 failed with error -71 [ 287.753944][ T5588] usb 2-1: Using ep0 maxpacket: 32 [ 287.782981][ T6853] usb 5-1: USB disconnect, device number 27 [ 287.894218][ T5588] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 287.907370][ T5588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.921894][ T7] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 287.935856][ T5588] usb 2-1: config 0 descriptor?? [ 287.987004][ T7] usb 6-1: cp210x converter now attached to ttyUSB0 [ 288.018462][T11440] bridge0: port 3(syz_tun) entered disabled state [ 288.025107][T11440] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.032562][T11440] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.192922][ T5588] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 288.204119][ T6853] usb 6-1: USB disconnect, device number 11 [ 288.218953][ T6853] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 288.225517][ T5588] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 288.258976][T11449] binder: 11448:11449 ioctl c0306201 0 returned -14 [ 288.266226][ T5588] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 288.298702][ T6853] cp210x 6-1:0.0: device disconnected [ 288.304662][ T5588] usb 2-1: media controller created [ 288.344964][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 288.350864][ T5588] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.422063][ T5588] az6027: usb out operation failed. (-71) [ 288.451733][ T5588] az6027: usb out operation failed. (-71) [ 288.460905][ T5588] stb0899_attach: Driver disabled by Kconfig [ 288.491704][ T5588] az6027: no front-end attached [ 288.491704][ T5588] [ 288.521974][ T5588] az6027: usb out operation failed. (-71) [ 288.528376][ T5588] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 288.547612][ T5588] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 288.574333][ T5588] dvb-usb: schedule remote query interval to 400 msecs. [ 288.591171][ T5588] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 288.625051][ T5588] usb 2-1: USB disconnect, device number 13 [ 288.686247][ T5588] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 289.225353][T11480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2607'. [ 289.332748][T11483] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2606'. [ 289.414053][T11483] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2606'. [ 289.469122][T11485] program syz.1.2609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.829678][T11504] loop5: detected capacity change from 0 to 128 [ 289.923324][ T7710] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 290.135850][T11519] device bridge0 entered promiscuous mode [ 290.160472][T11519] device macvlan2 entered promiscuous mode [ 290.169692][T11519] bridge0: port 4(macvlan2) entered blocking state [ 290.176495][T11519] bridge0: port 4(macvlan2) entered disabled state [ 290.198601][T11519] device bridge0 left promiscuous mode [ 290.221749][ T7710] usb 7-1: Using ep0 maxpacket: 16 [ 290.373840][ T7710] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.406537][ T7710] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.438634][ T7710] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 290.477022][ T7710] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.507468][T11539] loop5: detected capacity change from 0 to 512 [ 290.508220][ T7710] usb 7-1: config 0 descriptor?? [ 290.616912][T11539] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 290.641997][T11539] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.998437][T11560] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2643'. [ 291.037671][ T7710] wacom 0003:056A:0084.001B: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.6-1/input0 [ 291.235827][ T7710] usb 7-1: USB disconnect, device number 6 [ 291.334418][T11569] loop1: detected capacity change from 0 to 2048 [ 291.386689][T11567] fido_id[11567]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 291.484519][T11569] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 291.596872][T11569] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.946645][T11558] loop5: detected capacity change from 0 to 32768 [ 292.042528][T11558] XFS: ikeep mount option is deprecated. [ 292.132051][T11558] XFS (loop5): Mounting V5 Filesystem [ 292.332513][T11610] loop8: detected capacity change from 0 to 7 [ 292.359804][T11558] XFS (loop5): Ending clean mount [ 292.360770][T11613] hugetlbfs: syz.4.2664 (11613): Using mlock ulimits for SHM_HUGETLB is deprecated [ 292.412221][T11610] Dev loop8: unable to read RDB block 7 [ 292.418632][T11558] XFS (loop5): Quotacheck needed: Please wait. [ 292.488203][T11610] loop8: unable to read partition table [ 292.532464][T11610] loop8: partition table beyond EOD, truncated [ 292.556098][T11610] loop_reread_partitions: partition scan of loop8 (ўшЂЋxќ^>бр– ) failed (rc=-5) [ 292.620452][T11558] XFS (loop5): Quotacheck: Done. [ 292.868740][T11558] XFS (loop5): User initiated shutdown received. [ 292.881742][ T5587] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 292.883897][T11558] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:485). Shutting down filesystem. [ 292.919534][T11558] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 293.068763][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'. [ 293.083864][ T7205] XFS (loop5): Unmounting Filesystem [ 293.241963][ T5587] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 293.250279][ T5587] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 293.295971][ T5587] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 293.332056][ T5587] usb 5-1: config 220 has no interface number 2 [ 293.361832][ T5587] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 293.400065][ T5587] usb 5-1: config 220 interface 0 has no altsetting 0 [ 293.411797][ T5587] usb 5-1: config 220 interface 76 has no altsetting 0 [ 293.431728][ T5587] usb 5-1: config 220 interface 1 has no altsetting 0 [ 293.519078][T11650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.530998][T11650] device bond1 entered promiscuous mode [ 293.538049][T11650] bond0: (slave bond1): Enslaving as an active interface with an up link [ 293.602130][ T5587] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 293.658722][ T5587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.692662][ T5587] usb 5-1: Product: syz [ 293.696897][ T5587] usb 5-1: Manufacturer: syz [ 293.731739][ T5587] usb 5-1: SerialNumber: syz [ 293.803491][T11662] print_req_error: 58 callbacks suppressed [ 293.803509][T11662] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 293.857022][T11662] FAT-fs (loop3): unable to read boot sector [ 294.131171][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2691'. [ 294.132303][ T5587] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 294.180730][ T5587] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 294.198801][T11680] bridge0: port 4(geneve2) entered blocking state [ 294.199314][ T5587] usb 5-1: No valid video chain found. [ 294.228520][T11680] bridge0: port 4(geneve2) entered disabled state [ 294.239671][T11674] loop1: detected capacity change from 0 to 4096 [ 294.256483][ T5587] usb 5-1: selecting invalid altsetting 0 [ 294.256505][T11680] device geneve2 entered promiscuous mode [ 294.343298][ T5587] usb 5-1: selecting invalid altsetting 0 [ 294.349082][ T5587] usbtest: probe of 5-1:220.1 failed with error -22 [ 294.402452][ T5587] usb 5-1: USB disconnect, device number 28 [ 294.437613][ T5399] udevd[5399]: setting owner of /dev/bus/usb/005/028 to uid=0, gid=0 failed: No such file or directory [ 294.538883][T11674] overlayfs: upper fs does not support tmpfile. [ 294.598334][T11674] overlayfs: workdir/#14 already exists [ 294.799392][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2700'. [ 294.931846][ T7] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 295.312381][ T7] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.335388][ T7] usb 7-1: config 0 has no interface number 0 [ 295.542465][ T7] usb 7-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=85.a7 [ 295.562536][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.572127][ T7] usb 7-1: Product: syz [ 295.576482][ T7] usb 7-1: Manufacturer: syz [ 295.581107][ T7] usb 7-1: SerialNumber: syz [ 295.612214][ T7] usb 7-1: config 0 descriptor?? [ 295.673803][ T7] usb 7-1: selecting invalid altsetting 2 [ 295.683889][ T7] i2c-cp2615: probe of 7-1:0.1 failed with error -22 [ 295.762630][T11721] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 295.889840][T11723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2711'. [ 295.916132][ T7] usb 7-1: USB disconnect, device number 7 [ 296.335406][T11719] loop5: detected capacity change from 0 to 32768 [ 296.386492][T11739] loop1: detected capacity change from 0 to 512 [ 296.436258][T11739] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 296.526855][T11719] XFS (loop5): Mounting V5 Filesystem [ 296.539233][T11739] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2718: Invalid inode bitmap blk 4 in block_group 0 [ 296.607782][T11739] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,mblk_io_submit,noload,nobarrier,grpquota,acl,barrier=0x0000000000000008,grpjquota=,quota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 296.716005][T11739] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 296.756070][T11719] XFS (loop5): Ending clean mount [ 296.817418][T11719] XFS (loop5): Quotacheck needed: Please wait. [ 297.039832][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.094753][T11719] XFS (loop5): Quotacheck: Done. [ 297.321976][ T7205] XFS (loop5): Unmounting Filesystem [ 297.735667][T11789] loop1: detected capacity change from 0 to 4096 [ 298.121216][ T4183] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 298.150992][ T4183] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 298.632429][T11823] loop1: detected capacity change from 0 to 64 [ 298.701188][T11823] Trying to free block not in datazone [ 298.973760][T11801] loop5: detected capacity change from 0 to 32768 [ 299.018336][T11801] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 299.050105][T11801] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 299.101229][T11801] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 299.120649][ T5587] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 299.135921][ T5587] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 299.295776][ T5587] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 159ms [ 299.338429][ T5587] gfs2: fsid=syz:syz.0: jid=0: Done [ 299.362681][T11801] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 299.703092][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2769'. [ 299.961762][ T7710] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 300.030179][T11865] netdevsim netdevsim5 netdevsim0: Unsupported IPsec algorithm [ 300.039283][T11865] netdevsim netdevsim5 netdevsim0: Failed to get key data for SA table [ 300.098658][T11872] loop5: detected capacity change from 0 to 64 [ 300.161759][ T13] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 300.221934][ T7710] usb 7-1: Using ep0 maxpacket: 8 [ 300.363082][ T7710] usb 7-1: config 0 has an invalid interface number: 92 but max is 0 [ 300.371235][ T7710] usb 7-1: config 0 has no interface number 0 [ 300.386057][ T7710] usb 7-1: config 0 interface 92 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 300.409153][T11878] loop5: detected capacity change from 0 to 512 [ 300.421315][T11880] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2779'. [ 300.461344][T11878] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 300.494297][T11878] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 300.512074][T11878] System zones: 1-12 [ 300.517059][T11878] EXT4-fs (loop5): orphan cleanup on readonly fs [ 300.539041][T11878] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2778: bg 0: block 361: padding at end of block bitmap is not set [ 300.564595][T11878] EXT4-fs (loop5): Remounting filesystem read-only [ 300.571343][T11878] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 300.580583][ T13] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 300.584233][T11878] EXT4-fs (loop5): Remounting filesystem read-only [ 300.596475][T11878] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2778: invalid indirect mapped block 12 (level 1) [ 300.610833][T11878] EXT4-fs (loop5): Remounting filesystem read-only [ 300.621916][ T7710] usb 7-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=81.44 [ 300.631273][ T7710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.635428][T11878] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2778: invalid indirect mapped block 2 (level 2) [ 300.639531][ T13] usb 2-1: config 0 has no interface number 0 [ 300.658693][ T7710] usb 7-1: Product: syz [ 300.663089][ T7710] usb 7-1: Manufacturer: syz [ 300.667736][ T7710] usb 7-1: SerialNumber: syz [ 300.672445][ T13] usb 2-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 300.684854][ T7710] usb 7-1: config 0 descriptor?? [ 300.690007][ T13] usb 2-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 300.701139][ T13] usb 2-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 300.712935][T11878] EXT4-fs (loop5): Remounting filesystem read-only [ 300.720438][T11878] EXT4-fs (loop5): 1 truncate cleaned up [ 300.735344][T11878] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,acl,inode_readahead_blks=0x0000000000000040,errors=remount-ro,init_itable. Quota mode: none. [ 300.866719][ T7710] ushc: probe of 7-1:0.92 failed with error -110 [ 300.926550][ T13] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 300.953337][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.963862][ T13] usb 2-1: Product: syz [ 300.968493][ T13] usb 2-1: Manufacturer: syz [ 300.981674][ T13] usb 2-1: SerialNumber: syz [ 300.993104][ T13] usb 2-1: config 0 descriptor?? [ 301.002946][ T7] usb 7-1: USB disconnect, device number 8 [ 301.012356][T11862] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 301.042389][T11862] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 301.311826][ T13] usb 2-1: Error in usbnet_get_endpoints (-71) [ 301.329908][ T13] usb 2-1: USB disconnect, device number 14 [ 301.347282][T11907] loop5: detected capacity change from 0 to 8192 [ 301.422531][T11907] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 301.444955][T11907] REISERFS (device loop5): using ordered data mode [ 301.451572][T11907] reiserfs: using flush barriers [ 301.473378][T11907] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 301.492181][T11907] REISERFS (device loop5): checking transaction log (loop5) [ 301.540986][T11907] REISERFS (device loop5): Using r5 hash to sort names [ 301.559440][T11907] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 302.029022][T11936] netlink: 'syz.6.2799': attribute type 1 has an invalid length. [ 302.041878][ T7] Bluetooth: hci0: command 0x0405 tx timeout [ 302.061766][T11936] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2799'. [ 302.269487][T11941] loop5: detected capacity change from 0 to 2048 [ 302.377372][T11941] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.745565][T11957] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 302.782585][T11962] tipc: Started in network mode [ 302.787627][T11962] tipc: Node identity ac14140f, cluster identity 6 [ 302.800406][T11962] tipc: New replicast peer: 255.255.255.255 [ 302.808248][T11962] tipc: Enabled bearer , priority 10 [ 302.956527][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2814'. [ 303.013036][ T13] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 303.026154][T11971] loop5: detected capacity change from 0 to 1024 [ 303.035099][T11942] loop1: detected capacity change from 0 to 32768 [ 303.054685][T11942] XFS: ikeep mount option is deprecated. [ 303.157411][T11942] XFS (loop1): Mounting V5 Filesystem [ 303.181939][T11971] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.263762][T11942] XFS (loop1): Ending clean mount [ 303.278996][T11942] XFS (loop1): Quotacheck needed: Please wait. [ 303.412152][ T13] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 303.442456][ T13] usb 7-1: config 0 interface 0 has no altsetting 0 [ 303.511578][T11992] loop5: detected capacity change from 0 to 64 [ 303.528452][T11942] XFS (loop1): Quotacheck: Done. [ 303.652149][ T13] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 303.688215][ T13] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 303.707027][ T13] usb 7-1: Product: syz [ 303.711435][ T13] usb 7-1: Manufacturer: syz [ 303.721632][ T13] usb 7-1: SerialNumber: syz [ 303.732021][ T7] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 303.743004][ T13] usb 7-1: config 0 descriptor?? [ 303.797877][ T13] usb 7-1: selecting invalid altsetting 0 [ 303.871340][ T13] tipc: Node number set to 2886997007 [ 304.116208][ T5587] usb 7-1: USB disconnect, device number 9 [ 304.162130][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.177835][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.387583][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.410325][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.424076][ T7] usb 4-1: Product: syz [ 304.439405][ T7] usb 4-1: Manufacturer: syz [ 304.461557][ T7] usb 4-1: SerialNumber: syz [ 304.666750][T11942] XFS (loop1): User initiated shutdown received. [ 304.710559][T12007] tun0: tun_chr_ioctl cmd 1074025680 [ 304.711817][T11942] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:485). Shutting down filesystem. [ 304.740480][T11942] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 304.766960][ T4183] XFS (loop1): Unmounting Filesystem [ 304.802209][ T7] usb 4-1: 0:2 : does not exist [ 304.817937][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2828'. [ 304.983102][ T7] usb 4-1: USB disconnect, device number 21 [ 305.231885][ T23] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 305.257483][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2834'. [ 305.288185][T12021] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2834'. [ 305.298677][ T4295] udevd[4295]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.585012][T12033] loop5: detected capacity change from 0 to 1024 [ 305.601548][ T23] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 305.629028][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.674655][ T23] usb 5-1: config 0 descriptor?? [ 305.782659][T12033] hfsplus: xattr searching failed [ 305.832544][ T4274] hfsplus: bad catalog file entry [ 305.848061][ T4274] hfsplus: b-tree write err: -5, ino 3 [ 305.966514][ T23] kaweth 5-1:0.0: Firmware present in device. [ 306.151845][ T23] kaweth 5-1:0.0: Statistics collection: 0 [ 306.161817][ T23] kaweth 5-1:0.0: Multicast filter limit: 0 [ 306.167751][ T23] kaweth 5-1:0.0: MTU: 0 [ 306.212860][ T23] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 306.350913][T12050] loop1: detected capacity change from 0 to 1024 [ 306.368795][T12017] overlayfs: failed to set xattr on upper [ 306.397297][T12017] overlayfs: ...falling back to index=off,metacopy=off. [ 306.416780][T12050] EXT4-fs (loop1): Ignoring removed bh option [ 306.530533][T12050] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,barrier,noquota,auto_da_alloc,grpquota,bh,. Quota mode: writeback. [ 306.591836][ T23] kaweth 5-1:0.0: Error setting SOFS wait [ 306.602046][T12050] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.602493][ T23] kaweth: probe of 5-1:0.0 failed with error -5 [ 306.624102][ T23] usb 5-1: USB disconnect, device number 29 [ 306.725325][T12050] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 3: comm syz.1.2847: lblock 3 mapped to illegal pblock 3 (length 3) [ 306.737178][T12061] loop5: detected capacity change from 0 to 128 [ 306.817442][T12061] FAT-fs (loop5): Directory bread(block 32770) failed [ 306.856662][T12061] FAT-fs (loop5): Directory bread(block 32771) failed [ 306.870851][T12050] EXT4-fs (loop1): Remounting filesystem read-only [ 306.887147][T12062] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 8: comm syz.1.2847: lblock 8 mapped to illegal pblock 8 (length 8) [ 306.905902][T12061] FAT-fs (loop5): Directory bread(block 32772) failed [ 306.913135][T12062] EXT4-fs (loop1): Remounting filesystem read-only [ 306.927522][T12061] FAT-fs (loop5): Directory bread(block 32773) failed [ 306.959508][T12061] FAT-fs (loop5): Directory bread(block 32770) failed [ 306.988422][T12061] FAT-fs (loop5): Directory bread(block 32771) failed [ 307.038820][T12061] FAT-fs (loop5): Directory bread(block 32772) failed [ 307.069647][T12069] FAT-fs (loop5): FAT read failed (blocknr 32768) [ 307.147150][T12061] FAT-fs (loop5): Directory bread(block 32773) failed [ 307.189754][T12061] FAT-fs (loop5): Directory bread(block 32770) failed [ 307.208690][T12077] tipc: Enabling of bearer rejected, already enabled [ 308.178570][T12120] loop5: detected capacity change from 0 to 128 [ 308.348696][T12126] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2880'. [ 308.762168][T12135] loop1: detected capacity change from 0 to 8192 [ 308.815133][T12143] loop5: detected capacity change from 0 to 4096 [ 308.982787][T12157] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.139661][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2893'. [ 309.287804][T12168] loop5: detected capacity change from 0 to 512 [ 309.394262][T12168] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.2895: casefold flag without casefold feature [ 309.499680][T12168] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2895: couldn't read orphan inode 15 (err -117) [ 309.545007][T12168] EXT4-fs (loop5): mounted filesystem without journal. Opts: prjquota,delalloc,,errors=continue. Quota mode: writeback. [ 309.734514][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 309.828627][T12180] bridge0: port 3(syz_tun) entered disabled state [ 309.835256][T12180] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.945053][ T27] INFO: task udevd:4375 blocked for more than 143 seconds. [ 309.971790][ T27] Not tainted syzkaller #0 [ 309.995152][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.014554][ T27] task:udevd state:D stack:23296 pid: 4375 ppid: 3561 flags:0x00004002 [ 310.028858][ T27] Call Trace: [ 310.036418][ T27] [ 310.039636][ T27] __schedule+0x11bb/0x4390 [ 310.066476][ T27] ? release_firmware_map_entry+0x190/0x190 [ 310.086211][ T27] ? preempt_schedule+0xa7/0xb0 [ 310.105953][ T27] ? release_firmware_map_entry+0x190/0x190 [ 310.136888][ T27] ? preempt_schedule+0xa7/0xb0 [ 310.161405][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 310.184735][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 310.204292][ T27] ? lock_chain_count+0x20/0x20 [ 310.223504][ T27] schedule+0x11b/0x1e0 [ 310.229729][ T27] io_schedule+0x7c/0xd0 [ 310.277951][ T27] wait_on_page_bit_common+0x815/0xe00 [ 310.294909][ T27] ? wait_on_page_bit+0x50/0x50 [ 310.329947][ T27] ? blkdev_fallocate+0x4d0/0x4d0 [ 310.346801][ T27] ? rcu_lock_release+0x20/0x20 [ 310.356484][ T27] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 310.364663][ T27] do_read_cache_page+0xb05/0x1030 [ 310.369935][ T27] read_part_sector+0xd4/0x4f0 [ 310.379848][ T27] ? string+0x26d/0x2b0 [ 310.388105][ T27] adfspart_check_ICS+0xbf/0xe00 [ 310.397076][ T27] ? vsnprintf+0x1905/0x1a00 [ 310.405277][ T27] ? adfspart_check_ADFS+0x830/0x830 [ 310.410747][ T27] ? snprintf+0xd7/0x120 [ 310.419516][ T27] ? vscnprintf+0x80/0x80 [ 310.426805][ T27] bdev_disk_changed+0x917/0x16b0 [ 310.432266][ T27] ? blkdev_get_by_dev+0x157/0xa60 [ 310.437642][ T27] ? blk_drop_partitions+0x1a0/0x1a0 [ 310.443465][ T27] ? _atomic_dec_and_lock+0x8f/0x110 [ 310.451946][ T27] blkdev_get_whole+0x2f9/0x390 [ 310.457430][ T27] blkdev_get_by_dev+0x2d0/0xa60 [ 310.463225][ T27] blkdev_open+0x12d/0x2c0 [ 310.467722][ T27] ? block_ioctl+0xf0/0xf0 [ 310.472630][ T27] do_dentry_open+0x7ff/0xf80 [ 310.477420][ T27] path_openat+0x2682/0x2f30 [ 310.483911][ T27] ? __kasan_slab_alloc+0xb3/0xd0 [ 310.489017][ T27] ? __kasan_slab_alloc+0x9c/0xd0 [ 310.494391][ T27] ? slab_post_alloc_hook+0x4c/0x380 [ 310.499731][ T27] ? verify_lock_unused+0x140/0x140 [ 310.507537][ T27] ? __x64_sys_openat+0x135/0x160 [ 310.513022][ T27] ? do_filp_open+0x3e0/0x3e0 [ 310.517809][ T27] do_filp_open+0x1b3/0x3e0 [ 310.522882][ T27] ? vfs_tmpfile+0x300/0x300 [ 310.527576][ T27] ? _raw_spin_unlock+0x24/0x40 [ 310.533141][ T27] ? alloc_fd+0x598/0x630 [ 310.537559][ T27] do_sys_openat2+0x142/0x4a0 [ 310.542764][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 310.547884][ T27] ? do_sys_open+0xe0/0xe0 [ 310.552824][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 310.559083][ T27] ? lock_chain_count+0x20/0x20 [ 310.564293][ T27] ? vtime_user_exit+0x2dc/0x400 [ 310.569322][ T27] __x64_sys_openat+0x135/0x160 [ 310.575019][ T27] do_syscall_64+0x4c/0xa0 [ 310.579481][ T27] ? clear_bhb_loop+0x30/0x80 [ 310.584717][ T27] ? clear_bhb_loop+0x30/0x80 [ 310.589475][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.597250][ T27] RIP: 0033:0x7f00cbcf3407 [ 310.602070][ T27] RSP: 002b:00007ffcea33da40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 310.610541][ T27] RAX: ffffffffffffffda RBX: 00007f00cbc05880 RCX: 00007f00cbcf3407 [ 310.618894][ T27] RDX: 00000000000a0800 RSI: 000055c69f20f910 RDI: ffffffffffffff9c [ 310.627180][ T27] RBP: 000055c69f1fb910 R08: 0000000000000000 R09: 0000000000000000 [ 310.635574][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c69f20ead0 [ 310.643918][ T27] R13: 000055c69f209190 R14: 0000000000000000 R15: 000055c69f20ead0 [ 310.652210][ T27] [ 310.663215][ T27] [ 310.663215][ T27] Showing all locks held in the system: [ 310.696454][ T27] 1 lock held by khungtaskd/27: [ 310.705781][ T27] #0: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 310.728634][ T27] 2 locks held by getty/3944: [ 310.733649][ T27] #0: ffff88814cbc5098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 310.750670][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 310.761311][ T27] 1 lock held by udevd/4295: [ 310.766850][ T27] 1 lock held by udevd/4375: [ 310.771464][ T27] #0: ffff888020116918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 [ 310.795120][ T27] [ 310.797479][ T27] ============================================= [ 310.797479][ T27] [ 310.806250][ T27] NMI backtrace for cpu 1 [ 310.810603][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 310.817838][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.827898][ T27] Call Trace: [ 310.831184][ T27] [ 310.834115][ T27] dump_stack_lvl+0x168/0x230 [ 310.838803][ T27] ? show_regs_print_info+0x20/0x20 [ 310.844004][ T27] ? load_image+0x3b0/0x3b0 [ 310.848595][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 310.853975][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 310.859105][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 310.864052][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 310.870234][ T27] ? _printk+0xcc/0x110 [ 310.874417][ T27] ? load_image+0x3b0/0x3b0 [ 310.878948][ T27] ? load_image+0x3b0/0x3b0 [ 310.883477][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 310.889573][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 310.895661][ T27] watchdog+0xe0f/0xe50 [ 310.899834][ T27] kthread+0x436/0x520 [ 310.903919][ T27] ? hungtask_pm_notify+0x40/0x40 [ 310.908944][ T27] ? kthread_blkcg+0xd0/0xd0 [ 310.913542][ T27] ret_from_fork+0x1f/0x30 [ 310.917990][ T27] [ 310.921700][ T27] Sending NMI from CPU 1 to CPUs 0: [ 310.926956][ C0] NMI backtrace for cpu 0 [ 310.926967][ C0] CPU: 0 PID: 5417 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 310.926984][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.926996][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 310.927020][ C0] RIP: 0010:____napi_schedule+0xf2/0x1d0 [ 310.927040][ C0] Code: 00 00 00 e8 10 d4 a0 f9 4d 8d 66 08 4c 89 e5 48 c1 ed 03 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 05 3c e5 f9 4d 8b 7e 08 48 89 df <4c> 89 fe 4c 89 f2 e8 b3 15 08 fc 84 c0 74 6a e8 da d3 a0 f9 42 80 [ 310.927055][ C0] RSP: 0018:ffffc9000344f5a8 EFLAGS: 00000046 [ 310.927068][ C0] RAX: ffffffff87d6f5d8 RBX: ffff8880b903b650 RCX: ffff88802adb0000 [ 310.927082][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b903b650 [ 310.927093][ C0] RBP: 1ffff11017207691 R08: dffffc0000000000 R09: ffffed10172076cd [ 310.927106][ C0] R10: ffffed10172076cd R11: 1ffff110172076cc R12: ffff8880b903b488 [ 310.927119][ C0] R13: dffffc0000000000 R14: ffff8880b903b480 R15: ffff8880b903b480 [ 310.927132][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 310.927147][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.927159][ C0] CR2: 00007f00cb299000 CR3: 000000001b9d0000 CR4: 00000000003506f0 [ 310.927174][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.927184][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.927194][ C0] Call Trace: [ 310.927199][ C0] [ 310.927207][ C0] enqueue_to_backlog+0x91a/0xea0 [ 310.927226][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 310.927246][ C0] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 310.927270][ C0] ? get_rps_cpu+0xa30/0xa30 [ 310.927296][ C0] netif_rx_internal+0x12c/0x540 [ 310.927317][ C0] ? dev_forward_skb+0x50/0x50 [ 310.927334][ C0] ? stack_trace_save+0x98/0xe0 [ 310.927348][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 310.927364][ C0] ? skb_scrub_packet+0x29e/0x410 [ 310.927384][ C0] netif_rx+0x94/0x380 [ 310.927399][ C0] veth_xmit+0x62f/0xa90 [ 310.927420][ C0] dev_hard_start_xmit+0x2a5/0x7e0 [ 310.927444][ C0] __dev_queue_xmit+0x19df/0x2ed0 [ 310.927468][ C0] ? dev_queue_xmit+0x20/0x20 [ 310.927485][ C0] ? pskb_expand_head+0xb23/0x10f0 [ 310.927510][ C0] ? batadv_nc_skb_store_for_decoding+0x3f0/0x640 [ 310.927531][ C0] batadv_send_skb_packet+0x384/0x5f0 [ 310.927551][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x696/0x840 [ 310.927577][ C0] process_one_work+0x863/0x1000 [ 310.927603][ C0] ? worker_detach_from_pool+0x240/0x240 [ 310.927626][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 310.927646][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 310.927661][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 310.927678][ C0] ? wq_worker_running+0x97/0x170 [ 310.927695][ C0] worker_thread+0xaa8/0x12a0 [ 310.927713][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 310.927733][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 310.927751][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 310.927773][ C0] kthread+0x436/0x520 [ 310.927787][ C0] ? rcu_lock_release+0x20/0x20 [ 310.927803][ C0] ? kthread_blkcg+0xd0/0xd0 [ 310.927819][ C0] ret_from_fork+0x1f/0x30 [ 310.927844][ C0] [ 310.951768][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 311.251668][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 311.258878][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 311.268935][ T27] Call Trace: [ 311.272212][ T27] [ 311.275165][ T27] dump_stack_lvl+0x168/0x230 [ 311.279866][ T27] ? show_regs_print_info+0x20/0x20 [ 311.285061][ T27] ? load_image+0x3b0/0x3b0 [ 311.289584][ T27] panic+0x2c9/0x7f0 [ 311.293495][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 311.299128][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 311.303633][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 311.309808][ T27] watchdog+0xe4e/0xe50 [ 311.313989][ T27] kthread+0x436/0x520 [ 311.318066][ T27] ? hungtask_pm_notify+0x40/0x40 [ 311.323186][ T27] ? kthread_blkcg+0xd0/0xd0 [ 311.327779][ T27] ret_from_fork+0x1f/0x30 [ 311.332224][ T27] [ 311.335529][ T27] Kernel Offset: disabled [ 311.339870][ T27] Rebooting in 86400 seconds..