last executing test programs: 2.994257598s ago: executing program 0 (id=1810): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x2808082, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',nobarrier,nls=cp865,nodecompose,decompose,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x21, 0x6e8, &(0x7f0000001f80)="$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") listxattr(&(0x7f0000000d40)='./file1\x00', 0x0, 0x0) 2.622186429s ago: executing program 0 (id=1814): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='decodes m'], 0xc) 2.497074012s ago: executing program 1 (id=1816): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x40, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xb) 2.35110056s ago: executing program 3 (id=1818): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000001340)=@l2={0x1f, 0xb, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffd, 0x2}, 0x80, 0x0}, 0x0) 2.314843025s ago: executing program 0 (id=1819): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000008c0)={[{0x8, 0x4e00, "9925acd7fe867355"}]}) 2.187691634s ago: executing program 1 (id=1821): r0 = socket(0xa, 0x3, 0xff) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f0000000140)) 2.121475023s ago: executing program 3 (id=1822): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r0) 1.983237652s ago: executing program 1 (id=1824): r0 = socket(0x28, 0x5, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0) 1.92084332s ago: executing program 3 (id=1825): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@remote]}]}}}], 0x18}, 0x80) 1.798309693s ago: executing program 1 (id=1826): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000180)) 1.731149104s ago: executing program 3 (id=1828): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x2}]}}}]}, 0x44}}, 0x0) 1.615920131s ago: executing program 1 (id=1829): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f00000000c0)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@user_xattr}]}, 0x1, 0x444c, &(0x7f000000cd40)="$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") open(&(0x7f0000000080)='./file0\x00', 0x24540, 0x2) 1.387603194s ago: executing program 2 (id=1831): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) 1.261103509s ago: executing program 4 (id=1832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc58ac4fb559ff17e}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7fff8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.259837825s ago: executing program 2 (id=1833): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) readv(r0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000840)=""/95, 0x5f}], 0x2) 1.24019926s ago: executing program 3 (id=1834): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/3, 0x3}], 0x1, 0x1ff, 0x280) 1.167813769s ago: executing program 4 (id=1835): setresuid(0x0, 0xee01, 0xee00) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x2, 0x2, 0x87, 0xffffffff, 0x44}) 1.048912187s ago: executing program 3 (id=1836): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 981.093943ms ago: executing program 4 (id=1837): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x3, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x20}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x10, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) 976.805917ms ago: executing program 2 (id=1838): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090200000000000000000200000008eaff"], 0x2c}}, 0x0) 826.880489ms ago: executing program 2 (id=1839): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x9af, 0x2, 0x1, "75217d4f44776273bc398496c04ab6668fa1f53024f96983aeb02a5afbcf81e8", 0x30383653}) 799.220234ms ago: executing program 4 (id=1840): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002600020007ffffffbd0310000000000095002000000000006916000000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee61e00bf150000000000000f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:De', 0x0) 732.243574ms ago: executing program 2 (id=1841): open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000380)={[{@clone_children}]}) 670.091967ms ago: executing program 2 (id=1842): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 570.236527ms ago: executing program 0 (id=1843): r0 = getpid() process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000001780)=""/4101, 0x1067}], 0x3, &(0x7f0000008640)=[{&(0x7f0000000340)=""/109, 0x6d}], 0x36, 0x0) 539.986788ms ago: executing program 4 (id=1844): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000280)={[{@umask={'umask', 0x3d, 0xe}}, {@creator={'creator', 0x3d, "71c54bc5"}}, {@umask={'umask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x5}}, {@nobarrier}, {@uid}, {@nls={'nls', 0x3d, 'cp866'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 383.435582ms ago: executing program 1 (id=1845): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000280)) 261.976447ms ago: executing program 0 (id=1846): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) mmap(&(0x7f0000026000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0xd4901000) 895.281µs ago: executing program 0 (id=1847): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, 0x0, 0x90) 0s ago: executing program 4 (id=1848): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): wn srh match flags 4000 [ 142.819725][ T7530] loop2: detected capacity change from 0 to 2048 [ 142.884677][ T7530] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.236378][ T7537] bond2: option mode: invalid value (8) [ 143.243576][ T7542] loop2: detected capacity change from 0 to 2048 [ 143.278708][ T7537] bond2 (unregistering): Released all slaves [ 143.332374][ T7542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.394363][ T7542] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.418771][ T7517] loop0: detected capacity change from 0 to 32768 [ 143.454577][ T7517] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.632 (7517) [ 143.520845][ T7517] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 143.601681][ T7517] BTRFS info (device loop0): using blake2b checksum algorithm [ 143.640625][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.667992][ T7544] loop1: detected capacity change from 0 to 32768 [ 143.768233][ T7544] (syz.1.646,7544,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 143.813394][ T7544] (syz.1.646,7544,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 143.874083][ T7517] BTRFS info (device loop0): enabling ssd optimizations [ 143.881202][ T7517] BTRFS info (device loop0): turning on async discard [ 143.923122][ T7517] BTRFS info (device loop0): enabling free space tree [ 143.980403][ T7544] JBD2: Ignoring recovery information on journal [ 144.120644][ T7580] netlink: 'syz.3.653': attribute type 13 has an invalid length. [ 144.154494][ T7544] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 144.315519][ T5824] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 144.378894][ T30] audit: type=1326 audit(1772456323.967:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcddb9c799 code=0x7ffc0000 [ 144.431715][ T30] audit: type=1326 audit(1772456323.967:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcddb9c799 code=0x7ffc0000 [ 144.454742][ T30] audit: type=1326 audit(1772456324.017:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7efcddb9c799 code=0x7ffc0000 [ 144.477831][ T30] audit: type=1326 audit(1772456324.017:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcddb9c799 code=0x7ffc0000 [ 144.529636][ T30] audit: type=1326 audit(1772456324.017:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcddb9c799 code=0x7ffc0000 [ 144.698985][ T5835] ocfs2: Unmounting device (7,1) on (node local) [ 144.741884][ T7591] loop2: detected capacity change from 0 to 256 [ 145.135336][ T7605] loop3: detected capacity change from 0 to 2048 [ 145.170767][ T7605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.281642][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.668'. [ 145.471678][ T7615] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 145.512052][ T7616] netlink: 'syz.0.670': attribute type 10 has an invalid length. [ 145.520035][ T7616] hsr0: entered promiscuous mode [ 145.583659][ T7616] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 145.617917][ T7616] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 145.661441][ T7616] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 145.800900][ T7624] loop2: detected capacity change from 0 to 64 [ 145.837657][ T7626] netlink: 96 bytes leftover after parsing attributes in process `syz.1.675'. [ 146.157893][ T7638] trusted_key: encrypted_key: keyword 'nGhg0ɉUvmfew' not recognized [ 146.190047][ T7637] loop1: detected capacity change from 0 to 2048 [ 146.225976][ T7637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.321325][ T7608] loop4: detected capacity change from 0 to 32768 [ 146.368504][ T7608] [ 146.368504][ T7608] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.368504][ T7608] [ 146.491945][ T7608] ERROR: (device loop4): diWrite: ixpxd invalid [ 146.491945][ T7608] [ 146.553919][ T7608] ERROR: (device loop4): txCommit: [ 146.553919][ T7608] [ 146.700463][ T5823] [ 146.700463][ T5823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.700463][ T5823] [ 146.742181][ T5823] [ 146.742181][ T5823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.742181][ T5823] [ 146.754800][ T7654] capability: warning: `syz.1.689' uses 32-bit capabilities (legacy support in use) [ 146.914438][ T7657] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 147.095165][ T7666] kAFS: unable to lookup cell '/' [ 147.284834][ T7673] loop2: detected capacity change from 0 to 256 [ 147.356871][ T7673] FAT-fs (loop2): Directory bread(block 64) failed [ 147.379663][ T7676] netlink: 'syz.4.700': attribute type 21 has an invalid length. [ 147.388515][ T7673] FAT-fs (loop2): Directory bread(block 65) failed [ 147.412195][ T7673] FAT-fs (loop2): Directory bread(block 66) failed [ 147.435025][ T7673] FAT-fs (loop2): Directory bread(block 67) failed [ 147.459934][ T7673] FAT-fs (loop2): Directory bread(block 68) failed [ 147.488441][ T7673] FAT-fs (loop2): Directory bread(block 69) failed [ 147.543925][ T7673] FAT-fs (loop2): Directory bread(block 70) failed [ 147.557813][ T7673] FAT-fs (loop2): Directory bread(block 71) failed [ 147.578413][ T7673] FAT-fs (loop2): Directory bread(block 72) failed [ 147.596483][ T7673] FAT-fs (loop2): Directory bread(block 73) failed [ 147.612396][ T7646] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.685 (7646) [ 147.650076][ T7673] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.696013][ T7646] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.749468][ T7646] BTRFS info (device loop3): using sha256 checksum algorithm [ 147.926721][ T7646] BTRFS info (device loop3): enabling ssd optimizations [ 147.941637][ T7646] BTRFS info (device loop3): turning on async discard [ 147.948475][ T7646] BTRFS info (device loop3): enabling free space tree [ 148.226235][ T5828] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.491178][ T7719] set_capacity_and_notify: 2 callbacks suppressed [ 148.491197][ T7719] loop0: detected capacity change from 0 to 512 [ 148.596715][ T7719] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.659382][ T7719] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 148.671458][ T7719] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 148.695142][ T7727] loop3: detected capacity change from 0 to 128 [ 148.704721][ T7719] System zones: 0-1, 15-15, 18-18, 34-34 [ 148.710711][ T7719] EXT4-fs (loop0): orphan cleanup on readonly fs [ 148.808398][ T7719] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 148.891090][ T7719] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 148.926933][ T7719] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 148.977942][ T7719] EXT4-fs (loop0): 1 truncate cleaned up [ 149.000513][ T7719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.308927][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.363714][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 149.557513][ T7720] loop4: detected capacity change from 0 to 32768 [ 149.592733][ T7743] loop2: detected capacity change from 0 to 2048 [ 149.618141][ T7720] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 149.631370][ T7743] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.677214][ T7722] loop1: detected capacity change from 0 to 32768 [ 149.685435][ T7722] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.716 (7722) [ 149.717436][ T7720] JBD2: Ignoring recovery information on journal [ 149.732968][ T30] audit: type=1800 audit(1772456329.327:32): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.725" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 149.851044][ T7722] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.893736][ T7722] BTRFS info (device loop1): using sha256 checksum algorithm [ 149.914017][ T7720] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 150.047329][ T7722] BTRFS info (device loop1): enabling ssd optimizations [ 150.080055][ T7720] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 256 but claims that 2046 are free [ 150.109137][ T7722] BTRFS info (device loop1): turning on async discard [ 150.140802][ T7720] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 150.151151][ T7720] OCFS2: File system is now read-only. [ 150.156760][ T7720] (syz.4.715,7720,1):ocfs2_search_chain:1888 ERROR: status = -30 [ 150.165871][ T7720] (syz.4.715,7720,1):ocfs2_search_chain:2011 ERROR: status = -30 [ 150.173794][ T7720] (syz.4.715,7720,1):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30 [ 150.182309][ T7720] (syz.4.715,7720,1):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30 [ 150.190772][ T7720] (syz.4.715,7720,1):ocfs2_claim_new_inode:2392 ERROR: status = -30 [ 150.191015][ T7722] BTRFS info (device loop1): enabling free space tree [ 150.199144][ T7720] (syz.4.715,7720,1):ocfs2_claim_new_inode:2407 ERROR: status = -30 [ 150.293691][ T7720] (syz.4.715,7720,1):ocfs2_mknod_locked:642 ERROR: status = -30 [ 150.364856][ T7720] (syz.4.715,7720,1):ocfs2_mknod:389 ERROR: status = -30 [ 150.393700][ T7720] (syz.4.715,7720,1):ocfs2_mknod:506 ERROR: status = -30 [ 150.404139][ T5835] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.427403][ T7720] (syz.4.715,7720,1):ocfs2_create:679 ERROR: status = -30 [ 150.457555][ T7778] loop0: detected capacity change from 0 to 16 [ 150.520250][ T7778] erofs (device loop0): mounted with root inode @ nid 36. [ 150.596456][ T7778] syz.0.734: attempt to access beyond end of device [ 150.596456][ T7778] loop0: rw=8912896, sector=8, nr_sectors = 32 limit=16 [ 150.679907][ T7778] syz.0.734: attempt to access beyond end of device [ 150.679907][ T7778] loop0: rw=524288, sector=40, nr_sectors = 64 limit=16 [ 150.728150][ T7778] syz.0.734: attempt to access beyond end of device [ 150.728150][ T7778] loop0: rw=8388608, sector=16, nr_sectors = 8 limit=16 [ 150.754787][ T5823] ocfs2: Unmounting device (7,4) on (node local) [ 150.807797][ T30] audit: type=1800 audit(1772456330.397:33): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.734" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 151.676406][ T7772] loop2: detected capacity change from 0 to 32768 [ 151.727379][ T7772] gfs2: fsid=__"_z#˱1 I3wʂX9: Trying to join cluster "lock_nolock", "__"_z#˱1 I3wʂX9" [ 151.761841][ T7772] gfs2: fsid=__"_z#˱1 I3wʂX9: Now mounting FS (format 1801)... [ 151.810656][ T5887] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 151.838902][ T7772] gfs2: fsid=__"_z#˱1 I3wʂX9.0: no journals! [ 151.963205][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 152.005787][ T5887] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 152.050601][ T5887] usb 4-1: config 0 has no interface number 0 [ 152.077562][ T5887] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.130691][ T5887] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 152.194150][ T5887] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 152.224557][ T5887] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 152.262793][ T5887] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.306371][ T5887] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 152.337133][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.365190][ T5887] usb 4-1: Product: syz [ 152.369434][ T5887] usb 4-1: Manufacturer: syz [ 152.390887][ T5887] usb 4-1: SerialNumber: syz [ 152.407649][ T5887] usb 4-1: config 0 descriptor?? [ 152.446439][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input7 [ 152.697125][ T7840] xt_CT: No such helper "snmp" [ 152.773031][ T5925] usb 4-1: USB disconnect, device number 2 [ 152.860553][ T1216] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 153.030590][ T1216] usb 5-1: Using ep0 maxpacket: 8 [ 153.039573][ T1216] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.058149][ T1216] usb 5-1: config 179 has no interface number 0 [ 153.066791][ T1216] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 153.078020][ T1216] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 153.089523][ T1216] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.142821][ T1216] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 153.177865][ T1216] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 153.195311][ T1216] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 153.220825][ T1216] usb 5-1: Product: syz [ 153.273323][ T7847] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 153.353692][ T7869] loop2: detected capacity change from 0 to 128 [ 153.365277][ T7868] openvswitch: netlink: Multiple metadata blocks provided [ 153.565910][ T7873] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.648676][ T7877] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.750876][ T30] audit: type=1326 audit(1772456333.348:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcddb9c799 code=0x7ffc0000 [ 153.784266][ T7879] syz.3.783 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 153.831407][ T1216] usb 5-1: USB disconnect, device number 5 [ 153.831469][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 153.845897][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 153.879978][ T30] audit: type=1326 audit(1772456333.368:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcddb9c799 code=0x7ffc0000 [ 153.911993][ T30] audit: type=1326 audit(1772456333.378:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7efcddb9c799 code=0x7ffc0000 [ 154.005853][ T30] audit: type=1326 audit(1772456333.468:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcddb9c799 code=0x7ffc0000 [ 154.067351][ T30] audit: type=1326 audit(1772456333.468:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcddb9c799 code=0x7ffc0000 [ 154.267188][ T7891] loop2: detected capacity change from 0 to 4096 [ 154.368163][ T7891] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 154.492939][ T7891] ntfs3(loop2): Failed to load $Extend (-22). [ 154.499103][ T7891] ntfs3(loop2): Failed to initialize $Extend. [ 154.601245][ T1216] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.842626][ T1216] usb 2-1: Using ep0 maxpacket: 32 [ 154.853192][ T1216] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.882814][ T1216] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 154.907084][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.935128][ T1216] usb 2-1: Product: syz [ 154.977272][ T1216] usb 2-1: Manufacturer: syz [ 154.994080][ T1216] usb 2-1: SerialNumber: syz [ 155.036878][ T1216] usb 2-1: config 0 descriptor?? [ 155.053332][ T1216] cdc_ether 2-1:0.0: skipping garbage [ 155.069024][ T1216] cdc_ether 2-1:0.0: skipping garbage [ 155.089120][ T1216] usb 2-1: bad CDC descriptors [ 155.116326][ T1216] usb 2-1: unsupported MDLM descriptors [ 155.298410][ T5887] usb 2-1: USB disconnect, device number 5 [ 155.470926][ T7943] netlink: 328 bytes leftover after parsing attributes in process `syz.3.814'. [ 155.905103][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 156.006414][ T7966] loop1: detected capacity change from 0 to 256 [ 156.101282][ T7966] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 156.137828][ T7973] netlink: 'syz.2.829': attribute type 1 has an invalid length. [ 156.937784][ T7974] loop4: detected capacity change from 0 to 32768 [ 156.981613][ T7974] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.830 (7974) [ 157.062401][ T7974] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 157.086945][ T7974] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 157.111599][ T7974] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 157.285212][ T8027] netlink: 244 bytes leftover after parsing attributes in process `syz.2.849'. [ 157.354798][ T7974] BTRFS info (device loop4): rebuilding free space tree [ 157.456698][ T7974] BTRFS info (device loop4): disabling free space tree [ 157.481047][ T7974] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.532646][ T7974] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.574693][ T7974] BTRFS info (device loop4): setting nodatasum [ 157.639931][ T7974] BTRFS info (device loop4): allowing degraded mounts [ 157.646819][ T7974] BTRFS info (device loop4): turning on async discard [ 157.680278][ T7974] BTRFS info (device loop4): enabling disk space caching [ 157.698534][ T7974] BTRFS info (device loop4): force clearing of disk cache [ 157.716124][ T7974] BTRFS info (device loop4): force zlib compression, level 3 [ 157.728420][ T8041] loop0: detected capacity change from 0 to 1024 [ 157.740813][ T8041] EXT4-fs: Ignoring removed orlov option [ 157.815892][ T8041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.880078][ T8023] loop1: detected capacity change from 0 to 32768 [ 157.921151][ T5823] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 157.956739][ T8041] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.855: bit already cleared for inode 13 [ 157.994014][ T8023] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.196634][ T8023] XFS (loop1): Ending clean mount [ 158.341215][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.378232][ T5835] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.715360][ T1216] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 158.922513][ T1216] usb 4-1: Using ep0 maxpacket: 16 [ 158.940962][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 158.971907][ T1216] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 158.983529][ T1216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.021239][ T8085] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 159.029804][ T1216] usb 4-1: Product: syz [ 159.043620][ T1216] usb 4-1: Manufacturer: syz [ 159.062489][ T1216] usb 4-1: SerialNumber: syz [ 159.082994][ T1216] usb 4-1: config 0 descriptor?? [ 159.089745][ T8087] autofs4:pid:8087:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 159.113548][ T1216] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 159.151370][ T1216] usb 4-1: Detected FT-X [ 159.320606][ T8089] loop2: detected capacity change from 0 to 4096 [ 159.357981][ T8089] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 159.396589][ T8095] loop4: detected capacity change from 0 to 1024 [ 159.435134][ T8095] hfsplus: Filesystem is marked locked, mounting read-only. [ 159.462156][ T8089] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 159.480420][ T8089] ntfs3(loop2): ino=19, mi_enum_attr [ 159.499697][ T5836] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 159.514204][ T8095] hfsplus: invalid catalog entry type in lookup [ 159.533434][ T1216] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 159.572182][ T1216] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 159.588562][ T1216] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 159.616696][ T1216] usb 4-1: USB disconnect, device number 3 [ 159.655375][ T1216] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 159.691136][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 159.698201][ T1216] ftdi_sio 4-1:0.0: device disconnected [ 159.750725][ T5836] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.761445][ T5836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.794728][ T5836] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 159.819454][ T5836] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.835468][ T5836] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 159.854775][ T5836] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 159.871385][ T8105] loop2: detected capacity change from 0 to 128 [ 159.900201][ T5836] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 159.924539][ T8105] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.947244][ T5836] usb 2-1: config 1 interface 1 has no altsetting 0 [ 159.982216][ T8108] bridge1: entered allmulticast mode [ 159.988397][ T8105] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.004627][ T5836] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.020528][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.028594][ T5836] usb 2-1: Product: syz [ 160.039795][ T1216] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 160.084473][ T5836] usb 2-1: Manufacturer: syz [ 160.106376][ T5836] usb 2-1: SerialNumber: syz [ 160.145737][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.207002][ T1216] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 160.233470][ T1216] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 160.269019][ T1216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.353650][ T5836] usb 2-1: 0:2 : does not exist [ 160.356333][ T1216] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 160.499340][ T5836] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 160.545943][ T8123] netlink: 'syz.2.889': attribute type 11 has an invalid length. [ 160.555011][ T5836] usb 2-1: USB disconnect, device number 6 [ 160.571052][ T8123] netlink: 140 bytes leftover after parsing attributes in process `syz.2.889'. [ 160.611465][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.774405][ T8133] loop3: detected capacity change from 0 to 64 [ 160.878307][ T30] audit: type=1326 audit(1772456340.459:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614cf9c799 code=0x7ffc0000 [ 160.939825][ T30] audit: type=1326 audit(1772456340.459:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614cf9c799 code=0x7ffc0000 [ 160.962465][ T30] audit: type=1326 audit(1772456340.489:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614cf9c799 code=0x7ffc0000 [ 160.991101][ T30] audit: type=1326 audit(1772456340.489:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614cf9c799 code=0x7ffc0000 [ 161.013676][ T30] audit: type=1326 audit(1772456340.489:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f614cf9c799 code=0x7ffc0000 [ 161.036773][ T30] audit: type=1326 audit(1772456340.489:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614cf9c799 code=0x7ffc0000 [ 161.083247][ T30] audit: type=1326 audit(1772456340.499:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f614cf9c799 code=0x7ffc0000 [ 161.149459][ T30] audit: type=1326 audit(1772456340.499:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f614cf9c799 code=0x7ffc0000 [ 161.206901][ T8142] loop4: detected capacity change from 0 to 512 [ 161.214543][ T30] audit: type=1326 audit(1772456340.489:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8135 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614cf9c799 code=0x7ffc0000 [ 161.263472][ T8142] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.898: inode has both inline data and extents flags [ 161.309551][ T8142] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 161.313912][ T8142] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.898: couldn't read orphan inode 15 (err -117) [ 161.323160][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 161.323183][ C1] EXT4-fs (loop4): initial error at time 1772456340: ext4_orphan_get:1391: inode 15 [ 161.323218][ C1] EXT4-fs (loop4): last error at time 1772456340: ext4_orphan_get:1391: inode 15 [ 161.360517][ T8142] loop4: lost filesystem error report for type 5 error -117 [ 161.396938][ T8142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.476592][ T1216] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 161.673166][ T1216] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 161.707368][ T1216] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 161.719481][ T5901] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 161.745308][ T1216] usb 1-1: USB disconnect, device number 4 [ 161.816270][ T8164] netlink: 'syz.2.909': attribute type 6 has an invalid length. [ 161.839423][ T5836] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 161.879793][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 161.893700][ T5901] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 161.915044][ T5901] usb 5-1: config 0 has no interface number 0 [ 161.929360][ T5901] usb 5-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 161.952061][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 161.961027][ T5901] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x8D has invalid maxpacket 26389, setting to 1024 [ 161.986659][ T5901] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 162.003153][ T5836] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 162.023949][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.033979][ T5836] usb 2-1: config 0 has no interface number 0 [ 162.047660][ T5901] usb 5-1: Product: syz [ 162.058467][ T5836] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 162.068221][ T5901] usb 5-1: Manufacturer: syz [ 162.073142][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.082882][ T5901] usb 5-1: SerialNumber: syz [ 162.088177][ T5836] usb 2-1: Product: syz [ 162.093782][ T5836] usb 2-1: Manufacturer: syz [ 162.098430][ T5836] usb 2-1: SerialNumber: syz [ 162.116344][ T5901] usb 5-1: config 0 descriptor?? [ 162.123021][ T8142] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 162.133710][ T5836] usb 2-1: config 0 descriptor?? [ 162.146437][ T5836] ftdi_sio 2-1:0.9: FTDI USB Serial Device converter detected [ 162.171256][ T5836] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 162.352701][ T5901] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 162.371892][ T1216] usb 2-1: USB disconnect, device number 7 [ 162.382394][ T1216] ftdi_sio 2-1:0.9: device disconnected [ 162.388940][ T8178] loop0: detected capacity change from 0 to 8 [ 162.391211][ T5901] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 162.408390][ T8178] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 162.448872][ T5901] usb 5-1: USB disconnect, device number 6 [ 162.496373][ T8178] process 'syz.0.916' launched './file2' with NULL argv: empty string added [ 162.507678][ T8180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.527672][ T8178] cramfs: Error -3 while decompressing! [ 162.556784][ T5984] udevd[5984]: incorrect cramfs checksum on /dev/loop0 [ 162.561027][ T8178] cramfs: ffffffff9a3b5b28(26)->ffff88804ef2c000(4096) [ 162.578646][ T8178] cramfs: Error -3 while decompressing! [ 162.595808][ T8178] cramfs: ffffffff9a3b5b42(26)->ffff88804ac76000(4096) [ 162.616224][ T8178] cramfs: Error -3 while decompressing! [ 162.641294][ T8178] cramfs: ffffffff9a3b5b5c(16)->ffff88804fde2000(4096) [ 162.648599][ T8178] cramfs: Error -3 while decompressing! [ 162.655145][ T8178] cramfs: ffffffff9a3b5b28(26)->ffff88804ef2c000(4096) [ 162.667883][ T6007] udevd[6007]: incorrect cramfs checksum on /dev/loop0 [ 162.735676][ T8186] loop2: detected capacity change from 0 to 256 [ 162.919314][ T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 162.979963][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.041334][ T8196] sit0: entered promiscuous mode [ 163.081052][ T8196] netlink: 1 bytes leftover after parsing attributes in process `syz.1.925'. [ 163.127886][ T29] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 163.152307][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.183386][ T29] usb 4-1: config 0 descriptor?? [ 163.203418][ T29] cp210x 4-1:0.0: cp210x converter detected [ 163.346986][ T8204] loop0: detected capacity change from 0 to 1024 [ 163.597417][ T29] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 163.617270][ T8208] bond1: Removing last ns target with arp_interval on [ 163.628510][ T29] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 163.644099][ T29] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 163.673709][ T29] usb 4-1: cp210x converter now attached to ttyUSB0 [ 163.724475][ T29] usb 4-1: USB disconnect, device number 4 [ 163.756166][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 163.785978][ T29] cp210x 4-1:0.0: device disconnected [ 164.529239][ T29] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 164.590582][ T8257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.955'. [ 164.723100][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.744368][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.775906][ T29] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 164.797211][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.829032][ T29] usb 3-1: Product: syz [ 164.839003][ T29] usb 3-1: Manufacturer: syz [ 164.849371][ T29] usb 3-1: SerialNumber: syz [ 164.872612][ T29] usb 3-1: config 0 descriptor?? [ 164.897000][ T8269] openvswitch: netlink: IP tunnel dst address not specified [ 164.919957][ T29] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 164.953310][ T8271] loop4: detected capacity change from 0 to 256 [ 164.973078][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 165.006292][ T8271] exFAT-fs (loop4): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 165.039116][ T29] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 165.047883][ T29] usb 3-1: media controller created [ 165.116525][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.327184][ T29] DVB: Unable to find symbol tda10046_attach() [ 165.345439][ T29] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 165.388544][ T29] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 165.592449][ T30] audit: type=1326 audit(1772456345.179:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 165.644900][ T29] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 165.688253][ T29] usb 3-1: USB disconnect, device number 9 [ 165.716697][ T8298] loop0: detected capacity change from 0 to 128 [ 165.807307][ T8302] netlink: 332 bytes leftover after parsing attributes in process `syz.3.978'. [ 166.006385][ T8308] loop0: detected capacity change from 0 to 512 [ 166.069925][ T8308] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.979: inode has both inline data and extents flags [ 166.106871][ T8308] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.107277][ T8308] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.979: couldn't read orphan inode 15 (err -117) [ 166.116554][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 166.116583][ C0] EXT4-fs (loop0): initial error at time 1772456345: ext4_orphan_get:1391: inode 15 [ 166.116620][ C0] EXT4-fs (loop0): last error at time 1772456345: ext4_orphan_get:1391: inode 15 [ 166.246791][ T8308] loop0: lost filesystem error report for type 5 error -117 [ 166.246983][ T8319] netlink: 'syz.4.985': attribute type 3 has an invalid length. [ 166.296428][ T8308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.558829][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.644796][ T8336] usb usb8: usbfs: process 8336 (syz.1.992) did not claim interface 0 before use [ 166.729021][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 166.745935][ T9] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 166.771487][ T9] usb 1-1: config 0 has no interface number 0 [ 166.795204][ T9] usb 1-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 166.841559][ T9] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x8D has invalid maxpacket 26389, setting to 1024 [ 166.872585][ T9] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 166.888733][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.899353][ T8344] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 166.909818][ T9] usb 1-1: Product: syz [ 166.918986][ T9] usb 1-1: Manufacturer: syz [ 166.960033][ T9] usb 1-1: SerialNumber: syz [ 166.978297][ T9] usb 1-1: config 0 descriptor?? [ 166.987333][ T8308] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.224456][ T9] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 167.248372][ T9] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 167.266660][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 167.266677][ T30] audit: type=1326 audit(1772456346.849:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 167.302457][ T9] usb 1-1: USB disconnect, device number 5 [ 167.317838][ T8361] : renamed from veth0_vlan (while UP) [ 167.358726][ T30] audit: type=1326 audit(1772456346.849:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 167.433769][ T30] audit: type=1326 audit(1772456346.889:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 167.494374][ T30] audit: type=1326 audit(1772456346.889:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 167.578670][ T30] audit: type=1326 audit(1772456346.889:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 167.635440][ T30] audit: type=1326 audit(1772456346.889:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 167.687872][ T30] audit: type=1326 audit(1772456346.889:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 167.712116][ T30] audit: type=1326 audit(1772456346.899:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 167.809454][ T30] audit: type=1326 audit(1772456346.899:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 167.923893][ T8378] loop3: detected capacity change from 0 to 64 [ 167.960789][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.993004][ T8378] minix: block size(59136) > page size(4096) not supported by filesystem [ 168.345474][ T8395] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1021'. [ 168.398800][ T8397] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 168.468731][ T29] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 168.690536][ T29] usb 3-1: config 0 has no interfaces? [ 168.696113][ T29] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 168.736003][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.770582][ T29] usb 3-1: config 0 descriptor?? [ 168.812381][ T8410] loop1: detected capacity change from 0 to 256 [ 168.838576][ T1216] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 168.934038][ T8379] loop4: detected capacity change from 0 to 40427 [ 168.951366][ T8410] FAT-fs (loop1): Directory bread(block 64) failed [ 168.963561][ T8379] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 168.990438][ T8410] FAT-fs (loop1): Directory bread(block 65) failed [ 168.999698][ T9] usb 3-1: USB disconnect, device number 10 [ 169.012745][ T1216] usb 1-1: Using ep0 maxpacket: 16 [ 169.014451][ T8379] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 169.026748][ T1216] usb 1-1: too many configurations: 14, using maximum allowed: 8 [ 169.038994][ T8410] FAT-fs (loop1): Directory bread(block 66) failed [ 169.045701][ T8410] FAT-fs (loop1): Directory bread(block 67) failed [ 169.094299][ T1216] usb 1-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 169.116367][ T8410] FAT-fs (loop1): Directory bread(block 68) failed [ 169.127221][ T1216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.147746][ T8410] FAT-fs (loop1): Directory bread(block 69) failed [ 169.155444][ T1216] usb 1-1: Product: syz [ 169.160309][ T1216] usb 1-1: Manufacturer: syz [ 169.164939][ T1216] usb 1-1: SerialNumber: syz [ 169.169783][ T8410] FAT-fs (loop1): Directory bread(block 70) failed [ 169.181628][ T8410] FAT-fs (loop1): Directory bread(block 71) failed [ 169.189962][ T8410] FAT-fs (loop1): Directory bread(block 72) failed [ 169.197275][ T8410] FAT-fs (loop1): Directory bread(block 73) failed [ 169.205537][ T1216] usb 1-1: config 0 descriptor?? [ 169.253335][ T8379] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 169.306048][ T8379] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 169.322366][ T8379] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 169.440114][ T1216] usb 1-1: USB disconnect, device number 6 [ 169.949069][ T1216] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.018791][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.130346][ T1216] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.146264][ T1216] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.163395][ T1216] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 170.178401][ T1216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.178816][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 170.197397][ T1216] usb 4-1: Product: syz [ 170.207913][ T8448] loop4: detected capacity change from 0 to 2048 [ 170.214487][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 170.214516][ T1216] usb 4-1: Manufacturer: syz [ 170.232841][ T8448] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 170.242695][ T1216] usb 4-1: SerialNumber: syz [ 170.247696][ T9] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 170.256691][ T1216] usb 4-1: config 0 descriptor?? [ 170.262982][ T5925] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 170.283205][ T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 170.297879][ T1216] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 170.312016][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.323848][ T8450] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.344445][ T1216] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.362054][ T9] usb 2-1: Product: syz [ 170.368428][ T9] usb 2-1: Manufacturer: syz [ 170.373241][ T9] usb 2-1: SerialNumber: syz [ 170.392138][ T1216] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 170.412561][ T1216] usb 4-1: media controller created [ 170.438591][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 170.456000][ T5925] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 170.465200][ T8448] syz.4.1045 (8448) used greatest stack depth: 18424 bytes left [ 170.477689][ T1216] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.486311][ T5925] usb 3-1: config 4 has no interface number 0 [ 170.494915][ T5925] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.539199][ T5925] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.572767][ T5925] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 170.598355][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.630680][ T9] usb 2-1: Invalid number of CPorts: 0 [ 170.636226][ T9] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 170.662020][ T1216] DVB: Unable to find symbol tda10046_attach() [ 170.673092][ T1216] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 170.684389][ T5925] hub 3-1:4.128: USB hub found [ 170.714211][ T1216] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 170.860177][ T29] usb 2-1: USB disconnect, device number 8 [ 170.866361][ T5925] hub 3-1:4.128: 6 ports detected [ 170.875267][ T5925] hub 3-1:4.128: Using single TT (err -22) [ 170.896496][ T5925] hub 3-1:4.128: insufficient power available to use all downstream ports [ 170.935792][ T1216] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 170.959830][ T1216] usb 4-1: USB disconnect, device number 5 [ 171.080711][ T5925] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 171.094235][ T5925] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 171.143387][ T5925] usb 3-1: USB disconnect, device number 11 [ 171.160308][ T8469] netlink: 'syz.0.1055': attribute type 1 has an invalid length. [ 171.170250][ T8469] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1055'. [ 171.214885][ T8473] xt_TCPMSS: Only works on TCP SYN packets [ 171.587522][ T30] audit: type=1326 audit(1772456351.170:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 171.663284][ T8491] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 171.746557][ T8493] loop3: detected capacity change from 0 to 1024 [ 171.834541][ T8493] hfsplus: b-tree write err: -5, ino 2 [ 172.009162][ T13] hfsplus: b-tree write err: -5, ino 25 [ 172.020931][ T13] hfsplus: b-tree write err: -5, ino 4 [ 172.026751][ T13] hfsplus: b-tree write err: -5, ino 2 [ 172.039690][ T8509] x_tables: unsorted entry at hook 3 [ 172.066821][ T13] hfsplus: b-tree write err: -5, ino 26 [ 172.323113][ T8517] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 172.479638][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 172.488966][ T5925] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.579622][ T8507] loop0: detected capacity change from 0 to 32768 [ 172.614898][ T8503] loop2: detected capacity change from 0 to 32768 [ 172.634795][ T8507] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 172.651933][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.668050][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.682213][ T9] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 172.693160][ T5925] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 172.698964][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.711759][ T9] usb 2-1: Product: syz [ 172.715973][ T9] usb 2-1: Manufacturer: syz [ 172.720994][ T9] usb 2-1: SerialNumber: syz [ 172.729950][ T9] usb 2-1: config 0 descriptor?? [ 172.762476][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.763321][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 172.773895][ T5925] usb 4-1: Product: syz [ 172.783769][ T5925] usb 4-1: Manufacturer: syz [ 172.790255][ T5925] usb 4-1: SerialNumber: syz [ 172.803510][ T5925] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 172.836324][ T1216] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 172.858866][ T8507] XFS (loop0): Ending clean mount [ 172.912834][ T8507] XFS (loop0): Quotacheck needed: Please wait. [ 172.921195][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.013218][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 173.035452][ T8507] XFS (loop0): Quotacheck: Done. [ 173.050033][ T9] usb 2-1: media controller created [ 173.093583][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.199585][ T9] DVB: Unable to find symbol tda10046_attach() [ 173.218122][ T5824] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.226802][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 173.245294][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 173.326711][ T5901] usb 4-1: USB disconnect, device number 6 [ 173.501135][ T9] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 173.534513][ T9] usb 2-1: USB disconnect, device number 9 [ 173.563831][ T8542] openvswitch: netlink: Missing valid actions attribute. [ 173.588932][ T8542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.875955][ T8550] loop0: detected capacity change from 0 to 256 [ 173.944694][ T1216] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 173.968520][ T1216] ath9k_htc: Failed to initialize the device [ 173.977378][ T5901] usb 4-1: ath9k_htc: USB layer deinitialized [ 174.065192][ T8550] FAT-fs (loop0): Directory bread(block 64) failed [ 174.081166][ T8550] FAT-fs (loop0): Directory bread(block 65) failed [ 174.110342][ T8550] FAT-fs (loop0): Directory bread(block 66) failed [ 174.149415][ T8550] FAT-fs (loop0): Directory bread(block 67) failed [ 174.178709][ T8550] FAT-fs (loop0): Directory bread(block 68) failed [ 174.221876][ T8550] FAT-fs (loop0): Directory bread(block 69) failed [ 174.237166][ T8550] FAT-fs (loop0): Directory bread(block 70) failed [ 174.269011][ T8550] FAT-fs (loop0): Directory bread(block 71) failed [ 174.286998][ T8565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1097'. [ 174.306622][ T8550] FAT-fs (loop0): Directory bread(block 72) failed [ 174.323534][ T8550] FAT-fs (loop0): Directory bread(block 73) failed [ 174.327980][ T8565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1097'. [ 174.369408][ T8565] netlink: 'syz.1.1097': attribute type 6 has an invalid length. [ 174.586105][ T8574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1102'. [ 174.779550][ T8584] netlink: 'syz.3.1106': attribute type 5 has an invalid length. [ 174.818016][ T8584] netlink: 'syz.3.1106': attribute type 5 has an invalid length. [ 174.848378][ T8584] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1106'. [ 175.040705][ T8598] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 175.148280][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.329816][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.357359][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 175.380958][ T9] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 175.408675][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.421760][ T8614] loop1: detected capacity change from 0 to 2048 [ 175.437719][ T9] usb 1-1: Product: syz [ 175.447958][ T9] usb 1-1: Manufacturer: syz [ 175.454794][ T9] usb 1-1: SerialNumber: syz [ 175.479775][ T8616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1124'. [ 175.518240][ T6007] Alternate GPT is invalid, using primary GPT. [ 175.526691][ T9] usb 1-1: config 0 descriptor?? [ 175.549995][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 175.559030][ T6007] loop1: p1 p2 p3 [ 175.609994][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.636406][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 175.636490][ T9] usb 1-1: media controller created [ 175.662528][ T8614] Alternate GPT is invalid, using primary GPT. [ 175.662636][ T8614] loop1: p1 p2 p3 [ 175.683693][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.710894][ T8624] loop2: detected capacity change from 0 to 64 [ 175.880916][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 175.900431][ T5880] udevd[5880]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 175.928822][ T9] DVB: Unable to find symbol tda10046_attach() [ 175.940344][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 175.957874][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 175.997983][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 176.106564][ T5976] udevd[5976]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 176.122327][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 176.147202][ T5948] udevd[5948]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 176.241864][ T9] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 176.296146][ T9] usb 1-1: USB disconnect, device number 7 [ 176.331843][ T8639] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 176.338656][ T8639] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 176.396232][ T8638] loop2: detected capacity change from 0 to 2048 [ 176.403398][ T8639] vhci_hcd vhci_hcd.0: Device attached [ 176.414972][ T8646] netlink: 'syz.3.1136': attribute type 15 has an invalid length. [ 176.440146][ T8640] vhci_hcd: connection closed [ 176.443314][ T13] vhci_hcd vhci_hcd.4: stop threads [ 176.469694][ T8638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.472874][ T13] vhci_hcd vhci_hcd.4: release socket [ 176.507845][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 176.879814][ T8662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.163174][ T8676] xt_hashlimit: size too large, truncated to 1048576 [ 177.186469][ T8676] xt_hashlimit: max too large, truncated to 1048576 [ 177.244799][ T8678] rtc_cmos 00:00: Alarms can be up to one day in the future [ 177.780955][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 177.827868][ T8675] loop3: detected capacity change from 0 to 32768 [ 177.849130][ T8675] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1150 (8675) [ 177.915512][ T8675] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.938074][ T8675] BTRFS info (device loop3): using sha256 checksum algorithm [ 177.979442][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.993612][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.009644][ T24] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 178.023673][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.044817][ T24] usb 5-1: Product: syz [ 178.049548][ T24] usb 5-1: Manufacturer: syz [ 178.054207][ T24] usb 5-1: SerialNumber: syz [ 178.085180][ T24] usb 5-1: config 0 descriptor?? [ 178.131495][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 178.188313][ T8675] BTRFS info (device loop3): enabling ssd optimizations [ 178.208983][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.234494][ T8675] BTRFS info (device loop3): turning on async discard [ 178.267981][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 178.276738][ T24] usb 5-1: media controller created [ 178.288353][ T8675] BTRFS info (device loop3): enabling free space tree [ 178.361990][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.513652][ T5828] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.524587][ T8724] syz.1.1167 uses obsolete (PF_INET,SOCK_PACKET) [ 178.555563][ T24] DVB: Unable to find symbol tda10046_attach() [ 178.577506][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 178.608603][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 178.855074][ T24] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 178.905804][ T24] usb 5-1: USB disconnect, device number 7 [ 178.961047][ T8737] loop2: detected capacity change from 0 to 256 [ 179.028238][ T8736] loop0: detected capacity change from 0 to 64 [ 179.478088][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 179.687689][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 179.776639][ T8764] loop1: detected capacity change from 0 to 256 [ 179.867662][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 179.936506][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 179.960292][ T24] usb 4-1: config 179 has no interface number 0 [ 179.966639][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 180.029198][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 180.058170][ T5901] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 180.068142][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.108337][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 180.143200][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 180.171082][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 180.190732][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.227496][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 180.256586][ T5901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.267244][ T8753] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.289444][ T5901] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.305819][ T5901] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 180.317170][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.325207][ T5901] usb 5-1: Product: syz [ 180.331635][ T5901] usb 5-1: Manufacturer: syz [ 180.339973][ T5901] usb 5-1: SerialNumber: syz [ 180.349662][ T5901] usb 5-1: config 0 descriptor?? [ 180.428739][ T8784] loop2: detected capacity change from 0 to 64 [ 180.446743][ T8781] loop0: detected capacity change from 0 to 2048 [ 180.505613][ T5984] Alternate GPT is invalid, using primary GPT. [ 180.520167][ T5984] loop0: p1 p2 p3 [ 180.579627][ T5901] usb 5-1: USB disconnect, device number 8 [ 180.602719][ T8781] Alternate GPT is invalid, using primary GPT. [ 180.631612][ T8781] loop0: p1 p2 p3 [ 180.716356][ T9] usb 4-1: USB disconnect, device number 7 [ 180.716506][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 180.730582][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 181.042860][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 181.060592][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 181.089364][ T5984] udevd[5984]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 181.206790][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 181.220203][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 181.244222][ T5984] udevd[5984]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 181.617048][ T8824] syz_tun: entered allmulticast mode [ 182.224058][ T8838] loop0: detected capacity change from 0 to 8192 [ 182.267939][ T8838] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 182.453072][ T8838] ntfs3(loop0): ino=1a, mi_enum_attr [ 182.498499][ T8838] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 182.702401][ T8868] loop4: detected capacity change from 0 to 256 [ 182.733686][ T8868] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.936011][ T8877] loop2: detected capacity change from 0 to 512 [ 183.775333][ T8914] loop3: detected capacity change from 0 to 1024 [ 183.832428][ T8914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.845600][ T5901] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 183.936277][ T8926] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 184.024709][ T8930] tunl0: entered promiscuous mode [ 184.035670][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.048538][ T8930] netlink: 'syz.2.1266': attribute type 4 has an invalid length. [ 184.061689][ T8932] SET target dimension over the limit! [ 184.077930][ T8930] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1266'. [ 184.078023][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 184.109356][ T5901] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 184.134611][ T5901] usb 5-1: config 0 has no interface number 0 [ 184.148220][ T5901] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.209140][ T5901] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 184.233031][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.251025][ T5901] usb 5-1: Product: syz [ 184.265590][ T5901] usb 5-1: Manufacturer: syz [ 184.278640][ T5901] usb 5-1: SerialNumber: syz [ 184.329603][ T5901] usb 5-1: config 0 descriptor?? [ 184.388705][ T5901] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 184.431799][ T5901] em28xx 5-1:0.132: Video interface 132 found: isoc [ 184.524817][ T8948] loop2: detected capacity change from 0 to 64 [ 184.606172][ T5901] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 184.693825][ T5901] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 184.744202][ T5901] em28xx 5-1:0.132: board has no eeprom [ 184.838107][ T5901] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 184.868850][ T5901] em28xx 5-1:0.132: analog set to isoc mode. [ 184.901444][ T9] em28xx 5-1:0.132: Registering V4L2 extension [ 184.939568][ T5901] usb 5-1: USB disconnect, device number 9 [ 184.978077][ T5901] em28xx 5-1:0.132: Disconnecting em28xx [ 185.266751][ T8977] loop4: detected capacity change from 0 to 8 [ 185.310802][ T9] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 185.331869][ T8977] SQUASHFS error: Failed to read block 0x2d7: -5 [ 185.340984][ T9] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 185.357747][ T8977] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 185.387600][ T9] em28xx 5-1:0.132: No AC97 audio processor [ 185.409373][ T9] usb 5-1: Decoder not found [ 185.414042][ T9] em28xx 5-1:0.132: failed to create media graph [ 185.420874][ T8971] loop3: detected capacity change from 0 to 4096 [ 185.436547][ T8971] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 185.445876][ T9] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 185.489627][ T9] em28xx 5-1:0.132: Remote control support is not available for this card. [ 185.543075][ T8971] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 185.552270][ T5901] em28xx 5-1:0.132: Closing input extension [ 185.573806][ T8971] ntfs3(loop3): ino=19, mi_enum_attr [ 185.603032][ T5901] em28xx 5-1:0.132: Freeing device [ 185.634807][ T8971] ntfs3(loop3): failed to convert "c46c" to macromanian [ 185.654924][ T8971] ntfs3(loop3): ino=20, mi_enum_attr [ 185.795420][ T8959] loop2: detected capacity change from 0 to 32768 [ 185.804733][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 185.828541][ T5887] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 185.868562][ T8959] (syz.2.1278,8959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 185.938868][ T8959] (syz.2.1278,8959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 185.998401][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 186.007864][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 186.030508][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.045443][ T8959] JBD2: Ignoring recovery information on journal [ 186.056839][ T5887] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 186.078027][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.087819][ T8991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.092047][ T9] usb 1-1: config 0 descriptor?? [ 186.112141][ T5887] usb 2-1: Product: syz [ 186.119270][ T9] cp210x 1-1:0.0: cp210x converter detected [ 186.138241][ T5887] usb 2-1: Manufacturer: syz [ 186.142958][ T5887] usb 2-1: SerialNumber: syz [ 186.170341][ T5887] usb 2-1: config 0 descriptor?? [ 186.197093][ T5887] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 186.214237][ T8959] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 186.292077][ T8959] (syz.2.1278,8959,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 186.378910][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 186.491940][ T8959] (syz.2.1278,8959,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 186.553138][ T8959] (syz.2.1278,8959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 186.575598][ T24] usb 1-1: USB disconnect, device number 8 [ 186.594767][ T8959] (syz.2.1278,8959,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 186.607775][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.628184][ T5887] gspca_m5602: Failed to find a sensor [ 186.633724][ T5887] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 186.644838][ T8959] (syz.2.1278,8959,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 186.654060][ T24] cp210x 1-1:0.0: device disconnected [ 186.675652][ T5887] usb 2-1: USB disconnect, device number 10 [ 186.697841][ T8959] (syz.2.1278,8959,0):ocfs2_quota_read:201 ERROR: status = -5 [ 186.705416][ T8959] __quota_error: 14 callbacks suppressed [ 186.705434][ T8959] Quota error (device loop2): find_block_dqentry: Can't read quota tree block 6 [ 186.777293][ T8959] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 186.806767][ T8959] (syz.2.1278,8959,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 186.817419][ T8959] (syz.2.1278,8959,0):ocfs2_mknod:318 ERROR: status = -5 [ 186.824532][ T8959] (syz.2.1278,8959,0):ocfs2_mknod:506 ERROR: status = -5 [ 186.963470][ T5833] ocfs2: Unmounting device (7,2) on (node local) [ 187.263822][ T9021] loop1: detected capacity change from 0 to 256 [ 187.291577][ T9016] bond2 (unregistering): Released all slaves [ 187.662126][ T9034] loop1: detected capacity change from 0 to 1024 [ 187.906505][ T1153] hfsplus: b-tree write err: -5, ino 25 [ 187.913288][ T1153] hfsplus: b-tree write err: -5, ino 4 [ 187.925083][ T1153] hfsplus: b-tree write err: -5, ino 2 [ 187.936010][ T1153] hfsplus: b-tree write err: -5, ino 17 [ 188.120994][ T9024] loop3: detected capacity change from 0 to 32768 [ 188.169502][ T9024] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1309 (9024) [ 188.213581][ T9054] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 188.213581][ T9054] SȘȞZ6' [ 188.235839][ T9024] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.273449][ T9024] BTRFS info (device loop3): using sha256 checksum algorithm [ 188.381571][ T9072] loop2: detected capacity change from 0 to 1024 [ 188.444165][ T9024] BTRFS info (device loop3): enabling ssd optimizations [ 188.496408][ T9024] BTRFS info (device loop3): turning on async discard [ 188.503296][ T9024] BTRFS info (device loop3): enabling free space tree [ 188.698533][ T9085] loop0: detected capacity change from 0 to 16 [ 188.726708][ T9085] erofs (device loop0): mounted with root inode @ nid 36. [ 188.771066][ T5828] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.785135][ T9085] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 188.814977][ T5141] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4868 [ 188.832264][ T9085] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 188.907867][ T9085] erofs (device loop0): read error -117 @ 0 of nid 89 [ 188.950936][ T30] audit: type=1800 audit(1772456368.542:77): pid=9085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1329" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 189.179156][ T9093] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1333'. [ 189.331141][ T9076] loop4: detected capacity change from 0 to 32768 [ 189.393640][ T9076] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 189.443843][ T9076] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 189.855507][ T9125] bridge0: port 3(hsr0) entered blocking state [ 189.873172][ T9127] netlink: 'syz.1.1347': attribute type 1 has an invalid length. [ 189.883362][ T9125] bridge0: port 3(hsr0) entered disabled state [ 189.903699][ T9125] hsr0: entered allmulticast mode [ 189.924484][ T9125] hsr_slave_0: entered allmulticast mode [ 189.931520][ T9076] XFS (loop4): Ending clean mount [ 189.952087][ T9125] hsr_slave_1: entered allmulticast mode [ 189.989497][ T9125] hsr0: entered promiscuous mode [ 190.021617][ T9125] bridge0: port 3(hsr0) entered blocking state [ 190.028504][ T9125] bridge0: port 3(hsr0) entered forwarding state [ 190.075822][ T5823] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.215475][ T9139] netlink: 'syz.0.1354': attribute type 1 has an invalid length. [ 191.347714][ T9196] loop3: detected capacity change from 0 to 512 [ 191.388635][ T9196] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1381: Invalid inode bitmap blk 4 in block_group 0 [ 191.406217][ T1216] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 191.431443][ T9196] loop3: lost filesystem error report for type 5 error -117 [ 191.435745][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 191.449745][ C1] EXT4-fs (loop3): initial error at time 1772456371: ext4_read_inode_bitmap:139 [ 191.458876][ C1] EXT4-fs (loop3): last error at time 1772456371: ext4_read_inode_bitmap:139 [ 191.478009][ T9196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.557177][ T9202] loop2: detected capacity change from 0 to 128 [ 191.575816][ T1216] usb 1-1: Using ep0 maxpacket: 16 [ 191.590232][ T9202] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 191.590881][ T1216] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 191.618547][ T9200] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 191.619867][ T1216] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.656440][ T9202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.682356][ T9204] loop1: detected capacity change from 0 to 1024 [ 191.715164][ T1216] usb 1-1: config 0 has no interface number 0 [ 191.746008][ T1216] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 191.777358][ T1216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.804723][ T1216] usb 1-1: Product: syz [ 191.815723][ T1216] usb 1-1: Manufacturer: syz [ 191.822253][ T1216] usb 1-1: SerialNumber: syz [ 191.834914][ T1216] usb 1-1: config 0 descriptor?? [ 191.864171][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.055863][ T1216] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 192.095575][ T1216] uvcvideo 1-1:0.105: No valid video chain found. [ 192.273205][ T1216] usb 1-1: USB disconnect, device number 9 [ 192.282780][ T9217] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.1390'. [ 192.729289][ T9231] netlink: 'syz.1.1397': attribute type 3 has an invalid length. [ 192.869378][ T9233] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1398'. [ 193.097996][ T9242] bridge0: port 3(hsr0) entered blocking state [ 193.143820][ T9242] bridge0: port 3(hsr0) entered disabled state [ 193.171384][ T9242] hsr0: entered allmulticast mode [ 193.219055][ T9242] hsr_slave_0: entered allmulticast mode [ 193.253343][ T9247] loop4: detected capacity change from 0 to 256 [ 193.272096][ T9242] hsr_slave_1: entered allmulticast mode [ 193.363578][ T9226] loop2: detected capacity change from 0 to 32768 [ 193.401149][ T9226] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1394 (9226) [ 193.436482][ T9251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.443817][ T9251] IPv6: NLM_F_CREATE should be set when creating new route [ 193.451185][ T9251] IPv6: NLM_F_CREATE should be set when creating new route [ 193.488481][ T9226] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 193.512999][ T9226] BTRFS info (device loop2): using blake2b checksum algorithm [ 193.565621][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 193.621501][ T9226] BTRFS info (device loop2): enabling ssd optimizations [ 193.652239][ T9226] BTRFS info (device loop2): turning on async discard [ 193.660710][ T9226] BTRFS info (device loop2): enabling free space tree [ 193.739054][ T9] usb 2-1: too many configurations: 68, using maximum allowed: 8 [ 193.763746][ T9] usb 2-1: config index 0 descriptor too short (expected 72, got 56) [ 193.785969][ T9] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 193.832342][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 193.888346][ T5833] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 193.900005][ T9] usb 2-1: config index 1 descriptor too short (expected 72, got 56) [ 193.933416][ T9] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 193.977769][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 194.031166][ T9281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.046238][ T9] usb 2-1: config index 2 descriptor too short (expected 72, got 56) [ 194.054486][ T9] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 194.124027][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 194.169344][ T9] usb 2-1: config index 3 descriptor too short (expected 72, got 56) [ 194.195617][ T9] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 194.227290][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 194.261912][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.318394][ T9] usb 2-1: config index 4 descriptor too short (expected 72, got 56) [ 194.340749][ T9] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 194.395021][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 194.436154][ T9] usb 2-1: config index 5 descriptor too short (expected 72, got 56) [ 194.445659][ T9] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 194.456238][ T9286] bond1: entered allmulticast mode [ 194.462364][ T9289] bridge0: port 3(hsr0) entered blocking state [ 194.479857][ T9289] bridge0: port 3(hsr0) entered disabled state [ 194.521259][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 194.536044][ T9289] hsr0: entered allmulticast mode [ 194.554864][ T9289] hsr_slave_0: entered allmulticast mode [ 194.564981][ T9289] hsr_slave_1: entered allmulticast mode [ 194.574248][ T9] usb 2-1: config index 6 descriptor too short (expected 72, got 56) [ 194.592810][ T9] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 194.611909][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 194.640689][ T9289] hsr0: entered promiscuous mode [ 194.648008][ T9289] bridge0: port 3(hsr0) entered blocking state [ 194.654366][ T9289] bridge0: port 3(hsr0) entered forwarding state [ 194.661862][ T9] usb 2-1: config index 7 descriptor too short (expected 72, got 56) [ 194.675399][ T9] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 194.701350][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 194.775045][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 194.821941][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.867795][ T9295] bond2 (unregistering): Released all slaves [ 194.877220][ T9] usb 2-1: Product: syz [ 194.881440][ T9] usb 2-1: Manufacturer: syz [ 194.902662][ T9] usb 2-1: SerialNumber: syz [ 194.929407][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 194.971616][ T5901] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 195.465577][ T9] usb 2-1: USB disconnect, device number 11 [ 195.930249][ T9320] loop3: detected capacity change from 0 to 32768 [ 195.939425][ T9320] btrfs: Deprecated parameter 'usebackuproot' [ 195.945727][ T9320] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 195.956355][ T9320] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1435 (9320) [ 195.989258][ T9320] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.009745][ T9320] BTRFS info (device loop3): using crc32c checksum algorithm [ 196.016169][ T5901] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 196.035464][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 196.037428][ T5901] ath9k_htc: Failed to initialize the device [ 196.050066][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 196.110383][ T9342] bond2 (unregistering): Released all slaves [ 196.146448][ T3490] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32b4fbab level 0 [ 196.206180][ T9320] BTRFS error (device loop3): failed to load root extent [ 196.213309][ T9320] BTRFS warning (device loop3): try to load backup roots slot 1 [ 196.225594][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 196.236946][ T24] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 196.258757][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 196.275230][ T24] usb 5-1: config 0 has no interface number 0 [ 196.284237][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 196.303504][ T24] usb 5-1: config 0 has no interface number 0 [ 196.318129][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 196.326725][ T24] usb 5-1: config 0 has no interface number 0 [ 196.339913][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 196.350745][ T24] usb 5-1: config 0 has no interface number 0 [ 196.358477][ T9320] BTRFS info (device loop3): setting nodatasum [ 196.366156][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 196.374518][ T24] usb 5-1: config 0 has no interface number 0 [ 196.381079][ T9320] BTRFS info (device loop3): disabling tree log [ 196.388564][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 196.398851][ T24] usb 5-1: config 0 has no interface number 0 [ 196.414661][ T9320] BTRFS info (device loop3): turning on flush-on-commit [ 196.436914][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 196.450039][ T24] usb 5-1: config 0 has no interface number 0 [ 196.455716][ T9320] BTRFS info (device loop3): turning on async discard [ 196.480131][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 196.485556][ T9320] BTRFS info (device loop3): enabling free space tree [ 196.499643][ T9320] BTRFS info (device loop3): force clearing of disk cache [ 196.503380][ T24] usb 5-1: config 0 has no interface number 0 [ 196.522916][ T9320] BTRFS info (device loop3): trying to use backup root at mount time [ 196.558760][ T24] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 196.584831][ T9368] loop2: detected capacity change from 0 to 128 [ 196.586352][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.619839][ T24] usb 5-1: Product: syz [ 196.624072][ T24] usb 5-1: Manufacturer: syz [ 196.639358][ T24] usb 5-1: SerialNumber: syz [ 196.701062][ T24] usb 5-1: config 0 descriptor?? [ 196.730821][ T24] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 196.772130][ T5828] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.960872][ T24] etas_es58x 5-1:0.2: could not parse product info: '424242424242' [ 197.178559][ T24] usb 5-1: USB disconnect, device number 10 [ 197.186256][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 197.203417][ T24] etas_es58x 5-1:0.2: Disconnecting syz syz [ 197.326432][ T9385] No such timeout policy "syz1" [ 197.785841][ T9404] loop3: detected capacity change from 0 to 512 [ 197.878773][ T9404] FAT-fs (loop3): Directory bread(block 199916) failed [ 197.909854][ T9409] loop0: detected capacity change from 0 to 16 [ 197.926209][ T9409] erofs (device loop0): mounted with root inode @ nid 36. [ 197.933451][ T9404] FAT-fs (loop3): Directory bread(block 199917) failed [ 197.949810][ T9414] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 197.975902][ T9404] FAT-fs (loop3): Directory bread(block 199918) failed [ 197.983063][ T9404] FAT-fs (loop3): Directory bread(block 199919) failed [ 198.046683][ T9404] FAT-fs (loop3): Directory bread(block 199920) failed [ 198.054616][ T9404] FAT-fs (loop3): Directory bread(block 199921) failed [ 198.122775][ T9418] mmap: syz.1.1470 (9418): VmData 37466112 exceed data ulimit 2840. Update limits or use boot option ignore_rlimit_data. [ 198.138233][ T9404] FAT-fs (loop3): Directory bread(block 199922) failed [ 198.182757][ T9404] FAT-fs (loop3): Directory bread(block 199923) failed [ 198.248240][ T9404] FAT-fs (loop3): Directory bread(block 199916) failed [ 198.283130][ T9404] FAT-fs (loop3): Directory bread(block 199917) failed [ 198.583801][ T9438] loop4: detected capacity change from 0 to 16 [ 198.616105][ T9438] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 199.034491][ T9446] loop0: detected capacity change from 0 to 4096 [ 199.085041][ T9446] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 199.167561][ T9456] comedi comedi0: Cannot bond this driver to itself! [ 199.258998][ T9446] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 199.274846][ T9446] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 199.358009][ T9446] ntfs3(loop0): ino=1e, mi_enum_attr [ 199.363729][ T9446] ntfs3(loop0): ino=1e, mi_enum_attr [ 199.384988][ T9446] ntfs3(loop0): ino=1e, mi_enum_attr [ 199.528743][ T3490] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 199.550002][ T5824] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 199.585057][ T5824] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 199.604870][ T5824] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 199.863090][ T9431] loop2: detected capacity change from 0 to 40427 [ 200.243563][ T9431] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 200.298532][ T9431] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 200.344866][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'. [ 200.400538][ T9500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1502'. [ 200.916816][ T9518] xt_nat: multiple ranges no longer supported [ 201.054420][ T9521] netlink: 'syz.4.1511': attribute type 11 has an invalid length. [ 201.078725][ T9519] loop1: detected capacity change from 0 to 4096 [ 201.114645][ T9519] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 201.147357][ T9519] ntfs3(loop1): ino=3, mi_enum_attr [ 201.270682][ T9519] ntfs3(loop1): ino=5, "/" indx_read_ra [ 201.286625][ T9519] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 201.445216][ T9503] loop0: detected capacity change from 0 to 32768 [ 201.517281][ T9503] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 201.602480][ T9537] batadv1: entered promiscuous mode [ 201.653815][ T9537] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 201.671448][ T9503] XFS (loop0): Ending clean mount [ 201.743768][ T9549] loop2: detected capacity change from 0 to 16 [ 201.796240][ T9549] erofs (device loop2): mounted with root inode @ nid 36. [ 201.888612][ T5824] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 202.776093][ T9585] loop4: detected capacity change from 0 to 16 [ 202.821849][ T9585] erofs (device loop4): mounted with root inode @ nid 36. [ 202.851698][ T9585] erofs (device loop4): bogus i_mode (3) @ nid 86 [ 202.971099][ T9558] loop3: detected capacity change from 0 to 32768 [ 202.983213][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 203.004139][ T9558] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1527 (9558) [ 203.046873][ T9596] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 203.122310][ T9596] CIFS mount error: No usable UNC path provided in device string! [ 203.122310][ T9596] [ 203.142098][ T9558] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.164388][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 203.184503][ T9558] BTRFS info (device loop3): using sha256 checksum algorithm [ 203.195018][ T9558] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 203.214763][ T9596] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 203.358102][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 203.401611][ T9] usb 2-1: config 0 has an invalid interface number: 99 but max is 0 [ 203.431821][ T9] usb 2-1: config 0 has no interface number 0 [ 203.441640][ T9558] BTRFS info (device loop3): rebuilding free space tree [ 203.470976][ T9] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 203.504913][ T9558] BTRFS info (device loop3): disabling free space tree [ 203.524784][ T9615] bond2: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 203.534702][ T9558] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 203.556834][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.588693][ T9558] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 203.612463][ T9615] bond2 (unregistering): Released all slaves [ 203.620006][ T9] usb 2-1: config 0 descriptor?? [ 203.642443][ T9] usb-storage 2-1:0.99: USB Mass Storage device detected [ 203.658966][ T9558] BTRFS info (device loop3): enabling ssd optimizations [ 203.667713][ T9558] BTRFS info (device loop3): enabling disk space caching [ 203.678919][ T9628] loop2: detected capacity change from 0 to 8 [ 203.686107][ T9] usb-storage 2-1:0.99: device ignored [ 203.696928][ T9558] BTRFS info (device loop3): force clearing of disk cache [ 203.704162][ T9558] BTRFS info (device loop3): enabling auto defrag [ 203.739464][ T9558] BTRFS info (device loop3): max_inline set to 0 [ 203.761118][ T9628] SQUASHFS error: Failed to read block 0x2fc: -5 [ 203.771432][ T9628] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 203.779463][ T9628] SQUASHFS error: Unable to read directory block [247:26] [ 203.864739][ T1216] usb 2-1: USB disconnect, device number 12 [ 203.921410][ T5828] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 204.236989][ T9641] loop0: detected capacity change from 0 to 8 [ 204.260084][ T9638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1555'. [ 204.297149][ T9641] SQUASHFS error: Unable to read inode 0xa7 [ 204.943325][ T9665] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 205.415571][ T9685] loop0: detected capacity change from 0 to 1024 [ 205.527127][ T9688] netlink: 'syz.3.1579': attribute type 12 has an invalid length. [ 205.616519][ T3490] hfsplus: b-tree write err: -5, ino 25 [ 205.622267][ T3490] hfsplus: b-tree write err: -5, ino 4 [ 205.649551][ T3490] hfsplus: b-tree write err: -5, ino 2 [ 205.752459][ T9659] loop1: detected capacity change from 0 to 32768 [ 205.815564][ T9659] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 205.835731][ T1216] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 205.929374][ T9659] XFS (loop1): Ending clean mount [ 206.039710][ T1216] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 206.070456][ T1216] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 206.097829][ T1216] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 206.111931][ T5835] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 206.131782][ T1216] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 206.156464][ T1216] usb 3-1: config 0 interface 0 has no altsetting 0 [ 206.189497][ T1216] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 206.207465][ T1216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.235706][ T1216] usb 3-1: Product: syz [ 206.246114][ T1216] usb 3-1: Manufacturer: syz [ 206.250857][ T1216] usb 3-1: SerialNumber: syz [ 206.298573][ T1216] usb 3-1: config 0 descriptor?? [ 206.433986][ T5925] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 206.629310][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 206.642048][ T5925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 206.666895][ T5925] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 206.694651][ T5925] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 206.717625][ T5925] usb 4-1: Product: syz [ 206.721851][ T5925] usb 4-1: Manufacturer: syz [ 206.740741][ T5925] usb 4-1: SerialNumber: syz [ 206.754662][ T5949] usb 3-1: USB disconnect, device number 12 [ 206.789647][ T9729] netlink: 'syz.4.1596': attribute type 1 has an invalid length. [ 206.945049][ T30] audit: type=1326 audit(1772456386.544:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 206.990148][ T30] audit: type=1326 audit(1772456386.544:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 207.016393][ T30] audit: type=1326 audit(1772456386.584:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 207.039474][ T30] audit: type=1326 audit(1772456386.584:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 207.083391][ T5925] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 207.096346][ T9735] loop1: detected capacity change from 0 to 512 [ 207.102543][ T30] audit: type=1326 audit(1772456386.584:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9732 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff8d9c799 code=0x7ffc0000 [ 207.125641][ T5925] usb 4-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 207.133685][ T5925] usb 4-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 207.146732][ T5925] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 207.197180][ T9735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.211929][ T9735] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.257606][ T9721] loop0: detected capacity change from 0 to 40427 [ 207.286424][ T5925] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 207.309975][ T9721] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 207.326984][ T5925] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 207.337068][ T9721] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 207.372247][ T5925] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 207.386936][ T9721] F2FS-fs (loop0): invalid crc value [ 207.400971][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.426247][ T5925] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 207.475589][ T5925] usb 4-1: USB disconnect, device number 8 [ 207.505788][ T5925] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 207.567718][ T5925] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 207.586552][ T9749] loop4: detected capacity change from 0 to 136 [ 207.614709][ T5925] visor 4-1:1.0: device disconnected [ 207.738844][ T9751] xt_CT: No such helper "snmp_trap" [ 207.769651][ T9721] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 207.840648][ T9721] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 207.858346][ T9721] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 207.895958][ T9757] dlm: no locking on control device [ 208.000475][ T9759] loop1: detected capacity change from 0 to 128 [ 208.058760][ T5824] syz-executor: attempt to access beyond end of device [ 208.058760][ T5824] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 208.069125][ T9759] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 208.118467][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 208.118516][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 208.118552][ T5824] Call Trace: [ 208.118563][ T5824] [ 208.118573][ T5824] dump_stack_lvl+0xe8/0x150 [ 208.118609][ T5824] f2fs_handle_critical_error+0x37c/0x540 [ 208.118652][ T5824] f2fs_write_end_io+0xcdb/0xff0 [ 208.118698][ T5824] __submit_merged_bio+0x256/0x700 [ 208.118738][ T5824] f2fs_submit_merged_write+0x284/0x390 [ 208.118775][ T5824] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 208.118824][ T5824] f2fs_sync_node_pages+0x14bf/0x1680 [ 208.118875][ T5824] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 208.118956][ T5824] f2fs_write_checkpoint+0xeb8/0x26a0 [ 208.119017][ T5824] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 208.119096][ T5824] kill_f2fs_super+0x314/0x720 [ 208.119132][ T5824] ? __pfx_kill_f2fs_super+0x10/0x10 [ 208.119189][ T5824] ? lockdep_hardirqs_on+0x7a/0x110 [ 208.119228][ T5824] deactivate_locked_super+0xbc/0x130 [ 208.119264][ T5824] cleanup_mnt+0x437/0x4d0 [ 208.119288][ T5824] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.119325][ T5824] task_work_run+0x1d9/0x270 [ 208.119354][ T5824] ? __pfx_task_work_run+0x10/0x10 [ 208.119391][ T5824] exit_to_user_mode_loop+0xed/0x480 [ 208.119426][ T5824] ? rcu_is_watching+0x15/0xb0 [ 208.119462][ T5824] do_syscall_64+0x32d/0xf80 [ 208.119483][ T5824] ? trace_irq_disable+0x3b/0x150 [ 208.119502][ T5824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.119525][ T5824] ? clear_bhb_loop+0x40/0x90 [ 208.119552][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.119574][ T5824] RIP: 0033:0x7f1f1359d9d7 [ 208.119601][ T5824] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 208.119620][ T5824] RSP: 002b:00007ffdd1b81478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 208.119642][ T5824] RAX: 0000000000000000 RBX: 00007f1f13631f90 RCX: 00007f1f1359d9d7 [ 208.119656][ T5824] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd1b81530 [ 208.119669][ T5824] RBP: 00007ffdd1b81530 R08: 00007ffdd1b82530 R09: 00000000ffffffff [ 208.119684][ T5824] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd1b825c0 [ 208.119697][ T5824] R13: 00007f1f13631f90 R14: 0000000000032c5d R15: 00007ffdd1b82600 [ 208.119733][ T5824] [ 208.119743][ T5824] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 208.309332][ T9759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.668646][ T9776] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.744061][ T9780] netlink: 'syz.2.1619': attribute type 1 has an invalid length. [ 208.913733][ T5925] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 209.087258][ T5925] usb 5-1: unable to get BOS descriptor or descriptor too short [ 209.095880][ T5925] usb 5-1: not running at top speed; connect to a high speed hub [ 209.153639][ T5925] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.175968][ T5925] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.206873][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 209.243728][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 209.283870][ T5925] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 209.332518][ T5925] usb 5-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 209.363895][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.400699][ T5925] usb 5-1: Product: syz [ 209.422683][ T5925] usb 5-1: Manufacturer: syz [ 209.430471][ T9805] loop0: detected capacity change from 0 to 64 [ 209.438208][ T5925] usb 5-1: SerialNumber: syz [ 209.484795][ T5925] ipaq 5-1:1.0: PocketPC PDA converter detected [ 209.710505][ T5925] usb 5-1: PocketPC PDA converter now attached to ttyUSB0 [ 209.722003][ T9815] loop0: detected capacity change from 0 to 64 [ 209.978358][ T5887] usb 5-1: USB disconnect, device number 11 [ 210.024667][ T5887] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 210.054325][ T5887] ipaq 5-1:1.0: device disconnected [ 210.655700][ T9839] bond2: option tlb_dynamic_lb: invalid value (2) [ 210.699187][ T9839] bond2 (unregistering): Released all slaves [ 211.023061][ T9856] netlink: 'syz.4.1655': attribute type 1 has an invalid length. [ 211.074275][ T9856] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1655'. [ 211.107943][ T9829] loop0: detected capacity change from 0 to 40427 [ 211.124700][ T9829] F2FS-fs: heap/no_heap options were deprecated [ 211.168618][ T9829] F2FS-fs (loop0): Image doesn't support compression [ 211.188916][ T9829] F2FS-fs (loop0): invalid crc value [ 211.203451][ T5925] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 211.324973][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'. [ 211.373819][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 211.391680][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 211.412158][ T5925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.442948][ T5925] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 211.467009][ T5925] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 211.488525][ T5925] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.514228][ T9829] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 211.520756][ T5925] usb 4-1: string descriptor 0 read error: -22 [ 211.546198][ T5925] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.569487][ T9829] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 211.573496][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.627612][ T9829] syz.0.1641: attempt to access beyond end of device [ 211.627612][ T9829] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 211.699769][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 211.706183][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 211.712681][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 211.718867][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 211.725050][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 211.803215][ T9879] loop2: detected capacity change from 0 to 4096 [ 211.814921][ T9881] loop4: detected capacity change from 0 to 64 [ 211.833528][ T9881] minix_free_block (loop4:21): bit already cleared [ 211.925677][ T5925] usb 4-1: 0:2 : does not exist [ 211.945387][ T9882] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.177012][ T9] usb 4-1: USB disconnect, device number 9 [ 212.370405][ T9890] loop2: detected capacity change from 0 to 512 [ 212.394852][ T9890] EXT4-fs: Ignoring removed nobh option [ 212.453343][ T9890] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1669: invalid block [ 212.491903][ T9890] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.493393][ C0] EXT4-fs (loop2): initial error at time 1772456392: ext4_get_branch:178: inode 11: block 4294967295 [ 212.513576][ C0] EXT4-fs (loop2): last error at time 1772456392: ext4_get_branch:178: inode 11: block 4294967295 [ 212.553405][ T9890] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1669: invalid indirect mapped block 4294967295 (level 1) [ 212.609486][ T9890] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.622393][ T9890] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1669: invalid indirect mapped block 4294967295 (level 1) [ 212.691020][ T9890] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.691957][ T9890] EXT4-fs (loop2): 2 truncates cleaned up [ 212.715934][ T9890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.766211][ T9884] loop1: detected capacity change from 0 to 32768 [ 212.791279][ T9890] EXT4-fs error (device loop2): ext4_get_parent:1832: inode #11: comm syz.2.1669: bad parent inode number: 3 [ 212.807044][ T9884] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1668 (9884) [ 212.870779][ T9884] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.943221][ T9884] BTRFS info (device loop1): using sha256 checksum algorithm [ 212.967534][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.123839][ T9917] overlayfs: conflicting options: userxattr,metacopy=on [ 213.141505][ T9884] BTRFS info (device loop1): enabling ssd optimizations [ 213.183575][ T9884] BTRFS info (device loop1): turning on async discard [ 213.249336][ T9884] BTRFS info (device loop1): enabling free space tree [ 213.339106][ T9896] loop4: detected capacity change from 0 to 32768 [ 213.377451][ T9896] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 10fe6d94-41a2-4e5b-958e-4b965fd8a8c6 [ 213.407705][ T9896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1672 (9896) [ 213.461072][ T9896] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.494574][ T5835] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.506317][ T9896] BTRFS info (device loop4): using sha256 checksum algorithm [ 213.706704][ T9943] netlink: 'syz.0.1682': attribute type 4 has an invalid length. [ 213.715586][ T9943] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1682'. [ 213.790332][ T9896] BTRFS info (device loop4): enabling ssd optimizations [ 213.819142][ T9896] BTRFS info (device loop4): turning on async discard [ 213.853482][ T9896] BTRFS info (device loop4): enabling free space tree [ 214.046291][ T9953] bridge1: entered promiscuous mode [ 214.229732][ T5823] BTRFS info (device loop4): last unmount of filesystem 10fe6d94-41a2-4e5b-958e-4b965fd8a8c6 [ 214.295314][ T9956] bond1: option lacp_active: invalid value (9) [ 214.343566][ T9956] bond1 (unregistering): Released all slaves [ 214.912364][ T9975] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1694'. [ 214.958082][ T9977] netlink: 'syz.3.1695': attribute type 1 has an invalid length. [ 215.001011][ T9977] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1695'. [ 215.054194][ T9977] netlink: 658 bytes leftover after parsing attributes in process `syz.3.1695'. [ 215.091283][ T9977] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1695'. [ 215.133405][ T5925] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 215.233475][ T9957] loop0: detected capacity change from 0 to 40427 [ 215.274133][ T9957] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 215.344537][ T5925] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 215.362946][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.371101][ T9957] F2FS-fs (loop0): invalid crc value [ 215.393046][ T5925] usb 3-1: Product: syz [ 215.397297][ T5925] usb 3-1: Manufacturer: syz [ 215.447429][ T5925] usb 3-1: SerialNumber: syz [ 215.466933][ T5925] usb 3-1: config 0 descriptor?? [ 215.505901][ T5925] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 215.607457][ T9957] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 215.661463][ T9957] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 215.746059][ T9957] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 215.920040][ T5949] usb 3-1: USB disconnect, device number 13 [ 216.000847][T10012] netlink: 'syz.3.1709': attribute type 13 has an invalid length. [ 216.021955][T10011] loop1: detected capacity change from 0 to 512 [ 216.034563][T10012] gretap0: refused to change device tx_queue_len [ 216.050440][T10012] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 216.083066][T10011] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 216.108565][T10011] EXT4-fs (loop1): 1 truncate cleaned up [ 216.117333][T10011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.330210][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.703007][T10034] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1721'. [ 216.744558][T10034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.843010][ T5949] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 217.013120][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 217.024300][ T5949] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 217.054692][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.102543][T10054] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 217.102939][ T5949] usb 3-1: config 0 descriptor?? [ 217.154925][ T5949] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 217.301930][T10060] loop4: detected capacity change from 0 to 512 [ 217.335802][T10060] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 217.349233][T10060] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 217.360236][T10060] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1732: Corrupt directory, running e2fsck is recommended [ 217.390626][ T5949] usb 3-1: Detected FT232B [ 217.407720][T10060] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 217.426345][T10060] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1732: corrupted in-inode xattr: invalid ea_ino [ 217.431723][T10061] bond2: option tlb_dynamic_lb: invalid value (2) [ 217.452686][T10060] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 217.456142][T10060] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1732: couldn't read orphan inode 15 (err -117) [ 217.465396][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 217.465414][ C1] EXT4-fs (loop4): initial error at time 1772456397: ext4_iget_extra_inode:5025: inode 15 [ 217.465440][ C1] EXT4-fs (loop4): last error at time 1772456397: ext4_iget_extra_inode:5025: inode 15 [ 217.521424][T10061] bond2 (unregistering): Released all slaves [ 217.554394][T10060] loop4: lost filesystem error report for type 5 error -117 [ 217.560381][T10060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.599241][ T5949] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 217.608272][T10060] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #2: comm syz.4.1732: corrupted xattr block 255: invalid header [ 217.625278][ T5949] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 217.669047][ T5949] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 217.698568][ T5949] usb 3-1: USB disconnect, device number 14 [ 217.735123][ T5949] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 217.756573][ T5949] ftdi_sio 3-1:0.0: device disconnected [ 217.845091][T10060] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.875846][T10072] loop3: detected capacity change from 0 to 4096 [ 217.941974][T10072] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 218.309507][T10091] loop3: detected capacity change from 0 to 512 [ 218.399231][T10091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.447825][T10091] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.512545][ T5949] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 218.596170][T10098] bond1: option tlb_dynamic_lb: invalid value (2) [ 218.612107][T10098] bond1 (unregistering): Released all slaves [ 218.639789][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.703059][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 218.714294][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 218.733876][T10107] loop0: detected capacity change from 0 to 512 [ 218.739728][ T5949] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 218.756224][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.784696][ T5949] usb 3-1: Product: syz [ 218.789529][ T5949] usb 3-1: Manufacturer: syz [ 218.794291][ T5949] usb 3-1: SerialNumber: syz [ 218.816657][ T5949] usb 3-1: config 0 descriptor?? [ 218.819194][T10107] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 218.834647][ T5949] hub 3-1:0.0: bad descriptor, ignoring hub [ 218.840604][ T5949] hub 3-1:0.0: probe with driver hub failed with error -5 [ 218.852674][ T5949] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 218.884283][T10107] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 218.894744][T10107] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1753: Corrupt directory, running e2fsck is recommended [ 218.929179][T10107] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 218.947133][T10107] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.1753: corrupted in-inode xattr: invalid ea_ino [ 218.976653][T10107] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.977154][T10107] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1753: couldn't read orphan inode 15 (err -117) [ 218.986522][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 218.986542][ C0] EXT4-fs (loop0): initial error at time 1772456398: ext4_iget_extra_inode:5025: inode 15 [ 218.986569][ C0] EXT4-fs (loop0): last error at time 1772456398: ext4_iget_extra_inode:5025: inode 15 [ 219.116021][T10107] loop0: lost filesystem error report for type 5 error -117 [ 219.118317][T10107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.158400][T10107] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #2: comm syz.0.1753: corrupted xattr block 255: invalid header [ 219.333215][T10107] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.464322][T10126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1763'. [ 219.487616][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1763'. [ 219.712844][T10138] autofs: Unknown parameter 'no9 PG!8E ' [ 220.282608][T10166] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 220.487709][T10174] trusted_key: encrypted_key: master key parameter is missing [ 220.697360][T10181] loop0: detected capacity change from 0 to 1024 [ 220.723395][T10181] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.729959][T10181] EXT4-fs: inline encryption not supported [ 220.858237][T10181] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 220.922680][T10181] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1790: bad orphan inode 11 [ 220.994003][T10181] loop0: lost filesystem error report for type 5 error -117 [ 220.994477][T10181] EXT4-fs (loop0): Remounting filesystem read-only [ 221.008534][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 221.008562][ C0] EXT4-fs (loop0): initial error at time 1772456400: ext4_orphan_get:1417 [ 221.008588][ C0] EXT4-fs (loop0): last error at time 1772456400: ext4_orphan_get:1417 [ 221.079212][T10181] ext4_test_bit(bit=10, block=4) = 1 [ 221.097814][T10181] is_bad_inode(inode)=0 [ 221.102025][T10181] NEXT_ORPHAN(inode)=3254779904 [ 221.139692][T10181] max_ino=32 [ 221.147659][T10181] i_nlink=0 [ 221.160764][T10181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.212948][T10201] gre0: entered allmulticast mode [ 221.235589][T10203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1800'. [ 221.272746][T10203] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 221.302217][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.458414][T10210] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.665281][T10221] loop1: detected capacity change from 0 to 512 [ 221.702202][ T5949] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 221.713696][T10221] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 221.721018][T10225] loop0: detected capacity change from 0 to 1024 [ 221.835006][T10221] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 221.865306][T10221] FAT-fs (loop1): Filesystem has been set read-only [ 221.894109][T10221] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 221.902383][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 221.910775][ T5949] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 221.924206][ T5949] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.941069][T10221] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 221.949879][ T5949] usb 5-1: config 0 has no interface number 0 [ 221.973090][ T5949] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 221.985817][ T1153] hfsplus: b-tree write err: -5, ino 25 [ 221.991526][ T1153] hfsplus: b-tree write err: -5, ino 4 [ 222.013354][ T5949] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 222.024563][ T1153] hfsplus: b-tree write err: -5, ino 2 [ 222.063788][ T5949] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 222.102068][ T5949] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 222.157295][ T5949] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 222.197349][ T5949] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 222.234145][ T5949] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 222.282156][ T5949] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 222.319080][ T5949] usb 5-1: config 0 interface 239 has no altsetting 0 [ 222.351418][ T5949] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 222.370421][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.393338][ T5949] usb 5-1: Product: syz [ 222.404888][ T5949] usb 5-1: Manufacturer: syz [ 222.416919][ T5949] usb 5-1: SerialNumber: syz [ 222.444938][ T5949] usb 5-1: config 0 descriptor?? [ 222.450814][T10214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 222.463458][T10214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 222.490054][ T5901] usb 3-1: USB disconnect, device number 15 [ 222.527503][ T5831] Bluetooth: hci5: urb ffff888036a32100 submission failed (90) [ 222.582407][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 222.668087][T10249] bridge1: entered promiscuous mode [ 222.699104][ T5925] usb 5-1: USB disconnect, device number 12 [ 222.747056][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 222.766842][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.800341][ T9] usb 1-1: Product: syz [ 222.817987][ T9] usb 1-1: Manufacturer: syz [ 222.845036][ T9] usb 1-1: SerialNumber: syz [ 222.877523][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 222.907518][ T5887] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 223.019811][T10256] bond2: option tlb_dynamic_lb: invalid value (2) [ 223.039914][T10256] bond2 (unregistering): Released all slaves [ 223.154677][ C0] usb 1-1: ath: unknown panic pattern! [ 223.332489][T10268] lo: entered promiscuous mode [ 223.407250][ T9] usb 1-1: USB disconnect, device number 10 [ 223.663984][T10281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1838'. [ 223.682271][T10264] loop1: detected capacity change from 0 to 32768 [ 223.737913][T10264] JBD2: Ignoring recovery information on journal [ 223.812198][ T5925] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 223.896579][T10264] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 223.968853][T10291] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 224.010004][T10291] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 224.023600][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 224.031374][ T30] audit: type=1800 audit(1772456403.626:83): pid=10264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1829" name="file0" dev="loop1" ino=30722 res=0 errno=0 [ 224.042040][ T5887] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 224.062322][T10291] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 224.070008][T10291] UDF-fs: Scanning with blocksize 512 failed [ 224.091996][ T5925] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 224.119960][ T5925] usb 4-1: config 0 has no interface number 0 [ 224.123519][ T5887] ath9k_htc: Failed to initialize the device [ 224.141291][T10291] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 224.141728][ T5925] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 224.180996][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 224.195872][T10291] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 224.207698][ T5925] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 224.222296][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 224.230562][ T5925] usb 4-1: Product: syz [ 224.243888][T10296] loop4: detected capacity change from 0 to 1024 [ 224.253459][ T5925] usb 4-1: SerialNumber: syz [ 224.261553][T10291] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 224.269698][ T5835] ocfs2: Unmounting device (7,1) on (node local) [ 224.277739][ T5925] usb 4-1: config 0 descriptor?? [ 224.307067][ T5925] cm109 4-1:0.8: invalid payload size 208, expected 4 [ 224.314823][T10291] UDF-fs: Scanning with blocksize 1024 failed [ 224.344176][ T5925] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input13 [ 224.357580][T10291] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 224.388658][T10291] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 224.397152][T10296] hfsplus: invalid extended attribute record [ 224.438674][T10296] hfsplus: b-tree write err: -5, ino 2 [ 224.446055][T10291] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 224.485180][T10291] UDF-fs: Scanning with blocksize 2048 failed [ 224.522961][T10291] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 224.586357][T10291] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 224.596321][ T12] hfsplus: b-tree write err: -5, ino 25 [ 224.612033][ T12] hfsplus: b-tree write err: -5, ino 4 [ 224.624089][T10291] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 224.633804][ T12] hfsplus: b-tree write err: -5, ino 2 [ 224.639719][T10291] UDF-fs: Scanning with blocksize 4096 failed [ 224.646642][T10291] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 224.781273][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 224.781336][ C1] ------------[ cut here ]------------ [ 224.781405][ C1] URB ffff8880362dd700 submitted while active [ 224.781429][ C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#1: syz.3.1836/10275 [ 224.781472][ C1] Modules linked in: [ 224.781533][ C1] CPU: 1 UID: 0 PID: 10275 Comm: syz.3.1836 Not tainted syzkaller #0 PREEMPT(full) [ 224.781566][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.781582][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 224.781608][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 57 f5 f7 fa 49 83 3e 00 74 40 e8 ac cd 8d fa 48 8d 3d 65 51 e7 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 91 cd 8d fa eb 05 e8 8a cd [ 224.781630][ C1] RSP: 0018:ffffc90000a08960 EFLAGS: 00010087 [ 224.781653][ C1] RAX: ffffffff8737d8a4 RBX: ffff8880362dd700 RCX: 0000000000040000 [ 224.781677][ C1] RDX: ffffc90002362000 RSI: ffff8880362dd700 RDI: ffffffff901f2a10 [ 224.781695][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 224.781710][ C1] R10: dffffc0000000000 R11: fffff5200014112c R12: 0000000000000820 [ 224.781727][ C1] R13: ffff888054ab6030 R14: ffff8880362dd708 R15: dffffc0000000000 [ 224.781746][ C1] FS: 0000555585037500(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 224.781767][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.781785][ C1] CR2: 0000001b30d15ffc CR3: 00000000605c6000 CR4: 00000000003526f0 [ 224.781808][ C1] Call Trace: [ 224.781818][ C1] [ 224.781830][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 224.781871][ C1] ? ___ratelimit+0x58c/0x8d0 [ 224.781914][ C1] cm109_urb_irq_callback+0x6e2/0xcb0 [ 224.781967][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 224.782007][ C1] dummy_timer+0xbbd/0x45d0 [ 224.782051][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 224.782091][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 224.782154][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 224.782191][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 224.782227][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 224.782263][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 224.782297][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 224.782330][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 224.782385][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 224.782420][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 224.782459][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 224.782496][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.782538][ C1] handle_softirqs+0x22a/0x870 [ 224.782575][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 224.782613][ C1] __irq_exit_rcu+0x5f/0x150 [ 224.782644][ C1] irq_exit_rcu+0x9/0x30 [ 224.782672][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 224.782695][ C1] [ 224.782702][ C1] [ 224.782713][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 224.782739][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 224.782777][ C1] Code: f7 e8 3d b7 f0 f5 f7 c3 00 02 00 00 74 05 e8 20 0e 1c f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 54 69 e2 f5 65 8b 05 6d 11 6b 07 85 c0 74 18 5b 41 5e e9 91 48 [ 224.782798][ C1] RSP: 0018:ffffc90003f47a68 EFLAGS: 00000206 [ 224.782820][ C1] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 0000000080000001 [ 224.782835][ C1] RDX: 0000000000000006 RSI: ffffffff8defcb55 RDI: 0000000000000001 [ 224.782850][ C1] RBP: ffffc90003f47b48 R08: ffffffff9011e8b7 R09: 1ffffffff2023d16 [ 224.782867][ C1] R10: dffffc0000000000 R11: fffffbfff2023d17 R12: ffff88802a11af18 [ 224.782885][ C1] R13: ffff88802a11af00 R14: ffffffff8f47e6a0 R15: 0000000000000001 [ 224.782920][ C1] usb_hcd_poll_rh_status+0x40c/0x620 [ 224.782970][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 224.783006][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 224.783049][ C1] dummy_pullup+0x19b/0x200 [ 224.783078][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 224.783109][ C1] usb_gadget_disconnect_locked+0x143/0x4d0 [ 224.783148][ C1] gadget_unbind_driver+0xc7/0x450 [ 224.783187][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 224.783226][ C1] device_release_driver_internal+0x46f/0x860 [ 224.783265][ C1] driver_detach+0x1f3/0x2d0 [ 224.783299][ C1] bus_remove_driver+0x226/0x320 [ 224.783339][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 224.783375][ C1] raw_release+0xd7/0x260 [ 224.783402][ C1] ? __pfx_raw_release+0x10/0x10 [ 224.783429][ C1] __fput+0x44f/0xa70 [ 224.783476][ C1] task_work_run+0x1d9/0x270 [ 224.783505][ C1] ? __pfx_task_work_run+0x10/0x10 [ 224.783542][ C1] exit_to_user_mode_loop+0xed/0x480 [ 224.783570][ C1] ? rcu_is_watching+0x15/0xb0 [ 224.783609][ C1] do_syscall_64+0x32d/0xf80 [ 224.783634][ C1] ? trace_irq_disable+0x3b/0x150 [ 224.783654][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.783678][ C1] ? clear_bhb_loop+0x40/0x90 [ 224.783707][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.783731][ C1] RIP: 0033:0x7efcddb9c799 [ 224.783752][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.783773][ C1] RSP: 002b:00007ffef97de8d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 224.783799][ C1] RAX: 0000000000000000 RBX: 00007ffef97de9c0 RCX: 00007efcddb9c799 [ 224.783816][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 224.783830][ C1] RBP: 0000000000036924 R08: 0000000000000001 R09: 0000000000000000 [ 224.783846][ C1] R10: 0000001b2fb20000 R11: 0000000000000246 R12: 00007ffef97dea00 [ 224.783862][ C1] R13: 00007efcdde15fac R14: 0000000000036e76 R15: 00007efcdde15fa0 [ 224.783898][ C1] [ 224.783920][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 224.783939][ C1] CPU: 1 UID: 0 PID: 10275 Comm: syz.3.1836 Not tainted syzkaller #0 PREEMPT(full) [ 224.783974][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.783989][ C1] Call Trace: [ 224.783999][ C1] [ 224.784009][ C1] vpanic+0x56c/0xa60 [ 224.784045][ C1] ? __pfx__printk+0x10/0x10 [ 224.784069][ C1] ? __pfx_vpanic+0x10/0x10 [ 224.784099][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 224.784124][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 224.784158][ C1] panic+0xc5/0xd0 [ 224.784189][ C1] ? __pfx_panic+0x10/0x10 [ 224.784239][ C1] __warn+0x315/0x4f0 [ 224.784270][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 224.784293][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 224.784316][ C1] __report_bug+0x29a/0x540 [ 224.784340][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 224.784378][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 224.784400][ C1] ? __pfx___report_bug+0x10/0x10 [ 224.784431][ C1] ? dev_printk_emit+0xee/0x140 [ 224.784475][ C1] report_bug_entry+0x19a/0x290 [ 224.784500][ C1] ? usb_submit_urb+0x7e/0x18b0 [ 224.784519][ C1] ? usb_submit_urb+0x83/0x18b0 [ 224.784540][ C1] handle_bug+0xce/0x200 [ 224.784568][ C1] exc_invalid_op+0x1a/0x50 [ 224.784596][ C1] asm_exc_invalid_op+0x1a/0x20 [ 224.784618][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 224.784641][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 57 f5 f7 fa 49 83 3e 00 74 40 e8 ac cd 8d fa 48 8d 3d 65 51 e7 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 91 cd 8d fa eb 05 e8 8a cd [ 224.784662][ C1] RSP: 0018:ffffc90000a08960 EFLAGS: 00010087 [ 224.784684][ C1] RAX: ffffffff8737d8a4 RBX: ffff8880362dd700 RCX: 0000000000040000 [ 224.784701][ C1] RDX: ffffc90002362000 RSI: ffff8880362dd700 RDI: ffffffff901f2a10 [ 224.784720][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 224.784734][ C1] R10: dffffc0000000000 R11: fffff5200014112c R12: 0000000000000820 [ 224.784751][ C1] R13: ffff888054ab6030 R14: ffff8880362dd708 R15: dffffc0000000000 [ 224.784777][ C1] ? usb_submit_urb+0x74/0x18b0 [ 224.784808][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 224.784844][ C1] ? ___ratelimit+0x58c/0x8d0 [ 224.784884][ C1] cm109_urb_irq_callback+0x6e2/0xcb0 [ 224.784923][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 224.784982][ C1] dummy_timer+0xbbd/0x45d0 [ 224.785021][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 224.785060][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 224.785118][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 224.785155][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 224.785190][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 224.785227][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 224.785259][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 224.785288][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 224.785342][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 224.785375][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 224.785416][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 224.785452][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.785494][ C1] handle_softirqs+0x22a/0x870 [ 224.785530][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 224.785572][ C1] __irq_exit_rcu+0x5f/0x150 [ 224.785604][ C1] irq_exit_rcu+0x9/0x30 [ 224.785634][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 224.785659][ C1] [ 224.785668][ C1] [ 224.785685][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 224.785711][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 224.785750][ C1] Code: f7 e8 3d b7 f0 f5 f7 c3 00 02 00 00 74 05 e8 20 0e 1c f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 54 69 e2 f5 65 8b 05 6d 11 6b 07 85 c0 74 18 5b 41 5e e9 91 48 [ 224.785771][ C1] RSP: 0018:ffffc90003f47a68 EFLAGS: 00000206 [ 224.785794][ C1] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 0000000080000001 [ 224.785811][ C1] RDX: 0000000000000006 RSI: ffffffff8defcb55 RDI: 0000000000000001 [ 224.785827][ C1] RBP: ffffc90003f47b48 R08: ffffffff9011e8b7 R09: 1ffffffff2023d16 [ 224.785846][ C1] R10: dffffc0000000000 R11: fffffbfff2023d17 R12: ffff88802a11af18 [ 224.785864][ C1] R13: ffff88802a11af00 R14: ffffffff8f47e6a0 R15: 0000000000000001 [ 224.785901][ C1] usb_hcd_poll_rh_status+0x40c/0x620 [ 224.785940][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 224.785982][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 224.786026][ C1] dummy_pullup+0x19b/0x200 [ 224.786055][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 224.786087][ C1] usb_gadget_disconnect_locked+0x143/0x4d0 [ 224.786127][ C1] gadget_unbind_driver+0xc7/0x450 [ 224.786165][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 224.786204][ C1] device_release_driver_internal+0x46f/0x860 [ 224.786246][ C1] driver_detach+0x1f3/0x2d0 [ 224.786280][ C1] bus_remove_driver+0x226/0x320 [ 224.786309][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 224.786345][ C1] raw_release+0xd7/0x260 [ 224.786372][ C1] ? __pfx_raw_release+0x10/0x10 [ 224.786399][ C1] __fput+0x44f/0xa70 [ 224.786607][ C1] task_work_run+0x1d9/0x270 [ 224.786690][ C1] ? __pfx_task_work_run+0x10/0x10 [ 224.786785][ C1] exit_to_user_mode_loop+0xed/0x480 [ 224.786860][ C1] ? rcu_is_watching+0x15/0xb0 [ 224.786970][ C1] do_syscall_64+0x32d/0xf80 [ 224.787034][ C1] ? trace_irq_disable+0x3b/0x150 [ 224.787088][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.787154][ C1] ? clear_bhb_loop+0x40/0x90 [ 224.787233][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.787291][ C1] RIP: 0033:0x7efcddb9c799 [ 224.787352][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.787404][ C1] RSP: 002b:00007ffef97de8d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 224.787469][ C1] RAX: 0000000000000000 RBX: 00007ffef97de9c0 RCX: 00007efcddb9c799 [ 224.787511][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 224.787552][ C1] RBP: 0000000000036924 R08: 0000000000000001 R09: 0000000000000000 [ 224.787593][ C1] R10: 0000001b2fb20000 R11: 0000000000000246 R12: 00007ffef97dea00 [ 224.787636][ C1] R13: 00007efcdde15fac R14: 0000000000036e76 R15: 00007efcdde15fa0 [ 224.787731][ C1] [ 224.793949][ C1] Kernel Offset: disabled