last executing test programs: 4m16.9067684s ago: executing program 2 (id=10508): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r0, 0x18, 0x0, 0x0) 4m16.726438074s ago: executing program 2 (id=10500): creat(&(0x7f00000011c0)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000000140)={[{'nointr'}]}) 4m16.567749608s ago: executing program 2 (id=10501): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000000)=0x2bc) 4m16.321909844s ago: executing program 2 (id=10504): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2008802, &(0x7f0000000840)=ANY=[@ANYBLOB='keep_last_dots,errors=continue,errors=remount-ro,allow_utime=00000000000000000141077,discard,dmask=00000000000000000000003,iocharset=cp864,utf8,errors=continue,errors=continue,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c6d61736b3d5e4d41595f415050454e442c64656e636f6e746578743d73797361646d5f752c736d61636b66736465663d212c6673636f6e746578743d73746166665f752c736d61636b6673726f6f743d2e212d8f2c2b2c736d61636b6673726f6f743d646d61736b2c6f626a5f747970653df12124215d293a27242c636f6e746578743d73746166665f752c00"], 0x1, 0x152f, &(0x7f00000037c0)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 4m15.937377143s ago: executing program 2 (id=10518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c815}, 0x4) 4m15.639085621s ago: executing program 2 (id=10513): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000400)={{0xb, 0x0, 0x8, 0x10000000}, 0x1, 0x400, 0x9, 0x0, 0x0, 0x3, 'syz1\x00', 0x0}) 4m15.382906006s ago: executing program 32 (id=10513): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000400)={{0xb, 0x0, 0x8, 0x10000000}, 0x1, 0x400, 0x9, 0x0, 0x0, 0x3, 'syz1\x00', 0x0}) 2m8.312936913s ago: executing program 0 (id=12546): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 2m8.112769058s ago: executing program 0 (id=12549): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/85, 0x55}], 0x1, 0x6, 0x0) 2m7.982012211s ago: executing program 0 (id=12551): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x17c3, 0x4) 2m7.881234154s ago: executing program 0 (id=12554): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000180)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'macroman'}}, {@barrier}, {@type={'type', 0x3d, "e481e91c"}}, {@nodecompose}, {@part={'part', 0x3d, 0xfc59}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 2m7.6350264s ago: executing program 0 (id=12559): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m7.031789254s ago: executing program 0 (id=12570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48841}, 0x20000010) 2m6.733389921s ago: executing program 33 (id=12570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48841}, 0x20000010) 3.504363865s ago: executing program 4 (id=14277): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x6) 3.346419359s ago: executing program 5 (id=14279): r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0xa) 3.29426389s ago: executing program 4 (id=14281): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)={0x420, 0x3f4, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x25, [0xd, 0x8000, 0x5, 0x800, 0x4800, 0x6, 0xfff, 0x2, 0x6, 0x7, 0x101, 0x26d, 0xffff, 0xe, 0x4, 0x0, 0x10, 0x9, 0x6, 0xabb, 0x0, 0x9, 0xc, 0x3, 0x1, 0x858, 0x0, 0x7fffffff, 0x2, 0xe7bc, 0x5, 0x0, 0x2, 0xff, 0x0, 0x10000, 0x2, 0x7fff, 0x6, 0x7, 0x7, 0x2, 0x5, 0xff, 0x1, 0x7, 0x6, 0xf, 0x2, 0x9, 0xfffffffe, 0xacda, 0x7c, 0x80000000, 0xbe35, 0xce, 0x8000, 0x0, 0x3, 0xa40, 0x8001, 0x2, 0xfebc, 0x4], [0x8001, 0x2, 0x1, 0x685, 0x9, 0x4, 0xf, 0xc82e, 0x7, 0xb, 0xf, 0x7fffffff, 0x100, 0x3ff, 0x85, 0x61, 0x5, 0x6, 0x6, 0x34, 0x6, 0xd2f, 0x7, 0x2, 0x8, 0x4b, 0x200, 0x6, 0x3, 0x80000000, 0x0, 0x1, 0x131, 0xfffffffc, 0x4, 0xc90, 0xfff, 0xe91a, 0x7, 0x1, 0x723, 0x9, 0x9, 0x22, 0x800, 0x0, 0x1, 0x6, 0xfffffffc, 0x2, 0x4, 0x200, 0x5, 0xfffffc00, 0xc2f, 0x0, 0x0, 0x0, 0x2, 0x358, 0x4, 0x0, 0xfff, 0x3], [0x1, 0xf23c, 0x828b, 0x2800000, 0x4, 0x6, 0x9, 0xa, 0x7fff, 0x1, 0x40, 0x355, 0x5, 0x5, 0x3, 0x0, 0x6, 0xe, 0x200, 0x4f87a175, 0x1, 0x8, 0xd8, 0x10, 0x3, 0x6229, 0x3, 0x97b3, 0xffff, 0x5, 0x4, 0x5, 0x80000001, 0xe, 0x7ff, 0x2, 0x9, 0x5, 0x1, 0x3, 0x3, 0x40, 0x71937111, 0x81, 0xfffffff7, 0x4, 0x10000, 0x0, 0x7ff, 0x80000000, 0x2, 0x7, 0x2, 0x5, 0x9, 0xd12f, 0x7fffffff, 0xffff, 0x79c, 0x329, 0x2, 0x5, 0x401, 0x7], [0xffffffff, 0x5, 0xb, 0x419, 0xff, 0xe0, 0x20, 0x6, 0xe99e, 0xffffffff, 0x3258, 0x80, 0x4, 0xa, 0xfffffb50, 0x3ff, 0x7, 0x4, 0xaae1, 0x4, 0xc, 0x1, 0x3, 0x1000, 0x3, 0xffffffff, 0x0, 0x90, 0x5, 0x1000, 0xf, 0x2, 0x8, 0x101, 0xb, 0xfffff372, 0xb08, 0x0, 0x8, 0x6, 0x5, 0x6f4, 0x93, 0x4, 0x0, 0x8, 0x0, 0x3, 0x5, 0x4, 0x1, 0x9, 0x9, 0x8, 0x4, 0x10, 0x3, 0x0, 0x5, 0x2, 0x10, 0xcdcb, 0xff, 0x101]}}, 0x420}, 0x1, 0x0, 0x0, 0x8800}, 0x20000090) 3.186846853s ago: executing program 4 (id=14284): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) 3.079653096s ago: executing program 5 (id=14287): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='2\x00', 0x3fffff) 2.988345158s ago: executing program 4 (id=14288): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010811798080000000000010902410001000000000904"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2.839839431s ago: executing program 5 (id=14291): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x11e, 0x1, 0xffffffffffffffff, &(0x7f0000000540)) 2.740787704s ago: executing program 5 (id=14304): syz_usb_connect(0x5, 0x2d, &(0x7f0000000f80)={{0x12, 0x1, 0x201, 0xc8, 0x33, 0x89, 0x8, 0x4c8, 0x720, 0xb651, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x6, 0x6, 0x50, 0x7f, "", [{{0x9, 0x4, 0xd4, 0x7, 0x0, 0x60, 0x3e, 0x70, 0x92}}, {{0x9, 0x4, 0xbc, 0x53, 0x0, 0x9b, 0x2a, 0x6b}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000896) 2.46194865s ago: executing program 6 (id=14298): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f0000001040)={{0x12, 0x1, 0x310, 0x72, 0x2a, 0x62, 0x10, 0x134c, 0x3, 0x624, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x4, 0xf5, 0x50, 0x6, "", [{{0x9, 0x4, 0x28, 0x81, 0x3, 0x19, 0x90, 0x9b, 0x5, [], [{{0x9, 0x5, 0xb, 0x0, 0x3ff, 0xe, 0x38, 0x7}}, {{0x9, 0x5, 0xd, 0x4, 0x1f7, 0x4, 0x10, 0x5}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x9, 0xea, 0x4}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x5, 0x0}) 2.316918174s ago: executing program 3 (id=14300): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x3ff, @empty}}]}, 0x70}, 0x1, 0x7}, 0x0) 2.253262116s ago: executing program 3 (id=14302): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000200)) 2.204158767s ago: executing program 3 (id=14303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000900000000000000010000001801000020696c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000030030000850000009b00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.891850234s ago: executing program 3 (id=14306): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, 0x27, 0xb, 0x0, 0xffffffff, {0x8}}, 0x14}}, 0x0) 1.832091716s ago: executing program 3 (id=14307): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x38, 0x9, 0x70bd2b, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x9}]}, 0x18}, 0x1, 0x0, 0x0, 0x75bf1e0e8f039151}, 0x0) 1.730436578s ago: executing program 3 (id=14308): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1c005, &(0x7f0000000180)={[{@rescan_uuid_tree}, {@datasum}, {@autodefrag}, {@nossd}, {@acl}, {@user_subvol_rm}, {@noacl}, {@clear_cache}, {@rescue={'rescue', 0x3d, 'nologreplay'}}, {@discard_async}, {@nodatacow}, {@fatal_errors_bug}, {@nodiscard}, {@enospc_debug}, {@nospace_cache}, {@notreelog}, {@space_cache}]}, 0x9, 0x559d, &(0x7f0000004040)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.609553641s ago: executing program 1 (id=14310): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) pselect6(0x40, &(0x7f0000000680)={0x8, 0x7, 0x0, 0xfffffffffffffff9, 0x916, 0xae3, 0x7, 0x8}, 0x0, 0x0, &(0x7f0000000740), 0x0) 1.542203263s ago: executing program 1 (id=14311): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', 0x810000, &(0x7f0000002300)=ANY=[], 0xfe, 0x61ee, &(0x7f0000012cc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 1.433102245s ago: executing program 4 (id=14312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 1.279314269s ago: executing program 4 (id=14313): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x34, &(0x7f0000001000)={[{0x6, 0x4e00, "da22b43c5f36"}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 1.149455612s ago: executing program 5 (id=14314): r0 = semget$private(0x0, 0x4, 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0xe6, 0xfff7]) 1.077501024s ago: executing program 5 (id=14315): r0 = syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x3218255, &(0x7f0000000040), 0x0, 0x965a, &(0x7f0000012c40)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0xc080583d, &(0x7f0000000340)=ANY=[]) 902.526628ms ago: executing program 1 (id=14316): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x60000, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x5, 0x1}, 0x8, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0}) 788.864101ms ago: executing program 6 (id=14317): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffead}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="fcee08000000000000007f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 574.352636ms ago: executing program 6 (id=14318): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000240)='./file0\x00', 0x204818, &(0x7f0000000080)={[{@utf8}, {@check_strict}, {@cruft}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@map_normal}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x551, &(0x7f00000003c0)="$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") mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 574.281396ms ago: executing program 1 (id=14319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xfe60) 389.26803ms ago: executing program 1 (id=14320): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="350400002f00050f37153e360c040180060410000000000000000000000000000000000000000000bc1af12468cb7f0816262926e6e344132f4dfe340b48e00bcd7302720770a1a00cac102dab82e15ff5351ce284f15d0c7f14172553fe66b542b9c69d730900280faaa95fdfcde9c90fe0c4825a00"/130, 0x82}, {&(0x7f0000000600)="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", 0x3b3}], 0x2}, 0x0) 272.374583ms ago: executing program 6 (id=14321): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x6c) fcntl$setlease(r0, 0x400, 0x0) 164.553766ms ago: executing program 1 (id=14322): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) 70.626138ms ago: executing program 6 (id=14323): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 6 (id=14324): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) socket$caif_seqpacket(0x25, 0x5, 0x10) kernel console output (not intermixed with test programs): 0: link becomes ready [ 1105.656921][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.664075][ T1302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.756881][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1105.821937][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1105.861345][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1105.878177][ T1302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.885352][ T1302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.927389][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1105.966245][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1105.990223][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1106.060169][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1106.070201][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1106.101367][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1106.110389][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1106.167394][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1106.194037][T32277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1106.205260][T32588] loop5: detected capacity change from 0 to 2048 [ 1106.217274][T32277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1106.281803][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1106.291376][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1106.304317][T32596] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1106.320003][T32588] syz.5.12703: attempt to access beyond end of device [ 1106.320003][T32588] loop5: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 1106.341520][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1106.523364][T32602] overlayfs: conflicting options: nfs_export=on,index=off [ 1106.672127][T32609] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12710'. [ 1106.687296][T32609] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12710'. [ 1106.831709][T32611] program syz.1.12712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1107.243331][T32628] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1107.358692][T32277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.461447][T32271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1107.488428][T32271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1107.496391][T32637] netlink: 'syz.3.12719': attribute type 29 has an invalid length. [ 1108.178757][T32663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12725'. [ 1108.242039][T32663] device gtp0 entered promiscuous mode [ 1108.360766][T31270] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1108.446550][T32672] Timeout policy `syz1' can only be used by L3 protocol number 61704 [ 1108.583107][T31270] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1108.593129][T32271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1108.602725][T31270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.617395][T31270] usb 5-1: Product: syz [ 1108.622315][T32271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1108.628355][T31270] usb 5-1: Manufacturer: syz [ 1108.646025][T31270] usb 5-1: SerialNumber: syz [ 1108.657444][T31270] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1108.661223][T32271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1108.683777][T32271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1108.704493][T32277] device veth0_vlan entered promiscuous mode [ 1108.724415][T32271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1108.743358][T32271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1108.751597][ T7389] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1108.754438][T31270] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1108.773316][T32277] device veth1_vlan entered promiscuous mode [ 1108.880093][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1108.926939][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1108.943635][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1108.957861][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1108.970521][ T7389] usb 6-1: Using ep0 maxpacket: 32 [ 1108.981766][T32277] device veth0_macvtap entered promiscuous mode [ 1108.984111][ T7389] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1109.019598][T32277] device veth1_macvtap entered promiscuous mode [ 1109.044129][ T7389] usb 6-1: config 0 has no interface number 0 [ 1109.087750][ T7389] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1109.095287][T32277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.109665][ T7389] usb 6-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1109.144707][ T7389] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1109.148060][T32277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.164914][ T7389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.200448][ T7389] usb 6-1: Product: syz [ 1109.204663][ T7389] usb 6-1: Manufacturer: syz [ 1109.205783][T32277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.231959][ T7389] usb 6-1: SerialNumber: syz [ 1109.259353][ T7389] usb 6-1: config 0 descriptor?? [ 1109.260752][T32277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.271003][ T4317] usb 5-1: USB disconnect, device number 12 [ 1109.279413][T32277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.291845][ T7389] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1109.296959][T32277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.310991][T32277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.329469][T32277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.341401][T32277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.357338][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1109.380020][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1109.397195][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1109.426509][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1109.466873][T32277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.500152][ T7389] usb 6-1: qt2_setup_urbs - submit read urb failed -90 [ 1109.504004][T32277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.515168][ T7389] quatech2: probe of 6-1:0.51 failed with error -90 [ 1109.530327][T32695] xt_hashlimit: size too large, truncated to 1048576 [ 1109.556220][T32277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.567203][T32277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.577791][T32277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.588751][T32695] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1109.597544][T32277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.618151][T32277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.639368][T32277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.666383][T32277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.689634][T32277] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.707888][T32277] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.739924][T32277] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.759552][T32277] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.778977][ T5318] usb 6-1: USB disconnect, device number 11 [ 1109.791690][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1109.822951][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1109.911281][T31270] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1109.918396][T31270] ath9k_htc: Failed to initialize the device [ 1109.939836][ T4317] usb 5-1: ath9k_htc: USB layer deinitialized [ 1110.039388][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.059174][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.116388][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1110.136241][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.148497][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.176717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1110.237539][T32707] ieee802154 phy0 wpan0: encryption failed: -90 [ 1110.427284][T32715] i2c i2c-0: Invalid block read size 255 [ 1110.554767][T32696] loop3: detected capacity change from 0 to 32768 [ 1110.585689][T32717] loop1: detected capacity change from 0 to 2048 [ 1110.703814][T32717] Alternate GPT is invalid, using primary GPT. [ 1110.716400][T32717] loop1: p1 p2 p3 [ 1110.722883][T32717] loop1: partition table partially beyond EOD, truncated [ 1110.920166][T32733] netlink: 'syz.3.12749': attribute type 1 has an invalid length. [ 1111.052994][ T4400] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 1111.177098][ T5717] udevd[5717]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1111.180020][ T5720] udevd[5720]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1111.227276][ T4267] udevd[4267]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1111.956402][ T303] block nbd6: NBD_DISCONNECT [ 1112.101151][ T309] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1112.346552][ T323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12772'. [ 1112.509100][ T324] vxcan1 speed is unknown, defaulting to 1000 [ 1113.039450][ T352] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12784'. [ 1113.353724][ T362] netlink: 10 bytes leftover after parsing attributes in process `syz.4.12790'. [ 1113.674231][ T4367] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1113.889702][ T4367] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1113.909199][ T4367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.972244][ T4367] usb 6-1: config 0 descriptor?? [ 1114.037621][ T4317] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1114.276214][ T4317] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 1114.304801][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.327888][ T4317] usb 4-1: Product: syz [ 1114.345460][ T4317] usb 4-1: Manufacturer: syz [ 1114.358433][ T4317] usb 4-1: SerialNumber: syz [ 1114.419097][ T4367] [drm:udl_init] *ERROR* Selecting channel failed [ 1114.436001][ T26] audit: type=1326 audit(1787694621.995:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=400 comm="syz.6.12804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1114.527577][ T4367] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 1114.555682][ T376] loop1: detected capacity change from 0 to 32768 [ 1114.600794][ T405] loop4: detected capacity change from 0 to 4096 [ 1114.604056][ T4367] [drm] Initialized udl on minor 2 [ 1114.620629][ T405] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1114.630065][ T26] audit: type=1326 audit(1787694622.032:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=400 comm="syz.6.12804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1114.691357][ T4367] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1114.737799][ T4367] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1114.743292][ T405] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1114.791335][ T26] audit: type=1326 audit(1787694622.032:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=400 comm="syz.6.12804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1114.818281][ T4367] usb 6-1: USB disconnect, device number 12 [ 1114.847361][T31270] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1114.857086][ T376] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1114.887921][T31270] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1114.899883][ T376] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1114.925078][T31270] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1114.934215][ T376] BTRFS info (device loop1): force clearing of disk cache [ 1114.951062][ T26] audit: type=1326 audit(1787694622.032:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=400 comm="syz.6.12804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1114.978731][ T376] BTRFS info (device loop1): force zlib compression, level 3 [ 1115.021030][ T376] BTRFS info (device loop1): disabling free space tree [ 1115.028228][ T376] BTRFS info (device loop1): max_inline at 0 [ 1115.117258][ T376] BTRFS info (device loop1): enabling free space tree [ 1115.192316][ T376] BTRFS info (device loop1): using free space tree [ 1115.387310][ T376] BTRFS info (device loop1): enabling ssd optimizations [ 1115.540314][ T436] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12811'. [ 1115.556096][ T4317] ath6kl: Failed to submit usb control message: -110 [ 1115.562935][ T4317] ath6kl: unable to send the bmi data to the device: -110 [ 1115.589683][ T4274] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1115.593880][ T436] netlink: 7 bytes leftover after parsing attributes in process `syz.5.12811'. [ 1115.609979][ T4317] ath6kl: Unable to send get target info: -110 [ 1115.629139][ T4317] ath6kl: Failed to init ath6kl core: -110 [ 1115.753319][ T4317] ath6kl_usb: probe of 4-1:1.0 failed with error -110 [ 1115.811912][ T4317] usb 4-1: USB disconnect, device number 117 [ 1115.862085][ T409] loop6: detected capacity change from 0 to 32768 [ 1115.907160][ T409] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.12807 (409) [ 1116.235885][ T409] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1116.237489][ T5720] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5720) [ 1116.246555][ T5318] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1116.299885][ T409] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1116.341126][ T409] BTRFS info (device loop6): setting nodatacow, compression disabled [ 1116.395040][ T409] BTRFS info (device loop6): setting datasum, datacow enabled [ 1116.442974][ T409] BTRFS info (device loop6): force clearing of disk cache [ 1116.468571][ T409] BTRFS info (device loop6): enabling ssd optimizations [ 1116.502742][ T456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12817'. [ 1116.515167][ T409] BTRFS info (device loop6): using spread ssd allocation scheme [ 1116.524978][ T5318] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1116.539052][ T5318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.554760][ T409] BTRFS info (device loop6): turning on sync discard [ 1116.570487][ T456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12817'. [ 1116.590598][ T409] BTRFS info (device loop6): turning on flush-on-commit [ 1116.598880][ T5318] usb 6-1: Product: syz [ 1116.614128][ T5318] usb 6-1: Manufacturer: syz [ 1116.618779][ T5318] usb 6-1: SerialNumber: syz [ 1116.623464][ T456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12817'. [ 1116.634019][ T409] BTRFS info (device loop6): not using ssd optimizations [ 1116.647657][ T409] BTRFS info (device loop6): not using spread ssd allocation scheme [ 1116.667379][ T5318] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1116.688565][ T7389] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1116.720493][ T409] BTRFS info (device loop6): using free space tree [ 1116.849173][ T4469] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1117.041539][ T4469] usb 2-1: Using ep0 maxpacket: 8 [ 1117.048622][ T4469] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1117.090414][ T4469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1117.151808][ T4469] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1117.172636][ T4469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.191185][ T4469] usb 2-1: Product: syz [ 1117.195580][ T4469] usb 2-1: Manufacturer: syz [ 1117.200204][ T4469] usb 2-1: SerialNumber: syz [ 1117.216035][ T409] BTRFS info (device loop6): rebuilding free space tree [ 1117.225534][ T4469] usb 2-1: config 0 descriptor?? [ 1117.264157][ T4469] powermate: probe of 2-1:0.0 failed with error -5 [ 1117.306511][ T4469] usb 6-1: USB disconnect, device number 13 [ 1117.479999][T18325] usb 2-1: USB disconnect, device number 114 [ 1117.519559][T32277] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1118.207213][ T7389] usb 6-1: Service connection timeout for: 256 [ 1118.213444][ T7389] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1118.225522][ T517] netlink: 'syz.1.12832': attribute type 4 has an invalid length. [ 1118.251003][ T7389] ath9k_htc: Failed to initialize the device [ 1118.271189][ T4469] usb 6-1: ath9k_htc: USB layer deinitialized [ 1118.287559][ T517] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.12832'. [ 1119.398659][ T564] ieee802154 phy0 wpan0: encryption failed: -90 [ 1119.487140][ T526] loop5: detected capacity change from 0 to 32768 [ 1119.641460][ T526] JBD2: Ignoring recovery information on journal [ 1119.808587][ T526] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1120.067253][ T4469] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1120.092774][T27655] ocfs2: Unmounting device (7,5) on (node local) [ 1120.259614][T18331] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1120.267721][ T596] loop5: detected capacity change from 0 to 512 [ 1120.274164][ T4469] usb 5-1: Using ep0 maxpacket: 16 [ 1120.287383][ T4469] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1120.351620][ T4469] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.404779][ T4469] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1120.443081][ T596] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #3: comm syz.5.12861: corrupted inode contents [ 1120.484043][ T4469] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1120.510097][ T596] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #3: comm syz.5.12861: mark_inode_dirty error [ 1120.510306][T18331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 1120.539442][ T596] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #3: comm syz.5.12861: corrupted inode contents [ 1120.592395][ T4469] usb 5-1: string descriptor 0 read error: -22 [ 1120.613005][T18331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 1120.632919][ T4469] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1120.644452][ T5318] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1120.653617][ T596] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.12861: mark_inode_dirty error [ 1120.686152][ T4469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.709335][ T596] Quota error (device loop5): write_blk: dquota write failed [ 1120.717843][T18331] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1120.728251][T18331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.737588][ T596] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1120.751151][T18331] usb 2-1: Product: syz [ 1120.755406][T18331] usb 2-1: Manufacturer: syz [ 1120.756931][ T596] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.12861: Failed to acquire dquot type 0 [ 1120.760136][T18331] usb 2-1: SerialNumber: syz [ 1120.784984][T18331] usb 2-1: config 0 descriptor?? [ 1120.812757][T18331] hub 2-1:0.0: bad descriptor, ignoring hub [ 1120.825854][ T596] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.12861: corrupted inode contents [ 1120.825862][T18331] hub: probe of 2-1:0.0 failed with error -5 [ 1120.852267][ T596] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #16: comm syz.5.12861: mark_inode_dirty error [ 1120.885389][ T5318] usb 4-1: Using ep0 maxpacket: 8 [ 1120.893152][ T5318] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1120.900247][T18331] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input84 [ 1120.900512][ T596] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.12861: corrupted inode contents [ 1120.970655][ T5318] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1120.984764][ T4469] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 1120.997019][ T5318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.048246][ T5318] usb 4-1: Product: syz [ 1121.060137][ T596] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.12861: mark_inode_dirty error [ 1121.078692][ T5720] udevd[5720]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1121.082345][ T5318] usb 4-1: Manufacturer: syz [ 1121.097181][ T596] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.12861: corrupted inode contents [ 1121.131537][ T5318] usb 4-1: SerialNumber: syz [ 1121.132259][ T596] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1121.165649][ T5318] usb 4-1: config 0 descriptor?? [ 1121.168007][ T596] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.12861: corrupted inode contents [ 1121.198880][ T596] EXT4-fs error (device loop5): ext4_truncate:4325: inode #16: comm syz.5.12861: mark_inode_dirty error [ 1121.237918][ T7389] usb 5-1: USB disconnect, device number 13 [ 1121.253084][ T5318] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1121.284938][ T596] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1121.308597][T18331] usb 2-1: USB disconnect, device number 115 [ 1121.343071][ T596] EXT4-fs (loop5): 1 truncate cleaned up [ 1121.371205][ T596] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1121.425385][ T596] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.470859][ T5318] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1121.490327][ T5318] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 1121.655388][T27655] EXT4-fs (loop5): unmounting filesystem. [ 1121.854623][ T5318] usb 4-1: USB disconnect, device number 118 [ 1121.906347][ T626] loop5: detected capacity change from 0 to 256 [ 1121.918674][ T629] loop6: detected capacity change from 0 to 64 [ 1122.293982][ T638] netlink: 'syz.1.12875': attribute type 21 has an invalid length. [ 1122.358012][ T638] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12875'. [ 1122.559468][ T643] loop4: detected capacity change from 0 to 4096 [ 1122.619903][ T649] netlink: 'syz.3.12879': attribute type 1 has an invalid length. [ 1122.652749][ T643] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1122.688100][ T649] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.12879'. [ 1122.796531][ T643] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1122.928786][ T643] ntfs3: loop4: no free space to extend mft [ 1123.244024][ T669] device bridge3 entered promiscuous mode [ 1123.794592][ T691] loop5: detected capacity change from 0 to 164 [ 1123.900237][ T691] rock: directory entry would overflow storage [ 1123.932654][ T691] rock: sig=0x66, size=4, remaining=3 [ 1123.992671][ T691] rock: directory entry would overflow storage [ 1124.043885][ T691] rock: sig=0x66, size=4, remaining=3 [ 1124.444053][ T7687] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1124.662427][ T717] loop5: detected capacity change from 0 to 128 [ 1124.669132][ T7687] usb 4-1: Using ep0 maxpacket: 32 [ 1124.676749][ T7687] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1124.706790][ T7389] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1124.718455][ T7687] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.741698][ T7687] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1124.754279][ T717] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1124.760808][ T687] loop4: detected capacity change from 0 to 32768 [ 1124.829385][ T717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1124.850329][ T7687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.910875][ T7687] usb 4-1: Product: syz [ 1124.920587][ T7389] usb 2-1: Using ep0 maxpacket: 8 [ 1124.927378][ T7389] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1124.949944][ T7389] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1124.958844][ T7687] usb 4-1: Manufacturer: syz [ 1124.980639][ T7389] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1124.991388][ T7389] usb 2-1: Product: syz [ 1124.992306][ T7687] usb 4-1: SerialNumber: syz [ 1124.995636][ T7389] usb 2-1: Manufacturer: syz [ 1124.995654][ T7389] usb 2-1: SerialNumber: syz [ 1125.130528][ T687] XFS (loop4): Mounting V5 Filesystem [ 1125.237592][ T7389] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1125.273266][ T7389] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1125.281145][ T7389] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1125.369759][ T7687] usb 4-1: Invalid number of CPorts: 0 [ 1125.375650][ T7687] es2_ap_driver: probe of 4-1:7.0 failed with error -22 [ 1125.417917][ T687] XFS (loop4): Ending clean mount [ 1125.464057][ T7389] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 1125.494257][ T7389] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1125.540808][ T7389] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1125.592582][ T7389] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1125.658737][ T4317] usb 4-1: USB disconnect, device number 119 [ 1125.668855][ T7389] usb 2-1: USB disconnect, device number 116 [ 1125.717257][ T7389] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1125.761998][ T7389] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1125.811266][ T7389] visor 2-1:1.0: device disconnected [ 1125.824037][ T4282] XFS (loop4): Unmounting Filesystem [ 1127.090753][ T7687] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1127.298583][ T7687] usb 2-1: Using ep0 maxpacket: 32 [ 1127.307090][ T7687] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1127.358298][ T7687] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1127.387047][ T7687] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1127.443111][ T7687] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1127.474848][ T7687] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1127.516199][ T7687] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1127.573916][ T7687] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1127.614945][ T7687] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1127.657688][ T7687] usb 2-1: Product: syz [ 1127.661945][ T7687] usb 2-1: Manufacturer: syz [ 1127.664960][ T811] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12939'. [ 1127.666556][ T7687] usb 2-1: SerialNumber: syz [ 1127.732388][ T4469] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1127.752023][ T7687] usb 2-1: config 0 descriptor?? [ 1127.781500][ T7687] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1127.868183][ T7687] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1127.946024][ T4469] usb 5-1: Using ep0 maxpacket: 8 [ 1127.952859][ T4469] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.991693][ T4469] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1128.042323][ T4469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.065855][ T4469] usb 5-1: Product: syz [ 1128.070078][ T4469] usb 5-1: Manufacturer: syz [ 1128.114699][ T780] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1128.141345][ T4469] usb 5-1: SerialNumber: syz [ 1128.175960][ T5318] usb 2-1: USB disconnect, device number 117 [ 1128.177451][ T4469] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1128.187315][ T5318] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1128.216539][ T4469] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1128.227799][ T829] loop3: detected capacity change from 0 to 512 [ 1128.246209][ T829] /dev/loop3: Can't open blockdev [ 1128.418361][ T4469] usb 5-1: USB disconnect, device number 14 [ 1128.459200][ T7389] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1128.715651][ T7389] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1128.723908][ T7389] usb 6-1: config 0 has no interface number 0 [ 1128.798294][ T7389] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1128.822553][ T7389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.861381][ T7389] usb 6-1: Product: syz [ 1128.886696][ T7389] usb 6-1: Manufacturer: syz [ 1128.897606][ T7389] usb 6-1: SerialNumber: syz [ 1128.914096][ T7389] usb 6-1: config 0 descriptor?? [ 1129.389267][ T7389] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1129.422460][ T7389] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1129.452874][ T7389] asix: probe of 6-1:0.251 failed with error -5 [ 1129.487550][ T7687] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1129.491757][ T7389] usb 6-1: USB disconnect, device number 14 [ 1129.706558][ T7687] usb 5-1: config index 0 descriptor too short (expected 7768, got 18) [ 1129.726802][ T7687] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 1129.750504][ T7687] usb 5-1: config 0 has no interface number 0 [ 1129.788497][ T7687] usb 5-1: too many endpoints for config 0 interface 115 altsetting 116: 101, using maximum allowed: 30 [ 1129.821821][ T7687] usb 5-1: config 0 interface 115 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 1129.857442][ T7687] usb 5-1: config 0 interface 115 has no altsetting 0 [ 1129.903159][ T7687] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 1129.973747][ T7687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.994200][ T888] loop1: detected capacity change from 0 to 64 [ 1130.024509][ T7687] usb 5-1: config 0 descriptor?? [ 1130.064128][ T7687] ftdi_sio 5-1:0.115: FTDI USB Serial Device converter detected [ 1130.072588][ T7687] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 1130.079175][ T888] syz.1.12966: attempt to access beyond end of device [ 1130.079175][ T888] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1130.099863][ T888] Buffer I/O error on dev loop1, logical block 512, async page read [ 1130.151972][ T888] syz.1.12966: attempt to access beyond end of device [ 1130.151972][ T888] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1130.212387][ T888] Buffer I/O error on dev loop1, logical block 56576, async page read [ 1130.307866][ T5318] usb 5-1: USB disconnect, device number 15 [ 1130.352538][ T5318] ftdi_sio 5-1:0.115: device disconnected [ 1130.850979][ T930] loop6: detected capacity change from 0 to 16 [ 1130.918232][ T930] erofs: (device loop6): mounted with root inode @ nid 36. [ 1131.763377][ T921] loop5: detected capacity change from 0 to 32768 [ 1131.774942][ T962] loop4: detected capacity change from 0 to 16 [ 1131.781989][ T962] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1131.834426][ T921] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.12975 (921) [ 1131.866293][ T921] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1131.907950][ T921] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 1131.965927][ T968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12996'. [ 1131.984275][ T921] BTRFS info (device loop5): force zlib compression, level 3 [ 1132.040522][ T921] BTRFS info (device loop5): turning on flush-on-commit [ 1132.048637][ T921] BTRFS info (device loop5): max_inline at 0 [ 1132.064126][ T921] BTRFS info (device loop5): using free space tree [ 1132.376915][ T921] BTRFS info (device loop5): enabling ssd optimizations [ 1132.519399][ T1008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13002'. [ 1132.628722][T27655] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1132.967980][ T5318] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1133.057238][ T26] audit: type=1326 audit(1787694639.412:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1028 comm="syz.6.13010" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1133.188485][ T26] audit: type=1326 audit(1787694639.440:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1028 comm="syz.6.13010" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1133.225348][ T5318] usb 5-1: Using ep0 maxpacket: 16 [ 1133.233619][ T5318] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1133.277933][ T5318] usb 5-1: config 0 has no interface number 0 [ 1133.323019][ T26] audit: type=1326 audit(1787694639.440:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1028 comm="syz.6.13010" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1133.328498][ T5318] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1133.452418][ T5318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.460497][ T5318] usb 5-1: Product: syz [ 1133.474450][ T26] audit: type=1326 audit(1787694639.440:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1028 comm="syz.6.13010" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1133.507144][ T5318] usb 5-1: Manufacturer: syz [ 1133.511788][ T5318] usb 5-1: SerialNumber: syz [ 1133.529087][ T1043] loop3: detected capacity change from 0 to 764 [ 1133.545658][ T5318] usb 5-1: config 0 descriptor?? [ 1133.579496][ T1043] rock: directory entry would overflow storage [ 1133.598341][ T26] audit: type=1326 audit(1787694639.440:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1028 comm="syz.6.13010" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1133.612930][ T5318] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1133.654355][ T1043] rock: sig=0x4654, size=5, remaining=4 [ 1133.732659][ T26] audit: type=1326 audit(1787694639.440:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1028 comm="syz.6.13010" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1133.857882][ T26] audit: type=1326 audit(1787694639.459:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1028 comm="syz.6.13010" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1133.980096][ T26] audit: type=1326 audit(1787694639.459:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1028 comm="syz.6.13010" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1134.004182][ C1] vkms_vblank_simulate: vblank timer overrun [ 1134.063413][ T5318] gspca_spca1528: reg_w err -71 [ 1134.093403][ T5318] spca1528: probe of 5-1:0.1 failed with error -71 [ 1134.144670][ T26] audit: type=1326 audit(1787694640.404:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1061 comm="syz.1.13021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cc59e0d9 code=0x7ffc0000 [ 1134.146504][ T5318] usb 5-1: USB disconnect, device number 16 [ 1134.223384][ T1066] netlink: 'syz.6.13020': attribute type 21 has an invalid length. [ 1134.285514][ T26] audit: type=1326 audit(1787694640.404:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1061 comm="syz.1.13021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cc59e0d9 code=0x7ffc0000 [ 1135.320994][ T1108] autofs4:pid:1108:autofs_fill_super: called with bogus options [ 1135.830998][ T1130] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1136.164003][ T1139] loop6: detected capacity change from 0 to 4096 [ 1136.266950][ T1139] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1136.470095][ T1139] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1136.505997][ T1157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13054'. [ 1137.122650][ T1178] loop1: detected capacity change from 0 to 764 [ 1137.157920][ T1181] kernel read not supported for file / œ (pid: 1181 comm: syz.6.13064) [ 1137.167578][ T1177] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1137.237083][ T1178] rock: directory entry would overflow storage [ 1137.243347][ T1178] rock: sig=0x4654, size=5, remaining=4 [ 1138.040906][ T1213] kernel read not supported for file / œ (pid: 1213 comm: syz.1.13078) [ 1138.473592][ T1225] loop4: detected capacity change from 0 to 2048 [ 1138.546126][ T1236] program syz.3.13087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1138.601932][ T1241] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1138.618090][ T1225] syz.4.13083: attempt to access beyond end of device [ 1138.618090][ T1225] loop4: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 1139.024465][ T1254] program syz.4.13093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1139.128645][ T1257] kernel read not supported for file / œ (pid: 1257 comm: syz.5.13094) [ 1139.149878][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1139.149892][ T26] audit: type=1800 audit(1787694645.109:355): pid=1257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.13094" name=20019C14 dev="mqueue" ino=122245 res=0 errno=0 [ 1139.453094][ T26] audit: type=1326 audit(1787694645.389:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.3.13100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1139.561336][ T26] audit: type=1326 audit(1787694645.389:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.3.13100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1139.705614][ T26] audit: type=1326 audit(1787694645.399:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.3.13100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1139.843026][ T26] audit: type=1326 audit(1787694645.399:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.3.13100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1139.889751][ T1286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13107'. [ 1139.961816][ T1293] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13106'. [ 1139.983050][ T1293] device gtp0 entered promiscuous mode [ 1140.010177][ T1291] netlink: 'syz.5.13109': attribute type 5 has an invalid length. [ 1140.013312][ T26] audit: type=1326 audit(1787694645.399:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1274 comm="syz.3.13100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1140.611361][ T1324] loop6: detected capacity change from 0 to 512 [ 1140.675492][ T1324] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1140.722264][ T1324] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1140.728724][ T1324] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #4: comm syz.6.13119: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1140.764928][ T1324] EXT4-fs error (device loop6): ext4_quota_enable:7052: comm syz.6.13119: Bad quota inode: 4, type: 1 [ 1140.778335][ T1324] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1140.805418][ T1324] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1140.813141][ T1324] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1140.899214][ T1333] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1140.970527][T32277] EXT4-fs (loop6): unmounting filesystem. [ 1141.064187][ T1336] program syz.3.13124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1141.108208][ T1337] xt_hashlimit: size too large, truncated to 1048576 [ 1141.115006][ T1337] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1141.511631][ T1351] program syz.1.13142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1141.584465][ T1357] ieee802154 phy0 wpan0: encryption failed: -90 [ 1141.898620][ T5318] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1142.138276][ T5318] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.164453][ T5318] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1142.195328][ T5318] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.207696][ T1372] vxcan1 speed is unknown, defaulting to 1000 [ 1142.232202][ T5318] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1142.455717][ T1380] netlink: 'syz.4.13146': attribute type 5 has an invalid length. [ 1142.594543][ T1364] loop1: detected capacity change from 0 to 32768 [ 1142.641963][ T1364] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1142.680379][ T1364] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1142.709671][ T1364] BTRFS info (device loop1): using free space tree [ 1143.010328][ T1364] BTRFS info (device loop1): enabling ssd optimizations [ 1143.294772][ T4274] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1143.355548][ T5318] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 1143.582488][ T5318] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1143.607674][ T5318] stv0680 7-1:4.0: last error: 86, command = 0x7 [ 1143.655421][ T5318] usb 7-1: USB disconnect, device number 2 [ 1144.757040][ T26] audit: type=1326 audit(1787694650.356:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1453 comm="syz.1.13170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cc59e0d9 code=0x7ffc0000 [ 1144.863219][ T26] audit: type=1326 audit(1787694650.394:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1453 comm="syz.1.13170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cc59e0d9 code=0x7ffc0000 [ 1144.905398][ T1458] loop4: detected capacity change from 0 to 2048 [ 1144.915257][ T1460] loop5: detected capacity change from 0 to 256 [ 1144.996952][ T1460] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1145.019761][ T26] audit: type=1326 audit(1787694650.394:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1453 comm="syz.1.13170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f76cc59e0d9 code=0x7ffc0000 [ 1145.050022][ T1458] Alternate GPT is invalid, using primary GPT. [ 1145.072380][ T1458] loop4: p1 p2 p3 [ 1145.076171][ T1458] loop4: partition table partially beyond EOD, truncated [ 1145.115090][ T1460] FAT-fs (loop5): Filesystem has been set read-only [ 1145.142017][ T26] audit: type=1326 audit(1787694650.394:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1453 comm="syz.1.13170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cc59e0d9 code=0x7ffc0000 [ 1145.158491][ T1460] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1145.316724][ T1460] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1145.339644][ T26] audit: type=1326 audit(1787694650.394:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1453 comm="syz.1.13170" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cc59e0d9 code=0x7ffc0000 [ 1145.420494][ T1460] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 1145.484884][ T26] audit: type=1800 audit(1787694650.955:366): pid=1460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.13182" name="file1" dev="loop5" ino=1048688 res=0 errno=0 [ 1145.600307][ T26] audit: type=1326 audit(1787694651.114:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1473 comm="syz.4.13177" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483e79e0d9 code=0x7ffc0000 [ 1145.626941][ T5720] udevd[5720]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1145.635059][ T5717] udevd[5717]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1145.642266][ T4400] udevd[4400]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1145.660587][ T4319] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1145.778018][ T26] audit: type=1326 audit(1787694651.114:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1473 comm="syz.4.13177" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483e79e0d9 code=0x7ffc0000 [ 1145.844410][ T1441] loop6: detected capacity change from 0 to 32768 [ 1145.876552][ T4319] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.897900][ T4319] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1145.913473][ T1441] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.13165 (1441) [ 1145.947642][ T26] audit: type=1326 audit(1787694651.133:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1473 comm="syz.4.13177" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f483e79e0d9 code=0x7ffc0000 [ 1145.974503][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.997770][ T1441] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1146.016307][ T4319] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1146.044847][ T1441] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1146.064980][ T26] audit: type=1326 audit(1787694651.133:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1473 comm="syz.4.13177" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483e79e0d9 code=0x7ffc0000 [ 1146.089926][ T1441] BTRFS info (device loop6): using free space tree [ 1146.346220][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.352562][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.450827][ T1441] BTRFS info (device loop6): enabling ssd optimizations [ 1146.718865][T32277] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1146.912410][ T1525] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1146.978912][ T1525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1147.079606][ T1528] netlink: 'syz.4.13190': attribute type 4 has an invalid length. [ 1147.168978][ T1528] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.13190'. [ 1147.205599][ T4319] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 1147.354757][ T1531] loop5: detected capacity change from 0 to 4096 [ 1147.419470][ T1531] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1147.428742][ T4319] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1147.447461][ T4319] stv0680 2-1:4.0: last error: 86, command = 0x7 [ 1147.511669][ T4319] usb 2-1: USB disconnect, device number 118 [ 1147.633973][ T1531] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1148.324479][ T1562] loop4: detected capacity change from 0 to 256 [ 1148.408206][ T1562] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1148.496753][ T1562] FAT-fs (loop4): Filesystem has been set read-only [ 1148.531081][ T1562] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1148.589671][ T1562] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1148.649660][ T1562] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 1148.804134][ T1576] netlink: 'syz.1.13209': attribute type 6 has an invalid length. [ 1148.848857][ T1576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13209'. [ 1149.128487][ T1585] loop1: detected capacity change from 0 to 128 [ 1149.205782][ T1587] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1149.252508][ T1587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1149.467496][ T4274] sysv_free_block: flc_count > flc_size [ 1149.541140][ T4274] sysv_free_block: flc_count > flc_size [ 1149.546740][ T4274] sysv_free_block: flc_count > flc_size [ 1149.583739][ T4274] sysv_free_block: flc_count > flc_size [ 1149.589341][ T4274] sysv_free_block: flc_count > flc_size [ 1149.613737][ T4274] sysv_free_block: flc_count > flc_size [ 1149.637197][ T4274] sysv_free_block: flc_count > flc_size [ 1149.664473][ T4274] sysv_free_block: flc_count > flc_size [ 1149.682509][ T4274] sysv_free_block: flc_count > flc_size [ 1149.701359][ T4274] sysv_free_block: flc_count > flc_size [ 1149.732567][ T4274] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1149.910285][ T1613] loop6: detected capacity change from 0 to 256 [ 1149.991789][ T1616] libceph: resolve '0' (ret=-3): failed [ 1150.058574][ T1613] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1150.086293][ T1620] netlink: 'syz.4.13225': attribute type 6 has an invalid length. [ 1150.107690][ T1613] FAT-fs (loop6): Filesystem has been set read-only [ 1150.125277][ T1620] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13225'. [ 1150.149097][ T1613] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1150.169263][ T1613] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1150.224863][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1150.224879][ T26] audit: type=1800 audit(1787694655.464:381): pid=1613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.13222" name="file1" dev="loop6" ino=1048690 res=0 errno=0 [ 1150.276115][ T1613] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 1150.307603][ T1594] loop5: detected capacity change from 0 to 32768 [ 1150.413879][ T1594] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.13227 (1594) [ 1150.514965][ T1594] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1150.570005][ T1594] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1150.641551][ T1594] BTRFS info (device loop5): force clearing of disk cache [ 1150.686898][ T1638] netlink: 'syz.1.13235': attribute type 1 has an invalid length. [ 1150.708944][ T1594] BTRFS info (device loop5): force zlib compression, level 3 [ 1150.716404][ T1594] BTRFS info (device loop5): disabling free space tree [ 1150.746332][ T1638] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.13235'. [ 1150.798520][ T1594] BTRFS info (device loop5): max_inline at 0 [ 1150.866764][ T1594] BTRFS info (device loop5): enabling free space tree [ 1150.883402][ T1594] BTRFS info (device loop5): using free space tree [ 1151.056417][ T1654] device bridge4 entered promiscuous mode [ 1151.072027][ T1641] loop6: detected capacity change from 0 to 4096 [ 1151.135149][ T1641] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1151.166959][ T1641] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1151.217269][ T26] audit: type=1326 audit(1787694656.390:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.3.13242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1151.238018][ T1641] ntfs3: loop6: no free space to extend mft [ 1151.327611][ T1594] BTRFS info (device loop5): enabling ssd optimizations [ 1151.424787][ T26] audit: type=1326 audit(1787694656.436:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.3.13242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1151.602053][ T26] audit: type=1326 audit(1787694656.436:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.3.13242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1151.657951][T27655] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1151.726133][ T1684] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1151.790296][ T26] audit: type=1326 audit(1787694656.455:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.3.13242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1151.932965][ T26] audit: type=1326 audit(1787694656.455:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.3.13242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1152.009174][ T1694] loop3: detected capacity change from 0 to 164 [ 1152.050664][ T1694] rock: directory entry would overflow storage [ 1152.090799][ T26] audit: type=1326 audit(1787694656.455:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.3.13242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1152.130533][ T1694] rock: sig=0x66, size=4, remaining=3 [ 1152.173694][ T1694] rock: directory entry would overflow storage [ 1152.200443][ T1694] rock: sig=0x66, size=4, remaining=3 [ 1152.252563][ T26] audit: type=1326 audit(1787694656.455:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.3.13242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1152.391992][ T26] audit: type=1326 audit(1787694656.455:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.3.13242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1152.478171][ T26] audit: type=1326 audit(1787694656.455:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1668 comm="syz.3.13242" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1152.673618][ T4319] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1152.793961][ T1713] loop1: detected capacity change from 0 to 4096 [ 1152.840736][ T1713] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1152.889998][ T4319] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1152.914977][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.957721][ T1713] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1152.984705][ T4319] usb 5-1: config 0 descriptor?? [ 1153.044203][ T1713] ntfs3: loop1: no free space to extend mft [ 1153.436968][ T4319] [drm:udl_init] *ERROR* Selecting channel failed [ 1153.478281][ T4319] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1153.525589][ T4319] [drm] Initialized udl on minor 2 [ 1153.580594][ T4319] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1153.630036][ T4319] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1153.680573][ T4319] usb 5-1: USB disconnect, device number 17 [ 1153.686972][T31272] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1153.712923][T31272] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1153.727517][T31272] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1154.267307][ T1758] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1154.477329][ T1761] loop3: detected capacity change from 0 to 4096 [ 1154.539949][ T1761] /dev/loop3: Can't open blockdev [ 1154.702138][ T4400] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1155.508380][ T1807] program syz.4.13292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1156.105239][ T4317] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1156.123360][ T1823] loop5: detected capacity change from 0 to 4096 [ 1156.146082][ T1823] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1156.160052][ T1791] loop3: detected capacity change from 0 to 32768 [ 1156.191377][ T1791] /dev/loop3: Can't open blockdev [ 1156.219605][ T5720] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1156.278751][ T1823] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1156.338677][ T4317] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 1156.377529][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.408131][ T1823] ntfs3: loop5: no free space to extend mft [ 1156.414211][ T4317] usb 2-1: Product: syz [ 1156.435812][ T4317] usb 2-1: Manufacturer: syz [ 1156.451324][ T4317] usb 2-1: SerialNumber: syz [ 1156.693171][ T4319] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1156.805089][ T1846] ubi2: attaching mtd0 [ 1156.823932][ T1846] ubi2: scanning is finished [ 1156.828748][ T1846] ubi2 error: ubi_read_volume_table: LEB size too small for a volume record [ 1156.902152][ T4319] usb 7-1: Using ep0 maxpacket: 32 [ 1156.909855][ T4319] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1156.934283][ T4319] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1156.967214][ T4319] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1156.989603][ T4319] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1157.005321][ T4319] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1157.040318][ T4319] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1157.053831][ T1846] ubi2 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1157.063956][ T4319] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1157.084623][ T4319] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1157.101117][ T4319] usb 7-1: Product: syz [ 1157.105334][ T4319] usb 7-1: Manufacturer: syz [ 1157.122331][ T4319] usb 7-1: SerialNumber: syz [ 1157.143967][ T4319] usb 7-1: config 0 descriptor?? [ 1157.151589][ T4319] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1157.183737][ T4319] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1157.206399][ T7684] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1157.404062][ T1844] loop5: detected capacity change from 0 to 32768 [ 1157.417433][ T1837] ldusb 7-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1157.431789][ T1844] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.13305 (1844) [ 1157.444673][ T7684] usb 4-1: Using ep0 maxpacket: 8 [ 1157.452449][ T4319] usb 7-1: USB disconnect, device number 3 [ 1157.468180][ T7684] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.487567][ T4319] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1157.515847][ T7684] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1157.527542][ T7684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.535660][ T7684] usb 4-1: Product: syz [ 1157.541086][ T7684] usb 4-1: Manufacturer: syz [ 1157.545789][ T7684] usb 4-1: SerialNumber: syz [ 1157.565119][ T1844] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1157.581663][ T7684] usb-storage 4-1:1.0: USB Mass Storage device detected [ 1157.590130][ T1844] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1157.599877][ T1844] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1157.638611][ T4317] ath6kl: Failed to submit usb control message: -110 [ 1157.655163][ T4317] ath6kl: unable to send the bmi data to the device: -110 [ 1157.656185][ T1844] BTRFS info (device loop5): setting datasum, datacow enabled [ 1157.670215][ T4317] ath6kl: Unable to send get target info: -110 [ 1157.670880][ T7684] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1157.704890][ T4317] ath6kl: Failed to init ath6kl core: -110 [ 1157.717854][ T1844] BTRFS info (device loop5): force clearing of disk cache [ 1157.800052][ T4317] ath6kl_usb: probe of 2-1:1.0 failed with error -110 [ 1157.809218][ T1844] BTRFS info (device loop5): enabling ssd optimizations [ 1157.830584][ T1844] BTRFS info (device loop5): using spread ssd allocation scheme [ 1157.858191][ T1844] BTRFS info (device loop5): turning on sync discard [ 1157.858281][ T4317] usb 2-1: USB disconnect, device number 119 [ 1157.881789][ T1844] BTRFS info (device loop5): turning on flush-on-commit [ 1157.907178][ T5319] usb 4-1: USB disconnect, device number 120 [ 1157.932087][ T1844] BTRFS info (device loop5): not using ssd optimizations [ 1157.971598][ T1844] BTRFS info (device loop5): not using spread ssd allocation scheme [ 1158.005866][ T1844] BTRFS info (device loop5): using free space tree [ 1158.196589][ T1844] BTRFS info (device loop5): rebuilding free space tree [ 1158.399643][T27655] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1158.424622][ T1879] netlink: 'syz.6.13315': attribute type 29 has an invalid length. [ 1158.458121][ T1879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13315'. [ 1158.494425][ T1879] netlink: 'syz.6.13315': attribute type 29 has an invalid length. [ 1158.537029][ T1879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13315'. [ 1158.776979][ T1886] program syz.1.13319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1158.792851][ T1889] program syz.4.13320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1159.047309][ T1897] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13324'. [ 1159.249318][ T1901] loop3: detected capacity change from 0 to 8 [ 1159.256697][ T1901] /dev/loop3: Can't open blockdev [ 1159.568845][ T7684] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1159.590168][ T4319] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1159.785782][ T7684] usb 2-1: Using ep0 maxpacket: 32 [ 1159.793022][ T7684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1159.815761][ T4319] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 1159.843457][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.869572][ T7684] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.894795][ T4319] usb 5-1: Product: syz [ 1159.899012][ T4319] usb 5-1: Manufacturer: syz [ 1159.927533][ T7684] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1159.939893][ T4319] usb 5-1: SerialNumber: syz [ 1159.961304][ T7684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.998172][ T7684] usb 2-1: Product: syz [ 1160.002505][ T7684] usb 2-1: Manufacturer: syz [ 1160.012564][ T7684] usb 2-1: SerialNumber: syz [ 1160.121579][ T1931] loop5: detected capacity change from 0 to 8 [ 1160.178425][ T1931] SQUASHFS error: Failed to read block 0x6de: -5 [ 1160.190639][ T1935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13341'. [ 1160.209909][ T1931] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 1160.226267][ T1931] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1160.254677][ T7684] usb 2-1: Invalid number of CPorts: 0 [ 1160.265206][ T7684] es2_ap_driver: probe of 2-1:7.0 failed with error -22 [ 1160.494412][ T5319] usb 2-1: USB disconnect, device number 120 [ 1160.525139][ T1933] loop6: detected capacity change from 0 to 4096 [ 1160.602977][ T1933] ntfs3: loop6: try to read out of volume at offset 0x200800 [ 1160.614231][ T1933] ntfs3: loop6: Failed to load $Volume. [ 1161.140590][ T4319] ath6kl: Failed to submit usb control message: -110 [ 1161.149933][ T4319] ath6kl: unable to send the bmi data to the device: -110 [ 1161.182359][ T4319] ath6kl: Unable to send get target info: -110 [ 1161.233276][ T4319] ath6kl: Failed to init ath6kl core: -110 [ 1161.324095][ T4319] ath6kl_usb: probe of 5-1:1.0 failed with error -110 [ 1161.358931][ T4319] usb 5-1: USB disconnect, device number 18 [ 1161.409708][ T1955] loop6: detected capacity change from 0 to 2048 [ 1161.480915][ T1955] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1161.544468][ T1957] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1161.896196][ T1946] loop3: detected capacity change from 0 to 32768 [ 1161.998685][ T4400] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1162.156008][ T4319] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1162.350288][ T4319] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 1162.377385][ T4319] usb 7-1: config 0 has no interface number 0 [ 1162.396369][ T4319] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1162.430033][ T4319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.465629][ T4319] usb 7-1: Product: syz [ 1162.476421][ T4319] usb 7-1: Manufacturer: syz [ 1162.497118][ T4319] usb 7-1: SerialNumber: syz [ 1162.518093][ T4319] usb 7-1: config 0 descriptor?? [ 1162.740701][ T4320] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1162.766588][ T1993] netlink: 'syz.1.13369': attribute type 21 has an invalid length. [ 1162.989977][ T4320] usb 6-1: Using ep0 maxpacket: 32 [ 1162.996654][ T4319] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1162.999652][ T4320] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1163.021565][ T4319] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1163.026065][ T2002] netlink: 232 bytes leftover after parsing attributes in process `syz.1.13382'. [ 1163.052167][ T4319] asix: probe of 7-1:0.251 failed with error -5 [ 1163.059035][ T4320] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1163.080962][ T4320] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1163.088602][ T4319] usb 7-1: USB disconnect, device number 4 [ 1163.126249][ T4320] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1163.168845][ T4320] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1163.203575][ T4320] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1163.241015][ T4320] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1163.279039][ T4320] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1163.309261][ T4320] usb 6-1: Product: syz [ 1163.338123][ T4320] usb 6-1: Manufacturer: syz [ 1163.354059][ T4320] usb 6-1: SerialNumber: syz [ 1163.372260][ T4320] usb 6-1: config 0 descriptor?? [ 1163.400605][ T4320] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1163.439641][ T4320] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1163.591783][ T4367] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1163.682940][ T1983] ldusb 6-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1163.702909][T31272] usb 6-1: USB disconnect, device number 15 [ 1163.716854][ T4319] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1163.731772][T31272] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1163.802359][ T4367] usb 2-1: Using ep0 maxpacket: 8 [ 1163.810020][ T4367] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.855396][ T4367] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1163.875899][ T4367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.893807][ T4367] usb 2-1: Product: syz [ 1163.915628][ T4367] usb 2-1: Manufacturer: syz [ 1163.930630][ T4319] usb 4-1: Using ep0 maxpacket: 16 [ 1163.937575][ T4319] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1163.967251][ T4367] usb 2-1: SerialNumber: syz [ 1163.982934][ T4319] usb 4-1: config 0 has no interface number 0 [ 1164.004370][ T4367] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1164.020401][ T4319] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1164.035950][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.044916][ T4367] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1164.093722][ T4319] usb 4-1: Product: syz [ 1164.128408][ T4319] usb 4-1: Manufacturer: syz [ 1164.143934][ T4319] usb 4-1: SerialNumber: syz [ 1164.207974][ T4319] usb 4-1: config 0 descriptor?? [ 1164.231936][ T4319] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1164.256678][ T4367] usb 2-1: USB disconnect, device number 121 [ 1164.602760][ T2045] loop4: detected capacity change from 0 to 256 [ 1164.663293][ T4319] gspca_spca1528: reg_w err -71 [ 1164.700363][ T4319] spca1528: probe of 4-1:0.1 failed with error -71 [ 1164.719305][ T4319] usb 4-1: USB disconnect, device number 121 [ 1165.046895][ T2058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13400'. [ 1165.404776][ T2068] loop4: detected capacity change from 0 to 64 [ 1165.981458][ T2091] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13414'. [ 1166.233960][ T2099] ubi2: attaching mtd0 [ 1166.252845][ T2099] ubi2: scanning is finished [ 1166.266118][ T2101] program syz.5.13420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1166.277004][ T2099] ubi2 error: ubi_read_volume_table: LEB size too small for a volume record [ 1166.416011][ T2099] ubi2 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1166.529537][ T2111] netlink: 232 bytes leftover after parsing attributes in process `syz.5.13423'. [ 1166.763803][ T5319] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1166.977023][ T5319] usb 4-1: Using ep0 maxpacket: 8 [ 1166.985926][ T5319] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1167.017138][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1167.047251][ T5319] usb 4-1: Product: syz [ 1167.062385][ T5319] usb 4-1: Manufacturer: syz [ 1167.079644][ T5319] usb 4-1: SerialNumber: syz [ 1167.106523][ T5319] usb 4-1: config 0 descriptor?? [ 1167.129144][ T5319] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1167.346864][ T2141] netlink: 'syz.4.13438': attribute type 1 has an invalid length. [ 1167.378953][ T2141] netlink: 220 bytes leftover after parsing attributes in process `syz.4.13438'. [ 1167.415310][ T2141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13438'. [ 1167.551178][ T5319] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1167.569588][ T5319] sq905: probe of 4-1:0.0 failed with error -71 [ 1167.602474][ T5319] usb 4-1: USB disconnect, device number 122 [ 1167.667869][ T2151] loop6: detected capacity change from 0 to 64 [ 1167.937091][ T2161] loop6: detected capacity change from 0 to 256 [ 1168.190174][ T5319] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1168.432888][ T5319] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 1168.441318][ T5319] usb 6-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.491629][ T5319] usb 6-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1168.528604][ T5319] usb 6-1: config 150 has no interface number 0 [ 1168.565742][ T5319] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1168.606069][ T5319] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1168.637819][ T5319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.666462][ T5319] usb 6-1: Product: syz [ 1168.697574][ T5319] usb 6-1: Manufacturer: syz [ 1168.714544][ T5319] usb 6-1: SerialNumber: syz [ 1168.805934][ T2192] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1168.884142][ T2195] loop6: detected capacity change from 0 to 128 [ 1168.957758][ T5319] xr_serial 6-1:150.204: skipping garbage [ 1168.963553][ T5319] xr_serial 6-1:150.204: invalid descriptor buffer length [ 1168.985219][ T2200] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13467'. [ 1169.008249][ T2195] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1169.019525][ T4319] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1169.058583][ T5319] usb 6-1: USB disconnect, device number 16 [ 1169.062244][ T2195] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1169.224303][ T4319] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1169.233665][T32277] EXT4-fs (loop6): unmounting filesystem. [ 1169.249890][ T4319] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1169.280148][ T4319] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1169.319052][ T4319] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1169.349884][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1169.369315][ T4319] usb 4-1: Product: syz [ 1169.389590][ T4319] usb 4-1: Manufacturer: syz [ 1169.405539][ T4319] usb 4-1: SerialNumber: syz [ 1169.432805][ T4319] usb 4-1: config 0 descriptor?? [ 1169.453818][ T4319] hub 4-1:0.0: bad descriptor, ignoring hub [ 1169.466524][ T4319] hub: probe of 4-1:0.0 failed with error -5 [ 1169.493662][ T4319] usb 4-1: selecting invalid altsetting 0 [ 1169.789164][ T2223] netlink: 'syz.1.13478': attribute type 8 has an invalid length. [ 1169.922378][ T4367] usb 4-1: USB disconnect, device number 123 [ 1170.192221][ T2240] netlink: 'syz.6.13487': attribute type 1 has an invalid length. [ 1170.201034][ T2240] netlink: 220 bytes leftover after parsing attributes in process `syz.6.13487'. [ 1170.227390][ T2240] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13487'. [ 1170.314180][ T4320] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1170.428633][ T2246] x_tables: unsorted entry at hook 4 [ 1170.537473][ T4320] usb 2-1: Using ep0 maxpacket: 16 [ 1170.539974][ T4320] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1170.540007][ T4320] usb 2-1: config 0 has no interface number 0 [ 1170.540037][ T4320] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1170.540062][ T4320] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xC has invalid maxpacket 1025, setting to 1024 [ 1170.544968][ T4320] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1170.545004][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.545024][ T4320] usb 2-1: Product: syz [ 1170.545037][ T4320] usb 2-1: Manufacturer: syz [ 1170.545050][ T4320] usb 2-1: SerialNumber: syz [ 1170.546751][ T4320] usb 2-1: config 0 descriptor?? [ 1170.550024][ T2233] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1170.817879][ T4320] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1171.030144][ T2264] loop5: detected capacity change from 0 to 256 [ 1171.104677][ T4320] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1171.157568][ T4320] usb 2-1: USB disconnect, device number 122 [ 1171.200568][ T4320] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1171.280932][ T4320] cypress_m8 2-1:0.35: device disconnected [ 1171.558030][ T2279] syz.5.13505 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1171.606570][ T4316] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1171.820272][ T4316] usb 5-1: Using ep0 maxpacket: 8 [ 1171.829611][ T4316] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1171.881340][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1171.922127][ T4316] usb 5-1: Product: syz [ 1171.926341][ T4316] usb 5-1: Manufacturer: syz [ 1171.965383][ T4316] usb 5-1: SerialNumber: syz [ 1172.000057][ T4316] usb 5-1: config 0 descriptor?? [ 1172.026971][ T4316] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1172.451678][ T4316] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1172.470021][ T4316] sq905: probe of 5-1:0.0 failed with error -71 [ 1172.535822][ T4316] usb 5-1: USB disconnect, device number 19 [ 1172.772510][ T2329] netlink: 'syz.3.13528': attribute type 8 has an invalid length. [ 1173.166465][ T2341] netlink: 248 bytes leftover after parsing attributes in process `syz.4.13535'. [ 1173.274185][ T4367] usb 4-1: new low-speed USB device number 124 using dummy_hcd [ 1173.522442][ T4367] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.552238][ T4367] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1173.577074][ T4367] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1173.612441][ T4367] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1173.629020][ T4367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.648447][ T2335] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1173.684649][ T4367] hub 4-1:1.0: bad descriptor, ignoring hub [ 1173.712964][ T4367] hub: probe of 4-1:1.0 failed with error -5 [ 1173.726709][ T4367] cdc_wdm 4-1:1.0: skipping garbage [ 1173.732806][ T4367] cdc_wdm 4-1:1.0: skipping garbage [ 1173.768338][ T4367] cdc_wdm 4-1:1.0: skipping garbage [ 1173.804909][ T4367] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1173.813044][ T2370] ubi0: attaching mtd0 [ 1173.827550][ T4367] cdc_wdm 4-1:1.0: Unknown control protocol [ 1173.879292][ T2370] ubi0: scanning is finished [ 1173.912776][ T2370] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1174.024712][ T2370] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1174.044090][ T4367] usb 4-1: USB disconnect, device number 124 [ 1174.224819][ T2386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13555'. [ 1174.487197][ T2399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13560'. [ 1174.529278][ T2399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13560'. [ 1174.567435][ T2399] netlink: 'syz.1.13560': attribute type 6 has an invalid length. [ 1174.936842][ T2418] vers=2.0 not permitted when mounting with smb3 [ 1174.936842][ T2418] [ 1174.971943][ T2418] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 1175.223623][ T2431] netlink: 248 bytes leftover after parsing attributes in process `syz.1.13575'. [ 1175.616615][ T2452] loop5: detected capacity change from 0 to 256 [ 1175.680505][ T2452] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc0f8f355, utbl_chksum : 0xe619d30d) [ 1175.759974][ T2452] exFAT-fs (loop5): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1175.876356][ T2452] exFAT-fs (loop5): Filesystem has been set read-only [ 1176.131012][ T2478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13592'. [ 1176.365885][ T2487] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13595'. [ 1176.926147][ T2514] netlink: 'syz.1.13603': attribute type 4 has an invalid length. [ 1177.398505][ T26] audit: type=1326 audit(1787694680.878:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2533 comm="syz.6.13615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1177.529000][ T26] audit: type=1326 audit(1787694680.878:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2533 comm="syz.6.13615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1177.636076][ T26] audit: type=1326 audit(1787694680.878:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2533 comm="syz.6.13615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1177.759804][ T26] audit: type=1326 audit(1787694680.878:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2533 comm="syz.6.13615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1177.870633][ T26] audit: type=1326 audit(1787694680.878:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2533 comm="syz.6.13615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1177.967319][ T26] audit: type=1326 audit(1787694680.878:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2533 comm="syz.6.13615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1178.116984][ T26] audit: type=1326 audit(1787694680.878:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2533 comm="syz.6.13615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1178.220134][ T26] audit: type=1326 audit(1787694680.916:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2533 comm="syz.6.13615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff48919e0d9 code=0x7ffc0000 [ 1178.484128][ T2580] vers=2.0 not permitted when mounting with smb3 [ 1178.484128][ T2580] [ 1178.511066][ T2580] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 1178.675970][ T4316] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1178.697955][ T2550] loop3: detected capacity change from 0 to 32768 [ 1178.955258][ T4316] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1178.978765][ T4316] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1179.012775][ T4316] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1179.073620][ T4316] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1179.093630][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1179.132578][ T4316] usb 2-1: Product: syz [ 1179.143954][ T4316] usb 2-1: Manufacturer: syz [ 1179.165966][ T4316] usb 2-1: SerialNumber: syz [ 1179.183139][ T4316] usb 2-1: config 0 descriptor?? [ 1179.211093][ T4316] hub 2-1:0.0: bad descriptor, ignoring hub [ 1179.242158][ T4316] hub: probe of 2-1:0.0 failed with error -5 [ 1179.272109][ T4316] usb 2-1: selecting invalid altsetting 0 [ 1179.434015][ T2611] loop5: detected capacity change from 0 to 256 [ 1179.453675][ T2613] ubi0: attaching mtd0 [ 1179.513233][ T2613] ubi0: scanning is finished [ 1179.547382][ T2613] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1179.689413][ T2613] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1179.709888][ T4316] usb 2-1: USB disconnect, device number 123 [ 1179.825313][ T2625] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13650'. [ 1181.581213][ T4316] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1181.832776][ T4316] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 1181.849190][ T4316] usb 5-1: config 0 has no interface number 0 [ 1181.873909][ T4316] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1181.917420][ T4316] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1181.955430][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.985114][ T4316] usb 5-1: config 0 descriptor?? [ 1181.999502][ T4316] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input85 [ 1182.245004][ T7684] usb 5-1: USB disconnect, device number 20 [ 1182.345788][ T2729] loop3: detected capacity change from 0 to 128 [ 1182.450129][ T4400] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1182.513457][ T2736] loop6: detected capacity change from 0 to 2048 [ 1182.574562][ T2736] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1182.665588][ T2743] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1182.680039][ T2736] NILFS error (device loop6): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1560, name_len=5 [ 1182.749628][ T2736] Remounting filesystem read-only [ 1182.942308][ T2748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1182.968443][ T2748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.026849][ T2748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.062391][ T2748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.407942][ T2760] PKCS8: Unsupported PKCS#8 version [ 1183.784062][ T7684] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1184.008736][ T7684] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1184.022194][ T7684] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1184.032501][ T7684] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1184.046782][ T7684] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1184.056966][ T7684] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1184.073571][ T7684] usb 6-1: Product: syz [ 1184.077769][ T7684] usb 6-1: Manufacturer: syz [ 1184.086324][ T7684] usb 6-1: SerialNumber: syz [ 1184.103190][ T7684] usb 6-1: config 0 descriptor?? [ 1184.120577][ T7684] hub 6-1:0.0: bad descriptor, ignoring hub [ 1184.129596][ T7684] hub: probe of 6-1:0.0 failed with error -5 [ 1184.152209][ T7684] usb 6-1: selecting invalid altsetting 0 [ 1184.422812][ T2787] loop4: detected capacity change from 0 to 32768 [ 1184.460725][ T2787] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.13716 (2787) [ 1184.480325][ T7684] usb 6-1: USB disconnect, device number 17 [ 1184.528092][ T2787] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1184.546992][ T2787] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1184.556386][ T2787] BTRFS info (device loop4): using free space tree [ 1184.735539][ T2787] BTRFS info (device loop4): enabling ssd optimizations [ 1184.859078][ T4282] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1185.008034][ T2818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13727'. [ 1186.745164][ T2885] loop4: detected capacity change from 0 to 1024 [ 1186.888984][ T2888] loop1: detected capacity change from 0 to 2048 [ 1186.947999][ T2888] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1187.056883][ T2888] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1187.163442][ T2888] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 1187.195758][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1187.268308][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.318632][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1187.369539][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.369910][ T2906] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1187.444406][ T2908] loop1: detected capacity change from 0 to 256 [ 1187.476530][ T2908] exfat: Deprecated parameter 'utf8' [ 1187.491187][ T2908] exfat: Deprecated parameter 'utf8' [ 1187.551093][ T2908] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1187.656716][ T2908] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1188.651123][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1188.700901][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1188.729910][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.748237][ T2950] netlink: 'syz.6.13778': attribute type 1 has an invalid length. [ 1188.765459][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.108985][ T2963] loop1: detected capacity change from 0 to 1024 [ 1189.653845][ T2983] loop5: detected capacity change from 0 to 256 [ 1189.720265][ T2983] exfat: Deprecated parameter 'utf8' [ 1189.725629][ T2983] exfat: Deprecated parameter 'utf8' [ 1189.777738][ T2983] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1189.887391][ T2983] exFAT-fs (loop5): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1189.973193][ T4367] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1190.125452][ T2994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.157377][ T2994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1190.209543][ T2994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.218321][ T4367] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 1190.234498][ T2994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1190.242108][ T4367] usb 4-1: config 0 has no interface number 0 [ 1190.248247][ T4367] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1190.292316][ T4367] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1190.337532][ T4367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.358148][ T3001] CIFS: Attempting to mount \\127.0.0.1\share [ 1190.374912][ T4367] usb 4-1: config 0 descriptor?? [ 1190.379190][ T3001] CIFS: VFS: No username specified [ 1190.406861][ T4367] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input86 [ 1191.109122][ T4367] usb 4-1: USB disconnect, device number 125 [ 1191.398704][ T3006] loop4: detected capacity change from 0 to 32768 [ 1191.434381][ T3006] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.13806 (3006) [ 1191.491621][ T3006] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1191.512404][ T3006] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1191.542779][ T3006] BTRFS info (device loop4): using free space tree [ 1191.883241][ T3037] loop3: detected capacity change from 0 to 2048 [ 1191.972913][ T3006] BTRFS info (device loop4): enabling ssd optimizations [ 1192.010891][ T5720] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1192.126402][ T4282] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1192.493309][ T3056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1192.517481][ T3056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1192.814783][ T3056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1192.859686][ T3056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1192.989810][ T4367] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1193.150756][ T3070] netlink: 'syz.4.13826': attribute type 1 has an invalid length. [ 1193.192419][ T4367] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 1193.211525][ T4367] usb 6-1: config 0 has no interface number 0 [ 1193.228604][ T4367] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1193.275281][ T4367] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1193.314555][ T4367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.344015][ T4367] usb 6-1: config 0 descriptor?? [ 1193.364623][ T3075] device geneve2 entered promiscuous mode [ 1193.367256][ T4367] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input87 [ 1193.663617][T18333] usb 6-1: USB disconnect, device number 18 [ 1194.088951][ T4367] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1194.292070][ T4367] usb 4-1: Using ep0 maxpacket: 16 [ 1194.298914][ T4367] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1194.336359][ T4367] usb 4-1: config 1 has no interface number 0 [ 1194.342503][ T4367] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1194.393210][ T4367] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1194.402000][ T3111] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13849'. [ 1194.419710][ T4367] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1194.440195][ T4367] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1194.476660][ T4367] usb 4-1: Product: syz [ 1194.486147][ T4367] usb 4-1: Manufacturer: syz [ 1194.510572][ T4367] usb 4-1: SerialNumber: syz [ 1194.753402][ T4367] aqc111: probe of 4-1:1.105 failed with error -22 [ 1194.971993][ T3134] loop6: detected capacity change from 0 to 1024 [ 1195.004707][ T7684] usb 4-1: USB disconnect, device number 126 [ 1196.155105][ T3178] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1197.420644][ T3213] loop4: detected capacity change from 0 to 16 [ 1197.477850][ T3211] device geneve4 entered promiscuous mode [ 1197.481527][ T3213] erofs: (device loop4): mounted with root inode @ nid 36. [ 1198.349905][ T3245] device geneve3 entered promiscuous mode [ 1198.664528][ T3256] loop4: detected capacity change from 0 to 2048 [ 1198.698399][ T3256] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=301129, location=301129 [ 1198.749563][ T3256] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1198.916337][ T3263] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1198.952110][ T3237] loop6: detected capacity change from 0 to 32768 [ 1199.002487][ T3237] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.13908 (3237) [ 1199.071916][ T3237] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1199.106372][ T3237] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1199.155045][ T3237] BTRFS info (device loop6): using free space tree [ 1199.541616][ T3237] BTRFS info (device loop6): enabling ssd optimizations [ 1199.711648][T32277] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1200.210027][ T3318] loop3: detected capacity change from 0 to 16 [ 1200.257534][ T3318] /dev/loop3: Can't open blockdev [ 1200.432761][ T3322] device geneve3 entered promiscuous mode [ 1200.963442][ T3353] loop1: detected capacity change from 0 to 16 [ 1200.992922][ T3353] erofs: (device loop1): mounted with root inode @ nid 36. [ 1201.166018][T18332] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1201.371350][T18332] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1201.391486][T18332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.430779][T18332] usb 6-1: config 0 descriptor?? [ 1201.664799][T18332] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0e [ 1201.679110][T18332] hackrf 6-1:0.0: Could not detect board [ 1201.695738][T18332] hackrf: probe of 6-1:0.0 failed with error -71 [ 1201.712499][T18332] usb 6-1: USB disconnect, device number 19 [ 1201.882313][T18333] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1201.911594][ T3398] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13970'. [ 1202.056407][ T3402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1202.083337][T32271] bond0: (slave bond_slave_0): interface is now down [ 1202.098923][T32271] bond0: (slave bond_slave_1): interface is now down [ 1202.099046][T18333] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.137619][T18333] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1202.142696][T32271] bond0: now running without any active interface! [ 1202.147914][T18333] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1202.214148][T18333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1202.233136][T18333] usb 5-1: SerialNumber: syz [ 1202.261657][T18333] usb 5-1: 0:2 : does not exist [ 1202.672640][ T3427] loop5: detected capacity change from 0 to 2048 [ 1202.695071][T18332] usb 5-1: USB disconnect, device number 21 [ 1202.713740][ T3427] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=301129, location=301129 [ 1202.773909][ T3427] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1202.783970][ T26] audit: type=1326 audit(1168.400:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3433 comm="syz.3.13987" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1202.886449][ T26] audit: type=1326 audit(1168.428:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3433 comm="syz.3.13987" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1202.902528][ T3436] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1202.947816][ T3438] loop1: detected capacity change from 0 to 256 [ 1202.963131][ T26] audit: type=1326 audit(1168.428:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3433 comm="syz.3.13987" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1202.998849][ T3438] exfat: Deprecated parameter 'namecase' [ 1203.039738][ T3438] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1203.073254][ T26] audit: type=1326 audit(1168.428:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3433 comm="syz.3.13987" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1203.140174][ T26] audit: type=1326 audit(1168.428:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3433 comm="syz.3.13987" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1203.228993][ T26] audit: type=1326 audit(1168.428:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3433 comm="syz.3.13987" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1203.265706][ T26] audit: type=1326 audit(1168.428:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3433 comm="syz.3.13987" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1203.314170][ T3450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13996'. [ 1203.338900][ T3450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1203.348124][ T26] audit: type=1326 audit(1168.428:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3433 comm="syz.3.13987" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faa51f9e0d9 code=0x7ffc0000 [ 1203.524670][ T3463] loop5: detected capacity change from 0 to 16 [ 1203.567564][ T3463] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1203.676641][ T3461] loop1: detected capacity change from 0 to 4096 [ 1203.680339][ T3467] loop3: detected capacity change from 0 to 2048 [ 1203.825545][ T3461] ntfs3: loop1: ino=5, "/" directory corrupted [ 1204.592990][ T3495] loop5: detected capacity change from 0 to 1024 [ 1204.765547][ T3480] loop1: detected capacity change from 0 to 32768 [ 1204.796695][ T3480] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.14010 (3480) [ 1204.846323][ T3480] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1204.870790][ T3499] loop4: detected capacity change from 0 to 4096 [ 1204.892743][ T3480] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1204.903426][ T3480] BTRFS info (device loop1): using free space tree [ 1204.933671][ T3499] ntfs3: loop4: ino=5, "/" directory corrupted [ 1204.961342][ T5318] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1205.203229][ T5318] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1205.212017][ T3480] BTRFS info (device loop1): enabling ssd optimizations [ 1205.231078][ T5318] usb 6-1: config 3 has an invalid interface number: 73 but max is 1 [ 1205.253463][ T5318] usb 6-1: config 3 has no interface number 1 [ 1205.259627][ T5318] usb 6-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 1205.327601][ T5318] usb 6-1: config 3 interface 0 has no altsetting 0 [ 1205.334252][ T5318] usb 6-1: config 3 interface 73 has no altsetting 0 [ 1205.369127][ T4274] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1205.381129][ T5318] usb 6-1: string descriptor 0 read error: -22 [ 1205.387401][ T5318] usb 6-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 1205.438497][ T5318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.458365][ T3537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14028'. [ 1205.466773][ T5318] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1205.496795][ T5318] dvb_usb_af9035: probe of 6-1:3.0 failed with error -22 [ 1205.537634][ T3539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.592220][ T5720] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5720) [ 1205.729135][ T5318] usb 6-1: USB disconnect, device number 20 [ 1206.103188][ T26] audit: type=1326 audit(1171.493:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3556 comm="syz.1.14036" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cc59e0d9 code=0x7ffc0000 [ 1206.158706][ T26] audit: type=1326 audit(1171.493:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3556 comm="syz.1.14036" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cc59e0d9 code=0x7ffc0000 [ 1206.383064][ T5318] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 1206.573604][ T3570] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 1206.621447][ T5318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.636114][ T5318] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1206.649782][ T5318] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1206.659079][ T5318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.696406][ T5318] usb 4-1: Product: syz [ 1206.700628][ T5318] usb 4-1: Manufacturer: syz [ 1206.712524][ T5318] usb 4-1: SerialNumber: syz [ 1206.718697][ T3572] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1206.832185][ T4367] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1206.997883][ T3581] loop6: detected capacity change from 0 to 256 [ 1207.020396][ T3581] exfat: Deprecated parameter 'namecase' [ 1207.043999][ T4367] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1207.059968][ T3581] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1207.072840][ T4367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.104902][ T4367] usb 5-1: config 0 descriptor?? [ 1207.175135][ T5318] usb 4-1: 0:2 : does not exist [ 1207.207896][ T5318] usb 4-1: USB disconnect, device number 127 [ 1207.231916][ T3583] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1207.336278][ T4367] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 1207.343455][ T4367] hackrf 5-1:0.0: Could not detect board [ 1207.370656][ T4367] hackrf: probe of 5-1:0.0 failed with error -71 [ 1207.389454][ T4367] usb 5-1: USB disconnect, device number 22 [ 1208.037546][ T3621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14066'. [ 1208.063756][ T3627] loop4: detected capacity change from 0 to 16 [ 1208.070753][ T3627] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1208.585358][ T5318] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1208.779289][ T5318] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.800585][ T5318] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1208.828744][ T5318] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1208.840762][ T5318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.849825][ T5318] usb 6-1: Product: syz [ 1208.854552][ T5318] usb 6-1: Manufacturer: syz [ 1208.859571][ T5318] usb 6-1: SerialNumber: syz [ 1209.023702][T12536] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1209.237682][T12536] usb 5-1: Using ep0 maxpacket: 16 [ 1209.245338][T12536] usb 5-1: config 0 has no interfaces? [ 1209.272339][T12536] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1209.281873][T12536] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.304053][T12536] usb 5-1: Product: syz [ 1209.314233][T12536] usb 5-1: Manufacturer: syz [ 1209.322674][T12536] usb 5-1: SerialNumber: syz [ 1209.345574][T12536] r8152-cfgselector 5-1: config 0 descriptor?? [ 1209.356487][ T5318] usb 6-1: 0:2 : does not exist [ 1209.380110][ T5318] usb 6-1: USB disconnect, device number 21 [ 1209.407765][ T4400] udevd[4400]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1209.592329][T12536] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1209.611393][T32271] usb 5-1: config 0 descriptor?? [ 1209.838280][T32271] usb 5-1: can't set config #0, error -71 [ 1209.846203][ T5318] usb 5-1: USB disconnect, device number 23 [ 1210.046507][ T3723] netlink: 320 bytes leftover after parsing attributes in process `syz.5.14113'. [ 1210.396009][ T3744] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1210.822300][ T3766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14132'. [ 1211.142895][ T3776] loop6: detected capacity change from 0 to 4096 [ 1211.150170][ T3776] __ntfs_error: 7 callbacks suppressed [ 1211.150185][ T3776] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1211.236067][ T3776] ntfs: volume version 3.1. [ 1211.805103][ T3816] loop3: detected capacity change from 0 to 1024 [ 1212.029917][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.036350][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.059710][ T4367] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1212.082751][ T3810] loop5: detected capacity change from 0 to 32768 [ 1212.102515][T31272] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1212.135030][ T3810] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 1212.135030][ T3810] [ 1212.148795][ T3810] ERROR: (device loop5): remounting filesystem as read-only [ 1212.165150][ T3810] ialloc: diAlloc returned -5! [ 1212.267203][ T4367] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.286028][ T4367] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1212.311898][T31272] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1212.321622][ T4367] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1212.331160][ T4367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1212.342444][ T4367] usb 2-1: SerialNumber: syz [ 1212.347364][T31272] usb 4-1: config 3 has an invalid interface number: 73 but max is 1 [ 1212.356760][T31272] usb 4-1: config 3 has no interface number 1 [ 1212.404107][ T4367] usb 2-1: 0:2 : does not exist [ 1212.411532][T31272] usb 4-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 1212.426497][T31272] usb 4-1: config 3 interface 0 has no altsetting 0 [ 1212.433196][T31272] usb 4-1: config 3 interface 73 has no altsetting 0 [ 1212.444277][T31272] usb 4-1: string descriptor 0 read error: -22 [ 1212.452543][T31272] usb 4-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 1212.488822][T31272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.507541][T31272] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1212.520581][T31272] dvb_usb_af9035: probe of 4-1:3.0 failed with error -22 [ 1212.741655][ T4319] usb 4-1: USB disconnect, device number 2 [ 1212.786973][ T5318] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1212.837069][ T4367] usb 2-1: USB disconnect, device number 124 [ 1213.004864][ T5318] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1213.020963][ T5318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.053708][ T5318] usb 6-1: Product: syz [ 1213.058168][ T5318] usb 6-1: Manufacturer: syz [ 1213.062784][ T5318] usb 6-1: SerialNumber: syz [ 1213.405871][ T3852] loop3: detected capacity change from 0 to 1024 [ 1213.508110][ T3852] /dev/loop3: Can't open blockdev [ 1213.537291][ T5318] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1213.573973][ T5318] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 1213.626781][ T5318] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1213.674081][ T5318] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1213.701927][ T5318] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1213.729231][ T5318] lan78xx: probe of 6-1:1.0 failed with error -71 [ 1213.773428][ T5318] usb 6-1: USB disconnect, device number 22 [ 1214.101835][ T4367] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1214.304832][ T4367] usb 2-1: Using ep0 maxpacket: 16 [ 1214.311058][ T3888] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1214.311988][ T4367] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 1214.367750][ T4367] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.379110][ T4367] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1214.397911][ T4367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.447569][ T4367] usb 2-1: config 0 descriptor?? [ 1214.460178][ T4367] pxrc 2-1:0.0: Could not find endpoint [ 1214.751140][ T4367] usb 2-1: USB disconnect, device number 125 [ 1214.926365][ T3893] loop5: detected capacity change from 0 to 32768 [ 1214.987639][ T3893] jfs_lookup: iget failed on inum 4 [ 1215.085280][T31272] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1215.260064][ T3940] Scaler: ================= START STATUS ================= [ 1215.278753][ T3940] Scaler: ================== END STATUS ================== [ 1215.292155][T31272] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1215.318474][T31272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.341747][T31272] usb 4-1: Product: syz [ 1215.361367][T31272] usb 4-1: Manufacturer: syz [ 1215.381717][T31272] usb 4-1: SerialNumber: syz [ 1215.519276][ T3948] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14223'. [ 1215.678009][ T3954] loop1: detected capacity change from 0 to 4096 [ 1215.693548][ T3954] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1215.765693][ T3954] ntfs: volume version 3.1. [ 1215.846663][T31272] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1215.861269][ T4367] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1215.872220][T31272] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 1215.887561][T31272] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1215.901245][T31272] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1215.911395][T31272] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1215.922562][T31272] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1215.963133][T31272] usb 4-1: USB disconnect, device number 3 [ 1216.059272][ T4367] usb 7-1: Using ep0 maxpacket: 16 [ 1216.071205][ T4367] usb 7-1: config 0 has no interfaces? [ 1216.100148][ T4367] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1216.119684][ T4367] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.136646][ T4367] usb 7-1: Product: syz [ 1216.143734][ T4367] usb 7-1: Manufacturer: syz [ 1216.154463][ T4367] usb 7-1: SerialNumber: syz [ 1216.165686][ T4367] r8152-cfgselector 7-1: config 0 descriptor?? [ 1216.393090][ T4367] usbip-host 7-1: 7-1 is not in match_busid table... skip! [ 1216.622345][ T4367] usb 7-1: USB disconnect, device number 5 [ 1216.996629][ T4002] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1217.044673][ T4007] loop1: detected capacity change from 0 to 164 [ 1217.157485][ T4007] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1217.520355][ T4037] netlink: 'syz.3.14261': attribute type 4 has an invalid length. [ 1217.543717][ T4037] netlink: 'syz.3.14261': attribute type 17 has an invalid length. [ 1218.400151][ T4081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14283'. [ 1218.423197][ T4085] SET target dimension over the limit! [ 1218.628459][ T4094] netlink: 60 bytes leftover after parsing attributes in process `syz.6.14289'. [ 1218.880476][ T4367] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1219.105024][ T4367] usb 5-1: Using ep0 maxpacket: 16 [ 1219.105116][ T4316] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1219.116867][ T4367] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 1219.135868][ T4367] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.146521][ T4367] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1219.157116][ T4367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.185750][ T4367] usb 5-1: config 0 descriptor?? [ 1219.215137][ T4367] pxrc 5-1:0.0: Could not find endpoint [ 1219.231670][ T4100] loop1: detected capacity change from 0 to 32768 [ 1219.278596][ T4100] jfs_lookup: iget failed on inum 4 [ 1219.318764][ T4316] usb 6-1: Using ep0 maxpacket: 8 [ 1219.332764][ T4316] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1219.344646][ T4316] usb 6-1: config 6 has an invalid interface number: 212 but max is 1 [ 1219.360258][ T4316] usb 6-1: config 6 has an invalid interface number: 188 but max is 1 [ 1219.369107][ T4316] usb 6-1: config 6 has no interface number 0 [ 1219.372142][T31272] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1219.376940][ T4316] usb 6-1: config 6 has no interface number 1 [ 1219.390158][ T4316] usb 6-1: config 6 interface 212 has no altsetting 0 [ 1219.398501][ T4316] usb 6-1: config 6 interface 188 has no altsetting 0 [ 1219.412061][ T4316] usb 6-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b6.51 [ 1219.422806][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.442272][ T4316] usb 6-1: Product: syz [ 1219.451199][ T4316] usb 6-1: Manufacturer: syz [ 1219.455963][ T4316] usb 6-1: SerialNumber: syz [ 1219.471839][T12536] usb 5-1: USB disconnect, device number 24 [ 1219.597635][T31272] usb 7-1: Using ep0 maxpacket: 16 [ 1219.605136][T31272] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1219.625520][T31272] usb 7-1: config 4 has an invalid interface number: 40 but max is 0 [ 1219.645126][T31272] usb 7-1: config 4 has no interface number 0 [ 1219.661765][T31272] usb 7-1: config 4 interface 40 altsetting 129 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1219.683245][T31272] usb 7-1: config 4 interface 40 altsetting 129 endpoint 0xD has invalid maxpacket 503, setting to 64 [ 1219.701304][T31272] usb 7-1: config 4 interface 40 has no altsetting 0 [ 1219.710946][ T4316] usb 6-1: USB disconnect, device number 23 [ 1219.720830][T31272] usb 7-1: New USB device found, idVendor=134c, idProduct=0003, bcdDevice= 6.24 [ 1219.739926][T31272] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.750916][T31272] usb 7-1: Product: syz [ 1219.755282][T31272] usb 7-1: Manufacturer: syz [ 1219.778109][T31272] usb 7-1: SerialNumber: syz [ 1219.846594][ T4136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14309'. [ 1219.857211][ T4136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14309'. [ 1220.035921][T31272] usb 7-1: USB disconnect, device number 6 [ 1220.142427][ T4134] loop3: detected capacity change from 0 to 32768 [ 1220.169689][ T4134] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.14308 (4134) [ 1220.197598][ T4134] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1220.217000][ T4134] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1220.233703][ T4134] BTRFS info (device loop3): enabling auto defrag [ 1220.249512][ T4134] BTRFS info (device loop3): force clearing of disk cache [ 1220.257015][ T4134] BTRFS info (device loop3): disabling log replay at mount time [ 1220.264864][ T4134] BTRFS info (device loop3): turning on async discard [ 1220.272435][ T4134] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1220.280617][ T4134] BTRFS info (device loop3): turning off async discard [ 1220.287610][ T4134] BTRFS info (device loop3): disabling free space tree [ 1220.294754][ T4134] BTRFS info (device loop3): disabling tree log [ 1220.301366][ T4134] BTRFS info (device loop3): enabling disk space caching [ 1220.339688][ T4134] BTRFS info (device loop3): disk space caching is enabled [ 1220.485123][ T4140] loop1: detected capacity change from 0 to 32768 [ 1220.523436][ T4140] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 1220.523436][ T4140] [ 1220.552373][ T4140] ERROR: (device loop1): remounting filesystem as read-only [ 1220.563694][ T4140] ialloc: diAlloc returned -5! [ 1220.630559][ T4134] BTRFS info (device loop3: state M): left=0, need=98304, flags=5 [ 1220.644379][ T4316] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1220.652719][ T4134] BTRFS info (device loop3: state M): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 1220.664646][ T4134] BTRFS info (device loop3: state M): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 1220.679104][ T4134] BTRFS info (device loop3: state M): global_block_rsv: size 1048576 reserved 1044480 [ 1220.689805][ T4134] BTRFS info (device loop3: state M): trans_block_rsv: size 0 reserved 0 [ 1220.698306][ T4134] BTRFS info (device loop3: state M): chunk_block_rsv: size 0 reserved 0 [ 1220.706758][ T4134] BTRFS info (device loop3: state M): delayed_block_rsv: size 0 reserved 0 [ 1220.715467][ T4134] BTRFS info (device loop3: state M): delayed_refs_rsv: size 0 reserved 0 [ 1220.830590][ T4134] BTRFS error (device loop3: state M): allocation failed flags 4, wanted 4096 tree-log 0, relocation: 0 [ 1220.857902][ T4134] BTRFS info (device loop3: state M): space_info DATA+METADATA (sub-group id 0) has -1048576 free, is full [ 1220.870639][ T4134] BTRFS info (device loop3: state M): space_info total=3276800, used=53248, pinned=0, reserved=0, may_use=1048576, readonly=3223552 zone_unusable=0 [ 1220.885718][ T4134] BTRFS info (device loop3: state M): global_block_rsv: size 1048576 reserved 1044480 [ 1220.896363][ T4134] BTRFS info (device loop3: state M): trans_block_rsv: size 0 reserved 0 [ 1220.904877][ T4134] BTRFS info (device loop3: state M): chunk_block_rsv: size 0 reserved 0 [ 1220.913364][ T4134] BTRFS info (device loop3: state M): delayed_block_rsv: size 0 reserved 0 [ 1220.921992][ T4134] BTRFS info (device loop3: state M): delayed_refs_rsv: size 0 reserved 0 [ 1220.984696][ T4134] BTRFS info (device loop3: state M): block group 5242880 has 1638400 bytes, 53248 used 0 pinned 0 reserved 0 zone_unusable [readonly] [ 1220.996877][ T4175] loop6: detected capacity change from 0 to 164 [ 1221.010418][ T4316] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1221.024965][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.038548][ T4316] usb 5-1: Product: syz [ 1221.050715][ T4316] usb 5-1: Manufacturer: syz [ 1221.055350][ T4316] usb 5-1: SerialNumber: syz [ 1221.071983][ T4134] BTRFS info (device loop3: state M): block group has cluster?: no [ 1221.098211][ T4175] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1221.115124][ T4316] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1221.120825][ T4134] BTRFS info (device loop3: state M): 0 blocks of free space at or bigger than bytes is [ 1221.178912][ T4134] BTRFS info (device loop3: state M): block group 6881280 has 1638400 bytes, 0 used 0 pinned 0 reserved 0 zone_unusable [readonly] [ 1221.187259][ T4316] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1221.233221][ T4134] BTRFS critical (device loop3: state M): entry offset 6881280, bytes 1638400, bitmap no [ 1221.280632][ T4134] BTRFS info (device loop3: state M): block group has cluster?: no [ 1221.299943][ T4134] BTRFS info (device loop3: state M): 0 blocks of free space at or bigger than bytes is [ 1221.335550][ T4134] BTRFS warning (device loop3: state M): Skipping commit of aborted transaction. [ 1221.389629][ T4159] loop5: detected capacity change from 0 to 32768 [ 1221.389663][ T4134] ------------[ cut here ]------------ [ 1221.412708][ C0] usb 5-1: ath9k_htc: over RX MAX_PKT_NUM [ 1221.462269][ T4134] WARNING: CPU: 1 PID: 4134 at fs/btrfs/transaction.c:2013 btrfs_commit_transaction+0x31f6/0x3a70 [ 1221.473215][ T4134] Modules linked in: [ 1221.477134][ T4134] CPU: 1 PID: 4134 Comm: syz.3.14308 Not tainted syzkaller #0 [ 1221.484749][ T4134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1221.494914][ T4134] RIP: 0010:btrfs_commit_transaction+0x31f6/0x3a70 [ 1221.501489][ T4134] Code: e8 5f 43 13 fe be 01 00 00 00 48 89 df e8 a2 d1 a6 00 e9 cf d3 ff ff e8 48 43 13 fe 48 c7 c7 a0 c9 cf 8a 89 de e8 8a cd de fd <0f> 0b e9 95 f8 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 53 cf ff [ 1221.521525][ T4134] RSP: 0018:ffffc90003747800 EFLAGS: 00010246 [ 1221.527625][ T4134] RAX: 305e85e9d3050300 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 1221.535779][ T4134] RDX: ffffc9000f18a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1221.543817][ T4134] RBP: ffffc90003747b08 R08: ffffc90003747487 R09: 1ffff920006e8e90 [ 1221.551811][ T4134] R10: dffffc0000000000 R11: fffff520006e8e91 R12: ffff8880565db498 [ 1221.559851][ T4134] R13: ffff88807dbb9000 R14: dffffc0000000000 R15: 0000000000000000 [ 1221.567886][ T4134] FS: 00007faa52de76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1221.576875][ T4134] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1221.583480][ T4134] CR2: 00007f925255d000 CR3: 000000002f9f0000 CR4: 00000000003506e0 [ 1221.591515][ T4134] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1221.599547][ T4134] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1221.607584][ T4134] Call Trace: [ 1221.610877][ T4134] [ 1221.613844][ T4134] ? btrfs_commit_transaction+0x197/0x3a70 [ 1221.619743][ T4134] ? btrfs_commit_transaction_async+0x460/0x460 [ 1221.626020][ T4134] ? __lock_acquire+0x7c40/0x7c40 [ 1221.631122][ T4134] ? do_raw_spin_unlock+0x11d/0x230 [ 1221.636344][ T4134] ? _raw_spin_unlock+0x24/0x40 [ 1221.641260][ T4134] ? join_transaction+0xc14/0xdd0 [ 1221.645285][T12536] usb 5-1: USB disconnect, device number 25 [ 1221.646289][ T4134] ? btrfs_record_root_in_trans+0x8c/0x180 [ 1221.658035][ T4134] ? start_transaction+0x474/0x1190 [ 1221.663324][ T4134] btrfs_set_free_space_cache_v1_active+0x6d/0x1c0 [ 1221.669961][ T4134] btrfs_remount+0x10c7/0x1530 [ 1221.674943][ T4134] ? btrfs_statfs+0x1930/0x1930 [ 1221.679828][ T4134] ? dentry_lru_isolate+0x2e0/0x2e0 [ 1221.685105][ T4134] ? bpf_lsm_sb_remount+0x5/0x10 [ 1221.690215][ T4134] reconfigure_super+0x224/0x8d0 [ 1221.695249][ T4134] path_mount+0xcce/0xfb0 [ 1221.699623][ T4134] __se_sys_mount+0x2e3/0x3d0 [ 1221.704392][ T4134] ? __x64_sys_mount+0xc0/0xc0 [ 1221.709186][ T4134] ? lockdep_hardirqs_on+0x94/0x140 [ 1221.714461][ T4134] ? __x64_sys_mount+0x1c/0xc0 [ 1221.719248][ T4134] do_syscall_64+0x4c/0xa0 [ 1221.723689][ T4134] ? clear_bhb_loop+0x60/0xb0 [ 1221.728441][ T4134] ? clear_bhb_loop+0x60/0xb0 [ 1221.733143][ T4134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1221.739123][ T4134] RIP: 0033:0x7faa51f9e0d9 [ 1221.743555][ T4134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.763242][ T4134] RSP: 002b:00007faa52de7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1221.771727][ T4134] RAX: ffffffffffffffda RBX: 00007faa52225fa0 RCX: 00007faa51f9e0d9 [ 1221.779785][ T4134] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 1221.787795][ T4134] RBP: 00007faa52035024 R08: 0000000000000000 R09: 0000000000000000 [ 1221.795844][ T4134] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000000 [ 1221.804054][ T4134] R13: 00007faa52226038 R14: 00007faa52225fa0 R15: 00007ffc77a96e28 [ 1221.812127][ T4134] [ 1221.815180][ T4134] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1221.822467][ T4134] CPU: 1 PID: 4134 Comm: syz.3.14308 Not tainted syzkaller #0 [ 1221.829939][ T4134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1221.840008][ T4134] Call Trace: [ 1221.843298][ T4134] [ 1221.844650][ T4159] XFS (loop5): Mounting V5 Filesystem [ 1221.851601][ T4134] dump_stack_lvl+0x188/0x24e [ 1221.856306][ T4134] ? memcpy+0x3c/0x60 [ 1221.860405][ T4134] ? show_regs_print_info+0x12/0x12 [ 1221.865632][ T4134] ? load_image+0x410/0x410 [ 1221.870172][ T4134] panic+0x2d3/0x710 [ 1221.874092][ T4134] ? bpf_jit_dump+0xd0/0xd0 [ 1221.878609][ T4134] __warn+0x2f8/0x4f0 [ 1221.882578][ T4134] ? btrfs_commit_transaction+0x31f6/0x3a70 [ 1221.888473][ T4134] ? btrfs_commit_transaction+0x31f6/0x3a70 [ 1221.894360][ T4134] report_bug+0x2ba/0x4f0 [ 1221.898685][ T4134] ? btrfs_commit_transaction+0x31f6/0x3a70 [ 1221.904573][ T4134] handle_bug+0x3a/0x70 [ 1221.908728][ T4134] exc_invalid_op+0x16/0x40 [ 1221.913221][ T4134] asm_exc_invalid_op+0x16/0x20 [ 1221.918064][ T4134] RIP: 0010:btrfs_commit_transaction+0x31f6/0x3a70 [ 1221.924559][ T4134] Code: e8 5f 43 13 fe be 01 00 00 00 48 89 df e8 a2 d1 a6 00 e9 cf d3 ff ff e8 48 43 13 fe 48 c7 c7 a0 c9 cf 8a 89 de e8 8a cd de fd <0f> 0b e9 95 f8 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 53 cf ff [ 1221.944169][ T4134] RSP: 0018:ffffc90003747800 EFLAGS: 00010246 [ 1221.950235][ T4134] RAX: 305e85e9d3050300 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 1221.958201][ T4134] RDX: ffffc9000f18a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1221.966166][ T4134] RBP: ffffc90003747b08 R08: ffffc90003747487 R09: 1ffff920006e8e90 [ 1221.974129][ T4134] R10: dffffc0000000000 R11: fffff520006e8e91 R12: ffff8880565db498 [ 1221.982090][ T4134] R13: ffff88807dbb9000 R14: dffffc0000000000 R15: 0000000000000000 [ 1221.990066][ T4134] ? btrfs_commit_transaction+0x197/0x3a70 [ 1221.995884][ T4134] ? btrfs_commit_transaction_async+0x460/0x460 [ 1222.002120][ T4134] ? __lock_acquire+0x7c40/0x7c40 [ 1222.007164][ T4134] ? do_raw_spin_unlock+0x11d/0x230 [ 1222.012350][ T4134] ? _raw_spin_unlock+0x24/0x40 [ 1222.017194][ T4134] ? join_transaction+0xc14/0xdd0 [ 1222.022218][ T4134] ? btrfs_record_root_in_trans+0x8c/0x180 [ 1222.028018][ T4134] ? start_transaction+0x474/0x1190 [ 1222.033219][ T4134] btrfs_set_free_space_cache_v1_active+0x6d/0x1c0 [ 1222.039716][ T4134] btrfs_remount+0x10c7/0x1530 [ 1222.044486][ T4134] ? btrfs_statfs+0x1930/0x1930 [ 1222.049327][ T4134] ? dentry_lru_isolate+0x2e0/0x2e0 [ 1222.054516][ T4134] ? bpf_lsm_sb_remount+0x5/0x10 [ 1222.059448][ T4134] reconfigure_super+0x224/0x8d0 [ 1222.064399][ T4134] path_mount+0xcce/0xfb0 [ 1222.068722][ T4134] __se_sys_mount+0x2e3/0x3d0 [ 1222.073398][ T4134] ? __x64_sys_mount+0xc0/0xc0 [ 1222.078154][ T4134] ? lockdep_hardirqs_on+0x94/0x140 [ 1222.083340][ T4134] ? __x64_sys_mount+0x1c/0xc0 [ 1222.088097][ T4134] do_syscall_64+0x4c/0xa0 [ 1222.092506][ T4134] ? clear_bhb_loop+0x60/0xb0 [ 1222.097174][ T4134] ? clear_bhb_loop+0x60/0xb0 [ 1222.101845][ T4134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1222.107729][ T4134] RIP: 0033:0x7faa51f9e0d9 [ 1222.112132][ T4134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.131725][ T4134] RSP: 002b:00007faa52de7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1222.140216][ T4134] RAX: ffffffffffffffda RBX: 00007faa52225fa0 RCX: 00007faa51f9e0d9 [ 1222.148179][ T4134] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 1222.156140][ T4134] RBP: 00007faa52035024 R08: 0000000000000000 R09: 0000000000000000 [ 1222.164100][ T4134] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000000 [ 1222.172061][ T4134] R13: 00007faa52226038 R14: 00007faa52225fa0 R15: 00007ffc77a96e28 [ 1222.180035][ T4134] [ 1222.183297][ T4134] Kernel Offset: disabled [ 1222.187733][ T4134] Rebooting in 86400 seconds..