last executing test programs: 2.183500309s ago: executing program 1 (id=8628): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x9000000}) 2.135630091s ago: executing program 0 (id=8629): r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4c23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x5}, 0x1c) 2.129462891s ago: executing program 4 (id=8630): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000140)={[{@numtail}, {@uni_xlate}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@shortname_lower}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@fat=@check_strict}, {@uni_xlate}, {@shortname_win95}, {@numtail}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp866'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 1.891147146s ago: executing program 3 (id=8632): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'virt_wifi0\x00', @random="f8ff00400400"}) 1.889471646s ago: executing program 0 (id=8633): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) 1.775141039s ago: executing program 4 (id=8634): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) 1.579956063s ago: executing program 3 (id=8636): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2e0, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='.\x02\x00', 0x0) 1.548411494s ago: executing program 0 (id=8637): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x103480, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000280)={0x3, 0x80, 0x1, 0x6, 0x1a, "d72685cb600e00d709c124309eecc3aae3ca6d"}) 1.469851906s ago: executing program 4 (id=8639): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0xffff0883) 1.29916075s ago: executing program 1 (id=8640): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3840008, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000080)={[{@userxattr}, {@redirect_dir_follow}]}) 1.217718082s ago: executing program 2 (id=8641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x401}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 1.186736983s ago: executing program 4 (id=8642): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000700)={0x0, 0x0, 0x13, 0x1, 0x100, &(0x7f0000000300)="550d6a498c3801a1a7cfb90d2fce745f8b059920d00be587f676e66f4d322522608f7f52797b9c3ab502e229937bbad4e908017d316fc62381a9eaeed0a9a0ee40f3fe635d6d74e36ebe84da8a0d837897e9b01d1216a2c218873606d7626bb9df01ce4c7cb0c6ed61402b3d755c6304a2a0e555c77562a34e4d0105e3ce3a97cee600a5d60596d7df70ae29b5de9a899351ef35eb8153c5f3e4b49ca7b9a0c1b7f3785f9c9853dde8be58f6d777d6c51f20d4fa1f738559cb9434e8b74f6d09dd071a4f85d4095e6c50b31ac924dd4de0f07dffc1c4e81090dbb46887b4c9f9297ea81479b67c7226f39102917b9edbf57b4ec012501998392f9053f534e077a7f4d94977e9c2dd541654dcc11eb96633a04952a17d6d164fddd79817a8be1f2db2de4de080fb6fd78f197ae58c087de740a2993b30256ca15037a5a4cf4b0b6a7746de5ac293f7633682aff269826222b2ed8a59dda60a988e7acda2525e5c86c339cd0f32cdb0af6cdc4452a5bffe34bdd48ad9ee0f5c9b4d70dfd85c07757fbc45c1190a6d66182bcf9e55d8feff3ae1a2b7383a08b7f2f36bd65b2ae3814875256d1438ea788c4212bc4cb6bc0d9aae8de94366da840d18c1752bd66107c28202462c537f84048edb027320d9f059df076c0f9e1c9816b941f967c3a03ee3229a4e4c5fd315b5e9d363a09ac05a39a0c5cf19d4fa2fa7a48258cd26530651e6ef8fff42b3d2e136ca344a2c90e86586bec80f2e8652fc25565461d251e9ff602f004c3ce23417cf022e0134731664535de6423ebdd91f96c4b27ad1b2189c58883c4b85084095e6093ea36e533831d5340bb90f4788cfa1301b08d6b5d8708dfb7ac35b7e4dda519ca99c17b2ea6120e40ad8f4bac32695dc297778c71f8eb4104d067629c55f7e76035b9331f07d80397730e02def100319a047f5c73ff33845ff25ac1e767676cdf5e4dea37b6bf9923884b7fa02ffc249e91eb8709c0e69fa09990a533bc5385537d28edb03a7a8d7c9bb8ff7cdd20693bfd0aeb8a7d75a85de72a676fc09c4e2f6d8014c3390d25885d0a024c7fa69867b1d415c774db10062676db2e3edff9a5ad0a4eb722726e10e02849b7f67161f8184b7356def80d6439c188cf2a3af401f783e1f31d97d5ff0c4344d720fcc378ae3ca2d9d950c67d79dbeb0e3cdb099552d19ada793eb199a8c641d426f253afe7283e6fb2c0a1fabf57bec9b9e247df23ac23ce979badf9df73171ce2bb1eab3515b36e09c406dc48bd46491534010c2b57ff6ae60314d4c7d2ce3ca1696241bd3a69e9c68c45e943ac4d8912592b20c0aca58eaf1e0c39eddccb7b605f0447048433b293fa5c6a26b5167a96fdb069c8fddb7a55ae2f4d4f8a966ee8835182e94d9045abfed69f1d429f610f9a2a4e898ceadf2887912bd197a5e68ef749b3d21bc8395"}) 1.131009074s ago: executing program 0 (id=8643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x3, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xa080}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x48850) 1.081576755s ago: executing program 3 (id=8644): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x4f0, 0x220, 0x110, 0x408, 0x408, 0x408, 0x408, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @multicast2, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @broadcast, @rand_addr=0x64010102, 0xf}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:nvram_device_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) 1.038971316s ago: executing program 1 (id=8645): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x8) 1.006656367s ago: executing program 2 (id=8646): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000100)="a7e0a96c5a5315c81f0d5113cf8a289e4adb6f4379041849cf14bf6ad2769b1cf90d056c5a126760c8b26553a3412cd7fbfa26dbfb0000000000000002688070d97f50f7d9b54d78fd1e06579847a85a5709e0f2211a57f6682a0000000000007b510db0c6f5070000007f462f75a52b6d11eb3ef68724a9a6abe2a2372a360060ac04000000000000002b19b1cb2336639c7f7e0000faeb18243a51eb1a3a62393919180d74d155162685b7d874391e9bdc7f12ec157fdb0bf6abc36e5607499c2107000000000000009c1e0c2f228a0a30e649810eaefcc14010c32302750616f99b31335d", 0xe6) 894.767449ms ago: executing program 0 (id=8647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)="2511a11e509daa", &(0x7f00000001c0)="e9ad5536b9bb909b627eacf3377c3057e86d09463e0a83fa3caf22cbcdf757d2b61830b23c12ab20e5a4a1d7b25ae65ca2ef8916ae3eee7bcb7c4da538d78920a4a83e6df3d4bfa36325dbc08daac2d7b0ec7e6dc45ed547ca1d51893e089d174ddd7215ecd1c1ce8c302a06e3d88492141d01ec4b345d4258eb7d3832cbd2dedea0979d9fd517630fc0e891cd6727146288135eaf06b5d0e84b5580611ca84a39199d6dd771fa9c301dc8e3d9421290cd834d4c71b060f458208a0474f9f7e4dc043668057884", 0x1003, r0}, 0x38) 860.85433ms ago: executing program 3 (id=8648): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)=@userptr={0x0, 0x3, 0x4, 0x800000, 0x0, {0x77359400}, {0x2, 0xc, 0xfc, 0x0, 0x0, 0x4, "d39bce7d"}, 0x6b3a4633, 0x2, {0x0}}) 810.212151ms ago: executing program 2 (id=8649): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x141943) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x1, {0x7, 0xd0b3, 0x6, 0xc1}}) 789.994491ms ago: executing program 1 (id=8650): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x1, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x64, 0x0, 0xb6, 0x29, 0x0, @empty, @empty}}}}) 660.470835ms ago: executing program 3 (id=8651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40a21, 0x23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x201}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 639.962435ms ago: executing program 4 (id=8652): syz_mount_image$cramfs(&(0x7f0000000200), &(0x7f0000000180)='./file0\x00', 0x2010880, &(0x7f0000000040)=ANY=[], 0xff, 0x14c, &(0x7f0000000580)="$eJzs0L9LamEcx/H3c8/RK/fqvd6LgTVE0NDBMH9hW4NGkkMJhUuTkEcSNEUhGqu5oT/AJVzFIRobxCZLIeyvaBAa3CKKc46ltvQPPK/t+Tyf7+PXs7HW03CDgmW9VCxX9GpVzy7spLYSu1fXN3+M/CfgMBvFcsUoZ83DaysGB0BLhcGpFd+67OTyBX1lv1QwzoMYaED8N+TyNp6wur+MzIPZDY0ybRHaM1YWns7+ky/okVE2p0L8r9kzVuPtEpaM9/6N3xsCx7XlZuNuu9tJCqZ95H7fvH4eTszWnV6FtC4ECGPuMdDxPwSajX6v6xiNhFcjwVAwGO2n7rvJ6MkF6qbzCPbE5O/4fXY7kIYzATUBDfN+8CJcQFv53OD50M14KxugTtyYnyfjtdUzHvcPFI2vf4ChOSNJkiRJkiRJkiRJ33sPAAD//7J+Wes=") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 573.311656ms ago: executing program 1 (id=8653): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x0, "1f57f7b67e281a015e6e237e0a5b8339a1b8651fc289aa3f0c9e006583974c5f", 0x1}) 572.660336ms ago: executing program 2 (id=8654): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0x10d}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x804) 315.430003ms ago: executing program 1 (id=8655): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@dax_never}, {@noblock_validity}]}, 0x1, 0x792, &(0x7f0000020c00)="$eJzs3ctrXGUbAPDnTJKmTft9iSBouzEgaKA0sTW2CgoVFyJYKOjadkimoWaSCZlJaUJAiwhuBBUXgm66cuGl7tx6ATfqf+FCLFXTYsWFjJzJTDNpZtLJbSaa3w9O8r7nMs/7zLm9M+dwJoA9azD9k4k4HBHvJBH91fFJRPRUSt0Rp5fnu720OJYOSZTLL/2WVOa5tbQ4FnXLpA5WKw9GxDdvRhzNrI1bnF+YzObzudlqfaQ0NTNSnF84dnEqO5GbyE2fPD46euLUE6dObl+uf/y4cOj6u88/+vnpv9544Nrb3yZxOg5Vp9XnsWnPrK4OxmD1PelJ38JVnttysN0l6XQD2JR01+xa3svjcPRHV6UEAPyXvRYRZQBgj0mc/wFgj6l9D3BraXGsNnT2G4n2uvFsROxfzr92fXN5Snf1mt3+ynXQvlvJqisjSUQMbEP8wYj46MtXPk2H2K7rkAAteP1KRJwfGFx7/E/W3LOwUY+tM21f9f/gXePT+K5AQ3t8lfZ/nmzU/8vc6f9Eg/5Pb4N9dzMa7f+rRhzYhiDruPFxxNN197bdrsu/ohwDXdXa/yp9vp7kwsV8Lj22/T8ihqKnN60fXyfG0M2/bzabVt//+/29Vz9J46f/V+bI/NLdu3qZ8Wwpu7WsV9y4EnGku1H+yZ31nzTp/55tMcYLT731YbNpaf5pvrVhbf5RvTtpZ5SvRjzScP2v3NGWrHt/4khlcxipbRQNfPHTB33N4tev/3RI49c+C7RDuv771s9/IKm/X7O48Rg/XO3/utm0e+ffePvfl7xcKdf6EZezpdLs8Yh9yYtrx59YWfZy9qFqaXn+NP+hhxvv/+tt/+lnwvMt5t99/dfPNp//zkrzH9/Q+t944drtya5m8Vtb/6OV0lB1TCvHv1YbuJX3DgAAAAAAAAAAAAAAAAAAAAAAAABalYmIQ5Fkhu+UM5nh4eXf8L4/+jL5QrF09EJhbno8Kr+VPRA9mdqjLvvTem9EVJ9/OlD3fNQTdfX0dR+PiPsi4v3eA0ntOYrjHc4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGoONvn9/9TPvZ1uHQCwY/Z3ugEAQNs5/wPA3uP8DwB7T2vn/64dbwcA0D4+/wPA3uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwA47e+ZMOpT/XFocS+vjl+bnJguXjo3nipPDU3Njw2OF2ZnhiUJhIp8bHitM3ev18oXCzGhMz10eKeWKpZHi/MK5qcLcdOncxansRO5crqctWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxhTnFyaz+XxuVmEThfLuaEbnC13VzWm3tKethWRri898/92RXZDF3YUOH5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/iX+CQAA///iziCi") mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x404, 0x0) 265.321404ms ago: executing program 2 (id=8656): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000002900000004000000000000000000000004018f000000000810000000000000002900000004"], 0x38}}], 0x1, 0x40000000) 248.006844ms ago: executing program 0 (id=8657): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a, 0x7}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 247.425204ms ago: executing program 3 (id=8658): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000240012800b0001006d6163736563000014000280050009000100000005000d"], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 247.221264ms ago: executing program 4 (id=8659): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 0s ago: executing program 2 (id=8660): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d8131fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) kernel console output (not intermixed with test programs): parse mount options [ 963.400309][ T4319] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 963.404358][T20666] loop3: detected capacity change from 0 to 32768 [ 963.432753][ T4317] usb 5-1: USB disconnect, device number 6 [ 963.470139][T20666] (syz.3.7341,20666,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 963.541392][T20666] (syz.3.7341,20666,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 963.596934][T20666] (syz.3.7341,20666,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xecaf217e, computed 0x1623009f. Applying ECC. [ 963.613719][ T4319] usb 1-1: Using ep0 maxpacket: 8 [ 963.621584][ T4319] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 963.638464][T20666] (syz.3.7341,20666,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xecaf217e, computed 0x36c6b6cf [ 963.654199][ T4319] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 963.668295][ T4319] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 963.678919][ T4319] usb 1-1: Product: syz [ 963.683149][ T4319] usb 1-1: Manufacturer: syz [ 963.687810][ T4319] usb 1-1: SerialNumber: syz [ 963.710972][T20666] (syz.3.7341,20666,1):ocfs2_validate_inode_block:1415 ERROR: Checksum failed for dinode 30 [ 963.739995][T20666] (syz.3.7341,20666,1):ocfs2_read_locked_inode:554 ERROR: status = -5 [ 963.758889][T20666] (syz.3.7341,20666,1):_ocfs2_get_system_file_inode:141 ERROR: status = -5 [ 963.783079][T20666] (syz.3.7341,20666,1):ocfs2_init_local_system_inodes:492 ERROR: status=-22, sysfile=11, slot=0 [ 963.802427][T20666] (syz.3.7341,20666,1):ocfs2_init_local_system_inodes:501 ERROR: status = -22 [ 963.812330][T20666] (syz.3.7341,20666,1):ocfs2_mount_volume:1815 ERROR: status = -22 [ 963.827644][T20666] (syz.3.7341,20666,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 963.859712][ T4317] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 963.916140][ T4319] usb 1-1: palm_os_3_probe - error -71 getting connection information [ 963.928024][ T4319] visor: probe of 1-1:1.0 failed with error -71 [ 963.952344][ T4319] usb 1-1: USB disconnect, device number 120 [ 964.041308][ T14] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 964.052069][ T4317] usb 2-1: Using ep0 maxpacket: 16 [ 964.070056][ T4317] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 964.087079][ T4317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.100985][ T4317] usb 2-1: config 0 has no interface number 0 [ 964.110770][ T4317] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 964.124479][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.140689][T20698] loop4: detected capacity change from 0 to 256 [ 964.152236][ T4317] usb 2-1: config 0 descriptor?? [ 964.278699][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.297964][ T14] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 964.314297][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.363827][ T14] usb 3-1: config 0 descriptor?? [ 964.400083][ T14] usb 3-1: bad CDC descriptors [ 964.400518][ T6328] usb 2-1: USB disconnect, device number 120 [ 964.413700][ T14] usb 3-1: bad CDC descriptors [ 964.605649][ T5771] usb 3-1: USB disconnect, device number 120 [ 964.614002][T20705] loop3: detected capacity change from 0 to 4096 [ 964.685273][T20705] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 964.711123][T20711] XFS (nullb0): Invalid superblock magic number [ 965.288648][T20732] loop2: detected capacity change from 0 to 1024 [ 965.307232][T20732] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 965.345840][T20732] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 965.367178][T20732] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #32: comm syz.2.7371: iget: special inode unallocated [ 965.402282][T20732] EXT4-fs (loop2): no journal found [ 965.408069][T20732] EXT4-fs (loop2): can't get journal size [ 965.431141][ T6328] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 965.441670][ T5771] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 965.465332][T20732] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 965.578729][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 965.634121][ T5771] usb 2-1: Using ep0 maxpacket: 16 [ 965.641724][ T6328] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 965.660069][ T5771] usb 2-1: config 0 has an invalid interface number: 105 but max is 2 [ 965.672229][ T6328] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 965.691608][ T5771] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.703166][ T5771] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 965.726167][ T6328] usb 1-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 965.740903][ T5771] usb 2-1: config 0 has no interface number 0 [ 965.748282][ T6328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.761850][ T6328] usb 1-1: Product: syz [ 965.767952][ T6328] usb 1-1: Manufacturer: syz [ 965.778924][ T6328] usb 1-1: SerialNumber: syz [ 965.785148][ T5771] usb 2-1: New USB device found, idVendor=006d, idProduct=08d3, bcdDevice= b.17 [ 965.800073][ T5771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.809014][T20724] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 965.816379][ T5771] usb 2-1: Product: syz [ 965.821025][ T5771] usb 2-1: Manufacturer: syz [ 965.826717][ T5771] usb 2-1: SerialNumber: syz [ 965.827372][ T14] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 965.839758][ T5771] usb 2-1: config 0 descriptor?? [ 966.053597][ T6328] usb 1-1: too many endpoints [ 966.064733][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 966.085976][ T14] usb 4-1: not running at top speed; connect to a high speed hub [ 966.105943][T20752] loop4: detected capacity change from 0 to 64 [ 966.113424][ T14] usb 4-1: config 15 has an invalid interface number: 131 but max is 0 [ 966.131245][ T14] usb 4-1: config 15 has no interface number 0 [ 966.141845][T20752] hfs: invalid extent max_key_len 37 [ 966.153446][T20752] hfs: unable to open extent tree [ 966.162518][ T14] usb 4-1: config 15 interface 131 has no altsetting 0 [ 966.197960][T20752] hfs: can't find a HFS filesystem on dev loop4 [ 966.198511][ T6328] usb 1-1: USB disconnect, device number 121 [ 966.213454][ T14] usb 4-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=ea.30 [ 966.230266][T20754] loop2: detected capacity change from 0 to 8 [ 966.237149][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.254071][ T14] usb 4-1: Product: syz [ 966.263166][ T14] usb 4-1: Manufacturer: syz [ 966.272652][ T9136] usb 2-1: USB disconnect, device number 121 [ 966.283004][ T14] usb 4-1: SerialNumber: syz [ 966.315945][T20754] SQUASHFS error: lzo decompression failed, data probably corrupt [ 966.332637][T20754] SQUASHFS error: Failed to read block 0x91: -5 [ 966.367170][T20754] SQUASHFS error: Unable to read metadata cache entry [8f] [ 966.404067][T20754] SQUASHFS error: Unable to read inode 0x11f [ 966.570865][ T14] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 966.580033][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 966.603416][ T14] gspca_mr97310a: reg write [21] error -22 [ 966.610030][ T14] mr97310a: probe of 4-1:15.131 failed with error -22 [ 966.620886][ T14] usb 4-1: USB disconnect, device number 112 [ 966.860496][T20764] futex_wake_op: syz.0.7386 tries to shift op by 32; fix this program [ 967.092561][T20774] loop4: detected capacity change from 0 to 1764 [ 967.421994][T20786] loop4: detected capacity change from 0 to 1024 [ 967.459577][T20786] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 967.481372][T20786] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 967.511410][T20786] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: inode #32: comm syz.4.7395: iget: special inode unallocated [ 967.556422][T20786] EXT4-fs (loop4): no journal found [ 967.566289][T20786] EXT4-fs (loop4): can't get journal size [ 967.658370][T20786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 967.688274][ T22] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 967.872041][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 967.902437][ T22] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 967.938046][ T22] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 967.991620][ T22] usb 3-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 968.031274][T20797] loop1: detected capacity change from 0 to 4096 [ 968.039870][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.060097][ T22] usb 3-1: Product: syz [ 968.068452][T20797] ntfs3: loop1: NTFS: invalid index size -127. [ 968.070135][ T22] usb 3-1: Manufacturer: syz [ 968.101212][ T22] usb 3-1: SerialNumber: syz [ 968.116001][T20803] loop4: detected capacity change from 0 to 512 [ 968.125407][T20784] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 968.409672][ T22] usb 3-1: too many endpoints [ 968.521662][ T22] usb 3-1: USB disconnect, device number 121 [ 968.895909][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 969.070409][T20827] UBIFS error (pid: 20827): cannot open "/dev/rnullb0", error -22 [ 969.198105][T20829] loop4: detected capacity change from 0 to 8 [ 969.227370][ T4317] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 969.236575][ T6328] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 969.259735][T20829] SQUASHFS error: lzo decompression failed, data probably corrupt [ 969.267901][T20829] SQUASHFS error: Failed to read block 0x91: -5 [ 969.274963][T20829] SQUASHFS error: Unable to read metadata cache entry [8f] [ 969.296326][T20829] SQUASHFS error: Unable to read inode 0x11f [ 969.363787][T20833] syz.0.7420 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 969.450356][ T4317] usb 2-1: Using ep0 maxpacket: 16 [ 969.458191][ T4317] usb 2-1: unable to get BOS descriptor or descriptor too short [ 969.482734][ T6328] usb 4-1: Using ep0 maxpacket: 16 [ 969.491696][ T4317] usb 2-1: config 127 has an invalid interface number: 16 but max is 0 [ 969.494076][ T6328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 28, changing to 7 [ 969.515787][ T4317] usb 2-1: config 127 has no interface number 0 [ 969.522190][ T4317] usb 2-1: config 127 interface 16 has no altsetting 0 [ 969.536080][ T4319] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 969.545341][ T6328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1483, setting to 1024 [ 969.568683][ T4317] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=70.8a [ 969.596949][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.606245][ T6328] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 969.626481][ T6328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.642319][ T4317] usb 2-1: Product: syz [ 969.644691][ T6328] usb 4-1: Product: syz [ 969.652436][ T6328] usb 4-1: Manufacturer: syz [ 969.658306][ T4317] usb 2-1: Manufacturer: syz [ 969.663024][ T6328] usb 4-1: SerialNumber: syz [ 969.678328][ T6328] usb 4-1: config 0 descriptor?? [ 969.679992][ T4317] usb 2-1: SerialNumber: syz [ 969.695588][ T6328] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 969.712852][ T6328] em28xx 4-1:0.0: DVB interface 0 found: isoc [ 969.760406][ T4319] usb 3-1: Using ep0 maxpacket: 16 [ 969.772321][ T4319] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 969.780851][ T4319] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 969.853771][ T4319] usb 3-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 969.873845][ T4319] usb 3-1: config 166 has no interface number 0 [ 969.894972][ T4319] usb 3-1: config 166 has no interface number 1 [ 969.920188][ T4319] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 969.954588][ T4317] usb_ehset_test: probe of 2-1:127.16 failed with error -32 [ 969.964578][ T4317] usb 2-1: USB disconnect, device number 122 [ 969.970878][ T4319] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 969.986368][ T6328] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 969.996624][ T4319] usb 3-1: config 166 interface 34 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 970.050657][ T4319] usb 3-1: config 166 interface 177 has no altsetting 0 [ 970.057701][ T4319] usb 3-1: config 166 interface 34 has no altsetting 0 [ 970.099965][ T6328] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 970.136915][ T6328] em28xx 4-1:0.0: board has no eeprom [ 970.149884][ T4319] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 970.183452][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.195298][ T4319] usb 3-1: Product: syz [ 970.206862][ T4319] usb 3-1: Manufacturer: syz [ 970.212047][ T4319] usb 3-1: SerialNumber: syz [ 970.245149][ T6328] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 970.272030][ T6328] em28xx 4-1:0.0: dvb set to isoc mode. [ 970.304404][ T6328] usb 4-1: USB disconnect, device number 113 [ 970.315941][ T6328] em28xx 4-1:0.0: Disconnecting em28xx [ 970.330117][ T9136] em28xx 4-1:0.0: Binding DVB extension [ 970.458892][ T4319] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 970.470677][ T9136] em28xx 4-1:0.0: Registering input extension [ 970.499170][ T6328] em28xx 4-1:0.0: Closing input extension [ 970.553678][ T6328] em28xx 4-1:0.0: Freeing device [ 970.645745][ T4319] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 970.758258][ T4319] usb 3-1: Found UVC 0.00 device syz (0bda:0138) [ 970.764720][ T4319] usb 3-1: No valid video chain found. [ 970.824404][ T4319] usb 3-1: USB disconnect, device number 122 [ 971.037504][T20860] loop1: detected capacity change from 0 to 8192 [ 971.074859][T20860] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 971.106699][T20860] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 971.128387][T20860] REISERFS (device loop1): using ordered data mode [ 971.139115][T20860] reiserfs: using flush barriers [ 971.150459][T20860] REISERFS warning (device loop1): sh-460 journal_init: journal header magic 49ce1e00 (device loop1) does not match to magic found in super block 49ce1e1e [ 971.302375][T20860] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 971.409317][T20851] loop4: detected capacity change from 0 to 32768 [ 971.481704][T20851] (syz.4.7429,20851,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 971.512507][T20851] (syz.4.7429,20851,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 971.600008][T20851] (syz.4.7429,20851,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xc192a3e5. Applying ECC. [ 971.659958][T20851] (syz.4.7429,20851,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdde57c9f, computed 0xaa48bc8a. Applying ECC. [ 971.713964][T20851] (syz.4.7429,20851,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdde57c9f, computed 0x805c7184 [ 971.770094][T20851] (syz.4.7429,20851,0):ocfs2_validate_inode_block:1415 ERROR: Checksum failed for dinode 25 [ 971.796248][T20857] loop3: detected capacity change from 0 to 32768 [ 971.823473][T20851] (syz.4.7429,20851,0):ocfs2_read_locked_inode:554 ERROR: status = -5 [ 971.866311][T20851] (syz.4.7429,20851,0):_ocfs2_get_system_file_inode:141 ERROR: status = -5 [ 971.875336][T20857] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.7431 (20857) [ 971.902581][T20851] (syz.4.7429,20851,0):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 971.934776][T20857] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 971.963087][ T6328] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 971.971138][T20851] (syz.4.7429,20851,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 6, possibly corrupt fs? [ 971.971181][T20851] (syz.4.7429,20851,0):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 971.993249][T20857] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 972.014676][T20857] BTRFS info (device loop3): using free space tree [ 972.025461][T20851] (syz.4.7429,20851,0):ocfs2_initialize_super:2253 ERROR: status = -22 [ 972.047875][T20851] (syz.4.7429,20851,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 972.187065][ T6328] usb 3-1: Using ep0 maxpacket: 32 [ 972.194621][ T6328] usb 3-1: unable to get BOS descriptor or descriptor too short [ 972.249100][ T6328] usb 3-1: config 125 has an invalid interface number: 7 but max is 0 [ 972.280220][ T6328] usb 3-1: config 125 has an invalid descriptor of length 0, skipping remainder of the config [ 972.304700][ T6328] usb 3-1: config 125 has no interface number 0 [ 972.311151][ T6328] usb 3-1: config 125 interface 7 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 972.324922][T20857] BTRFS info (device loop3): enabling ssd optimizations [ 972.365026][ T6328] usb 3-1: config 125 interface 7 has no altsetting 0 [ 972.384301][ T6328] usb 3-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 972.420809][ T6328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.429680][ T6328] usb 3-1: Product: syz [ 972.459758][ T6328] usb 3-1: Manufacturer: syz [ 972.470577][ T6328] usb 3-1: SerialNumber: syz [ 972.498514][ T4272] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 972.724602][ T6328] hub 3-1:125.7: bad descriptor, ignoring hub [ 972.731224][ T6328] hub: probe of 3-1:125.7 failed with error -5 [ 972.775422][ T6328] usb 3-1: Expected 3 endpoints, found: 0 [ 972.785100][T20875] loop1: detected capacity change from 0 to 32768 [ 972.840054][T20875] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.7438 (20875) [ 972.861639][ T6328] usb 3-1: USB disconnect, device number 123 [ 972.978394][T20875] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 973.017904][T20875] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 973.046228][T20875] BTRFS info (device loop1): using free space tree [ 973.309460][ T4322] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 973.352527][ T4260] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 973.373917][T20875] BTRFS info (device loop1): enabling ssd optimizations [ 973.534028][ T4322] usb 5-1: Using ep0 maxpacket: 16 [ 973.541585][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 28, changing to 7 [ 973.553118][T20923] loop2: detected capacity change from 0 to 128 [ 973.563365][ T4280] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 973.579007][ T4260] usb 4-1: unable to get BOS descriptor or descriptor too short [ 973.599287][ T4260] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.621644][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1483, setting to 1024 [ 973.636861][ T4260] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 973.653729][ T4322] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 973.675376][ T4260] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 973.694219][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.702562][ T4322] usb 5-1: Product: syz [ 973.719026][ T4322] usb 5-1: Manufacturer: syz [ 973.725515][ T4260] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 973.765334][ T4322] usb 5-1: SerialNumber: syz [ 973.779736][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.787836][ T4260] usb 4-1: Product: syz [ 973.810293][ T4322] usb 5-1: config 0 descriptor?? [ 973.812642][ T6328] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 973.833770][ T4260] usb 4-1: Manufacturer: syz [ 973.841554][ T4322] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 973.858142][ T4260] usb 4-1: SerialNumber: syz [ 973.864428][ T4322] em28xx 5-1:0.0: DVB interface 0 found: isoc [ 974.057727][ T6328] usb 1-1: Using ep0 maxpacket: 32 [ 974.066977][ T6328] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 974.089819][ T6328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.098005][ T6328] usb 1-1: Product: syz [ 974.114921][ T4260] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 974.121985][ T6328] usb 1-1: Manufacturer: syz [ 974.126911][ T6328] usb 1-1: SerialNumber: syz [ 974.143604][ T4322] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 974.156071][ T6328] usb 1-1: config 0 descriptor?? [ 974.182459][ T4260] usb 4-1: USB disconnect, device number 114 [ 974.198335][ T4320] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 974.209097][ T6328] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 974.221995][ T4322] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 974.246931][ T4322] em28xx 5-1:0.0: board has no eeprom [ 974.336650][ T4322] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 974.344780][ T4322] em28xx 5-1:0.0: dvb set to isoc mode. [ 974.351532][ T4319] em28xx 5-1:0.0: Binding DVB extension [ 974.363920][ T4322] usb 5-1: USB disconnect, device number 7 [ 974.375666][ T4322] em28xx 5-1:0.0: Disconnecting em28xx [ 974.394802][ T6328] gspca_topro: reg_w err -71 [ 974.432185][ T6328] gspca_topro: Sensor soi763a [ 974.434799][ T4320] usb 3-1: not running at top speed; connect to a high speed hub [ 974.456298][ T4679] udevd[4679]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 974.461172][ T4320] usb 3-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 974.489253][ T6328] usb 1-1: USB disconnect, device number 122 [ 974.510684][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.529181][ T4319] em28xx 5-1:0.0: Registering input extension [ 974.538955][ T4320] usb 3-1: Product: syz [ 974.543194][ T4320] usb 3-1: Manufacturer: syz [ 974.548135][ T4322] em28xx 5-1:0.0: Closing input extension [ 974.570173][ T4320] usb 3-1: SerialNumber: syz [ 974.579766][ T4322] em28xx 5-1:0.0: Freeing device [ 974.582550][ T9135] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 974.757938][T20931] loop4: detected capacity change from 0 to 720 [ 974.795489][ T9135] usb 2-1: Using ep0 maxpacket: 16 [ 974.813262][ T9135] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 974.843997][ T9135] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.870200][ T9135] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 974.893614][T20933] loop3: detected capacity change from 0 to 724 [ 974.903199][ T9135] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 974.924744][ T9135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.932839][ T9135] usb 2-1: Product: syz [ 974.980627][ T9135] usb 2-1: Manufacturer: syz [ 974.985323][ T9135] usb 2-1: SerialNumber: syz [ 974.992550][ T4320] usb 3-1: USB disconnect, device number 124 [ 975.068381][ T9135] usb 2-1: config 0 descriptor?? [ 975.104349][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 975.349233][ T4320] usb 2-1: USB disconnect, device number 123 [ 975.548921][ T9135] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 975.603112][T20935] loop4: detected capacity change from 0 to 32768 [ 975.632524][T20935] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.7449 (20935) [ 975.662617][T20941] loop2: detected capacity change from 0 to 128 [ 975.677502][T20935] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 975.702559][T20935] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 975.757634][T20935] BTRFS info (device loop4): using free space tree [ 975.768248][ T9135] usb 4-1: Using ep0 maxpacket: 32 [ 975.775877][ T9135] usb 4-1: unable to get BOS descriptor or descriptor too short [ 975.804708][ T9135] usb 4-1: config 3 has an invalid interface number: 223 but max is 1 [ 975.828724][ T9135] usb 4-1: config 3 has an invalid interface number: 25 but max is 1 [ 975.837130][ T9135] usb 4-1: config 3 has an invalid interface number: 223 but max is 1 [ 975.846500][ T9135] usb 4-1: config 3 has no interface number 0 [ 975.854687][ T9135] usb 4-1: config 3 has no interface number 1 [ 975.861897][ T9135] usb 4-1: config 3 interface 25 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 975.872822][ T9135] usb 4-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 975.886148][ T9135] usb 4-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 975.897671][ T9135] usb 4-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 975.909006][ T9135] usb 4-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 975.920323][ T9135] usb 4-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82 [ 975.935188][ T9135] usb 4-1: config 3 interface 223 has no altsetting 1 [ 975.944261][ T9135] usb 4-1: config 3 interface 25 has no altsetting 0 [ 975.984433][ T9135] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 976.010138][ T9135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.046370][ T9135] usb 4-1: Product: syz [ 976.050634][ T9135] usb 4-1: Manufacturer: syz [ 976.055292][ T9135] usb 4-1: SerialNumber: syz [ 976.078204][T20935] BTRFS info (device loop4): enabling ssd optimizations [ 976.125386][T20963] loop1: detected capacity change from 0 to 16 [ 976.145246][T20963] erofs: (device loop1): mounted with root inode @ nid 36. [ 976.422313][ T9135] usbtv 4-1:3.223: Fushicai USBTV007 Audio-Video Grabber [ 976.480832][T20967] loop1: detected capacity change from 0 to 16 [ 976.489496][ T9135] usb 4-1: USB disconnect, device number 115 [ 976.498032][T20968] loop2: detected capacity change from 0 to 16 [ 976.516042][T20967] erofs: (device loop1): mounted with root inode @ nid 36. [ 976.526350][T20968] erofs: (device loop2): mounted with root inode @ nid 36. [ 976.657533][ T4273] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 976.872496][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 976.920856][T20973] loop1: detected capacity change from 0 to 512 [ 977.005996][T20973] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 977.323199][T20977] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 977.392871][ T4417] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 977.498879][T20982] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 977.691749][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 977.954680][T20990] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 977.970479][ T4320] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 978.098500][T20981] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop2 scanned by syz.2.7460 (20981) [ 978.141773][T20981] BTRFS info (device loop2): first mount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 978.171008][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 978.177407][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 978.190840][ T4320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 978.202345][T20981] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 978.227538][ T4320] usb 4-1: config 6 interface 0 has no altsetting 0 [ 978.247638][ T4320] usb 4-1: string descriptor 0 read error: -22 [ 978.254764][T20981] BTRFS info (device loop2): using free space tree [ 978.275726][ T4320] usb 4-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=7e.1c [ 978.301795][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.363535][ T4320] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 978.430449][T20984] set_capacity_and_notify: 4 callbacks suppressed [ 978.430468][T20984] loop4: detected capacity change from 0 to 32768 [ 978.472832][T20984] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop4 scanned by syz.4.7457 (20984) [ 978.553791][T20984] BTRFS info (device loop4): first mount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 978.568336][ T4320] pwc: Failed to set LED on/off time (-71) [ 978.575311][ T4320] pwc: send_video_command error -71 [ 978.585344][ T4320] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 978.596233][T20981] BTRFS info (device loop2): enabling ssd optimizations [ 978.618969][ T4320] Philips webcam: probe of 4-1:6.0 failed with error -71 [ 978.667664][ T5769] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 978.677576][ T4320] usb 4-1: USB disconnect, device number 116 [ 978.679266][T20984] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 978.768640][T20984] BTRFS info (device loop4): using free space tree [ 978.828302][ T4271] BTRFS info (device loop2): last unmount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 978.901512][ T5769] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 978.922734][ T5769] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 978.985649][ T5769] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 979.027434][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.035940][T20984] BTRFS info (device loop4): enabling ssd optimizations [ 979.064679][ T5769] usb 2-1: Product: syz [ 979.068927][ T5769] usb 2-1: Manufacturer: syz [ 979.086285][ T5769] usb 2-1: SerialNumber: syz [ 979.155241][T20998] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 979.402551][ T5769] usb 2-1: too many endpoints [ 979.447411][ T5769] usb 2-1: USB disconnect, device number 124 [ 979.474257][T21036] loop3: detected capacity change from 0 to 512 [ 979.494466][ T4273] BTRFS info (device loop4): last unmount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 979.644008][T21036] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 979.695495][T21038] loop2: detected capacity change from 0 to 512 [ 979.756032][ T4420] udevd[4420]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.807668][T21038] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 979.890842][T21038] ext4 filesystem being mounted at /1497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 980.005595][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 980.072428][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 980.185615][T21046] loop3: detected capacity change from 0 to 512 [ 980.204525][ T4319] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 980.289109][T21046] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 980.313307][T21050] loop2: detected capacity change from 0 to 4096 [ 980.349479][T21046] ext4 filesystem being mounted at /1469/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 980.418328][ T4319] usb 1-1: Using ep0 maxpacket: 32 [ 980.423674][ T4320] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 980.445123][ T4319] usb 1-1: unable to get BOS descriptor or descriptor too short [ 980.489796][ T4319] usb 1-1: config 3 has an invalid interface number: 223 but max is 1 [ 980.503934][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 980.531332][ T4319] usb 1-1: config 3 has an invalid interface number: 25 but max is 1 [ 980.564777][ T4319] usb 1-1: config 3 has an invalid interface number: 223 but max is 1 [ 980.594334][ T4319] usb 1-1: config 3 has no interface number 0 [ 980.612829][ T4319] usb 1-1: config 3 has no interface number 1 [ 980.619653][ T4319] usb 1-1: config 3 interface 25 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 980.648856][ T4319] usb 1-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 980.676024][ T4320] usb 5-1: unable to get BOS descriptor or descriptor too short [ 980.687266][ T4320] usb 5-1: not running at top speed; connect to a high speed hub [ 980.706423][ T4319] usb 1-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 980.725101][ T4320] usb 5-1: config 1 interface 0 altsetting 91 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 980.749357][ T4319] usb 1-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 980.762256][ T4320] usb 5-1: config 1 interface 0 has no altsetting 0 [ 980.781867][ T4319] usb 1-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 980.795061][ T4320] usb 5-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 980.813762][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.822051][ T4319] usb 1-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82 [ 980.846115][ T4320] usb 5-1: Product: syz [ 980.856958][ T4320] usb 5-1: Manufacturer: syz [ 980.867475][ T4319] usb 1-1: config 3 interface 223 has no altsetting 1 [ 980.874600][ T4320] usb 5-1: SerialNumber: syz [ 980.897260][ T4319] usb 1-1: config 3 interface 25 has no altsetting 0 [ 980.915556][T21045] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 980.938525][ T4319] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 980.970079][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.997761][ T4319] usb 1-1: Product: syz [ 981.013000][ T4319] usb 1-1: Manufacturer: syz [ 981.019314][ T4319] usb 1-1: SerialNumber: syz [ 981.182270][ T4320] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input72 [ 981.205673][ T3623] bcm5974 5-1:1.0: could not read from device [ 981.226862][ T3623] bcm5974 5-1:1.0: could not read from device [ 981.268313][ T4320] usb 5-1: USB disconnect, device number 8 [ 981.295703][ T3623] bcm5974 5-1:1.0: could not read from device [ 981.324042][ T4319] usbtv 1-1:3.223: Fushicai USBTV007 Audio-Video Grabber [ 981.365459][ T4319] usb 1-1: USB disconnect, device number 123 [ 981.589101][T21048] loop1: detected capacity change from 0 to 32768 [ 981.603759][T21056] loop3: detected capacity change from 0 to 32768 [ 981.638915][T21056] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 8 /dev/loop3 scanned by syz.3.7477 (21056) [ 981.676321][T21056] BTRFS info (device loop3): first mount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc [ 981.689885][T21056] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 981.702488][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 981.718729][T21048] XFS (loop1): Mounting V5 Filesystem [ 981.753503][T21057] loop2: detected capacity change from 0 to 32768 [ 981.780113][T21056] BTRFS info (device loop3): using free space tree [ 981.840215][T21057] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.7478 (21057) [ 981.917948][T21057] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 981.937623][T21057] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 982.005446][T21057] BTRFS error (device loop2): superblock checksum mismatch [ 982.013128][T21057] BTRFS error (device loop2): open_ctree failed: -22 [ 982.023390][ T4320] XFS (loop1): Metadata CRC error detected at xfs_agi_read_verify+0x192/0x250, xfs_agi block 0x2 [ 982.065599][ T4320] XFS (loop1): Unmount and run xfs_repair [ 982.086966][ T4320] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 982.121222][ T4320] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00 XAGI.......... . [ 982.173617][ T4320] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 982.199145][ T4320] 00000020: 00 00 24 40 ff ff ff ff ff ff ff ff ff ff ff ff ..$@............ [ 982.220739][ T4320] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 982.237715][T21056] BTRFS info (device loop3): enabling ssd optimizations [ 982.261199][ T4320] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 982.293110][ T4680] udevd[4680]: incorrect btrfs checksum on /dev/loop2 [ 982.302933][ T4320] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 982.352857][ T4320] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 982.370910][T21089] loop2: detected capacity change from 0 to 512 [ 982.390687][ T4320] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 982.414285][T21048] XFS (loop1): metadata I/O error in "xfs_read_agi+0x2a2/0x660" at daddr 0x2 len 1 error 74 [ 982.427443][T21048] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 982.480560][T21048] XFS (loop1): Failed to read root inode 0x2440, error 117 [ 982.503425][T21089] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 982.558215][ T4272] BTRFS info (device loop3): last unmount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc [ 982.682869][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 982.725317][ T4319] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 982.938299][ T4319] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 982.958443][ T4319] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 983.003230][ T4319] usb 5-1: config 0 has no interface number 0 [ 983.046530][ T4319] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 983.079082][ T4319] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 983.115180][ T4319] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 983.144915][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.204949][ T4319] usb 5-1: config 0 descriptor?? [ 983.459276][ T4319] usb 5-1: USB disconnect, device number 9 [ 983.728560][T21096] loop2: detected capacity change from 0 to 32768 [ 983.764525][T21096] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop2 scanned by syz.2.7484 (21096) [ 983.805086][T21096] BTRFS info (device loop2): first mount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 983.834357][T21096] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 983.864958][T21096] BTRFS info (device loop2): using free space tree [ 984.170433][T21096] BTRFS info (device loop2): enabling ssd optimizations [ 984.309564][T21098] loop3: detected capacity change from 0 to 32768 [ 984.322640][ T4271] BTRFS info (device loop2): last unmount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 984.340675][T21098] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop3 scanned by syz.3.7483 (21098) [ 984.445914][T21098] BTRFS info (device loop3): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 984.459272][T21098] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 984.490507][T21098] BTRFS info (device loop3): using free space tree [ 985.078413][T21098] BTRFS info (device loop3): enabling ssd optimizations [ 985.236660][ T4272] BTRFS info (device loop3): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 985.287032][T21102] loop1: detected capacity change from 0 to 32768 [ 985.351764][T21102] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 985.399917][T21102] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 985.477931][T21102] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 985.482087][T21120] loop4: detected capacity change from 0 to 32768 [ 985.524633][ T4323] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 985.549580][ T4323] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 985.597518][T21120] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop4 scanned by syz.4.7487 (21120) [ 985.878516][ T4323] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 307ms [ 985.922986][ T4323] gfs2: fsid=syz:syz.0: jid=0: Done [ 985.940042][T21102] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 985.948392][T21120] BTRFS info (device loop4): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 985.970199][T21120] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 986.041251][T21120] BTRFS info (device loop4): using free space tree [ 986.132932][T21152] loop3: detected capacity change from 0 to 512 [ 986.163849][T21152] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 986.276082][T21120] BTRFS info (device loop4): enabling ssd optimizations [ 986.308251][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 986.538791][ T4273] BTRFS info (device loop4): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 986.725525][T21135] loop2: detected capacity change from 0 to 32768 [ 986.779749][T21135] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 986.819525][T21135] CPU: 0 PID: 21135 Comm: syz.2.7488 Not tainted syzkaller #0 [ 986.827117][T21135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 986.837229][T21135] Call Trace: [ 986.840563][T21135] [ 986.843543][T21135] dump_stack_lvl+0x188/0x24e [ 986.848385][T21135] ? show_regs_print_info+0x12/0x12 [ 986.853652][T21135] ? load_image+0x410/0x410 [ 986.858263][T21135] sysfs_create_dir_ns+0x26a/0x290 [ 986.863514][T21135] ? __lock_acquire+0x7c40/0x7c40 [ 986.868694][T21135] ? sysfs_warn_dup+0xa0/0xa0 [ 986.873435][T21135] ? kobject_set_name_vargs+0x5d/0x110 [ 986.878986][T21135] ? do_raw_spin_unlock+0x11d/0x230 [ 986.884249][T21135] kobject_add_internal+0x617/0xca0 [ 986.889512][T21135] kobject_init_and_add+0x128/0x190 [ 986.894773][T21135] ? lockdep_softirqs_off+0x430/0x430 [ 986.900219][T21135] ? kobject_add+0x230/0x230 [ 986.904873][T21135] ? __init_swait_queue_head+0xa4/0x140 [ 986.910524][T21135] gfs2_sys_fs_add+0x24f/0x4b0 [ 986.915434][T21135] ? gfs2_recover_set+0x240/0x240 [ 986.920549][T21135] ? snprintf+0xe5/0x140 [ 986.924907][T21135] ? vscnprintf+0x80/0x80 [ 986.929304][T21135] gfs2_fill_super+0x12dc/0x2020 [ 986.934395][T21135] ? gfs2_reconfigure+0xd80/0xd80 [ 986.939498][T21135] ? sb_set_blocksize+0xa5/0xe0 [ 986.944470][T21135] get_tree_bdev+0x3e6/0x610 [ 986.949120][T21135] ? gfs2_reconfigure+0xd80/0xd80 [ 986.954211][T21135] gfs2_get_tree+0x4d/0x1e0 [ 986.958793][T21135] vfs_get_tree+0x88/0x270 [ 986.963281][T21135] do_new_mount+0x247/0xa40 [ 986.967858][T21135] __se_sys_mount+0x2e3/0x3d0 [ 986.972604][T21135] ? __x64_sys_mount+0xc0/0xc0 [ 986.977431][T21135] ? lockdep_hardirqs_on+0x94/0x140 [ 986.982699][T21135] ? __x64_sys_mount+0x1c/0xc0 [ 986.987529][T21135] do_syscall_64+0x4c/0xa0 [ 986.992002][T21135] ? clear_bhb_loop+0x60/0xb0 [ 986.996739][T21135] ? clear_bhb_loop+0x60/0xb0 [ 987.001482][T21135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 987.007468][T21135] RIP: 0033:0x7fda8239f3ca [ 987.011939][T21135] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.031692][T21135] RSP: 002b:00007fda831c3e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 987.040173][T21135] RAX: ffffffffffffffda RBX: 00007fda831c3ee0 RCX: 00007fda8239f3ca [ 987.048199][T21135] RDX: 0000200000021180 RSI: 00002000000211c0 RDI: 00007fda831c3ea0 [ 987.056230][T21135] RBP: 0000200000021180 R08: 00007fda831c3ee0 R09: 0000000000000000 [ 987.064260][T21135] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000211c0 [ 987.072291][T21135] R13: 00007fda831c3ea0 R14: 000000000002114d R15: 0000200000021200 [ 987.080355][T21135] [ 987.740946][T21135] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 987.778944][T21135] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 988.373826][T21178] loop2: detected capacity change from 0 to 1024 [ 988.381474][T21170] loop3: detected capacity change from 0 to 32768 [ 988.454377][T21170] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 988.484730][T21176] loop4: detected capacity change from 0 to 32768 [ 988.488826][T21170] CPU: 1 PID: 21170 Comm: syz.3.7491 Not tainted syzkaller #0 [ 988.498699][T21170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 988.508775][T21170] Call Trace: [ 988.512075][T21170] [ 988.515047][T21170] dump_stack_lvl+0x188/0x24e [ 988.519797][T21170] ? show_regs_print_info+0x12/0x12 [ 988.525031][T21170] ? load_image+0x410/0x410 [ 988.529594][T21170] sysfs_create_dir_ns+0x26a/0x290 [ 988.534734][T21170] ? __lock_acquire+0x7c40/0x7c40 [ 988.539809][T21170] ? sysfs_warn_dup+0xa0/0xa0 [ 988.544556][T21170] ? kobject_set_name_vargs+0x5d/0x110 [ 988.550083][T21170] ? do_raw_spin_unlock+0x11d/0x230 [ 988.555353][T21170] kobject_add_internal+0x617/0xca0 [ 988.560630][T21170] kobject_init_and_add+0x128/0x190 [ 988.565884][T21170] ? lockdep_softirqs_off+0x430/0x430 [ 988.571342][T21170] ? kobject_add+0x230/0x230 [ 988.576022][T21170] ? __init_swait_queue_head+0xa4/0x140 [ 988.581641][T21170] gfs2_sys_fs_add+0x24f/0x4b0 [ 988.586467][T21170] ? gfs2_recover_set+0x240/0x240 [ 988.591554][T21170] ? snprintf+0xe5/0x140 [ 988.595865][T21170] ? vscnprintf+0x80/0x80 [ 988.600257][T21170] gfs2_fill_super+0x12dc/0x2020 [ 988.605280][T21170] ? gfs2_reconfigure+0xd80/0xd80 [ 988.610394][T21170] ? sb_set_blocksize+0xa5/0xe0 [ 988.615321][T21170] get_tree_bdev+0x3e6/0x610 [ 988.619992][T21170] ? gfs2_reconfigure+0xd80/0xd80 [ 988.625089][T21170] gfs2_get_tree+0x4d/0x1e0 [ 988.629669][T21170] vfs_get_tree+0x88/0x270 [ 988.634143][T21170] do_new_mount+0x247/0xa40 [ 988.638837][T21170] __se_sys_mount+0x2e3/0x3d0 [ 988.643608][T21170] ? __x64_sys_mount+0xc0/0xc0 [ 988.648478][T21170] ? lockdep_hardirqs_on+0x94/0x140 [ 988.653741][T21170] ? __x64_sys_mount+0x1c/0xc0 [ 988.658577][T21170] do_syscall_64+0x4c/0xa0 [ 988.663079][T21170] ? clear_bhb_loop+0x60/0xb0 [ 988.667835][T21170] ? clear_bhb_loop+0x60/0xb0 [ 988.672596][T21170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 988.678565][T21170] RIP: 0033:0x7f16d919f3ca [ 988.683038][T21170] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.702758][T21170] RSP: 002b:00007f16da10de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 988.711259][T21170] RAX: ffffffffffffffda RBX: 00007f16da10dee0 RCX: 00007f16d919f3ca [ 988.719309][T21170] RDX: 0000200000013400 RSI: 0000200000013440 RDI: 00007f16da10dea0 [ 988.727349][T21170] RBP: 0000200000013400 R08: 00007f16da10dee0 R09: 0000000000000000 [ 988.735394][T21170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000013440 [ 988.743429][T21170] R13: 00007f16da10dea0 R14: 00000000000133f4 R15: 0000200000013480 [ 988.751478][T21170] [ 988.773430][T21176] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz.4.7492 (21176) [ 988.904495][T21176] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 988.969867][T21176] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 989.020846][T21176] BTRFS info (device loop4): using free space tree [ 989.216125][T21170] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 989.297852][T21195] loop2: detected capacity change from 0 to 1024 [ 989.311264][T21199] loop1: detected capacity change from 0 to 1024 [ 989.394193][T21176] BTRFS info (device loop4): enabling ssd optimizations [ 989.437259][T21170] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 989.571005][T21175] Process accounting paused [ 989.591691][ T4273] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 989.742936][T21209] set_capacity_and_notify: 1 callbacks suppressed [ 989.742954][T21209] loop1: detected capacity change from 0 to 164 [ 990.375039][T21216] loop1: detected capacity change from 0 to 136 [ 990.409827][T21214] loop4: detected capacity change from 0 to 1164 [ 990.421291][T21213] loop2: detected capacity change from 0 to 1768 [ 990.555071][T21218] loop3: detected capacity change from 0 to 1764 [ 990.782623][T21222] loop1: detected capacity change from 0 to 21 [ 990.832679][T21224] loop2: detected capacity change from 0 to 2 [ 990.839729][T21224] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 990.887324][T21222] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 991.089818][T21228] loop4: detected capacity change from 0 to 2 [ 991.096908][T21228] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 991.243852][T21232] loop2: detected capacity change from 0 to 21 [ 991.264777][T21231] loop1: detected capacity change from 0 to 21 [ 991.281910][T21232] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 991.310572][T21231] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 991.674148][T21238] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 991.792408][ T4320] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 991.835431][T21226] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.7510 (21226) [ 991.875036][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 991.910969][T21226] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 991.932342][T21226] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 991.941617][T21226] BTRFS info (device loop3): using free space tree [ 992.038215][ T4320] usb 5-1: Using ep0 maxpacket: 32 [ 992.063236][ T4320] usb 5-1: unable to get BOS descriptor or descriptor too short [ 992.129007][ T4320] usb 5-1: config 3 has an invalid interface number: 223 but max is 1 [ 992.144792][ T4320] usb 5-1: config 3 has an invalid interface number: 25 but max is 1 [ 992.164716][ T4320] usb 5-1: config 3 has an invalid interface number: 223 but max is 1 [ 992.174963][ T4320] usb 5-1: config 3 has no interface number 0 [ 992.191973][ T4320] usb 5-1: config 3 has no interface number 1 [ 992.205024][ T4320] usb 5-1: config 3 interface 25 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 992.216559][ T4320] usb 5-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 992.230214][ T4320] usb 5-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 992.241676][ T4320] usb 5-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 992.253280][ T4320] usb 5-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 992.264863][ T4320] usb 5-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82 [ 992.278436][ T4320] usb 5-1: config 3 interface 223 has no altsetting 1 [ 992.286101][ T4320] usb 5-1: config 3 interface 25 has no altsetting 0 [ 992.297337][ T4320] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 992.306872][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.311684][T21226] BTRFS info (device loop3): enabling ssd optimizations [ 992.314891][ T4320] usb 5-1: Product: syz [ 992.326246][ T4320] usb 5-1: Manufacturer: syz [ 992.330957][ T4320] usb 5-1: SerialNumber: syz [ 992.608415][ T4272] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 992.621175][ T4320] usbtv 5-1:3.223: Fushicai USBTV007 Audio-Video Grabber [ 992.685406][ T4320] usb 5-1: USB disconnect, device number 10 [ 993.065733][ T4420] udevd[4420]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 994.311414][T21290] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 995.500818][T21285] set_capacity_and_notify: 15 callbacks suppressed [ 995.500837][T21285] loop4: detected capacity change from 0 to 32768 [ 995.569575][T21285] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 995.612106][T21285] dlm: no local IP address has been set [ 995.617746][T21285] dlm: cannot start dlm midcomms -107 [ 995.666435][T21285] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 995.966040][T21287] loop1: detected capacity change from 0 to 32768 [ 996.067289][ T4679] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 996.069082][T21287] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 996.121232][T21287] dlm: no local IP address has been set [ 996.135052][T21287] dlm: cannot start dlm midcomms -107 [ 996.140507][T21287] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 996.512052][T21311] loop4: detected capacity change from 0 to 512 [ 996.674694][T21317] loop1: detected capacity change from 0 to 2048 [ 996.793794][T21303] loop3: detected capacity change from 0 to 32768 [ 996.838976][T21303] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 996.870851][T21319] loop4: detected capacity change from 0 to 512 [ 996.902482][T21303] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 997.005371][T21303] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 997.060186][ T5770] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 997.068472][ T5770] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 997.202486][T21321] loop1: detected capacity change from 0 to 128 [ 997.356008][ T5770] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 268ms [ 997.357492][T21323] loop4: detected capacity change from 0 to 512 [ 997.376887][ T5770] gfs2: fsid=syz:syz.0: jid=0: Done [ 997.403848][T21303] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 997.756355][T21329] loop4: detected capacity change from 0 to 2048 [ 997.827780][T21330] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 998.577964][T21336] loop2: detected capacity change from 0 to 2048 [ 998.708365][T21337] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 999.200687][T21344] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 999.654446][T21347] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 999.758265][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.764733][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.041400][T21343] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.7554 (21343) [ 1000.095993][T21343] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1000.141356][T21343] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1000.165536][T21343] BTRFS info (device loop3): using free space tree [ 1000.443544][T21343] BTRFS info (device loop3): enabling ssd optimizations [ 1000.651072][ T4272] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1001.098036][T21349] set_capacity_and_notify: 3 callbacks suppressed [ 1001.098056][T21349] loop2: detected capacity change from 0 to 32768 [ 1002.012738][T21373] loop1: detected capacity change from 0 to 4096 [ 1002.069456][T21373] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1002.393194][T21375] loop4: detected capacity change from 0 to 4096 [ 1002.443216][T21375] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 1003.031607][T21379] loop4: detected capacity change from 0 to 4096 [ 1003.072322][T21379] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1003.394239][T21377] loop1: detected capacity change from 0 to 32768 [ 1003.569060][T21383] loop4: detected capacity change from 0 to 4096 [ 1003.625910][T21383] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1004.880154][T21385] loop1: detected capacity change from 0 to 32768 [ 1004.955567][T21385] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1005.007812][T21385] dlm: no local IP address has been set [ 1005.013564][T21385] dlm: cannot start dlm midcomms -107 [ 1005.026414][T21385] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1005.933719][T21391] loop3: detected capacity change from 0 to 32768 [ 1006.187943][T21394] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1006.254231][T21387] loop4: detected capacity change from 0 to 32768 [ 1006.316790][T21387] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1006.383247][T21387] dlm: no local IP address has been set [ 1006.416369][T21387] dlm: cannot start dlm midcomms -107 [ 1006.421891][T21387] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1010.197710][T21406] loop1: detected capacity change from 0 to 32768 [ 1010.238861][T21406] (syz.1.7577,21406,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 1010.297215][T21406] (syz.1.7577,21406,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1010.795103][T21416] loop3: detected capacity change from 0 to 512 [ 1011.165308][T21418] loop3: detected capacity change from 0 to 512 [ 1011.521797][T21410] loop2: detected capacity change from 0 to 32768 [ 1011.561092][T21410] (syz.2.7579,21410,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 1011.592750][T21410] (syz.2.7579,21410,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1012.132367][T21424] loop2: detected capacity change from 0 to 8192 [ 1013.083880][T21420] loop4: detected capacity change from 0 to 65536 [ 1013.117448][T21420] (syz.4.7584,21420,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 1013.173510][T21420] (syz.4.7584,21420,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1013.391385][T21422] loop3: detected capacity change from 0 to 65536 [ 1013.432689][T21422] (syz.3.7585,21422,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 1013.457897][T21422] (syz.3.7585,21422,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1018.118621][T21444] loop4: detected capacity change from 0 to 4096 [ 1018.171760][T21444] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 1019.486523][T21451] loop1: detected capacity change from 0 to 4096 [ 1019.558517][T21451] ntfs: volume version 3.1. [ 1020.074858][T21458] loop1: detected capacity change from 0 to 128 [ 1020.130231][T21458] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1020.177114][T21458] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1020.502140][T21462] loop1: detected capacity change from 0 to 2048 [ 1020.582510][T21462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1020.852209][T21464] loop1: detected capacity change from 0 to 1024 [ 1020.918287][T21464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1021.112410][T21466] loop2: detected capacity change from 0 to 128 [ 1021.184495][T21466] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1021.250134][T21466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1021.540399][T21470] loop1: detected capacity change from 0 to 256 [ 1021.568932][T21470] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1021.603499][T21470] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1021.645708][T21470] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1021.661300][T21472] loop2: detected capacity change from 0 to 512 [ 1021.681339][T21470] UDF-fs: Scanning with blocksize 512 failed [ 1021.697454][T21472] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1021.742530][T21470] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1021.756345][T21472] UDF-fs: Scanning with blocksize 512 failed [ 1021.788439][T21472] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1021.815294][T21470] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1021.828467][T21472] UDF-fs: Scanning with blocksize 1024 failed [ 1021.858588][T21472] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1021.887300][T21472] UDF-fs: Scanning with blocksize 2048 failed [ 1021.930290][T21472] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1021.963508][T21472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1022.104100][T21449] Process accounting resumed [ 1022.200483][T21478] loop1: detected capacity change from 0 to 8 [ 1022.583428][T21484] loop1: detected capacity change from 0 to 512 [ 1022.676074][T21484] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1022.696263][T21484] UDF-fs: Scanning with blocksize 512 failed [ 1022.733990][T21484] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1022.779664][T21484] UDF-fs: Scanning with blocksize 1024 failed [ 1022.814706][T21484] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1022.854900][T21484] UDF-fs: Scanning with blocksize 2048 failed [ 1022.887749][T21484] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1022.907292][T21484] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1023.046635][T21490] syz.4.7616: attempt to access beyond end of device [ 1023.046635][T21490] loop4: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 1023.124861][T21490] SQUASHFS error: Failed to read block 0x0: -5 [ 1023.141349][T21490] unable to read squashfs_super_block [ 1023.671468][T21496] set_capacity_and_notify: 4 callbacks suppressed [ 1023.671487][T21496] loop1: detected capacity change from 0 to 256 [ 1023.735350][T21485] loop2: detected capacity change from 0 to 32768 [ 1023.768166][T21485] (syz.2.7614,21485,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 1023.797809][T21498] loop4: detected capacity change from 0 to 128 [ 1023.842632][T21485] (syz.2.7614,21485,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1024.471707][T21508] loop2: detected capacity change from 0 to 128 [ 1024.565467][T21508] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1024.630541][T21508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1025.457050][T21513] loop2: detected capacity change from 0 to 16384 [ 1025.504392][T21513] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1025.546089][T21513] UDF-fs: Scanning with blocksize 512 failed [ 1025.616857][T21513] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1025.624420][T21513] UDF-fs: Scanning with blocksize 1024 failed [ 1025.688286][T21513] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1025.706851][T21513] UDF-fs: Scanning with blocksize 2048 failed [ 1025.759805][T21513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1026.349503][T21522] loop2: detected capacity change from 0 to 256 [ 1026.510067][T21526] loop3: detected capacity change from 0 to 2048 [ 1026.805971][T21528] loop2: detected capacity change from 0 to 2048 [ 1027.107541][T21530] loop3: detected capacity change from 0 to 8192 [ 1031.771846][T21544] loop3: detected capacity change from 0 to 2048 [ 1031.862926][T21544] loop3: p1 p2 p3 [ 1032.337832][ T4680] udevd[4680]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1032.371898][ T4417] udevd[4417]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1032.376577][ T4679] udevd[4679]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1032.456060][T21542] loop2: detected capacity change from 0 to 32768 [ 1032.592532][T21542] XFS (loop2): Mounting V5 Filesystem [ 1032.709509][T21542] XFS (loop2): Ending clean mount [ 1032.788989][ T4271] XFS (loop2): Unmounting Filesystem [ 1033.670287][T21562] loop2: detected capacity change from 0 to 8192 [ 1033.757197][T21562] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1033.782671][T21562] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1033.791974][T21562] REISERFS (device loop2): using ordered data mode [ 1033.825360][T21562] reiserfs: using flush barriers [ 1033.876834][T21562] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1033.900981][T21562] REISERFS (device loop2): checking transaction log (loop2) [ 1034.055827][T21548] loop1: detected capacity change from 0 to 65536 [ 1034.167588][T21562] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 1034.189103][T21562] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 1034.218669][T21548] XFS (loop1): Mounting V5 Filesystem [ 1034.280288][T21562] REISERFS (device loop2): Remounting filesystem read-only [ 1034.348419][T21562] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 1034.375456][T21548] XFS (loop1): Ending clean mount [ 1034.456257][T21562] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 1034.622417][ T4280] XFS (loop1): Unmounting Filesystem [ 1034.793682][T21555] loop4: detected capacity change from 0 to 65536 [ 1034.920394][T21555] XFS (loop4): Mounting V5 Filesystem [ 1035.075227][T21555] XFS (loop4): Ending clean mount [ 1035.191944][T21581] loop2: detected capacity change from 0 to 512 [ 1035.215798][ T4273] XFS (loop4): Unmounting Filesystem [ 1035.261750][T21581] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1035.287958][T21581] UDF-fs: Scanning with blocksize 512 failed [ 1035.315584][T21581] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1035.346430][T21581] UDF-fs: Scanning with blocksize 1024 failed [ 1035.457184][T21581] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1035.488188][T21581] UDF-fs: Scanning with blocksize 2048 failed [ 1035.511912][T21581] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1035.580737][T21581] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1036.014276][T21591] loop1: detected capacity change from 0 to 128 [ 1036.086510][T21587] loop4: detected capacity change from 0 to 2048 [ 1036.181705][T21587] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1036.235394][T21587] UDF-fs: Scanning with blocksize 512 failed [ 1036.300415][T21587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1036.395010][T21593] loop1: detected capacity change from 0 to 2048 [ 1036.494813][T21593] loop1: p1 p2 p3 [ 1037.030628][ T4417] udevd[4417]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1037.050148][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1037.070045][ T4680] udevd[4680]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1037.890111][T21590] loop2: detected capacity change from 0 to 65536 [ 1038.047055][T21590] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 1040.060478][T21599] loop1: detected capacity change from 0 to 131072 [ 1041.210711][T21611] loop1: detected capacity change from 0 to 32768 [ 1041.391051][T21613] loop3: detected capacity change from 0 to 32768 [ 1041.470190][T21615] loop4: detected capacity change from 0 to 16384 [ 1041.525067][T21615] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1041.532587][T21615] UDF-fs: Scanning with blocksize 512 failed [ 1041.553804][T21613] XFS (loop3): Mounting V5 Filesystem [ 1041.597648][T21615] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1041.605121][T21615] UDF-fs: Scanning with blocksize 1024 failed [ 1041.658728][T21615] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1041.671015][T21615] UDF-fs: Scanning with blocksize 2048 failed [ 1041.719052][T21613] XFS (loop3): Ending clean mount [ 1041.744498][T21615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1041.797600][ T4272] XFS (loop3): Unmounting Filesystem [ 1043.310938][T21641] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1043.560865][T21633] loop3: detected capacity change from 0 to 32768 [ 1043.731049][T21633] XFS (loop3): Mounting V5 Filesystem [ 1043.794767][T21658] xt_time: unknown flags 0xc [ 1043.952749][T21633] XFS (loop3): Ending clean mount [ 1044.191998][ T4272] XFS (loop3): Unmounting Filesystem [ 1045.606526][T21701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7696'. [ 1045.909750][T21710] loop2: detected capacity change from 0 to 256 [ 1046.208126][T21718] loop2: detected capacity change from 0 to 256 [ 1047.513134][ T5770] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1047.539668][T21758] kernel read not supported for file / 7âW)s!Qfsr)rO2:"T+͟v|ղDvc֠6xc: (pid: 21758 comm: syz.0.7725) [ 1047.587316][ T26] audit: type=1800 audit(2000001455.069:32): pid=21758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7725" name=20019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=81598 res=0 errno=0 [ 1047.618542][ C0] vkms_vblank_simulate: vblank timer overrun [ 1047.730288][ T5770] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1047.744586][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.770564][T21760] netlink: 'syz.4.7726': attribute type 8 has an invalid length. [ 1047.804540][ T5770] usb 3-1: config 0 descriptor?? [ 1047.835256][ T5770] pwc: Creative Labs Webcam 5 detected. [ 1048.128783][T21744] loop1: detected capacity change from 0 to 32768 [ 1048.243754][T21744] XFS (loop1): Mounting V5 Filesystem [ 1048.258447][ T5770] pwc: send_video_command error -71 [ 1048.263730][ T5770] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1048.326532][ T5770] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1048.390906][ T5770] usb 3-1: USB disconnect, device number 125 [ 1048.428375][T21744] XFS (loop1): Ending clean mount [ 1048.469302][T21786] loop3: detected capacity change from 0 to 512 [ 1048.541321][T21786] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1048.566069][T21786] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 1048.594103][ T4280] XFS (loop1): Unmounting Filesystem [ 1048.625557][T21788] loop4: detected capacity change from 0 to 512 [ 1048.647506][T21786] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.7735: inode #15: comm syz.3.7735: iget: illegal inode # [ 1048.671519][T21786] EXT4-fs (loop3): Remounting filesystem read-only [ 1048.692866][T21786] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.7735: couldn't read orphan inode 15 (err -117) [ 1048.738722][T21786] EXT4-fs (loop3): Remounting filesystem read-only [ 1048.745434][T21786] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1048.840431][T21788] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1048.917214][T21788] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1048.952824][T21796] netlink: 'syz.2.7740': attribute type 24 has an invalid length. [ 1048.994656][T21788] ext4 filesystem being mounted at /1552/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1049.015426][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 1049.174223][T21800] CIFS: Attempting to mount \\127.0.0.1\share [ 1049.224200][T21800] CIFS: VFS: No username specified [ 1049.419404][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 1049.586171][T21809] netlink: 'syz.1.7745': attribute type 15 has an invalid length. [ 1050.925451][ T5770] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1051.155886][ T5770] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1051.181449][ T5770] usb 4-1: not running at top speed; connect to a high speed hub [ 1051.205056][ T5770] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1051.261302][ T26] audit: type=1107 audit(2000001458.503:33): pid=21869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1051.270832][ T5770] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 35, changing to 4 [ 1051.336174][ T5770] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1051.355233][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.366418][ T5770] usb 4-1: Product: syz [ 1051.376608][ T5770] usb 4-1: Manufacturer: syz [ 1051.382353][ T5770] usb 4-1: SerialNumber: syz [ 1051.574246][T10260] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1051.608659][ T4368] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1051.639564][ T5770] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1051.661576][ T5770] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1051.677902][ T5770] usb 4-1: 2:1 : invalid channels 0 [ 1051.718893][ T5770] usb 4-1: USB disconnect, device number 117 [ 1051.737500][T21886] loop4: detected capacity change from 0 to 16 [ 1051.785137][T21886] erofs: (device loop4): mounted with root inode @ nid 36. [ 1051.805906][T10260] usb 1-1: Using ep0 maxpacket: 16 [ 1051.810288][ T4368] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.815146][T10260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.849543][ T4368] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x77, skipping [ 1051.869544][T10260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.880975][ T4368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1051.886854][T10260] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1051.910121][ T4368] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1051.930527][T10260] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1051.938455][ T4368] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1051.948706][T10260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.960614][ T4368] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1051.968215][T10260] usb 1-1: config 0 descriptor?? [ 1051.971642][ T4368] usb 3-1: Manufacturer: syz [ 1051.982409][ T4368] usb 3-1: config 0 descriptor?? [ 1051.986859][T10260] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input76 [ 1051.992015][ T4679] udevd[4679]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1052.017329][ T3623] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1052.062270][ T3623] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1052.099764][ T3623] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1052.145688][ T3623] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1052.165479][ T4680] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1052.185010][ T3623] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1052.230225][ T3623] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1052.263068][T10260] usb 3-1: USB disconnect, device number 126 [ 1052.278244][T21872] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1052.322142][ T3623] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1052.326403][ T4368] usb 1-1: USB disconnect, device number 124 [ 1052.398984][T21896] netlink: 'syz.3.7787': attribute type 2 has an invalid length. [ 1052.431019][T21898] loop1: detected capacity change from 0 to 256 [ 1052.457752][T21896] netlink: 119 bytes leftover after parsing attributes in process `syz.3.7787'. [ 1052.461670][T21898] exfat: Deprecated parameter 'utf8' [ 1052.485417][T21898] exfat: Deprecated parameter 'utf8' [ 1052.554313][T21898] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1052.654817][T21902] loop4: detected capacity change from 0 to 256 [ 1052.704212][T21898] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1053.024783][T21910] cgroup: Invalid name [ 1053.206640][ T4368] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1053.227016][T21916] autofs4:pid:21916:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 1053.281919][T21918] Cannot find del_set index 0 as target [ 1053.413792][ T4368] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 1053.445503][ T4368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.477355][ T4368] usb 4-1: Product: syz [ 1053.494971][ T4368] usb 4-1: Manufacturer: syz [ 1053.514207][ T4368] usb 4-1: SerialNumber: syz [ 1053.719743][ T4368] usb 4-1: reset high-speed USB device number 118 using dummy_hcd [ 1054.034508][ T4368] usb 4-1: driver API: 1.9.9 2016-02-15 [1-1] [ 1054.061679][ T4368] usb 4-1: firmware API: 1.9.6 2012-07-07 [ 1054.358300][T21953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7816'. [ 1054.393569][ C1] usb 4-1: received invalid command response:got -4, instead of 0 [ 1054.401561][ C1] usb 4-1: restart device (9) [ 1054.412148][T21950] Process accounting paused [ 1054.639769][ C1] device 4-1 is not registered [ 1054.646185][ T9129] usb 4-1: USB disconnect, device number 118 [ 1055.258772][ T4368] usb 4-1: firmware upload failed (-110). [ 1055.667944][T21998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7839'. [ 1056.057685][T22013] loop2: detected capacity change from 0 to 512 [ 1056.100535][T22013] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1056.103964][ T9129] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1056.194328][T22013] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1056.225447][T22013] ext4 filesystem being mounted at /1579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.327709][ T9129] usb 4-1: Using ep0 maxpacket: 16 [ 1056.335480][ T9129] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1056.351781][ T9129] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1056.380146][ T9129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.412514][ T9129] usb 4-1: Product: syz [ 1056.417074][ T9129] usb 4-1: Manufacturer: syz [ 1056.421727][ T9129] usb 4-1: SerialNumber: syz [ 1056.438814][ T9129] r8152-cfgselector 4-1: config 0 descriptor?? [ 1056.463925][T22025] netlink: 'syz.0.7851': attribute type 9 has an invalid length. [ 1056.488267][T22025] netlink: 'syz.0.7851': attribute type 7 has an invalid length. [ 1056.496112][T22025] netlink: 'syz.0.7851': attribute type 8 has an invalid length. [ 1056.523210][T22025] netlink: 'syz.0.7851': attribute type 13 has an invalid length. [ 1056.550718][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 1056.893327][ T9129] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1056.916202][ T9129] r8152-cfgselector 4-1: USB disconnect, device number 119 [ 1057.362047][T22051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7864'. [ 1057.843176][T22068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7872'. [ 1058.461202][T22092] loop3: detected capacity change from 0 to 512 [ 1058.469262][T22092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1058.535847][T22092] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1058.564062][T22092] ext4 filesystem being mounted at /1528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.756763][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 1058.890858][T22104] loop2: detected capacity change from 0 to 512 [ 1058.971064][T22108] netlink: 'syz.1.7891': attribute type 10 has an invalid length. [ 1059.118097][T22108] team0: Device veth1_macvtap failed to register rx_handler [ 1059.304956][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1059.339227][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1059.344750][T22119] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7896'. [ 1059.431406][T22114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1059.664450][T22127] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7900'. [ 1059.970216][T22139] netlink: 388 bytes leftover after parsing attributes in process `syz.4.7906'. [ 1060.067201][T22143] loop2: detected capacity change from 0 to 256 [ 1060.075630][T22143] exfat: Deprecated parameter 'utf8' [ 1060.165386][T22143] exfat: Deprecated parameter 'utf8' [ 1060.271286][T22143] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1060.404217][T22143] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1061.131729][T22176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7925'. [ 1061.863349][ T26] audit: type=1326 audit(2000001468.418:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22198 comm="syz.4.7936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef19e159 code=0x7ffc0000 [ 1061.916781][T22194] loop2: detected capacity change from 0 to 4096 [ 1061.940104][ T26] audit: type=1326 audit(2000001468.456:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22198 comm="syz.4.7936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f2cef19e159 code=0x7ffc0000 [ 1062.012628][T22194] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1062.068376][ T26] audit: type=1326 audit(2000001468.456:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22198 comm="syz.4.7936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef19e159 code=0x7ffc0000 [ 1062.175196][ T26] audit: type=1326 audit(2000001468.456:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22198 comm="syz.4.7936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef19e159 code=0x7ffc0000 [ 1062.293614][ T4362] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 1062.300335][ T4271] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1062.323043][ T4271] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1062.367592][ T4271] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 1062.374071][ T4362] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 1062.421811][ T4271] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 1062.550455][T22211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7943'. [ 1062.828347][T22225] overlayfs: './file0' not a directory [ 1062.883534][T22228] loop3: detected capacity change from 0 to 256 [ 1063.167393][T22236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1063.234451][T22236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1063.283824][T22236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1063.341853][T22241] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7957'. [ 1063.373014][T22241] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7957'. [ 1063.569524][T22248] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1063.832389][ T129] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1064.035338][ T129] usb 4-1: Using ep0 maxpacket: 8 [ 1064.046422][ T129] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1064.054571][ T129] usb 4-1: config 0 has no interface number 0 [ 1064.088766][ T129] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1064.108862][ T129] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1064.156853][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.184529][ T129] usb 4-1: Product: syz [ 1064.192644][ T129] usb 4-1: Manufacturer: syz [ 1064.200029][ T129] usb 4-1: SerialNumber: syz [ 1064.219761][ T129] usb 4-1: config 0 descriptor?? [ 1064.307029][T22274] netlink: 'syz.1.7984': attribute type 2 has an invalid length. [ 1064.379823][T22276] netlink: 'syz.4.7974': attribute type 10 has an invalid length. [ 1064.456547][ T129] i2c-cp2615: probe of 4-1:0.1 failed with error -22 [ 1064.501277][T22276] team0: Device veth1_macvtap failed to register rx_handler [ 1064.680097][ T129] usb 4-1: USB disconnect, device number 120 [ 1064.895569][T22290] loop1: detected capacity change from 0 to 256 [ 1064.962928][T22293] netlink: 'syz.0.7983': attribute type 5 has an invalid length. [ 1065.013455][T22293] device ip6erspan0 entered promiscuous mode [ 1065.437967][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1065.444554][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1066.112777][T22338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8005'. [ 1066.274771][T22337] loop4: detected capacity change from 0 to 4096 [ 1066.300190][T22337] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1066.534820][ T4273] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 1066.553444][ T4273] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1066.575991][ T4273] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 1066.758953][T22353] netlink: 'syz.2.8012': attribute type 10 has an invalid length. [ 1067.021212][T22353] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1067.555277][T22377] netlink: 'syz.0.8023': attribute type 1 has an invalid length. [ 1067.600419][T22377] netlink: 192 bytes leftover after parsing attributes in process `syz.0.8023'. [ 1068.331562][T22409] netlink: 'syz.0.8039': attribute type 10 has an invalid length. [ 1068.354082][T10260] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1068.395972][T22402] nvme_fabrics: missing parameter 'nqn=%s' [ 1068.414829][T22409] team0: Device veth1_macvtap failed to register rx_handler [ 1068.554557][ T26] audit: type=1326 audit(2000001474.677:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.1.8041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226279e159 code=0x7ffc0000 [ 1068.585085][T10260] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 1068.603382][ T4368] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1068.616133][T10260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.638356][T10260] usb 3-1: Product: syz [ 1068.665647][ T26] audit: type=1326 audit(2000001474.677:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.1.8041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226279e159 code=0x7ffc0000 [ 1068.675981][T10260] usb 3-1: Manufacturer: syz [ 1068.739604][T10260] usb 3-1: SerialNumber: syz [ 1068.744958][ T26] audit: type=1326 audit(2000001474.817:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.1.8041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226279e159 code=0x7ffc0000 [ 1068.772546][ T26] audit: type=1326 audit(2000001474.817:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.1.8041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226279e159 code=0x7ffc0000 [ 1068.851098][ T4368] usb 4-1: Using ep0 maxpacket: 16 [ 1068.858506][ T4368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.877748][ T26] audit: type=1326 audit(2000001474.817:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.1.8041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f226279e159 code=0x7ffc0000 [ 1068.925594][ T4368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.952585][ T4368] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1068.973959][ T26] audit: type=1326 audit(2000001474.817:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.1.8041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226279e159 code=0x7ffc0000 [ 1069.010702][T10260] usb 3-1: reset high-speed USB device number 127 using dummy_hcd [ 1069.015851][ T4368] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1069.035087][ T4368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.049381][ T26] audit: type=1326 audit(2000001474.817:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.1.8041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226279e159 code=0x7ffc0000 [ 1069.073430][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.088478][ T4368] usb 4-1: config 0 descriptor?? [ 1069.108104][ T4368] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input77 [ 1069.120614][ T26] audit: type=1326 audit(2000001474.817:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.1.8041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f226279e159 code=0x7ffc0000 [ 1069.145278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.155973][ T3623] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1069.171045][ T3623] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1069.196603][ T3623] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1069.219882][ T26] audit: type=1326 audit(2000001474.817:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22412 comm="syz.1.8041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f226279e159 code=0x7ffc0000 [ 1069.251298][ T3623] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1069.319417][T10260] usb 3-1: driver API: 1.9.9 2016-02-15 [1-1] [ 1069.325770][T10260] usb 3-1: firmware API: 1.9.6 2012-07-07 [ 1069.403293][ T4352] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1069.450945][ T3623] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1069.466606][ T3623] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1069.501069][T22405] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1069.533020][ T3623] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1069.552234][ T129] usb 4-1: USB disconnect, device number 121 [ 1069.562944][ T3623] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 1069.687347][ C0] usb 3-1: received invalid command response:got -4, instead of 0 [ 1069.695261][ C0] usb 3-1: restart device (9) [ 1069.911549][ T4320] usb 3-1: USB disconnect, device number 127 [ 1069.971839][T22440] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1070.460196][ T14] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 1070.485586][T10260] usb 3-1: firmware upload failed (-110). [ 1070.690574][ T14] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1070.735086][ T14] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1070.743895][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1070.769588][ T14] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1070.799544][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1070.825178][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1070.871410][ T14] usb 1-1: string descriptor 0 read error: -22 [ 1070.883877][T22471] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1070.897045][ T14] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1070.914329][T22471] overlayfs: missing 'lowerdir' [ 1070.934606][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.946288][ T14] usb 1-1: config 0 descriptor?? [ 1070.961701][T22447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1071.006120][ T14] hub 1-1:0.0: bad descriptor, ignoring hub [ 1071.012134][ T14] hub: probe of 1-1:0.0 failed with error -5 [ 1071.047879][ T14] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input78 [ 1071.179477][ T26] audit: type=1326 audit(2000001477.137:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22476 comm="syz.1.8073" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226279e159 code=0x7ffc0000 [ 1071.324205][ T14] usb 1-1: USB disconnect, device number 125 [ 1071.341836][T22480] loop1: detected capacity change from 0 to 512 [ 1071.370140][T22480] EXT4-fs: Ignoring removed oldalloc option [ 1071.458797][T22480] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.8073: invalid block [ 1071.526064][T22487] overlayfs: conflicting options: userxattr,redirect_dir=off [ 1071.534787][T22480] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.8073: invalid indirect mapped block 1024 (level 0) [ 1071.558617][T22480] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.8073: bg 0: block 35: padding at end of block bitmap is not set [ 1071.589587][T22480] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1071.627950][T22480] EXT4-fs (loop1): 1 truncate cleaned up [ 1071.633693][T22480] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1071.804331][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 1071.993667][T22502] device netdevsim0 entered promiscuous mode [ 1072.266122][T22515] CIFS: Attempting to mount \\127.0.0.1\share [ 1072.310715][T22515] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1072.318658][T22515] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1072.706531][T22530] loop4: detected capacity change from 0 to 8 [ 1072.746377][T22534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8098'. [ 1072.790956][T22530] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1072.812015][T22530] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1072.883034][T22532] loop2: detected capacity change from 0 to 4096 [ 1072.947055][T22532] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 1073.017211][T22536] netlink: 196 bytes leftover after parsing attributes in process `syz.3.8101'. [ 1073.059860][T22536] netlink: 196 bytes leftover after parsing attributes in process `syz.3.8101'. [ 1073.086797][T22536] netlink: 19 bytes leftover after parsing attributes in process `syz.3.8101'. [ 1073.314538][T22545] misc userio: The device must be registered before sending interrupts [ 1073.622469][T22555] loop1: detected capacity change from 0 to 164 [ 1073.936935][T22568] netlink: 'syz.1.8116': attribute type 1 has an invalid length. [ 1074.239645][T22576] loop2: detected capacity change from 0 to 64 [ 1074.452755][T22586] netlink: 'syz.1.8125': attribute type 1 has an invalid length. [ 1074.478810][T22586] netlink: 216 bytes leftover after parsing attributes in process `syz.1.8125'. [ 1074.742092][T22594] netlink: 'syz.4.8129': attribute type 10 has an invalid length. [ 1074.753091][T22593] delete_channel: no stack [ 1074.841083][T22594] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1075.000413][T22601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8133'. [ 1075.047315][T22601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8133'. [ 1075.271597][T22607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1075.331372][T22612] netlink: 'syz.4.8138': attribute type 3 has an invalid length. [ 1075.352912][T22582] loop3: detected capacity change from 0 to 32768 [ 1075.385166][T22582] jfs_mount: dbMount failed w/rc = -22 [ 1075.408713][T22582] Mount JFS Failure: -22 [ 1075.444990][T22582] jfs_mount failed w/return code = -22 [ 1075.887632][T22628] Illegal XDP return value 4294967274 on prog (id 487) dev N/A, expect packet loss! [ 1075.997397][ T9129] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1076.152303][T22636] netlink: 'syz.3.8151': attribute type 12 has an invalid length. [ 1076.200455][ T9129] usb 1-1: Using ep0 maxpacket: 16 [ 1076.211610][T22636] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8151'. [ 1076.227757][ T9129] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1076.256546][ T9129] usb 1-1: string descriptor 0 read error: -22 [ 1076.273773][ T9129] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1076.335440][ T9129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.519206][T22648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8156'. [ 1076.619351][ T9129] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 1076.690423][ T4679] udevd[4679]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1076.716192][T22648] netlink: set zone limit has 4 unknown bytes [ 1076.794758][T22654] loop1: detected capacity change from 0 to 512 [ 1076.848487][ T14] usb 1-1: USB disconnect, device number 126 [ 1076.911467][T22654] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1076.942349][T22657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8160'. [ 1076.991581][T22654] ext4 filesystem being mounted at /1649/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.252772][T22666] loop4: detected capacity change from 0 to 256 [ 1077.310280][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 1078.289314][T22703] netlink: 'syz.4.8183': attribute type 41 has an invalid length. [ 1078.327692][T22703] netlink: 'syz.4.8183': attribute type 4 has an invalid length. [ 1078.352962][T22703] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8183'. [ 1078.453625][T22703] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1079.555982][T22746] netlink: 'syz.1.8203': attribute type 21 has an invalid length. [ 1079.581131][T22746] IPv6: NLM_F_CREATE should be specified when creating new route [ 1080.065093][T22764] xt_hashlimit: size too large, truncated to 1048576 [ 1080.124053][T22764] xt_hashlimit: invalid rate [ 1080.313764][T22774] netlink: 'syz.4.8218': attribute type 1 has an invalid length. [ 1080.763276][T22790] netlink: 348 bytes leftover after parsing attributes in process `syz.1.8226'. [ 1081.795037][T22828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8245'. [ 1081.854793][T22831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8247'. [ 1081.897831][T22833] comedi comedi3: pcl724: I/O port conflict (0x7,4) [ 1082.392934][T22844] netlink: 'syz.4.8253': attribute type 1 has an invalid length. [ 1082.507442][ T4368] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1082.721349][ T4368] usb 1-1: Using ep0 maxpacket: 16 [ 1082.728450][ T4368] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1082.778951][ T4368] usb 1-1: config 0 has no interface number 0 [ 1082.810983][ T4368] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1082.831626][ T4368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.849516][ T4368] usb 1-1: Product: syz [ 1082.853849][ T4368] usb 1-1: Manufacturer: syz [ 1082.858494][ T4368] usb 1-1: SerialNumber: syz [ 1082.920907][ T4368] usb 1-1: config 0 descriptor?? [ 1082.937424][ T4368] hub 1-1:0.132: bad descriptor, ignoring hub [ 1082.943575][ T4368] hub: probe of 1-1:0.132 failed with error -5 [ 1082.983751][ T4368] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input80 [ 1083.561318][T22871] tipc: Can't bind to reserved service type 2 [ 1084.208531][T22882] loop3: detected capacity change from 0 to 8192 [ 1084.260384][T22882] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1084.319100][T22890] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1084.369474][T22890] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1084.977519][T22910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1084.985629][T22910] IPv6: NLM_F_CREATE should be set when creating new route [ 1084.992983][T22910] IPv6: NLM_F_CREATE should be set when creating new route [ 1085.143074][T22916] loop3: detected capacity change from 0 to 128 [ 1085.407170][T22923] netlink: 'syz.4.8291': attribute type 2 has an invalid length. [ 1085.468762][T22923] netlink: 'syz.4.8291': attribute type 4 has an invalid length. [ 1085.476587][T22923] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8291'. [ 1085.712822][T22935] delete_channel: no stack [ 1086.293951][T22958] netlink: 'syz.2.8304': attribute type 13 has an invalid length. [ 1086.328054][T22960] CIFS mount error: No usable UNC path provided in device string! [ 1086.328054][T22960] [ 1086.399578][T22960] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1086.534106][T22960] Process accounting resumed [ 1086.794488][T22976] cgroup: No subsys list or none specified [ 1086.907374][T22981] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 1086.997482][ T4368] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1087.042665][T22984] netlink: 'syz.0.8315': attribute type 12 has an invalid length. [ 1087.202236][ T4368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.245759][ T4368] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1087.287989][T22991] tmpfs: Bad value for 'mpol' [ 1087.290521][ T4368] usb 5-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 1087.355681][ T4368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.396215][ T4368] usb 5-1: Product: syz [ 1087.410109][ T4368] usb 5-1: Manufacturer: syz [ 1087.420902][ T4368] usb 5-1: SerialNumber: syz [ 1087.448735][T22996] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8320'. [ 1087.469454][ T4368] zaurus: probe of 5-1:1.0 failed with error -22 [ 1087.502799][T22996] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8320'. [ 1087.688033][ T4368] usb 5-1: USB disconnect, device number 11 [ 1087.944636][T10260] usb 1-1: USB disconnect, device number 127 [ 1088.262489][T23018] loop2: detected capacity change from 0 to 4096 [ 1088.308785][T23018] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 1089.349073][ T14] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1089.407934][T23064] i2c i2c-0: Invalid block write size 253 [ 1089.586627][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1089.627123][ T14] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1089.658039][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.925179][ T14] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 1089.959021][T23081] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1090.088175][ T129] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1090.169235][ T14] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 66:81:6e:73:23:7d [ 1090.218727][ T14] usb 4-1: USB disconnect, device number 122 [ 1090.249139][ T14] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 1090.316865][ T129] usb 2-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1090.342922][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.385942][ T129] usb 2-1: Product: syz [ 1090.390234][ T129] usb 2-1: Manufacturer: syz [ 1090.438294][ T129] usb 2-1: SerialNumber: syz [ 1090.452106][ T129] usb 2-1: config 0 descriptor?? [ 1090.471684][ T129] hub 2-1:0.0: bad descriptor, ignoring hub [ 1090.477675][ T129] hub: probe of 2-1:0.0 failed with error -5 [ 1090.511042][ T129] usbsevseg 2-1:0.0: USB 7 Segment device now attached [ 1090.715427][T23102] mmap: syz.0.8364 (23102): VmData 41644032 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1090.760373][T23104] rdma_rxe: rxe creation allowed on top of a real device only [ 1090.803190][ T5770] usb 2-1: USB disconnect, device number 125 [ 1090.814108][ T5770] usbsevseg 2-1:0.0: USB 7 Segment now disconnected [ 1091.839779][T23147] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1091.936103][ T5770] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1092.142190][ T5770] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1092.185778][ T5770] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1092.235827][ T5770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.523743][ T5770] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 1092.751344][ T5770] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, e6:94:93:ed:c6:5d [ 1092.795466][ T5770] usb 2-1: USB disconnect, device number 126 [ 1092.819402][ T5770] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 1092.834353][ T129] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1092.909612][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 1092.909702][ T26] audit: type=1326 audit(2000001497.474:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.3.8395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d919e159 code=0x7ffc0000 [ 1093.026438][ T26] audit: type=1326 audit(2000001497.492:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.3.8395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d919e159 code=0x7ffc0000 [ 1093.062763][ T129] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1093.092741][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.119171][ T129] usb 5-1: Product: syz [ 1093.133271][ T129] usb 5-1: Manufacturer: syz [ 1093.148278][ T129] usb 5-1: SerialNumber: syz [ 1093.186358][ T26] audit: type=1326 audit(2000001497.511:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.3.8395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d919e159 code=0x7ffc0000 [ 1093.304999][ T129] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1093.337645][ T26] audit: type=1326 audit(2000001497.511:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.3.8395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d919e159 code=0x7ffc0000 [ 1093.400125][ T26] audit: type=1326 audit(2000001497.511:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.3.8395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f16d919e159 code=0x7ffc0000 [ 1093.487473][ T26] audit: type=1326 audit(2000001497.511:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.3.8395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d919e159 code=0x7ffc0000 [ 1093.585458][ T9129] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1093.674183][ T26] audit: type=1326 audit(2000001497.511:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.3.8395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d919e159 code=0x7ffc0000 [ 1093.674240][ T26] audit: type=1326 audit(2000001497.511:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.3.8395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f16d919e159 code=0x7ffc0000 [ 1093.674312][ T26] audit: type=1326 audit(2000001497.511:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.3.8395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f16d919e159 code=0x7ffc0000 [ 1093.739398][ T14] usb 5-1: USB disconnect, device number 12 [ 1093.796577][ T9129] usb 3-1: Using ep0 maxpacket: 8 [ 1093.879272][T23204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8402'. [ 1093.925820][ T9129] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1093.956127][ T9129] usb 3-1: config 28 has an invalid interface number: 157 but max is 0 [ 1093.976966][ T9129] usb 3-1: config 28 has no interface number 0 [ 1093.987862][ T9129] usb 3-1: config 28 interface 157 has no altsetting 0 [ 1094.044775][ T9129] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=38.c2 [ 1094.073997][ T9129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.082079][ T9129] usb 3-1: Product: syz [ 1094.118918][ T9129] usb 3-1: Manufacturer: syz [ 1094.123640][ T9129] usb 3-1: SerialNumber: syz [ 1094.466972][ T9129] usb 3-1: USB disconnect, device number 2 [ 1094.512682][ T129] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1094.555926][ T129] ath9k_htc: Failed to initialize the device [ 1094.582645][ T14] usb 5-1: ath9k_htc: USB layer deinitialized [ 1095.619670][T23251] loop1: detected capacity change from 0 to 4096 [ 1095.664119][T23251] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1095.853663][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 1095.999847][ T4320] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1096.212042][ T4320] usb 3-1: Using ep0 maxpacket: 32 [ 1096.219163][ T4320] usb 3-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 1096.251632][ T4320] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.276364][ T4319] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1096.301520][ T4320] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 1096.318240][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.327992][ T4320] usb 3-1: Product: syz [ 1096.352960][ T4320] usb 3-1: Manufacturer: syz [ 1096.375137][ T4320] usb 3-1: SerialNumber: syz [ 1096.393226][ T4320] usb 3-1: config 0 descriptor?? [ 1096.421246][ T4320] qmi_wwan 3-1:0.0: bogus CDC Union: master=177, slave=10 [ 1096.439773][ T4320] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 1096.492020][ T4319] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1096.506139][ T4319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.518035][ T4319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1096.532969][ T4319] usb 2-1: config 1 has no interface number 0 [ 1096.539133][ T4319] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1096.555976][ T4319] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1096.594992][ T4319] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1096.627620][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.642422][ T4319] usb 2-1: Product: syz [ 1096.646718][ T4319] usb 2-1: Manufacturer: syz [ 1096.656451][ T4319] usb 2-1: SerialNumber: syz [ 1096.683879][ T9129] usb 3-1: USB disconnect, device number 3 [ 1097.127503][ T4320] usb 2-1: USB disconnect, device number 127 [ 1097.421804][T23297] loop2: detected capacity change from 0 to 2048 [ 1097.473487][T23297] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1097.567591][ T26] audit: type=1800 audit(2000001501.824:79): pid=23297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8445" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 1097.883829][T23309] loop1: detected capacity change from 0 to 512 [ 1097.919804][T23309] EXT4-fs: inline encryption not supported [ 1097.967732][T23309] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1098.105459][T23309] EXT4-fs error (device loop1): __ext4_iget:5102: inode #11: block 65530: comm syz.1.8450: invalid block [ 1098.137675][T23309] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.8450: couldn't read orphan inode 11 (err -117) [ 1098.210367][T23309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1098.246151][T23321] sctp: [Deprecated]: syz.3.8453 (pid 23321) Use of int in max_burst socket option. [ 1098.246151][T23321] Use struct sctp_assoc_value instead [ 1098.423702][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 1098.616782][T23333] No such timeout policy "syz1" [ 1099.433112][T23350] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1099.654427][ T9129] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1099.880096][ T9129] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.905315][ T9129] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1099.936287][ T9129] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1099.974549][ T9129] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1100.003958][ T9129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.262446][ T9129] cxacru 5-1:1.0: receive of cm 0x90 failed (-71) [ 1100.272636][ T9129] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 1100.317573][ T9129] cxacru: probe of 5-1:1.0 failed with error -22 [ 1100.349687][ T9129] usb 5-1: USB disconnect, device number 13 [ 1100.781481][T23407] loop1: detected capacity change from 0 to 4096 [ 1100.803032][T23407] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1101.156667][T23417] loop3: detected capacity change from 0 to 256 [ 1101.223323][T23417] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1101.315536][T23423] netlink: 'syz.4.8505': attribute type 13 has an invalid length. [ 1101.358800][T23417] exFAT-fs (loop3): hint_cluster is invalid (17) [ 1101.420419][T23417] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 1101.494624][T23417] exFAT-fs (loop3): Filesystem has been set read-only [ 1101.517453][T23417] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 1101.775327][T23433] netlink: 'syz.4.8510': attribute type 10 has an invalid length. [ 1101.798575][T23433] team0: Port device virt_wifi0 added [ 1102.122348][T23449] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1102.155774][ T9129] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1102.362156][ T9129] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1102.378771][ T9129] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1102.412172][ T9129] usb 4-1: Product: syz [ 1102.416417][ T9129] usb 4-1: SerialNumber: syz [ 1102.458564][ T9129] usb 4-1: config 0 descriptor?? [ 1102.515928][T23459] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1102.575088][T23459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1102.613850][T23459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1102.630355][ T4368] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1102.690884][ T9129] hso 4-1:0.0: Can't find BULK IN endpoint [ 1102.839091][ T4368] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1102.850121][ T4368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.885723][ T4368] usb 2-1: Product: syz [ 1102.890002][ T4368] usb 2-1: Manufacturer: syz [ 1102.907256][ T4368] usb 2-1: SerialNumber: syz [ 1102.923153][ T4368] usb 2-1: config 0 descriptor?? [ 1102.965881][ T4368] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1102.972919][ T9129] usb 4-1: USB disconnect, device number 123 [ 1103.026623][T23472] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 1103.046790][T23472] syz.2.8529: attempt to access beyond end of device [ 1103.046790][T23472] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1103.362324][T23482] binder: Bad value for 'stats' [ 1103.418033][ T9129] usb 2-1: USB disconnect, device number 2 [ 1104.165065][ T26] audit: type=1326 audit(2000001507.988:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23505 comm="syz.3.8546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d919e159 code=0x7ffc0000 [ 1104.310755][ T26] audit: type=1326 audit(2000001508.007:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23505 comm="syz.3.8546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f16d919e159 code=0x7ffc0000 [ 1104.434363][ T26] audit: type=1326 audit(2000001508.016:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23505 comm="syz.3.8546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d919e159 code=0x7ffc0000 [ 1104.571193][ T26] audit: type=1326 audit(2000001508.016:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23505 comm="syz.3.8546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d919e159 code=0x7ffc0000 [ 1105.156009][T23546] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8565'. [ 1105.657565][T23563] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1105.683446][ T4368] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1105.704175][T23563] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1105.798823][T23563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1105.828155][T23563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1105.848899][T23563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1105.926624][ T4368] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.961981][ T4368] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1106.002216][ T4368] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1106.024139][ T4368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.044750][T23574] loop1: detected capacity change from 0 to 256 [ 1106.053076][ T4368] usb 4-1: Product: syz [ 1106.057342][ T4368] usb 4-1: Manufacturer: syz [ 1106.075858][ T4368] usb 4-1: SerialNumber: syz [ 1106.328836][ T4368] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1106.365002][ T4368] usb 4-1: USB disconnect, device number 124 [ 1106.577809][T23586] loop4: detected capacity change from 0 to 256 [ 1106.737422][T23592] loop1: detected capacity change from 0 to 128 [ 1106.827388][T23592] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1106.855114][T23592] FAT-fs (loop1): Filesystem has been set read-only [ 1106.880301][T23592] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1106.934421][T23592] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1106.975786][T23592] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1107.030471][T23592] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1107.057598][T23592] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1107.071039][T23592] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1107.101651][T23602] VFS: could not find a valid V7 on nullb0. [ 1107.130031][T23592] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1107.162563][T23592] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1107.188047][T23592] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1107.267768][ T26] audit: type=1800 audit(2000001510.898:84): pid=23592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8589" name="file1" dev="loop1" ino=1048618 res=0 errno=0 [ 1107.319249][T23592] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1107.421605][T23611] CIFS: VFS: Malformed UNC in devname [ 1107.876926][T23626] netlink: 320 bytes leftover after parsing attributes in process `syz.0.8606'. [ 1107.940801][T23630] loop2: detected capacity change from 0 to 16 [ 1107.991809][T23630] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1108.023180][ T26] audit: type=1326 audit(2000001511.599:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23631 comm="syz.4.8609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef19e159 code=0x7ffc0000 [ 1108.152739][ T26] audit: type=1326 audit(2000001511.599:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23631 comm="syz.4.8609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f2cef19e159 code=0x7ffc0000 [ 1108.278252][ T26] audit: type=1326 audit(2000001511.599:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23631 comm="syz.4.8609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef19e159 code=0x7ffc0000 [ 1108.387915][ T26] audit: type=1326 audit(2000001511.599:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23631 comm="syz.4.8609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef19e159 code=0x7ffc0000 [ 1108.548398][T23648] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1108.804464][T23658] loop3: detected capacity change from 0 to 16 [ 1108.881494][T23658] erofs: (device loop3): mounted with root inode @ nid 36. [ 1108.910429][T23660] overlayfs: missing 'lowerdir' [ 1109.225594][T23674] loop4: detected capacity change from 0 to 256 [ 1109.836681][T23687] loop3: detected capacity change from 0 to 512 [ 1109.879312][T23687] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1110.037308][T23695] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 1110.262961][T23703] x_tables: duplicate underflow at hook 1 [ 1110.712622][T23719] loop4: detected capacity change from 0 to 8 [ 1110.746340][T23719] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1110.789343][ T4679] udevd[4679]: incorrect cramfs checksum on /dev/loop4 [ 1110.824665][ T4320] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1110.917444][ T4679] udevd[4679]: incorrect cramfs checksum on /dev/loop4 [ 1111.088317][T23725] loop1: detected capacity change from 0 to 2048 [ 1111.097948][T23731] xt_TCPMSS: Only works on TCP SYN packets [ 1111.161370][T23733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8658'. [ 1111.219263][T23725] ================================================================== [ 1111.227414][T23725] BUG: KASAN: slab-out-of-bounds in __ext4_iget+0x2bb/0x3e80 [ 1111.234951][T23725] Read of size 8 at addr ffff8880551f7f30 by task syz.1.8655/23725 [ 1111.242959][T23725] [ 1111.245331][T23725] CPU: 1 PID: 23725 Comm: syz.1.8655 Not tainted syzkaller #0 [ 1111.252920][T23725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1111.263028][T23725] Call Trace: [ 1111.266349][T23725] [ 1111.269319][T23725] dump_stack_lvl+0x188/0x24e [ 1111.274057][T23725] ? __lock_acquire+0x7c40/0x7c40 [ 1111.279138][T23725] ? show_regs_print_info+0x12/0x12 [ 1111.284404][T23725] ? load_image+0x410/0x410 [ 1111.289034][T23725] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1111.294547][T23725] ? __virt_addr_valid+0x188/0x540 [ 1111.299795][T23725] ? __virt_addr_valid+0x467/0x540 [ 1111.304982][T23725] ? __ext4_iget+0x2bb/0x3e80 [ 1111.309710][T23725] print_report+0xa8/0x210 [ 1111.314224][T23725] kasan_report+0x10b/0x140 [ 1111.318861][T23725] ? __ext4_iget+0x2bb/0x3e80 [ 1111.323598][T23725] __ext4_iget+0x2bb/0x3e80 [ 1111.328160][T23725] ? lockdep_softirqs_off+0x430/0x430 [ 1111.333587][T23725] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1111.339519][T23725] ? apply_workqueue_attrs+0x180/0x180 [ 1111.345167][T23725] ? ext4_get_projid+0x140/0x140 [ 1111.350142][T23725] ? mb_cache_create+0x3f9/0x510 [ 1111.355175][T23725] ext4_fill_super+0x614c/0x78f0 [ 1111.360253][T23725] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1111.366570][T23725] ? set_blocksize+0x1d0/0x470 [ 1111.371594][T23725] ? sb_set_blocksize+0xa5/0xe0 [ 1111.376476][T23725] get_tree_bdev+0x3e6/0x610 [ 1111.381099][T23725] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1111.387370][T23725] vfs_get_tree+0x88/0x270 [ 1111.391818][T23725] do_new_mount+0x247/0xa40 [ 1111.396356][T23725] __se_sys_mount+0x2e3/0x3d0 [ 1111.401151][T23725] ? __x64_sys_mount+0xc0/0xc0 [ 1111.405964][T23725] ? lockdep_hardirqs_on+0x94/0x140 [ 1111.411201][T23725] ? __x64_sys_mount+0x1c/0xc0 [ 1111.416002][T23725] do_syscall_64+0x4c/0xa0 [ 1111.420467][T23725] ? clear_bhb_loop+0x60/0xb0 [ 1111.425187][T23725] ? clear_bhb_loop+0x60/0xb0 [ 1111.429909][T23725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1111.435843][T23725] RIP: 0033:0x7f226279f3ca [ 1111.440285][T23725] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1111.460009][T23725] RSP: 002b:00007f22636eae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1111.468486][T23725] RAX: ffffffffffffffda RBX: 00007f22636eaee0 RCX: 00007f226279f3ca [ 1111.476482][T23725] RDX: 0000200000001140 RSI: 00002000000007c0 RDI: 00007f22636eaea0 [ 1111.484483][T23725] RBP: 0000200000001140 R08: 00007f22636eaee0 R09: 0000000000400c84 [ 1111.492480][T23725] R10: 0000000000400c84 R11: 0000000000000246 R12: 00002000000007c0 [ 1111.500476][T23725] R13: 00007f22636eaea0 R14: 0000000000000792 R15: 0000200000000000 [ 1111.508481][T23725] [ 1111.511528][T23725] [ 1111.513873][T23725] Allocated by task 12872: [ 1111.518303][T23725] kasan_set_track+0x4b/0x70 [ 1111.522933][T23725] __kasan_slab_alloc+0x6b/0x80 [ 1111.527821][T23725] slab_post_alloc_hook+0x4b/0x490 [ 1111.532967][T23725] kmem_cache_alloc+0x18b/0x2f0 [ 1111.537842][T23725] radix_tree_node_alloc+0x197/0x3a0 [ 1111.543180][T23725] idr_get_free+0x28b/0xa10 [ 1111.547732][T23725] idr_alloc_cyclic+0x286/0x610 [ 1111.552610][T23725] __kernfs_new_node+0x135/0x7f0 [ 1111.557571][T23725] kernfs_new_node+0x148/0x250 [ 1111.562356][T23725] __kernfs_create_file+0x47/0x2e0 [ 1111.567505][T23725] cgroup_addrm_files+0x80c/0xd50 [ 1111.572629][T23725] css_populate_dir+0x157/0x3b0 [ 1111.577502][T23725] cgroup_apply_control_enable+0x641/0xb00 [ 1111.583331][T23725] cgroup_mkdir+0xc7f/0xe70 [ 1111.587864][T23725] kernfs_iop_mkdir+0x23d/0x3d0 [ 1111.592740][T23725] vfs_mkdir+0x386/0x570 [ 1111.597004][T23725] do_mkdirat+0x1d8/0x440 [ 1111.601357][T23725] __x64_sys_mkdirat+0x85/0x90 [ 1111.606146][T23725] do_syscall_64+0x4c/0xa0 [ 1111.610594][T23725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1111.616516][T23725] [ 1111.618868][T23725] Last potentially related work creation: [ 1111.624638][T23725] kasan_save_stack+0x3a/0x60 [ 1111.629354][T23725] __kasan_record_aux_stack+0xb2/0xc0 [ 1111.634753][T23725] call_rcu+0x14f/0x950 [ 1111.638972][T23725] xas_store+0x1025/0x19e0 [ 1111.643446][T23725] list_lru_destroy+0x2b2/0x650 [ 1111.648391][T23725] deactivate_locked_super+0xab/0xf0 [ 1111.653701][T23725] cleanup_mnt+0x471/0x4f0 [ 1111.658145][T23725] task_work_run+0x1d0/0x260 [ 1111.662790][T23725] exit_to_user_mode_loop+0xe6/0x110 [ 1111.668163][T23725] exit_to_user_mode_prepare+0xee/0x180 [ 1111.673744][T23725] syscall_exit_to_user_mode+0x16/0x40 [ 1111.679229][T23725] do_syscall_64+0x58/0xa0 [ 1111.683685][T23725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1111.689611][T23725] [ 1111.691956][T23725] Second to last potentially related work creation: [ 1111.698553][T23725] kasan_save_stack+0x3a/0x60 [ 1111.703286][T23725] __kasan_record_aux_stack+0xb2/0xc0 [ 1111.709062][T23725] call_rcu+0x14f/0x950 [ 1111.713305][T23725] delete_node+0x5a5/0xa30 [ 1111.717789][T23725] radix_tree_delete_item+0x2df/0x3f0 [ 1111.723291][T23725] free_pid+0x17d/0x260 [ 1111.727571][T23725] release_task+0xced/0x1680 [ 1111.732287][T23725] wait_consider_task+0x19e1/0x2e70 [ 1111.737524][T23725] do_wait+0x31d/0xb80 [ 1111.741635][T23725] kernel_wait4+0x22b/0x2b0 [ 1111.746202][T23725] __x64_sys_wait4+0x163/0x230 [ 1111.750995][T23725] do_syscall_64+0x4c/0xa0 [ 1111.755444][T23725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1111.761379][T23725] [ 1111.763732][T23725] The buggy address belongs to the object at ffff8880551f7c80 [ 1111.763732][T23725] which belongs to the cache radix_tree_node of size 576 [ 1111.778168][T23725] The buggy address is located 112 bytes to the right of [ 1111.778168][T23725] 576-byte region [ffff8880551f7c80, ffff8880551f7ec0) [ 1111.791991][T23725] [ 1111.794346][T23725] The buggy address belongs to the physical page: [ 1111.800786][T23725] page:ffffea0001547d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880551f6940 pfn:0x551f4 [ 1111.812266][T23725] head:ffffea0001547d00 order:2 compound_mapcount:0 compound_pincount:0 [ 1111.820612][T23725] memcg:ffff8880231ff101 [ 1111.824903][T23725] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1111.832933][T23725] raw: 00fff00000010200 ffffea0001c58608 ffffea0001549508 ffff88801744fdc0 [ 1111.841540][T23725] raw: ffff8880551f6940 0000000000170006 00000001ffffffff ffff8880231ff101 [ 1111.850141][T23725] page dumped because: kasan: bad access detected [ 1111.856586][T23725] page_owner tracks the page as allocated [ 1111.862326][T23725] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x152810(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4583, tgid 4581 (syz.0.101), ts 99742209461, free_ts 25660013909 [ 1111.884497][T23725] post_alloc_hook+0x173/0x1a0 [ 1111.889360][T23725] get_page_from_freelist+0x206b/0x2180 [ 1111.894944][T23725] __alloc_pages+0x1ec/0x4f0 [ 1111.899568][T23725] alloc_slab_page+0x5d/0x180 [ 1111.904303][T23725] new_slab+0x87/0x2d0 [ 1111.908397][T23725] ___slab_alloc+0xbc5/0x1240 [ 1111.913103][T23725] kmem_cache_alloc_lru+0x104/0x2e0 [ 1111.918331][T23725] xas_create+0x6ee/0x1720 [ 1111.922773][T23725] xas_store+0x9f/0x19e0 [ 1111.927045][T23725] __filemap_add_folio+0x6e6/0x1920 [ 1111.932339][T23725] filemap_add_folio+0xa8/0x3d0 [ 1111.937219][T23725] do_read_cache_folio+0x1d7/0x790 [ 1111.942356][T23725] read_part_sector+0xce/0x360 [ 1111.947180][T23725] amiga_partition+0xdc/0x17e0 [ 1111.951963][T23725] bdev_disk_changed+0x7f9/0x1450 [ 1111.957007][T23725] loop_set_status+0x72a/0x910 [ 1111.961846][T23725] page last free stack trace: [ 1111.966557][T23725] free_unref_page_prepare+0x8e5/0x9e0 [ 1111.972069][T23725] free_unref_page+0x2e/0x3f0 [ 1111.976778][T23725] free_contig_range+0x9d/0x150 [ 1111.981652][T23725] destroy_args+0xef/0xa0e [ 1111.986155][T23725] debug_vm_pgtable+0x33c/0x38e [ 1111.991032][T23725] do_one_initcall+0x257/0x800 [ 1111.995836][T23725] do_initcall_level+0x13d/0x1ed [ 1112.000828][T23725] do_initcalls+0x4b/0x8a [ 1112.005178][T23725] kernel_init_freeable+0x401/0x5ab [ 1112.010395][T23725] kernel_init+0x19/0x1b0 [ 1112.014751][T23725] ret_from_fork+0x1f/0x30 [ 1112.019220][T23725] [ 1112.021565][T23725] Memory state around the buggy address: [ 1112.027211][T23725] ffff8880551f7e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1112.035298][T23725] ffff8880551f7e80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1112.043376][T23725] >ffff8880551f7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1112.051450][T23725] ^ [ 1112.057093][T23725] ffff8880551f7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1112.065177][T23725] ffff8880551f8000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1112.073278][T23725] ================================================================== [ 1112.081394][ C1] vkms_vblank_simulate: vblank timer overrun [ 1112.257863][T23725] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1112.265152][T23725] CPU: 0 PID: 23725 Comm: syz.1.8655 Not tainted syzkaller #0 [ 1112.272655][T23725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1112.282758][T23725] Call Trace: [ 1112.286080][T23725] [ 1112.289050][T23725] dump_stack_lvl+0x188/0x24e [ 1112.293882][T23725] ? memcpy+0x3c/0x60 [ 1112.297905][T23725] ? show_regs_print_info+0x12/0x12 [ 1112.303278][T23725] ? load_image+0x410/0x410 [ 1112.307845][T23725] panic+0x2d3/0x710 [ 1112.311801][T23725] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1112.318024][T23725] ? bpf_jit_dump+0xd0/0xd0 [ 1112.322585][T23725] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1112.328614][T23725] ? _raw_spin_unlock+0x40/0x40 [ 1112.333559][T23725] check_panic_on_warn+0x80/0xa0 [ 1112.338560][T23725] ? __ext4_iget+0x2bb/0x3e80 [ 1112.343277][T23725] end_report+0x66/0x110 [ 1112.347578][T23725] kasan_report+0x118/0x140 [ 1112.352141][T23725] ? __ext4_iget+0x2bb/0x3e80 [ 1112.356868][T23725] __ext4_iget+0x2bb/0x3e80 [ 1112.361442][T23725] ? lockdep_softirqs_off+0x430/0x430 [ 1112.366859][T23725] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1112.372805][T23725] ? apply_workqueue_attrs+0x180/0x180 [ 1112.378330][T23725] ? ext4_get_projid+0x140/0x140 [ 1112.383321][T23725] ? mb_cache_create+0x3f9/0x510 [ 1112.388331][T23725] ext4_fill_super+0x614c/0x78f0 [ 1112.393335][T23725] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1112.399638][T23725] ? set_blocksize+0x1d0/0x470 [ 1112.404457][T23725] ? sb_set_blocksize+0xa5/0xe0 [ 1112.409357][T23725] get_tree_bdev+0x3e6/0x610 [ 1112.414086][T23725] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1112.420384][T23725] vfs_get_tree+0x88/0x270 [ 1112.424866][T23725] do_new_mount+0x247/0xa40 [ 1112.429437][T23725] __se_sys_mount+0x2e3/0x3d0 [ 1112.434172][T23725] ? __x64_sys_mount+0xc0/0xc0 [ 1112.439009][T23725] ? lockdep_hardirqs_on+0x94/0x140 [ 1112.444255][T23725] ? __x64_sys_mount+0x1c/0xc0 [ 1112.449066][T23725] do_syscall_64+0x4c/0xa0 [ 1112.453541][T23725] ? clear_bhb_loop+0x60/0xb0 [ 1112.458364][T23725] ? clear_bhb_loop+0x60/0xb0 [ 1112.463124][T23725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1112.469075][T23725] RIP: 0033:0x7f226279f3ca [ 1112.473531][T23725] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.493182][T23725] RSP: 002b:00007f22636eae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1112.501635][T23725] RAX: ffffffffffffffda RBX: 00007f22636eaee0 RCX: 00007f226279f3ca [ 1112.509642][T23725] RDX: 0000200000001140 RSI: 00002000000007c0 RDI: 00007f22636eaea0 [ 1112.517656][T23725] RBP: 0000200000001140 R08: 00007f22636eaee0 R09: 0000000000400c84 [ 1112.525681][T23725] R10: 0000000000400c84 R11: 0000000000000246 R12: 00002000000007c0 [ 1112.533721][T23725] R13: 00007f22636eaea0 R14: 0000000000000792 R15: 0000200000000000 [ 1112.541728][T23725] [ 1112.545350][T23725] Kernel Offset: disabled [ 1112.549689][T23725] Rebooting in 86400 seconds..