last executing test programs: 3.227312991s ago: executing program 1 (id=2204): r0 = gettid() syz_open_procfs(r0, &(0x7f0000000080)='setgroups\x00') exit(0x3) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 2.595514817s ago: executing program 0 (id=2217): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xc2101, 0x0) exit(0x4000007) close_range(r0, 0xffffffffffffffff, 0x0) 2.337486873s ago: executing program 1 (id=2218): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) syz_usb_disconnect(r0) close(r1) 2.025879551s ago: executing program 2 (id=2221): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001300050000000000fcffffff07000017", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c000980", @ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x10040004}, 0x0) 1.932112703s ago: executing program 2 (id=2222): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='path_group \\1 /bin/true\n', 0x18) 1.868886664s ago: executing program 2 (id=2223): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) faccessat2(0xffffffffffffffff, 0x0, 0x100, 0x300) 1.675745589s ago: executing program 0 (id=2224): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xb3c4}, @TCA_FQ_CODEL_FLOWS={0xfffffe3b, 0x5, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xe}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x3, 0x9, 0x2, 0xffffffff, 0x3}}, {0x4}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.456998354s ago: executing program 0 (id=2225): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x2, 0x0) preadv2(r0, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/36, 0x24}], 0x1, 0x7ffffffe, 0x3, 0x0) 1.24612186s ago: executing program 0 (id=2226): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}], 0x1, 0x40) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000e40)={&(0x7f00000000c0)={0xa, 0x4, 0xa4000, @remote, 0x3}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000180)="491d726699250689", 0x8}, {0x0}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000580)}], 0x5, &(0x7f0000000d80)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2f}}}], 0x18}, 0x20009084) 1.168419712s ago: executing program 2 (id=2227): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/net/bond0/bonding/mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='ba', 0x2) 1.141626312s ago: executing program 0 (id=2228): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) exit(0x6) 999.793496ms ago: executing program 2 (id=2230): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="a9", 0x1}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) 909.670858ms ago: executing program 3 (id=2231): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 868.968069ms ago: executing program 2 (id=2232): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\x00\x00!\x00'}, @local=@item_4={0x3, 0x2, 0x0, "034d2500"}, @main=@item_4={0x3, 0x0, 0x9, "7488dffc"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) 685.685353ms ago: executing program 3 (id=2233): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x1, 0x0) write(r0, &(0x7f0000001540)='T', 0x1) 556.839686ms ago: executing program 1 (id=2234): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newtclass={0x47c, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x450, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x0, 0x3f1, 0x2, 0x5}, {0x8, 0x0, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x7, 0xffff, 0x8, 0x644}}, @TCA_HTB_CTAB={0x404, 0x3, [0xb, 0x3, 0x6, 0x8, 0xfffffffc, 0x9, 0xb, 0xfffffff9, 0x10000, 0x5, 0x2, 0x6, 0x8, 0x5a, 0x2, 0x1, 0x1, 0x2, 0x5, 0x0, 0xb3, 0x3, 0x0, 0x1, 0x800, 0x1ff, 0x922, 0x91, 0xa236f736, 0x8, 0x4, 0xff, 0x2, 0x10000, 0x5, 0x5, 0x0, 0x8000, 0x9, 0x8, 0xfffff800, 0x6, 0x0, 0xfffffffc, 0x5, 0xffff, 0x7, 0x0, 0x1, 0xf56, 0x1ff, 0x1, 0x2, 0x3, 0x5, 0x7, 0xfffffffb, 0xfffffff8, 0x7, 0x4, 0x1000, 0x6, 0x7f, 0x4, 0x9, 0x0, 0x80000000, 0x7, 0x0, 0x3ff, 0xe, 0x3, 0x2, 0x7, 0x4, 0x1, 0x1, 0x1, 0x96c, 0x4, 0x38, 0xc, 0x8001, 0x1, 0x1, 0x8668, 0x400, 0xb, 0x8, 0x7, 0x2400000, 0x6, 0x200, 0x9, 0xfffffff9, 0x0, 0x7, 0x6, 0x53d7, 0xfff, 0xffffffff, 0x5, 0x1, 0x400, 0xd, 0x9, 0x90, 0x8, 0x3, 0x2, 0x2, 0x80000000, 0x1, 0x1000, 0x6, 0xa, 0x7, 0x8, 0x4, 0x7, 0x0, 0x8, 0xffff, 0xfffff801, 0x8, 0x10000, 0xffff, 0x4, 0x8008, 0x5, 0x1, 0x9, 0x6, 0xfff, 0x4, 0xffff, 0x401, 0x579, 0xd, 0x1, 0xe62, 0xfffffff8, 0x3, 0x7, 0x0, 0x8, 0x80, 0x81, 0x9, 0x0, 0x1, 0x8, 0x80000001, 0x8, 0xfff, 0x9, 0x6, 0x7, 0x5, 0x6, 0x0, 0x4, 0x3, 0x0, 0xfffffffe, 0x7f, 0x1, 0x2, 0x400, 0x3, 0x80000000, 0x7, 0x5, 0x6, 0x8, 0x8, 0x449f, 0x5, 0x4, 0x4, 0x9, 0x0, 0x168, 0xcec, 0x4de, 0x7, 0x0, 0x2, 0x6, 0x3, 0x7, 0x61a, 0x7, 0x4, 0x5, 0x7, 0x7, 0x0, 0x7f, 0x4, 0xa14, 0x90000000, 0x9, 0x2, 0x8000, 0x200, 0x1, 0x242, 0x6, 0x3, 0xa, 0x2f, 0xfff, 0x0, 0x0, 0x19, 0x6, 0x3, 0x0, 0xfffffffd, 0x15, 0x8, 0x3, 0x4, 0x5, 0xffffffff, 0x5ffad104, 0x6, 0xdbfe, 0xfffffff9, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x8, 0x3, 0x4, 0x1, 0xffffc993, 0x653e, 0xffffffff, 0x8, 0x8001, 0x7, 0xb, 0xac1, 0xffff, 0x2, 0x2, 0x4, 0x1ff, 0x0, 0x3, 0x40, 0x6]}, @TCA_HTB_CEIL64={0xc}, @TCA_HTB_RATE64={0xc, 0x6, 0x1}]}}]}, 0x47c}}, 0x0) 551.105247ms ago: executing program 3 (id=2235): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x0) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0xa0) lseek(r0, 0x200000000009, 0x2) 485.856868ms ago: executing program 3 (id=2236): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x2040, 0x6c) flock(r0, 0x2) fcntl$setlease(r0, 0x400, 0x0) execve(&(0x7f0000000100)='./file2\x00', 0x0, 0x0) 369.765361ms ago: executing program 1 (id=2237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 341.608782ms ago: executing program 3 (id=2238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 193.837035ms ago: executing program 1 (id=2239): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x500, 0x4) 114.725877ms ago: executing program 3 (id=2240): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000900)={0x10}) 68.668728ms ago: executing program 0 (id=2241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x48d, 0x0, 0x2}]}) 0s ago: executing program 1 (id=2242): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0xb94b8ea7609ebf9f) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) kernel console output (not intermixed with test programs): F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 218.607057][ T8880] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 218.614917][ T8880] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 218.692111][ C1] usblp0: nonzero read bulk status received: -71 [ 218.730053][ T23] usb 1-1: USB disconnect, device number 14 [ 218.751346][ T23] usblp0: removed [ 218.755582][ T8882] syz.2.1168: attempt to access beyond end of device [ 218.755582][ T8882] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 219.077458][ T42] kworker/u4:2: attempt to access beyond end of device [ 219.077458][ T42] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 219.096547][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 219.105365][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 220.209559][ T5860] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 220.390491][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 220.401956][ T5860] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 220.414773][ T5860] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 220.427854][ T5860] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 220.442476][ T5860] usb 4-1: config 250 has no interface number 0 [ 220.449154][ T5860] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 220.469600][ T5860] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 220.487477][ T5860] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 220.504933][ T5860] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 220.519176][ T5860] usb 4-1: config 250 interface 228 has no altsetting 0 [ 220.534313][ T5860] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 220.545259][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 220.557470][ T5860] usb 4-1: Product: syz [ 220.562184][ T5860] usb 4-1: SerialNumber: syz [ 220.584551][ T8921] loop1: detected capacity change from 0 to 40427 [ 220.600300][ T8921] F2FS-fs (loop1): invalid crc value [ 220.618580][ T8921] F2FS-fs (loop1): Found nat_bits in checkpoint [ 220.620318][ T5860] hub 4-1:250.228: bad descriptor, ignoring hub [ 220.648586][ T5860] hub: probe of 4-1:250.228 failed with error -5 [ 220.703421][ T8921] F2FS-fs (loop1): Start checkpoint disabled! [ 220.734331][ T8921] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 220.815699][ T5860] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 220.848798][ T8921] syz.1.1180: attempt to access beyond end of device [ 220.848798][ T8921] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.077606][ T2917] kworker/u4:6: attempt to access beyond end of device [ 221.077606][ T2917] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 221.093517][ T2917] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 221.102974][ T2917] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 221.130824][ C0] usblp0: nonzero read bulk status received: -71 [ 221.190560][ T5863] usb 4-1: USB disconnect, device number 11 [ 221.205259][ T5863] usblp0: removed [ 221.534942][ T8938] loop0: detected capacity change from 0 to 4096 [ 221.551251][ T8938] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 221.643984][ T8938] ntfs: volume version 3.1. [ 221.902929][ T8938] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 222.391986][ T8952] loop0: detected capacity change from 0 to 4096 [ 222.400929][ T8952] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.452439][ T8952] EXT4-fs (loop0): Test dummy encryption mode enabled [ 222.521621][ T8952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.618584][ T8965] loop2: detected capacity change from 0 to 256 [ 222.661691][ T8952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.674253][ T8952] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 222.733955][ T8967] overlay: filesystem on ./file0 is read-only [ 222.787201][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.987995][ T8969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1203'. [ 223.009199][ T8976] vxcan0: tx address claim with dest, not broadcast [ 223.705588][ T8995] loop2: detected capacity change from 0 to 512 [ 223.730841][ T8995] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 223.743668][ T8995] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 223.762335][ T8995] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 223.809631][ T8995] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 223.857763][ T8995] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 223.875976][ T8995] EXT4-fs (loop2): orphan cleanup on readonly fs [ 223.908436][ T8995] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1213: bg 0: block 34: padding at end of block bitmap is not set [ 223.938259][ T8995] Quota error (device loop2): write_blk: dquota write failed [ 223.947054][ T8995] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 223.950858][ T9000] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1216'. [ 223.958604][ T8995] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1213: Failed to acquire dquot type 1 [ 223.980428][ T8995] EXT4-fs (loop2): 1 truncate cleaned up [ 223.988967][ T8995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.057061][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.142492][ T9006] loop3: detected capacity change from 0 to 256 [ 224.171524][ T5764] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 224.299508][ T5860] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 224.318279][ T9012] cramfs: checking physical address 0x000000002442f000 for linear cramfs image [ 224.327719][ T9012] cramfs: wrong magic [ 224.334039][ T9012] cramfs: wrong magic [ 224.371702][ T5764] usb 1-1: Using ep0 maxpacket: 16 [ 224.395610][ T5764] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.424883][ T5764] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.434867][ T5764] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 224.444741][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.460749][ T5764] usb 1-1: Product: syz [ 224.465337][ T5764] usb 1-1: Manufacturer: syz [ 224.475058][ T5764] usb 1-1: SerialNumber: syz [ 224.486360][ T5860] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.488917][ T5764] usb 1-1: config 0 descriptor?? [ 224.503110][ T5860] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.549566][ T5860] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.556296][ T5860] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 224.588658][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.608366][ T5860] usb 2-1: config 0 descriptor?? [ 224.770362][ T5764] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 224.856218][ T9026] loop2: detected capacity change from 0 to 512 [ 224.922220][ T9026] EXT4-fs: Ignoring removed orlov option [ 224.958439][ T9026] EXT4-fs error (device loop2): __ext4_iget:5091: inode #11: block 1: comm syz.2.1226: invalid block [ 224.971893][ T9026] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1226: couldn't read orphan inode 11 (err -117) [ 224.987680][ T9026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.023579][ T9030] loop3: detected capacity change from 0 to 1024 [ 225.046206][ T9026] EXT4-fs error (device loop2): ext4_add_entry:2488: inode #2: comm syz.2.1226: Directory hole found for htree leaf block 0 [ 225.069174][ T5860] hid (null): unknown global tag 0xfd [ 225.138528][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.156024][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 225.163701][ T5764] imon:send_packet: packet tx failed (-71) [ 225.172212][ T5860] waltop 0003:172F:0034.0005: unexpected long global item [ 225.189523][ T5764] imon 1-1:0.0: panel buttons/knobs setup failed [ 225.206595][ T5860] waltop: probe of 0003:172F:0034.0005 failed with error -22 [ 225.330761][ T5860] usb 2-1: USB disconnect, device number 14 [ 225.388760][ T23] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0006/input/input14 [ 225.399695][ T5764] rc_core: IR keymap rc-imon-pad not found [ 225.420570][ T5764] Registered IR keymap rc-empty [ 225.425618][ T5764] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 225.463103][ T23] hid-generic 0005:0009:0040.0006: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 225.490961][ T5764] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 225.532010][ T5764] imon:send_packet: packet tx failed (-71) [ 225.551804][ T5764] imon 1-1:0.0: remote input dev register failed [ 225.568643][ T5764] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 225.641165][ T5764] imon 1-1:0.0: unable to initialize intf0, err 0 [ 225.649352][ T5764] imon:imon_probe: failed to initialize context! [ 225.655806][ T5764] imon 1-1:0.0: unable to register, err -19 [ 225.700318][ T5764] usb 1-1: USB disconnect, device number 15 [ 225.758601][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1232'. [ 225.793874][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.803704][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.840968][ T9038] bridge0: entered allmulticast mode [ 226.429795][ T9056] loop7: detected capacity change from 0 to 7 [ 226.472065][ T9056] Dev loop7: unable to read RDB block 7 [ 226.477747][ T9056] loop7: unable to read partition table [ 226.514252][ T9056] loop7: partition table beyond EOD, truncated [ 226.530215][ T9056] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 226.583461][ T9060] Dev loop7: unable to read RDB block 7 [ 226.596807][ T9060] loop7: unable to read partition table [ 226.638845][ T9060] loop7: partition table beyond EOD, truncated [ 226.666541][ T5140] Dev loop7: unable to read RDB block 7 [ 226.675380][ T5140] loop7: unable to read partition table [ 226.684497][ T5140] loop7: partition table beyond EOD, truncated [ 226.815567][ T9067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1246'. [ 227.292022][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.362667][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.428747][ T9083] bond0: invalid ARP target specified [ 227.466398][ T9069] loop2: detected capacity change from 0 to 32768 [ 227.497206][ T9069] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1245 (9069) [ 227.531988][ T9069] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 227.559781][ T9069] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 227.580485][ T9069] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 227.599518][ T9069] BTRFS info (device loop2): use zstd compression, level 3 [ 227.616532][ T9069] BTRFS info (device loop2): using free space tree [ 227.693956][ T9090] loop0: detected capacity change from 0 to 256 [ 227.794068][ T9069] BTRFS info (device loop2): enabling ssd optimizations [ 227.802119][ T9069] BTRFS info (device loop2): auto enabling async discard [ 228.068861][ T5774] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 228.099495][ T5863] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 228.289482][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 228.312551][ T5863] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 228.330342][ T5863] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 228.379481][ T5863] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 228.419825][ T5863] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 228.474031][ T5863] usb 4-1: config 0 interface 0 has no altsetting 0 [ 228.487889][ T5790] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (5790) [ 228.529976][ T5863] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 228.542657][ T5863] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 228.573153][ T5863] usb 4-1: Product: syz [ 228.577411][ T5863] usb 4-1: Manufacturer: syz [ 228.599398][ T5863] usb 4-1: SerialNumber: syz [ 228.626238][ T5863] usb 4-1: config 0 descriptor?? [ 228.648138][ T5863] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 228.743009][ T5863] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 228.922497][ T9] usb 4-1: USB disconnect, device number 12 [ 228.928602][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 228.957482][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 229.974874][ T9160] loop0: detected capacity change from 0 to 512 [ 230.025748][ T9160] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 230.107496][ T9160] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1274: invalid indirect mapped block 83886080 (level 1) [ 230.182144][ T9160] EXT4-fs (loop0): Remounting filesystem read-only [ 230.236378][ T9160] EXT4-fs (loop0): 1 orphan inode deleted [ 230.238542][ T9172] loop2: detected capacity change from 0 to 256 [ 230.262693][ T9160] EXT4-fs (loop0): 1 truncate cleaned up [ 230.282235][ T9172] exfat: Deprecated parameter 'utf8' [ 230.288252][ T9160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.337814][ T9172] exfat: Deprecated parameter 'utf8' [ 230.369487][ T9172] exfat: Deprecated parameter 'namecase' [ 230.467831][ T9172] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xfffcecf0, utbl_chksum : 0xe619d30d) [ 230.475235][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.095423][ T9190] loop1: detected capacity change from 0 to 8192 [ 231.119425][ T9196] netlink: 'syz.0.1286': attribute type 1 has an invalid length. [ 231.163637][ T9196] netlink: 'syz.0.1286': attribute type 1 has an invalid length. [ 231.172661][ T9190] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.194077][ T9196] iwpm_send_hello: Unable to send a nlmsg [ 231.294496][ T9162] loop3: detected capacity change from 0 to 40427 [ 231.334347][ T9162] F2FS-fs (loop3): invalid crc value [ 231.374228][ T9162] F2FS-fs (loop3): Found nat_bits in checkpoint [ 231.581163][ T9162] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 231.713869][ T9209] erspan0: entered promiscuous mode [ 231.886245][ T5776] syz-executor: attempt to access beyond end of device [ 231.886245][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.912817][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 232.031095][ T9219] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1297'. [ 232.049771][ T27] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 232.122304][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 232.249739][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 232.261651][ T27] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 232.279437][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.287526][ T27] usb 2-1: Product: syz [ 232.310777][ T27] usb 2-1: Manufacturer: syz [ 232.315533][ T27] usb 2-1: SerialNumber: syz [ 232.340802][ T27] usb 2-1: config 0 descriptor?? [ 232.372246][ T27] gspca_main: se401-2.14.0 probing 047d:5003 [ 232.678454][ T9236] loop0: detected capacity change from 0 to 256 [ 232.722316][ T9239] program syz.2.1305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.768976][ T27] gspca_se401: ExtraFeatures: 86 [ 232.778382][ T27] gspca_se401: Too many frame sizes [ 232.914733][ T9243] loop2: detected capacity change from 0 to 256 [ 232.988161][ T27] usb 2-1: USB disconnect, device number 15 [ 233.813939][ T9253] loop0: detected capacity change from 0 to 32768 [ 233.887346][ T9253] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 233.927977][ T9279] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 234.059853][ T9288] vivid-002: disconnect [ 234.070014][ T9287] vivid-002: reconnect [ 234.074543][ T9253] XFS (loop0): Ending clean mount [ 234.144025][ T9253] XFS (loop0): Quotacheck needed: Please wait. [ 234.279437][ T9253] XFS (loop0): Quotacheck: Done. [ 234.369124][ T9253] XFS (loop0): User initiated shutdown received. [ 234.376343][ T9253] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 234.391775][ T9253] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 234.478595][ T5777] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 234.596522][ T9295] loop3: detected capacity change from 0 to 64 [ 234.615476][ T9284] loop2: detected capacity change from 0 to 32768 [ 234.695211][ T9297] loop1: detected capacity change from 0 to 128 [ 234.725116][ T9295] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 234.820572][ T9284] JBD2: Ignoring recovery information on journal [ 235.009937][ T9284] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 235.111099][ T9302] jffs2: notice: (9302) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 235.131168][ T9303] bonding: no command found in bonding_masters - use +ifname or -ifname [ 235.252103][ T9284] UBIFS error (pid: 9284): cannot open "ubi:0", error -19 [ 235.326337][ T5774] (syz-executor,5774,0):ocfs2_inode_is_valid_to_delete:905 ERROR: Skipping delete of system file 66 [ 235.353887][ T9310] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 235.401408][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 235.559580][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 235.764078][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 235.786489][ T27] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 235.800162][ T27] usb 4-1: config 0 has no interface number 0 [ 235.818872][ T27] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x8A has invalid maxpacket 14378, setting to 64 [ 235.836523][ T27] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.856056][ T27] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 235.865582][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.878298][ T27] usb 4-1: Product: syz [ 235.882619][ T27] usb 4-1: Manufacturer: syz [ 235.887386][ T27] usb 4-1: SerialNumber: syz [ 235.895036][ T27] usb 4-1: config 0 descriptor?? [ 236.151046][ T27] usb 4-1: USB disconnect, device number 13 [ 236.348333][ T9340] loop1: detected capacity change from 0 to 164 [ 236.448569][ T9342] loop0: detected capacity change from 0 to 256 [ 236.522233][ T9342] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205a7fec, utbl_chksum : 0xe619d30d) [ 236.915768][ T9338] loop2: detected capacity change from 0 to 32768 [ 236.937426][ T9338] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 236.990987][ T9338] overlayfs: overlapping lowerdir path [ 237.184236][ T5790] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 237.859571][ T27] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 238.049519][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 238.061434][ T27] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.087086][ T27] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.111071][ T27] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 238.125670][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 238.141817][ T27] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 238.179380][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.193322][ T27] usb 3-1: config 0 descriptor?? [ 238.406836][ T9408] loop1: detected capacity change from 0 to 8 [ 238.431054][ T9408] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 238.452273][ T9377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.471714][ T9377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.493589][ T5790] udevd[5790]: incorrect cramfs checksum on /dev/loop1 [ 238.952599][ T5891] usb 3-1: USB disconnect, device number 13 [ 238.988162][ T9425] __sock_release: fasync list not empty! [ 240.621295][ T9484] loop2: detected capacity change from 0 to 512 [ 240.647358][ T9484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.712550][ T9484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.755739][ T9484] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.825286][ T9496] loop1: detected capacity change from 0 to 512 [ 240.876159][ T9496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.899797][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.100762][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.468370][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'. [ 241.769484][ T789] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 241.949646][ T789] usb 1-1: Using ep0 maxpacket: 16 [ 241.961805][ T789] usb 1-1: config 1 has an invalid interface number: 193 but max is 0 [ 241.996611][ T789] usb 1-1: config 1 has no interface number 0 [ 242.003443][ T789] usb 1-1: config 1 interface 193 has no altsetting 0 [ 242.020001][ T789] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice= 3.b3 [ 242.029735][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.039429][ T789] usb 1-1: Product: syz [ 242.044334][ T789] usb 1-1: Manufacturer: syz [ 242.049016][ T789] usb 1-1: SerialNumber: syz [ 242.177960][ T9523] loop3: detected capacity change from 0 to 32768 [ 242.200395][ T9523] [ 242.200395][ T9523] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.200395][ T9523] [ 242.316390][ T789] usb 1-1: USB disconnect, device number 16 [ 242.389765][ T48] ERROR: (device loop3): diWrite: ixpxd invalid [ 242.389765][ T48] [ 242.415585][ T48] ERROR: (device loop3): remounting filesystem as read-only [ 242.434847][ T48] ERROR: (device loop3): txCommit: [ 242.434847][ T48] [ 242.449971][ T48] jfs_write_inode: jfs_commit_inode failed! [ 242.456605][ T5776] [ 242.456605][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.456605][ T5776] [ 242.499741][ T5776] [ 242.499741][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 242.499741][ T5776] [ 242.672527][ T9544] loop3: detected capacity change from 0 to 2048 [ 242.760921][ T9546] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.392292][ T9562] loop1: detected capacity change from 0 to 512 [ 243.419192][ T9562] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 243.495638][ T9562] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.1447: bad orphan inode 131083 [ 243.596809][ T9562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.733644][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.815813][ T9574] can0: slcan on ttyS3. [ 243.930475][ T9574] can0 (unregistered): slcan off ttyS3. [ 243.936541][ T9574] Falling back ldisc for ttyS3. [ 244.213753][ T9589] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 244.456243][ T9599] loop3: detected capacity change from 0 to 64 [ 244.613996][ T9605] tipc: Started in network mode [ 244.639525][ T9605] tipc: Node identity ac14140f, cluster identity 4711 [ 244.659733][ T9605] tipc: New replicast peer: 255.255.255.255 [ 244.666680][ T9605] tipc: Enabled bearer , priority 10 [ 244.728285][ T9605] tipc: New replicast peer: fc02:0000:0000:0000:0000:0000:0000:0001 [ 244.768615][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'. [ 245.225807][ T9627] tap0: tun_chr_ioctl cmd 2147767519 [ 245.400517][ T5787] Bluetooth: hci0: Zero size dump init pkt [ 245.431209][ T9608] loop2: detected capacity change from 0 to 32768 [ 245.544379][ T9608] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 245.728569][ T9608] XFS (loop2): Ending clean mount [ 245.779445][ T5860] tipc: Node number set to 2886997007 [ 245.817776][ T9608] XFS (loop2): Quotacheck needed: Please wait. [ 245.924488][ T9608] XFS (loop2): Quotacheck: Done. [ 246.106099][ T5774] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 246.174304][ T9667] loop0: detected capacity change from 0 to 128 [ 246.229861][ T9667] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 246.336659][ T9672] program syz.1.1485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.536499][ T48] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 246.653280][ T9680] loop2: detected capacity change from 0 to 1024 [ 246.919925][ T2917] hfsplus: bad catalog file entry [ 247.043299][ T9694] loop0: detected capacity change from 0 to 64 [ 247.481095][ T9706] loop2: detected capacity change from 0 to 2048 [ 247.505215][ T9706] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 247.532273][ T9706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.600361][ T5860] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 247.801772][ T5860] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.819423][ T5860] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.840535][ T5860] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 247.859377][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 247.867572][ T5860] usb 1-1: SerialNumber: syz [ 247.881557][ T9715] loop1: detected capacity change from 0 to 1024 [ 248.113937][ T5860] usb 1-1: 0:2 : does not exist [ 248.183381][ T5860] usb 1-1: USB disconnect, device number 17 [ 248.482065][ T9713] loop2: detected capacity change from 0 to 32768 [ 248.509189][ T9713] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 248.546862][ T9713] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 248.559507][ T9713] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 248.568989][ T9713] BTRFS info (device loop2): use zstd compression, level 3 [ 248.585280][ T9713] BTRFS info (device loop2): using free space tree [ 248.638074][ T9713] BTRFS info (device loop2): enabling ssd optimizations [ 248.645495][ T9713] BTRFS info (device loop2): auto enabling async discard [ 248.706690][ T5891] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 248.920951][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.936268][ T5774] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 248.946940][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.951413][ T5891] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 248.991564][ T5891] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 249.007621][ T5891] usb 2-1: Manufacturer: syz [ 249.022298][ T5891] usb 2-1: config 0 descriptor?? [ 249.175393][ T5790] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (5790) [ 249.636469][ T9758] loop3: detected capacity change from 0 to 1024 [ 249.729979][ T5891] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 249.744482][ T5891] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 249.754716][ T5891] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 249.781291][ T9760] loop2: detected capacity change from 0 to 16 [ 249.804192][ T5891] usb 2-1: USB disconnect, device number 16 [ 249.849097][ T9760] erofs: (device loop2): mounted with root inode @ nid 36. [ 249.954081][ T9762] (null): rxe_set_mtu: Set mtu to 1024 [ 249.968734][ T9760] overlayfs: failed to get redirect (-117) [ 250.466447][ T9762] infiniband syz0: set active [ 250.477117][ T9762] infiniband syz0: added syz_tun [ 250.528691][ T9762] RDS/IB: syz0: added [ 250.561334][ T9762] smc: adding ib device syz0 with port count 1 [ 250.568664][ T9762] smc: ib device syz0 port 1 has pnetid [ 250.882761][ T9778] loop2: detected capacity change from 0 to 164 [ 251.082234][ T9765] loop3: detected capacity change from 0 to 32768 [ 251.159638][ T9765] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 251.235511][ T9786] loop2: detected capacity change from 0 to 256 [ 251.353003][ T9765] XFS (loop3): Ending clean mount [ 251.369351][ T9786] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 251.470540][ T9786] syz.2.1526: attempt to access beyond end of device [ 251.470540][ T9786] loop2: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 251.504027][ T9774] loop1: detected capacity change from 0 to 32768 [ 251.512974][ T9786] syz.2.1526: attempt to access beyond end of device [ 251.512974][ T9786] loop2: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 251.546500][ T5776] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 251.568098][ T9786] syz.2.1526: attempt to access beyond end of device [ 251.568098][ T9786] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 251.689956][ T9786] syz.2.1526: attempt to access beyond end of device [ 251.689956][ T9786] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 251.753728][ T9786] syz.2.1526: attempt to access beyond end of device [ 251.753728][ T9786] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 251.841875][ T9786] syz.2.1526: attempt to access beyond end of device [ 251.841875][ T9786] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 251.902294][ T9786] syz.2.1526: attempt to access beyond end of device [ 251.902294][ T9786] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 251.971118][ T9786] syz.2.1526: attempt to access beyond end of device [ 251.971118][ T9786] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 252.049503][ T9786] syz.2.1526: attempt to access beyond end of device [ 252.049503][ T9786] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 252.908187][ T9817] loop2: detected capacity change from 0 to 1024 [ 253.894811][ T9846] loop3: detected capacity change from 0 to 4096 [ 253.927103][ T9846] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 254.019084][ T9846] ntfs: volume version 3.1. [ 254.441467][ T9870] vivid-000: disconnect [ 254.452694][ T9864] vivid-000: reconnect [ 254.515325][ T9872] loop3: detected capacity change from 0 to 256 [ 254.544171][ T9872] exfat: Deprecated parameter 'utf8' [ 254.551855][ T9872] exfat: Deprecated parameter 'namecase' [ 254.557676][ T9872] exfat: Deprecated parameter 'namecase' [ 254.579675][ T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 254.618379][ T9872] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 254.769474][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 254.777044][ T27] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 254.796571][ T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 254.829234][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 254.840175][ T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 254.851677][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 254.862084][ T27] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.875432][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.885814][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.925080][ T9880] loop3: detected capacity change from 0 to 4096 [ 254.934099][ T9880] EXT4-fs (loop3): Test dummy encryption mode enabled [ 254.967086][ T9882] pimreg: tun_chr_ioctl cmd 1074025681 [ 254.994179][ T9880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.137397][ T27] usb 3-1: GET_CAPABILITIES returned 0 [ 255.143301][ T27] usbtmc 3-1:16.0: can't read capabilities [ 255.205816][ T28] audit: type=1400 audit(2000000012.070:31): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=9887 comm="syz.0.1568" name="p" offset=48 [ 255.227439][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.244780][ T9886] loop1: detected capacity change from 0 to 4096 [ 255.282234][ T9886] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 255.350269][ T27] usb 3-1: USB disconnect, device number 14 [ 255.423219][ T9886] ntfs: volume version 3.1. [ 255.991899][ T9910] loop1: detected capacity change from 0 to 16 [ 256.022016][ T9910] erofs: (device loop1): mounted with root inode @ nid 36. [ 256.058200][ T9910] overlayfs: failed to get redirect (-117) [ 256.175249][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.182183][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.295693][ T9918] loop3: detected capacity change from 0 to 4096 [ 256.310981][ T9918] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 256.352211][ T9920] dyndbg: bad flag-op e, at start of eMwOITÝRூv [ 256.360381][ T9920] dyndbg: flags parse failed [ 256.441484][ T9918] ntfs: volume version 3.1. [ 256.709157][ T9929] loop1: detected capacity change from 0 to 256 [ 256.779852][ T9933] ima: signed policy file (specified as an absolute pathname) required [ 256.801808][ T28] audit: type=1802 audit(2000000013.690:32): pid=9933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.0.1589" res=0 errno=0 [ 256.830066][ T9932] ima: policy update failed [ 256.855086][ T28] audit: type=1802 audit(2000000013.720:33): pid=9932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1589" res=0 errno=0 [ 256.997352][ T9935] loop2: detected capacity change from 0 to 1024 [ 257.033538][ T9940] loop1: detected capacity change from 0 to 64 [ 257.113006][ T9940] hfs: request for non-existent node 131072 in B*Tree [ 257.149602][ T9940] hfs: request for non-existent node 131072 in B*Tree [ 257.235111][ T2996] hfsplus: bad catalog file entry [ 257.570949][ T9955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1599'. [ 258.040860][ T9962] loop1: detected capacity change from 0 to 8192 [ 258.080025][ T9962] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 258.132424][ T9962] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 258.172742][ T9962] REISERFS (device loop1): using ordered data mode [ 258.210885][ T9962] reiserfs: using flush barriers [ 258.259478][ T9962] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 258.315655][ T9962] REISERFS (device loop1): checking transaction log (loop1) [ 258.346206][ T9977] loop3: detected capacity change from 0 to 256 [ 258.387750][ T9977] exfat: Deprecated parameter 'utf8' [ 258.396810][ T9962] REISERFS (device loop1): Using rupasov hash to sort names [ 258.410114][ T9977] exfat: Deprecated parameter 'utf8' [ 258.419977][ T9962] REISERFS (device loop1): using 3.5.x disk format [ 258.452080][ T9962] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 258.477272][ T9962] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 258.494467][ T9977] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 258.513072][ T9962] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 258.559136][ T9969] ftl_cs: FTL header not found. [ 258.576472][ T9962] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 258.618021][ T9962] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 258.644323][ T9981] loop2: detected capacity change from 0 to 2048 [ 258.683943][ T9981] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 258.718636][ T9981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.734030][ T9962] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 258.777606][ T9962] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 258.871541][ T9969] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 259.404785][ T28] audit: type=1326 audit(2000000016.290:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c1b9e559 code=0x7ffc0000 [ 259.441699][ T28] audit: type=1326 audit(2000000016.290:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c1b9e559 code=0x7ffc0000 [ 259.476251][ T28] audit: type=1326 audit(2000000016.310:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c1b9e559 code=0x7ffc0000 [ 259.516210][ T28] audit: type=1326 audit(2000000016.320:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f97c1b9e559 code=0x7ffc0000 [ 259.546564][ T28] audit: type=1326 audit(2000000016.320:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c1b9e559 code=0x7ffc0000 [ 259.607243][ T28] audit: type=1326 audit(2000000016.320:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c1b9e559 code=0x7ffc0000 [ 259.673583][ T28] audit: type=1326 audit(2000000016.320:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c1b9e559 code=0x7ffc0000 [ 259.749750][ T28] audit: type=1326 audit(2000000016.320:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c1b9e559 code=0x7ffc0000 [ 259.823731][ T28] audit: type=1326 audit(2000000016.320:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97c1b9e559 code=0x7ffc0000 [ 259.878518][ T28] audit: type=1326 audit(2000000016.320:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c1b9e559 code=0x7ffc0000 [ 259.938557][T10009] loop3: detected capacity change from 0 to 256 [ 259.963074][ T9986] loop2: detected capacity change from 0 to 32768 [ 259.997395][T10009] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 260.057122][ T9986] JBD2: Ignoring recovery information on journal [ 260.194748][T10009] syz.3.1623: attempt to access beyond end of device [ 260.194748][T10009] loop3: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 260.211804][T10009] syz.3.1623: attempt to access beyond end of device [ 260.211804][T10009] loop3: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 260.245902][ T9986] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 260.280105][T10009] syz.3.1623: attempt to access beyond end of device [ 260.280105][T10009] loop3: rw=0, sector=440, nr_sectors = 8 limit=256 [ 260.332865][T10009] syz.3.1623: attempt to access beyond end of device [ 260.332865][T10009] loop3: rw=0, sector=440, nr_sectors = 8 limit=256 [ 260.379728][T10009] syz.3.1623: attempt to access beyond end of device [ 260.379728][T10009] loop3: rw=0, sector=440, nr_sectors = 8 limit=256 [ 260.417424][T10009] syz.3.1623: attempt to access beyond end of device [ 260.417424][T10009] loop3: rw=0, sector=440, nr_sectors = 8 limit=256 [ 260.455468][T10009] syz.3.1623: attempt to access beyond end of device [ 260.455468][T10009] loop3: rw=0, sector=440, nr_sectors = 8 limit=256 [ 260.485815][T10009] syz.3.1623: attempt to access beyond end of device [ 260.485815][T10009] loop3: rw=0, sector=440, nr_sectors = 8 limit=256 [ 260.511091][T10009] syz.3.1623: attempt to access beyond end of device [ 260.511091][T10009] loop3: rw=0, sector=440, nr_sectors = 8 limit=256 [ 260.536427][T10009] syz.3.1623: attempt to access beyond end of device [ 260.536427][T10009] loop3: rw=0, sector=440, nr_sectors = 8 limit=256 [ 260.593241][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 260.789919][T10028] i2c i2c-0: delete_device: Can't find device in list [ 261.411003][T10048] loop1: detected capacity change from 0 to 1024 [ 261.536847][T10052] netlink: 'syz.2.1642': attribute type 39 has an invalid length. [ 261.652001][T10048] hfsplus: bad catalog file entry [ 261.743908][T10037] loop3: detected capacity change from 0 to 32768 [ 261.771223][ T11] hfsplus: b-tree write err: -5, ino 3 [ 261.777317][ T11] hfsplus: bad catalog file entry [ 261.827089][T10037] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 261.938250][T10037] XFS (loop3): Ending clean mount [ 262.015503][T10062] loop1: detected capacity change from 0 to 256 [ 262.094406][T10062] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 262.200574][T10050] loop0: detected capacity change from 0 to 32768 [ 262.230239][T10050] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 262.262402][ T5776] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 262.570257][ T5790] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 263.107585][T10079] loop0: detected capacity change from 0 to 512 [ 263.151161][T10079] EXT4-fs (loop0): 1 truncate cleaned up [ 263.158331][T10079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.326555][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.366477][T10071] loop2: detected capacity change from 0 to 32768 [ 263.538443][T10071] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 263.696879][T10071] (syz.2.1648,10071,0):ocfs2_double_lock:1192 ERROR: status = -2 [ 263.710593][ T5863] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 263.846398][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 263.912035][ T5863] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.939405][ T5863] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 263.969414][ T5863] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.004143][T10087] loop1: detected capacity change from 0 to 32768 [ 264.021755][T10087] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 264.036568][ T5863] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 264.066926][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 264.091120][ T5863] usb 4-1: Product: syz [ 264.096779][ T5863] usb 4-1: Manufacturer: syz [ 264.114467][ T5863] usb 4-1: SerialNumber: syz [ 264.278058][ T5792] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 264.289108][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 264.368382][ T5863] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 264.498748][T10091] loop0: detected capacity change from 0 to 32768 [ 264.510067][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 264.533614][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 264.549882][ T9] usb 3-1: config 0 has no interface number 0 [ 264.565065][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 264.579659][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.590225][ T9] usb 3-1: Product: syz [ 264.594761][T10091] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 264.605363][ T9] usb 3-1: Manufacturer: syz [ 264.611599][ T9] usb 3-1: SerialNumber: syz [ 264.626623][ T9] usb 3-1: config 0 descriptor?? [ 264.642360][ T9] smsc95xx v2.0.0 [ 264.647774][ T5863] usb 4-1: USB disconnect, device number 14 [ 264.671186][ T5863] usblp0: removed [ 264.694668][T10091] XFS (loop0): Ending clean mount [ 264.826375][ T5777] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 265.370714][T10113] loop0: detected capacity change from 0 to 256 [ 265.422906][T10113] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 265.463638][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 265.492537][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 265.503938][T10113] bio_check_eod: 3497 callbacks suppressed [ 265.503958][T10113] syz.0.1661: attempt to access beyond end of device [ 265.503958][T10113] loop0: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 265.529512][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 265.549206][T10113] syz.0.1661: attempt to access beyond end of device [ 265.549206][T10113] loop0: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 265.566232][ T9] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 265.582814][ T9] usb 3-1: USB disconnect, device number 15 [ 265.599711][T10113] syz.0.1661: attempt to access beyond end of device [ 265.599711][T10113] loop0: rw=0, sector=440, nr_sectors = 8 limit=256 [ 265.619631][T10113] syz.0.1661: attempt to access beyond end of device [ 265.619631][T10113] loop0: rw=0, sector=440, nr_sectors = 8 limit=256 [ 265.659844][T10113] syz.0.1661: attempt to access beyond end of device [ 265.659844][T10113] loop0: rw=0, sector=440, nr_sectors = 8 limit=256 [ 265.696613][T10113] syz.0.1661: attempt to access beyond end of device [ 265.696613][T10113] loop0: rw=0, sector=440, nr_sectors = 8 limit=256 [ 265.722327][T10113] syz.0.1661: attempt to access beyond end of device [ 265.722327][T10113] loop0: rw=0, sector=440, nr_sectors = 8 limit=256 [ 265.736833][T10113] syz.0.1661: attempt to access beyond end of device [ 265.736833][T10113] loop0: rw=0, sector=440, nr_sectors = 8 limit=256 [ 265.750985][T10113] syz.0.1661: attempt to access beyond end of device [ 265.750985][T10113] loop0: rw=0, sector=440, nr_sectors = 8 limit=256 [ 265.771940][T10113] syz.0.1661: attempt to access beyond end of device [ 265.771940][T10113] loop0: rw=0, sector=440, nr_sectors = 8 limit=256 [ 266.384101][T10127] loop0: detected capacity change from 0 to 512 [ 266.390711][ T5863] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 266.410725][T10127] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.591874][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.613984][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.647695][ T5863] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 266.664319][ T5863] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 266.672646][ T5863] usb 3-1: Manufacturer: syz [ 266.683608][ T5863] usb 3-1: config 0 descriptor?? [ 266.921181][T10128] loop1: detected capacity change from 0 to 32768 [ 266.949860][T10128] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 267.015129][T10128] XFS (loop1): Ending clean mount [ 267.163791][ T5775] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 267.312002][ T5863] uclogic 0003:256C:006D.0009: failed retrieving Huion firmware version: -71 [ 267.334624][ T5863] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 267.359523][ T5863] uclogic: probe of 0003:256C:006D.0009 failed with error -71 [ 267.411397][ T5863] usb 3-1: USB disconnect, device number 16 [ 267.653493][T10149] loop0: detected capacity change from 0 to 256 [ 267.777306][T10154] loop0: detected capacity change from 0 to 128 [ 267.801315][T10154] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.816417][T10154] ext4 filesystem being mounted at /428/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.887250][T10154] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes [ 267.909442][ T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 267.939761][ T5891] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 267.965134][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.023696][T10158] loop2: detected capacity change from 0 to 8 [ 268.089698][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 268.103936][ T23] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 268.129487][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.138240][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.171703][ T5891] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 268.171751][ T23] usb 4-1: config 0 descriptor?? [ 268.211192][ T5891] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.232551][ T23] as10x_usb: device has been detected [ 268.238800][ T23] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 268.258444][ T5891] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 268.280171][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 268.288769][ T5891] usb 2-1: Product: syz [ 268.298786][ T5891] usb 2-1: Manufacturer: syz [ 268.308047][ T5891] usb 2-1: SerialNumber: syz [ 268.326393][ T23] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 268.362390][ T23] as10x_usb: error during firmware upload part1 [ 268.373723][T10164] loop2: detected capacity change from 0 to 256 [ 268.384822][ T23] Registered device nBox DVB-T Dongle [ 268.450593][T10164] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 268.495091][ T5764] usb 4-1: USB disconnect, device number 15 [ 268.542776][ T5891] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 268.734968][ T5764] Unregistered device nBox DVB-T Dongle [ 268.740218][ T5764] as10x_usb: device has been disconnected [ 268.790922][ T5891] usb 2-1: USB disconnect, device number 17 [ 268.807420][ T5891] usblp1: removed [ 268.839570][T10172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1684'. [ 268.864465][T10172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1684'. [ 269.601022][T10208] loop2: detected capacity change from 0 to 8 [ 269.630850][T10208] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 269.678554][ T5790] udevd[5790]: incorrect cramfs checksum on /dev/loop2 [ 269.726983][ T5790] udevd[5790]: incorrect cramfs checksum on /dev/loop2 [ 270.119953][T10221] loop3: detected capacity change from 0 to 8192 [ 270.894057][T10252] loop9: detected capacity change from 0 to 7 [ 270.919948][ T5891] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 270.937523][T10252] Dev loop9: unable to read RDB block 7 [ 270.945378][T10252] loop9: unable to read partition table [ 270.971084][T10252] loop9: partition table beyond EOD, truncated [ 270.989534][T10252] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 271.111707][ T5891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 271.128386][ T5891] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 271.148514][ T5891] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 271.178953][ T5891] usb 3-1: config 1 interface 0 has no altsetting 0 [ 271.199235][ T5891] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 271.212397][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.229040][ T5891] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 271.459520][ T5891] scsi host1: usb-storage 3-1:1.0 [ 271.684860][ T23] usb 3-1: USB disconnect, device number 17 [ 271.821052][T10280] program syz.0.1734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.077124][T10271] loop1: detected capacity change from 0 to 40427 [ 272.104304][T10271] F2FS-fs (loop1): invalid crc value [ 272.118169][T10271] F2FS-fs (loop1): Found nat_bits in checkpoint [ 272.230472][T10271] F2FS-fs (loop1): Start checkpoint disabled! [ 272.239548][ T5863] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 272.289891][T10271] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 272.439475][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 272.457319][ T5863] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.489038][ T5863] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.519460][ T5863] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 272.563309][ T5863] usb 4-1: config 0 interface 0 has no altsetting 0 [ 272.583634][ T5863] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 272.609534][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.646641][ T5863] usb 4-1: config 0 descriptor?? [ 272.652094][ T11] bio_check_eod: 4871 callbacks suppressed [ 272.652111][ T11] kworker/u4:0: attempt to access beyond end of device [ 272.652111][ T11] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 272.686710][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 272.860586][T10294] jffs2: notice: (10294) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 272.940002][T10282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.943041][T10297] loop0: detected capacity change from 0 to 128 [ 272.959038][T10282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.124943][T10299] loop2: detected capacity change from 0 to 256 [ 273.432601][ T5863] usb 4-1: USB disconnect, device number 16 [ 273.754090][T10316] loop1: detected capacity change from 0 to 256 [ 274.260844][T10335] loop2: detected capacity change from 0 to 512 [ 274.280079][T10335] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.304034][T10339] loop1: detected capacity change from 0 to 256 [ 274.490851][ T5863] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 274.702420][ T5863] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.729602][ T5863] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.768870][ T5863] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 274.778591][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.803461][ T5863] usb 1-1: Product: syz [ 274.807743][ T5863] usb 1-1: Manufacturer: syz [ 274.819592][ T5863] usb 1-1: SerialNumber: syz [ 274.838750][ T5863] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 274.869251][ T5863] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 274.869251][ T5863] Please send a copy of this message to and [ 275.095574][ T5863] usb 1-1: USB disconnect, device number 18 [ 275.365901][T10366] loop1: detected capacity change from 0 to 256 [ 275.471712][T10366] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 275.529806][ T789] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 275.719438][ T789] usb 3-1: Using ep0 maxpacket: 16 [ 275.736541][ T789] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.759385][ T789] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.783197][ T789] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 275.799359][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.807425][ T789] usb 3-1: Product: syz [ 275.829424][ T789] usb 3-1: Manufacturer: syz [ 275.834117][ T789] usb 3-1: SerialNumber: syz [ 275.841578][ T789] usb 3-1: config 0 descriptor?? [ 275.943684][T10369] loop3: detected capacity change from 0 to 32768 [ 275.974148][T10369] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 276.022083][T10369] XFS (loop3): Ending clean mount [ 276.076341][ T789] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 276.136674][ T5776] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 276.499674][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 276.506735][ T789] imon:send_packet: packet tx failed (-71) [ 276.539746][ T789] imon 3-1:0.0: panel buttons/knobs setup failed [ 276.619810][ T789] rc_core: IR keymap rc-imon-pad not found [ 276.625683][ T789] Registered IR keymap rc-empty [ 276.630943][ T789] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 276.641177][ T789] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 276.651010][ T789] imon:send_packet: packet tx failed (-71) [ 276.669540][ T789] imon 3-1:0.0: remote input dev register failed [ 276.678304][ T789] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 276.696884][ T789] imon 3-1:0.0: unable to initialize intf0, err 0 [ 276.703442][ T789] imon:imon_probe: failed to initialize context! [ 276.710538][ T789] imon 3-1:0.0: unable to register, err -19 [ 276.724508][ T789] usb 3-1: USB disconnect, device number 18 [ 277.143155][T10384] loop1: detected capacity change from 0 to 128 [ 277.190872][T10386] nbd1: detected capacity change from 0 to 127 [ 277.233452][ T5787] block nbd1: Receive control failed (result -104) [ 277.330811][T10389] loop1: detected capacity change from 0 to 256 [ 277.372738][T10389] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 277.400003][ T789] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 277.444294][T10389] syz.1.1766: attempt to access beyond end of device [ 277.444294][T10389] loop1: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 277.462083][T10389] syz.1.1766: attempt to access beyond end of device [ 277.462083][T10389] loop1: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 277.481275][T10389] syz.1.1766: attempt to access beyond end of device [ 277.481275][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.496836][T10389] syz.1.1766: attempt to access beyond end of device [ 277.496836][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.510735][T10389] syz.1.1766: attempt to access beyond end of device [ 277.510735][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.526269][T10389] syz.1.1766: attempt to access beyond end of device [ 277.526269][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.548495][T10389] syz.1.1766: attempt to access beyond end of device [ 277.548495][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.563083][T10389] syz.1.1766: attempt to access beyond end of device [ 277.563083][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.576790][T10389] syz.1.1766: attempt to access beyond end of device [ 277.576790][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.591904][ T789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 277.607058][ T789] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 277.618690][ T789] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.639536][ T27] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 277.645088][ T789] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 277.660537][T10389] bio_check_eod: 426 callbacks suppressed [ 277.660555][T10389] syz.1.1766: attempt to access beyond end of device [ 277.660555][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.662690][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 277.679625][T10389] syz.1.1766: attempt to access beyond end of device [ 277.679625][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.680074][T10389] syz.1.1766: attempt to access beyond end of device [ 277.680074][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.708381][ T789] usb 3-1: Product: syz [ 277.720470][ T789] usb 3-1: Manufacturer: syz [ 277.725209][ T789] usb 3-1: SerialNumber: syz [ 277.730172][T10389] syz.1.1766: attempt to access beyond end of device [ 277.730172][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.749657][T10389] syz.1.1766: attempt to access beyond end of device [ 277.749657][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.764863][T10389] syz.1.1766: attempt to access beyond end of device [ 277.764863][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.779194][T10389] syz.1.1766: attempt to access beyond end of device [ 277.779194][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.793137][T10389] syz.1.1766: attempt to access beyond end of device [ 277.793137][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.807308][T10389] syz.1.1766: attempt to access beyond end of device [ 277.807308][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.822055][T10389] syz.1.1766: attempt to access beyond end of device [ 277.822055][T10389] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 277.851624][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.868554][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.887715][ T27] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 277.898909][ T27] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 277.912551][ T27] usb 1-1: Manufacturer: syz [ 277.924709][ T27] usb 1-1: config 0 descriptor?? [ 277.989801][ T789] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 278.210031][ T5764] usb 3-1: USB disconnect, device number 19 [ 278.218826][ T5764] usblp0: removed [ 278.349763][ T789] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 278.529480][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 278.543291][ T789] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 278.551597][ T789] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 278.564144][ T789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 278.577499][ T789] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 278.589254][ T27] uclogic 0003:256C:006D.000B: failed retrieving Huion firmware version: -71 [ 278.603539][ T789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 278.613170][ T27] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 278.622581][ T27] uclogic: probe of 0003:256C:006D.000B failed with error -71 [ 278.625140][ T789] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.646699][ T27] usb 1-1: USB disconnect, device number 19 [ 278.654165][ T789] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.667290][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.899436][ T789] usb 4-1: GET_CAPABILITIES returned 0 [ 278.908708][T10398] loop2: detected capacity change from 0 to 8192 [ 278.910945][ T789] usbtmc 4-1:16.0: can't read capabilities [ 278.927548][T10398] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 278.948957][T10398] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 278.958541][T10398] REISERFS (device loop2): using ordered data mode [ 278.965393][T10398] reiserfs: using flush barriers [ 278.973615][T10398] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 279.000636][T10398] REISERFS (device loop2): checking transaction log (loop2) [ 279.026357][T10398] REISERFS (device loop2): Using rupasov hash to sort names [ 279.034696][T10398] REISERFS (device loop2): using 3.5.x disk format [ 279.041667][T10398] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 279.053680][T10398] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 279.066400][T10398] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 279.077813][T10398] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 279.092473][T10398] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 279.121962][T10398] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 279.122394][ T5764] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 279.133398][T10398] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 279.181218][ T27] usb 4-1: USB disconnect, device number 17 [ 279.379729][ T5764] usb 2-1: Using ep0 maxpacket: 16 [ 279.387393][ T5764] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.387449][ T5764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 279.387510][ T5764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 279.387536][ T5764] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 279.387562][ T5764] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.388922][ T5764] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 279.388954][ T5764] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 279.388978][ T5764] usb 2-1: Manufacturer: syz [ 279.400746][ T5764] usb 2-1: config 0 descriptor?? [ 279.525865][T10404] block2mtd: error: cannot open device /dev/zram0 [ 279.709455][ T5764] rc_core: IR keymap rc-hauppauge not found [ 279.709475][ T5764] Registered IR keymap rc-empty [ 279.710363][ T5764] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.741112][ T5764] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.775461][ T5764] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 279.777397][ T5764] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 279.782226][ T5764] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.809534][ T5764] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.839649][ T5764] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.869610][ T5764] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.904117][ T5764] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.929451][ T5764] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.959526][ T5764] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.990312][ T5764] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 280.039575][ T5764] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 280.073459][ T5764] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 280.142108][ T5764] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 280.179568][ T5764] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 280.205597][ T5764] usb 2-1: USB disconnect, device number 18 [ 280.454353][T10407] loop2: detected capacity change from 0 to 32768 [ 280.504867][ T24] block nbd1: Connection timed out, retrying (0/1 alive) [ 280.515591][ T24] block nbd1: Connection timed out, retrying (0/1 alive) [ 280.525076][ T6006] block nbd1: Dead connection, failed to find a fallback [ 280.534585][ T6006] block nbd1: shutting down sockets [ 280.543430][ T24] block nbd1: Connection timed out, retrying (0/1 alive) [ 280.550781][ T6006] blk_print_req_error: 85 callbacks suppressed [ 280.550796][ T6006] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.568692][ T24] block nbd1: Connection timed out, retrying (0/1 alive) [ 280.576052][ T6006] buffer_io_error: 138 callbacks suppressed [ 280.576068][ T6006] Buffer I/O error on dev nbd1, logical block 0, async page read [ 280.591437][ T6006] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.600706][ T6006] Buffer I/O error on dev nbd1, logical block 3, async page read [ 280.608560][ T6006] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.617882][ T6006] Buffer I/O error on dev nbd1, logical block 2, async page read [ 280.625852][ T6006] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.635052][ T6006] Buffer I/O error on dev nbd1, logical block 1, async page read [ 280.648526][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 280.657986][ T55] Buffer I/O error on dev nbd1, logical block 0, async page read [ 280.668896][ T55] Buffer I/O error on dev nbd1, logical block 1, async page read [ 280.677620][ T55] Buffer I/O error on dev nbd1, logical block 2, async page read [ 280.686733][ T55] Buffer I/O error on dev nbd1, logical block 3, async page read [ 280.696221][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 280.705847][ T55] Buffer I/O error on dev nbd1, logical block 0, async page read [ 280.713857][ T55] Buffer I/O error on dev nbd1, logical block 1, async page read [ 280.725626][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.735402][ T55] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.742058][T10407] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 280.745463][ T55] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.768280][ T6006] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.783884][ T6730] ldm_validate_partition_table(): Disk read failed. [ 280.805478][T10427] loop3: detected capacity change from 0 to 512 [ 280.811948][ T6730] Dev nbd1: unable to read RDB block 0 [ 280.817437][ T6730] nbd1: unable to read partition table [ 280.864260][ T6730] ldm_validate_partition_table(): Disk read failed. [ 280.883093][ T6730] Dev nbd1: unable to read RDB block 0 [ 280.900734][ T6730] nbd1: unable to read partition table [ 280.954698][T10407] XFS (loop2): Ending clean mount [ 281.066298][T10433] loop1: detected capacity change from 0 to 512 [ 281.105247][T10433] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 281.127621][ T5774] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 281.169506][T10433] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.1782: bad orphan inode 131072 [ 281.216890][T10433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.306891][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.384063][T10440] loop1: detected capacity change from 0 to 256 [ 281.417594][T10440] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 281.539639][ T5764] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 281.716655][T10443] loop0: detected capacity change from 0 to 512 [ 281.748266][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.770085][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.793454][ T5764] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 281.803647][ T5764] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 281.839474][ T5764] usb 4-1: Manufacturer: syz [ 281.846737][ T5764] usb 4-1: config 0 descriptor?? [ 282.510714][ T5764] uclogic 0003:256C:006D.000C: failed retrieving Huion firmware version: -71 [ 282.531091][ T5764] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 282.538769][ T5764] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 282.568448][ T5764] usb 4-1: USB disconnect, device number 18 [ 282.695546][T10453] loop0: detected capacity change from 0 to 256 [ 282.728694][T10453] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 282.829471][ T789] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 283.021993][ T789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 283.032636][ T789] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 283.043586][ T789] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.083843][ T789] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 283.109495][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 283.128208][ T789] usb 3-1: Product: syz [ 283.138090][ T789] usb 3-1: Manufacturer: syz [ 283.148237][ T789] usb 3-1: SerialNumber: syz [ 283.381189][ T789] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 283.449731][ T27] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 283.594592][ T789] usb 3-1: USB disconnect, device number 20 [ 283.607338][ T789] usblp0: removed [ 283.641514][ T27] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 283.651671][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.665359][ T27] usb 4-1: config 0 descriptor?? [ 283.679117][ T27] cp210x 4-1:0.0: cp210x converter detected [ 284.098168][ T27] usb 4-1: cp210x converter now attached to ttyUSB0 [ 284.215806][T10468] loop2: detected capacity change from 0 to 512 [ 284.355538][ T5764] usb 4-1: USB disconnect, device number 19 [ 284.387652][ T5764] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 284.441078][ T5764] cp210x 4-1:0.0: device disconnected [ 284.728410][T10471] loop0: detected capacity change from 0 to 40427 [ 284.747034][T10471] F2FS-fs (loop0): invalid crc value [ 284.762030][ T789] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 284.774560][T10471] F2FS-fs (loop0): Found nat_bits in checkpoint [ 284.833889][T10471] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 284.951573][ T789] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.967874][ T5777] bio_check_eod: 11968 callbacks suppressed [ 284.967892][ T5777] syz-executor: attempt to access beyond end of device [ 284.967892][ T5777] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.997685][ T789] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.028003][ T5777] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 285.037370][ T789] usb 3-1: config 0 interface 0 has no altsetting 0 [ 285.059853][ T789] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 285.071231][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.096333][ T789] usb 3-1: config 0 descriptor?? [ 285.385708][T10491] loop3: detected capacity change from 0 to 8 [ 285.553938][ T789] hid (null): unknown global tag 0xfd [ 285.592777][ T789] waltop 0003:172F:0034.000D: unexpected long global item [ 285.607670][ T789] waltop: probe of 0003:172F:0034.000D failed with error -22 [ 285.706439][T10495] loop3: detected capacity change from 0 to 256 [ 285.735056][T10495] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 285.829562][ T789] usb 3-1: USB disconnect, device number 21 [ 285.945278][T10497] loop0: detected capacity change from 0 to 1024 [ 286.213678][T10489] loop1: detected capacity change from 0 to 40427 [ 286.233735][T10489] F2FS-fs (loop1): invalid crc value [ 286.266794][T10489] F2FS-fs (loop1): Found nat_bits in checkpoint [ 286.365705][T10489] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 286.454208][T10505] loop3: detected capacity change from 0 to 512 [ 286.695690][ T5775] syz-executor: attempt to access beyond end of device [ 286.695690][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 286.724514][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 287.170170][T10507] loop0: detected capacity change from 0 to 32768 [ 287.203638][T10507] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 287.268529][T10521] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 287.392821][ T5790] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 287.710378][T10528] loop1: detected capacity change from 0 to 1024 [ 288.103019][T10539] loop2: detected capacity change from 0 to 512 [ 288.189723][ T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 288.391302][ T23] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.412783][ T23] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.432933][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 288.443072][ T23] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 288.462477][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.482252][ T23] usb 4-1: config 0 descriptor?? [ 288.767284][T10542] F2FS-fs (loop1): invalid crc value [ 288.787029][T10542] F2FS-fs (loop1): Found nat_bits in checkpoint [ 288.852004][T10542] F2FS-fs (loop1): Start checkpoint disabled! [ 288.873634][T10542] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 288.916447][ T23] hid (null): unknown global tag 0xfd [ 288.950843][ T23] waltop 0003:172F:0034.000E: unexpected long global item [ 288.967055][ T23] waltop: probe of 0003:172F:0034.000E failed with error -22 [ 289.075656][ T42] kworker/u4:2: attempt to access beyond end of device [ 289.075656][ T42] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 289.090359][ T42] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 289.097688][ T42] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 289.105709][ T42] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 289.159899][ T23] usb 4-1: USB disconnect, device number 20 [ 289.770080][T10551] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 290.183705][T10559] set_capacity_and_notify: 1 callbacks suppressed [ 290.183722][T10559] loop2: detected capacity change from 0 to 8192 [ 291.018351][T10579] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 291.572083][T10584] loop0: detected capacity change from 0 to 8192 [ 291.902022][T10596] loop3: detected capacity change from 0 to 512 [ 291.932895][T10596] EXT4-fs: Ignoring removed bh option [ 291.974801][T10596] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 292.043686][T10596] EXT4-fs (loop3): 1 truncate cleaned up [ 292.060848][T10596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.261793][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.477771][T10593] loop2: detected capacity change from 0 to 40427 [ 292.487709][T10593] F2FS-fs (loop2): invalid crc value [ 292.523597][T10593] F2FS-fs (loop2): Found nat_bits in checkpoint [ 292.673147][T10593] F2FS-fs (loop2): Start checkpoint disabled! [ 292.719126][T10593] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 292.931160][T10610] loop0: detected capacity change from 0 to 128 [ 292.942094][T10610] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 292.962384][T10612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1861'. [ 293.036738][T10610] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 293.101568][ T11] kworker/u4:0: attempt to access beyond end of device [ 293.101568][ T11] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 293.101647][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 293.567024][T10622] loop1: detected capacity change from 0 to 512 [ 294.282165][T10648] loop3: detected capacity change from 0 to 1024 [ 294.323033][T10648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.466294][T10648] EXT4-fs warning (device loop3): ext4_rmdir:3245: inode #11: comm syz.3.1870: empty directory 'file0' has too many links (111) [ 294.488617][T10653] warning: `syz.0.1871' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 294.611639][T10638] loop1: detected capacity change from 0 to 32768 [ 294.618258][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.684722][T10638] JBD2: Ignoring recovery information on journal [ 294.765049][T10638] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 294.886961][T10638] UBIFS error (pid: 10638): cannot open "ubi:0", error -19 [ 294.954111][ T5775] (syz-executor,5775,1):ocfs2_inode_is_valid_to_delete:905 ERROR: Skipping delete of system file 66 [ 294.997892][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 295.146155][T10661] loop2: detected capacity change from 0 to 512 [ 295.509869][T10669] loop6: detected capacity change from 0 to 7 [ 295.556251][ C1] blk_print_req_error: 117 callbacks suppressed [ 295.556271][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 295.603828][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.613184][ C0] buffer_io_error: 138 callbacks suppressed [ 295.613200][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.631089][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.640436][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.649117][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.658396][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.679388][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.688636][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.700382][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.709693][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.942958][T10684] Set syz1 is full, maxelem 0 reached [ 295.997899][T10686] loop3: detected capacity change from 0 to 512 [ 296.037451][T10686] EXT4-fs (loop3): 1 truncate cleaned up [ 296.052658][T10686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.095381][T10691] loop1: detected capacity change from 0 to 512 [ 296.181472][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.259447][ T5764] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 296.449359][ T5764] usb 1-1: Using ep0 maxpacket: 16 [ 296.507471][ T5764] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 296.516897][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.535415][ T5764] usb 1-1: Product: syz [ 296.543794][ T5764] usb 1-1: Manufacturer: syz [ 296.548545][ T5764] usb 1-1: SerialNumber: syz [ 296.666733][T10696] loop2: detected capacity change from 0 to 8192 [ 296.727275][T10696] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 296.792666][ T5764] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 296.863175][ T5764] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 296.894682][ T5764] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 296.923470][ T5764] usb 1-1: media controller created [ 297.020153][ T5764] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.073808][ T5764] zl10353_read_register: readreg error (reg=127, ret==-71) [ 297.181941][ T5764] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 297.202305][ T5764] usb 1-1: USB disconnect, device number 20 [ 297.699523][T10702] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 297.762809][T10702] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 297.831912][T10702] CIFS: VFS: Error connecting to socket. Aborting operation. [ 297.850808][T10702] CIFS: VFS: cifs_mount failed w/return code = -111 [ 297.954934][T10711] netlink: 'syz.0.1897': attribute type 39 has an invalid length. [ 298.487058][T10724] netlink: 'syz.0.1904': attribute type 11 has an invalid length. [ 298.634302][T10709] loop2: detected capacity change from 0 to 32768 [ 298.689563][T10709] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 298.832319][T10709] XFS (loop2): Ending clean mount [ 298.866922][T10709] XFS (loop2): Quotacheck needed: Please wait. [ 298.984705][T10709] XFS (loop2): Quotacheck: Done. [ 299.116156][ T5774] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 299.690738][T10744] loop0: detected capacity change from 0 to 32768 [ 299.728979][T10744] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 299.858066][T10744] XFS (loop0): Ending clean mount [ 300.067017][ T5777] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 300.813068][T10773] loop2: detected capacity change from 0 to 32768 [ 300.828314][T10773] XFS: noikeep mount option is deprecated. [ 300.877105][T10773] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 300.967247][T10785] loop3: detected capacity change from 0 to 1024 [ 301.090347][T10789] loop1: detected capacity change from 0 to 128 [ 301.112411][T10789] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 301.185499][T10791] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1923'. [ 301.249752][T10773] XFS (loop2): Ending clean mount [ 301.264063][T10789] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 301.286189][T10773] XFS (loop2): Quotacheck needed: Please wait. [ 301.386442][T10773] XFS (loop2): Quotacheck: Done. [ 301.420525][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'. [ 301.891414][ T5774] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 301.912424][T10809] cougar: G6 mapped to F18 [ 302.133621][T10816] loop0: detected capacity change from 0 to 64 [ 302.171588][T10819] loop3: detected capacity change from 0 to 128 [ 302.209845][T10819] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 302.283603][T10819] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 302.379697][T10822] ip_tables: iptables: counters copy to user failed while replacing table [ 302.520016][T10826] phram: illegal device length [ 302.646365][T10834] loop3: detected capacity change from 0 to 4096 [ 302.691422][T10834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.799496][ T27] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 302.836588][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.871903][T10840] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 302.991932][ T27] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 303.015440][ T27] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 303.045887][ T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 303.074444][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.114667][T10830] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 303.173689][ T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 303.596897][ T5764] usb 1-1: USB disconnect, device number 21 [ 303.994228][T10861] ima: signed policy file (specified as an absolute pathname) required [ 304.003633][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 304.003648][ T28] audit: type=1802 audit(2000000011.570:53): pid=10861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.2.1955" res=0 errno=0 [ 304.030034][T10860] ima: policy update failed [ 304.051233][ T28] audit: type=1802 audit(2000000011.600:54): pid=10860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1955" res=0 errno=0 [ 304.201015][T10870] loop2: detected capacity change from 0 to 256 [ 304.243780][T10870] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 304.275586][T10870] exFAT-fs (loop2): error, invalid size(size(4096) > aligned(9223372036854777344) [ 304.275586][T10870] [ 304.290631][T10870] exFAT-fs (loop2): Filesystem has been set read-only [ 304.304189][T10870] exFAT-fs (loop2): error, invalid size(size(4096) > aligned(9223372036854777344) [ 304.304189][T10870] [ 304.546015][T10878] loop2: detected capacity change from 0 to 2048 [ 304.632277][T10878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.682839][T10878] ext4 filesystem being mounted at /468/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 304.818371][T10878] fs-verity: sha512 using implementation "sha512-avx2" [ 304.931274][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.616537][T10890] loop2: detected capacity change from 0 to 32768 [ 305.646415][T10890] JBD2: Ignoring recovery information on journal [ 305.734033][T10890] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 305.796169][T10903] loop3: detected capacity change from 0 to 4096 [ 305.844861][T10903] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 306.054196][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 306.201095][T10913] vcan0: tx address claim with dlc 0 [ 306.278117][T10914] loop2: detected capacity change from 0 to 1024 [ 306.325918][T10914] hfsplus: unable to find HFS+ superblock [ 306.474770][T10920] loop1: detected capacity change from 0 to 256 [ 306.576673][T10920] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 306.675594][T10920] exFAT-fs (loop1): error, invalid size(size(4096) > aligned(9223372036854777344) [ 306.675594][T10920] [ 306.722290][T10920] exFAT-fs (loop1): Filesystem has been set read-only [ 306.738922][T10920] exFAT-fs (loop1): error, invalid size(size(4096) > aligned(9223372036854777344) [ 306.738922][T10920] [ 306.837497][T10918] loop3: detected capacity change from 0 to 8192 [ 307.181808][T10938] loop2: detected capacity change from 0 to 512 [ 307.247059][T10938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.324014][T10938] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.451805][T10938] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 307.491895][T10938] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 307.535581][T10938] EXT4-fs (loop2): This should not happen!! Data will be lost [ 307.535581][T10938] [ 307.568590][T10938] EXT4-fs (loop2): Total free blocks count 0 [ 307.586288][T10938] EXT4-fs (loop2): Free/Dirty block details [ 307.596515][T10938] EXT4-fs (loop2): free_blocks=65280 [ 307.607364][T10938] EXT4-fs (loop2): dirty_blocks=1 [ 307.622348][T10938] EXT4-fs (loop2): Block reservation details [ 307.632463][T10938] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 307.785705][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.209921][T10948] loop3: detected capacity change from 0 to 32768 [ 308.243611][T10948] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 308.311682][T10948] XFS (loop3): Ending clean mount [ 308.327881][T10948] XFS (loop3): Quotacheck needed: Please wait. [ 308.423710][T10948] XFS (loop3): Quotacheck: Done. [ 308.601925][ T5776] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 309.004080][T10998] loop0: detected capacity change from 0 to 256 [ 309.046468][T10998] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 309.198816][T11004] loop2: detected capacity change from 0 to 128 [ 309.223808][T11004] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 309.239466][ T5863] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 309.270537][T11004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.430388][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 309.463216][ T5863] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 309.481095][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.491686][ T5863] usb 4-1: Product: syz [ 309.495931][ T5863] usb 4-1: Manufacturer: syz [ 309.516618][ T5863] usb 4-1: SerialNumber: syz [ 309.570963][T11012] loop2: detected capacity change from 0 to 64 [ 309.753935][ T5863] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 309.797096][ T5863] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 309.839191][ T5863] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 309.853447][ T5863] usb 4-1: media controller created [ 309.886352][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.011971][T11008] loop0: detected capacity change from 0 to 32768 [ 310.064252][T11008] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 310.143605][T11008] XFS (loop0): Ending clean mount [ 310.159385][ T5863] zl10353_read_register: readreg error (reg=127, ret==-110) [ 310.199985][ T5891] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 310.228371][ T5863] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 310.238988][T11008] XFS (loop0): Quotacheck needed: Please wait. [ 310.255869][ T5863] usb 4-1: USB disconnect, device number 21 [ 310.334658][T11008] XFS (loop0): Quotacheck: Done. [ 310.419638][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 310.436492][ T5891] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 310.460927][ T5891] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 310.479418][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 310.498283][ T5891] usb 2-1: Product: syz [ 310.508267][ T5891] usb 2-1: Manufacturer: syz [ 310.517157][ T5891] usb 2-1: SerialNumber: syz [ 310.527476][ T5891] usb 2-1: config 0 descriptor?? [ 310.538723][T11020] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 310.543085][ T5777] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 310.565909][ T5891] hub 2-1:0.0: bad descriptor, ignoring hub [ 310.585036][ T5891] hub: probe of 2-1:0.0 failed with error -5 [ 310.598882][T11035] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 310.675152][T11037] loop2: detected capacity change from 0 to 512 [ 310.703118][T11037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.718976][T11037] ext4 filesystem being mounted at /484/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.897956][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.979883][T11043] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 311.086112][T11043] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 311.135438][T11043] ntfs3: loop3: Failed to load $Extend (-2). [ 311.142907][T11043] ntfs3: loop3: Failed to initialize $Extend. [ 311.231312][ T789] usb 2-1: USB disconnect, device number 19 [ 311.488801][T11054] set_capacity_and_notify: 1 callbacks suppressed [ 311.488814][T11054] loop2: detected capacity change from 0 to 1024 [ 311.590778][T11054] hfsplus: request for non-existent node 211 in B*Tree [ 311.598581][T11054] hfsplus: request for non-existent node 211 in B*Tree [ 311.648977][ T59] hfsplus: b-tree write err: -5, ino 8 [ 312.179538][ T5860] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 312.268595][T11062] loop1: detected capacity change from 0 to 32768 [ 312.297472][T11062] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 312.309635][ T5863] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 312.346532][T11062] XFS (loop1): Ending clean mount [ 312.358432][T11062] XFS (loop1): Quotacheck needed: Please wait. [ 312.379466][ T5860] usb 1-1: Using ep0 maxpacket: 32 [ 312.397969][ T5860] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 312.436419][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.454624][T11062] XFS (loop1): Quotacheck: Done. [ 312.480131][ T5860] usb 1-1: config 0 descriptor?? [ 312.493657][ T5860] as10x_usb: device has been detected [ 312.500017][ T5860] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 312.524112][ T5860] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 312.538061][ T5860] as10x_usb: error during firmware upload part1 [ 312.544660][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 312.561913][ T5860] Registered device nBox DVB-T Dongle [ 312.578153][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.609025][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.633778][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 312.657592][ T5863] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 312.672670][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.684531][ T5863] usb 3-1: config 0 descriptor?? [ 312.702524][ T5775] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 312.777763][ T5860] usb 1-1: USB disconnect, device number 22 [ 312.835422][ T5860] Unregistered device nBox DVB-T Dongle [ 312.860663][ T5860] as10x_usb: device has been disconnected [ 313.173952][ T5863] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000F/input/input21 [ 313.348605][ T5863] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000F/input/input22 [ 313.544588][ T5863] kye 0003:0458:5011.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 313.601850][ T5863] usb 3-1: USB disconnect, device number 22 [ 313.724538][T11091] fido_id[11091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 314.062587][T11100] ptp ptp0: new virtual clock ptp1 [ 314.090079][T11100] ptp ptp0: new virtual clock ptp2 [ 314.108566][T11100] ptp ptp0: new virtual clock ptp3 [ 314.123187][T11100] ptp ptp0: new virtual clock ptp4 [ 314.149470][T11100] ptp ptp0: new virtual clock ptp5 [ 314.154705][T11100] ptp ptp0: guarantee physical clock free running [ 314.551506][T11119] loop3: detected capacity change from 0 to 16 [ 314.568097][T11119] erofs: (device loop3): mounted with root inode @ nid 36. [ 315.250778][T11118] loop2: detected capacity change from 0 to 32768 [ 315.283494][T11118] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.2053 (11118) [ 315.317040][T11118] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 315.340878][T11118] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 315.356059][T11118] BTRFS info (device loop2): enabling ssd optimizations [ 315.365593][T11118] BTRFS info (device loop2): not using ssd optimizations [ 315.377358][T11118] BTRFS info (device loop2): turning off barriers [ 315.387967][T11118] BTRFS info (device loop2): use no compression [ 315.398249][T11118] BTRFS info (device loop2): using free space tree [ 315.785767][ T5774] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 315.879436][T11164] loop1: detected capacity change from 0 to 128 [ 315.961177][T11164] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 316.049765][T11164] ext4 filesystem being mounted at /541/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 316.153097][T11164] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 316.267468][ T5790] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop2 scanned by udevd (5790) [ 316.324335][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.398463][T11180] loop3: detected capacity change from 0 to 16 [ 316.440178][T11180] erofs: (device loop3): mounted with root inode @ nid 36. [ 316.672931][T11187] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2073'. [ 316.726102][T11187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2073'. [ 316.885189][T11193] loop1: detected capacity change from 0 to 512 [ 316.976661][ T6730] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.989152][T11195] loop3: detected capacity change from 0 to 1024 [ 317.179409][T11195] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 317.246831][T11195] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 317.303944][T11195] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2077: Failed to acquire dquot type 0 [ 317.370108][T11195] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 317.422502][T11195] EXT4-fs (loop3): 1 truncate cleaned up [ 317.459462][T11195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.575726][T11195] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 317.613782][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.620628][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.631416][T11195] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 317.659425][T11195] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2077: Failed to acquire dquot type 0 [ 317.803755][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.222017][T11225] loop0: detected capacity change from 0 to 512 [ 318.268622][T11225] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 318.282009][T11225] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2089: inode #15: comm syz.0.2089: iget: illegal inode # [ 318.317487][T11225] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.2089: couldn't read orphan inode 15 (err -117) [ 318.377212][T11225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.407452][T11225] EXT4-fs (loop0): shut down requested (2) [ 318.471753][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.711313][T11235] loop0: detected capacity change from 0 to 4096 [ 319.069443][ T971] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 319.206959][T11245] loop0: detected capacity change from 0 to 512 [ 319.251402][T11245] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 319.275883][ T971] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 319.289451][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.290774][T11245] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 319.306082][ T971] usb 2-1: Product: syz [ 319.306107][ T971] usb 2-1: Manufacturer: syz [ 319.315950][ T971] usb 2-1: SerialNumber: syz [ 319.330189][ T971] usb 2-1: config 0 descriptor?? [ 319.338956][ T971] hub 2-1:0.0: bad descriptor, ignoring hub [ 319.346809][ T971] hub: probe of 2-1:0.0 failed with error -5 [ 319.364034][T11245] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #13: comm syz.0.2098: iget: bad i_size value: 12154757448730 [ 319.400060][T11245] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.2098: couldn't read orphan inode 13 (err -117) [ 319.422191][T11245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.534407][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.584873][ T971] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 319.650901][ T971] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 319.688141][ T971] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 319.708076][ T971] usb 2-1: media controller created [ 319.766791][ T971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.786994][T11239] dib0700: tx buffer length is larger than 4. Not supported. [ 319.948423][ T971] DVB: Unable to find symbol dib7000p_attach() [ 319.958407][ T971] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 320.027330][T11263] loop0: detected capacity change from 0 to 512 [ 320.070047][ T971] rc_core: IR keymap rc-dib0700-rc5 not found [ 320.090618][ T971] Registered IR keymap rc-empty [ 320.095853][ T971] dvb-usb: could not initialize remote control. [ 320.108153][T11263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.121935][ T971] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 320.131639][T11263] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.142622][ T5860] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 320.163315][ T971] usb 2-1: USB disconnect, device number 20 [ 320.223474][ T971] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 320.316265][T11263] EXT4-fs error (device loop0): ext4_empty_dir:3138: inode #12: comm syz.0.2105: invalid size [ 320.371955][ T5860] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 320.383321][ T5860] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 320.394177][ T5860] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 320.404349][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.421195][T11257] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 320.448022][T11268] tmpfs: Bad value for 'uid' [ 320.461383][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.475121][ T5860] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 320.782138][ T789] usb 4-1: USB disconnect, device number 22 [ 320.904163][T11277] netlink: 'syz.2.2110': attribute type 5 has an invalid length. [ 321.079969][T11282] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.089659][T11286] nbd: socks must be embedded in a SOCK_ITEM attr [ 321.476994][ T5790] udevd[5790]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 321.721568][T11308] loop0: detected capacity change from 0 to 512 [ 321.754346][T11308] EXT4-fs (loop0): Test dummy encryption mode enabled [ 321.789398][T11308] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 321.825161][T11308] EXT4-fs (loop0): 1 truncate cleaned up [ 321.832809][T11308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.026324][T11308] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 322.161455][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.832325][T11359] loop2: detected capacity change from 0 to 512 [ 322.868190][T11359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.881764][T11359] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.916311][T11359] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.2145: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 322.992075][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.370017][ T5891] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 323.569662][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 323.590649][ T5891] usb 1-1: too many endpoints for config 0 interface 0 altsetting 3: 254, using maximum allowed: 30 [ 323.609996][ T5891] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 323.643282][ T5891] usb 1-1: config 0 interface 0 has no altsetting 0 [ 323.664145][ T5891] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 323.684144][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.709816][ T5891] usb 1-1: config 0 descriptor?? [ 323.860617][T11392] program syz.2.2158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.134962][ T5891] uclogic 0003:28BD:0071.0010: interface is invalid, ignoring [ 324.258018][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2163'. [ 324.357783][T11408] loop1: detected capacity change from 0 to 2048 [ 324.375132][T11408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.404998][ T5891] usb 1-1: USB disconnect, device number 23 [ 324.433316][T11408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.496074][T11408] EXT4-fs (loop1): shut down requested (1) [ 324.548905][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.610286][ T5863] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 324.718815][T11418] loop1: detected capacity change from 0 to 2048 [ 324.765333][T11418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.802424][ T5863] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 324.817727][ T5863] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 324.828791][T11417] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 324.831714][ T5863] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.857253][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.864025][T11417] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 324.878548][T11417] EXT4-fs (loop1): This should not happen!! Data will be lost [ 324.878548][T11417] [ 324.886705][T11406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 324.888759][T11417] EXT4-fs (loop1): Total free blocks count 0 [ 324.901759][T11417] EXT4-fs (loop1): Free/Dirty block details [ 324.907962][T11417] EXT4-fs (loop1): free_blocks=4096 [ 324.913356][T11417] EXT4-fs (loop1): dirty_blocks=64 [ 324.918575][T11417] EXT4-fs (loop1): Block reservation details [ 324.925169][T11417] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 324.939884][ T5863] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 324.967855][ T42] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 325.228555][ T5764] usb 3-1: USB disconnect, device number 23 [ 325.403315][T11429] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2174'. [ 325.419653][T11429] vlan1: entered allmulticast mode [ 325.442935][T11429] veth0_vlan: entered allmulticast mode [ 325.636303][T11442] loop3: detected capacity change from 0 to 256 [ 325.657342][T11442] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 325.758891][T11442] FAT-fs (loop3): Directory bread(block 64) failed [ 325.769715][T11442] FAT-fs (loop3): Directory bread(block 65) failed [ 325.776556][T11442] FAT-fs (loop3): Directory bread(block 66) failed [ 325.809733][T11442] FAT-fs (loop3): Directory bread(block 67) failed [ 325.816784][T11442] FAT-fs (loop3): Directory bread(block 68) failed [ 325.824090][T11442] FAT-fs (loop3): Directory bread(block 69) failed [ 325.831370][T11442] FAT-fs (loop3): Directory bread(block 70) failed [ 325.838132][T11442] FAT-fs (loop3): Directory bread(block 71) failed [ 325.845161][T11442] FAT-fs (loop3): Directory bread(block 72) failed [ 325.852918][T11442] FAT-fs (loop3): Directory bread(block 73) failed [ 326.208274][T11454] loop1: detected capacity change from 0 to 4096 [ 326.244538][T11454] EXT4-fs (loop1): Test dummy encryption mode enabled [ 326.288842][T11454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.368751][T11454] EXT4-fs (loop1): shut down requested (1) [ 326.438262][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.506585][T11469] syz.1.2192: attempt to access beyond end of device [ 326.506585][T11469] loop2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 326.539912][T11469] SQUASHFS error: Failed to read block 0x0: -5 [ 326.619437][ T5863] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 326.649597][ T5764] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 326.804237][ T5863] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 326.821474][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.838653][ T5863] usb 3-1: Product: syz [ 326.843403][ T5863] usb 3-1: Manufacturer: syz [ 326.848069][ T5863] usb 3-1: SerialNumber: syz [ 326.857072][ T5764] usb 1-1: config index 0 descriptor too short (expected 65445, got 45) [ 326.862637][ T5863] usb 3-1: config 0 descriptor?? [ 326.881039][ T5764] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 326.884206][ T5863] hub 3-1:0.0: bad descriptor, ignoring hub [ 326.902855][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.907019][ T5863] hub: probe of 3-1:0.0 failed with error -5 [ 326.917984][ T5764] usb 1-1: Product: syz [ 326.925326][ T5764] usb 1-1: Manufacturer: syz [ 326.932564][ T5764] usb 1-1: SerialNumber: syz [ 327.105478][ T5863] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 327.123665][ T5863] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 327.134536][ T5863] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 327.143269][ T5863] usb 3-1: media controller created [ 327.188961][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 327.273627][ T5764] rtl8150 1-1:1.0: couldn't reset the device [ 327.291188][ T5764] rtl8150: probe of 1-1:1.0 failed with error -5 [ 327.318795][T11467] dib0700: tx buffer length is larger than 4. Not supported. [ 327.332499][ T5764] usb 1-1: USB disconnect, device number 24 [ 327.359702][ T5863] DVB: Unable to find symbol dib7000p_attach() [ 327.375771][ T5863] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 327.529554][ T5863] rc_core: IR keymap rc-dib0700-rc5 not found [ 327.535971][ T5863] Registered IR keymap rc-empty [ 327.542643][ T5863] dvb-usb: could not initialize remote control. [ 327.549178][ T5863] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 327.562948][ T5863] usb 3-1: USB disconnect, device number 24 [ 327.690751][ T5863] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 328.295888][T11515] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 328.699411][ T5863] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 328.887627][ T5863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 328.901120][ T5863] usb 4-1: config 0 has no interface number 0 [ 328.907374][ T5863] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 328.919953][T11536] loop2: detected capacity change from 0 to 512 [ 328.930303][ T5863] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 328.949524][T11536] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 328.957599][ T5863] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 328.968715][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.989717][ T5863] usb 4-1: config 0 descriptor?? [ 328.995573][T11521] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 329.010156][T11536] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 329.050276][ T5863] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 329.112211][ T42] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 329.139771][ T5860] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 329.273148][ T5764] usb 4-1: USB disconnect, device number 23 [ 329.273236][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 329.353325][ T5860] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 329.379435][ T5860] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 329.399351][ T5860] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 329.408567][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.431495][T11534] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 329.463652][ T5860] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 329.568193][T11545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2224'. [ 329.747593][ T5860] usb 2-1: USB disconnect, device number 21 [ 330.066548][T11552] bond0: option mode: unable to set because the bond device has slaves [ 330.322662][ T5764] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 330.335240][T11561] UHID_CREATE from different security context by process 1134 (syz.3.2231), this is not allowed. [ 330.362576][ T5764] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.481200][T11563] fido_id[11563]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 330.609412][ T5860] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 330.813175][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.828905][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.839858][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.865273][ T5860] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.878922][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.898734][ T5860] usb 3-1: config 0 descriptor?? [ 334.120422][ T28] audit: type=1326 audit(2000000042.673:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.3.2240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c1b9e559 code=0x7fc00000 [ 335.049479][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 336.174499][ T5860] usbhid 3-1:0.0: can't add hid device: -32 [ 336.181701][ T5860] usbhid: probe of 3-1:0.0 failed with error -32 [ 379.052972][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.059608][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.492497][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.498899][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 491.054080][ T29] INFO: task khugepaged:35 blocked for more than 143 seconds. [ 491.061720][ T29] Not tainted syzkaller #0 [ 491.066672][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.075613][ T29] task:khugepaged state:D stack:27880 pid:35 ppid:2 flags:0x00004000 [ 491.089327][ T29] Call Trace: [ 491.092767][ T29] [ 491.095807][ T29] __schedule+0x15ae/0x4660 [ 491.104146][ T29] ? asan.module_dtor+0x20/0x20 [ 491.109149][ T29] ? mark_lock+0x94/0x320 [ 491.113830][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 491.125364][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 491.132626][ T29] schedule+0xbd/0x170 [ 491.136790][ T29] schedule_preempt_disabled+0x13/0x20 [ 491.142519][ T29] rwsem_down_write_slowpath+0xc3f/0x1020 [ 491.148306][ T29] ? rwsem_down_write_slowpath+0x81b/0x1020 [ 491.154347][ T29] ? rwsem_down_read_slowpath+0x880/0x880 [ 491.160172][ T29] ? mtree_destroy+0x30/0x30 [ 491.165046][ T29] ? read_lock_is_recursive+0x20/0x20 [ 491.170609][ T29] down_write+0x1b9/0x200 [ 491.175018][ T29] ? down_read_killable+0x340/0x340 [ 491.180312][ T29] ? hugepage_vma_revalidate+0x2ba/0x310 [ 491.186089][ T29] hpage_collapse_scan_pmd+0x216a/0x4050 [ 491.191919][ T29] ? __flush_work+0x120/0xac0 [ 491.196732][ T29] ? hpage_collapse_scan_pmd+0x1631/0x4050 [ 491.202685][ T29] ? hpage_collapse_scan_pmd+0x16d6/0x4050 [ 491.208581][ T29] ? hpage_collapse_scan_file+0x5e40/0x5e40 [ 491.223128][ T29] ? mas_ascend+0x713/0x830 [ 491.227789][ T29] ? file_thp_enabled+0x9c/0x140 [ 491.238507][ T29] ? hugepage_vma_check+0x47d/0x560 [ 491.244206][ T29] khugepaged+0x8df/0x1520 [ 491.248734][ T29] ? start_stop_khugepaged+0x160/0x160 [ 491.254475][ T29] ? wake_bit_function+0x200/0x200 [ 491.259710][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 491.264808][ T29] ? wake_bit_function+0x200/0x200 [ 491.271013][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 491.276982][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 491.282321][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 491.288332][ T29] ? _raw_spin_unlock+0x40/0x40 [ 491.293347][ T29] ? __kthread_parkme+0x71/0x1c0 [ 491.298346][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 491.303576][ T29] kthread+0x2fa/0x390 [ 491.307706][ T29] ? start_stop_khugepaged+0x160/0x160 [ 491.313274][ T29] ? kthread_blkcg+0xd0/0xd0 [ 491.317921][ T29] ret_from_fork+0x48/0x80 [ 491.322476][ T29] ? kthread_blkcg+0xd0/0xd0 [ 491.327276][ T29] ret_from_fork_asm+0x11/0x20 [ 491.332207][ T29] [ 491.335352][ T29] INFO: task kworker/u4:4:59 blocked for more than 143 seconds. [ 491.346304][ T29] Not tainted syzkaller #0 [ 491.352420][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.365652][ T29] task:kworker/u4:4 state:D stack:22040 pid:59 ppid:2 flags:0x00004000 [ 491.375309][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 491.381590][ T29] Call Trace: [ 491.384949][ T29] [ 491.387936][ T29] __schedule+0x15ae/0x4660 [ 491.392569][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 491.398908][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 491.405281][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 491.411451][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 491.416544][ T29] ? asan.module_dtor+0x20/0x20 [ 491.421545][ T29] ? blk_check_plugged+0x250/0x250 [ 491.426836][ T29] ? rq_wait_inc_below+0x11f/0x1a0 [ 491.432040][ T29] ? wq_worker_sleeping+0x63/0x240 [ 491.437219][ T29] schedule+0xbd/0x170 [ 491.441525][ T29] io_schedule+0x80/0xd0 [ 491.445840][ T29] rq_qos_wait+0x22b/0x360 [ 491.450567][ T29] ? wbt_inflight_cb+0x2f0/0x2f0 [ 491.455569][ T29] ? rq_depth_scale_down+0x2f0/0x2f0 [ 491.462036][ T29] ? rq_qos_wait+0x360/0x360 [ 491.466692][ T29] ? wbt_exit+0xb0/0xb0 [ 491.472004][ T29] ? blk_bio_list_merge+0xd0/0xd0 [ 491.477161][ T29] wbt_wait+0x34a/0x580 [ 491.481414][ T29] ? rwb_trace_step+0x320/0x320 [ 491.486328][ T29] ? dd_depth_updated+0x110/0x110 [ 491.492466][ T29] ? rwb_trace_step+0x320/0x320 [ 491.497479][ T29] __rq_qos_throttle+0x65/0xb0 [ 491.502428][ T29] blk_mq_submit_bio+0x8fb/0x2220 [ 491.507520][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 491.512775][ T29] ? blk_mq_plug_issue_direct+0x550/0x550 [ 491.518556][ T29] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 491.525007][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 491.530538][ T29] ? ktime_get+0x7f/0x280 [ 491.534928][ T29] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 491.541275][ T29] ? ktime_get_real_ts64+0x440/0x440 [ 491.546624][ T29] __submit_bio+0x12b/0x260 [ 491.551230][ T29] ? blk_free_queue_rcu+0x40/0x40 [ 491.556306][ T29] submit_bio_noacct_nocheck+0x6e8/0x9c0 [ 491.562056][ T29] ? __folio_end_writeback+0xe10/0xe10 [ 491.567624][ T29] ? __mod_lruvec_page_state+0xa5/0x410 [ 491.573332][ T29] ? should_fail_request+0x70/0x70 [ 491.578513][ T29] ? submit_bio_noacct+0xfba/0x1b30 [ 491.583901][ T29] ext4_bio_write_folio+0x16a4/0x22d0 [ 491.589501][ T29] mpage_submit_folio+0x231/0x3c0 [ 491.594668][ T29] mpage_process_page_bufs+0x6bf/0x8c0 [ 491.600300][ T29] mpage_prepare_extent_to_map+0xecd/0x1f80 [ 491.606286][ T29] ? trace_ext4_writepages+0x1c0/0x1c0 [ 491.611900][ T29] ? kmem_cache_alloc+0x1a6/0x2c0 [ 491.617024][ T29] ext4_do_writepages+0xb46/0x3990 [ 491.622352][ T29] ? mark_lock+0x94/0x320 [ 491.626767][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 491.633882][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 491.639435][ T29] ? __lock_acquire+0x1431/0x7eb0 [ 491.644576][ T29] ext4_writepages+0x1dd/0x350 [ 491.649482][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 491.654474][ T29] ? reacquire_held_locks+0x31f/0x5c0 [ 491.659927][ T29] ? writeback_sb_inodes+0x35e/0x1020 [ 491.665377][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 491.670424][ T29] do_writepages+0x351/0x590 [ 491.675088][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 491.681126][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 491.686585][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 491.691734][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 491.696835][ T29] __writeback_single_inode+0x14e/0xee0 [ 491.702487][ T29] writeback_sb_inodes+0x813/0x1020 [ 491.707816][ T29] ? queue_io+0x530/0x530 [ 491.713592][ T29] __writeback_inodes_wb+0x114/0x240 [ 491.718986][ T29] wb_writeback+0x472/0xbe0 [ 491.723614][ T29] ? queue_io+0x2c1/0x530 [ 491.728001][ T29] ? percpu_ref_tryget+0x250/0x250 [ 491.733594][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 491.738705][ T29] wb_workfn+0xb8e/0xe60 [ 491.743403][ T29] ? migrate_task_rq_fair+0x290/0x770 [ 491.748865][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 491.754719][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 491.760805][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 491.765895][ T29] ? read_lock_is_recursive+0x20/0x20 [ 491.771439][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 491.776693][ T29] ? process_scheduled_works+0x975/0x1600 [ 491.782511][ T29] ? process_scheduled_works+0x975/0x1600 [ 491.788495][ T29] process_scheduled_works+0xa60/0x1600 [ 491.794224][ T29] ? worker_attach_to_pool+0x370/0x370 [ 491.799898][ T29] ? assign_work+0x3cc/0x5d0 [ 491.804568][ T29] worker_thread+0xa5e/0xfe0 [ 491.809319][ T29] kthread+0x2fa/0x390 [ 491.813451][ T29] ? pr_cont_work+0x550/0x550 [ 491.818176][ T29] ? kthread_blkcg+0xd0/0xd0 [ 491.822854][ T29] ret_from_fork+0x48/0x80 [ 491.827367][ T29] ? kthread_blkcg+0xd0/0xd0 [ 491.832108][ T29] ret_from_fork_asm+0x11/0x20 [ 491.837098][ T29] [ 491.840377][ T29] INFO: task jbd2/sda1-8:5103 blocked for more than 144 seconds. [ 491.848180][ T29] Not tainted syzkaller #0 [ 491.853292][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.862060][ T29] task:jbd2/sda1-8 state:D stack:25384 pid:5103 ppid:2 flags:0x00004000 [ 491.871386][ T29] Call Trace: [ 491.874710][ T29] [ 491.877664][ T29] __schedule+0x15ae/0x4660 [ 491.882373][ T29] ? asan.module_dtor+0x20/0x20 [ 491.887291][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 491.892422][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 491.898372][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 491.903684][ T29] schedule+0xbd/0x170 [ 491.907824][ T29] io_schedule+0x80/0xd0 [ 491.912195][ T29] bit_wait_io+0x11/0xd0 [ 491.916502][ T29] __wait_on_bit+0x9f/0x2c0 [ 491.921258][ T29] ? bit_wait+0xd0/0xd0 [ 491.925483][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 491.931045][ T29] ? bit_wait+0xd0/0xd0 [ 491.935253][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 491.941382][ T29] ? do_raw_write_lock+0x11e/0x260 [ 491.946613][ T29] ? bit_waitqueue+0x30/0x30 [ 491.951669][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 491.956766][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 491.963471][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 491.970354][ T29] ? lock_chain_count+0x20/0x20 [ 491.975265][ T29] ? _raw_spin_unlock+0x40/0x40 [ 491.980229][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 491.985918][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 491.991295][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 491.996396][ T29] ? timer_delete_sync+0x20/0x20 [ 492.002468][ T29] ? do_raw_read_unlock+0x80/0x80 [ 492.007605][ T29] ? prepare_to_wait+0x1aa/0x200 [ 492.012739][ T29] kjournald2+0x40f/0x810 [ 492.017242][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 492.023601][ T29] ? wake_bit_function+0x200/0x200 [ 492.028780][ T29] ? _raw_spin_unlock+0x40/0x40 [ 492.033753][ T29] ? __kthread_parkme+0x71/0x1c0 [ 492.038757][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 492.044093][ T29] kthread+0x2fa/0x390 [ 492.048219][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 492.054587][ T29] ? kthread_blkcg+0xd0/0xd0 [ 492.059287][ T29] ret_from_fork+0x48/0x80 [ 492.063873][ T29] ? kthread_blkcg+0xd0/0xd0 [ 492.068525][ T29] ret_from_fork_asm+0x11/0x20 [ 492.073628][ T29] [ 492.076719][ T29] INFO: task syz-executor:5762 blocked for more than 144 seconds. [ 492.084706][ T29] Not tainted syzkaller #0 [ 492.089835][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.098555][ T29] task:syz-executor state:D stack:22888 pid:5762 ppid:5761 flags:0x00004002 [ 492.107937][ T29] Call Trace: [ 492.112316][ T29] [ 492.115291][ T29] __schedule+0x15ae/0x4660 [ 492.119994][ T29] ? mark_lock+0x94/0x320 [ 492.124385][ T29] ? asan.module_dtor+0x20/0x20 [ 492.129397][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 492.134717][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 492.140923][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 492.146416][ T29] schedule+0xbd/0x170 [ 492.150652][ T29] io_schedule+0x80/0xd0 [ 492.154986][ T29] bit_wait_io+0x11/0xd0 [ 492.159462][ T29] __wait_on_bit+0x9f/0x2c0 [ 492.164021][ T29] ? bit_wait+0xd0/0xd0 [ 492.168233][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 492.174095][ T29] ? bit_wait+0xd0/0xd0 [ 492.178311][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 492.183310][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 492.188415][ T29] ? bit_waitqueue+0x30/0x30 [ 492.193235][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 492.198509][ T29] do_get_write_access+0x5c9/0xe00 [ 492.204050][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 492.210203][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 492.216463][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 492.222868][ T29] ? __might_sleep+0xe0/0xe0 [ 492.227610][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 492.233426][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 492.239022][ T29] ext4_dirty_inode+0xcb/0x110 [ 492.244024][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 492.250195][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 492.255298][ T29] file_update_time+0x187/0x1a0 [ 492.260497][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 492.265600][ T29] ? do_wp_page+0x4ce/0x34d0 [ 492.270324][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 492.276636][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 492.282100][ T29] do_page_mkwrite+0x153/0x3f0 [ 492.286937][ T29] do_wp_page+0xd4d/0x34d0 [ 492.291765][ T29] ? folio_put+0xd0/0xd0 [ 492.296058][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 492.301503][ T29] ? __rwlock_init+0x150/0x150 [ 492.306353][ T29] handle_mm_fault+0x1306/0x4a50 [ 492.311962][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 492.316995][ T29] ? numa_migrate_prep+0x350/0x350 [ 492.322273][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 492.327639][ T29] do_user_addr_fault+0x736/0x12d0 [ 492.333243][ T29] exc_page_fault+0x64/0x100 [ 492.337901][ T29] ? clear_bhb_loop+0x40/0x90 [ 492.343973][ T29] asm_exc_page_fault+0x26/0x30 [ 492.349002][ T29] RIP: 0033:0x7fc52727cae2 [ 492.353662][ T29] RSP: 002b:00007fff8f257490 EFLAGS: 00010246 [ 492.360210][ T29] RAX: 00007fc52518c000 RBX: 000055557a61d1b0 RCX: 0000000000000000 [ 492.368233][ T29] RDX: 0000000000000295 RSI: 000055557a61f108 RDI: 0000000000000001 [ 492.376421][ T29] RBP: 00007fff8f257990 R08: 000055557a61f130 R09: 0000000000000091 [ 492.384498][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff8f2577d0 [ 492.392622][ T29] R13: 00007fff8f2575c0 R14: 585858582e7a7973 R15: 00007fff8f257510 [ 492.400807][ T29] [ 492.403918][ T29] INFO: task syz.2.2232:11560 blocked for more than 144 seconds. [ 492.411814][ T29] Not tainted syzkaller #0 [ 492.416799][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.425615][ T29] task:syz.2.2232 state:D stack:27048 pid:11560 ppid:5774 flags:0x00004004 [ 492.434923][ T29] Call Trace: [ 492.438253][ T29] [ 492.441377][ T29] __schedule+0x15ae/0x4660 [ 492.446005][ T29] ? mark_lock+0x94/0x320 [ 492.450580][ T29] ? asan.module_dtor+0x20/0x20 [ 492.455505][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 492.460739][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 492.466697][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 492.472001][ T29] schedule+0xbd/0x170 [ 492.476138][ T29] io_schedule+0x80/0xd0 [ 492.480590][ T29] bit_wait_io+0x11/0xd0 [ 492.484893][ T29] __wait_on_bit+0x9f/0x2c0 [ 492.489518][ T29] ? bit_wait+0xd0/0xd0 [ 492.493766][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 492.499330][ T29] ? bit_wait+0xd0/0xd0 [ 492.503586][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 492.508440][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 492.513590][ T29] ? bit_waitqueue+0x30/0x30 [ 492.518227][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 492.523673][ T29] do_get_write_access+0x5c9/0xe00 [ 492.528898][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 492.535045][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 492.541375][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 492.547690][ T29] ? __might_sleep+0xe0/0xe0 [ 492.552519][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 492.558165][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 492.564635][ T29] ext4_dirty_inode+0xcb/0x110 [ 492.570751][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 492.576629][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 492.583043][ T29] file_update_time+0x187/0x1a0 [ 492.587993][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 492.593343][ T29] ? filemap_fault+0x103c/0x1540 [ 492.598472][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 492.604338][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 492.611950][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 492.617048][ T29] ? __pte_offset_map+0x20d/0x280 [ 492.622270][ T29] do_page_mkwrite+0x153/0x3f0 [ 492.627100][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 492.632260][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 492.637228][ T29] ? numa_migrate_prep+0x350/0x350 [ 492.642770][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 492.648120][ T29] do_user_addr_fault+0x736/0x12d0 [ 492.653442][ T29] exc_page_fault+0x64/0x100 [ 492.658345][ T29] ? clear_bhb_loop+0x40/0x90 [ 492.663263][ T29] asm_exc_page_fault+0x26/0x30 [ 492.668166][ T29] RIP: 0033:0x7f2239e73332 [ 492.674092][ T29] RSP: 002b:00007ffff51ccd30 EFLAGS: 00010202 [ 492.681375][ T29] RAX: 0000000000004008 RBX: 00007f223ad55720 RCX: 0000000000000000 [ 492.689667][ T29] RDX: 0000001b2de20000 RSI: 0000000000000008 RDI: 00007f223ad55720 [ 492.697785][ T29] RBP: 0000000000000142 R08: 00007f223a210000 R09: 00007f223a226038 [ 492.706003][ T29] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff818b16bc [ 492.714115][ T29] R13: 00007f223a226038 R14: 00000000000000d4 R15: ffffffffffffc000 [ 492.722282][ T29] ? tracing_record_taskinfo_sched_switch+0x1c/0x360 [ 492.729059][ T29] [ 492.732256][ T29] INFO: task syz.0.2241:11580 blocked for more than 145 seconds. [ 492.740285][ T29] Not tainted syzkaller #0 [ 492.745259][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.754271][ T29] task:syz.0.2241 state:D stack:27048 pid:11580 ppid:5777 flags:0x00004004 [ 492.763762][ T29] Call Trace: [ 492.767059][ T29] [ 492.770222][ T29] __schedule+0x15ae/0x4660 [ 492.774827][ T29] ? mark_lock+0x94/0x320 [ 492.779413][ T29] ? asan.module_dtor+0x20/0x20 [ 492.784445][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 492.789724][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 492.795702][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 492.801253][ T29] schedule+0xbd/0x170 [ 492.805406][ T29] io_schedule+0x80/0xd0 [ 492.809843][ T29] bit_wait_io+0x11/0xd0 [ 492.814153][ T29] __wait_on_bit+0x9f/0x2c0 [ 492.818725][ T29] ? bit_wait+0xd0/0xd0 [ 492.823024][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 492.828539][ T29] ? bit_wait+0xd0/0xd0 [ 492.832804][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 492.837632][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 492.842967][ T29] ? bit_waitqueue+0x30/0x30 [ 492.847627][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 492.853033][ T29] do_get_write_access+0x5c9/0xe00 [ 492.858217][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 492.864760][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 492.871087][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 492.877293][ T29] ? __might_sleep+0xe0/0xe0 [ 492.882037][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 492.887659][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 492.893362][ T29] ext4_dirty_inode+0xcb/0x110 [ 492.898231][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 492.904320][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 492.909482][ T29] file_update_time+0x187/0x1a0 [ 492.914408][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 492.919582][ T29] ? filemap_fault+0x103c/0x1540 [ 492.924602][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 492.930513][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 492.936811][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 492.941954][ T29] ? __pte_offset_map+0x20d/0x280 [ 492.947148][ T29] do_page_mkwrite+0x153/0x3f0 [ 492.952101][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 492.957098][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 492.962448][ T29] ? numa_migrate_prep+0x350/0x350 [ 492.967656][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 492.973628][ T29] do_user_addr_fault+0x736/0x12d0 [ 492.978808][ T29] exc_page_fault+0x64/0x100 [ 492.983524][ T29] asm_exc_page_fault+0x26/0x30 [ 492.988428][ T29] RIP: 0033:0x7f8733073332 [ 492.992960][ T29] RSP: 002b:00007ffc81fd8360 EFLAGS: 00010202 [ 492.999086][ T29] RAX: 0000000000008008 RBX: 00007f8733f55720 RCX: 0000000000000000 [ 493.007194][ T29] RDX: 0000001b2dc1c000 RSI: 0000000000000008 RDI: 00007f8733f55720 [ 493.015351][ T29] RBP: 00000000000004f8 R08: 00007f8733410000 R09: 00007f8733426038 [ 493.023464][ T29] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff81f2a7c4 [ 493.031570][ T29] R13: 00007f8733426038 R14: 00000000000001a4 R15: ffffffffffff8000 [ 493.039744][ T29] ? __lookup_slow+0x2d4/0x400 [ 493.044592][ T29] [ 493.047824][ T29] INFO: task syz.3.2240:11581 blocked for more than 145 seconds. [ 493.055708][ T29] Not tainted syzkaller #0 [ 493.060842][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.069852][ T29] task:syz.3.2240 state:D stack:27048 pid:11581 ppid:5776 flags:0x00004004 [ 493.079153][ T29] Call Trace: [ 493.082762][ T29] [ 493.085750][ T29] __schedule+0x15ae/0x4660 [ 493.090413][ T29] ? mark_lock+0x94/0x320 [ 493.094791][ T29] ? asan.module_dtor+0x20/0x20 [ 493.099854][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 493.104974][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 493.111265][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 493.116528][ T29] schedule+0xbd/0x170 [ 493.120743][ T29] io_schedule+0x80/0xd0 [ 493.125057][ T29] bit_wait_io+0x11/0xd0 [ 493.129598][ T29] __wait_on_bit+0x9f/0x2c0 [ 493.134178][ T29] ? bit_wait+0xd0/0xd0 [ 493.138393][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 493.143993][ T29] ? bit_wait+0xd0/0xd0 [ 493.148209][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 493.153271][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 493.158399][ T29] ? bit_waitqueue+0x30/0x30 [ 493.163174][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 493.168737][ T29] do_get_write_access+0x5c9/0xe00 [ 493.174018][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 493.180232][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 493.186481][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 493.193102][ T29] ? __might_sleep+0xe0/0xe0 [ 493.197767][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 493.203471][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 493.209029][ T29] ext4_dirty_inode+0xcb/0x110 [ 493.214363][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 493.220541][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 493.225947][ T29] file_update_time+0x187/0x1a0 [ 493.231038][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 493.236139][ T29] ? filemap_fault+0x103c/0x1540 [ 493.241309][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 493.247101][ T29] ? pte_alloc_one+0x3b6/0x540 [ 493.251992][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 493.258482][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 493.263689][ T29] do_page_mkwrite+0x153/0x3f0 [ 493.268679][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 493.274141][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 493.279429][ T29] ? numa_migrate_prep+0x350/0x350 [ 493.284638][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 493.290084][ T29] do_user_addr_fault+0x736/0x12d0 [ 493.295271][ T29] exc_page_fault+0x64/0x100 [ 493.300257][ T29] asm_exc_page_fault+0x26/0x30 [ 493.305189][ T29] RIP: 0033:0x7f97c1a72c09 [ 493.309734][ T29] RSP: 002b:00007ffc2a80b440 EFLAGS: 00010202 [ 493.316046][ T29] RAX: 0000001b2df24000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 493.324288][ T29] RDX: 0000001b2df23ffc RSI: 00000000005ffde8 RDI: 00007f97c2955700 [ 493.332457][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f97c1e12000 [ 493.340711][ T29] R10: 00007f97c2955700 R11: 0000000000000000 R12: 0000000000000000 [ 493.348756][ T29] R13: 00000000000027ad R14: ffffffff81322060 R15: 00007f97c2955720 [ 493.357029][ T29] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 493.363365][ T29] [ 493.366455][ T29] INFO: task syz.1.2242:11585 blocked for more than 145 seconds. [ 493.374551][ T29] Not tainted syzkaller #0 [ 493.379597][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.388354][ T29] task:syz.1.2242 state:D stack:27560 pid:11585 ppid:5775 flags:0x00004004 [ 493.398027][ T29] Call Trace: [ 493.401692][ T29] [ 493.404705][ T29] __schedule+0x15ae/0x4660 [ 493.409741][ T29] ? mark_lock+0x94/0x320 [ 493.414146][ T29] ? asan.module_dtor+0x20/0x20 [ 493.419081][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 493.424668][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 493.430726][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 493.435990][ T29] schedule+0xbd/0x170 [ 493.440233][ T29] io_schedule+0x80/0xd0 [ 493.444539][ T29] bit_wait_io+0x11/0xd0 [ 493.448876][ T29] __wait_on_bit+0x9f/0x2c0 [ 493.453688][ T29] ? bit_wait+0xd0/0xd0 [ 493.458053][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 493.463774][ T29] ? bit_wait+0xd0/0xd0 [ 493.468015][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 493.472928][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 493.478252][ T29] ? bit_waitqueue+0x30/0x30 [ 493.483067][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 493.488344][ T29] do_get_write_access+0x5c9/0xe00 [ 493.493632][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 493.499811][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 493.506022][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 493.512306][ T29] ? __might_sleep+0xe0/0xe0 [ 493.516961][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 493.522825][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 493.528364][ T29] ext4_dirty_inode+0xcb/0x110 [ 493.533630][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 493.540337][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 493.545457][ T29] file_update_time+0x187/0x1a0 [ 493.550504][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 493.555599][ T29] ? filemap_fault+0x103c/0x1540 [ 493.560897][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 493.566685][ T29] ? pte_alloc_one+0x3b6/0x540 [ 493.571575][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 493.578103][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 493.583302][ T29] do_page_mkwrite+0x153/0x3f0 [ 493.588119][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 493.593181][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 493.598283][ T29] ? numa_migrate_prep+0x350/0x350 [ 493.605882][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 493.612188][ T29] do_user_addr_fault+0x736/0x12d0 [ 493.617378][ T29] exc_page_fault+0x64/0x100 [ 493.622202][ T29] ? clear_bhb_loop+0x40/0x90 [ 493.626967][ T29] asm_exc_page_fault+0x26/0x30 [ 493.632116][ T29] RIP: 0033:0x7f2476e6bea3 [ 493.636590][ T29] RSP: 002b:00007ffdfb10d180 EFLAGS: 00010246 [ 493.642813][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d764000 [ 493.650905][ T29] RDX: 0000001b2d724000 RSI: 0000000000600000 RDI: 00007f24771e3708 [ 493.658965][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.667223][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 493.675379][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdfb10d410 [ 493.683781][ T29] [ 493.687046][ T29] [ 493.687046][ T29] Showing all locks held in the system: [ 493.695126][ T29] 1 lock held by khungtaskd/29: [ 493.700158][ T29] #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 493.710227][ T29] 1 lock held by khugepaged/35: [ 493.715131][ T29] #0: ffff88807dd6a7a0 (&mm->mmap_lock){++++}-{3:3}, at: hpage_collapse_scan_pmd+0x216a/0x4050 [ 493.725774][ T29] 4 locks held by kworker/u4:4/59: [ 493.731010][ T29] #0: ffff88801da6b138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 493.742600][ T29] #1: ffffc900015a7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 493.755293][ T29] #2: ffff88814d9160e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 493.766209][ T29] #3: ffff88814d918c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 493.776907][ T29] 2 locks held by getty/5527: [ 493.782034][ T29] #0: ffff88803308a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 493.792106][ T29] #1: ffffc900032932f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 493.802554][ T29] 3 locks held by syz-executor/5762: [ 493.807885][ T29] #0: ffff88807f955720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 493.817967][ T29] #1: ffff88814d916510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 493.827957][ T29] #2: ffff88814d91a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 493.837842][ T29] 3 locks held by syz.2.2232/11560: [ 493.843198][ T29] #0: ffff88807dd6a7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 493.853455][ T29] #1: ffff88814d916510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 493.863365][ T29] #2: ffff88814d91a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 493.873340][ T29] 3 locks held by syz.0.2241/11580: [ 493.878597][ T29] #0: ffff8880782c4420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 493.888975][ T29] #1: ffff88814d916510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 493.898947][ T29] #2: ffff88814d91a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 493.908796][ T29] 3 locks held by syz.3.2240/11581: [ 493.914117][ T29] #0: ffff888026463aa0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 493.924200][ T29] #1: ffff88814d916510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 493.934155][ T29] #2: ffff88814d91a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 493.943996][ T29] 3 locks held by syz.1.2242/11585: [ 493.949297][ T29] #0: ffff8880330b3120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 493.959495][ T29] #1: ffff88814d916510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 493.969786][ T29] #2: ffff88814d91a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 493.979639][ T29] [ 493.982033][ T29] ============================================= [ 493.982033][ T29] [ 493.990857][ T29] NMI backtrace for cpu 0 [ 493.995253][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 494.002499][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 494.012597][ T29] Call Trace: [ 494.015889][ T29] [ 494.018831][ T29] dump_stack_lvl+0x18c/0x250 [ 494.023554][ T29] ? __wake_up_klogd+0xd9/0x100 [ 494.028433][ T29] ? show_regs_print_info+0x20/0x20 [ 494.033645][ T29] ? load_image+0x420/0x420 [ 494.038204][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 494.043365][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 494.049602][ T29] ? load_image+0x420/0x420 [ 494.054159][ T29] ? wq_watchdog_touch+0xef/0x170 [ 494.059233][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 494.065349][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 494.071362][ T29] watchdog+0xf59/0xfa0 [ 494.075558][ T29] ? watchdog+0x1e1/0xfa0 [ 494.079926][ T29] kthread+0x2fa/0x390 [ 494.084032][ T29] ? hungtask_pm_notify+0x50/0x50 [ 494.089091][ T29] ? kthread_blkcg+0xd0/0xd0 [ 494.093720][ T29] ret_from_fork+0x48/0x80 [ 494.098166][ T29] ? kthread_blkcg+0xd0/0xd0 [ 494.102784][ T29] ret_from_fork_asm+0x11/0x20 [ 494.107601][ T29] [ 494.111599][ T29] Sending NMI from CPU 0 to CPUs 1: [ 494.116880][ C1] NMI backtrace for cpu 1 [ 494.116892][ C1] CPU: 1 PID: 2929 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 494.116909][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 494.116919][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 494.117103][ C1] RIP: 0010:clear_page_erms+0xb/0x10 [ 494.117126][ C1] Code: 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 90 90 90 90 90 90 90 f3 0f 1e fa b9 00 10 00 00 31 c0 aa c3 90 90 f3 0f 1e fa 48 83 f9 40 73 36 83 f9 08 73 0f 85 c9 [ 494.117212][ C1] RSP: 0018:ffffc9000bc8f5c8 EFLAGS: 00010246 [ 494.117226][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000340 [ 494.117237][ C1] RDX: ffff8880787b1000 RSI: 0000000000000007 RDI: ffff8880787b1cc0 [ 494.117248][ C1] RBP: ffff88813fffc310 R08: ffffea0001e1ec37 R09: 0000000000000000 [ 494.117259][ C1] R10: ffffed100f0f6000 R11: fffff940003c3d87 R12: 0000000000000000 [ 494.117271][ C1] R13: 0000000000000001 R14: ffffea0001e1ec00 R15: 0000000000000008 [ 494.117281][ C1] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 494.117295][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.117306][ C1] CR2: 00005558af088660 CR3: 000000000dd32000 CR4: 00000000003526e0 [ 494.117322][ C1] Call Trace: [ 494.117329][ C1] [ 494.117335][ C1] post_alloc_hook+0xf3/0x200 [ 494.117360][ C1] get_page_from_freelist+0x2181/0x22a0 [ 494.117380][ C1] ? arch_stack_walk+0x16e/0x190 [ 494.117410][ C1] ? __next_zones_zonelist+0x9d/0x130 [ 494.117459][ C1] __alloc_pages+0x1f0/0x460 [ 494.117477][ C1] ? zone_statistics+0x170/0x170 [ 494.117500][ C1] ? alloc_pages+0x4e1/0x740 [ 494.117521][ C1] alloc_slab_page+0x5d/0x180 [ 494.117540][ C1] new_slab+0x87/0x2d0 [ 494.117557][ C1] ___slab_alloc+0xc5c/0x12f0 [ 494.117576][ C1] ? __alloc_skb+0x138/0x2c0 [ 494.117670][ C1] __kmem_cache_alloc_node+0x11f/0x250 [ 494.117697][ C1] ? __alloc_skb+0x138/0x2c0 [ 494.117721][ C1] ? __alloc_skb+0x138/0x2c0 [ 494.117741][ C1] __kmalloc_node_track_caller+0xa4/0x230 [ 494.117768][ C1] ? rcu_is_watching+0x15/0xb0 [ 494.117794][ C1] ? __alloc_skb+0x138/0x2c0 [ 494.117815][ C1] kmalloc_reserve+0x116/0x240 [ 494.117840][ C1] __alloc_skb+0x138/0x2c0 [ 494.117865][ C1] nsim_dev_trap_report_work+0x253/0xa90 [ 494.117895][ C1] ? process_scheduled_works+0x975/0x1600 [ 494.117920][ C1] process_scheduled_works+0xa60/0x1600 [ 494.117960][ C1] ? worker_attach_to_pool+0x370/0x370 [ 494.117987][ C1] ? assign_work+0x3cc/0x5d0 [ 494.118013][ C1] worker_thread+0xa5e/0xfe0 [ 494.118043][ C1] ? _raw_spin_unlock+0x40/0x40 [ 494.118068][ C1] ? __kthread_parkme+0x71/0x1c0 [ 494.118090][ C1] kthread+0x2fa/0x390 [ 494.118107][ C1] ? pr_cont_work+0x550/0x550 [ 494.118130][ C1] ? kthread_blkcg+0xd0/0xd0 [ 494.118148][ C1] ret_from_fork+0x48/0x80 [ 494.118169][ C1] ? kthread_blkcg+0xd0/0xd0 [ 494.118187][ C1] ret_from_fork_asm+0x11/0x20 [ 494.118220][ C1] [ 494.129976][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 494.130027][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 494.130082][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 494.130122][ T29] Call Trace: [ 494.130144][ T29] [ 494.130174][ T29] dump_stack_lvl+0x18c/0x250 [ 494.130259][ T29] ? show_regs_print_info+0x20/0x20 [ 494.130313][ T29] ? load_image+0x420/0x420 [ 494.130430][ T29] panic+0x2ca/0x720 [ 494.130500][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 494.130566][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 494.130684][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 494.130769][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 494.130854][ T29] watchdog+0xf98/0xfa0 [ 494.130941][ T29] ? watchdog+0x1e1/0xfa0 [ 494.131045][ T29] kthread+0x2fa/0x390 [ 494.131109][ T29] ? hungtask_pm_notify+0x50/0x50 [ 494.500858][ T29] ? kthread_blkcg+0xd0/0xd0 [ 494.505490][ T29] ret_from_fork+0x48/0x80 [ 494.509965][ T29] ? kthread_blkcg+0xd0/0xd0 [ 494.514579][ T29] ret_from_fork_asm+0x11/0x20 [ 494.519394][ T29] [ 494.523049][ T29] Kernel Offset: disabled [ 494.527388][ T29] Rebooting in 86400 seconds..