last executing test programs: 4.734832553s ago: executing program 0 (id=1423): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 4.647139916s ago: executing program 0 (id=1424): madvise(&(0x7f0000123000/0x1000)=nil, 0x1000, 0xf) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) 4.231531846s ago: executing program 0 (id=1429): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r2, 0x5}, &(0x7f00000001c0)=0x8) 4.116326929s ago: executing program 0 (id=1431): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="747970653d5aeda9f42c756d61736b3d30303030303030303030303030303030303030303030372c696f636861727365743d63703934392c6469725f756d61736b3d3030303030303030303135363036362c636f6465706167653d6d6163637972696c6c69632c63726561746f723d7edeac962c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x41, 0x32e, &(0x7f00000002c0)="$eJzs3U1r1E4cB/DvZLPb3XbpP/+2UvBYLXgqbT0oXixSBPENeJBibVcojRW0ggri6lmKngTBoze9ir4FvYhvQE89iCe9FA9GZiazSbaZ7ENj02W/H+g2D/Pwm0weZlZqQERD68Ly19end+WPKAMoATgHOACqgAvgGKard7e2N7b9xnpWQSWVQ/4I6JxiX5q1rUZaVplP5Qh5cs1FHe7OpRyaSJmC4FvHND8PJRIqjtDX/j4OMBJenWp/9dAj+zeaul3DJdbDYg97uIfxIsMhIqLihc9/J3xK1MPxu+MAs+HYfNCf/4nxzV5xcRwJree/o9cDIY/Pf2pXNN9TUzjZ+46ZJaaVpc+JenJjEB3uCvSZlegA0WlWqWJxajc2/MZcUxXwBOdDsWRT6nMdpiGKLdqK/jWTMjfNkNX2bGOqDWXZhkVL/JM91/jhO16kV7fyqYuYxEfxWawIDy+x3hr/uYGQB0cdH6+tp3T88/YSVSs9nSrRymhO/7+q5LjpgfdvolbWbMe1ipKMJY0sRbSP3z0T57OKPRcmEl81mNYt2Funck2m5lpsrf9OzTXVnqvmlv3G3NotP/OrlNykzujEjrgiZvAD77AcG/87MvUs7Fdm4s4vVMrwzMhsj6tSWvoxQV3AN1OuTKeLzEPtYmpHZ3uK6ziL8Tv3H2yu+n7jdk4Lz9/q4vvIbi6VXOPpf0GfiCJqjvwdS4OqXCgDyK3SP0EQ+L6pM7bLxWE0uayqPfMq0YOiqVcPVgWa+06JJXtiAEsAwi3mjtBP7Y9auUaiArvK/kv2gNqSfkKaqHLsgrpll6kqsauEka6ulFof8Vx+uLnq935LocETdTqmrxYdDBVBDq+Env/F5ivz6q4jP7yM2UjQqfBYiQuWGdCE+hztbgbXKtY6gxszCx3mXCdOASfbanRganzcXqwXxtk2pD8aev+nDLGML7jG7/+JiIiIiIiIiIiIiIiIiIiIiIiIiAZNr3+o0M+fEyRr3B3C/3iDiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOhgYu//BUrqjTGVwt//WzLv/w03jKZkMu+lIKK+/Q0AAP//oLJZGA==") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x880, 0x5a) dup3(r1, r0, 0x80000) 3.830682205s ago: executing program 0 (id=1438): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x6, 0x8, &(0x7f0000000040)={0xc, "810556c7213f4084c89e5ebb3d020b00"}}) 3.319805068s ago: executing program 2 (id=1443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x400000ff, 0x0, 0xc}]}) 3.017170785s ago: executing program 2 (id=1445): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001f00)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x3fe, @private0, 0x2000003}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00', 0x80000001}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000b80)="98", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 2.924368068s ago: executing program 2 (id=1446): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r1, 0x0, 0x0, 0xe6b4) 1.963522221s ago: executing program 0 (id=1449): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d000905090000000006f808050ae5"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 1.502347562s ago: executing program 1 (id=1458): r0 = syz_io_uring_setup(0x14c6, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x10, 0x3a9}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/212, 0xd4}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1) 1.441727104s ago: executing program 3 (id=1460): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa) preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/48, 0x30}], 0x1, 0x5fac, 0x5) 1.414949185s ago: executing program 1 (id=1461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x400000ff, 0x0, 0xc}]}) 1.091896832s ago: executing program 3 (id=1462): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x10, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.086555793s ago: executing program 1 (id=1473): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',shortname=mixed,utf8=1,gid=', @ANYRESHEX=0xee01, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 925.726747ms ago: executing program 3 (id=1464): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001f00)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x3fe, @private0, 0x2000003}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00', 0x80000001}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000b80)="98", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 925.638537ms ago: executing program 4 (id=1465): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) move_pages(0x0, 0x1, &(0x7f00000009c0)=[&(0x7f0000aeb000/0x3000)=nil], 0x0, &(0x7f0000000a00), 0x2) 859.059289ms ago: executing program 1 (id=1467): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101a02, 0x13c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 842.983349ms ago: executing program 2 (id=1468): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 838.678569ms ago: executing program 4 (id=1469): r0 = socket(0x11, 0x3, 0x7) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 729.374712ms ago: executing program 2 (id=1470): setns(0xc9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001200010300000018000000001a00000000000000000800"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffff00000000140001000710100002200000ffffffff"], 0x60}}, 0x0) 729.223972ms ago: executing program 4 (id=1471): creat(&(0x7f00000000c0)='./file0\x00', 0x12b) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 728.767702ms ago: executing program 3 (id=1472): r0 = syz_io_uring_setup(0x14c6, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x10, 0x3a9}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/212, 0xd4}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1) 621.838194ms ago: executing program 4 (id=1474): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x84, 0x12bb41) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x13, 0x15, "fee8a2ab78fc179f51f8a0e9a1af1e0b91c2f0fd967ab7f890020000000003002b78cc33a55f4c0c0000000000000000000000000000001b00", "28095397ba01177d02458dac00", "908f000e00000000000000000000001a00020000001900", [0x4, 0x80000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c07, 0xffffffffffffffff) 621.086064ms ago: executing program 1 (id=1484): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x101891c, &(0x7f00000004c0)={[{@noload}, {@noblock_validity}, {@mblk_io_submit}, {@noinit_itable}, {@noinit_itable}, {@grpjquota}, {@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@barrier_val={'barrier', 0x3d, 0x7ff}, 0x32}]}, 0x1, 0x4e7, &(0x7f0000000580)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x2}, 0x20) 590.411975ms ago: executing program 2 (id=1475): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa) preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/48, 0x30}], 0x1, 0x5fac, 0x5) 590.303245ms ago: executing program 3 (id=1476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) 477.213618ms ago: executing program 4 (id=1477): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xc, 0x4, 0x71, 0x5, 0x1, 0x400, 0x7, 0x1ff}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) 282.907713ms ago: executing program 4 (id=1478): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e8684d851aa336bb9407f5", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 281.949213ms ago: executing program 3 (id=1479): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") ptrace$cont(0x21, r0, 0x80000001, 0x4) 0s ago: executing program 1 (id=1480): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r1, 0x0, 0x0, 0xe6b4) kernel console output (not intermixed with test programs): 6] fido_id[5316]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.385042][ T4174] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.404643][ T4174] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.425664][ T4174] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 95.441498][ T5322] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 95.449181][ T4174] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.470593][ T4174] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 95.482243][ T4174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.489054][ T5322] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 95.520372][ T5322] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 95.541024][ T5322] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 95.554416][ T5322] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 95.567515][ T5322] ntfs: volume version 3.1. [ 95.581862][ T5322] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 95.594344][ T5322] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 95.606093][ T5322] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 95.621932][ T5322] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 95.638465][ T5322] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 95.789584][ T5336] tipc: Started in network mode [ 95.831733][ T5336] tipc: Node identity 001, cluster identity 1 [ 95.841606][ T5338] kvm [5337]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x81 [ 95.958084][ T5346] set_capacity_and_notify: 5 callbacks suppressed [ 95.958099][ T5346] loop2: detected capacity change from 0 to 2048 [ 95.991542][ T5346] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 96.022662][ T5346] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.080332][ T5348] loop1: detected capacity change from 0 to 512 [ 96.243755][ T1323] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 96.299465][ T5344] loop4: detected capacity change from 0 to 40427 [ 96.339548][ T1323] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input8 [ 96.358850][ T1323] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input9 [ 96.371063][ T1323] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input7 [ 96.434513][ T5344] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 96.453457][ T4174] gud 1-1:1.0: Failed to get connectors (error=-71) [ 96.460478][ T4174] gud: probe of 1-1:1.0 failed with error -71 [ 96.472740][ T5344] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 96.526596][ T4174] usb 1-1: USB disconnect, device number 4 [ 96.589734][ T5359] loop2: detected capacity change from 0 to 4096 [ 96.624206][ T5344] F2FS-fs (loop4): Found nat_bits in checkpoint [ 96.638032][ T5359] ntfs: volume version 3.1. [ 96.770353][ T5344] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 96.778183][ T5344] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 97.001421][ T5381] loop0: detected capacity change from 0 to 512 [ 97.037724][ T5381] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 97.045902][ T5381] UDF-fs: Scanning with blocksize 512 failed [ 97.052600][ T5381] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 97.071644][ T5381] UDF-fs: Scanning with blocksize 1024 failed [ 97.095699][ T5381] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 97.117755][ T5381] UDF-fs: Scanning with blocksize 2048 failed [ 97.139860][ T5381] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 97.161244][ T5381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.386535][ T5392] kvm [5391]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x81 [ 97.471858][ T5398] debugfs: Directory 'netdev:wlan0' with parent 'phy11' already present! [ 97.534130][ T5404] loop4: detected capacity change from 0 to 128 [ 97.551390][ T5404] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 97.567126][ T5404] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.602691][ T5406] loop0: detected capacity change from 0 to 2048 [ 97.661574][ T5406] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 97.699938][ T5406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.863043][ T5419] loop4: detected capacity change from 0 to 1024 [ 97.972296][ T5419] hfsplus: catalog searching failed [ 98.039341][ T4252] hfsplus: b-tree write err: -5, ino 3 [ 98.079130][ T5425] loop0: detected capacity change from 0 to 2048 [ 98.136489][ T4227] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.146609][ T5425] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.205653][ T5427] netlink: 71 bytes leftover after parsing attributes in process `syz.4.472'. [ 98.237300][ T5413] loop2: detected capacity change from 0 to 32768 [ 98.287812][ T5413] JBD2: Ignoring recovery information on journal [ 98.364466][ T5413] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 98.395694][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 98.404971][ T5434] netlink: 56 bytes leftover after parsing attributes in process `syz.4.474'. [ 98.441241][ T5413] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 98.472448][ T5413] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 98.482978][ T5413] OCFS2: Returning error to the calling process. [ 98.489520][ T5413] (syz.2.466,5413,0):ocfs2_search_chain:1783 ERROR: status = -5 [ 98.499362][ T5413] (syz.2.466,5413,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 98.508650][ T5413] (syz.2.466,5413,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 98.517607][ T5413] (syz.2.466,5413,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 98.543365][ T4227] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.554473][ T5413] (syz.2.466,5413,0):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 98.562404][ T5413] (syz.2.466,5413,0):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 98.583179][ T4227] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.600084][ T5413] (syz.2.466,5413,1):ocfs2_mknod_locked:641 ERROR: status = -5 [ 98.623163][ T4227] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.629840][ T4227] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 98.631363][ T5413] (syz.2.466,5413,1):ocfs2_mknod:385 ERROR: status = -5 [ 98.661617][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.691326][ T5413] (syz.2.466,5413,1):ocfs2_mknod:504 ERROR: status = -5 [ 98.709360][ T4227] usb 2-1: config 0 descriptor?? [ 98.716943][ T5413] (syz.2.466,5413,1):ocfs2_mkdir:661 ERROR: status = -5 [ 98.777485][ T5413] (syz.2.466,5413,1):ocfs2_remount:667 ERROR: Cannot remount RDWR filesystem due to previous errors. [ 98.878238][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 99.197504][ T4227] hid (null): report_id 0 is invalid [ 99.210231][ T4227] hid (null): report_id 0 is invalid [ 99.237980][ T4227] magicmouse 0003:05AC:0269.0003: fixing up magicmouse battery report descriptor [ 99.273729][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.281095][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.312985][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.337387][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.353174][ T5462] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 99.371327][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.403933][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.411301][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.430717][ T5462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.442728][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.461064][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.468719][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.486628][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.503891][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.521634][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.533406][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.541922][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.559374][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.578742][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.599094][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.617410][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.646159][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.686685][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.716784][ T5471] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 99.727729][ T5471] REISERFS (device loop0): using ordered data mode [ 99.734670][ T5471] reiserfs: using flush barriers [ 99.742574][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.758452][ T5471] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.775941][ T5471] REISERFS (device loop0): checking transaction log (loop0) [ 99.785083][ T5471] REISERFS (device loop0): Using r5 hash to sort names [ 99.795740][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.803833][ T5471] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 99.823763][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.860523][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.886802][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.911040][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.939131][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.959184][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.972772][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.980718][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 99.994179][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 100.001761][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 100.017168][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 100.026158][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 100.035154][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 100.042585][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 100.050976][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 100.058615][ T4227] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0 [ 100.066334][ T4227] magicmouse 0003:05AC:0269.0003: report_id 0 is invalid [ 100.073702][ T4227] magicmouse 0003:05AC:0269.0003: item 0 0 1 8 parsing failed [ 100.083784][ T4227] magicmouse 0003:05AC:0269.0003: magicmouse hid parse failed [ 100.091578][ T4227] magicmouse: probe of 0003:05AC:0269.0003 failed with error -22 [ 100.112622][ T4227] usb 2-1: USB disconnect, device number 3 [ 100.153797][ T5485] device netdevsim0 entered promiscuous mode [ 100.171504][ T5485] device batadv0 entered promiscuous mode [ 100.184147][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 100.278796][ T5492] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.306786][ T5492] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.379198][ T5492] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 100.703842][ T5521] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.500: inode has both inline data and extents flags [ 100.738518][ T5521] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.500: couldn't read orphan inode 15 (err -117) [ 100.751699][ T5521] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.786911][ T5531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.969880][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 100.983587][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 101.011324][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 101.022050][ T5546] set_capacity_and_notify: 4 callbacks suppressed [ 101.022066][ T5546] loop2: detected capacity change from 0 to 256 [ 101.034219][ T5547] loop4: detected capacity change from 0 to 128 [ 101.041457][ T5541] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check. [ 101.162809][ T5550] kAFS: bad VL server IP address [ 101.370667][ T5566] loop0: detected capacity change from 0 to 128 [ 101.406219][ T5566] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 101.424142][ T1323] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.427266][ T5566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.593626][ T5574] loop0: detected capacity change from 0 to 128 [ 101.650758][ T5574] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 101.663307][ T1323] usb 2-1: Using ep0 maxpacket: 8 [ 101.668801][ T5574] hpfs: filesystem error: improperly stopped [ 101.676356][ T5574] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 101.693022][ T5574] hpfs: You really don't want any checks? You are crazy... [ 101.702505][ T5574] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 101.716780][ T5574] hpfs: code page support is disabled [ 101.725489][ T5574] hpfs: hpfs_map_4sectors(): unaligned read [ 101.731725][ T5574] hpfs: hpfs_map_4sectors(): unaligned read [ 101.740882][ T5574] hpfs: filesystem error: unable to find root dir [ 101.746464][ T5564] loop2: detected capacity change from 0 to 32768 [ 101.791132][ T5564] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 101.794084][ T1323] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 101.816631][ T1323] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 101.827627][ T1323] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.837934][ T1323] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.851502][ T1323] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.855307][ T5574] hpfs: hpfs_map_4sectors(): unaligned read [ 101.860893][ T1323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.959694][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 102.122613][ T5578] loop0: detected capacity change from 0 to 32768 [ 102.133470][ T1323] usb 2-1: GET_CAPABILITIES returned 0 [ 102.139036][ T1323] usbtmc 2-1:16.0: can't read capabilities [ 102.158050][ T5578] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.524 (5578) [ 102.198733][ T5578] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 102.227225][ T5578] BTRFS info (device loop0): using free space tree [ 102.239338][ T5578] BTRFS info (device loop0): has skinny extents [ 102.353244][ T5578] BTRFS info (device loop0): enabling ssd optimizations [ 102.373439][ T1323] usb 2-1: USB disconnect, device number 4 [ 102.391906][ T5601] device netdevsim0 entered promiscuous mode [ 102.416843][ T5601] device batadv0 entered promiscuous mode [ 102.430794][ T5601] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 102.440352][ T5601] Cannot create hsr debugfs directory [ 102.466704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 102.944815][ T5626] netlink: 'syz.1.529': attribute type 27 has an invalid length. [ 102.965905][ T5626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 103.109951][ T5635] debugfs: Directory 'netdev:wlan0' with parent 'phy7' already present! [ 103.282833][ T5644] netlink: 'syz.0.534': attribute type 27 has an invalid length. [ 103.320737][ T5644] netlink: 'syz.0.534': attribute type 25 has an invalid length. [ 103.430215][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 103.465852][ T5657] loop0: detected capacity change from 0 to 256 [ 103.528854][ T5659] device netdevsim0 entered promiscuous mode [ 103.544545][ T5657] FAT-fs (loop0): Unrecognized mount option "shortname=4mixed" or missing value [ 103.572872][ T5659] device batadv0 entered promiscuous mode [ 103.633988][ T5659] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 103.644907][ T5659] Cannot create hsr debugfs directory [ 103.653411][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.664416][ T1143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 103.696535][ T5657] netlink: 52 bytes leftover after parsing attributes in process `syz.0.539'. [ 103.910926][ T5631] loop4: detected capacity change from 0 to 40427 [ 103.922557][ T5675] tipc: Started in network mode [ 103.940313][ T5675] tipc: Node identity ac14140f, cluster identity 4711 [ 103.985781][ T5631] F2FS-fs (loop4): invalid crc value [ 103.993000][ T5675] tipc: New replicast peer: 255.255.255.255 [ 104.001710][ T5631] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.013498][ T21] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 104.026253][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.038550][ T5675] tipc: Enabled bearer , priority 10 [ 104.068315][ T21] usb 4-1: config 0 has no interface number 0 [ 104.095282][ T21] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 104.147983][ T21] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.186342][ T5631] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 104.353553][ T21] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 104.362815][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.378675][ T5631] attempt to access beyond end of device [ 104.378675][ T5631] loop4: rw=2049, want=77960, limit=40427 [ 104.397993][ T21] usb 4-1: Product: syz [ 104.402208][ T21] usb 4-1: Manufacturer: syz [ 104.408523][ T21] usb 4-1: SerialNumber: syz [ 104.420229][ T21] usb 4-1: config 0 descriptor?? [ 104.471814][ T4194] attempt to access beyond end of device [ 104.471814][ T4194] loop4: rw=2049, want=45104, limit=40427 [ 104.564651][ T5698] loop1: detected capacity change from 0 to 8 [ 104.801341][ T5664] loop2: detected capacity change from 0 to 40427 [ 104.935651][ T5664] F2FS-fs (loop2): invalid crc value [ 105.034526][ T5664] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.080219][ T5706] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.113875][ T146] Bluetooth: hci1: SCO packet for unknown connection handle 2850 [ 105.135408][ T5621] tipc: Node number set to 2886997007 [ 105.153967][ T21] usbtouchscreen: probe of 4-1:0.117 failed with error -71 [ 105.168752][ T21] usb 4-1: USB disconnect, device number 4 [ 105.175795][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 105.175807][ T26] audit: type=1800 audit(1791440166.724:4): pid=5706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.550" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 105.223772][ T5696] JBD2: Ignoring recovery information on journal [ 105.346825][ T5696] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 105.452848][ T5664] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 105.489484][ T5664] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 105.549838][ T4196] ocfs2: Unmounting device (7,0) on (node local) [ 105.586254][ T5715] nvme_fcloop: unknown parameter or missing value 'ww' [ 105.727893][ T4195] attempt to access beyond end of device [ 105.727893][ T4195] loop2: rw=2049, want=45104, limit=40427 [ 105.859692][ T5727] rose0: tun_chr_ioctl cmd 1074025672 [ 105.886968][ T5727] rose0: ignored: set checksum enabled [ 105.958502][ T5733] device netdevsim0 entered promiscuous mode [ 105.978971][ T5731] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 105.992957][ T5733] device batadv0 entered promiscuous mode [ 106.000351][ T5733] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 106.008841][ T5733] Cannot create hsr debugfs directory [ 106.015337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 106.022760][ T5731] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.313734][ T5755] tun0: tun_chr_ioctl cmd 1074025681 [ 106.353749][ T5754] netlink: 'syz.0.573': attribute type 27 has an invalid length. [ 106.367717][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 106.504870][ T5762] set_capacity_and_notify: 3 callbacks suppressed [ 106.504886][ T5762] loop4: detected capacity change from 0 to 128 [ 106.576131][ T5762] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 106.612334][ T5762] hpfs: filesystem error: improperly stopped [ 106.624768][ T5762] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 106.650536][ T5762] hpfs: You really don't want any checks? You are crazy... [ 106.668040][ T5762] hpfs: Code page index out of array [ 106.683616][ T5762] hpfs: code page support is disabled [ 106.689424][ T5762] hpfs: hpfs_map_4sectors(): unaligned read [ 106.717566][ T5762] hpfs: hpfs_map_4sectors(): unaligned read [ 106.731678][ T5762] hpfs: filesystem error: unable to find root dir [ 106.921556][ T4227] hid-generic 0005:16C0:05DF.0004: item fetching failed at offset 0/1 [ 106.975650][ T4227] hid-generic: probe of 0005:16C0:05DF.0004 failed with error -22 [ 107.192840][ T5800] loop1: detected capacity change from 0 to 2048 [ 107.217996][ T5808] netlink: 'syz.4.600': attribute type 27 has an invalid length. [ 107.228648][ T5806] loop2: detected capacity change from 0 to 256 [ 107.266397][ T5808] netlink: 'syz.4.600': attribute type 25 has an invalid length. [ 107.329533][ T5800] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,lazytime,errors=remount-ro,mb_optimize_scan=0x0000000000000001,. Quota mode: none. [ 107.480214][ T5823] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 107.767628][ T5845] loop0: detected capacity change from 0 to 256 [ 107.858014][ T5845] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 107.873700][ T5619] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.079178][ T5853] input: syz1 as /devices/virtual/input/input11 [ 108.113260][ T5619] usb 4-1: Using ep0 maxpacket: 16 [ 108.245109][ T5619] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.273698][ T5619] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.316911][ T5619] usb 4-1: config 0 interface 0 has no altsetting 0 [ 108.342007][ T5619] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 108.381804][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.450065][ T5619] usb 4-1: config 0 descriptor?? [ 108.477639][ T5867] loop1: detected capacity change from 0 to 164 [ 108.499142][ T5870] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 108.532985][ T5873] netlink: 'syz.4.627': attribute type 8 has an invalid length. [ 108.571139][ T5877] netlink: 'syz.4.629': attribute type 2 has an invalid length. [ 108.620674][ T5867] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 108.897528][ T5891] loop0: detected capacity change from 0 to 1024 [ 108.948988][ T5619] hid (null): report_id 0 is invalid [ 108.967886][ T5619] hid (null): report_id 0 is invalid [ 108.975081][ T5619] magicmouse 0003:05AC:0269.0005: fixing up magicmouse battery report descriptor [ 109.023385][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.030729][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.069395][ T26] audit: type=1800 audit(2000000001.460:5): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.635" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 109.069769][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.089587][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.178125][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.192298][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.210303][ T26] audit: type=1400 audit(2000000001.600:6): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=5892 comm="syz.0.636" name="p" offset=79 [ 109.232304][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.254868][ T5881] loop1: detected capacity change from 0 to 32768 [ 109.262638][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.291032][ T5888] loop4: detected capacity change from 0 to 32768 [ 109.300959][ T5881] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.631 (5881) [ 109.318372][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.330659][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.340106][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.357099][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.372211][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.380574][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.392173][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.400986][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.418377][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.425824][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.438997][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.446631][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.460741][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.468314][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.480811][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.488504][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.503040][ T5888] JBD2: Ignoring recovery information on journal [ 109.509363][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.509424][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.509450][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.509477][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.509501][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.509526][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.509551][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.582548][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.591661][ T5888] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 109.601432][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.623173][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.630533][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.641597][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.656799][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.668867][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.670475][ T5888] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 109.692622][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.703255][ T5888] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 109.717818][ T5888] OCFS2: Returning error to the calling process. [ 109.728221][ T5619] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 109.738182][ T5888] (syz.4.634,5888,1):ocfs2_search_chain:1783 ERROR: status = -5 [ 109.749729][ T5619] magicmouse 0003:05AC:0269.0005: report_id 0 is invalid [ 109.759256][ T5888] (syz.4.634,5888,1):ocfs2_search_chain:1893 ERROR: status = -5 [ 109.767612][ T5888] (syz.4.634,5888,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 109.776293][ T5888] (syz.4.634,5888,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 109.780549][ T5619] magicmouse 0003:05AC:0269.0005: item 0 0 1 8 parsing failed [ 109.788641][ T5888] (syz.4.634,5888,0):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 109.800427][ T5888] (syz.4.634,5888,0):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 109.805172][ T5619] magicmouse 0003:05AC:0269.0005: magicmouse hid parse failed [ 109.812537][ T5888] (syz.4.634,5888,0):ocfs2_mknod_locked:641 ERROR: status = -5 [ 109.823920][ T5888] (syz.4.634,5888,0):ocfs2_mknod:385 ERROR: status = -5 [ 109.829427][ T5619] magicmouse: probe of 0003:05AC:0269.0005 failed with error -22 [ 109.831372][ T5888] (syz.4.634,5888,0):ocfs2_mknod:504 ERROR: status = -5 [ 109.846051][ T5888] (syz.4.634,5888,0):ocfs2_mkdir:661 ERROR: status = -5 [ 109.902836][ T5619] usb 4-1: USB disconnect, device number 5 [ 109.909832][ T5881] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 109.926920][ T5888] (syz.4.634,5888,0):ocfs2_remount:667 ERROR: Cannot remount RDWR filesystem due to previous errors. [ 109.942155][ T5881] BTRFS info (device loop1): using free space tree [ 109.965365][ T5881] BTRFS info (device loop1): has skinny extents [ 110.017264][ T5902] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 110.041134][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 110.231586][ T5881] BTRFS info (device loop1): enabling ssd optimizations [ 110.345857][ T5936] loop0: detected capacity change from 0 to 128 [ 110.360380][ T5931] loop4: detected capacity change from 0 to 256 [ 110.439581][ T5936] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 110.449718][ T5939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.646'. [ 110.515591][ T5936] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.644477][ T4252] wlan1: Trigger new scan to find an IBSS to join [ 110.795693][ T5949] i2c i2c-0: new_device: Can't parse I2C address [ 110.844537][ T5951] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 110.958864][ T5955] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 111.040770][ T5955] EXT4-fs (loop2): orphan cleanup on readonly fs [ 111.103660][ T5955] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.656: Block bitmap for bg 0 marked uninitialized [ 111.156449][ T5955] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 111.210062][ T5955] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.656: Block bitmap for bg 0 marked uninitialized [ 111.263660][ T5955] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 111.304638][ T5955] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.656: Block bitmap for bg 0 marked uninitialized [ 111.343394][ T5955] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 111.383329][ T5955] EXT4-fs (loop2): 1 orphan inode deleted [ 111.389129][ T5955] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nolazytime,,errors=continue. Quota mode: none. [ 111.455058][ T5955] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 111.505224][ T5955] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 111.541861][ T5955] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.656: Block bitmap for bg 0 marked uninitialized [ 111.564440][ T5988] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 111.713395][ T26] audit: type=1400 audit(2000000004.100:7): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=5996 comm="syz.0.674" name="p" offset=92 [ 111.739202][ T5994] set_capacity_and_notify: 1 callbacks suppressed [ 111.771097][ T5994] loop4: detected capacity change from 0 to 2048 [ 111.849959][ T5994] loop4: p1 p4 [ 111.849959][ T5994] p1: [ 111.862476][ T5994] loop4: partition table partially beyond EOD, truncated [ 111.894940][ T5994] loop4: p4 start 184549376 is beyond EOD, truncated [ 111.912245][ T5994] loop4: p6 start 184549376 is beyond EOD, truncated [ 111.973990][ T3557] loop4: p1 p4 [ 111.973990][ T3557] p1: [ 111.999307][ T3557] loop4: partition table partially beyond EOD, truncated [ 112.024891][ T3557] loop4: p4 start 184549376 is beyond EOD, truncated [ 112.040923][ T3557] loop4: p6 start 184549376 is beyond EOD, truncated [ 112.205303][ T26] audit: type=1800 audit(2000000004.600:8): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.680" name="tcp_port" dev="configfs" ino=38714 res=0 errno=0 [ 112.369194][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 112.371695][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 112.519509][ T6042] loop4: detected capacity change from 0 to 8 [ 112.684493][ T6044] loop2: detected capacity change from 0 to 1024 [ 112.734197][ T4236] wlan1: Trigger new scan to find an IBSS to join [ 112.740738][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.823501][ T26] audit: type=1400 audit(2000000005.220:9): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6047 comm="syz.4.693" name="unknown" offset=28 [ 112.986465][ T6052] loop2: detected capacity change from 0 to 1024 [ 113.023180][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 113.085021][ T6032] loop0: detected capacity change from 0 to 32768 [ 113.095672][ T6054] [ 113.153386][ T7] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 113.167873][ T6052] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 113.212436][ T7] usb 2-1: config 0 has no interface number 0 [ 113.221210][ T6038] loop3: detected capacity change from 0 to 32768 [ 113.302781][ T6032] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 113.395202][ T6038] XFS (loop3): Mounting V5 Filesystem [ 113.431313][ T4196] ocfs2: Unmounting device (7,0) on (node local) [ 113.443445][ T7] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 113.452623][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.481789][ T7] usb 2-1: Product: syz [ 113.486325][ T7] usb 2-1: Manufacturer: syz [ 113.490958][ T7] usb 2-1: SerialNumber: syz [ 113.509619][ T7] usb 2-1: config 0 descriptor?? [ 113.544212][ T6038] XFS (loop3): Ending clean mount [ 113.575166][ T7] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 113.685596][ T4225] wlan1: Trigger new scan to find an IBSS to join [ 113.685864][ T4252] wlan1: Trigger new scan to find an IBSS to join [ 113.715307][ T4186] XFS (loop3): Unmounting Filesystem [ 113.831012][ T7] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 113.889091][ T7] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 114.053233][ T4230] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.240584][ T4260] usb 2-1: USB disconnect, device number 5 [ 114.246614][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 114.289906][ T4260] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 114.337917][ T4260] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 114.350066][ T6089] loop2: detected capacity change from 0 to 4096 [ 114.376849][ T6089] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 114.392726][ T4260] quatech2 2-1:0.51: device disconnected [ 114.452618][ T6089] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 114.460413][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.481741][ T4230] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 114.522942][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.609958][ T4230] as10x_usb: device has been detected [ 114.632399][ T4230] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 114.643373][ T4225] wlan1: Trigger new scan to find an IBSS to join [ 114.723928][ T4230] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 114.831816][ T4230] as10x_usb: error during firmware upload part1 [ 114.853448][ T4230] Registered device Abilis Systems DVB-Titan [ 114.986765][ T6092] loop3: detected capacity change from 0 to 32768 [ 115.062115][ T6092] JBD2: Ignoring recovery information on journal [ 115.109950][ T6090] loop4: detected capacity change from 0 to 40427 [ 115.199621][ T6090] F2FS-fs (loop4): invalid crc value [ 115.215080][ T6092] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 115.249866][ T6090] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.312929][ T6092] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 115.338277][ T6118] loop2: detected capacity change from 0 to 256 [ 115.370569][ T6092] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 115.396232][ T1323] usb 1-1: USB disconnect, device number 5 [ 115.406628][ T6090] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 115.427453][ T26] audit: type=1800 audit(2000000007.820:10): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.717" name="file2" dev="loop2" ino=1048644 res=0 errno=0 [ 115.447750][ T6092] OCFS2: Returning error to the calling process. [ 115.463264][ T6090] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 115.484328][ T1323] Unregistered device Abilis Systems DVB-Titan [ 115.484923][ T6092] (syz.3.699,6092,1):ocfs2_search_chain:1783 ERROR: status = -5 [ 115.513960][ T1323] as10x_usb: device has been disconnected [ 115.540078][ T6092] (syz.3.699,6092,1):ocfs2_search_chain:1893 ERROR: status = -5 [ 115.554718][ T6092] (syz.3.699,6092,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 115.572595][ T6092] (syz.3.699,6092,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 115.621140][ T6092] (syz.3.699,6092,1):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 115.637830][ T6092] (syz.3.699,6092,1):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 115.649041][ T6092] (syz.3.699,6092,1):ocfs2_mknod_locked:641 ERROR: status = -5 [ 115.656560][ T4194] attempt to access beyond end of device [ 115.656560][ T4194] loop4: rw=2049, want=45104, limit=40427 [ 115.673311][ T6092] (syz.3.699,6092,1):ocfs2_mknod:385 ERROR: status = -5 [ 115.680475][ T6092] (syz.3.699,6092,1):ocfs2_mknod:504 ERROR: status = -5 [ 115.693520][ T6092] (syz.3.699,6092,1):ocfs2_mkdir:661 ERROR: status = -5 [ 115.756142][ T6092] (syz.3.699,6092,1):ocfs2_remount:667 ERROR: Cannot remount RDWR filesystem due to previous errors. [ 115.804777][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 116.037459][ T6137] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.129446][ T6132] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 116.268338][ T6139] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.283354][ T6148] WARNING! power/level is deprecated; use power/control instead [ 116.316725][ T6139] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.410281][ T6146] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 116.476771][ T6146] FAT-fs (loop4): Filesystem has been set read-only [ 116.634955][ T6134] F2FS-fs (loop2): invalid crc value [ 116.644404][ T4236] wlan1: Creating new IBSS network, BSSID 06:c6:f1:00:26:a2 [ 116.685342][ T6134] F2FS-fs (loop2): Found nat_bits in checkpoint [ 116.900576][ T6134] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.011868][ T6134] attempt to access beyond end of device [ 117.011868][ T6134] loop2: rw=2049, want=77960, limit=40427 [ 117.050745][ T6181] set_capacity_and_notify: 4 callbacks suppressed [ 117.050762][ T6181] loop0: detected capacity change from 0 to 1024 [ 117.104316][ T4195] attempt to access beyond end of device [ 117.104316][ T4195] loop2: rw=2049, want=45104, limit=40427 [ 117.186505][ T6187] loop3: detected capacity change from 0 to 64 [ 117.257060][ T6159] loop1: detected capacity change from 0 to 32768 [ 117.362750][ T6159] JBD2: Ignoring recovery information on journal [ 117.586739][ T6159] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 117.676880][ T6159] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 117.703400][ T9] wlan1: Trigger new scan to find an IBSS to join [ 117.709948][ T9] wlan1: Trigger new scan to find an IBSS to join [ 117.714371][ T6159] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 117.740479][ T6159] OCFS2: Returning error to the calling process. [ 117.782970][ T6209] netlink: 32 bytes leftover after parsing attributes in process `syz.4.757'. [ 117.814647][ T6159] (syz.1.737,6159,1):ocfs2_search_chain:1783 ERROR: status = -5 [ 117.822367][ T6159] (syz.1.737,6159,1):ocfs2_search_chain:1893 ERROR: status = -5 [ 117.877804][ T6211] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 117.893849][ T6159] (syz.1.737,6159,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 117.924724][ T6159] (syz.1.737,6159,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 117.933016][ T6159] (syz.1.737,6159,1):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 117.988161][ T6159] (syz.1.737,6159,1):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 118.010834][ T6159] (syz.1.737,6159,1):ocfs2_mknod_locked:641 ERROR: status = -5 [ 118.037287][ T6159] (syz.1.737,6159,1):ocfs2_mknod:385 ERROR: status = -5 [ 118.063313][ T6159] (syz.1.737,6159,1):ocfs2_mknod:504 ERROR: status = -5 [ 118.070340][ T6159] (syz.1.737,6159,1):ocfs2_mkdir:661 ERROR: status = -5 [ 118.127525][ T6215] loop0: detected capacity change from 0 to 4096 [ 118.150584][ T6159] (syz.1.737,6159,1):ocfs2_remount:667 ERROR: Cannot remount RDWR filesystem due to previous errors. [ 118.217040][ T6215] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 118.295384][ T6215] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 118.312727][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 118.351566][ T6206] loop3: detected capacity change from 0 to 32768 [ 118.495358][ T6206] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.756 (6206) [ 118.548815][ T6206] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 118.585093][ T6206] BTRFS info (device loop3): using free space tree [ 118.596535][ T6236] netlink: 104 bytes leftover after parsing attributes in process `syz.0.769'. [ 118.611656][ T6206] BTRFS info (device loop3): has skinny extents [ 118.643736][ T9] wlan1: Trigger new scan to find an IBSS to join [ 118.700974][ T9] wlan1: Creating new IBSS network, BSSID 0e:a4:80:68:06:4a [ 118.736565][ T4252] wlan1: Creating new IBSS network, BSSID 2a:fd:d0:5b:de:02 [ 118.776252][ T6251] VFS: file-max limit 0 reached [ 118.894889][ T6206] BTRFS info (device loop3): enabling ssd optimizations [ 119.028070][ T4174] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 119.081196][ T6280] loop1: detected capacity change from 0 to 4096 [ 119.116846][ T6206] BTRFS info (device loop3): disk added /dev/nullb0 [ 119.159519][ T6280] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 119.209015][ T6280] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 119.516799][ T4174] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 119.524705][ T4174] usb 5-1: can't read configurations, error -71 [ 119.639751][ T4252] wlan1: Creating new IBSS network, BSSID 66:69:68:dd:c0:d8 [ 120.302770][ T6304] loop3: detected capacity change from 0 to 32768 [ 120.626609][ T6319] loop4: detected capacity change from 0 to 32768 [ 120.648863][ T6314] loop0: detected capacity change from 0 to 40427 [ 120.721820][ T6319] XFS (loop4): Mounting V5 Filesystem [ 120.745268][ T6314] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 120.758249][ T6314] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 120.774486][ T6314] F2FS-fs (loop0): invalid crc value [ 120.831420][ T6314] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.938321][ T6319] XFS (loop4): Ending clean mount [ 120.951503][ T6314] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 120.959929][ T6319] XFS (loop4): Quotacheck needed: Please wait. [ 120.969086][ T6314] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.033786][ T6353] loop1: detected capacity change from 0 to 4096 [ 121.079118][ T6319] XFS (loop4): Quotacheck: Done. [ 121.112517][ T6353] NILFS (loop1): invalid segment: Checksum error in segment payload [ 121.176334][ T6353] NILFS (loop1): trying rollback from an earlier position [ 121.204436][ T4196] attempt to access beyond end of device [ 121.204436][ T4196] loop0: rw=2049, want=45104, limit=40427 [ 121.247978][ T6353] NILFS (loop1): recovery complete [ 121.290134][ T6365] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.303843][ T4194] XFS (loop4): Unmounting Filesystem [ 121.305705][ T6363] netlink: 'syz.2.810': attribute type 3 has an invalid length. [ 121.350417][ T6363] netlink: 152 bytes leftover after parsing attributes in process `syz.2.810'. [ 121.722343][ T6383] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.743607][ T5215] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 121.996104][ T5215] usb 4-1: Using ep0 maxpacket: 32 [ 122.116985][ T5215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.153708][ T5215] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.203138][ T5215] usb 4-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 122.232594][ T5215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.271473][ T5215] usb 4-1: config 0 descriptor?? [ 122.359125][ T6415] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.471370][ T6421] set_capacity_and_notify: 1 callbacks suppressed [ 122.471386][ T6421] loop4: detected capacity change from 0 to 512 [ 122.653683][ T5619] kernel write not supported for file /snd/seq (pid: 5619 comm: kworker/1:17) [ 122.712371][ T6437] loop0: detected capacity change from 0 to 2048 [ 122.781433][ T5215] wacom 0003:056A:00FA.0006: unknown main item tag 0x0 [ 122.791792][ T5215] wacom 0003:056A:00FA.0006: unknown main item tag 0x0 [ 122.819894][ T6437] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 122.828831][ T5215] wacom 0003:056A:00FA.0006: unknown main item tag 0x0 [ 122.844299][ T5215] wacom 0003:056A:00FA.0006: unknown main item tag 0x0 [ 122.851458][ T5215] wacom 0003:056A:00FA.0006: unknown main item tag 0x0 [ 122.855774][ T6448] loop1: detected capacity change from 0 to 1024 [ 122.869204][ T5215] wacom 0003:056A:00FA.0006: unknown main item tag 0x0 [ 122.877972][ T6437] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.891183][ T5215] wacom 0003:056A:00FA.0006: unknown main item tag 0x0 [ 122.908660][ T5215] wacom 0003:056A:00FA.0006: unknown main item tag 0x3 [ 122.916933][ T5215] wacom 0003:056A:00FA.0006: unknown main item tag 0x0 [ 122.954342][ T6448] hfsplus: invalid length 1280 has been corrected to 255 [ 122.977052][ T5215] wacom 0003:056A:00FA.0006: hidraw0: USB HID v0.02 Joystick [HID 056a:00fa] on usb-dummy_hcd.3-1/input0 [ 123.024323][ T5215] usb 4-1: USB disconnect, device number 6 [ 123.116482][ T6454] fido_id[6454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 123.163371][ T6458] loop2: detected capacity change from 0 to 256 [ 123.216122][ T6458] exfat: Deprecated parameter 'utf8' [ 123.226047][ T6458] exfat: Deprecated parameter 'namecase' [ 123.239475][ T6458] exfat: Deprecated parameter 'utf8' [ 123.310851][ T6458] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 123.354478][ T6458] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 123.375341][ T6466] tipc: Started in network mode [ 123.381276][ T6458] exFAT-fs (loop2): hint_cluster is invalid (1) [ 123.388671][ T6466] tipc: Node identity ac14140f, cluster identity 4711 [ 123.399944][ T6466] tipc: New replicast peer: 255.255.255.255 [ 123.407908][ T6466] tipc: Enabled bearer , priority 10 [ 123.416216][ T6458] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 123.436548][ T6458] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805fb60e60 iblock : 9, err : -5) [ 123.467937][ T6458] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 123.485024][ T6458] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 123.551591][ T6474] loop0: detected capacity change from 0 to 2048 [ 123.563958][ T6476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.861'. [ 123.633661][ T1143] attempt to access beyond end of device [ 123.633661][ T1143] loop2: rw=1, want=34359738496, limit=256 [ 123.676169][ T6478] loop3: detected capacity change from 0 to 2048 [ 123.677036][ T6474] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.725004][ T6478] NILFS (loop3): invalid segment: Magic number mismatch [ 123.735590][ T6478] NILFS (loop3): trying rollback from an earlier position [ 123.783511][ T6474] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.815033][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.827814][ T6478] NILFS (loop3): recovery complete [ 123.848602][ T6486] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.007622][ T6473] loop4: detected capacity change from 0 to 32768 [ 124.063624][ T4230] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.128740][ T6496] block2mtd: illegal erase size [ 124.144013][ T6473] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 124.196911][ T26] audit: type=1800 audit(2000000016.590:11): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.860" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 124.332268][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 124.463427][ T4230] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 124.472643][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.523269][ T5215] tipc: Node number set to 2886997007 [ 124.698678][ T6514] loop4: detected capacity change from 0 to 2048 [ 124.777762][ T6512] loop3: detected capacity change from 0 to 4096 [ 124.795241][ T6500] loop2: detected capacity change from 0 to 40427 [ 124.865545][ T6514] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.894472][ T6512] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 124.917459][ T6500] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.934430][ T6514] ext4 filesystem being mounted at /186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.106261][ T4230] net1080: probe of 2-1:1.0 failed with error -71 [ 125.133422][ T4230] usb 2-1: USB disconnect, device number 6 [ 125.168042][ T5360] Dev loop0 SGI disklabel: csum bad, label corrupted [ 125.175696][ T4186] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 125.188532][ T6504] Dev loop0 SGI disklabel: csum bad, label corrupted [ 125.218688][ T6500] F2FS-fs (loop2): Start checkpoint disabled! [ 125.268792][ T6500] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 125.388551][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'. [ 125.411709][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 125.424728][ T6500] attempt to access beyond end of device [ 125.424728][ T6500] loop2: rw=2049, want=53256, limit=40427 [ 125.458029][ T6529] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.467756][ T6529] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.476570][ T6529] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.485321][ T6529] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.583132][ T6535] attempt to access beyond end of device [ 125.583132][ T6535] loop4: rw=0, want=655369, limit=64 [ 125.614605][ T6535] Buffer I/O error on dev loop4, logical block 655368, async page read [ 125.623406][ T6535] attempt to access beyond end of device [ 125.623406][ T6535] loop4: rw=0, want=655370, limit=64 [ 125.637896][ T6535] Buffer I/O error on dev loop4, logical block 655369, async page read [ 125.647152][ T6535] attempt to access beyond end of device [ 125.647152][ T6535] loop4: rw=0, want=655371, limit=64 [ 125.658822][ T6535] Buffer I/O error on dev loop4, logical block 655370, async page read [ 125.667753][ T6535] attempt to access beyond end of device [ 125.667753][ T6535] loop4: rw=0, want=655372, limit=64 [ 125.679284][ T6535] Buffer I/O error on dev loop4, logical block 655371, async page read [ 125.690062][ T6535] attempt to access beyond end of device [ 125.690062][ T6535] loop4: rw=0, want=655373, limit=64 [ 125.711438][ T6535] Buffer I/O error on dev loop4, logical block 655372, async page read [ 125.720140][ T6535] attempt to access beyond end of device [ 125.720140][ T6535] loop4: rw=0, want=655374, limit=64 [ 125.731449][ T6535] Buffer I/O error on dev loop4, logical block 655373, async page read [ 125.739811][ T4225] attempt to access beyond end of device [ 125.739811][ T4225] loop2: rw=2049, want=41000, limit=40427 [ 125.756647][ T6299] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.786497][ T6535] Buffer I/O error on dev loop4, logical block 655374, async page read [ 125.813609][ T6535] Buffer I/O error on dev loop4, logical block 655375, async page read [ 125.824543][ T6535] hfs: unable to open catalog tree [ 125.829863][ T6535] hfs: can't find a HFS filesystem on dev loop4 [ 126.029433][ T6546] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.040568][ T6299] usb 1-1: Using ep0 maxpacket: 16 [ 126.066649][ T6546] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.098152][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.173260][ T4229] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 126.203371][ T6299] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 126.211761][ T6299] usb 1-1: config 0 has no interface number 0 [ 126.218725][ T5619] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.221034][ T6299] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.239671][ T6299] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.373427][ T6299] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 126.386774][ T6299] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 126.397929][ T6299] usb 1-1: Product: syz [ 126.402117][ T6299] usb 1-1: SerialNumber: syz [ 126.415323][ T6299] usb 1-1: config 0 descriptor?? [ 126.475483][ T6299] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 126.483295][ T4230] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.492270][ T6299] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input15 [ 126.516837][ T6562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.896'. [ 126.543291][ T4229] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 126.566683][ T4229] usb 4-1: config 8 has no interface number 0 [ 126.572944][ T4229] usb 4-1: config 8 interface 177 altsetting 9 has an invalid endpoint with address 0xAD, skipping [ 126.590938][ T4229] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 126.601056][ T4229] usb 4-1: config 8 interface 177 has no altsetting 0 [ 126.613866][ T4229] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 126.628324][ T5619] usb 5-1: unable to get BOS descriptor or descriptor too short [ 126.637273][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.674117][ T6545] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.707725][ T6303] usb 1-1: USB disconnect, device number 6 [ 126.713975][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.714277][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 126.724588][ T5619] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.743182][ T4230] usb 3-1: Using ep0 maxpacket: 32 [ 126.752832][ T5619] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 126.766245][ T6303] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 126.873335][ T4230] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 126.882475][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.897567][ T4230] usb 3-1: config 0 descriptor?? [ 126.936179][ T5619] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 126.942263][ T6545] udc-core: couldn't find an available UDC or it's busy [ 126.945706][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.952874][ T6545] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 126.964827][ T5619] usb 5-1: Product: syz [ 126.978545][ T5619] usb 5-1: Manufacturer: syz [ 126.984351][ T5619] usb 5-1: SerialNumber: syz [ 127.013335][ T4229] usb 4-1: string descriptor 0 read error: -71 [ 127.022396][ T4229] ir_toy 4-1:8.177: required endpoints not found [ 127.032827][ T4229] usb 4-1: USB disconnect, device number 7 [ 127.183309][ T4230] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 127.197327][ T4230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.223571][ T4230] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 127.230746][ T4230] usb 3-1: media controller created [ 127.340546][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.413320][ T4230] az6027: usb out operation failed. (-71) [ 127.463351][ T4230] az6027: usb out operation failed. (-71) [ 127.476076][ T4230] stb0899_attach: Driver disabled by Kconfig [ 127.493791][ T4230] az6027: no front-end attached [ 127.493791][ T4230] [ 127.534614][ T4230] az6027: usb out operation failed. (-71) [ 127.540443][ T4230] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 127.560111][ T4230] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 127.599029][ T4230] dvb-usb: schedule remote query interval to 400 msecs. [ 127.629016][ T4230] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 127.664587][ T4230] usb 3-1: USB disconnect, device number 3 [ 127.809509][ T4230] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 127.948687][ T6587] netlink: 'syz.3.908': attribute type 2 has an invalid length. [ 128.000675][ T6587] netlink: 132 bytes leftover after parsing attributes in process `syz.3.908'. [ 128.237628][ T6535] comedi comedi1: reset error (fatal) [ 128.322251][ T6597] set_capacity_and_notify: 3 callbacks suppressed [ 128.322269][ T6597] loop2: detected capacity change from 0 to 2048 [ 128.356095][ T5619] usb 5-1: USB disconnect, device number 5 [ 128.413865][ T6597] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 128.468259][ T6597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.624935][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.717791][ T6622] input: syz1 as /devices/virtual/input/input17 [ 128.773158][ T5216] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.959119][ T6641] loop0: detected capacity change from 0 to 256 [ 129.133276][ T5216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 129.161547][ T5216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.207628][ T5216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 129.229329][ T5216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 129.244450][ T6655] loop1: detected capacity change from 0 to 16 [ 129.279902][ T6655] erofs: (device loop1): mounted with root inode @ nid 36. [ 129.463366][ T5216] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 129.488461][ T5216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.508762][ T5216] usb 4-1: Product: syz [ 129.516044][ T5216] usb 4-1: Manufacturer: syz [ 129.533188][ T5216] usb 4-1: SerialNumber: syz [ 129.556961][ T5216] usb 4-1: config 0 descriptor?? [ 129.586706][ T6633] loop2: detected capacity change from 0 to 32768 [ 129.615797][ T6633] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.931 (6633) [ 129.658651][ T6633] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 129.687929][ T6633] BTRFS info (device loop2): using free space tree [ 129.708508][ T6633] BTRFS info (device loop2): has skinny extents [ 129.837275][ T5216] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 129.850400][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 129.916388][ T6633] BTRFS info (device loop2): enabling ssd optimizations [ 130.039858][ T6299] usb 4-1: USB disconnect, device number 8 [ 130.282074][ T6714] RDS: rds_bind could not find a transport for ::1200:0, load rds_tcp or rds_rdma? [ 130.292101][ T5619] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.451878][ T6720] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 130.503372][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.957'. [ 130.663769][ T5619] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.700226][ T5619] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 130.843790][ T5619] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 130.883721][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 130.892102][ T5619] usb 5-1: Product: syz [ 130.913634][ T5619] usb 5-1: Manufacturer: syz [ 130.950794][ T6742] loop2: detected capacity change from 0 to 512 [ 130.995076][ T5619] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 131.036716][ T6742] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 131.082522][ T6742] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.968: corrupted in-inode xattr [ 131.131583][ T6742] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.968: couldn't read orphan inode 15 (err -117) [ 131.173737][ T6742] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000005,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 131.418793][ T6769] Zero length message leads to an empty skb [ 131.639542][ T6704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.653493][ T5619] mos7840: probe of ttyUSB0 failed with error -71 [ 131.673371][ T4230] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.687344][ T6783] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.693279][ T5619] usb 5-1: USB disconnect, device number 6 [ 131.711140][ T5619] mos7840 5-1:1.0: device disconnected [ 131.730458][ T6783] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.863193][ T6303] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.943208][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 132.076239][ T4230] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.088372][ T4230] usb 1-1: config 0 has no interface number 0 [ 132.103134][ T4230] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.116188][ T4230] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.129309][ T4230] usb 1-1: config 0 interface 1 has no altsetting 0 [ 132.136264][ T4230] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 132.163671][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.186916][ T4230] usb 1-1: config 0 descriptor?? [ 132.226163][ T4230] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 132.263443][ T6303] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 132.270718][ T6303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 132.300995][ T6303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 132.452790][ T6832] loop2: detected capacity change from 0 to 512 [ 132.507875][ T6832] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.533461][ T6303] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 132.551525][ T6303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.573287][ T6303] usb 2-1: Product: syz [ 132.577489][ T6303] usb 2-1: Manufacturer: syz [ 132.589681][ T6832] EXT4-fs (loop2): 1 truncate cleaned up [ 132.599470][ T6832] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 132.611216][ T6303] usb 2-1: SerialNumber: syz [ 132.640097][ T6303] usb 2-1: config 0 descriptor?? [ 132.648240][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.654629][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.673739][ T6836] loop3: detected capacity change from 0 to 8192 [ 132.718388][ T6303] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 132.743281][ T6844] binder: 6843:6844 ioctl c0306201 200000000080 returned -14 [ 132.755780][ T6836] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 132.774123][ T6836] REISERFS (device loop3): using ordered data mode [ 132.780672][ T6836] reiserfs: using flush barriers [ 132.798445][ T6836] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.816054][ T6836] REISERFS (device loop3): checking transaction log (loop3) [ 132.825789][ T6836] REISERFS (device loop3): Using r5 hash to sort names [ 132.838961][ T6836] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 132.869958][ T6836] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 132.884815][ T4230] elan 0003:04F3:074D.0007: Set report error for parm 6: -71 [ 132.895354][ T4230] elan 0003:04F3:074D.0007: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.0-1/input1 [ 132.907551][ T4230] elan 0003:04F3:074D.0007: Input device is not registered [ 132.941077][ T4230] elan: probe of 0003:04F3:074D.0007 failed with error -119 [ 133.037722][ T4230] usb 1-1: USB disconnect, device number 7 [ 133.045131][ T6303] usb 2-1: USB disconnect, device number 7 [ 133.057150][ T6836] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 133.137698][ T6836] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 133.187167][ T6853] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1016'. [ 133.210154][ T6836] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 133.238222][ T6851] fido_id[6851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 133.321198][ T6859] loop2: detected capacity change from 0 to 8 [ 133.486720][ T6859] SQUASHFS error: Failed to read block 0x26067d: -5 [ 133.531139][ T6859] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 133.551438][ T6859] SQUASHFS error: Unable to read directory block [26067d:1fff] [ 133.636945][ T6866] overlayfs: invalid origin (0000) [ 133.830031][ T6880] rnbd_client L125: Can't parse path hp:127.0.0.1\ß?:…b”EzñîÜ[‡þ¶ÖßùÍÛµ¬°>,: -22 [ 133.893143][ T6303] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.941060][ T6884] loop4: detected capacity change from 0 to 256 [ 133.976403][ T6884] exfat: Deprecated parameter 'utf8' [ 134.002826][ T6884] exfat: Deprecated parameter 'utf8' [ 134.058114][ T6884] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 134.277852][ T6905] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1041'. [ 134.326908][ T6303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.343217][ T6303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.363566][ T6303] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 134.374637][ T6303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.390579][ T6303] usb 1-1: config 0 descriptor?? [ 134.556394][ T6924] loop1: detected capacity change from 0 to 512 [ 134.568022][ T6925] loop4: detected capacity change from 0 to 256 [ 134.617335][ T6924] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 134.651989][ T6925] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 134.681700][ T6924] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 134.716872][ T1143] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 134.730915][ T6929] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 134.886139][ T6303] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x1 [ 134.902558][ T6303] hid-steam 0003:28DE:1142.0008: item fetching failed at offset 3/5 [ 134.911265][ T6303] hid-steam 0003:28DE:1142.0008: steam_probe:parse of hid interface failed [ 134.920179][ T6303] hid-steam: probe of 0003:28DE:1142.0008 failed with error -22 [ 135.110405][ T5616] usb 1-1: USB disconnect, device number 8 [ 135.170540][ T6960] loop1: detected capacity change from 0 to 512 [ 135.192129][ T6962] vcan0: tx address claim with dlc 0 [ 135.487523][ T6984] bonding: unable to delete non-existent b [ 135.515573][ T6986] loop3: detected capacity change from 0 to 512 [ 135.627622][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 135.637334][ T6986] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 135.707698][ T6986] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.748667][ T7006] loop2: detected capacity change from 0 to 256 [ 135.827417][ T7006] FAT-fs (loop2): Directory bread(block 64) failed [ 135.850922][ T7008] netlink: 'syz.1.1088': attribute type 3 has an invalid length. [ 135.859693][ T7006] FAT-fs (loop2): Directory bread(block 65) failed [ 135.867798][ T7006] FAT-fs (loop2): Directory bread(block 66) failed [ 135.885909][ T7006] FAT-fs (loop2): Directory bread(block 67) failed [ 135.892578][ T7006] FAT-fs (loop2): Directory bread(block 68) failed [ 135.899588][ T7006] FAT-fs (loop2): Directory bread(block 69) failed [ 135.907663][ T7006] FAT-fs (loop2): Directory bread(block 70) failed [ 135.914908][ T7006] FAT-fs (loop2): Directory bread(block 71) failed [ 135.922055][ T7006] FAT-fs (loop2): Directory bread(block 72) failed [ 135.929389][ T7006] FAT-fs (loop2): Directory bread(block 73) failed [ 135.983243][ T4230] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 136.127420][ T7012] loop4: detected capacity change from 0 to 256 [ 136.313264][ T4230] usb 1-1: Using ep0 maxpacket: 8 [ 136.361483][ T7025] loop2: detected capacity change from 0 to 164 [ 136.463382][ T4230] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 136.472478][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.525998][ T7010] loop1: detected capacity change from 0 to 32768 [ 136.585491][ T4230] pvrusb2: Hardware description: Terratec Grabster AV400 [ 136.603670][ T4230] pvrusb2: ********** [ 136.614832][ T4230] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 136.639410][ T7010] find_entry called with index = 0 [ 136.658259][ T4230] pvrusb2: Important functionality might not be entirely working. [ 136.667108][ T7010] read_mapping_page failed! [ 136.675879][ T7010] ERROR: (device loop1): txCommit: [ 136.675879][ T7010] [ 136.687923][ T4230] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 136.714790][ T7010] jfs_mkdir: dtSearch returned -17 [ 136.723467][ T4230] pvrusb2: ********** [ 136.794299][ T7031] loop4: detected capacity change from 0 to 4096 [ 136.855657][ T2424] pvrusb2: Invalid write control endpoint [ 136.904988][ T7031] ntfs: volume version 3.1. [ 136.990995][ T2424] pvrusb2: Invalid write control endpoint [ 137.008055][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 137.040308][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 137.048331][ T7031] ntfs: (device loop4): write_mft_record_nolock(): Failed to apply mst fixups! [ 137.089960][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 137.109065][ T7031] ntfs: (device loop4): __ntfs_write_inode(): Failed (error 22): Run chkdsk. [ 137.124265][ T2424] pvrusb2: Device being rendered inoperable [ 137.134596][ T7031] ntfs: (device loop4): ntfs_file_fsync(): Failed to fsync inode 0x43. Error 22. [ 137.158453][ T7004] pvrusb2: Attempted to execute control transfer when device not ok [ 137.173997][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 137.187664][ T4174] usb 1-1: USB disconnect, device number 9 [ 137.201641][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 137.280978][ T2424] pvrusb2: Attached sub-driver cx25840 [ 137.293582][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 137.305050][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 137.330659][ T4194] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 137.353660][ T7057] EXT4-fs (loop1): Ignoring removed oldalloc option [ 137.360325][ T7057] EXT4-fs (loop1): Ignoring removed orlov option [ 137.481715][ T7057] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,max_dir_size_kb=0x0000000000000002,grpjquota=,,errors=continue. Quota mode: none. [ 137.798591][ T7090] netlink: 'syz.4.1125': attribute type 15 has an invalid length. [ 138.234469][ T26] audit: type=1326 audit(2000000030.620:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.1142" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bff92199 code=0x7ffc0000 [ 138.313294][ T26] audit: type=1326 audit(2000000030.670:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.1142" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bff92199 code=0x7ffc0000 [ 138.393398][ T26] audit: type=1326 audit(2000000030.670:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.1142" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bff92199 code=0x7ffc0000 [ 138.453595][ T26] audit: type=1326 audit(2000000030.670:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.1142" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f77bff92199 code=0x7ffc0000 [ 138.503196][ T5616] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.533878][ T26] audit: type=1326 audit(2000000030.670:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.1142" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bff92199 code=0x7ffc0000 [ 138.612064][ T26] audit: type=1326 audit(2000000030.670:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.1142" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bff92199 code=0x7ffc0000 [ 138.705273][ T7092] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 138.711939][ T7092] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 138.743301][ T5616] usb 3-1: Using ep0 maxpacket: 16 [ 138.806257][ T7092] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.863273][ T5616] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.885012][ T5616] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.902051][ T5616] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.922019][ T7092] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 138.922357][ T5616] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.929342][ T7092] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 138.953198][ T5616] usb 3-1: New USB device found, idVendor=18d1, idProduct=5050, bcdDevice= 0.00 [ 138.964793][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.991830][ T5616] usb 3-1: config 0 descriptor?? [ 139.062259][ T7173] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 139.080899][ T4196] handle_bad_sector: 2 callbacks suppressed [ 139.080914][ T4196] attempt to access beyond end of device [ 139.080914][ T4196] loop0: rw=2049, want=45104, limit=40427 [ 139.271109][ T7182] set_capacity_and_notify: 2 callbacks suppressed [ 139.271125][ T7182] loop1: detected capacity change from 0 to 4096 [ 139.414608][ T7182] ntfs: volume version 3.1. [ 139.475747][ T5616] hid-generic 0003:18D1:5050.0009: unknown main item tag 0x0 [ 139.501985][ T5616] hid-generic 0003:18D1:5050.0009: No inputs registered, leaving [ 139.563467][ T5616] hid-generic 0003:18D1:5050.0009: hidraw0: USB HID v0.00 Joystick [HID 18d1:5050] on usb-dummy_hcd.2-1/input0 [ 139.685950][ T5617] usb 3-1: USB disconnect, device number 4 [ 139.743028][ T7202] fido_id[7202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 139.993385][ T5615] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.051067][ T7236] netlink: 'syz.3.1194': attribute type 15 has an invalid length. [ 140.066915][ T7232] loop1: detected capacity change from 0 to 4096 [ 140.141063][ T7232] ntfs: volume version 3.1. [ 140.357318][ T5615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.388900][ T5615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.409911][ T5615] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 140.426484][ T5615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.511383][ T5615] usb 5-1: config 0 descriptor?? [ 140.532881][ T7252] netlink: 'syz.3.1202': attribute type 3 has an invalid length. [ 140.543739][ T7252] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1202'. [ 141.006143][ T5615] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x1 [ 141.021814][ T5615] hid-steam 0003:28DE:1142.000A: item fetching failed at offset 3/5 [ 141.031489][ T5615] hid-steam 0003:28DE:1142.000A: steam_probe:parse of hid interface failed [ 141.053486][ T5615] hid-steam: probe of 0003:28DE:1142.000A failed with error -22 [ 141.213545][ T5615] usb 5-1: USB disconnect, device number 7 [ 141.393268][ T4230] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 141.663280][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 141.804427][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.835170][ T4230] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.867294][ T4230] usb 1-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 141.878531][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.900975][ T4230] usb 1-1: config 0 descriptor?? [ 142.132784][ T5615] kernel write not supported for file /snd/seq (pid: 5615 comm: kworker/1:14) [ 142.333280][ T5617] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 142.346644][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 142.346658][ T26] audit: type=1400 audit(2000000034.740:31): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3A2020202030202020313120202020302020202030202020202030202020202020203020202020202020202020300A65727370616E303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202031303920202020302020203938202020202030202020202020203020202020202020202020300A69705F767469303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020203020202020302020202030202020202030202020202020203020202020202020202020300A6970365F767469303A20202020202020302020202020202030202020203020202020312020202030202020202030202020202020202020203020202020202020202030202020202020202030202020202020203020202020372020202037202020203020202020203020202020202020372020202020202 [ 142.394697][ T7370] loop1: detected capacity change from 0 to 2048 [ 142.496585][ T4230] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 142.503825][ T4230] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 142.510790][ T4230] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 142.518280][ T4230] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 142.529709][ T4230] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 142.538856][ T4230] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 142.557121][ T7370] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 142.573676][ T4230] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 142.589476][ T4230] wacom 0003:056A:00FA.000B: unknown main item tag 0x3 [ 142.603160][ T7370] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.608032][ T5617] usb 5-1: Using ep0 maxpacket: 8 [ 142.622495][ T4230] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 142.645116][ T4230] wacom 0003:056A:00FA.000B: hidraw0: USB HID v0.02 Joystick [HID 056a:00fa] on usb-dummy_hcd.0-1/input0 [ 142.735090][ T4230] usb 1-1: USB disconnect, device number 10 [ 142.743564][ T5617] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 142.762982][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.795557][ T7376] fido_id[7376]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 142.825169][ T5617] pvrusb2: Hardware description: Terratec Grabster AV400 [ 142.832765][ T5617] pvrusb2: ********** [ 142.879423][ T5617] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 142.905504][ T5617] pvrusb2: Important functionality might not be entirely working. [ 142.924688][ T5617] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 142.939057][ T5617] pvrusb2: ********** [ 143.043328][ T2424] pvrusb2: Invalid write control endpoint [ 143.117608][ T7385] loop1: detected capacity change from 0 to 2048 [ 143.161410][ T2424] pvrusb2: Invalid write control endpoint [ 143.183340][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 143.192662][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 143.215365][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 143.225725][ T2424] pvrusb2: Device being rendered inoperable [ 143.229800][ T7385] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.231818][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 143.250149][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 143.276227][ T2424] pvrusb2: Attached sub-driver cx25840 [ 143.281727][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 143.294240][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 143.305436][ T7337] pvrusb2: Attempted to execute control transfer when device not ok [ 143.314389][ T5617] usb 5-1: USB disconnect, device number 8 [ 143.333604][ T7385] ext4 filesystem being mounted at /287/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.365171][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.417912][ T7378] loop3: detected capacity change from 0 to 40427 [ 143.456218][ T7398] loop2: detected capacity change from 0 to 64 [ 143.462805][ T7378] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 143.496510][ T7378] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 143.530703][ T7378] F2FS-fs (loop3): invalid crc value [ 143.553614][ T7378] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.679167][ T7378] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 143.689143][ T7378] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.741282][ T7407] loop2: detected capacity change from 0 to 4096 [ 143.763337][ T4230] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 143.801187][ T7407] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 143.875791][ T4186] attempt to access beyond end of device [ 143.875791][ T4186] loop3: rw=2049, want=45104, limit=40427 [ 143.926412][ T4195] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 144.023926][ T26] audit: type=1326 audit(2000000036.410:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.4.1277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2923e199 code=0x7ffc0000 [ 144.048090][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 144.055530][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.080363][ T26] audit: type=1326 audit(2000000036.420:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.4.1277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2923e199 code=0x7ffc0000 [ 144.112421][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.121482][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.158224][ T26] audit: type=1326 audit(2000000036.470:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.4.1277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2923e199 code=0x7ffc0000 [ 144.190206][ T26] audit: type=1326 audit(2000000036.470:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.4.1277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2923e199 code=0x7ffc0000 [ 144.228192][ T7423] netem: incorrect gi model size [ 144.228194][ T26] audit: type=1326 audit(2000000036.470:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.4.1277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fda2923e199 code=0x7ffc0000 [ 144.243591][ T4230] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 144.257630][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.273969][ T26] audit: type=1326 audit(2000000036.470:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.4.1277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2923e199 code=0x7ffc0000 [ 144.302783][ T4230] usb 1-1: config 0 has no interface number 0 [ 144.323225][ T7423] netem: change failed [ 144.343130][ T26] audit: type=1326 audit(2000000036.470:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.4.1277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2923e199 code=0x7ffc0000 [ 144.395350][ T26] audit: type=1326 audit(2000000036.470:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.4.1277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2923e199 code=0x7ffc0000 [ 144.432308][ T26] audit: type=1326 audit(2000000036.470:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.4.1277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2923e199 code=0x7ffc0000 [ 144.511338][ T7428] loop2: detected capacity change from 0 to 2048 [ 144.523540][ T4230] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 144.548449][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.568661][ T4230] usb 1-1: Product: syz [ 144.597405][ T4230] usb 1-1: Manufacturer: syz [ 144.602049][ T4230] usb 1-1: SerialNumber: syz [ 144.617468][ T7428] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.631673][ T4230] usb 1-1: config 0 descriptor?? [ 144.647688][ T7428] ext4 filesystem being mounted at /276/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.679020][ T6453] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 144.770057][ T4230] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 144.975479][ T4230] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 145.005618][ T4230] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 145.031632][ T7451] loop4: detected capacity change from 0 to 512 [ 145.158810][ T7435] loop1: detected capacity change from 0 to 40427 [ 145.218346][ T7451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 145.232694][ T7451] System zones: 1-12 [ 145.258773][ T7451] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.1288: missing EA_INODE flag [ 145.285571][ T7435] F2FS-fs (loop1): Found nat_bits in checkpoint [ 145.333176][ T5616] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 145.353891][ T7451] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1288: error while reading EA inode 12 err=-117 [ 145.394929][ T7449] loop2: detected capacity change from 0 to 32768 [ 145.436311][ T7449] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 145.439350][ T5617] usb 1-1: USB disconnect, device number 11 [ 145.453256][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 145.476081][ T7451] EXT4-fs (loop4): 1 orphan inode deleted [ 145.490267][ T5617] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 145.536361][ T7451] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 145.551376][ T7435] F2FS-fs (loop1): Start checkpoint disabled! [ 145.576033][ T5616] usb 4-1: Using ep0 maxpacket: 8 [ 145.587179][ T5617] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 145.598592][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 145.606682][ T7435] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 145.618791][ T5617] quatech2 1-1:0.51: device disconnected [ 145.638174][ T7451] fscrypt (loop4, inode 15): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 145.692543][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1289'. [ 145.693931][ T5616] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 145.729672][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.742759][ T7435] attempt to access beyond end of device [ 145.742759][ T7435] loop1: rw=2049, want=53256, limit=40427 [ 145.812993][ T5616] pvrusb2: Hardware description: Terratec Grabster AV400 [ 145.822093][ T5616] pvrusb2: ********** [ 145.828724][ T5616] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 145.883992][ T5616] pvrusb2: Important functionality might not be entirely working. [ 145.899677][ T5616] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 145.926982][ T5616] pvrusb2: ********** [ 145.965043][ T4225] attempt to access beyond end of device [ 145.965043][ T4225] loop1: rw=2049, want=41000, limit=40427 [ 146.023587][ T2424] pvrusb2: Invalid write control endpoint [ 146.180139][ T2424] pvrusb2: Invalid write control endpoint [ 146.192271][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 146.259193][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 146.276976][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 146.297600][ T2424] pvrusb2: Device being rendered inoperable [ 146.313937][ T7453] pvrusb2: Attempted to execute control transfer when device not ok [ 146.332627][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 146.340485][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 146.343914][ T5616] usb 4-1: USB disconnect, device number 9 [ 146.363228][ T2424] pvrusb2: Attached sub-driver cx25840 [ 146.386726][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 146.417222][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 146.517665][ T7497] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1308'. [ 146.717733][ T7515] loop1: detected capacity change from 0 to 64 [ 147.193240][ T6302] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 147.323239][ T4230] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 147.432907][ T7543] loop2: detected capacity change from 0 to 32768 [ 147.481543][ T7537] loop0: detected capacity change from 0 to 32768 [ 147.507839][ T7543] Dev loop2 SGI disklabel: csum bad, label corrupted [ 147.567574][ T7537] ERROR: (device loop0): dtReadFirst: stbl[0] out of bound [ 147.567574][ T7537] [ 147.593135][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 147.605636][ T6302] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 147.627045][ T7537] ERROR: (device loop0): remounting filesystem as read-only [ 147.635090][ T6302] usb 5-1: config 8 has no interface number 0 [ 147.648930][ T6302] usb 5-1: config 8 interface 177 altsetting 9 has an invalid endpoint with address 0xAD, skipping [ 147.681413][ T6302] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 147.691816][ T7548] netem: incorrect gi model size [ 147.698492][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 147.698508][ T26] audit: type=1326 audit(2000000040.090:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.1.1342" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bff92199 code=0x7ffc0000 [ 147.708396][ T7548] netem: change failed [ 147.733476][ T4230] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 147.742639][ T4230] usb 4-1: config 0 has no interface number 0 [ 147.751757][ T6302] usb 5-1: config 8 interface 177 has no altsetting 0 [ 147.759023][ T4230] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.785489][ T6302] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 147.797613][ T26] audit: type=1326 audit(2000000040.130:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.1.1342" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f77bff92199 code=0x7ffc0000 [ 147.809140][ T4230] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 147.821631][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.840946][ T6302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.893460][ T26] audit: type=1326 audit(2000000040.130:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.1.1342" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f77bff92199 code=0x7ffc0000 [ 147.923858][ T7528] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.023431][ T4230] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 148.033782][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 148.041893][ T4230] usb 4-1: Product: syz [ 148.051234][ T4230] usb 4-1: SerialNumber: syz [ 148.063924][ T4230] usb 4-1: config 0 descriptor?? [ 148.105119][ T4230] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 148.115553][ T4230] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input23 [ 148.155113][ T7528] udc-core: couldn't find an available UDC or it's busy [ 148.183261][ T7528] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 148.233411][ T6302] usb 5-1: string descriptor 0 read error: -71 [ 148.249722][ T6302] ir_toy 5-1:8.177: required endpoints not found [ 148.272157][ T6302] usb 5-1: USB disconnect, device number 9 [ 148.332162][ T4230] usb 4-1: USB disconnect, device number 10 [ 148.343869][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 148.355170][ T4230] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 148.752160][ T7552] loop2: detected capacity change from 0 to 64 [ 148.901726][ T7561] loop0: detected capacity change from 0 to 256 [ 149.270515][ T7590] RDS: rds_bind could not find a transport for ::1200:0, load rds_tcp or rds_rdma? [ 149.293120][ T5616] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.324910][ T26] audit: type=1326 audit(2000000041.720:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7593 comm="syz.0.1354" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c356d199 code=0x7ffc0000 [ 149.374023][ T7596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1355'. [ 149.383708][ T26] audit: type=1326 audit(2000000041.720:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7593 comm="syz.0.1354" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f68c356d199 code=0x7ffc0000 [ 149.418863][ T7596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1355'. [ 149.436987][ T26] audit: type=1326 audit(2000000041.720:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7593 comm="syz.0.1354" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f68c356d199 code=0x7ffc0000 [ 149.553174][ T5616] usb 2-1: Using ep0 maxpacket: 8 [ 149.553201][ T6302] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.582815][ T7586] loop4: detected capacity change from 0 to 32768 [ 149.640983][ T7586] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1348 (7586) [ 149.660449][ T7586] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 149.669762][ T7586] BTRFS info (device loop4): using free space tree [ 149.676423][ T7586] BTRFS info (device loop4): has skinny extents [ 149.689235][ T4225] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 149.703719][ T5616] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 149.713882][ T5616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.776024][ T5616] pvrusb2: Hardware description: Terratec Grabster AV400 [ 149.806570][ T5616] pvrusb2: ********** [ 149.810581][ T5616] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 149.813464][ T6302] usb 3-1: Using ep0 maxpacket: 16 [ 149.823994][ T7586] BTRFS info (device loop4): enabling ssd optimizations [ 149.838773][ T5616] pvrusb2: Important functionality might not be entirely working. [ 149.848469][ T5616] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 149.866031][ T5616] pvrusb2: ********** [ 149.947125][ T6302] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 149.955973][ T6302] usb 3-1: config 0 has no interface number 0 [ 149.962113][ T6302] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.973372][ T6302] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 150.007011][ T2424] pvrusb2: Invalid write control endpoint [ 150.103329][ T6302] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 150.142141][ T6302] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 150.151195][ T2424] pvrusb2: Invalid write control endpoint [ 150.157788][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 150.167414][ T6302] usb 3-1: Product: syz [ 150.181864][ T6302] usb 3-1: SerialNumber: syz [ 150.189398][ T4175] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop4 scanned by udevd (4175) [ 150.208784][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 150.209144][ T6302] usb 3-1: config 0 descriptor?? [ 150.231743][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 150.273312][ T2424] pvrusb2: Device being rendered inoperable [ 150.279402][ T7564] pvrusb2: Attempted to execute control transfer when device not ok [ 150.295447][ T6302] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 150.311099][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 150.324740][ T6302] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input24 [ 150.361986][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 150.382364][ T6302] usb 2-1: USB disconnect, device number 8 [ 150.398697][ T2424] pvrusb2: Attached sub-driver cx25840 [ 150.448328][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 150.495598][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 150.576911][ T7628] usb 3-1: USB disconnect, device number 5 [ 150.583130][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 150.590121][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 150.612466][ T7628] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 150.989280][ T7622] loop3: detected capacity change from 0 to 32768 [ 151.080589][ T7622] XFS (loop3): Mounting V5 Filesystem [ 151.214492][ T7622] XFS (loop3): Ending clean mount [ 151.277750][ T4186] XFS (loop3): Unmounting Filesystem [ 151.306534][ T7659] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1371'. [ 151.350135][ T7639] loop0: detected capacity change from 0 to 32768 [ 151.887282][ T7682] binder: 7681:7682 ioctl c0306201 200000000080 returned -14 [ 152.153157][ T4187] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 152.211827][ T7705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1390'. [ 152.241079][ T7705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1390'. [ 152.443175][ T4187] usb 5-1: Using ep0 maxpacket: 16 [ 152.490554][ T7696] loop2: detected capacity change from 0 to 32768 [ 152.531392][ T7699] loop1: detected capacity change from 0 to 32768 [ 152.550685][ T7696] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1388 (7696) [ 152.583373][ T4187] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 152.599363][ T4187] usb 5-1: config 0 has no interface number 0 [ 152.613797][ T4187] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.662605][ T4187] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 152.703260][ T7699] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1387 (7699) [ 152.719979][ T7696] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 152.740037][ T7696] BTRFS info (device loop2): setting nodatasum [ 152.755846][ T7696] BTRFS info (device loop2): force zlib compression, level 3 [ 152.772267][ T7699] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 152.791942][ T7699] BTRFS info (device loop1): using free space tree [ 152.804261][ T7696] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 152.823271][ T4187] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 152.839664][ T7699] BTRFS info (device loop1): has skinny extents [ 152.845081][ T4187] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 152.855003][ T7696] BTRFS info (device loop2): use lzo compression, level 0 [ 152.862175][ T7696] BTRFS info (device loop2): turning on flush-on-commit [ 152.874617][ T4187] usb 5-1: Product: syz [ 152.884645][ T7696] BTRFS info (device loop2): enabling auto defrag [ 152.889724][ T4187] usb 5-1: SerialNumber: syz [ 152.891200][ T7696] BTRFS info (device loop2): max_inline at 4096 [ 152.913193][ T7696] BTRFS info (device loop2): using free space tree [ 152.919776][ T7696] BTRFS info (device loop2): has skinny extents [ 152.935677][ T4187] usb 5-1: config 0 descriptor?? [ 152.995769][ T4187] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 153.021788][ T4187] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input27 [ 153.082089][ T7759] overlayfs: invalid origin (0000) [ 153.118312][ T7699] BTRFS info (device loop1): enabling ssd optimizations [ 153.139842][ T7696] BTRFS info (device loop2): enabling ssd optimizations [ 153.212079][ T4187] usb 5-1: USB disconnect, device number 10 [ 153.218194][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 153.218218][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 153.241686][ T7696] BTRFS error (device loop2): unable to set label with more than 255 bytes [ 153.259249][ T4187] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 153.571037][ T5619] hid-generic 0005:0C45:0008.000C: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 153.694358][ T7783] loop0: detected capacity change from 0 to 8 [ 153.874826][ T7783] SQUASHFS error: Unable to read directory block [629:fe] [ 154.130334][ T7796] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.161068][ T7796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.177539][ T7796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.364060][ T7810] loop3: detected capacity change from 0 to 8 [ 154.441723][ T7814] loop1: detected capacity change from 0 to 1024 [ 154.457290][ T7816] loop4: detected capacity change from 0 to 8 [ 154.469092][ T7810] SQUASHFS error: Failed to read block 0x26067d: -5 [ 154.511408][ T7810] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 154.536609][ T7810] SQUASHFS error: Unable to read directory block [26067d:1fff] [ 154.538939][ T7814] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 154.575814][ T7814] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.603506][ T7816] SQUASHFS error: Unable to read directory block [629:fe] [ 154.695440][ T7800] loop2: detected capacity change from 0 to 32768 [ 154.733535][ T7800] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1414 (7800) [ 154.808371][ T7800] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 154.859455][ T7800] BTRFS info (device loop2): using free space tree [ 154.866956][ T7826] loop3: detected capacity change from 0 to 256 [ 154.888697][ T7800] BTRFS info (device loop2): has skinny extents [ 154.905910][ T7826] exfat: Deprecated parameter 'utf8' [ 154.911475][ T7826] exfat: Deprecated parameter 'namecase' [ 154.986274][ T7826] exfat: Deprecated parameter 'namecase' [ 155.088470][ T7826] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 155.167583][ T7855] loop0: detected capacity change from 0 to 64 [ 155.232702][ T7800] BTRFS info (device loop2): enabling ssd optimizations [ 155.635080][ T4187] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 155.733226][ T6294] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 155.849385][ T7884] loop1: detected capacity change from 0 to 256 [ 155.918556][ T7868] loop4: detected capacity change from 0 to 32768 [ 155.923544][ T4187] usb 4-1: Using ep0 maxpacket: 16 [ 155.927646][ T7884] exfat: Deprecated parameter 'utf8' [ 155.950243][ T7884] exfat: Deprecated parameter 'namecase' [ 155.973158][ T6294] usb 1-1: Using ep0 maxpacket: 32 [ 155.989178][ T7884] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 156.059999][ T7868] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 156.070903][ T7868] BTRFS info (device loop4): using free space tree [ 156.083640][ T4187] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.094187][ T6294] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 156.117982][ T6294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.123260][ T4187] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.135166][ T7868] BTRFS info (device loop4): has skinny extents [ 156.173361][ T6294] usb 1-1: config 0 descriptor?? [ 156.178638][ T4187] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 156.210826][ T4187] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.218700][ T4187] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 156.228491][ T4187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.245082][ T4187] usb 4-1: config 0 descriptor?? [ 156.351925][ T7868] BTRFS info (device loop4): enabling ssd optimizations [ 156.426346][ T7868] BTRFS info (device loop4): disk added /dev/nullb0 [ 156.456531][ T6294] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 156.516202][ T6294] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.564223][ T6294] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 156.571417][ T6294] usb 1-1: media controller created [ 156.622720][ T6294] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.633162][ T6293] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 156.723483][ T6294] az6027: usb out operation failed. (-71) [ 156.739514][ T4187] hid (null): bogus close delimiter [ 156.743583][ T6294] az6027: usb out operation failed. (-71) [ 156.750604][ T6294] stb0899_attach: Driver disabled by Kconfig [ 156.765064][ T6294] az6027: no front-end attached [ 156.765064][ T6294] [ 156.786434][ T6294] az6027: usb out operation failed. (-71) [ 156.792295][ T6294] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 156.825674][ T6294] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 156.867071][ T6294] dvb-usb: schedule remote query interval to 400 msecs. [ 156.892005][ T6294] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 156.916869][ T6294] usb 1-1: USB disconnect, device number 12 [ 156.996728][ T6293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 157.011050][ T6293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 157.026971][ T6293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 157.039481][ T6293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 157.083827][ T5216] usb 4-1: USB disconnect, device number 11 [ 157.146061][ T6294] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 157.178670][ T7918] loop4: detected capacity change from 0 to 512 [ 157.223621][ T6293] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 157.232821][ T6293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.254230][ T7918] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 157.269895][ T7920] loop1: detected capacity change from 0 to 256 [ 157.281277][ T6293] usb 3-1: Product: syz [ 157.292229][ T6293] usb 3-1: Manufacturer: syz [ 157.303227][ T6293] usb 3-1: SerialNumber: syz [ 157.319428][ T6293] usb 3-1: config 0 descriptor?? [ 157.327673][ T7918] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 157.355291][ T6453] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 157.375346][ T7920] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 157.539696][ T7929] loop4: detected capacity change from 0 to 64 [ 157.586511][ T6293] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 157.803031][ T7916] usb 3-1: USB disconnect, device number 6 [ 157.813375][ T6292] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 158.146940][ T7957] loop3: detected capacity change from 0 to 256 [ 158.155113][ T7956] loop1: detected capacity change from 0 to 128 [ 158.181083][ T7957] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 158.184620][ T6292] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 158.204324][ T6292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 158.215002][ T6292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 158.298187][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 158.423442][ T6292] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.452982][ T6292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.473784][ T6292] usb 1-1: Product: syz [ 158.478094][ T6292] usb 1-1: Manufacturer: syz [ 158.482719][ T6292] usb 1-1: SerialNumber: syz [ 158.523331][ T6292] usb 1-1: config 0 descriptor?? [ 158.566082][ T6292] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 158.650930][ T7979] netlink: 'syz.3.1476': attribute type 11 has an invalid length. [ 158.653396][ T7977] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 158.659343][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'. [ 158.675711][ T7977] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 158.685691][ T7977] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.776389][ T7977] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.1484: Allocating blocks 41-42 which overlap fs metadata [ 158.812519][ T7977] Quota error (device loop1): write_blk: dquota write failed [ 158.825802][ T6292] usb 1-1: USB disconnect, device number 13 [ 158.859505][ T7977] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 158.901379][ T7977] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 158.921959][ T7977] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.1484: Failed to acquire dquot type 1 [ 158.940274][ T7977] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 158.961643][ T7977] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.1484: corrupted inode contents [ 158.978494][ T7977] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #12: comm syz.1.1484: mark_inode_dirty error [ 158.990802][ T7977] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.1484: corrupted inode contents [ 159.009125][ T7977] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.1484: mark_inode_dirty error [ 159.021784][ T7977] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.1484: corrupted inode contents [ 159.043251][ T7977] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 159.062500][ T7977] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.1484: corrupted inode contents [ 159.085183][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.101731][ T7977] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.1484: mark_inode_dirty error [ 159.121788][ T7977] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 159.159014][ T7977] EXT4-fs (loop1): 1 truncate cleaned up [ 159.164794][ T7977] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noblock_validity,mblk_io_submit,noinit_itable,noinit_itable,grpjquota=,jqfmt=vfsv1,max_dir_size_kb=0x0000000000000006,barrier=0x00000000000007ff2,errors=continue. Quota mode: writeback. [ 164.003327][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 175.705986][ T4236] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 180.716613][ T4236] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 185.925070][ T5216] Bluetooth: hci4: command 0x0406 tx timeout [ 185.925078][ T6292] Bluetooth: hci0: command 0x0406 tx timeout [ 185.925171][ T6292] Bluetooth: hci1: command 0x0406 tx timeout [ 185.944061][ T6292] Bluetooth: hci2: command 0x0406 tx timeout [ 189.325637][ T4225] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.095816][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.102289][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.004206][ T1143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 206.733428][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 211.641084][ T4236] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 220.352680][ T4236] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 228.003638][ T4236] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 237.657924][ T1143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 242.668219][ T1143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.379772][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.524467][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.530809][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.003410][ T4225] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 268.685620][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 273.695429][ T4225] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 282.407047][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 283.213497][ T5214] Bluetooth: hci3: command 0x0406 tx timeout [ 292.003195][ T1143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 299.712533][ T4236] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 304.722604][ T4225] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 306.083626][ T27] INFO: task syz-executor:4172 blocked for more than 143 seconds. [ 306.091487][ T27] Not tainted syzkaller #0 [ 306.098266][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.107024][ T27] task:syz-executor state:D stack:23216 pid: 4172 ppid: 4171 flags:0x00004002 [ 306.116366][ T27] Call Trace: [ 306.119661][ T27] [ 306.122624][ T27] __schedule+0x11c3/0x4350 [ 306.127242][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 306.133349][ T27] ? lock_chain_count+0x20/0x20 [ 306.138380][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 306.143761][ T27] ? release_firmware_map_entry+0x190/0x190 [ 306.149684][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 306.155971][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 306.161348][ T27] schedule+0x11b/0x1e0 [ 306.165842][ T27] io_schedule+0x7c/0xd0 [ 306.170116][ T27] bit_wait_io+0xd/0xc0 [ 306.174321][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 306.179824][ T27] ? bit_wait+0xc0/0xc0 [ 306.184194][ T27] ? __wait_on_bit+0x170/0x170 [ 306.189008][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 306.194093][ T27] ? bit_waitqueue+0x30/0x30 [ 306.198705][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 306.205474][ T27] do_get_write_access+0x134/0xe40 [ 306.210793][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 306.220927][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 306.227165][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 306.238271][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 306.244309][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 306.249893][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 306.260261][ T27] ext4_dirty_inode+0xbf/0x100 [ 306.265079][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 306.271227][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 306.281111][ T27] generic_update_time+0x1cd/0x1f0 [ 306.286335][ T27] file_update_time+0x3c0/0x440 [ 306.291214][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 306.300904][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 306.305992][ T27] ? wp_page_shared+0x15b/0x6c0 [ 306.310858][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 306.323761][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 306.328866][ T27] do_page_mkwrite+0x168/0x3c0 [ 306.333808][ T27] wp_page_shared+0x163/0x6c0 [ 306.338508][ T27] handle_mm_fault+0x1fbd/0x4440 [ 306.343526][ T27] ? get_page+0xe0/0xe0 [ 306.347717][ T27] ? vmacache_find+0x238/0x590 [ 306.352511][ T27] ? find_vma+0xd2/0x230 [ 306.356828][ T27] do_user_addr_fault+0x494/0xc90 [ 306.362526][ T27] exc_page_fault+0x60/0x100 [ 306.367228][ T27] asm_exc_page_fault+0x22/0x30 [ 306.372415][ T27] RIP: 0033:0x7fd20f8b2722 [ 306.376918][ T27] RSP: 002b:00007fff28d44110 EFLAGS: 00010202 [ 306.383048][ T27] RAX: 00007fd20d932000 RBX: 0000555576dae1b0 RCX: 0000000000000005 [ 306.391084][ T27] RDX: 0000000000000f12 RSI: 0000555576daef48 RDI: 0000000000000020 [ 306.399162][ T27] RBP: 00007fff28d44610 R08: 0000555576daefa8 R09: 0000000000000086 [ 306.407483][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff28d44450 [ 306.415533][ T27] R13: 00007fff28d44240 R14: 585858582e7a7973 R15: 00007fff28d44190 [ 306.424106][ T27] [ 306.427217][ T27] INFO: task syz.0.1449:7921 blocked for more than 143 seconds. [ 306.436013][ T27] Not tainted syzkaller #0 [ 306.440971][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.449756][ T27] task:syz.0.1449 state:D stack:27664 pid: 7921 ppid: 4196 flags:0x00004004 [ 306.459076][ T27] Call Trace: [ 306.462370][ T27] [ 306.466009][ T27] __schedule+0x11c3/0x4350 [ 306.471073][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 306.481095][ T27] ? lock_chain_count+0x20/0x20 [ 306.487120][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 306.492498][ T27] ? release_firmware_map_entry+0x190/0x190 [ 306.503199][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 306.509288][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 306.518146][ T27] schedule+0x11b/0x1e0 [ 306.522446][ T27] io_schedule+0x7c/0xd0 [ 306.527737][ T27] bit_wait_io+0xd/0xc0 [ 306.531948][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 306.542087][ T27] ? bit_wait+0xc0/0xc0 [ 306.547281][ T27] ? __wait_on_bit+0x170/0x170 [ 306.552214][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 306.557338][ T27] ? bit_waitqueue+0x30/0x30 [ 306.561989][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 306.567742][ T27] do_get_write_access+0x134/0xe40 [ 306.573548][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 306.579576][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 306.585870][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 306.592050][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 306.597451][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 306.603149][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 306.608660][ T27] ext4_dirty_inode+0xbf/0x100 [ 306.613504][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 306.619350][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 306.624491][ T27] generic_update_time+0x1cd/0x1f0 [ 306.629634][ T27] file_update_time+0x3c0/0x440 [ 306.634574][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 306.639725][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 306.644864][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 306.650621][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 306.657248][ T27] ? count_memcg_event_mm+0x324/0x370 [ 306.662668][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 306.670624][ T27] do_page_mkwrite+0x168/0x3c0 [ 306.675954][ T27] handle_mm_fault+0x1e47/0x4440 [ 306.680945][ T27] ? get_page+0xe0/0xe0 [ 306.685238][ T27] ? vmacache_find+0x238/0x590 [ 306.690031][ T27] ? find_vma+0xd2/0x230 [ 306.694472][ T27] do_user_addr_fault+0x494/0xc90 [ 306.699566][ T27] exc_page_fault+0x60/0x100 [ 306.704256][ T27] asm_exc_page_fault+0x22/0x30 [ 306.709143][ T27] RIP: 0033:0x7f68c34417e9 [ 306.713592][ T27] RSP: 002b:00007ffdb0e38d40 EFLAGS: 00010202 [ 306.719679][ T27] RAX: 0000001b3260c000 RBX: ffffffff81ed80c5 RCX: 0000001b3260bff8 [ 306.729520][ T27] RDX: 0000001b32024220 RSI: 0000000000000008 RDI: 00007f68c4324720 [ 306.737598][ T27] RBP: 000000000000010c R08: 00007f68c37df000 R09: 00007f68c37e1000 [ 306.745684][ T27] R10: 0000000081ed80c9 R11: 00000000000000ff R12: 00007f68c37f4f40 [ 306.754313][ T27] R13: 0000000000010e49 R14: ffffffff81ed88c9 R15: 00007f68c4324720 [ 306.762333][ T27] ? kernfs_remove_by_name_ns+0x79/0x100 [ 306.768096][ T27] ? __kernfs_remove+0xca5/0xcb0 [ 306.774476][ T27] [ 306.777585][ T27] INFO: task syz.2.1475:7980 blocked for more than 144 seconds. [ 306.785546][ T27] Not tainted syzkaller #0 [ 306.790505][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.799297][ T27] task:syz.2.1475 state:D stack:27408 pid: 7980 ppid: 4195 flags:0x00004004 [ 306.808732][ T27] Call Trace: [ 306.812308][ T27] [ 306.815355][ T27] __schedule+0x11c3/0x4350 [ 306.819903][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 306.825952][ T27] ? lock_chain_count+0x20/0x20 [ 306.830831][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 306.836211][ T27] ? release_firmware_map_entry+0x190/0x190 [ 306.842138][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 306.848080][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 306.853366][ T27] schedule+0x11b/0x1e0 [ 306.857550][ T27] io_schedule+0x7c/0xd0 [ 306.861806][ T27] bit_wait_io+0xd/0xc0 [ 306.866046][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 306.871524][ T27] ? bit_wait+0xc0/0xc0 [ 306.876180][ T27] ? __wait_on_bit+0x170/0x170 [ 306.881086][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 306.887529][ T27] ? bit_waitqueue+0x30/0x30 [ 306.892184][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 306.897510][ T27] do_get_write_access+0x134/0xe40 [ 306.902699][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 306.908781][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 306.915003][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 306.921189][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 306.926575][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 306.932165][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 306.937715][ T27] ext4_dirty_inode+0xbf/0x100 [ 306.942521][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 306.948432][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 306.953550][ T27] generic_update_time+0x1cd/0x1f0 [ 306.958730][ T27] file_update_time+0x3c0/0x440 [ 306.963730][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 306.968900][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 306.974875][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 306.980818][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 306.987306][ T27] ? count_memcg_event_mm+0x324/0x370 [ 306.992736][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 306.999209][ T27] ? finish_lock_switch+0x12d/0x290 [ 307.005101][ T27] do_page_mkwrite+0x168/0x3c0 [ 307.009920][ T27] handle_mm_fault+0x1e47/0x4440 [ 307.015133][ T27] ? get_page+0xe0/0xe0 [ 307.019359][ T27] ? vmacache_find+0x238/0x590 [ 307.024372][ T27] ? find_vma+0xd2/0x230 [ 307.028683][ T27] do_user_addr_fault+0x494/0xc90 [ 307.034016][ T27] exc_page_fault+0x60/0x100 [ 307.038661][ T27] asm_exc_page_fault+0x22/0x30 [ 307.045626][ T27] RIP: 0033:0x7f7ff2a13f72 [ 307.050073][ T27] RSP: 002b:00007fffb442a4f0 EFLAGS: 00010202 [ 307.058178][ T27] RAX: 0000000000002008 RBX: 00007f7ff38f6720 RCX: 0000000000000000 [ 307.066450][ T27] RDX: 0000001b32822000 RSI: 0000000000000008 RDI: 00007f7ff38f6720 [ 307.074596][ T27] RBP: 0000000000000223 R08: 00007f7ff2db1000 R09: 00007f7ff2dc7038 [ 307.082924][ T27] R10: 0000000000000007 R11: 0000000000000001 R12: ffffffff81ad5374 [ 307.091198][ T27] R13: 00007f7ff2dc7038 R14: 00000000000000e5 R15: ffffffffffffe000 [ 307.100414][ T27] ? __pte_alloc+0xb4/0x150 [ 307.105129][ T27] [ 307.108276][ T27] INFO: task syz.3.1479:7987 blocked for more than 144 seconds. [ 307.116193][ T27] Not tainted syzkaller #0 [ 307.121145][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.130073][ T27] task:syz.3.1479 state:D stack:27664 pid: 7987 ppid: 4186 flags:0x00004004 [ 307.139483][ T27] Call Trace: [ 307.142793][ T27] [ 307.145851][ T27] __schedule+0x11c3/0x4350 [ 307.150386][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 307.156561][ T27] ? lock_chain_count+0x20/0x20 [ 307.161433][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 307.166924][ T27] ? release_firmware_map_entry+0x190/0x190 [ 307.172843][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 307.178794][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 307.184242][ T27] schedule+0x11b/0x1e0 [ 307.188728][ T27] io_schedule+0x7c/0xd0 [ 307.193072][ T27] bit_wait_io+0xd/0xc0 [ 307.197258][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 307.202745][ T27] ? bit_wait+0xc0/0xc0 [ 307.207184][ T27] ? __wait_on_bit+0x170/0x170 [ 307.211991][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 307.217231][ T27] ? bit_waitqueue+0x30/0x30 [ 307.221852][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 307.227755][ T27] do_get_write_access+0x134/0xe40 [ 307.232921][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 307.238998][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 307.245223][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 307.251399][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 307.256764][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 307.262345][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 307.267857][ T27] ext4_dirty_inode+0xbf/0x100 [ 307.272637][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 307.278508][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 307.283941][ T27] generic_update_time+0x1cd/0x1f0 [ 307.289086][ T27] file_update_time+0x3c0/0x440 [ 307.294425][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 307.299573][ T27] ? mark_lock+0x94/0x320 [ 307.304004][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 307.309061][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 307.315988][ T27] ? pte_alloc_one+0x287/0x310 [ 307.320796][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 307.327112][ T27] ? __rwlock_init+0x140/0x140 [ 307.331896][ T27] ? count_memcg_event_mm+0x324/0x370 [ 307.337362][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 307.342604][ T27] do_page_mkwrite+0x168/0x3c0 [ 307.347462][ T27] handle_mm_fault+0x1e47/0x4440 [ 307.352453][ T27] ? get_page+0xe0/0xe0 [ 307.356684][ T27] ? vmacache_find+0x4e3/0x590 [ 307.361476][ T27] ? vmacache_update+0xa0/0x100 [ 307.366487][ T27] ? find_vma+0x1df/0x230 [ 307.370846][ T27] do_user_addr_fault+0x494/0xc90 [ 307.376000][ T27] exc_page_fault+0x60/0x100 [ 307.380616][ T27] ? clear_bhb_loop+0x30/0x80 [ 307.385539][ T27] asm_exc_page_fault+0x22/0x30 [ 307.390411][ T27] RIP: 0033:0x7f3e39af3ae3 [ 307.395185][ T27] RSP: 002b:00007ffd23b5bf60 EFLAGS: 00010246 [ 307.401274][ T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32364000 [ 307.409374][ T27] RDX: 0000001b32324000 RSI: 0000000000400000 RDI: 00007f3e39e6a708 [ 307.417422][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.426543][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 307.434630][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd23b5c1f0 [ 307.442640][ T27] [ 307.445837][ T27] INFO: task syz.4.1478:7988 blocked for more than 144 seconds. [ 307.453632][ T27] Not tainted syzkaller #0 [ 307.458581][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.467351][ T27] task:syz.4.1478 state:D stack:27664 pid: 7988 ppid: 4194 flags:0x00004004 [ 307.476620][ T27] Call Trace: [ 307.479892][ T27] [ 307.482838][ T27] __schedule+0x11c3/0x4350 [ 307.487554][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 307.493605][ T27] ? lock_chain_count+0x20/0x20 [ 307.498831][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 307.504213][ T27] ? release_firmware_map_entry+0x190/0x190 [ 307.510136][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 307.516089][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 307.521306][ T27] schedule+0x11b/0x1e0 [ 307.525506][ T27] io_schedule+0x7c/0xd0 [ 307.529799][ T27] bit_wait_io+0xd/0xc0 [ 307.535188][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 307.540692][ T27] ? bit_wait+0xc0/0xc0 [ 307.544908][ T27] ? __wait_on_bit+0x170/0x170 [ 307.549831][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 307.554943][ T27] ? bit_waitqueue+0x30/0x30 [ 307.559599][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 307.564869][ T27] do_get_write_access+0x134/0xe40 [ 307.570032][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 307.576224][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 307.582416][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 307.588642][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 307.594209][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 307.600130][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 307.605691][ T27] ext4_dirty_inode+0xbf/0x100 [ 307.610507][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 307.616381][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 307.621422][ T27] generic_update_time+0x1cd/0x1f0 [ 307.626605][ T27] file_update_time+0x3c0/0x440 [ 307.631483][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 307.636682][ T27] ? mark_lock+0x94/0x320 [ 307.641029][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 307.646295][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 307.652068][ T27] ? pte_alloc_one+0x287/0x310 [ 307.657024][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 307.663466][ T27] ? __rwlock_init+0x140/0x140 [ 307.668259][ T27] ? count_memcg_event_mm+0x324/0x370 [ 307.673882][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 307.679106][ T27] do_page_mkwrite+0x168/0x3c0 [ 307.684537][ T27] handle_mm_fault+0x1e47/0x4440 [ 307.689508][ T27] ? get_page+0xe0/0xe0 [ 307.694046][ T27] ? vmacache_find+0x4e3/0x590 [ 307.698833][ T27] ? vmacache_update+0xa0/0x100 [ 307.704145][ T27] ? find_vma+0x1df/0x230 [ 307.708538][ T27] do_user_addr_fault+0x494/0xc90 [ 307.713657][ T27] exc_page_fault+0x60/0x100 [ 307.718265][ T27] ? clear_bhb_loop+0x30/0x80 [ 307.722967][ T27] asm_exc_page_fault+0x22/0x30 [ 307.727917][ T27] RIP: 0033:0x7fda2910bae3 [ 307.732372][ T27] RSP: 002b:00007ffd3ccdd790 EFLAGS: 00010246 [ 307.738710][ T27] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b32464000 [ 307.746737][ T27] RDX: 0000001b32424000 RSI: 0000000000600000 RDI: 00007fda29482708 [ 307.755876][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.763950][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 307.771938][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd3ccdda20 [ 307.779985][ T27] [ 307.783104][ T27] INFO: task syz.1.1480:7990 blocked for more than 145 seconds. [ 307.790758][ T27] Not tainted syzkaller #0 [ 307.796117][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.805252][ T27] task:syz.1.1480 state:D stack:27664 pid: 7990 ppid: 4185 flags:0x00004004 [ 307.814570][ T27] Call Trace: [ 307.817919][ T27] [ 307.820873][ T27] __schedule+0x11c3/0x4350 [ 307.825462][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 307.831468][ T27] ? lock_chain_count+0x20/0x20 [ 307.836378][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 307.841715][ T27] ? release_firmware_map_entry+0x190/0x190 [ 307.847693][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 307.853687][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 307.858923][ T27] schedule+0x11b/0x1e0 [ 307.864459][ T27] io_schedule+0x7c/0xd0 [ 307.868732][ T27] bit_wait_io+0xd/0xc0 [ 307.873093][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 307.878592][ T27] ? bit_wait+0xc0/0xc0 [ 307.882766][ T27] ? __wait_on_bit+0x170/0x170 [ 307.887576][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 307.892628][ T27] ? bit_waitqueue+0x30/0x30 [ 307.897477][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 307.902713][ T27] do_get_write_access+0x134/0xe40 [ 307.908209][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 307.914278][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 307.920471][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 307.926738][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 307.932087][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 307.937766][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 307.943318][ T27] ext4_dirty_inode+0xbf/0x100 [ 307.948117][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 307.953987][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 307.959040][ T27] generic_update_time+0x1cd/0x1f0 [ 307.964236][ T27] file_update_time+0x3c0/0x440 [ 307.969111][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 307.974927][ T27] ? mark_lock+0x94/0x320 [ 307.979304][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 307.984964][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 307.990713][ T27] ? pte_alloc_one+0x287/0x310 [ 307.995567][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 308.001978][ T27] ? __rwlock_init+0x140/0x140 [ 308.007162][ T27] ? count_memcg_event_mm+0x324/0x370 [ 308.012561][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 308.018025][ T27] do_page_mkwrite+0x168/0x3c0 [ 308.022821][ T27] handle_mm_fault+0x1e47/0x4440 [ 308.028056][ T27] ? get_page+0xe0/0xe0 [ 308.032260][ T27] ? vmacache_find+0x4e3/0x590 [ 308.037099][ T27] ? vmacache_update+0xa0/0x100 [ 308.041983][ T27] ? find_vma+0x1df/0x230 [ 308.046388][ T27] do_user_addr_fault+0x494/0xc90 [ 308.051465][ T27] exc_page_fault+0x60/0x100 [ 308.056158][ T27] ? clear_bhb_loop+0x30/0x80 [ 308.060887][ T27] asm_exc_page_fault+0x22/0x30 [ 308.065817][ T27] RIP: 0033:0x7f77bfe5fae3 [ 308.070259][ T27] RSP: 002b:00007fff738da1a0 EFLAGS: 00010246 [ 308.076399][ T27] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b32164000 [ 308.085606][ T27] RDX: 0000001b32124000 RSI: 0000000000600000 RDI: 00007f77c01d6708 [ 308.093726][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.101883][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 308.110259][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff738da430 [ 308.118331][ T27] [ 308.121394][ T27] [ 308.121394][ T27] Showing all locks held in the system: [ 308.129217][ T27] 1 lock held by khungtaskd/27: [ 308.134247][ T27] #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 308.143775][ T27] 2 locks held by getty/3942: [ 308.148479][ T27] #0: ffff88814cc3a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 308.158321][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 308.168484][ T27] 3 locks held by syz-executor/4172: [ 308.173822][ T27] #0: ffff88807a55b228 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 308.183800][ T27] #1: ffff88802d6fa558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 308.194589][ T27] #2: ffff88802d5f6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 308.204970][ T27] 3 locks held by kworker/u4:4/4225: [ 308.210327][ T27] 4 locks held by kworker/u4:6/4252: [ 308.215906][ T27] #0: ffff888142b9f138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 308.226560][ T27] #1: ffffc9000316fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 308.238500][ T27] #2: ffff88802d6fa0e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 308.248726][ T27] #3: ffff88802d6fcc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 308.259469][ T27] 3 locks held by syz.0.1449/7921: [ 308.265342][ T27] #0: ffff88807ddf0128 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 308.275370][ T27] #1: ffff88802d6fa558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 308.285331][ T27] #2: ffff88802d5f6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 308.295227][ T27] 3 locks held by syz.2.1475/7980: [ 308.300348][ T27] #0: ffff8880744b8128 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 308.311123][ T27] #1: ffff88802d6fa558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 308.321157][ T27] #2: ffff88802d5f6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 308.331020][ T27] 3 locks held by syz.3.1479/7987: [ 308.336222][ T27] #0: ffff88807ec00828 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 308.346173][ T27] #1: ffff88802d6fa558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 308.356995][ T27] #2: ffff88802d5f6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 308.366780][ T27] 3 locks held by syz.4.1478/7988: [ 308.371906][ T27] #0: ffff88807ec05c28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 308.381989][ T27] #1: ffff88802d6fa558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 308.392495][ T27] #2: ffff88802d5f6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 308.402476][ T27] 3 locks held by syz.1.1480/7990: [ 308.407802][ T27] #0: ffff88807ddf1d28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 308.418389][ T27] #1: ffff88802d6fa558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 308.428293][ T27] #2: ffff88802d5f6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 308.438159][ T27] [ 308.440503][ T27] ============================================= [ 308.440503][ T27] [ 308.449281][ T27] NMI backtrace for cpu 1 [ 308.453747][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 308.461012][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 308.471074][ T27] Call Trace: [ 308.474391][ T27] [ 308.477349][ T27] dump_stack_lvl+0x188/0x250 [ 308.482080][ T27] ? show_regs_print_info+0x20/0x20 [ 308.487293][ T27] ? load_image+0x410/0x410 [ 308.491825][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 308.497230][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 308.502374][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 308.507331][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 308.513513][ T27] ? _printk+0xda/0x130 [ 308.517696][ T27] ? load_image+0x410/0x410 [ 308.522222][ T27] ? load_image+0x410/0x410 [ 308.526744][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 308.532843][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 308.538857][ T27] watchdog+0xe1b/0xe60 [ 308.543062][ T27] kthread+0x42e/0x520 [ 308.547175][ T27] ? hungtask_pm_notify+0x40/0x40 [ 308.552216][ T27] ? kthread_blkcg+0xd0/0xd0 [ 308.556818][ T27] ret_from_fork+0x1f/0x30 [ 308.561268][ T27] [ 308.564345][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.571102][ T27] Sending NMI from CPU 1 to CPUs 0: [ 308.576581][ C0] NMI backtrace for cpu 0 [ 308.576590][ C0] CPU: 0 PID: 4225 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 308.576605][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 308.576615][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 308.576637][ C0] RIP: 0010:unwind_next_frame+0xfc8/0x1cf0 [ 308.576657][ C0] Code: c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 7c 45 00 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 f0 48 0f 46 e9 49 [ 308.576671][ C0] RSP: 0018:ffffc900030cf390 EFLAGS: 00000a02 [ 308.576684][ C0] RAX: 0000000000000000 RBX: ffffc900030cf428 RCX: dffffc0000000000 [ 308.576695][ C0] RDX: ffffffff8eefdc74 RSI: ffffffff8e8097b8 RDI: ffffffff81351ed7 [ 308.576707][ C0] RBP: ffffffff8e8097b8 R08: 0000000000000006 R09: 0000000000000000 [ 308.576716][ C0] R10: dffffc0000000000 R11: fffff52000619e91 R12: ffffffff8e8097b8 [ 308.576728][ C0] R13: ffffffff8e8097cc R14: ffffffff81be4bde R15: ffffffff8e8097c0 [ 308.576740][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 308.576753][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.576763][ C0] CR2: 00007ffcf1ef7f98 CR3: 000000002b744000 CR4: 00000000003506f0 [ 308.576777][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 308.576786][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 308.576795][ C0] Call Trace: [ 308.576800][ C0] [ 308.576807][ C0] ? __kasan_kmalloc+0xaf/0xe0 [ 308.576826][ C0] ? stack_trace_save+0xf0/0xf0 [ 308.576841][ C0] arch_stack_walk+0x10c/0x140 [ 308.576861][ C0] ? __kasan_kmalloc+0xaf/0xe0 [ 308.576879][ C0] stack_trace_save+0xa6/0xf0 [ 308.576893][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 308.576912][ C0] ? memset+0x1e/0x40 [ 308.576925][ C0] __kasan_kmalloc+0xaf/0xe0 [ 308.576940][ C0] ? __kasan_kmalloc+0xaf/0xe0 [ 308.576978][ C0] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 308.577001][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xff/0x2b50 [ 308.577020][ C0] ? verify_lock_unused+0x140/0x140 [ 308.577040][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 308.577057][ C0] ? verify_lock_unused+0x140/0x140 [ 308.577074][ C0] ? ieee80211_queue_delayed_work+0x150/0x150 [ 308.577091][ C0] ? verify_lock_unused+0x140/0x140 [ 308.577112][ C0] ieee80211_ibss_rx_queued_mgmt+0x36b/0x2b50 [ 308.577138][ C0] ? mark_lock+0x94/0x320 [ 308.577152][ C0] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 308.577176][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 308.577195][ C0] ? lock_chain_count+0x20/0x20 [ 308.577212][ C0] ? __rwlock_init+0x140/0x140 [ 308.577228][ C0] ? kcov_remote_start+0x135/0x5e0 [ 308.577243][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 308.577265][ C0] ieee80211_iface_work+0x714/0xc50 [ 308.577282][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 308.577301][ C0] cfg80211_wiphy_work+0x224/0x260 [ 308.577321][ C0] process_one_work+0x867/0xff0 [ 308.577345][ C0] ? worker_detach_from_pool+0x240/0x240 [ 308.577360][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 308.577379][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 308.577394][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 308.577411][ C0] ? wq_worker_running+0x97/0x170 [ 308.577444][ C0] worker_thread+0xad7/0x12a0 [ 308.577487][ C0] kthread+0x42e/0x520 [ 308.577500][ C0] ? rcu_lock_release+0x20/0x20 [ 308.577514][ C0] ? kthread_blkcg+0xd0/0xd0 [ 308.577529][ C0] ret_from_fork+0x1f/0x30 [ 308.577551][ C0] [ 308.579572][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 308.927105][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 308.934341][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 308.944410][ T27] Call Trace: [ 308.947700][ T27] [ 308.950644][ T27] dump_stack_lvl+0x188/0x250 [ 308.955325][ T27] ? show_regs_print_info+0x20/0x20 [ 308.960536][ T27] ? load_image+0x410/0x410 [ 308.965059][ T27] panic+0x2f8/0x850 [ 308.968978][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 308.974634][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 308.979170][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 308.985350][ T27] watchdog+0xe5a/0xe60 [ 308.989531][ T27] kthread+0x42e/0x520 [ 308.993605][ T27] ? hungtask_pm_notify+0x40/0x40 [ 308.998643][ T27] ? kthread_blkcg+0xd0/0xd0 [ 309.003276][ T27] ret_from_fork+0x1f/0x30 [ 309.007744][ T27] [ 309.011101][ T27] Kernel Offset: disabled [ 309.015446][ T27] Rebooting in 86400 seconds..