last executing test programs: 5.777543781s ago: executing program 4 (id=1685): sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002e40)={0x14, 0x0, 0x20, 0x50bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x4000000) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4241, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000580)) 5.416504617s ago: executing program 4 (id=1688): syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40000) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 5.213468538s ago: executing program 4 (id=1693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 4.941601797s ago: executing program 0 (id=1695): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) listen(r0, 0x5) listen(r0, 0x35) 4.890965887s ago: executing program 4 (id=1696): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.782578271s ago: executing program 0 (id=1697): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x13}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.520072462s ago: executing program 0 (id=1699): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) 3.528126996s ago: executing program 1 (id=1712): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x48814, &(0x7f0000000100)={0x11, 0x80f3, r1, 0x1, 0x0, 0x6, @random="e318a05900"}, 0x14) 3.441628678s ago: executing program 1 (id=1715): openat(0xffffffffffffff9c, 0x0, 0x0, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001440)={r0, 0x0, 0x0}, 0x20) 3.272778746s ago: executing program 1 (id=1718): setns(0xc9, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x20, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x20}], 0x1}, 0x4000010) 3.134335098s ago: executing program 4 (id=1720): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x249}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x7, 0x70}}}}}]}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.008126801s ago: executing program 1 (id=1722): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2.804972435s ago: executing program 2 (id=1724): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r1, 0x0, 0x47, 0x9, 0x5, 0x8}, &(0x7f0000000280)=0x14) 2.752176692s ago: executing program 1 (id=1725): openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x8000, 0x46, 0x3e}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x6b4e1c1017bef5ac, 0x0, &(0x7f0000000500)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x654000, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000700)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x1, 0x1c, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @info_request={0xf, 0x0, 0x0, 0x9, 0x5}}}}}, 0x0) sendto$inet6(r6, &(0x7f0000000100)='0', 0xfffffffffffffdcd, 0x0, 0x0, 0x0) 1.956684854s ago: executing program 1 (id=1726): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x200) 1.783543734s ago: executing program 0 (id=1728): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x10) 1.631985979s ago: executing program 2 (id=1729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x6a5, 0xec000000, 0xcd}]}) 1.584162452s ago: executing program 3 (id=1730): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x4, 0x0, 0x9, 0xfffffffffe000001}) 1.170346102s ago: executing program 2 (id=1731): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x120, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r0, &(0x7f0000000200)=""/120, 0x78, 0x2101, 0x0, 0x0) 1.007674435s ago: executing program 3 (id=1732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) munlockall() 890.182138ms ago: executing program 2 (id=1733): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 703.436122ms ago: executing program 2 (id=1734): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r2, &(0x7f00000000c0)="0e", &(0x7f00000001c0)=""/132}, 0x20) 658.095855ms ago: executing program 3 (id=1735): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x0, 0x9, 0x9, 0xfffffffd, 0x18, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x700, 0x8000, 0x5, 0x40}}) 533.080076ms ago: executing program 0 (id=1736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x5}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4024080) 510.765384ms ago: executing program 4 (id=1737): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000001c0)={0x10, 0x1, r2}) 450.735328ms ago: executing program 2 (id=1738): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x40, 0x7, 0x2, {0x2, 0x22}}, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = fanotify_init(0x200, 0x0) writev(r0, &(0x7f00000005c0)=[{0x0}], 0x1) 384.181338ms ago: executing program 3 (id=1739): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d0000000700000008a58ac356"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 309.933419ms ago: executing program 0 (id=1740): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) 246.437708ms ago: executing program 3 (id=1741): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/net/bridge_slave_0/brport/multicast_fast_leave\x00', 0xa0801, 0x29) write$cgroup_pid(r0, &(0x7f0000000200), 0x12) 0s ago: executing program 3 (id=1742): r0 = socket(0x8000000010, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) write(r0, &(0x7f00000002c0)="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", 0xfc) kernel console output (not intermixed with test programs): [ 229.675302][ T8305] ttusb2: i2c wr len=58 too high [ 229.677019][ T4937] DVB: Unable to find symbol tda10086_attach() [ 229.677032][ T4937] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 229.680218][ T4937] dvb-usb: bulk message failed: -22 (4/0) [ 229.680236][ T4937] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 229.680350][ T4937] dvb-usb: bulk message failed: -22 (5/0) [ 229.680362][ T4937] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 229.680420][ T4937] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 229.699942][ T4937] usb 3-1: USB disconnect, device number 8 [ 229.872423][ T8299] BTRFS info (device loop3): enabling ssd optimizations [ 229.872450][ T8299] BTRFS info (device loop3): turning on async discard [ 229.872464][ T8299] BTRFS info (device loop3): enabling free space tree [ 229.987669][ T4937] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 230.109340][ T5607] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.193579][ T8335] netlink: 84 bytes leftover after parsing attributes in process `syz.4.864'. [ 230.309921][ T8339] loop1: detected capacity change from 0 to 256 [ 230.318703][ T8339] exfat: Deprecated parameter 'namecase' [ 230.394564][ T8340] netlink: 84 bytes leftover after parsing attributes in process `syz.0.865'. [ 230.419200][ T8339] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x8114471f, utbl_chksum : 0xe619d30d) [ 230.839878][ T8352] tipc: Invalid UDP bearer configuration [ 230.839924][ T8352] tipc: Enabling of bearer rejected, failed to enable media [ 231.086319][ T5911] IPVS: starting estimator thread 0... [ 231.170557][ T8359] IPVS: using max 30 ests per chain, 72000 per kthread [ 231.343642][ T8366] netlink: 'syz.0.875': attribute type 1 has an invalid length. [ 231.779255][ T8350] loop3: detected capacity change from 0 to 32768 [ 231.882197][ T8348] loop4: detected capacity change from 0 to 40427 [ 231.900462][ T8350] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 231.904061][ T8348] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 231.904083][ T8348] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 231.933073][ T8348] F2FS-fs (loop4): invalid crc value [ 232.464378][ T8348] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 232.518474][ T8348] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 232.518502][ T8348] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 232.542720][ T5607] ocfs2: Unmounting device (7,3) on (node local) [ 232.683296][ T8399] netlink: 84 bytes leftover after parsing attributes in process `syz.2.879'. [ 232.940421][ T5604] syz-executor: attempt to access beyond end of device [ 232.940421][ T5604] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 232.952276][ T5604] CPU: 0 UID: 0 PID: 5604 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 232.952302][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.952313][ T5604] Call Trace: [ 232.952319][ T5604] [ 232.952327][ T5604] dump_stack_lvl+0xe8/0x150 [ 232.952357][ T5604] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 232.952381][ T5604] f2fs_write_end_bio+0xda7/0x11c0 [ 232.952420][ T5604] __submit_merged_bio+0x258/0x6a0 [ 232.952437][ T5604] ? rcu_is_watching+0x16/0xb0 [ 232.952467][ T5604] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 232.952522][ T5604] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 232.952571][ T5604] f2fs_write_data_pages+0x2a13/0x36e0 [ 232.952626][ T5604] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 232.952658][ T5604] ? is_bpf_text_address+0x292/0x2b0 [ 232.952675][ T5604] ? is_bpf_text_address+0x26/0x2b0 [ 232.952717][ T5604] ? stack_trace_save+0xa9/0x100 [ 232.952738][ T5604] ? __pfx_stack_trace_save+0x10/0x10 [ 232.952775][ T5604] ? lockdep_unlock+0x5c/0xd0 [ 232.952792][ T5604] ? __lock_acquire+0x1511/0x2de0 [ 232.952837][ T5604] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 232.952859][ T5604] do_writepages+0x338/0x560 [ 232.952887][ T5604] ? do_raw_spin_unlock+0xf5/0x200 [ 232.952909][ T5604] filemap_fdatawrite+0x1e9/0x2f0 [ 232.952932][ T5604] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 232.952992][ T5604] ? do_raw_spin_unlock+0xf5/0x200 [ 232.953014][ T5604] f2fs_sync_dirty_inodes+0x471/0x970 [ 232.953050][ T5604] f2fs_write_checkpoint+0x860/0x24d0 [ 232.953107][ T5604] kill_f2fs_super+0x2dc/0x700 [ 232.953132][ T5604] ? rcu_do_enqueue+0x616/0x870 [ 232.953152][ T5604] ? lockdep_hardirqs_on+0x7b/0x110 [ 232.953172][ T5604] ? __pfx_kill_f2fs_super+0x10/0x10 [ 232.953209][ T5604] ? __pfx_call_rcu+0x10/0x10 [ 232.953238][ T5604] ? shrinker_free+0x2a7/0x3b0 [ 232.953259][ T5604] deactivate_locked_super+0xbe/0x110 [ 232.953282][ T5604] cleanup_mnt+0x3d3/0x460 [ 232.953308][ T5604] task_work_run+0x1d9/0x260 [ 232.953332][ T5604] ? __pfx_task_work_run+0x10/0x10 [ 232.953363][ T5604] exit_to_user_mode_loop+0x204/0x770 [ 232.953385][ T5604] ? rcu_is_watching+0x16/0xb0 [ 232.953414][ T5604] do_syscall_64+0x328/0x520 [ 232.953431][ T5604] ? trace_irq_disable+0x3b/0x140 [ 232.953452][ T5604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.953470][ T5604] ? clear_bhb_loop+0x70/0xc0 [ 232.953497][ T5604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.953513][ T5604] RIP: 0033:0x7fe1e7d9f397 [ 232.953530][ T5604] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 232.953544][ T5604] RSP: 002b:00007fff37fe0668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 232.953562][ T5604] RAX: 0000000000000000 RBX: 00007fe1e7e344bb RCX: 00007fe1e7d9f397 [ 232.953574][ T5604] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff37fe0720 [ 232.953585][ T5604] RBP: 00007fff37fe0720 R08: 00007fff37fe1720 R09: 00000000ffffffff [ 232.953596][ T5604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff37fe17b0 [ 232.953607][ T5604] R13: 00007fe1e7e344bb R14: 0000000000038d51 R15: 00007fff37fe17f0 [ 232.953636][ T5604] [ 232.953643][ T5604] F2FS-fs (loop4): Remounting filesystem read-only [ 232.960451][ T4937] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 233.114802][ T4937] usb 2-1: unable to get BOS descriptor or descriptor too short [ 233.114847][ T4937] usb 2-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 233.119233][ T4937] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.119254][ T4937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 233.119291][ T4937] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.135842][ T4937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 233.135866][ T4937] usb 2-1: Product: syz [ 233.135878][ T4937] usb 2-1: Manufacturer: syz [ 233.140208][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 233.193545][ T4937] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 233.329572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 233.344202][ T27] usb 1-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 233.379040][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.379070][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.379105][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.447660][ T27] usb 1-1: config 0 descriptor?? [ 233.961170][ T27] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 233.961204][ T27] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 233.961228][ T27] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 233.961248][ T27] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 233.961262][ T27] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 233.961276][ T27] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 233.961289][ T27] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 234.047002][ T27] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 234.123585][ T27] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 234.123639][ T27] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 234.174502][ T27] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -71 [ 234.195069][ T27] usb 1-1: USB disconnect, device number 8 [ 234.285558][ T8418] loop4: detected capacity change from 0 to 64 [ 234.392554][ T8416] fido_id[8416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 235.326807][ T52] IPVS: starting estimator thread 0... [ 235.410390][ T8426] IPVS: using max 30 ests per chain, 72000 per kthread [ 235.504587][ T8410] loop3: detected capacity change from 0 to 32768 [ 235.547959][ T8410] XFS (loop3): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 235.802284][ T5607] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 235.827567][ T4937] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC error code control 17 on unit 1: -71 (exp. 1). [ 235.830185][ T4937] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 20 on unit 1: -71 (exp. 1). [ 235.830349][ T4937] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 235.906023][ T4937] usb 2-1: USB disconnect, device number 4 [ 237.487379][ T8464] loop1: detected capacity change from 0 to 512 [ 237.579200][ T8464] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 237.579221][ T8464] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 237.634490][ T8464] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 237.636890][ T8464] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 237.649015][ T8464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.792139][ T8473] netlink: 84 bytes leftover after parsing attributes in process `syz.3.895'. [ 237.874206][ T8445] loop4: detected capacity change from 0 to 32768 [ 237.897754][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.931194][ T8445] XFS (loop4): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 238.149526][ T5604] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 238.342897][ T5610] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 238.363307][ T8486] macsec1: entered allmulticast mode [ 238.363331][ T8486] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 238.387218][ T8486] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 238.422776][ T8486] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 238.485998][ T8490] loop4: detected capacity change from 0 to 1024 [ 238.557592][ T5727] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 240.362600][ T8521] loop3: detected capacity change from 0 to 1024 [ 240.732652][ T8528] syz.3.907 uses obsolete (PF_INET,SOCK_PACKET) [ 242.163246][ T8532] loop1: detected capacity change from 0 to 40427 [ 242.176956][ T8532] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 242.176980][ T8532] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 242.200699][ T8532] F2FS-fs (loop1): invalid crc value [ 242.201309][ T8532] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 243.629382][ T8532] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 243.751116][ T8532] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 243.751134][ T8532] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 243.849681][ T5727] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 244.126845][ T8584] netlink: 'syz.2.919': attribute type 10 has an invalid length. [ 244.127730][ T8584] netlink: 'syz.2.919': attribute type 10 has an invalid length. [ 244.222382][ T5727] usb 4-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 244.298885][ T5727] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.300485][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 244.300507][ T5727] usb 4-1: Product: syz [ 244.300518][ T5727] usb 4-1: Manufacturer: syz [ 244.363552][ T5727] usb 4-1: selecting invalid altsetting 1 [ 244.380812][ T5727] dvb_ttusb_budget: ttusb_init_controller: error [ 244.380825][ T5727] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 244.565284][ T5727] DVB: Unable to find symbol cx22700_attach() [ 244.606515][ T8571] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 244.653966][ T5727] DVB: Unable to find symbol tda10046_attach() [ 244.653976][ T5727] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 244.667223][ T5727] usb 4-1: USB disconnect, device number 4 [ 245.407495][ T8577] loop4: detected capacity change from 0 to 40427 [ 245.408117][ T8577] F2FS-fs: heap/no_heap options were deprecated [ 245.479892][ T8577] F2FS-fs (loop4): Image doesn't support compression [ 245.479909][ T8577] F2FS-fs (loop4): build fault injection rate: 690 [ 245.488431][ T8577] F2FS-fs (loop4): invalid crc value [ 245.594661][ T8599] loop3: detected capacity change from 0 to 1024 [ 245.596450][ T8599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.690302][ T8599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.915620][ T8577] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 245.961206][ T8577] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 245.961232][ T8577] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 245.961253][ T8577] F2FS-fs (loop4): Start checkpoint disabled! [ 246.000818][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.968988][ T8577] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 249.556242][ T8629] ip_tables: iptables: counters copy to user failed while replacing table [ 250.224517][ T8655] loop3: detected capacity change from 0 to 8 [ 250.748396][ T8655] SQUASHFS error: zlib decompression failed, data probably corrupt [ 250.748427][ T8655] SQUASHFS error: Failed to read block 0x9b: -5 [ 250.748439][ T8655] SQUASHFS error: Unable to read metadata cache entry [99] [ 250.748451][ T8655] SQUASHFS error: Unable to read inode 0x127 [ 251.208355][ T8662] gretap0: entered promiscuous mode [ 251.208537][ T8662] macvlan2: entered promiscuous mode [ 251.210855][ T8662] gretap0: left promiscuous mode [ 251.361993][ T8666] ip_tables: iptables: counters copy to user failed while replacing table [ 251.454238][ T8670] ip_tables: iptables: counters copy to user failed while replacing table [ 251.560207][ T8667] loop3: detected capacity change from 0 to 4096 [ 251.616448][ T8638] loop1: detected capacity change from 0 to 32768 [ 251.657148][ T8638] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 251.822581][ T8638] XFS (loop1): Ending clean mount [ 251.984006][ T5605] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 252.019736][ T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 252.199798][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 252.200608][ T27] usb 5-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 252.205136][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.205156][ T27] usb 5-1: Product: syz [ 252.205169][ T27] usb 5-1: Manufacturer: syz [ 252.205181][ T27] usb 5-1: SerialNumber: syz [ 252.262145][ T27] usb 5-1: config 0 descriptor?? [ 252.291688][ T27] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 252.291811][ T27] dvb-usb: bulk message failed: -22 (4/0) [ 252.291825][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 252.291924][ T27] dvb-usb: bulk message failed: -22 (5/0) [ 252.291936][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 252.306974][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 252.308120][ T27] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 252.308166][ T27] usb 5-1: media controller created [ 252.376831][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.439676][ T8695] netlink: 84 bytes leftover after parsing attributes in process `syz.2.952'. [ 252.488628][ T27] usb 5-1: selecting invalid altsetting 3 [ 252.488648][ T27] ttusb2: set interface to alts=3 failed [ 252.538941][ T27] DVB: Unable to find symbol tda10086_attach() [ 252.538952][ T27] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 252.539742][ T27] dvb-usb: bulk message failed: -22 (4/0) [ 252.539758][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 252.539863][ T27] dvb-usb: bulk message failed: -22 (5/0) [ 252.539875][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 252.539940][ T27] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 252.602669][ T8685] dvb-usb: bulk message failed: -22 (7/0) [ 252.602686][ T8685] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 252.602799][ T8685] ttusb2: i2c transfer failed. [ 252.680866][ T8700] loop1: detected capacity change from 0 to 512 [ 252.717844][ T5610] usb 5-1: USB disconnect, device number 6 [ 252.726505][ T8701] loop3: detected capacity change from 0 to 64 [ 252.747814][ T8700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.747903][ T8700] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.889917][ T5610] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 253.072183][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.757480][ T8733] netlink: 84 bytes leftover after parsing attributes in process `syz.1.966'. [ 255.052813][ T4937] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 255.207248][ T4937] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 255.224048][ T4937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.224072][ T4937] usb 4-1: Product: syz [ 255.224084][ T4937] usb 4-1: Manufacturer: syz [ 255.224096][ T4937] usb 4-1: SerialNumber: syz [ 255.399073][ T4937] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 255.685125][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.685177][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.848679][ T8763] loop1: detected capacity change from 0 to 512 [ 255.858901][ T8763] EXT4-fs: Ignoring removed i_version option [ 255.858986][ T8763] EXT4-fs: Ignoring removed oldalloc option [ 255.874453][ T8763] EXT4-fs (loop1): Test dummy encryption mode enabled [ 255.878757][ T27] usb 4-1: USB disconnect, device number 5 [ 255.915191][ T8763] EXT4-fs (loop1): 1 truncate cleaned up [ 255.935897][ T8763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.031669][ T5727] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 256.179723][ T5727] usb 5-1: Using ep0 maxpacket: 32 [ 256.181818][ T5727] usb 5-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 256.188021][ T5727] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 256.188046][ T5727] usb 5-1: config 0 has no interface number 0 [ 256.188085][ T5727] usb 5-1: config 0 interface 12 has no altsetting 0 [ 256.194842][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.194863][ T5727] usb 5-1: Product: syz [ 256.194875][ T5727] usb 5-1: Manufacturer: syz [ 256.194887][ T5727] usb 5-1: SerialNumber: syz [ 256.237880][ T5727] usb 5-1: config 0 descriptor?? [ 256.317023][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.481935][ T4937] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 256.498750][ T4937] ath9k_htc: Failed to initialize the device [ 256.516464][ T27] usb 4-1: ath9k_htc: USB layer deinitialized [ 256.728798][ T8783] loop3: detected capacity change from 0 to 512 [ 256.751107][ T8783] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0022] [ 256.751224][ T8783] System zones: 1-12 [ 256.802741][ T8783] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.983: Directory hole found for htree index block 0 [ 256.802763][ T8783] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 256.807686][ T8783] EXT4-fs (loop3): Remounting filesystem read-only [ 256.809584][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 256.809602][ C0] EXT4-fs (loop3): initial error at time 1790367954: dx_probe:791: inode 2 [ 256.809628][ C0] EXT4-fs (loop3): last error at time 1790367954: dx_probe:791: inode 2 [ 256.811223][ T8783] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 256.811309][ T8783] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 256.888180][ T8783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.948427][ T5727] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 256.948482][ T5727] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 256.948497][ T5727] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 256.948590][ T5727] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 256.997533][ T5727] usb 5-1: USB disconnect, device number 7 [ 257.042961][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.224484][ T8789] loop3: detected capacity change from 0 to 128 [ 257.243320][ T8789] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 257.243349][ T8789] hpfs: filesystem error: improperly stopped [ 257.243362][ T8789] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 257.243376][ T8789] hpfs: You really don't want any checks? You are crazy... [ 257.243405][ T8789] hpfs: Code page index out of array [ 257.243411][ T8789] hpfs: code page support is disabled [ 257.244685][ T8789] hpfs: hpfs_map_4sectors(): unaligned read [ 257.245037][ T8789] hpfs: hpfs_map_4sectors(): unaligned read [ 257.245045][ T8789] hpfs: filesystem error: unable to find root dir [ 257.645463][ T8780] loop1: detected capacity change from 0 to 32768 [ 257.696744][ T8780] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 257.828224][ T8780] XFS (loop1): Ending clean mount [ 257.897036][ T8780] XFS (loop1): Quotacheck needed: Please wait. [ 258.044729][ T8800] loop3: detected capacity change from 0 to 8192 [ 258.045573][ T8780] XFS (loop1): Quotacheck: Done. [ 258.081343][ T8800] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.106051][ T8800] process 'syz.3.985' launched './file1' with NULL argv: empty string added [ 258.260228][ T5605] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 258.919156][ T8824] loop3: detected capacity change from 0 to 8 [ 258.928205][ T8824] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 259.185642][ T8803] loop4: detected capacity change from 0 to 32768 [ 259.383947][ T8832] ialloc: diAlloc returned -5! [ 259.416833][ T32] audit: type=1800 audit(1790367956.890:14): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.986" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 259.452659][ T8833] loop3: detected capacity change from 0 to 256 [ 259.540274][ T8833] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 259.540293][ T8833] FAT-fs (loop3): Filesystem has been set read-only [ 259.706466][ T8837] loop1: detected capacity change from 0 to 256 [ 259.707078][ T8837] exfat: Deprecated parameter 'namecase' [ 259.707109][ T8837] exfat: Deprecated parameter 'namecase' [ 259.707146][ T8837] exfat: Deprecated parameter 'namecase' [ 259.764752][ T8837] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 259.797283][ T8839] ip_tables: iptables: counters copy to user failed while replacing table [ 261.002672][ T5707] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 261.094682][ T8875] loop3: detected capacity change from 0 to 256 [ 261.150336][ T5707] usb 3-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 261.151465][ T5707] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 261.151520][ T5707] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 261.151544][ T5707] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.151565][ T5707] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.151587][ T5707] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 261.152525][ T5707] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 261.152568][ T5707] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 261.152591][ T5707] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.152613][ T5707] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.152636][ T5707] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 261.156200][ T5707] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 261.156241][ T5707] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 261.156263][ T5707] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.156286][ T5707] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.156308][ T5707] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 261.171247][ T5707] usb 3-1: string descriptor 0 read error: -22 [ 261.171323][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.359310][ T5707] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 261.729423][ T5727] usb 3-1: USB disconnect, device number 9 [ 262.092625][ T8891] jffs2: notice: (8891) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 262.128717][ T8893] sctp: [Deprecated]: syz.4.1027 (pid 8893) Use of int in maxseg socket option. [ 262.128717][ T8893] Use struct sctp_assoc_value instead [ 262.400875][ T32] audit: type=1326 audit(1790367959.880:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.1028" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 262.433731][ T32] audit: type=1326 audit(1790367959.910:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.1028" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 262.464652][ T32] audit: type=1326 audit(1790367959.940:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.1028" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 262.464791][ T32] audit: type=1326 audit(1790367959.940:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.1028" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 262.464941][ T32] audit: type=1326 audit(1790367959.940:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.1028" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 262.466516][ T32] audit: type=1326 audit(1790367959.940:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.1028" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 262.466558][ T32] audit: type=1326 audit(1790367959.940:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.1028" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 262.466600][ T32] audit: type=1326 audit(1790367959.940:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.1028" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 262.466634][ T32] audit: type=1326 audit(1790367959.940:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8895 comm="syz.3.1028" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 262.837617][ T8904] loop1: detected capacity change from 0 to 512 [ 262.849377][ T8904] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 263.586503][ T8925] ip_tables: iptables: counters copy to user failed while replacing table [ 263.781633][ T8898] loop4: detected capacity change from 0 to 32768 [ 263.850777][ T8898] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 263.872484][ T8937] tipc: Started in network mode [ 263.872511][ T8937] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 263.872563][ T8937] tipc: Enabling of bearer rejected, failed to enable media [ 263.911638][ T8898] XFS (loop4): Ending clean mount [ 263.965493][ T5707] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 263.988056][ T5604] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 264.153454][ T5707] usb 4-1: New USB device found: idVendor=05ac, idProduct=0265, bcdDevice=0.00 [ 264.159507][ T5707] usb 4-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 264.159593][ T5707] usb 4-1: config 0 interface 0 has no altsetting 0 [ 264.159623][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.170992][ T5707] usb 4-1: config 0 descriptor?? [ 264.261027][ T8950] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1046'. [ 264.632898][ T5707] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x0 [ 264.632936][ T5707] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x0 [ 264.632961][ T5707] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x0 [ 264.632985][ T5707] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x0 [ 264.633008][ T5707] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x0 [ 264.633032][ T5707] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x0 [ 264.633056][ T5707] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x0 [ 264.633080][ T5707] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x0 [ 264.633104][ T5707] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x0 [ 264.633126][ T5707] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x0 [ 264.731742][ T5707] magicmouse 0003:05AC:0265.0006: hidraw0: USB HID v0.09 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 264.731779][ T5707] magicmouse 0003:05AC:0265.0006: magicmouse input not registered [ 264.817606][ T5707] magicmouse 0003:05AC:0265.0006: probe with driver magicmouse failed with error -12 [ 264.866176][ T5707] usb 4-1: USB disconnect, device number 6 [ 264.982870][ T8960] fido_id[8960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 265.127012][ T8968] loop4: detected capacity change from 0 to 1024 [ 265.750150][ T5707] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 265.917804][ T8986] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1064'. [ 265.921359][ T5707] usb 2-1: Using ep0 maxpacket: 8 [ 265.923526][ T5707] usb 2-1: New USB device found: idVendor=048d, idProduct=ce50, bcdDevice=0.00 [ 265.924768][ T5707] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.924794][ T5707] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 265.924815][ T5707] usb 2-1: config 0 interface 0 has no altsetting 0 [ 265.924843][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.023347][ T5707] usb 2-1: config 0 descriptor?? [ 266.528147][ T5707] asus 0003:048D:CE50.0007: hidraw0: USB HID v7f.ff Device [HID 048d:ce50] on usb-dummy_hcd.1-1/input0 [ 266.731574][ T909] usb 2-1: USB disconnect, device number 5 [ 266.753414][ T8993] fido_id[8993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 267.094298][ T8981] loop4: detected capacity change from 0 to 40427 [ 267.113310][ T8981] F2FS-fs (loop4): Image doesn't support compression [ 267.113331][ T8981] F2FS-fs (loop4): build fault injection rate: 690 [ 267.115046][ T8981] F2FS-fs (loop4): invalid crc value [ 267.479361][ T8981] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 267.507084][ T8981] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 267.593838][ T9018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1073'. [ 267.597761][ T9018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1073'. [ 267.782739][ T9022] loop3: detected capacity change from 0 to 64 [ 268.422754][ T9035] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1081'. [ 268.762461][ T9045] loop1: detected capacity change from 0 to 512 [ 268.788064][ T9045] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 268.806650][ T9045] EXT4-fs (loop1): 1 truncate cleaned up [ 268.807105][ T9050] Bluetooth: MGMT ver 1.23 [ 268.807135][ T9050] Bluetooth: hci0: unsupported parameter 5151 [ 268.807148][ T9050] Bluetooth: hci0: unsupported parameter 8192 [ 268.807162][ T9050] Bluetooth: hci0: unsupported parameter 5151 [ 268.807173][ T9050] Bluetooth: hci0: unsupported parameter 8192 [ 268.818112][ T9045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.863672][ T9045] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6542: inode #12: comm syz.1.1086: bad extra_isize 62 (inode size 256) [ 269.021129][ T9045] EXT4-fs (loop1): Remounting filesystem read-only [ 269.021156][ T9045] EXT4-fs warning (device loop1): ext4_rename_delete:3741: inode #12: comm syz.1.1086: Deleting old file: nlink 2, error=-30 [ 269.091935][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.160722][ T9028] loop3: detected capacity change from 0 to 32768 [ 269.167998][ T9028] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1079 (9028) [ 269.178810][ T9028] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 269.178838][ T9028] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 269.270625][ T909] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 269.279025][ T9028] BTRFS info (device loop3): enabling ssd optimizations [ 269.279048][ T9028] BTRFS info (device loop3): turning on flush-on-commit [ 269.279063][ T9028] BTRFS info (device loop3): turning on async discard [ 269.279077][ T9028] BTRFS info (device loop3): enabling free space tree [ 269.279092][ T9028] BTRFS info (device loop3): force zlib compression, level 3 [ 269.279109][ T9028] BTRFS info (device loop3): max_inline set to 4096 [ 269.339159][ T9075] loop1: detected capacity change from 0 to 256 [ 269.354115][ T9075] exFAT-fs (loop1): error, no upcase table entry. Please run fsck [ 269.354133][ T9075] exFAT-fs (loop1): Filesystem has been set read-only [ 269.354670][ T9075] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 269.422484][ T909] usb 5-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 269.425650][ T909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.425671][ T909] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 269.425716][ T909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.450298][ T909] usb 5-1: config 0 descriptor?? [ 269.467905][ T5727] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 269.484042][ T909] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 269.484091][ T909] dvb-usb: bulk message failed: -22 (3/0) [ 269.506027][ T909] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 269.506507][ T5607] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 269.508120][ T909] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 269.508177][ T909] usb 5-1: media controller created [ 269.519040][ T909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.576263][ T909] dvb-usb: bulk message failed: -22 (6/0) [ 269.576440][ T909] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 269.620783][ T909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 269.625557][ T909] dvb-usb: schedule remote query interval to 150 msecs. [ 269.625576][ T909] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 269.665274][ T5727] usb 3-1: New USB device found: idVendor=172f, idProduct=0502, bcdDevice=0.00 [ 269.666271][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.666298][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 269.666335][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.668915][ T5727] usb 3-1: config 0 descriptor?? [ 269.704984][ T9056] dvb-usb: bulk message failed: -22 (2/0) [ 269.716306][ T5707] usb 5-1: USB disconnect, device number 8 [ 269.721336][ T9065] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 270.189561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 270.209562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 270.809570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 271.223751][ T5707] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 271.483419][ T5727] hid_parser_main: 74 callbacks suppressed [ 271.483448][ T5727] waltop 0003:172F:0502.0008: unknown main item tag 0x0 [ 271.497532][ T5727] waltop 0003:172F:0502.0008: unknown main item tag 0x0 [ 271.497562][ T5727] waltop 0003:172F:0502.0008: unknown main item tag 0x0 [ 271.497587][ T5727] waltop 0003:172F:0502.0008: unknown main item tag 0x0 [ 271.497611][ T5727] waltop 0003:172F:0502.0008: unknown main item tag 0x0 [ 271.497635][ T5727] waltop 0003:172F:0502.0008: unknown main item tag 0x0 [ 271.497659][ T5727] waltop 0003:172F:0502.0008: unknown main item tag 0x0 [ 271.497683][ T5727] waltop 0003:172F:0502.0008: unknown main item tag 0x0 [ 271.497707][ T5727] waltop 0003:172F:0502.0008: unknown main item tag 0x0 [ 271.497731][ T5727] waltop 0003:172F:0502.0008: unknown main item tag 0x0 [ 271.575873][ T5727] waltop 0003:172F:0502.0008: hidraw0: USB HID v7f.fd Device [HID 172f:0502] on usb-dummy_hcd.2-1/input0 [ 271.727237][ T5707] usb 3-1: USB disconnect, device number 10 [ 272.186397][ T9092] loop1: detected capacity change from 0 to 32768 [ 272.196311][ T5727] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 272.210195][ T5610] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 272.212719][ T9098] tipc: Started in network mode [ 272.212732][ T9098] tipc: Node identity , cluster identity 4711 [ 272.248092][ T9092] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 272.275808][ T9092] XFS (loop1): Ending clean mount [ 272.282778][ T9092] XFS (loop1): Quotacheck needed: Please wait. [ 272.329035][ T9092] XFS (loop1): Quotacheck: Done. [ 272.341783][ T5727] usb 5-1: Using ep0 maxpacket: 32 [ 272.349299][ T5727] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.349350][ T5727] usb 5-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 272.353344][ T5727] usb 5-1: config 14 has an invalid interface number: 57 but max is 0 [ 272.353365][ T5727] usb 5-1: config 14 has no interface number 0 [ 272.353608][ T5727] usb 5-1: config 14 interface 57 has no altsetting 0 [ 272.355586][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.355605][ T5727] usb 5-1: Product: syz [ 272.355617][ T5727] usb 5-1: Manufacturer: syz [ 272.355628][ T5727] usb 5-1: SerialNumber: syz [ 272.359720][ T5610] usb 1-1: Using ep0 maxpacket: 32 [ 272.360239][ T5610] usb 1-1: New USB device found: idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 272.364167][ T5610] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.373589][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.373609][ T5610] usb 1-1: Product: syz [ 272.373622][ T5610] usb 1-1: Manufacturer: syz [ 272.373634][ T5610] usb 1-1: SerialNumber: syz [ 272.380496][ T5610] usb 1-1: config 0 descriptor?? [ 272.392450][ T5610] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 272.474361][ T5605] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 273.969332][ T5610] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 273.969437][ T5610] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 274.306221][ T5727] legousbtower 5-1:14.57: interrupt endpoints not found [ 274.316546][ T5727] usb 5-1: USB disconnect, device number 9 [ 274.819293][ T9120] loop1: detected capacity change from 0 to 32768 [ 274.832474][ T9120] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1105 (9120) [ 274.851748][ T9120] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 274.851777][ T9120] BTRFS info (device loop1): using blake2b checksum algorithm [ 275.105057][ T9120] BTRFS info (device loop1): enabling ssd optimizations [ 275.105084][ T9120] BTRFS info (device loop1): turning on async discard [ 275.105099][ T9120] BTRFS info (device loop1): enabling free space tree [ 275.105115][ T9120] BTRFS info (device loop1): use zstd compression, level 3 [ 275.149423][ T9] usb 1-1: USB disconnect, device number 9 [ 275.282127][ T5605] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 275.312999][ T9147] virt_wifi0: entered promiscuous mode [ 275.327588][ T9147] batman_adv: batadv0: Adding interface: virt_wifi0 [ 275.327605][ T9147] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.327633][ T9147] batman_adv: batadv0: Interface activated: virt_wifi0 [ 276.760596][ T9164] loop3: detected capacity change from 0 to 16 [ 277.912750][ T9164] erofs (device loop3): mounted with root inode @ nid 36. [ 277.974329][ T32] kauditd_printk_skb: 5 callbacks suppressed [ 277.974350][ T32] audit: type=1800 audit(2000000015.209:29): pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1118" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 278.380879][ T9177] loop4: detected capacity change from 0 to 256 [ 278.813421][ T9189] loop3: detected capacity change from 0 to 2048 [ 278.861433][ T9190] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.919760][ T5707] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 278.949948][ T4937] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 280.097107][ T5707] usb 5-1: Using ep0 maxpacket: 16 [ 280.097797][ T5707] usb 5-1: New USB device found: idVendor=2179, idProduct=0077, bcdDevice=0.00 [ 280.121306][ T5707] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.121322][ T5707] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.121334][ T5707] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.121353][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.124817][ T5707] usb 5-1: config 0 descriptor?? [ 280.172423][ T9190] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 280.172448][ T9190] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 280.199580][ T4937] usb 2-1: New USB device found: idVendor=045a, idProduct=5210, bcdDevice=1.01 [ 280.204936][ T4937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.204958][ T4937] usb 2-1: Product: syz [ 280.204972][ T4937] usb 2-1: Manufacturer: syz [ 280.205007][ T4937] usb 2-1: SerialNumber: syz [ 280.210922][ T9190] Remounting filesystem read-only [ 280.223061][ T5607] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 280.257910][ T4937] ums-karma 2-1:1.0: USB Mass Storage device detected [ 280.271817][ T4937] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 280.271817][ T4937] Please send a copy of this message to and [ 280.518527][ T9203] loop3: detected capacity change from 0 to 512 [ 280.552952][ T9203] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.1134: inode has both inline data and extents flags [ 280.553011][ T9203] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 280.554938][ T9203] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1134: couldn't read orphan inode 15 (err -117) [ 280.554965][ T9203] loop3: lost filesystem error report for type 5 error -117 [ 280.602734][ T9203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.634177][ T5707] uclogic 0003:2179:0077.0009: interface is invalid, ignoring [ 280.737031][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.748946][ T4937] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 280.768978][ T4937] usb 2-1: USB disconnect, device number 6 [ 280.782502][ T27] usb 5-1: USB disconnect, device number 10 [ 281.701268][ T9224] netlink: 'syz.1.1137': attribute type 10 has an invalid length. [ 282.371757][ T9232] loop4: detected capacity change from 0 to 512 [ 282.385544][ T9232] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 282.385656][ T9232] System zones: 1-12 [ 282.403719][ T9232] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.1144: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 282.403749][ T9232] loop4: lost filesystem error report for type 5 error -117 [ 282.405378][ T9236] xt_hashlimit: size too large, truncated to 1048576 [ 282.420240][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 282.420260][ C1] EXT4-fs (loop4): initial error at time 2000000019: ext4_xattr_inode_iget:473 [ 282.420280][ C1] EXT4-fs (loop4): last error at time 2000000019: ext4_xattr_inode_iget:473 [ 282.435245][ T9232] EXT4-fs (loop4): 1 orphan inode deleted [ 282.476207][ T9232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.555006][ T9232] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6542: inode #15: comm syz.4.1144: bad extra_isize 6 (inode size 256) [ 282.693170][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.697073][ T9216] loop3: detected capacity change from 0 to 32768 [ 283.313629][ T9254] loop1: detected capacity change from 0 to 512 [ 283.317092][ T9254] EXT4-fs: Ignoring removed oldalloc option [ 283.317134][ T9254] EXT4-fs: Ignoring removed i_version option [ 283.337787][ T9254] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 283.383215][ T9254] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 283.383239][ T9254] loop1: lost filesystem error report for type 5 error -117 [ 283.389577][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 283.389597][ C1] EXT4-fs (loop1): initial error at time 2000000020: ext4_process_orphan:346 [ 283.389618][ C1] EXT4-fs (loop1): last error at time 2000000020: ext4_process_orphan:346 [ 283.442013][ T9254] EXT4-fs (loop1): 2 truncates cleaned up [ 283.473008][ T9254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.726594][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.732625][ T9260] loop3: detected capacity change from 0 to 4096 [ 283.864808][ T54] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 283.865596][ T54] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 283.886809][ T9260] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 284.208814][ T9269] Zero length message leads to an empty skb [ 284.209989][ T9269] netlink: 'syz.1.1153': attribute type 10 has an invalid length. [ 285.095081][ T9277] loop3: detected capacity change from 0 to 256 [ 285.179396][ T9281] loop4: detected capacity change from 0 to 512 [ 285.204262][ T9281] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 285.204558][ T9281] EXT4-fs (loop4): orphan cleanup on readonly fs [ 285.220440][ T9281] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 285.220459][ T9281] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 285.220489][ T9281] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.1160: Failed to acquire dquot type 1 [ 285.220508][ T9281] loop4: lost filesystem error report for type 5 error -5 [ 285.229551][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 285.229569][ C0] EXT4-fs (loop4): initial error at time 2000000022: ext4_acquire_dquot:7069 [ 285.229590][ C0] EXT4-fs (loop4): last error at time 2000000022: ext4_acquire_dquot:7069 [ 285.259547][ T9281] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.1160: bg 0: block 40: padding at end of block bitmap is not set [ 285.259577][ T9281] loop4: lost filesystem error report for type 5 error -117 [ 285.259903][ T9281] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 285.259921][ T9281] loop4: lost filesystem error report for type 5 error -117 [ 285.265839][ T9281] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #16: comm syz.4.1160: data will be lost [ 285.266010][ T9281] EXT4-fs (loop4): 1 truncate cleaned up [ 285.324880][ T9281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.379422][ T9286] loop1: detected capacity change from 0 to 256 [ 285.565609][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.656466][ T9292] loop1: detected capacity change from 0 to 512 [ 285.697940][ T9292] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 285.724244][ T9292] EXT4-fs (loop1): 1 truncate cleaned up [ 285.732652][ T9292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.765585][ T32] audit: type=1800 audit(2000000022.999:30): pid=9292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1165" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 285.815744][ T9295] loop4: detected capacity change from 0 to 512 [ 285.861543][ T9292] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.1165: corrupted xattr entries [ 285.863262][ T9292] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:73: inode #15: comm syz.1.1165: corrupt xattr in inline inode [ 285.865653][ T9295] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 285.907712][ T9295] EXT4-fs (loop4): 1 truncate cleaned up [ 285.914374][ T9295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.959287][ T9292] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.1165: corrupted xattr entries [ 286.027490][ T9295] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6542: inode #12: comm syz.4.1166: bad extra_isize 62 (inode size 256) [ 286.083535][ T9295] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6542: inode #12: comm syz.4.1166: bad extra_isize 62 (inode size 256) [ 286.169076][ T9295] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6542: inode #12: comm syz.4.1166: bad extra_isize 62 (inode size 256) [ 286.187943][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.221738][ T9288] loop3: detected capacity change from 0 to 32768 [ 286.378878][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.559951][ T9302] loop1: detected capacity change from 0 to 4096 [ 286.653751][ T9305] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1170'. [ 287.249956][ T4935] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 287.404302][ T4935] usb 5-1: Using ep0 maxpacket: 16 [ 287.408177][ T4935] usb 5-1: New USB device found: idVendor=058f, idProduct=9410, bcdDevice=0.00 [ 287.410557][ T4935] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.410597][ T4935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.453283][ T4935] usb 5-1: config 0 descriptor?? [ 287.585645][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 287.879485][ T9323] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1178'. [ 287.922003][ T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 287.922076][ T54] Bluetooth: hci0: Injecting HCI hardware error event [ 287.923553][ T5614] Bluetooth: hci0: hardware error 0x00 [ 287.934286][ T4935] hid_parser_main: 218 callbacks suppressed [ 287.934305][ T4935] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 287.934332][ T4935] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 287.934356][ T4935] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 287.934379][ T4935] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 287.934401][ T4935] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 287.934425][ T4935] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 287.934447][ T4935] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 287.934471][ T4935] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 287.934493][ T4935] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 287.934516][ T4935] maltron 0003:058F:9410.000A: unknown main item tag 0x0 [ 288.024785][ T4935] maltron 0003:058F:9410.000A: hidraw0: USB HID v0.06 Device [HID 058f:9410] on usb-dummy_hcd.4-1/input0 [ 288.180563][ T4935] usb 5-1: USB disconnect, device number 11 [ 288.315627][ T9325] fido_id[9325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 288.351862][ T9328] ip_tables: iptables: counters copy to user failed while replacing table [ 288.388986][ T9312] loop1: detected capacity change from 0 to 40427 [ 288.412566][ T9312] F2FS-fs (loop1): invalid crc value [ 288.739004][ T9312] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 288.789857][ T9312] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 288.789881][ T9312] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 288.789904][ T9312] F2FS-fs (loop1): Start checkpoint disabled! [ 288.836141][ T9312] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 288.839186][ T9312] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 288.950164][ T9342] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1185'. [ 289.068187][ T52] kworker/u8:3: attempt to access beyond end of device [ 289.068187][ T52] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 289.087365][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 289.087390][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.087400][ T52] Workqueue: writeback wb_workfn (flush-7:1) [ 289.087435][ T52] Call Trace: [ 289.087442][ T52] [ 289.087450][ T52] dump_stack_lvl+0xe8/0x150 [ 289.087476][ T52] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 289.087501][ T52] f2fs_write_end_bio+0xda7/0x11c0 [ 289.087540][ T52] __submit_merged_bio+0x258/0x6a0 [ 289.087557][ T52] ? rcu_is_watching+0x16/0xb0 [ 289.087586][ T52] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 289.087616][ T52] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 289.087666][ T52] f2fs_write_data_pages+0x2a13/0x36e0 [ 289.087720][ T52] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 289.087739][ T52] ? ktime_get+0x45/0x220 [ 289.087803][ T52] ? lock_acquire+0x115/0x350 [ 289.087841][ T52] ? unwind_next_frame+0x1baf/0x2550 [ 289.087866][ T52] ? ret_from_fork_asm+0x1a/0x30 [ 289.087904][ T52] ? ret_from_fork_asm+0x1a/0x30 [ 289.087928][ T52] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 289.087950][ T52] do_writepages+0x338/0x560 [ 289.087976][ T52] ? reacquire_held_locks+0x117/0x1a0 [ 289.087998][ T52] ? writeback_sb_inodes+0x450/0x1af0 [ 289.088022][ T52] __writeback_single_inode+0x136/0x1220 [ 289.088045][ T52] ? do_raw_spin_unlock+0xf5/0x200 [ 289.088066][ T52] writeback_sb_inodes+0x9de/0x1af0 [ 289.088089][ T52] ? __lock_acquire+0x747/0x2de0 [ 289.088133][ T52] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 289.088191][ T52] ? rcu_is_watching+0x16/0xb0 [ 289.088215][ T52] ? queue_io+0x2d3/0x470 [ 289.088237][ T52] wb_writeback+0x41c/0xad0 [ 289.088258][ T52] ? queue_io+0x241/0x470 [ 289.088281][ T52] ? __pfx_wb_writeback+0x10/0x10 [ 289.088297][ T52] ? do_raw_spin_lock+0x26c/0x2f0 [ 289.088330][ T52] wb_workfn+0x431/0x10f0 [ 289.088372][ T52] ? __pfx_wb_workfn+0x10/0x10 [ 289.088399][ T52] ? lockdep_hardirqs_on+0x7b/0x110 [ 289.088425][ T52] ? do_raw_spin_lock+0x12b/0x2f0 [ 289.088451][ T52] ? lock_acquire+0x115/0x350 [ 289.088481][ T52] ? rcu_is_watching+0x16/0xb0 [ 289.088505][ T52] ? process_scheduled_works+0x97a/0x1630 [ 289.088531][ T52] process_scheduled_works+0xc3d/0x1630 [ 289.088565][ T52] ? trace_contention_end+0x3b/0x160 [ 289.088610][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.088641][ T52] ? assign_work+0x3cf/0x5d0 [ 289.088670][ T52] worker_thread+0xa47/0xfb0 [ 289.088721][ T52] kthread+0x38b/0x480 [ 289.088741][ T52] ? __pfx_worker_thread+0x10/0x10 [ 289.088764][ T52] ? __pfx_kthread+0x10/0x10 [ 289.088784][ T52] ret_from_fork+0x514/0xb70 [ 289.088805][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 289.088822][ T52] ? __switch_to+0xc78/0x1410 [ 289.088850][ T52] ? __pfx_kthread+0x10/0x10 [ 289.088871][ T52] ret_from_fork_asm+0x1a/0x30 [ 289.088911][ T52] [ 289.096480][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 290.490889][ T5614] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 290.957379][ T9343] loop4: detected capacity change from 0 to 32768 [ 290.968590][ T9343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1186 (9343) [ 290.983948][ T9343] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 290.983975][ T9343] BTRFS info (device loop4): using crc32c checksum algorithm [ 291.002759][ T9356] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1193'. [ 291.132246][ T9343] BTRFS info (device loop4): enabling ssd optimizations [ 291.132282][ T9343] BTRFS info (device loop4): turning on flush-on-commit [ 291.132297][ T9343] BTRFS info (device loop4): enabling free space tree [ 291.132311][ T9343] BTRFS info (device loop4): enabling auto defrag [ 291.132326][ T9343] BTRFS info (device loop4): use lzo compression, level 1 [ 291.132343][ T9343] BTRFS info (device loop4): max_inline set to 4096 [ 291.324137][ T5604] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 291.778512][ T9382] ip_tables: iptables: counters copy to user failed while replacing table [ 291.873598][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 291.969958][ T9386] loop3: detected capacity change from 0 to 512 [ 292.076378][ T9386] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 292.076476][ T9386] System zones: 0-2, 18-18, 34-34 [ 292.219117][ T9386] EXT4-fs (loop3): 1 orphan inode deleted [ 292.244299][ T9386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.245869][ T9386] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.363045][ T9399] loop4: detected capacity change from 0 to 2048 [ 292.403987][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.443099][ T9399] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.690060][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 292.843624][ T27] usb 1-1: New USB device found: idVendor=05ab, idProduct=0301, bcdDevice=1.00 [ 292.849313][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 292.849351][ T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 292.849373][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 292.849391][ T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 292.855742][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.855764][ T27] usb 1-1: Product: syz [ 292.855777][ T27] usb 1-1: Manufacturer: syz [ 292.855789][ T27] usb 1-1: SerialNumber: syz [ 292.886210][ T27] usb 1-1: config 0 descriptor?? [ 292.898050][ T27] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 293.127797][ T27] scsi host1: usb-storage 1-1:0.0 [ 293.212108][ T9412] loop4: detected capacity change from 0 to 256 [ 293.355890][ T27] usb 1-1: USB disconnect, device number 10 [ 293.472800][ T9414] loop4: detected capacity change from 0 to 8 [ 293.584022][ T9414] SQUASHFS error: Failed to read block 0x285: -5 [ 293.584042][ T9414] SQUASHFS error: Unable to read metadata cache entry [283] [ 293.584054][ T9414] SQUASHFS error: Unable to read symlink [8f:60] [ 293.632366][ T9393] loop1: detected capacity change from 0 to 40427 [ 293.644537][ T9393] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 293.644558][ T9393] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 293.665718][ T9393] F2FS-fs (loop1): invalid crc value [ 293.668120][ T9405] loop3: detected capacity change from 0 to 32768 [ 293.674531][ T9405] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1206 (9405) [ 293.714735][ T9405] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 293.714764][ T9405] BTRFS info (device loop3): using sha256 checksum algorithm [ 293.782424][ T9405] BTRFS info (device loop3): enabling ssd optimizations [ 293.782450][ T9405] BTRFS info (device loop3): turning on async discard [ 293.782464][ T9405] BTRFS info (device loop3): enabling free space tree [ 293.996569][ T9393] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 294.026041][ T9393] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 294.026074][ T9393] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 294.077817][ T5607] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 295.014047][ T9460] loop3: detected capacity change from 0 to 256 [ 295.016518][ T9460] exfat: Deprecated parameter 'utf8' [ 295.016610][ T9460] exfat: Deprecated parameter 'namecase' [ 295.016682][ T9460] exfat: Deprecated parameter 'utf8' [ 295.049316][ T9460] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 295.375679][ T9469] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1222'. [ 295.445283][ T9471] IPv6: addrconf: prefix option has invalid lifetime [ 295.504301][ T9473] Bluetooth: MGMT ver 1.23 [ 295.559673][ T27] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 295.579968][ T4937] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 295.710603][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 295.711207][ T27] usb 5-1: New USB device found: idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 295.715877][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.715899][ T27] usb 5-1: Product: syz [ 295.715913][ T27] usb 5-1: Manufacturer: syz [ 295.715925][ T27] usb 5-1: SerialNumber: syz [ 295.722932][ T27] usb 5-1: config 0 descriptor?? [ 295.728797][ T27] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 295.728840][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 295.735145][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 295.735811][ T27] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 295.735858][ T27] usb 5-1: media controller created [ 295.749092][ T4937] usb 3-1: New USB device found: idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 295.768531][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.812609][ T4937] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 295.812648][ T4937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.812670][ T4937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.812690][ T4937] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 295.870200][ T4937] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 295.870223][ T4937] usb 3-1: Manufacturer: syz [ 295.874676][ T4937] usb 3-1: config 0 descriptor?? [ 295.938096][ T9465] dvb-usb: bulk message failed: -22 (7/0) [ 295.941024][ T27] cxusb: set interface failed [ 295.941039][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 296.026400][ T27] DVB: Unable to find symbol mt352_attach() [ 296.026415][ T27] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 296.118678][ T9483] loop1: detected capacity change from 0 to 32768 [ 296.131529][ T9483] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1230 (9483) [ 296.155015][ T9483] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 296.155043][ T9483] BTRFS info (device loop1): using sha256 checksum algorithm [ 296.162079][ T27] rc_core: IR keymap rc-dvico-portable not found [ 296.162093][ T27] Registered IR keymap rc-empty [ 296.163323][ T27] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 296.180830][ T27] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input12 [ 296.194079][ T27] dvb-usb: schedule remote query interval to 100 msecs. [ 296.194099][ T27] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 296.203814][ T27] usb 5-1: USB disconnect, device number 12 [ 296.292931][ T9482] loop3: detected capacity change from 0 to 32768 [ 296.325870][ T9482] JBD2: Ignoring recovery information on journal [ 296.327969][ T4937] appleir 0003:05AC:8243.000B: item fetching failed at offset 0/1 [ 296.328594][ T4937] appleir 0003:05AC:8243.000B: parse failed [ 296.328689][ T4937] appleir 0003:05AC:8243.000B: probe with driver appleir failed with error -22 [ 296.363897][ T9482] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 296.364851][ T9482] JBD2: bad block at offset 32 [ 296.366646][ T9483] BTRFS info (device loop1): setting nodatasum [ 296.366667][ T9483] BTRFS info (device loop1): enabling ssd optimizations [ 296.366684][ T9483] BTRFS info (device loop1): turning on async discard [ 296.366698][ T9483] BTRFS info (device loop1): enabling free space tree [ 296.412381][ T9482] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 296.435361][ T27] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 296.547177][ T5605] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 296.551260][ T4937] usb 3-1: USB disconnect, device number 11 [ 296.682168][ T5607] ocfs2: Unmounting device (7,3) on (node local) [ 297.102568][ T9520] loop4: detected capacity change from 0 to 512 [ 297.103412][ T9520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.125325][ T9520] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 297.156358][ T9520] EXT4-fs (loop4): orphan cleanup on readonly fs [ 297.156904][ T9520] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 297.156928][ T9520] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 297.230803][ T9520] EXT4-fs (loop4): 1 truncate cleaned up [ 297.246577][ T9520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.283932][ T9520] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 297.284668][ T9520] EXT4-fs (loop4): Remounting filesystem read-only [ 297.416821][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.479041][ T9535] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1247'. [ 297.509680][ T27] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 297.544790][ T9537] loop4: detected capacity change from 0 to 256 [ 297.559808][ T9537] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 297.591187][ T32] audit: type=1800 audit(2000000034.829:31): pid=9537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1246" name="file1" dev="loop4" ino=45 res=0 errno=0 [ 297.594818][ T9540] loop1: detected capacity change from 0 to 512 [ 297.643565][ T9540] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 297.643585][ T9540] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 297.643660][ T9540] System zones: 0-1, 15-15, 18-18, 34-34 [ 297.645118][ T9540] EXT4-fs (loop1): orphan cleanup on readonly fs [ 297.645180][ T9540] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.1248: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 297.645215][ T9540] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 297.645487][ T9540] EXT4-fs error (device loop1): ext4_quota_enable:7263: comm syz.1.1248: Bad quota inode: 4, type: 1 [ 297.645511][ T9540] loop1: lost filesystem error report for type 5 error -117 [ 297.645700][ T9540] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 297.645726][ T9540] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 297.661970][ T9540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.687425][ T9540] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.1248: bad symlink. [ 297.698169][ T27] usb 1-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 297.757787][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.761925][ T27] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 297.761947][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.761961][ T27] usb 1-1: config 0 has no interface number 0 [ 297.761993][ T27] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 297.762014][ T27] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 255, setting to 64 [ 297.762032][ T27] usb 1-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.762053][ T27] usb 1-1: config 0 interface 11 has no altsetting 0 [ 297.762079][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.871214][ T27] usb 1-1: config 0 descriptor?? [ 297.873623][ T9527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 297.915824][ T27] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 297.916176][ T27] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 87 [ 297.941498][ T27] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 297.941581][ T27] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 297.941665][ T27] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 297.941740][ T27] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 297.941818][ T27] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 297.941995][ T27] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 297.946418][ T27] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 297.948480][ T27] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 297.948559][ T27] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 297.948631][ T27] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 297.948714][ T27] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 297.948789][ T27] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 297.948860][ T27] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 298.056675][ T27] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 298.107898][ T9551] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1251'. [ 299.287888][ T4937] usb 1-1: USB disconnect, device number 11 [ 299.371264][ T4937] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 299.391990][ T4937] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 299.392668][ T4937] keyspan 1-1:0.11: device disconnected [ 299.470992][ T9559] loop1: detected capacity change from 0 to 64 [ 299.668097][ T5605] hfs: node 4:3 still has 1 user(s)! [ 299.962016][ T9575] loop4: detected capacity change from 0 to 256 [ 300.068513][ T9563] loop3: detected capacity change from 0 to 32768 [ 300.093633][ T9563] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1258 (9563) [ 300.134305][ T9563] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 300.134335][ T9563] BTRFS info (device loop3): using crc32c checksum algorithm [ 300.287196][ T9571] loop1: detected capacity change from 0 to 32768 [ 300.355033][ T9571] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 300.400523][ T9571] JBD2: Ignoring recovery information on journal [ 300.425251][ T9563] BTRFS info (device loop3): enabling ssd optimizations [ 300.425275][ T9563] BTRFS info (device loop3): turning on async discard [ 300.425290][ T9563] BTRFS info (device loop3): enabling free space tree [ 300.541688][ T9571] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 300.677394][ T5607] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 300.875544][ T9613] capability: warning: `syz.2.1273' uses 32-bit capabilities (legacy support in use) [ 300.895912][ T5605] ocfs2: Unmounting device (7,1) on (node local) [ 301.069006][ T9618] xt_hashlimit: size too large, truncated to 1048576 [ 301.512683][ T5707] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 301.582759][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 301.680595][ T5707] usb 1-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00 [ 301.681589][ T5707] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 301.681629][ T5707] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 301.681651][ T5707] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 301.681670][ T5707] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 301.681704][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.685085][ T9628] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 301.884974][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1286'. [ 301.890050][ T5610] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 301.913589][ T9652] netlink: 'syz.3.1286': attribute type 14 has an invalid length. [ 301.913607][ T9652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1286'. [ 301.929100][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1288'. [ 302.042150][ T5610] usb 3-1: Using ep0 maxpacket: 8 [ 302.042956][ T5610] usb 3-1: New USB device found: idVendor=17ef, idProduct=6047, bcdDevice=0.00 [ 302.044133][ T5610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.044160][ T5610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.044178][ T5610] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 302.044210][ T5610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.053380][ T5610] usb 3-1: config 0 descriptor?? [ 302.126296][ T9658] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 302.170345][ T4935] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 302.198379][ T5707] ims_pcu 1-1:1.0: GET_INFO command failed, error: -71 [ 302.199107][ T5707] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -71 [ 302.320115][ T4935] usb 5-1: Using ep0 maxpacket: 8 [ 302.327770][ T4935] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 302.340503][ T4935] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 302.340525][ T4935] usb 5-1: config 0 has no interface number 0 [ 302.340561][ T4935] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 302.340582][ T4935] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 302.340604][ T4935] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.340627][ T4935] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 302.340665][ T4935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.347309][ T4935] usb 5-1: config 0 descriptor?? [ 302.459123][ T909] usb 1-1: USB disconnect, device number 12 [ 302.465879][ T4935] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 302.512505][ T5610] hid_parser_main: 30 callbacks suppressed [ 302.512526][ T5610] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 302.512555][ T5610] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 302.512579][ T5610] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 302.512603][ T5610] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 302.512627][ T5610] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 302.512651][ T5610] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 302.512674][ T5610] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 302.512698][ T5610] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 302.512722][ T5610] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 302.512747][ T5610] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 302.534327][ T5610] lenovo 0003:17EF:6047.000C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 302.667415][ T5610] lenovo 0003:17EF:6047.000C: Failed to switch F7/9/11 mode: -71 [ 302.669923][ T5610] lenovo 0003:17EF:6047.000C: Failed to switch middle button: -71 [ 302.672533][ T5610] lenovo 0003:17EF:6047.000C: Fn-lock setting failed: -71 [ 302.675595][ T5610] lenovo 0003:17EF:6047.000C: Sensitivity setting failed: -71 [ 302.712667][ T5610] usb 3-1: USB disconnect, device number 12 [ 302.852775][ T4935] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 302.906813][ T9668] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 303.029588][ T4935] usb 4-1: Using ep0 maxpacket: 8 [ 303.030277][ T4935] usb 4-1: New USB device found: idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 303.033166][ T4935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.033212][ T4935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.064306][ T4935] usb 4-1: config 0 descriptor?? [ 303.087874][ T4935] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 303.577207][ T9691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1304'. [ 303.699253][ T4935] gspca_vc032x: reg_r err -71 [ 303.699331][ T4935] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 303.721321][ T4935] usb 4-1: USB disconnect, device number 7 [ 303.742000][ T9681] loop1: detected capacity change from 0 to 32768 [ 303.742901][ T9681] xfs: Deprecated parameter 'attr2' [ 303.742917][ T9681] XFS: attr2 mount option is deprecated. [ 303.762459][ T4937] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 303.785376][ T9681] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 303.842584][ T9681] XFS (loop1): Ending clean mount [ 303.932394][ T4937] usb 1-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 303.933483][ T4937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.937404][ T4937] usb 1-1: config 0 descriptor?? [ 303.968271][ T4937] cp210x 1-1:0.0: cp210x converter detected [ 303.980502][ T5605] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 304.551905][ T4937] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 304.551967][ T4937] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 304.582458][ T4937] usb 1-1: cp210x converter now attached to ttyUSB0 [ 304.587106][ T4937] usb 1-1: USB disconnect, device number 13 [ 304.627110][ T4937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 304.627887][ T4937] cp210x 1-1:0.0: device disconnected [ 304.722088][ T27] usb 5-1: USB disconnect, device number 13 [ 304.734368][ T27] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 305.074363][ T9716] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1312'. [ 305.090983][ T9712] loop3: detected capacity change from 0 to 32768 [ 305.119262][ T9712] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 305.173983][ T9712] XFS (loop3): Ending clean mount [ 305.189663][ T4937] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 305.330565][ T9732] ip_tables: iptables: counters copy to user failed while replacing table [ 305.332268][ T5607] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 305.357485][ T4937] usb 5-1: Using ep0 maxpacket: 32 [ 305.374063][ T4937] usb 5-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 305.389078][ T4937] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 305.389102][ T4937] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 305.389123][ T4937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 305.419619][ T4937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.419643][ T4937] usb 5-1: Product: syz [ 305.419656][ T4937] usb 5-1: Manufacturer: syz [ 305.419670][ T4937] usb 5-1: SerialNumber: syz [ 305.423960][ T4937] usb 5-1: config 0 descriptor?? [ 305.561889][ T4935] kernel write not supported for file bpf-prog (pid: 4935 comm: kworker/0:2) [ 305.613556][ T9738] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 305.613658][ T9738] pim6reg0: linktype set to 823 [ 305.817002][ T9750] loop3: detected capacity change from 0 to 256 [ 305.854233][ T9750] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 256) [ 305.859329][ T4937] gs_usb 5-1:0.0: Configuring for 256 interfaces [ 305.859365][ T4937] gs_usb 5-1:0.0: Driver cannot handle more than 255 CAN interfaces [ 305.859390][ T4937] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 306.097672][ T9757] loop3: detected capacity change from 0 to 256 [ 306.098805][ T27] usb 5-1: USB disconnect, device number 14 [ 306.163730][ T9757] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 306.390552][ T9764] loop1: detected capacity change from 0 to 1024 [ 306.407680][ T9764] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 306.407803][ T9764] System zones: 0-1, 3-12 [ 306.431124][ T9764] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.294856][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 307.928997][ T9790] loop3: detected capacity change from 0 to 1764 [ 308.111794][ T9780] loop1: detected capacity change from 0 to 32768 [ 308.136599][ T9780] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 308.147708][ T5707] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 308.165569][ T9780] JBD2: Ignoring recovery information on journal [ 308.182381][ T9798] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5607] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9798] [ 308.271857][ T9780] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 308.321218][ T5707] usb 5-1: Using ep0 maxpacket: 32 [ 308.322530][ T5707] usb 5-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 308.325091][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.325117][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.325150][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.329947][ T5707] usb 5-1: config 0 descriptor?? [ 308.383362][ T5707] hub 5-1:0.0: USB hub found [ 308.584106][ T5605] ocfs2: Unmounting device (7,1) on (node local) [ 308.591073][ T5707] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 308.733735][ T9809] loop3: detected capacity change from 0 to 512 [ 308.793496][ T9809] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.1350: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 308.793529][ T9809] loop3: lost filesystem error report for type 5 error -117 [ 308.797937][ T9809] EXT4-fs (loop3): 1 orphan inode deleted [ 308.804790][ T9809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.925166][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.007303][ T5707] hid-generic 0003:046D:C31C.000D: item fetching failed at offset 0/1 [ 309.007998][ T5707] hid-generic 0003:046D:C31C.000D: probe with driver hid-generic failed with error -22 [ 309.030686][ T4937] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 309.067272][ T32] audit: type=1326 audit(2000000046.299:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1353" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 309.067599][ T32] audit: type=1326 audit(2000000046.299:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1353" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 309.123633][ T32] audit: type=1326 audit(2000000046.359:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1353" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 309.123677][ T32] audit: type=1326 audit(2000000046.359:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1353" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 309.123714][ T32] audit: type=1326 audit(2000000046.359:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1353" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 309.124191][ T32] audit: type=1326 audit(2000000046.359:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1353" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 309.125474][ T32] audit: type=1326 audit(2000000046.359:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1353" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 309.127676][ T32] audit: type=1326 audit(2000000046.359:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1353" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 309.127870][ T32] audit: type=1326 audit(2000000046.359:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1353" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 309.128055][ T32] audit: type=1326 audit(2000000046.359:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1353" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0099e159 code=0x7ffc0000 [ 309.235124][ T4937] usb 2-1: New USB device found: idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 309.341690][ T4937] usb 2-1: config 253 has an invalid interface number: 130 but max is 0 [ 309.341716][ T4937] usb 2-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 309.341733][ T4937] usb 2-1: config 253 has no interface number 0 [ 309.341769][ T4937] usb 2-1: config 253 interface 130 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 309.341792][ T4937] usb 2-1: config 253 interface 130 has no altsetting 0 [ 309.401102][ T4937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.401125][ T4937] usb 2-1: Product: syz [ 309.401138][ T4937] usb 2-1: Manufacturer: syz [ 309.401150][ T4937] usb 2-1: SerialNumber: syz [ 309.470419][ T27] usb 5-1: USB disconnect, device number 15 [ 309.960867][ T9863] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1370'. [ 310.029364][ T4937] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 310.045434][ T4937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 310.046338][ T4937] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 310.046398][ T4937] usb 2-1: media controller created [ 310.094667][ T4937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.187864][ T4937] DVB: Unable to find symbol dib8000_attach() [ 310.187879][ T4937] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 310.391112][ T4937] rc_core: IR keymap rc-dib0700-nec not found [ 310.391130][ T4937] Registered IR keymap rc-empty [ 310.391503][ T4937] dvb-usb: could not initialize remote control. [ 310.391513][ T4937] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 310.442536][ T4937] usb 2-1: USB disconnect, device number 7 [ 310.475129][ T4937] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 310.687600][ T9887] loop4: detected capacity change from 0 to 128 [ 310.742789][ T9887] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 310.747539][ T9887] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.855013][ T5604] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.210289][ T9916] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1388'. [ 311.352202][ T9924] loop4: detected capacity change from 0 to 4096 [ 311.383762][ T9928] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.500929][ T9932] Bluetooth: hci5: Frame reassembly failed (-84) [ 311.579981][ T5610] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 311.583793][ T5604] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 311.730568][ T9936] loop3: detected capacity change from 0 to 4096 [ 311.731371][ T5610] usb 3-1: Using ep0 maxpacket: 8 [ 311.734169][ T5610] usb 3-1: New USB device found: idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 311.738178][ T5610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.787913][ T5610] pvrusb2: Hardware description: Terratec Grabster AV400 [ 311.787931][ T5610] pvrusb2: ********** [ 311.787938][ T5610] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 311.787948][ T5610] pvrusb2: Important functionality might not be entirely working. [ 311.787955][ T5610] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 311.787964][ T5610] pvrusb2: ********** [ 311.852610][ T9936] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 311.900191][ T9936] ntfs3(loop3): Failed to load $Extend (-22). [ 311.900213][ T9936] ntfs3(loop3): Failed to initialize $Extend. [ 311.996306][ T2349] pvrusb2: Invalid write control endpoint [ 311.996321][ T2349] pvrusb2: Device being rendered inoperable [ 312.020340][ T2349] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 312.020355][ T2349] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 312.053642][ T9944] loop1: detected capacity change from 0 to 1024 [ 312.056183][ T9944] EXT4-fs: Ignoring removed oldalloc option [ 312.056201][ T9944] EXT4-fs: Ignoring removed orlov option [ 312.095439][ T9944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.095494][ T9944] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.183877][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 312.226593][ T27] usb 3-1: USB disconnect, device number 13 [ 313.519617][ T54] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 313.870236][ T9992] loop1: detected capacity change from 0 to 512 [ 313.879389][ T9992] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 313.922140][ T9992] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.1417: bad orphan inode 131083 [ 313.922167][ T9992] loop1: lost filesystem error report for type 5 error -117 [ 313.932928][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 313.932945][ C0] EXT4-fs (loop1): initial error at time 2000000051: ext4_orphan_get:1429 [ 313.932965][ C0] EXT4-fs (loop1): last error at time 2000000051: ext4_orphan_get:1429 [ 313.937223][ T9992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.159971][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.413327][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 315.554612][T10012] loop4: detected capacity change from 0 to 4096 [ 315.630246][T10022] program syz.3.1431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.823791][T10028] warning: `syz.0.1433' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 316.107709][T10041] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 317.280685][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.280737][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.258064][T10101] loop3: detected capacity change from 0 to 1024 [ 320.403421][ T4937] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 320.523602][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1467'. [ 320.635017][ T4937] usb 2-1: unable to get BOS descriptor or descriptor too short [ 320.635059][ T4937] usb 2-1: New USB device found: idVendor=1235, idProduct=8210, bcdDevice=0.40 [ 320.636017][ T4937] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 320.674834][ T4937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.674857][ T4937] usb 2-1: Product: syz [ 320.674870][ T4937] usb 2-1: Manufacturer: syz [ 320.674883][ T4937] usb 2-1: SerialNumber: syz [ 320.691808][ T5727] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 321.245812][ T5727] usb 5-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 321.251781][ T5727] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.251905][ T5727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 321.251925][ T5727] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 321.251944][ T5727] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.251980][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.272851][ T4937] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 321.272967][ T4937] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 321.665914][ T4937] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 321.705423][ T4937] usb 2-1: USB disconnect, device number 8 [ 322.048847][ T5727] gud 5-1:1.0: Failed to add properties (error=-5) [ 322.048868][ T5727] gud 5-1:1.0: probe with driver gud failed with error -5 [ 322.146506][T10130] loop1: detected capacity change from 0 to 128 [ 322.253367][ T5727] usb 5-1: USB disconnect, device number 16 [ 322.308137][ T32] audit: type=1800 audit(2000000059.539:42): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1475" name="file1" dev="loop1" ino=54 res=0 errno=0 [ 322.335401][ T32] audit: type=1800 audit(2000000059.569:43): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1475" name="file1" dev="loop1" ino=54 res=0 errno=0 [ 323.584882][T10146] loop4: detected capacity change from 0 to 32768 [ 323.613960][T10146] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1480 (10146) [ 323.640376][T10146] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 323.640405][T10146] BTRFS info (device loop4): using sha256 checksum algorithm [ 323.789879][T10146] BTRFS info (device loop4): rebuilding free space tree [ 323.973263][T10170] loop3: detected capacity change from 0 to 2048 [ 324.008983][T10170] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362 [ 324.020464][T10170] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 324.020711][T10170] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 324.021730][T10170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.193363][T10146] BTRFS info (device loop4): checking UUID tree [ 324.193729][T10146] BTRFS info (device loop4): enabling ssd optimizations [ 324.193748][T10146] BTRFS info (device loop4): using spread ssd allocation scheme [ 324.193762][T10146] BTRFS info (device loop4): turning on async discard [ 324.193777][T10146] BTRFS info (device loop4): enabling free space tree [ 324.193791][T10146] BTRFS info (device loop4): force clearing of disk cache [ 324.193807][T10146] BTRFS info (device loop4): use zlib compression, level 3 [ 324.303066][T10146] BTRFS info (device loop4): Snapshot src from another FS [ 324.440890][ T5604] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 324.487244][T10181] xt_hashlimit: size too large, truncated to 1048576 [ 325.537787][T10199] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1494'. [ 325.642395][T10203] netlink: 'syz.4.1499': attribute type 2 has an invalid length. [ 327.210120][T10227] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1507'. [ 327.749329][T10220] loop1: detected capacity change from 0 to 32768 [ 330.194751][T10257] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1522'. [ 330.339126][T10123] Set syz1 is full, maxelem 65536 reached [ 331.243258][T10264] sg_write: data in/out 16515036/120 bytes for SCSI command 0x0-- guessing data in; [ 331.243258][T10264] program syz.1.1524 not setting count and/or reply_len properly [ 331.429600][ T153] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.442241][ T8345] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.442384][ T8345] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.759768][T10280] netlink: 'syz.4.1532': attribute type 11 has an invalid length. [ 332.759789][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'. [ 332.897295][ T32] audit: type=1326 audit(2000000070.129:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.0.1534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ebb9e159 code=0x7ffc0000 [ 332.900876][ T32] audit: type=1326 audit(2000000070.139:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.0.1534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ebb9e159 code=0x7ffc0000 [ 332.906082][ T32] audit: type=1326 audit(2000000070.139:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.0.1534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ebb9e159 code=0x7ffc0000 [ 332.906123][ T32] audit: type=1326 audit(2000000070.139:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.0.1534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ebb9e159 code=0x7ffc0000 [ 332.908269][ T32] audit: type=1326 audit(2000000070.139:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.0.1534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb4ebb9e159 code=0x7ffc0000 [ 332.908309][ T32] audit: type=1326 audit(2000000070.139:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.0.1534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ebb9e159 code=0x7ffc0000 [ 332.908345][ T32] audit: type=1326 audit(2000000070.139:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.0.1534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ebb9e159 code=0x7ffc0000 [ 332.910215][ T32] audit: type=1326 audit(2000000070.149:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.0.1534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ebb9e159 code=0x7ffc0000 [ 332.910406][ T32] audit: type=1326 audit(2000000070.149:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.0.1534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ebb9e159 code=0x7ffc0000 [ 332.915419][ T32] audit: type=1326 audit(2000000070.149:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.0.1534" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb4ebb9e159 code=0x7ffc0000 [ 333.259699][T10295] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1537'. [ 334.878153][T10309] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 335.592462][T10319] loop3: detected capacity change from 0 to 32768 [ 335.594092][T10319] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1546 (10319) [ 336.153488][T10328] loop4: detected capacity change from 0 to 131072 [ 336.157294][T10328] F2FS-fs (loop4): invalid crc value [ 336.246321][T10328] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 336.258446][T10319] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 336.258474][T10319] BTRFS info (device loop3): using sha256 checksum algorithm [ 336.288210][T10328] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 336.413245][T10319] BTRFS info (device loop3): turning off barriers [ 336.413270][T10319] BTRFS info (device loop3): enabling free space tree [ 336.635373][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1557'. [ 336.708851][T10355] smpboot: CPU 1 is now offline [ 336.951685][ T5607] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 337.081035][T10368] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 337.358262][ T4937] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 337.522368][ T4937] usb 2-1: New USB device found: idVendor=0525, idProduct=127a, bcdDevice=1.00 [ 337.524210][ T4937] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.525385][ T4937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 337.525398][ T4937] usb 2-1: Product: syz [ 337.525405][ T4937] usb 2-1: Manufacturer: syz [ 337.570967][ T4937] usb_debug 2-1:1.0: debug converter detected [ 337.597116][ T4937] usb 2-1: debug converter now attached to ttyUSB0 [ 337.697977][T10375] usb 2-1: USB disconnect, device number 9 [ 338.156747][T10375] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 338.247861][T10375] usb_debug 2-1:1.0: device disconnected [ 339.931737][T10437] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 339.931737][T10437] The task syz.2.1586 (10437) triggered the difference, watch for misbehavior. [ 340.100029][ T5619] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 340.225550][T10442] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1589'. [ 340.253454][ T5619] usb 1-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 340.253478][ T5619] usb 1-1: too many configurations: 53, using maximum allowed: 8 [ 340.295216][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.295231][ T5619] usb 1-1: Product: syz [ 340.295238][ T5619] usb 1-1: Manufacturer: syz [ 340.295245][ T5619] usb 1-1: SerialNumber: syz [ 340.509351][T10450] Falling back ldisc for ttyS3. [ 341.835787][ T5619] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 341.835829][ T5619] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 341.835840][ T5619] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 341.959780][T10460] netlink: 'syz.1.1593': attribute type 10 has an invalid length. [ 341.960030][T10460] netlink: 'syz.1.1593': attribute type 10 has an invalid length. [ 342.017751][ T5619] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 342.048147][ T5619] usb 1-1: USB disconnect, device number 14 [ 342.360254][ T5271] veth0_vlan: left promiscuous mode [ 342.393150][ T5707] veth0_vlan: entered promiscuous mode [ 342.579834][ T5619] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 342.751177][ T5619] usb 4-1: New USB device found: idVendor=046d, idProduct=c71f, bcdDevice=0.00 [ 342.752016][ T5619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 342.752043][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.829431][ T5619] usb 4-1: config 0 descriptor?? [ 342.851381][T10471] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 343.083784][T10471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.084064][T10471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.347971][ T5619] hid (null): report_id 0 is invalid [ 343.383670][ T5619] hid_parser_main: 30 callbacks suppressed [ 343.383685][ T5619] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 343.383702][ T5619] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 343.383717][ T5619] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 343.383731][ T5619] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 343.383746][ T5619] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 343.383760][ T5619] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 343.383774][ T5619] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 343.383788][ T5619] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 343.383802][ T5619] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 343.383817][ T5619] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 343.492343][ T5619] logitech-djreceiver 0003:046D:C71F.000E: unexpected long global item [ 343.492719][ T5619] logitech-djreceiver 0003:046D:C71F.000E: logi_dj_probe: parse failed [ 343.492766][ T5619] logitech-djreceiver 0003:046D:C71F.000E: probe with driver logitech-djreceiver failed with error -22 [ 343.587609][ T4935] usb 4-1: USB disconnect, device number 8 [ 344.388527][T10536] loop4: detected capacity change from 0 to 4096 [ 344.418350][T10536] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 344.477097][T10536] ntfs3(loop4): ino=19, mi_enum_attr [ 344.477116][T10536] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 344.478122][T10536] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 344.511757][ T4935] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 344.662012][ T4935] usb 4-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 344.662794][ T4935] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 344.662827][ T4935] usb 4-1: config 0 has no interface number 0 [ 344.662847][ T4935] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 344.662860][ T4935] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 344.662872][ T4935] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 344.664045][ T4935] usb 4-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 344.664058][ T4935] usb 4-1: Product: syz [ 344.664065][ T4935] usb 4-1: SerialNumber: syz [ 344.742335][ T4935] usb 4-1: config 0 descriptor?? [ 344.753635][ T4935] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 344.777896][ T4935] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input14 [ 346.053908][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.055491][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.055667][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.055835][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.055999][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.056164][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.056330][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.056517][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.056682][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.056849][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.153196][ T4935] usb 4-1: USB disconnect, device number 9 [ 346.153312][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 346.181134][ T4935] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 346.203497][T10558] device-mapper: ioctl: name not supplied when creating device [ 346.768910][T10572] program syz.0.1638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.199373][T10583] loop4: detected capacity change from 0 to 1024 [ 347.369876][ T4935] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 347.529647][ T4935] usb 1-1: Using ep0 maxpacket: 32 [ 347.530897][ T4935] usb 1-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 347.547060][ T4935] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 347.547074][ T4935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.547083][ T4935] usb 1-1: config 0 has no interface number 0 [ 347.577381][ T4935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.577395][ T4935] usb 1-1: Product: syz [ 347.577402][ T4935] usb 1-1: Manufacturer: syz [ 347.577409][ T4935] usb 1-1: SerialNumber: syz [ 347.607699][ T4935] usb 1-1: config 0 descriptor?? [ 347.623335][ T4935] f81534 1-1:0.12: required endpoints missing [ 347.678944][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'. [ 347.834017][ T4935] usb 1-1: USB disconnect, device number 15 [ 348.604490][T10617] IPVS: sh: FWM 3 0x00000003 - no destination available [ 348.604540][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 348.640982][ T5707] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 348.796019][ T5707] usb 3-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 348.797085][ T5707] usb 3-1: config index 0 descriptor too short (expected 45, got 28) [ 348.797100][ T5707] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 348.797122][ T5707] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 348.847689][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.847703][ T5707] usb 3-1: Product: syz [ 348.847711][ T5707] usb 3-1: Manufacturer: syz [ 348.847718][ T5707] usb 3-1: SerialNumber: syz [ 348.881646][ T5707] rtl8150 3-1:1.0: couldn't find required endpoints [ 348.881770][ T5707] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 348.929744][ T4935] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 349.087447][ T5619] usb 3-1: USB disconnect, device number 14 [ 349.098543][ T4935] usb 1-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 349.100514][ T4935] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 349.100528][ T4935] usb 1-1: config 0 has no interface number 0 [ 349.100551][ T4935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.150848][ T4935] usb 1-1: config 0 descriptor?? [ 349.165177][ T4935] cp210x 1-1:0.11: cp210x converter detected [ 349.240264][ T5707] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 349.241494][T10631] loop4: detected capacity change from 0 to 32768 [ 349.280869][T10631] JBD2: Ignoring recovery information on journal [ 349.324470][T10631] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 349.394919][ T5707] usb 4-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 349.422775][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.422791][ T5707] usb 4-1: Product: syz [ 349.422799][ T5707] usb 4-1: Manufacturer: syz [ 349.422806][ T5707] usb 4-1: SerialNumber: syz [ 349.425979][ T5707] usb 4-1: config 0 descriptor?? [ 349.480959][T10637] (syz.4.1661,10637,0):ocfs2_check_set_options:1251 ERROR: Invalid heartbeat mount options [ 349.528432][ T5604] ocfs2: Unmounting device (7,4) on (node local) [ 349.576428][ T4935] cp210x 1-1:0.11: failed to get vendor val 0x000e size 3: -32 [ 349.593941][ T4935] usb 1-1: cp210x converter now attached to ttyUSB0 [ 349.600777][ T4935] usb 1-1: USB disconnect, device number 16 [ 349.624697][ T4935] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 349.625040][ T4935] cp210x 1-1:0.11: device disconnected [ 350.589646][ T5707] usb 4-1: Firmware: major: 211, minor: 105, hardware type: ATUSB (2) [ 350.794302][ T5707] usb 4-1: failed to fetch extended address, random address set [ 350.912509][ T5707] usb 4-1: USB disconnect, device number 10 [ 351.481019][T10668] loop4: detected capacity change from 0 to 64 [ 351.538179][ T32] kauditd_printk_skb: 4 callbacks suppressed [ 351.538191][ T32] audit: type=1800 audit(2000000088.769:58): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1676" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 351.613130][T10664] loop3: detected capacity change from 0 to 8192 [ 351.617525][T10664] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 351.904155][T10679] dyndbg: bad flag-op £, at start of £ [ 351.904167][T10679] dyndbg: flags parse failed [ 351.929848][ T4935] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 351.947598][T10681] loop4: detected capacity change from 0 to 512 [ 351.968631][T10681] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1681: inode has both inline data and extents flags [ 351.968651][T10681] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 351.968844][T10681] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1681: couldn't read orphan inode 15 (err -117) [ 351.968859][T10681] loop4: lost filesystem error report for type 5 error -117 [ 351.969524][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 351.969536][ C0] EXT4-fs (loop4): last error at time 2000000089: ext4_orphan_get:1408 [ 352.008902][T10681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.080870][ T4935] usb 3-1: Using ep0 maxpacket: 32 [ 352.081337][ T4935] usb 3-1: New USB device found: idVendor=1b1c, idProduct=0c10, bcdDevice=0.00 [ 352.083391][ T4935] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 352.083409][ T4935] usb 3-1: config 0 interface 0 has no altsetting 0 [ 352.083426][ T4935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.147069][ T4935] usb 3-1: config 0 descriptor?? [ 352.252374][T10685] loop3: detected capacity change from 0 to 1024 [ 352.268523][T10685] EXT4-fs: Ignoring removed bh option [ 352.282925][T10685] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 352.310569][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.334070][T10685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.535505][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.950585][ T4935] hid_parser_main: 247 callbacks suppressed [ 352.950602][ T4935] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 352.950619][ T4935] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 352.950634][ T4935] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 352.950649][ T4935] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 352.950663][ T4935] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 353.009436][ T4935] corsair-cpro 0003:1B1C:0C10.000F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 353.142023][T10717] loop3: detected capacity change from 0 to 2048 [ 353.316247][T10717] loop3: unable to read partition table [ 353.316357][T10717] loop3: partition table beyond EOD, truncated [ 353.316376][T10717] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 353.437788][ T4935] corsair-cpro 0003:1B1C:0C10.000F: probe with driver corsair-cpro failed with error -110 [ 353.464502][ T4935] usb 3-1: USB disconnect, device number 15 [ 353.495083][ T4937] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 353.639953][ T4937] usb 5-1: Using ep0 maxpacket: 8 [ 353.640659][ T4937] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 353.643046][ T4937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.643060][ T4937] usb 5-1: Product: syz [ 353.643067][ T4937] usb 5-1: Manufacturer: syz [ 353.643074][ T4937] usb 5-1: SerialNumber: syz [ 353.646402][ T4937] usb 5-1: config 0 descriptor?? [ 353.849984][ T4935] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 353.883698][ T4937] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 354.005974][ T4935] usb 1-1: Using ep0 maxpacket: 32 [ 354.024138][ T4935] usb 1-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 354.038886][ T4935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.038904][ T4935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.038924][ T4935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.074883][ T4935] usb 1-1: config 0 descriptor?? [ 354.087437][ T4935] hub 1-1:0.0: USB hub found [ 354.305293][ T4935] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 354.325250][ T4937] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 354.340098][ T4937] usb 5-1: USB disconnect, device number 17 [ 354.450766][T10754] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1709'. [ 354.814876][ T4935] hid-generic 0003:046D:C31C.0010: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 355.090377][ T4935] usb 1-1: USB disconnect, device number 17 [ 355.300641][ T4937] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 356.170511][ T4937] usb 5-1: Using ep0 maxpacket: 16 [ 356.177020][ T4937] usb 5-1: New USB device found: idVendor=05ac, idProduct=027b, bcdDevice=0.00 [ 356.187311][ T4937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.218111][ T4937] usb 5-1: config 0 descriptor?? [ 356.616824][T10812] loop3: detected capacity change from 0 to 512 [ 356.671777][T10812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.671835][T10812] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.710192][ T4937] apple 0003:05AC:027B.0011: unknown main item tag 0x0 [ 356.710215][ T4937] apple 0003:05AC:027B.0011: unknown main item tag 0x0 [ 356.710230][ T4937] apple 0003:05AC:027B.0011: unknown main item tag 0x0 [ 356.710245][ T4937] apple 0003:05AC:027B.0011: unknown main item tag 0x0 [ 356.710260][ T4937] apple 0003:05AC:027B.0011: unknown main item tag 0x0 [ 356.806009][ T4937] apple 0003:05AC:027B.0011: hidraw0: USB HID v7f.fd Device [HID 05ac:027b] on usb-dummy_hcd.4-1/input0 [ 356.914447][ T4937] usb 5-1: USB disconnect, device number 18 [ 357.037024][ T5607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.754500][T10840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.561347][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.561382][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.001423][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.001458][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.441508][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.441547][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.239945][ T33] INFO: task jbd2/sda1-8:4938 blocked in I/O wait for more than 143 seconds. [ 514.239963][ T33] Not tainted syzkaller #0 [ 514.239969][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.239974][ T33] task:jbd2/sda1-8 state:D stack:24960 pid:4938 tgid:4938 ppid:2 task_flags:0x240040 flags:0x00080000 [ 514.240011][ T33] Call Trace: [ 514.240015][ T33] [ 514.240025][ T33] __schedule+0x1b47/0x5c60 [ 514.240047][ T33] ? percpu_ref_put_many+0x21/0x240 [ 514.240061][ T33] ? percpu_ref_put_many+0x18e/0x240 [ 514.240077][ T33] ? __pfx___schedule+0x10/0x10 [ 514.240093][ T33] ? schedule+0x90/0x2b0 [ 514.240105][ T33] schedule+0x164/0x2b0 [ 514.240116][ T33] io_schedule+0x7f/0xd0 [ 514.240128][ T33] bit_wait_io+0x13/0x110 [ 514.240140][ T33] __wait_on_bit+0xac/0x300 [ 514.240151][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 514.240164][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 514.240176][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 514.240186][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 514.240199][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 514.240215][ T33] ? __wait_on_buffer+0xe/0x80 [ 514.240232][ T33] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 514.240247][ T33] ? trace_hrtimer_start+0x82/0x200 [ 514.240278][ T33] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 514.240297][ T33] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 514.240321][ T33] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 514.240332][ T33] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 514.240342][ T33] ? __timer_delete_sync+0x4a7/0x520 [ 514.240358][ T33] kjournald2+0x3bc/0x740 [ 514.240380][ T33] ? __pfx_kjournald2+0x10/0x10 [ 514.240393][ T33] ? __pfx_autoremove_wake_function+0x10/0x10 [ 514.240410][ T33] ? __kthread_parkme+0x71/0x1f0 [ 514.240423][ T33] ? __kthread_parkme+0x199/0x1f0 [ 514.240436][ T33] kthread+0x38b/0x480 [ 514.240448][ T33] ? __pfx_kjournald2+0x10/0x10 [ 514.240457][ T33] ? __pfx_kthread+0x10/0x10 [ 514.240469][ T33] ret_from_fork+0x514/0xb70 [ 514.240481][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 514.240491][ T33] ? __switch_to+0xc78/0x1410 [ 514.240506][ T33] ? __pfx_kthread+0x10/0x10 [ 514.240518][ T33] ret_from_fork_asm+0x1a/0x30 [ 514.240542][ T33] [ 514.240552][ T33] INFO: task syz-executor:5593 blocked in I/O wait for more than 143 seconds. [ 514.240560][ T33] Not tainted syzkaller #0 [ 514.240565][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.240569][ T33] task:syz-executor state:D stack:21800 pid:5593 tgid:5593 ppid:5592 task_flags:0x440100 flags:0x00080000 [ 514.240595][ T33] Call Trace: [ 514.240598][ T33] [ 514.240605][ T33] __schedule+0x1b47/0x5c60 [ 514.240622][ T33] ? lock_acquire+0x115/0x350 [ 514.240640][ T33] ? __pfx___schedule+0x10/0x10 [ 514.240656][ T33] ? schedule+0x90/0x2b0 [ 514.240667][ T33] schedule+0x164/0x2b0 [ 514.240678][ T33] io_schedule+0x7f/0xd0 [ 514.240689][ T33] bit_wait_io+0x13/0x110 [ 514.240701][ T33] __wait_on_bit+0xac/0x300 [ 514.240712][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 514.240724][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 514.240736][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 514.240746][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 514.240759][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 514.240778][ T33] do_get_write_access+0x658/0x10c0 [ 514.240800][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 514.240815][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 514.240832][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 514.240844][ T33] ? trace_kmem_cache_alloc+0x29/0xe0 [ 514.240854][ T33] ? jbd2__journal_start+0x145/0x5d0 [ 514.240871][ T33] ext4_reserve_inode_write+0x294/0x360 [ 514.240888][ T33] __ext4_mark_inode_dirty+0x141/0x7b0 [ 514.240904][ T33] ext4_dirty_inode+0xd0/0x110 [ 514.240921][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 514.240933][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 514.240952][ T33] file_update_time_flags+0x399/0x440 [ 514.240968][ T33] ext4_page_mkwrite+0x21f/0x12c0 [ 514.240981][ T33] ? reacquire_held_locks+0x117/0x1a0 [ 514.241001][ T33] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 514.241012][ T33] ? __lock_acquire+0x747/0x2de0 [ 514.241028][ T33] do_page_mkwrite+0x147/0x310 [ 514.241043][ T33] do_wp_page+0x1a85/0x4b60 [ 514.241066][ T33] ? __pfx_do_wp_page+0x10/0x10 [ 514.241078][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 514.241090][ T33] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 514.241105][ T33] handle_mm_fault+0x15d7/0x3750 [ 514.241125][ T33] ? handle_mm_fault+0xf1/0x3750 [ 514.241146][ T33] ? __pfx_handle_mm_fault+0x10/0x10 [ 514.241158][ T33] ? lock_vma_under_rcu+0x45a/0x500 [ 514.241168][ T33] ? __pfx_set_user_sigmask+0x10/0x10 [ 514.241194][ T33] do_user_addr_fault+0xb35/0x1480 [ 514.241211][ T33] ? trace_page_fault_user+0x84/0x1e0 [ 514.241234][ T33] exc_page_fault+0x6a/0xc0 [ 514.241247][ T33] asm_exc_page_fault+0x26/0x30 [ 514.241258][ T33] RIP: 0033:0x7f581707c6e2 [ 514.242679][ T33] RSP: 002b:00007ffc1acd6200 EFLAGS: 00010202 [ 514.242692][ T33] RAX: 00007f5815110000 RBX: 0000555583123ae0 RCX: 0000000000000001 [ 514.242699][ T33] RDX: 0000000000002dd1 RSI: 00005555831193a8 RDI: 0000000000000002 [ 514.242706][ T33] RBP: 00007ffc1acd6700 R08: 0000555583119430 R09: 00000000000000a2 [ 514.242713][ T33] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc1acd6540 [ 514.242736][ T33] R13: 00007ffc1acd6330 R14: 585858582e7a7973 R15: 00007ffc1acd6280 [ 514.242754][ T33] [ 514.242786][ T33] INFO: task syz.0.1740:10845 blocked in I/O wait for more than 143 seconds. [ 514.242794][ T33] Not tainted syzkaller #0 [ 514.242799][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.242803][ T33] task:syz.0.1740 state:D stack:25608 pid:10845 tgid:10845 ppid:5606 task_flags:0x440040 flags:0x00080002 [ 514.242832][ T33] Call Trace: [ 514.242836][ T33] [ 514.242842][ T33] __schedule+0x1b47/0x5c60 [ 514.242863][ T33] ? lock_acquire+0x115/0x350 [ 514.242881][ T33] ? __pfx___schedule+0x10/0x10 [ 514.242897][ T33] ? schedule+0x90/0x2b0 [ 514.242929][ T33] schedule+0x164/0x2b0 [ 514.242941][ T33] io_schedule+0x7f/0xd0 [ 514.242953][ T33] bit_wait_io+0x13/0x110 [ 514.242965][ T33] __wait_on_bit+0xac/0x300 [ 514.242976][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 514.242988][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 514.243000][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 514.243010][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 514.243023][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 514.243043][ T33] do_get_write_access+0x658/0x10c0 [ 514.243066][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 514.243080][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 514.243096][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 514.243108][ T33] ? trace_kmem_cache_alloc+0x29/0xe0 [ 514.243119][ T33] ? jbd2__journal_start+0x145/0x5d0 [ 514.243135][ T33] ext4_reserve_inode_write+0x294/0x360 [ 514.243152][ T33] __ext4_mark_inode_dirty+0x141/0x7b0 [ 514.243168][ T33] ext4_dirty_inode+0xd0/0x110 [ 514.243180][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 514.243191][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 514.243208][ T33] file_update_time_flags+0x399/0x440 [ 514.243224][ T33] ext4_page_mkwrite+0x21f/0x12c0 [ 514.243241][ T33] ? __pfx_filemap_fault+0x10/0x10 [ 514.243257][ T33] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 514.243275][ T33] do_page_mkwrite+0x147/0x310 [ 514.243289][ T33] do_pte_missing+0x70f/0x3570 [ 514.243306][ T33] ? handle_mm_fault+0xf1/0x3750 [ 514.243322][ T33] handle_mm_fault+0x1a53/0x3750 [ 514.243342][ T33] ? handle_mm_fault+0xf1/0x3750 [ 514.243362][ T33] ? __pfx_handle_mm_fault+0x10/0x10 [ 514.243376][ T33] ? lock_vma_under_rcu+0x45a/0x500 [ 514.243385][ T33] ? __pfx_do_futex+0x10/0x10 [ 514.243408][ T33] do_user_addr_fault+0xb35/0x1480 [ 514.243429][ T33] ? trace_page_fault_user+0x84/0x1e0 [ 514.243440][ T33] exc_page_fault+0x6a/0xc0 [ 514.243452][ T33] asm_exc_page_fault+0x26/0x30 [ 514.243462][ T33] RIP: 0033:0x7fb4eba727a9 [ 514.243471][ T33] RSP: 002b:00007fff7a9343c0 EFLAGS: 00010202 [ 514.243479][ T33] RAX: 0000001b33123000 RBX: ffffffff81d10836 RCX: 0000001b33122ff8 [ 514.243487][ T33] RDX: 0000001b32b2421c RSI: 0000000000000008 RDI: 00007fb4ec955720 [ 514.243493][ T33] RBP: 00000000000000ec R08: 00007fb4ebe10000 R09: 00007fb4ebe12000 [ 514.243500][ T33] R10: 0000000081d1083a R11: 0000000000000002 R12: 00007fb4ebe26128 [ 514.243506][ T33] R13: 0000000000000185 R14: ffffffff81d103fc R15: 00007fb4ec955720 [ 514.243513][ T33] ? tracing_record_taskinfo_sched_switch+0x1c/0x370 [ 514.243528][ T33] ? tracing_record_tgid+0x46/0x170 [ 514.243546][ T33] [ 514.243550][ T33] INFO: task syz.1.1726:10853 blocked in I/O wait for more than 143 seconds. [ 514.243558][ T33] Not tainted syzkaller #0 [ 514.243563][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.243567][ T33] task:syz.1.1726 state:D stack:26696 pid:10853 tgid:10853 ppid:5605 task_flags:0x440040 flags:0x00080002 [ 514.243594][ T33] Call Trace: [ 514.243597][ T33] [ 514.243603][ T33] __schedule+0x1b47/0x5c60 [ 514.243628][ T33] ? __pfx___schedule+0x10/0x10 [ 514.243644][ T33] ? schedule+0x90/0x2b0 [ 514.243656][ T33] schedule+0x164/0x2b0 [ 514.243666][ T33] io_schedule+0x7f/0xd0 [ 514.243677][ T33] bit_wait_io+0x13/0x110 [ 514.243689][ T33] __wait_on_bit+0xac/0x300 [ 514.243699][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 514.243712][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 514.243723][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 514.243734][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 514.243746][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 514.243765][ T33] do_get_write_access+0x658/0x10c0 [ 514.243787][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 514.243801][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 514.243817][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 514.243835][ T33] ext4_reserve_inode_write+0x294/0x360 [ 514.243852][ T33] __ext4_mark_inode_dirty+0x141/0x7b0 [ 514.243867][ T33] ext4_dirty_inode+0xd0/0x110 [ 514.243879][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 514.243891][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 514.243903][ T33] ? mnt_get_write_access+0x216/0x280 [ 514.243923][ T33] ? ext4_file_mmap_prepare+0x277/0x450 [ 514.243934][ T33] touch_atime+0x568/0x670 [ 514.243946][ T33] ? ext4_file_mmap_prepare+0x277/0x450 [ 514.243959][ T33] ext4_file_mmap_prepare+0x277/0x450 [ 514.243974][ T33] mmap_region+0xf11/0x2c30 [ 514.243991][ T33] ? __update_page_owner_handle+0x512/0x580 [ 514.244008][ T33] ? lock_acquire+0x115/0x350 [ 514.244021][ T33] ? __page_table_check_zero+0x6c/0x430 [ 514.244035][ T33] ? __pfx_mmap_region+0x10/0x10 [ 514.244049][ T33] ? __page_table_check_zero+0x6c/0x430 [ 514.244064][ T33] ? __page_table_check_zero+0x6c/0x430 [ 514.244076][ T33] ? __page_table_check_zero+0x3c3/0x430 [ 514.244088][ T33] ? __page_table_check_zero+0x6c/0x430 [ 514.244115][ T33] ? lock_acquire+0x115/0x350 [ 514.244163][ T33] ? mt_find+0x186/0x630 [ 514.244177][ T33] ? mt_find+0x5ff/0x630 [ 514.244190][ T33] ? mt_find+0x186/0x630 [ 514.244201][ T33] ? __pfx_mt_find+0x10/0x10 [ 514.244216][ T33] ? bpf_lsm_mmap_addr+0x9/0x50 [ 514.244229][ T33] ? security_mmap_addr+0x71/0x240 [ 514.244243][ T33] ? shmem_mapping+0xd/0x50 [ 514.244254][ T33] ? memfd_check_seals_mmap+0xc5/0x220 [ 514.244266][ T33] do_mmap+0xe0a/0x1300 [ 514.244285][ T33] ? __pfx_do_mmap+0x10/0x10 [ 514.244304][ T33] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 514.244315][ T33] ? down_write_killable+0x179/0x230 [ 514.244329][ T33] ? __pfx_down_write_killable+0x10/0x10 [ 514.244341][ T33] ? apparmor_mmap_file+0x2e7/0x390 [ 514.244358][ T33] vm_mmap_pgoff+0x272/0x4e0 [ 514.244370][ T33] ? lock_acquire+0x115/0x350 [ 514.244384][ T33] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 514.244397][ T33] ? __fget_files+0x2a/0x420 [ 514.244413][ T33] ? __fget_files+0x3a2/0x420 [ 514.244423][ T33] ? __fget_files+0x2a/0x420 [ 514.244436][ T33] ksys_mmap_pgoff+0x4dc/0x760 [ 514.244454][ T33] do_syscall_64+0x166/0x520 [ 514.244464][ T33] ? trace_irq_disable+0x3b/0x140 [ 514.244476][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.244486][ T33] ? clear_bhb_loop+0x70/0xc0 [ 514.244498][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.244509][ T33] RIP: 0033:0x7f74ddb9dec2 [ 514.244517][ T33] RSP: 002b:00007ffd2dcf33c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 514.244526][ T33] RAX: ffffffffffffffda RBX: 0000001b32c64000 RCX: 00007f74ddb9dec2 [ 514.244533][ T33] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32c64000 [ 514.244540][ T33] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 514.244546][ T33] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000146 [ 514.244552][ T33] R13: 00000000000927c0 R14: 0000000000056bdd R15: 00007ffd2dcf36a0 [ 514.244568][ T33] [ 514.244572][ T33] INFO: task syz.3.1742:10859 blocked in I/O wait for more than 143 seconds. [ 514.244579][ T33] Not tainted syzkaller #0 [ 514.244583][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.244588][ T33] task:syz.3.1742 state:D stack:26936 pid:10859 tgid:10859 ppid:5607 task_flags:0x440040 flags:0x00080002 [ 514.244614][ T33] Call Trace: [ 514.244618][ T33] [ 514.244623][ T33] __schedule+0x1b47/0x5c60 [ 514.244646][ T33] ? is_bpf_text_address+0x26/0x2b0 [ 514.244657][ T33] ? __pfx___schedule+0x10/0x10 [ 514.244672][ T33] ? schedule+0x90/0x2b0 [ 514.244684][ T33] schedule+0x164/0x2b0 [ 514.244695][ T33] io_schedule+0x7f/0xd0 [ 514.244706][ T33] bit_wait_io+0x13/0x110 [ 514.244718][ T33] __wait_on_bit+0xac/0x300 [ 514.244728][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 514.244741][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 514.244753][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 514.244763][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 514.244775][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 514.244795][ T33] do_get_write_access+0x658/0x10c0 [ 514.244816][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 514.244831][ T33] __ext4_journal_get_write_access+0xec/0x620 [ 514.244846][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 514.244864][ T33] ext4_reserve_inode_write+0x294/0x360 [ 514.244881][ T33] __ext4_mark_inode_dirty+0x141/0x7b0 [ 514.244896][ T33] ext4_dirty_inode+0xd0/0x110 [ 514.244921][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 514.244933][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 514.244947][ T33] ? mnt_get_write_access+0x216/0x280 [ 514.244960][ T33] ? ext4_file_mmap_prepare+0x277/0x450 [ 514.244972][ T33] touch_atime+0x568/0x670 [ 514.244983][ T33] ? ext4_file_mmap_prepare+0x277/0x450 [ 514.244997][ T33] ext4_file_mmap_prepare+0x277/0x450 [ 514.245011][ T33] mmap_region+0xf11/0x2c30 [ 514.245028][ T33] ? __update_page_owner_handle+0x512/0x580 [ 514.245044][ T33] ? lock_acquire+0x115/0x350 [ 514.245057][ T33] ? __page_table_check_zero+0x6c/0x430 [ 514.245071][ T33] ? __pfx_mmap_region+0x10/0x10 [ 514.245085][ T33] ? __page_table_check_zero+0x6c/0x430 [ 514.245099][ T33] ? __page_table_check_zero+0x6c/0x430 [ 514.245112][ T33] ? __page_table_check_zero+0x3c3/0x430 [ 514.245124][ T33] ? __page_table_check_zero+0x6c/0x430 [ 514.245151][ T33] ? lock_acquire+0x115/0x350 [ 514.245200][ T33] ? mt_find+0x186/0x630 [ 514.245214][ T33] ? mt_find+0x5ff/0x630 [ 514.245226][ T33] ? mt_find+0x186/0x630 [ 514.245238][ T33] ? __pfx_mt_find+0x10/0x10 [ 514.245257][ T33] ? bpf_lsm_mmap_addr+0x9/0x50 [ 514.245269][ T33] ? security_mmap_addr+0x71/0x240 [ 514.245283][ T33] ? shmem_mapping+0xd/0x50 [ 514.245293][ T33] ? memfd_check_seals_mmap+0xc5/0x220 [ 514.245305][ T33] do_mmap+0xe0a/0x1300 [ 514.245323][ T33] ? __pfx_do_mmap+0x10/0x10 [ 514.245343][ T33] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 514.245353][ T33] ? down_write_killable+0x179/0x230 [ 514.245367][ T33] ? __pfx_down_write_killable+0x10/0x10 [ 514.245380][ T33] ? apparmor_mmap_file+0x2e7/0x390 [ 514.245396][ T33] vm_mmap_pgoff+0x272/0x4e0 [ 514.245408][ T33] ? lock_acquire+0x115/0x350 [ 514.245421][ T33] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 514.245434][ T33] ? __fget_files+0x2a/0x420 [ 514.245448][ T33] ? __fget_files+0x3a2/0x420 [ 514.245458][ T33] ? __fget_files+0x2a/0x420 [ 514.245471][ T33] ksys_mmap_pgoff+0x4dc/0x760 [ 514.245488][ T33] do_syscall_64+0x166/0x520 [ 514.245499][ T33] ? trace_irq_disable+0x3b/0x140 [ 514.245511][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.245521][ T33] ? clear_bhb_loop+0x70/0xc0 [ 514.245533][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.245542][ T33] RIP: 0033:0x7fcb0099dec2 [ 514.245551][ T33] RSP: 002b:00007ffcc4fba668 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 514.245560][ T33] RAX: ffffffffffffffda RBX: 0000001b32e64000 RCX: 00007fcb0099dec2 [ 514.245567][ T33] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32e64000 [ 514.245573][ T33] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 514.245580][ T33] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000167 [ 514.245586][ T33] R13: 00000000000927c0 R14: 000000000005761f R15: 00007ffcc4fba940 [ 514.245602][ T33] [ 514.245613][ T33] [ 514.245613][ T33] Showing all locks held in the system: [ 514.245621][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 514.245628][ T33] #0: ffffffff8ed5c2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 514.245678][ T33] locks held by getty/5361: 2, on CPU#1: [ 514.245684][ T33] #0: ffff8880308ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 514.245712][ T33] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 514.245737][ T33] locks held by syz-executor/5593: 3, on CPU#0: [ 514.245744][ T33] #0: ffff888074ba6308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 514.245767][ T33] #1: ffff88802fa98558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 514.245792][ T33] #2: ffff88802facc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 514.245823][ T33] locks held by kworker/u8:20/8093: 4, on CPU#0: [ 514.245829][ T33] #0: ffff888020aee148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 514.245857][ T33] #1: ffffc90006c57c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 514.245885][ T33] #2: ffff88802fa980e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 514.245918][ T33] #3: ffff88802facec98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 514.245946][ T33] locks held by syz.0.1740/10845: 3, on CPU#0: [ 514.245952][ T33] #0: ffff888074980948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 514.245975][ T33] #1: ffff88802fa98558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 514.245999][ T33] #2: ffff88802facc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 514.246024][ T33] locks held by syz.1.1726/10853: 3, on CPU#0: [ 514.246031][ T33] #0: ffff88802b69e540 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 514.246055][ T33] #1: ffff88802fa98460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 514.246081][ T33] #2: ffff88802facc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 514.246105][ T33] locks held by syz.3.1742/10859: 3, on CPU#0: [ 514.246112][ T33] #0: ffff888031e34cc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 514.246135][ T33] #1: ffff88802fa98460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 514.246161][ T33] #2: ffff88802facc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 514.246185][ T33] [ 514.246188][ T33] ============================================= [ 514.246188][ T33] [ 514.246194][ T33] NMI backtrace for cpu 0 [ 514.246208][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 514.246227][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.246235][ T33] Call Trace: [ 514.246240][ T33] [ 514.246244][ T33] dump_stack_lvl+0xe8/0x150 [ 514.246258][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 514.246272][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 514.246289][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 514.246303][ T33] sys_info+0x135/0x170 [ 514.246315][ T33] watchdog+0x1058/0x10d0 [ 514.246331][ T33] ? watchdog+0x209/0x10d0 [ 514.246346][ T33] kthread+0x38b/0x480 [ 514.246358][ T33] ? __pfx_watchdog+0x10/0x10 [ 514.246369][ T33] ? __pfx_kthread+0x10/0x10 [ 514.246380][ T33] ret_from_fork+0x514/0xb70 [ 514.246391][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 514.246400][ T33] ? __switch_to+0xc78/0x1410 [ 514.246414][ T33] ? __pfx_kthread+0x10/0x10 [ 514.246426][ T33] ret_from_fork_asm+0x1a/0x30 [ 514.246446][ T33] [ 514.246459][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 516.258587][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 516.267668][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.277696][ T33] Call Trace: [ 516.280957][ T33] [ 516.283866][ T33] vpanic+0x26f/0x710 [ 516.288005][ T33] panic+0xc5/0xd0 [ 516.291702][ T33] ? __pfx_panic+0x10/0x10 [ 516.296102][ T33] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 516.301190][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 516.307324][ T33] watchdog+0x10cc/0x10d0 [ 516.311634][ T33] ? watchdog+0x209/0x10d0 [ 516.316027][ T33] kthread+0x38b/0x480 [ 516.320074][ T33] ? __pfx_watchdog+0x10/0x10 [ 516.324726][ T33] ? __pfx_kthread+0x10/0x10 [ 516.329291][ T33] ret_from_fork+0x514/0xb70 [ 516.333858][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 516.338942][ T33] ? __switch_to+0xc78/0x1410 [ 516.343597][ T33] ? __pfx_kthread+0x10/0x10 [ 516.348161][ T33] ret_from_fork_asm+0x1a/0x30 [ 516.352909][ T33] [ 516.355958][ T33] Kernel Offset: disabled [ 516.360265][ T33] Rebooting in 86400 seconds..