last executing test programs: 2m28.301808664s ago: executing program 1 (id=3458): io_setup(0x2278, &(0x7f0000000180)=0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) io_submit(r0, 0x1, &(0x7f0000020800)=[&(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f00000205c0)='@', 0x1}]) 2m28.046463427s ago: executing program 1 (id=3472): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/fscreate\x00') setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r0, 0x7fffffffffffffff) 2m27.938539488s ago: executing program 1 (id=3474): ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, '\x00', @raw_data=[0x8001, 0x6, 0x9, 0x2, 0xfffffffd, 0x708a, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x5cc, 0x0, 0x41000, 0x553b2758, 0xa, 0x80000001, 0x1, 0x80, 0x4, 0x7, 0xffffff81, 0x2, 0x1, 0xcb, 0x5, 0x393a00, 0x401, 0xffff0000, 0x1ff]}) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) 2m27.8307718s ago: executing program 1 (id=3465): r0 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r0, 0xfffffffffffffffd, 0x1) fcntl$lock(r0, 0x5, &(0x7f0000003980)={0x0, 0x1, 0x9, 0x4}) 2m27.702199051s ago: executing program 1 (id=3467): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m26.778814181s ago: executing program 1 (id=3483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4884) 2m11.661134851s ago: executing program 32 (id=3483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4884) 1m45.462370965s ago: executing program 3 (id=4024): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000001e008d2a0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1m45.177281209s ago: executing program 3 (id=4028): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) 1m44.998516161s ago: executing program 3 (id=4031): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f00000004c0)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d062d407f2c696f636861727365743d6d616363656c7469632c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c00f8bac6ecd21c853e33541eff6135e9f9ee5632fe8f304f1afa00d72db4375743f6186b68a4e86f2b458eb497a04c38932037a421537e39d9ad8e5eabceabcdb21c075d43a3199182424964a86c435ec3c6a44e22d545fc552944cbb81007950e765629615e9396477411224e9de84d364a1e9ea83f17a0841c31bface033324a83be0dbbd2ef39383b22e18d1b865c36"], 0x5, 0x357, &(0x7f0000000580)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) 1m44.771862943s ago: executing program 3 (id=4038): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x80, &(0x7f0000000ac0)=ANY=[@ANYBLOB="747970653d68d8a5862c6e6c733d6d6163726f6d616e2c6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c626172726965722c63726561746f723db1025c6b2c706172743d3078303030303030303030303034303030352c00"], 0x47, 0x6ff, &(0x7f0000000240)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m44.335519208s ago: executing program 3 (id=4044): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f00000001c0)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@rodir}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@fat=@quiet}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@fat=@flush}]}, 0x29, 0x33e, &(0x7f0000000480)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m43.650493216s ago: executing program 3 (id=4049): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x3, 0x4) 1m43.510280578s ago: executing program 33 (id=4049): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x3, 0x4) 4.784570997s ago: executing program 6 (id=5388): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x80, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xa, 0x0, 0x81}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000240)={0x0, 0x6, 0x28, {0x28, 0x31, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.398962062s ago: executing program 0 (id=5403): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup2(r0, r0) write$cgroup_int(r1, 0x0, 0x0) 3.307456103s ago: executing program 0 (id=5404): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300}) 1.885623689s ago: executing program 2 (id=5420): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @loopback={0xff00000000000000}, 0x2}, r1}}, 0x30) 1.771156971s ago: executing program 2 (id=5422): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 1.717871901s ago: executing program 6 (id=5423): unshare(0x2a020480) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000000)=[0x0], 0xfffffffffffffffe, 0x0, 0x0}) 1.717284811s ago: executing program 0 (id=5424): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x0) 1.644866142s ago: executing program 6 (id=5425): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x80, 0xfffff024}, {0x20, 0x0, 0x0, 0xffffefff}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.644265282s ago: executing program 4 (id=5426): socketpair$unix(0x1, 0x2, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) 1.562476713s ago: executing program 6 (id=5427): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2808082, &(0x7f0000000280)={[{@uid}, {@part={'part', 0x3d, 0x9}}, {@nls={'nls', 0x3d, 'cp936'}}, {@nodecompose}, {}, {@uid}, {@type={'type', 0x3d, "eea74fa7"}}]}, 0x1, 0x6e8, &(0x7f0000001f80)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 1.485532534s ago: executing program 2 (id=5428): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="97eb010018000000000000020c000006a29349"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) 1.466006814s ago: executing program 4 (id=5429): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0x324}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 1.385307405s ago: executing program 6 (id=5430): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) ioctl$COMEDI_SETRSUBD(r0, 0x6410) 1.348426126s ago: executing program 0 (id=5431): r0 = fanotify_init(0x0, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) fanotify_mark(r0, 0x4a, 0x20, r1, 0x0) 1.345421946s ago: executing program 2 (id=5432): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) 1.197637367s ago: executing program 0 (id=5433): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x20, 0x12, 0xa01, 0x70bd28, 0x25dfdbfd, {0x80, 0x0, 0x300}, [@typed={0x9, 0xf5, 0x0, 0x0, @binary="585878a177"}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 1.197091727s ago: executing program 2 (id=5434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 1.146391037s ago: executing program 6 (id=5435): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.087890838s ago: executing program 4 (id=5437): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 980.168179ms ago: executing program 2 (id=5438): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000000000)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) 971.930079ms ago: executing program 0 (id=5448): syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000380)=ANY=[], 0x2, 0x5515, &(0x7f0000001300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1873c1, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 870.406511ms ago: executing program 4 (id=5439): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nobh}, {}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x0, 0xee01}, {0x2, 0x3}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {}, {0x20, 0x7}}, 0x4c, 0x3) 833.736351ms ago: executing program 5 (id=5440): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000000)=0x5, 0x4) write(r0, &(0x7f0000000040)='8', 0x1) 618.088653ms ago: executing program 5 (id=5441): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000540)="370c099069affa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1b80fede5d37f93e6c01512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614749e6b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b0c0567c2dcd5488684872b1bb9eb84586549e11b080468", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r1, r0}, &(0x7f0000000280)=""/174, 0xae, &(0x7f00000003c0)={&(0x7f0000000340)={'sha512\x00'}}) 338.453837ms ago: executing program 5 (id=5442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20060881}, 0x40010) 293.912127ms ago: executing program 4 (id=5443): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001900), 0x100000, 0x0) sendmmsg$unix(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0xfd}}], 0x50, 0x80}}], 0x1, 0x4040000) 289.557417ms ago: executing program 5 (id=5444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 98.402529ms ago: executing program 5 (id=5445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 13.47449ms ago: executing program 4 (id=5446): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 0s ago: executing program 5 (id=5447): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) mq_open(0x0, 0x40, 0x5e, &(0x7f0000000080)={0x2, 0x6, 0x99cf, 0x6}) kernel console output (not intermixed with test programs): point 0x81 has an invalid bInterval 0, changing to 7 [ 385.463426][ T6765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.481427][ T6765] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 385.523373][ T6765] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 385.543001][ T6765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.593562][ T6765] usb 6-1: config 0 descriptor?? [ 385.647977][T14459] loop2: detected capacity change from 0 to 256 [ 385.653734][T14412] BTRFS info (device loop6): enabling ssd optimizations [ 385.707899][ T26] audit: type=1800 audit(1778307060.958:66): pid=14412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4256" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 385.728557][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.843564][ T5348] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 386.075989][ T6765] microsoft 0003:045E:07DA.001D: unbalanced collection at end of report description [ 386.093242][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.104437][ T6765] microsoft 0003:045E:07DA.001D: parse failed [ 386.123748][ T6765] microsoft: probe of 0003:045E:07DA.001D failed with error -22 [ 386.192788][T14438] loop4: detected capacity change from 0 to 32768 [ 386.277925][ T6765] usb 6-1: USB disconnect, device number 4 [ 386.284837][ T5348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.305501][ T5348] usb 1-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 386.343529][ T5348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.366619][T14459] loop2: detected capacity change from 0 to 32768 [ 386.380111][ T5348] usb 1-1: config 0 descriptor?? [ 386.451384][T14459] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4272 (14459) [ 386.642095][T14438] XFS (loop4): Mounting V5 Filesystem [ 386.686972][T14459] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 386.702689][T14459] BTRFS info (device loop2): using free space tree [ 386.711700][T14459] BTRFS info (device loop2): has skinny extents [ 386.889336][ T5348] hid (null): global environment stack underflow [ 386.898742][T14459] BTRFS info (device loop2): enabling ssd optimizations [ 386.908720][T14438] XFS (loop4): Ending clean mount [ 386.922857][ T5348] hid (null): unknown global tag 0xd [ 386.939431][ T5348] logitech-hidpp-device 0003:046D:C090.001E: global environment stack underflow [ 386.949524][ T5348] logitech-hidpp-device 0003:046D:C090.001E: item 0 1 1 11 parsing failed [ 386.959902][T14438] XFS (loop4): Quotacheck needed: Please wait. [ 386.968210][ T5348] logitech-hidpp-device 0003:046D:C090.001E: hidpp_probe:parse failed [ 386.977862][ T5348] logitech-hidpp-device: probe of 0003:046D:C090.001E failed with error -22 [ 387.093710][ T5348] usb 1-1: USB disconnect, device number 23 [ 387.187173][T14498] loop5: detected capacity change from 0 to 4096 [ 387.199424][T14438] XFS (loop4): Quotacheck: Done. [ 387.246494][T14502] loop6: detected capacity change from 0 to 128 [ 387.751557][ T4197] XFS (loop4): Unmounting Filesystem [ 388.769296][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4298'. [ 388.850385][T14507] loop2: detected capacity change from 0 to 32768 [ 389.054016][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4312'. [ 389.081860][T14556] loop4: detected capacity change from 0 to 512 [ 389.096121][T14554] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 389.139262][T14556] EXT4-fs (loop4): Ignoring removed nobh option [ 389.233625][T14556] EXT4-fs (loop4): Test dummy encryption mode enabled [ 389.250961][T14507] XFS (loop2): Mounting V5 Filesystem [ 389.453921][T14556] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.4302: iget: bad i_size value: 38620345925642 [ 389.485503][T14575] loop6: detected capacity change from 0 to 764 [ 389.534372][T14556] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.4302: couldn't read orphan inode 15 (err -117) [ 389.566668][T14556] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,test_dummy_encryption,data_err=ignore,,errors=continue. Quota mode: writeback. [ 389.601172][T14507] XFS (loop2): Ending clean mount [ 389.804144][ T4195] XFS (loop2): Unmounting Filesystem [ 389.842209][T14556] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 390.199645][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4313'. [ 390.286781][T14550] loop5: detected capacity change from 0 to 40427 [ 390.328417][T14550] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 390.394358][T14550] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 390.498256][T14550] F2FS-fs (loop5): Found nat_bits in checkpoint [ 390.643913][T14604] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 390.661199][T14550] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 390.670328][T14550] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 390.693777][ T23] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 390.792046][T14610] device batadv0 entered promiscuous mode [ 390.844437][T14610] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 390.876580][T14610] device batadv0 left promiscuous mode [ 391.093909][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.118385][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.151319][ T23] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 391.151355][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.153838][ T23] usb 5-1: config 0 descriptor?? [ 391.649005][ T23] arvo 0003:1E7D:30D4.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 391.718520][T14616] loop2: detected capacity change from 0 to 32768 [ 391.752410][T14618] loop6: detected capacity change from 0 to 32768 [ 391.865309][ T23] arvo 0003:1E7D:30D4.001F: couldn't init struct arvo_device [ 391.884898][ T23] arvo 0003:1E7D:30D4.001F: couldn't install keyboard [ 391.964317][T14616] XFS (loop2): Mounting V5 Filesystem [ 391.983159][ T23] arvo: probe of 0003:1E7D:30D4.001F failed with error -71 [ 392.036181][ T23] usb 5-1: USB disconnect, device number 25 [ 392.072704][T14616] XFS (loop2): Ending clean mount [ 392.162860][T14649] device batadv0 entered promiscuous mode [ 392.178396][T14649] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 392.206493][T14649] device batadv0 left promiscuous mode [ 392.296704][ T4195] XFS (loop2): Unmounting Filesystem [ 392.343628][T14651] fido_id[14651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 392.643961][T14661] netlink: 'syz.0.4344': attribute type 1 has an invalid length. [ 393.046765][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4349'. [ 393.231852][T14655] loop5: detected capacity change from 0 to 32768 [ 393.348127][T14683] device macsec1 entered promiscuous mode [ 393.574621][T14688] loop2: detected capacity change from 0 to 8 [ 394.299978][T14690] loop5: detected capacity change from 0 to 32768 [ 394.547858][T14696] loop2: detected capacity change from 0 to 32768 [ 394.646242][T14696] XFS (loop2): Mounting V5 Filesystem [ 394.741956][T14696] XFS (loop2): Ending clean mount [ 394.838660][ T4195] XFS (loop2): Unmounting Filesystem [ 394.953542][ T23] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 395.309986][T14738] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4375'. [ 395.345059][T14738] tipc: Enabling of bearer rejected, media not registered [ 395.412340][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 395.523952][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.540550][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 395.552894][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 24 [ 395.598369][T14753] loop4: detected capacity change from 0 to 256 [ 395.707680][T14753] FAT-fs (loop4): Directory bread(block 64) failed [ 395.717955][T14753] FAT-fs (loop4): Directory bread(block 65) failed [ 395.733861][ T23] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 395.744558][T14753] FAT-fs (loop4): Directory bread(block 66) failed [ 395.752885][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.761067][T14753] FAT-fs (loop4): Directory bread(block 67) failed [ 395.761313][T14753] FAT-fs (loop4): Directory bread(block 68) failed [ 395.776322][T14468] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 395.784218][ T23] usb 1-1: Product: syz [ 395.788521][ T23] usb 1-1: Manufacturer: syz [ 395.794144][T14753] FAT-fs (loop4): Directory bread(block 69) failed [ 395.794397][T14753] FAT-fs (loop4): Directory bread(block 70) failed [ 395.808136][T14753] FAT-fs (loop4): Directory bread(block 71) failed [ 395.811814][ T23] usb 1-1: SerialNumber: syz [ 395.819269][T14753] FAT-fs (loop4): Directory bread(block 72) failed [ 395.828077][T14753] FAT-fs (loop4): Directory bread(block 73) failed [ 395.864505][ T23] usb 1-1: config 0 descriptor?? [ 395.883875][T14729] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 395.891104][T14729] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 395.953783][ C1] usb 1-1: NFC: Urb failure (status -71) [ 395.983494][ C1] usb 1-1: NFC: Urb failure (status -71) [ 396.003509][ T23] usb 1-1: NFC: Unable to get FW version [ 396.022904][T14468] usb 3-1: Using ep0 maxpacket: 32 [ 396.045649][ T23] pn533_usb: probe of 1-1:0.0 failed with error -71 [ 396.131178][T14757] loop4: detected capacity change from 0 to 1024 [ 396.143877][T14468] usb 3-1: config 4 has an invalid interface number: 196 but max is 0 [ 396.169540][T14468] usb 3-1: config 4 has no interface number 0 [ 396.199314][T14468] usb 3-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 396.226219][T14757] hfsplus: request for non-existent node 3 in B*Tree [ 396.238684][T14757] hfsplus: request for non-existent node 3 in B*Tree [ 396.251827][T14468] usb 3-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 396.267620][ T23] usb 1-1: USB disconnect, device number 24 [ 396.298463][T14757] hfsplus: request for non-existent node 4 in B*Tree [ 396.306847][T14468] usb 3-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 396.306885][T14468] usb 3-1: config 4 interface 196 has no altsetting 0 [ 396.393900][T14757] hfsplus: request for non-existent node 4 in B*Tree [ 396.463475][T14468] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 396.477072][T14765] loop5: detected capacity change from 0 to 1024 [ 396.483709][T14468] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 396.491895][T14468] usb 3-1: Product: syz [ 396.497043][T14468] usb 3-1: Manufacturer: syz [ 396.512274][T14468] usb 3-1: SerialNumber: syz [ 396.543310][T14748] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 396.614388][T14765] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 396.712450][T14774] loop6: detected capacity change from 0 to 256 [ 396.760887][T14774] FAT-fs (loop6): Directory bread(block 64) failed [ 396.775138][T14774] FAT-fs (loop6): Directory bread(block 65) failed [ 396.784804][T14774] FAT-fs (loop6): Directory bread(block 66) failed [ 396.791695][T14774] FAT-fs (loop6): Directory bread(block 67) failed [ 396.812583][T14774] FAT-fs (loop6): Directory bread(block 68) failed [ 396.821537][T14774] FAT-fs (loop6): Directory bread(block 69) failed [ 396.864706][T14774] FAT-fs (loop6): Directory bread(block 70) failed [ 396.871436][T14774] FAT-fs (loop6): Directory bread(block 71) failed [ 396.883877][T14774] FAT-fs (loop6): Directory bread(block 72) failed [ 396.890527][T14774] FAT-fs (loop6): Directory bread(block 73) failed [ 396.902429][T14776] loop4: detected capacity change from 0 to 4096 [ 396.989006][ T26] audit: type=1326 audit(1778307072.238:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14777 comm="syz.0.4393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1df2abdd9 code=0x0 [ 397.012679][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.033139][T14468] ipheth 3-1:4.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 397.056439][T14776] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 397.073929][T14468] ipheth: probe of 3-1:4.196 failed with error -22 [ 397.125209][T14776] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 397.255321][ T9176] usb 3-1: USB disconnect, device number 18 [ 397.553093][T14468] Bluetooth: hci1: command 0x0405 tx timeout [ 397.599582][T14797] loop6: detected capacity change from 0 to 64 [ 398.312137][T14827] loop4: detected capacity change from 0 to 1024 [ 398.390247][T14795] loop5: detected capacity change from 0 to 32768 [ 398.414243][ T9176] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 398.494111][T14795] jfs_lookup: iget failed on inum 32 [ 398.507195][T14795] jfs_lookup: iget failed on inum 32 [ 398.517062][T14833] EXT4-fs warning (device loop2): ext4_xattr_inode_get:492: inode #11: comm syz.2.4418: ea_inode file size=4 entry size=6 [ 398.558435][ T6587] hfsplus: b-tree write err: -5, ino 25 [ 398.565141][ T6587] hfsplus: b-tree write err: -5, ino 4 [ 398.571395][ T6587] hfsplus: b-tree write err: -5, ino 2 [ 398.644504][T14833] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.4418: corrupted inode contents [ 398.667905][T14833] EXT4-fs (loop2): Remounting filesystem read-only [ 398.697265][T14833] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.4418: mark_inode_dirty error [ 398.748671][T14833] EXT4-fs (loop2): Remounting filesystem read-only [ 398.771357][T14833] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.4418: corrupted inode contents [ 398.797821][T14833] EXT4-fs (loop2): Remounting filesystem read-only [ 398.807952][T14833] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2952: inode #15: comm syz.2.4418: mark_inode_dirty error [ 398.837826][T14833] EXT4-fs (loop2): Remounting filesystem read-only [ 398.845491][T14833] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2955: inode #15: comm syz.2.4418: mark inode dirty (error -117) [ 398.859689][T14833] EXT4-fs (loop2): Remounting filesystem read-only [ 398.867135][T14833] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117) [ 398.877449][T14833] EXT4-fs (loop2): 1 orphan inode deleted [ 398.884627][T14833] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,journal_dev=0x00000000000000ff,init_itable=0x0000000000008d55,nouid32,resgid=0x0000000000000000,acl,debug_want_extra_isize=0x000000000000005c,nojournal_checksum,sb=0x0000000000000006,. Quota mode: none. [ 398.953203][ T9176] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 398.972885][ T9176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.981257][ T9176] usb 1-1: Product: syz [ 399.031847][ T9176] usb 1-1: Manufacturer: syz [ 399.042967][ T9176] usb 1-1: SerialNumber: syz [ 399.057770][ T9176] usb 1-1: config 0 descriptor?? [ 399.311388][ T23] usb 1-1: USB disconnect, device number 25 [ 399.418161][T14853] set_capacity_and_notify: 1 callbacks suppressed [ 399.418178][T14853] loop5: detected capacity change from 0 to 4096 [ 399.535378][T14853] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 399.602263][T14853] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 399.630883][T14853] ntfs: (device loop5): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 399.645444][T14853] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 399.669695][T14853] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 399.679702][T14853] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 399.702095][T14853] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 399.733895][T14853] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 399.764804][T14853] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 399.792010][T14853] ntfs: volume version 3.1. [ 399.933880][T14855] loop2: detected capacity change from 0 to 32768 [ 399.984738][T14855] (syz.2.4426,14855,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: directory entry overrun - offset=132, inode=71, rec_len=32540, name_len=13 [ 400.015687][T14855] (syz.2.4426,14855,0):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 400.032621][T14855] (syz.2.4426,14855,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 4, possibly corrupt fs? [ 400.032666][T14855] (syz.2.4426,14855,0):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 400.067165][T14855] (syz.2.4426,14855,0):ocfs2_initialize_super:2281 ERROR: status = -22 [ 400.082957][T14855] (syz.2.4426,14855,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 400.176199][T14865] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4432'. [ 400.185807][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4432'. [ 400.203627][ T23] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 400.583805][ T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 400.591955][ T23] usb 5-1: config 0 has no interface number 0 [ 400.814297][ T23] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 400.831634][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.831665][ T23] usb 5-1: Product: syz [ 400.831683][ T23] usb 5-1: Manufacturer: syz [ 400.831700][ T23] usb 5-1: SerialNumber: syz [ 400.844079][ T23] usb 5-1: config 0 descriptor?? [ 400.896278][ T23] usb_set_interface error [ 400.896730][ T23] snd-usb-us122l: probe of 5-1:0.1 failed with error -22 [ 400.954034][T14894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4447'. [ 401.061243][T14897] loop5: detected capacity change from 0 to 1024 [ 401.152216][ T9176] usb 5-1: USB disconnect, device number 26 [ 401.241495][T14905] tipc: Enabled bearer , priority 10 [ 401.267786][T14903] loop2: detected capacity change from 0 to 256 [ 401.307572][T14903] exfat: Deprecated parameter 'utf8' [ 401.338160][T14903] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 401.505627][T14913] loop5: detected capacity change from 0 to 256 [ 401.557219][T14913] exfat: Deprecated parameter 'utf8' [ 401.569163][T14913] exfat: Deprecated parameter 'utf8' [ 401.598387][T14913] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 401.832228][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4462'. [ 401.887689][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4462'. [ 401.928954][T14926] netlink: 'syz.0.4462': attribute type 12 has an invalid length. [ 402.024327][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4466'. [ 402.108074][T14936] loop5: detected capacity change from 0 to 256 [ 402.220495][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4471'. [ 402.281041][T14946] loop4: detected capacity change from 0 to 1024 [ 402.349373][T14946] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 402.358967][T14468] tipc: Node number set to 1595539457 [ 402.398035][T14946] EXT4-fs (loop4): group descriptors corrupted! [ 402.619434][T14957] loop6: detected capacity change from 0 to 512 [ 402.670955][T14957] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 402.811091][T14957] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.4478: missing EA_INODE flag [ 402.921365][T14957] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.4478: error while reading EA inode 2 err=-117 [ 403.012993][T14468] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 403.038051][T14957] EXT4-fs (loop6): 1 truncate cleaned up [ 403.045307][T14957] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 403.373176][T14468] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 403.395474][T14468] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 403.573143][T14468] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 403.590771][T14468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.603632][T14468] usb 5-1: Product: syz [ 403.607902][T14468] usb 5-1: Manufacturer: syz [ 403.622872][T14468] usb 5-1: SerialNumber: syz [ 403.793810][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 403.880356][T15012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4504'. [ 403.896279][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4483'. [ 403.936296][T14965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4483'. [ 404.068590][T14468] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 404.095989][T14468] dvb_usb_af9015: probe of 5-1:2.0 failed with error -22 [ 404.143251][T14468] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 404.151210][T14468] dvb_usb_af9035: probe of 5-1:2.0 failed with error -22 [ 404.170709][T14468] usb 5-1: USB disconnect, device number 27 [ 404.223297][ T23] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 404.242515][ T23] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 404.262197][ T23] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.292661][ T23] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 404.302850][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.372108][ T23] usb 6-1: invalid MIDI out EP 0 [ 404.474620][ T6765] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 404.616028][ T23] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 404.640948][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.664182][ T23] usb 6-1: USB disconnect, device number 5 [ 404.674616][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.753702][ T6765] usb 3-1: Using ep0 maxpacket: 8 [ 404.801677][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.907539][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.987706][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.053834][ T6765] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 405.069367][ T6765] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 405.078588][ T6765] usb 3-1: Product: syz [ 405.084009][ T6765] usb 3-1: Manufacturer: syz [ 405.088943][ T6765] usb 3-1: SerialNumber: syz [ 405.111595][ T6765] usb 3-1: config 0 descriptor?? [ 405.176502][ T6765] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 405.841695][ T6765] gspca_zc3xx: reg_w_i err -71 [ 405.853372][ T6765] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 405.899505][ T6765] usb 3-1: USB disconnect, device number 19 [ 406.483850][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4546'. [ 406.525717][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4546'. [ 406.592546][T15114] netlink: 'syz.4.4546': attribute type 1 has an invalid length. [ 406.600925][ T9177] Bluetooth: hci1: command 0x0405 tx timeout [ 406.626449][ T23] kernel write not supported for file /340/net/rt_cache (pid: 23 comm: kworker/1:1) [ 406.638031][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4546'. [ 407.228890][T15152] netlink: 'syz.6.4560': attribute type 2 has an invalid length. [ 407.259759][T15152] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4560'. [ 407.296894][T15154] netlink: 'syz.2.4561': attribute type 2 has an invalid length. [ 407.431212][ T9177] kernel write not supported for file /comedi4 (pid: 9177 comm: kworker/0:13) [ 407.824316][ T144] device hsr_slave_0 left promiscuous mode [ 407.876916][ T144] device hsr_slave_1 left promiscuous mode [ 407.962766][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.001359][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.031077][T15133] loop5: detected capacity change from 0 to 32768 [ 408.036922][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.069772][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.101280][ T144] batman_adv: batadv0: Removing interface: macvlan0 [ 408.130411][ T144] device bridge_slave_1 left promiscuous mode [ 408.150991][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.218218][ T144] device bridge_slave_0 left promiscuous mode [ 408.235116][T15133] XFS (loop5): Mounting V5 Filesystem [ 408.249028][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.336623][T15133] XFS (loop5): Ending clean mount [ 408.404322][T13130] XFS (loop5): Unmounting Filesystem [ 408.434188][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4579'. [ 408.485584][ T144] device bridge0 left promiscuous mode [ 408.496604][ T144] device veth0_macvtap left promiscuous mode [ 408.506736][ T144] device veth1_vlan left promiscuous mode [ 408.512620][ T144] device veth0_vlan left promiscuous mode [ 408.993530][ T6765] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 409.149243][T15214] loop5: detected capacity change from 0 to 64 [ 409.227275][T15214] attempt to access beyond end of device [ 409.227275][T15214] loop5: rw=0, want=1026, limit=64 [ 409.258455][T15214] Buffer I/O error on dev loop5, logical block 512, async page read [ 409.283755][T15214] attempt to access beyond end of device [ 409.283755][T15214] loop5: rw=0, want=113154, limit=64 [ 409.295904][T15214] Buffer I/O error on dev loop5, logical block 56576, async page read [ 409.510696][T15210] loop6: detected capacity change from 0 to 32768 [ 409.536987][ T144] team0 (unregistering): Port device team_slave_1 removed [ 409.560313][T15218] Invalid ELF header magic: != ELF [ 409.581158][ T144] team0 (unregistering): Port device team_slave_0 removed [ 409.603964][ T6765] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 409.622762][ T6765] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 409.641999][ T6765] usb 1-1: Product: syz [ 409.648148][ T6765] usb 1-1: Manufacturer: syz [ 409.653905][ T6765] usb 1-1: SerialNumber: syz [ 409.660919][ T6765] usb 1-1: config 0 descriptor?? [ 409.677444][T15210] XFS (loop6): Mounting V5 Filesystem [ 409.695540][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.714841][ T6765] ch341 1-1:0.0: ch341-uart converter detected [ 409.766457][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.854052][T15210] XFS (loop6): Ending clean mount [ 409.876761][T15210] XFS (loop6): Quotacheck needed: Please wait. [ 409.952058][ T144] bond0 (unregistering): Released all slaves [ 410.006158][T15210] XFS (loop6): Quotacheck: Done. [ 410.238263][T13941] XFS (loop6): Unmounting Filesystem [ 410.266106][T15235] loop4: detected capacity change from 0 to 1024 [ 410.313199][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.390856][T14468] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 410.393382][ T6765] usb 1-1: failed to send control message: -71 [ 410.413467][ T6765] ch341-uart: probe of ttyUSB0 failed with error -71 [ 410.431076][ T6765] usb 1-1: USB disconnect, device number 26 [ 410.450267][T15235] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 410.464561][ T6765] ch341 1-1:0.0: device disconnected [ 410.741094][T15242] EXT4-fs warning (device loop4): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 410.753195][T14468] usb 3-1: Using ep0 maxpacket: 16 [ 410.897188][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.904690][T14468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.918307][T14468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.963430][T14468] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 411.018203][T14468] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 411.061434][T15249] loop4: detected capacity change from 0 to 512 [ 411.072968][T14468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.113922][T14468] usb 3-1: config 0 descriptor?? [ 411.178397][T15249] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 411.341437][T15249] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback. [ 411.414158][T15249] EXT4-fs error (device loop4): ext4_readdir:223: inode #12: comm syz.4.4592: path /897/file0/file0: directory fails checksum at offset 0 [ 411.672134][T14468] microsoft 0003:045E:07DA.0020: No inputs registered, leaving [ 411.707906][T14468] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 411.759505][T14468] microsoft 0003:045E:07DA.0020: no inputs found [ 411.783000][T14468] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 411.841842][T14468] usb 3-1: USB disconnect, device number 20 [ 411.956691][T15273] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4598'. [ 412.071590][T15275] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4598'. [ 412.089906][T15272] fido_id[15272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 412.709435][T15306] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 412.842384][T15302] loop4: detected capacity change from 0 to 4096 [ 413.302985][T14468] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 413.562960][ T4232] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 413.673239][T14468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.703075][T14468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 413.752872][T14468] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 413.806907][T14468] usb 1-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 413.854898][T14468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.870485][T15309] loop6: detected capacity change from 0 to 32768 [ 413.902405][T14468] usb 1-1: config 0 descriptor?? [ 413.923206][T15316] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 413.940165][ T4232] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 413.968060][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.011612][T15314] loop5: detected capacity change from 0 to 32768 [ 414.019835][ T4232] usb 3-1: config 0 has no interface number 0 [ 414.041324][T15309] XFS (loop6): Mounting V5 Filesystem [ 414.153205][ T4232] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 414.167855][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 414.177747][ T4232] usb 3-1: Manufacturer: syz [ 414.182575][ T4232] usb 3-1: SerialNumber: syz [ 414.190157][ T4232] usb 3-1: config 0 descriptor?? [ 414.221098][T15309] XFS (loop6): Ending clean mount [ 414.322596][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 414.322613][ T26] audit: type=1800 audit(1778307089.568:68): pid=15309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4610" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 414.351090][T15314] XFS (loop5): Mounting V5 Filesystem [ 414.362036][T15355] loop4: detected capacity change from 0 to 512 [ 414.390194][T13941] XFS (loop6): Unmounting Filesystem [ 414.396324][T14468] hid (null): unknown global tag 0xa3 [ 414.413254][T14468] logitech-djreceiver 0003:046D:C53F.0021: unexpected long global item [ 414.443761][T14468] logitech-djreceiver 0003:046D:C53F.0021: logi_dj_probe: parse failed [ 414.452319][T14468] logitech-djreceiver: probe of 0003:046D:C53F.0021 failed with error -22 [ 414.465363][T14468] usb 3-1: USB disconnect, device number 21 [ 414.653952][ T9176] usb 1-1: USB disconnect, device number 27 [ 414.737192][T15314] XFS (loop5): Ending clean mount [ 414.802209][T15355] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,grpquota,,errors=continue. Quota mode: writeback. [ 414.824232][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.889986][T15355] ext4 filesystem being mounted at /908/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.003676][T13130] XFS (loop5): Unmounting Filesystem [ 415.889639][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4630'. [ 416.248595][T15413] loop6: detected capacity change from 0 to 1024 [ 416.386309][T15420] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 416.528449][T15413] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none. [ 416.734893][T15413] EXT4-fs error (device loop6): ext4_get_first_dir_block:3608: inode #11: comm syz.6.4635: directory missing '.' [ 416.789862][T15413] EXT4-fs (loop6): Remounting filesystem read-only [ 416.863052][ T4232] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 416.864452][ T6765] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 417.143580][ T6765] usb 6-1: Using ep0 maxpacket: 8 [ 417.253203][ T4232] usb 1-1: config 0 has an invalid interface number: 221 but max is 0 [ 417.274635][ T4232] usb 1-1: config 0 has no interface number 0 [ 417.280814][ T4232] usb 1-1: config 0 interface 221 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.302074][ T4232] usb 1-1: config 0 interface 221 has no altsetting 0 [ 417.309387][ T9177] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 417.317675][ T4232] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=10.00 [ 417.328602][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.351488][ T4232] usb 1-1: config 0 descriptor?? [ 417.453941][ T6765] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 417.474021][ T6765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.482091][ T6765] usb 6-1: Product: syz [ 417.507454][ T6765] usb 6-1: Manufacturer: syz [ 417.514674][ T6765] usb 6-1: SerialNumber: syz [ 417.563078][ T9177] usb 5-1: Using ep0 maxpacket: 16 [ 417.662760][T15448] loop6: detected capacity change from 0 to 40427 [ 417.693025][ T9177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.707886][T15448] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 417.722321][T15448] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 417.732044][ T9177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.754914][ T9177] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 417.769087][T15448] F2FS-fs (loop6): invalid crc value [ 417.788749][ T9177] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 417.800223][T15448] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 417.823807][ T9177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.837135][ T4232] uclogic 0003:5543:0522.0022: unknown main item tag 0x2 [ 417.863428][ T4232] uclogic 0003:5543:0522.0022: No inputs registered, leaving [ 417.892578][ T9177] usb 5-1: config 0 descriptor?? [ 417.908143][ T4232] uclogic 0003:5543:0522.0022: hidraw0: USB HID v0.02 Device [HID 5543:0522] on usb-dummy_hcd.0-1/input221 [ 418.026678][T15448] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 418.048681][ T4232] usb 1-1: USB disconnect, device number 28 [ 418.054734][ T6765] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 418.054819][ T6765] mxuport: probe of 6-1:254.0 failed with error -5 [ 418.070552][T15448] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 418.233474][T15470] fido_id[15470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 418.257979][ T6765] usb 6-1: USB disconnect, device number 6 [ 418.265377][T13941] attempt to access beyond end of device [ 418.265377][T13941] loop6: rw=2049, want=45104, limit=40427 [ 418.403234][ T9177] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 418.410676][ T9177] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 418.426716][T15464] loop2: detected capacity change from 0 to 32768 [ 418.436931][ T9177] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 418.448074][ T9177] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 418.457469][ T9177] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 418.465533][ T9177] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 418.484786][ T9177] microsoft 0003:045E:07DA.0023: No inputs registered, leaving [ 418.510302][T15464] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.4652 (15464) [ 418.523656][ T9177] microsoft 0003:045E:07DA.0023: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 418.551458][ T9177] microsoft 0003:045E:07DA.0023: no inputs found [ 418.576461][ T9177] microsoft 0003:045E:07DA.0023: could not initialize ff, continuing anyway [ 418.634942][ T9177] usb 5-1: USB disconnect, device number 28 [ 418.666518][T15464] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 418.705086][T15464] BTRFS info (device loop2): setting nodatasum [ 418.711371][T15464] BTRFS info (device loop2): force zlib compression, level 3 [ 418.779987][T15464] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 418.844562][T15464] BTRFS info (device loop2): use lzo compression, level 0 [ 418.847440][T15483] fido_id[15483]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 418.891074][T15464] BTRFS info (device loop2): turning on flush-on-commit [ 418.913508][T15464] BTRFS info (device loop2): enabling auto defrag [ 418.933421][T15464] BTRFS info (device loop2): metadata ratio 1 [ 418.976688][T15464] BTRFS info (device loop2): turning off flush-on-commit [ 419.001485][T15464] BTRFS info (device loop2): using free space tree [ 419.019017][T15464] BTRFS info (device loop2): has skinny extents [ 419.261787][T15518] loop5: detected capacity change from 0 to 512 [ 419.419453][T15529] netlink: 'syz.4.4663': attribute type 29 has an invalid length. [ 419.433418][T15529] netlink: 'syz.4.4663': attribute type 29 has an invalid length. [ 419.450653][T15529] netlink: 'syz.4.4663': attribute type 29 has an invalid length. [ 419.467684][T15518] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 419.511229][T15531] loop6: detected capacity change from 0 to 8192 [ 419.521818][T15464] BTRFS info (device loop2): enabling ssd optimizations [ 419.639097][T15518] EXT4-fs error (device loop5): ext4_lookup:1858: inode #14: comm syz.5.4661: casefold flag without casefold feature [ 419.674218][T15531] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 419.750919][T15531] REISERFS (device loop6): using ordered data mode [ 419.826814][T15531] reiserfs: using flush barriers [ 419.858423][T15531] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 419.994907][T15531] REISERFS (device loop6): checking transaction log (loop6) [ 420.020833][T15531] REISERFS (device loop6): Using rupasov hash to sort names [ 420.058367][T15531] REISERFS (device loop6): using 3.5.x disk format [ 420.084000][T15531] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 420.157583][T15531] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 420.173638][T15531] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 420.215876][T15531] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 420.457059][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.713677][T15568] loop5: detected capacity change from 0 to 64 [ 420.837931][T15571] loop4: detected capacity change from 0 to 512 [ 420.919211][T15571] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 420.985471][T15571] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 421.057887][T15571] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856e01c, mo2=0102] [ 421.094534][T15571] System zones: 1-12 [ 421.099597][T15571] EXT4-fs (loop4): orphan cleanup on readonly fs [ 421.115197][T15571] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4678: invalid indirect mapped block 2 (level 2) [ 421.165147][T15571] EXT4-fs (loop4): 1 truncate cleaned up [ 421.170971][T15571] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,data=writeback,grpquota,abort,errors=continue. Quota mode: writeback. [ 421.244685][T15571] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 421.286724][T15587] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4683'. [ 421.303018][T15571] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 421.755396][T15560] loop2: detected capacity change from 0 to 32768 [ 421.863506][T15560] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.4666 (15560) [ 421.926907][T15560] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 421.968392][T15560] BTRFS info (device loop2): using free space tree [ 421.996550][T15560] BTRFS info (device loop2): has skinny extents [ 422.069596][T15586] loop6: detected capacity change from 0 to 32768 [ 422.170583][T15621] device vlan3 entered promiscuous mode [ 422.182194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 422.229069][T15586] XFS (loop6): Mounting V5 Filesystem [ 422.301233][T15560] BTRFS info (device loop2): enabling ssd optimizations [ 422.346478][T15586] XFS (loop6): Ending clean mount [ 422.540136][T13941] XFS (loop6): Unmounting Filesystem [ 422.661940][T15653] loop4: detected capacity change from 0 to 512 [ 422.693079][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4703'. [ 422.818260][T15653] EXT4-fs (loop4): Ignoring removed oldalloc option [ 422.891460][T15660] loop5: detected capacity change from 0 to 128 [ 422.905586][ T4181] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop2 scanned by udevd (4181) [ 423.033549][T15660] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 423.088349][T15660] hpfs: filesystem error: improperly stopped [ 423.125213][T15660] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 423.138829][T15660] hpfs: You really don't want any checks? You are crazy... [ 423.172245][T15660] hpfs: hpfs_map_sector(): read error [ 423.179544][T15660] hpfs: code page support is disabled [ 423.204849][T15660] hpfs: hpfs_map_4sectors(): unaligned read [ 423.210992][T15660] hpfs: hpfs_map_4sectors(): unaligned read [ 423.243662][T15660] hpfs: filesystem error: unable to find root dir [ 423.268263][T15660] hpfs: hpfs_map_4sectors(): unaligned read [ 423.344342][T15660] hpfs: hpfs_map_sector(): read error [ 423.360110][T15653] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.4705: dx entry: limit 1024 != root limit 124 [ 423.410301][T15653] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.4705: Corrupt directory, running e2fsck is recommended [ 423.422442][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.482021][T15653] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 423.538520][T15653] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.4705: corrupted in-inode xattr [ 423.619647][T15653] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.4705: couldn't read orphan inode 15 (err -117) [ 423.686594][T15653] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.auto_da_alloc,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback. [ 424.194978][T15702] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4721'. [ 424.262643][T15704] device gretap0 entered promiscuous mode [ 424.293186][T15704] device vlan2 entered promiscuous mode [ 424.383459][ T9176] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 424.531381][T15716] loop6: detected capacity change from 0 to 128 [ 424.631038][T15716] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 424.682772][T15716] hpfs: filesystem error: improperly stopped [ 424.702241][T15716] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 424.719782][T15716] hpfs: You really don't want any checks? You are crazy... [ 424.763704][ T9176] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 991, setting to 64 [ 424.787219][T15716] hpfs: hpfs_map_sector(): read error [ 424.792700][T15716] hpfs: code page support is disabled [ 424.806545][ T9176] usb 3-1: config 0 interface 0 has no altsetting 0 [ 424.815804][ T9176] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 424.850606][T15716] hpfs: hpfs_map_4sectors(): unaligned read [ 424.856746][ T9176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.881340][T15716] hpfs: hpfs_map_4sectors(): unaligned read [ 424.887466][T15716] hpfs: filesystem error: unable to find root dir [ 424.905461][ T9176] usb 3-1: config 0 descriptor?? [ 424.939002][T15735] tipc: Enabling of bearer rejected, failed to enable media [ 424.947786][T15696] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 425.425020][ T9176] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 425.431829][ T9176] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 425.469411][ T9176] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 425.503032][ T9176] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 425.509866][ T9176] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 425.554546][ T9176] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 425.593490][ T9176] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 425.600275][ T9176] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 425.637686][ T9176] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 425.668060][ T9176] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 425.685901][ T9176] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 425.712054][T15776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4753'. [ 425.716510][ T9176] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 425.767152][ T9176] lua 0003:1E7D:2C2E.0024: unknown main item tag 0x0 [ 425.776284][T15779] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.785913][T15779] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.794917][T15779] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.803689][T15779] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.813985][ T9176] lua 0003:1E7D:2C2E.0024: hidraw0: USB HID vff.ff Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 425.849836][ T9176] usb 3-1: USB disconnect, device number 22 [ 425.975712][T15785] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4755'. [ 426.022173][T15785] netlink: 'syz.4.4755': attribute type 9 has an invalid length. [ 426.059596][T15786] fido_id[15786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 426.065700][T15785] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4755'. [ 426.093603][T15785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4755'. [ 426.264997][T15746] loop6: detected capacity change from 0 to 32768 [ 426.331118][T15804] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.351891][T15804] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 426.460060][T15808] loop2: detected capacity change from 0 to 164 [ 426.567455][T15808] Unsupported NM flag settings (240) [ 426.953427][ T4303] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 427.055199][T15842] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 427.197269][ T9176] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 427.204942][ T4303] usb 1-1: Using ep0 maxpacket: 8 [ 427.305607][T15856] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 427.323876][T15856] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 427.333437][T15856] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 427.343840][ T4303] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.369485][T15856] comedi comedi3: 8255: I/O port conflict (0xf0000,4) [ 427.392678][T15856] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 427.415983][T15856] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 427.423990][T15856] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 427.431819][T15856] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 427.447697][T15856] comedi comedi3: 8255: I/O port conflict (0x1000,4) [ 427.453157][ T9176] usb 5-1: Using ep0 maxpacket: 32 [ 427.467953][T15856] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 427.499391][T15856] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 427.529575][T15856] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 427.546742][T15856] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 427.555045][ T4303] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 427.573272][ T9176] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 427.576643][T15856] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 427.581438][ T9176] usb 5-1: config 0 has no interface number 0 [ 427.595815][ T4303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.610717][ T4303] usb 1-1: Product: syz [ 427.615673][ T4303] usb 1-1: Manufacturer: syz [ 427.620498][ T4303] usb 1-1: SerialNumber: syz [ 427.638309][ T4303] usb 1-1: config 0 descriptor?? [ 427.733330][ T9176] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 427.742479][ T9176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.789717][ T9176] usb 5-1: Product: syz [ 427.814982][ T9176] usb 5-1: Manufacturer: syz [ 427.830021][ T9176] usb 5-1: SerialNumber: syz [ 427.851015][ T9176] usb 5-1: config 0 descriptor?? [ 427.852158][ T4303] msi2500 1-1:0.0: Registered as swradio24 [ 427.877991][ T4303] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 427.914699][ T9176] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 427.959679][ T4303] usb 1-1: USB disconnect, device number 29 [ 428.135623][ T9176] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 428.165673][ T9176] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 428.339549][T15866] loop6: detected capacity change from 0 to 32768 [ 428.390398][T15878] loop2: detected capacity change from 0 to 4096 [ 428.468490][T15878] NILFS (loop2): invalid segment: Checksum error in segment payload [ 428.469979][T15872] loop5: detected capacity change from 0 to 32768 [ 428.489221][T15878] NILFS (loop2): trying rollback from an earlier position [ 428.523689][T15878] NILFS (loop2): recovery complete [ 428.542708][T15883] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 428.584495][ T9177] usb 5-1: USB disconnect, device number 29 [ 428.593311][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 428.667167][ T9177] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 428.751070][ T9177] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 428.819606][ T9177] quatech2 5-1:0.51: device disconnected [ 428.881814][T15866] XFS (loop6): Mounting V5 Filesystem [ 428.989503][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.060132][T15866] XFS (loop6): Ending clean mount [ 429.079605][T15866] XFS (loop6): Quotacheck needed: Please wait. [ 429.224282][ T4303] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 429.320500][T15866] XFS (loop6): Quotacheck: Done. [ 429.416844][T13941] XFS (loop6): Unmounting Filesystem [ 429.428445][T15902] loop2: detected capacity change from 0 to 8192 [ 429.529994][T15902] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 429.645772][T15902] REISERFS (device loop2): using ordered data mode [ 429.652396][T15902] reiserfs: using flush barriers [ 429.673858][ T4303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 429.695576][T15902] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 429.707666][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.721294][ T4303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.752412][ T4303] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 429.773974][T15902] REISERFS (device loop2): checking transaction log (loop2) [ 429.793942][ T4303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.830853][T15902] REISERFS (device loop2): Using r5 hash to sort names [ 429.920789][ T4303] usb 1-1: config 0 descriptor?? [ 430.043370][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.180200][T15914] loop5: detected capacity change from 0 to 32768 [ 430.286775][T15929] comedi comedi3: s526: I/O port conflict (0xcf7,64) [ 430.387273][T15914] XFS (loop5): Mounting V5 Filesystem [ 430.415640][ T4303] elan 0003:04F3:0755.0025: unknown main item tag 0x2 [ 430.465202][ T4303] elan 0003:04F3:0755.0025: item fetching failed at offset 4/5 [ 430.529052][ T4303] elan 0003:04F3:0755.0025: Hid Parse failed [ 430.568355][T15948] loop4: detected capacity change from 0 to 512 [ 430.582974][ T4303] elan: probe of 0003:04F3:0755.0025 failed with error -22 [ 430.665735][T15948] EXT4-fs (loop4): Test dummy encryption mode enabled [ 430.675060][ T4303] usb 1-1: USB disconnect, device number 30 [ 430.740955][T15948] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 430.740955][T15948] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 430.740955][T15948] [ 430.741907][T15914] XFS (loop5): Ending clean mount [ 430.792012][T15955] sd 0:0:1:0: device reset [ 430.810539][T15948] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 430.906054][T15948] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.4808: bad orphan inode 131083 [ 430.965939][T13130] XFS (loop5): Unmounting Filesystem [ 430.974677][T15948] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv0,nouser_xattr,,errors=continue. Quota mode: none. [ 431.170114][T15968] loop6: detected capacity change from 0 to 1024 [ 431.346906][T15948] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 431.592755][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.836725][T15984] loop2: detected capacity change from 0 to 4096 [ 431.939960][T15984] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 431.970173][ T4303] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 432.024912][ T4303] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 432.088187][T15984] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 432.280018][T16008] fido_id[16008]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 432.380828][T16004] loop6: detected capacity change from 0 to 4096 [ 432.552154][T16019] loop4: detected capacity change from 0 to 2048 [ 432.661420][T13941] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 432.704854][T13941] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 432.706953][T16019] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.254776][T16043] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 433.480704][T16006] loop5: detected capacity change from 0 to 40427 [ 433.578977][T16006] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 433.626558][T16006] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4 [ 433.691225][T16006] F2FS-fs (loop5): invalid crc value [ 433.706007][T16006] F2FS-fs (loop5): Found nat_bits in checkpoint [ 433.948875][T16075] loop2: detected capacity change from 0 to 16 [ 434.005049][T16006] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 434.030898][T16075] erofs: (device loop2): mounted with root inode @ nid 36. [ 434.340303][T16093] loop4: detected capacity change from 0 to 64 [ 434.419499][T16097] loop2: detected capacity change from 0 to 512 [ 434.492198][T16097] EXT4-fs (loop2): Test dummy encryption mode enabled [ 434.546054][T16097] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 434.546054][T16097] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 434.546054][T16097] [ 434.649830][T16097] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 434.765911][T16097] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.4856: bad orphan inode 131083 [ 434.801270][T16097] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv0,nouser_xattr,,errors=continue. Quota mode: none. [ 435.141650][T16111] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 435.192608][T16111] ntfs3: loop5: Failed to load $Extend. [ 435.221835][T16124] set_capacity_and_notify: 3 callbacks suppressed [ 435.221854][T16124] loop6: detected capacity change from 0 to 256 [ 435.275173][T16122] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 435.276452][T16127] loop2: detected capacity change from 0 to 2048 [ 435.302883][T16127] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 435.333221][T16122] ext4 filesystem being mounted at /976/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.418686][T13130] ntfs3: loop5: ntfs_sync_fs r=9 failed, -22. [ 435.445321][T16124] FAT-fs (loop6): Directory bread(block 64) failed [ 435.452451][T16124] FAT-fs (loop6): Directory bread(block 65) failed [ 435.460777][T16127] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback. [ 435.496184][T13130] ntfs3: loop5: ntfs_evict_inode r=9 failed, -22. [ 435.531111][T16124] FAT-fs (loop6): Directory bread(block 66) failed [ 435.538139][T16124] FAT-fs (loop6): Directory bread(block 67) failed [ 435.546877][T16124] FAT-fs (loop6): Directory bread(block 68) failed [ 435.554826][T16124] FAT-fs (loop6): Directory bread(block 69) failed [ 435.561529][T16124] FAT-fs (loop6): Directory bread(block 70) failed [ 435.568665][T16124] FAT-fs (loop6): Directory bread(block 71) failed [ 435.583108][T16127] ext4 filesystem being mounted at /953/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.618086][T16124] FAT-fs (loop6): Directory bread(block 72) failed [ 435.667831][T16124] FAT-fs (loop6): Directory bread(block 73) failed [ 435.776167][T16141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4868'. [ 435.983855][T16147] device ipvlan2 entered promiscuous mode [ 436.138566][T16156] binder: 16154:16156 ioctl c018620c 200000000040 returned -22 [ 436.370742][T16172] loop4: detected capacity change from 0 to 512 [ 436.402528][T16172] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 436.468990][T16172] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.4880: invalid indirect mapped block 4294967295 (level 0) [ 436.539276][T16172] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.4880: invalid indirect mapped block 4294967295 (level 1) [ 436.672035][T16172] EXT4-fs (loop4): 1 orphan inode deleted [ 436.694063][T16172] EXT4-fs (loop4): 1 truncate cleaned up [ 436.713955][T16172] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x00000000000009f8,lazytime,jqfmt=vfsv1,block_validity,nojournal_checksum,mblk_io_submit,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 437.096086][T16212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4891'. [ 437.521124][T16235] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.4902'. [ 437.723485][T16253] netlink: 'syz.2.4910': attribute type 3 has an invalid length. [ 437.747841][T16254] loop5: detected capacity change from 0 to 512 [ 437.829758][T16254] EXT4-fs warning (device loop5): ext4_multi_mount_protect:326: fsck is running on the filesystem [ 437.841140][T16254] EXT4-fs warning (device loop5): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 438.014477][T16268] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4915'. [ 438.225429][ T9174] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 438.482946][ T9174] usb 5-1: Using ep0 maxpacket: 32 [ 438.533933][T16279] loop2: detected capacity change from 0 to 8192 [ 438.647647][T16279] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 438.745438][T16279] REISERFS (device loop2): using ordered data mode [ 438.763696][ T9174] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 438.788982][ T9174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.800783][T16279] reiserfs: using flush barriers [ 438.839032][T16279] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 11, max trans age 11 [ 438.874884][ T9174] usb 5-1: Product: syz [ 438.880156][ T9174] usb 5-1: Manufacturer: syz [ 438.916414][ T9174] usb 5-1: SerialNumber: syz [ 438.928514][T16279] REISERFS (device loop2): checking transaction log (loop2) [ 438.964995][ T9174] usb 5-1: config 0 descriptor?? [ 439.020736][T16279] REISERFS (device loop2): Using r5 hash to sort names [ 439.041465][T16279] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 439.056996][ T9174] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 439.065463][ T9174] dvb-usb: bulk message failed: -22 (2/0) [ 439.090062][ T9174] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 439.114881][ T9174] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 439.125075][ T9174] usb 5-1: media controller created [ 439.143162][T16305] xt_HMARK: spi-set and port-set can't be combined [ 439.146966][T16279] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 439.172382][ T9174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 439.191726][ T9174] usb 5-1: selecting invalid altsetting 7 [ 439.197946][ T9174] cxusb: set interface failed [ 439.203301][ T9174] dvb-usb: bulk message failed: -22 (1/0) [ 439.234673][T16262] dvb-usb: bulk message failed: -22 (3/0) [ 439.362709][ T9174] DVB: Unable to find symbol lgdt330x_attach() [ 439.378727][ T9174] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 439.486703][T16315] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:18980 [ 439.611171][ T9174] rc_core: IR keymap rc-dvico-portable not found [ 439.636668][ T9174] Registered IR keymap rc-empty [ 439.642331][ T9174] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 439.705783][ T9174] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input35 [ 439.731898][T16327] usb usb8: usbfs: process 16327 (syz.6.4940) did not claim interface 0 before use [ 439.745146][ T9174] dvb-usb: schedule remote query interval to 100 msecs. [ 439.754940][ T9174] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 439.790202][ T9174] usb 5-1: USB disconnect, device number 30 [ 439.944150][ T9174] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 440.116035][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.116097][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.235296][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4950'. [ 440.342557][T16354] loop6: detected capacity change from 0 to 1024 [ 440.476660][T16354] hfsplus: b-tree write err: -5, ino 2 [ 440.594907][ T4255] hfsplus: b-tree write err: -5, ino 25 [ 440.600700][ T4255] hfsplus: b-tree write err: -5, ino 4 [ 440.620722][ T4255] hfsplus: b-tree write err: -5, ino 2 [ 440.664321][ T4255] hfsplus: b-tree write err: -5, ino 26 [ 441.111742][T16389] loop6: detected capacity change from 0 to 16 [ 441.153194][T14470] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 441.228218][T16389] erofs: (device loop6): mounted with root inode @ nid 36. [ 441.259422][T16397] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 441.283977][ T26] audit: type=1800 audit(1778307116.538:69): pid=16389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4970" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 441.304569][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.563340][T14470] usb 6-1: config 118 interface 0 has no altsetting 0 [ 441.602207][T16414] loop2: detected capacity change from 0 to 8 [ 441.663987][T16414] SQUASHFS error: Unable to read directory block [629:46] [ 441.723168][T14470] usb 6-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 441.743075][T14470] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.752331][T14470] usb 6-1: Product: syz [ 441.798303][T14470] usb 6-1: Manufacturer: syz [ 441.813673][T14470] usb 6-1: SerialNumber: syz [ 441.850340][ T4232] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 442.085241][T14470] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 442.097737][T16422] loop2: detected capacity change from 0 to 2048 [ 442.118691][T14470] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 442.163468][T14470] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 442.203068][T16422] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.203531][T14470] usb 6-1: media controller created [ 442.261299][T14470] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 442.270130][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 442.304312][T16410] loop6: detected capacity change from 0 to 32768 [ 442.356050][T16410] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.4979 (16410) [ 442.369434][ T4232] usb 5-1: config 9 has an invalid interface number: 62 but max is 1 [ 442.369466][ T4232] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 442.369488][ T4232] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 442.369511][ T4232] usb 5-1: config 9 has no interface number 0 [ 442.369543][ T4232] usb 5-1: config 9 interface 62 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 442.459228][T16425] loop2: detected capacity change from 0 to 256 [ 442.510576][T14470] DVB: Unable to find symbol mt352_attach() [ 442.530467][T16410] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 442.531455][T14470] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 442.547595][T16410] BTRFS info (device loop6): using free space tree [ 442.565966][T16425] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 442.580207][ T4232] usb 5-1: config 9 interface 62 has no altsetting 0 [ 442.589496][T14470] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input36 [ 442.604511][T14470] dvb-usb: schedule remote query interval to 100 msecs. [ 442.611770][T14470] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 442.619113][T16410] BTRFS info (device loop6): has skinny extents [ 442.753771][ T4232] usb 5-1: New USB device found, idVendor=03eb, idProduct=4343, bcdDevice=8d.99 [ 442.788003][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.817364][ T4232] usb 5-1: Product: syz [ 442.832450][ T4232] usb 5-1: Manufacturer: syz [ 442.842289][ T4232] usb 5-1: SerialNumber: syz [ 442.893090][T14470] dvb_usb_m920x: probe of 6-1:118.0 failed with error -71 [ 442.900993][ T9177] m920x_read = error: -71 [ 442.909977][ T9177] dvb-usb: error while querying for an remote control event. [ 442.974692][T14470] usb 6-1: USB disconnect, device number 7 [ 443.021340][T16410] BTRFS info (device loop6): enabling ssd optimizations [ 443.117976][ T9177] usb 5-1: USB disconnect, device number 31 [ 443.145563][ T4232] m920x_read = error: -19 [ 443.150079][ T4232] dvb-usb: error while querying for an remote control event. [ 443.341570][T14468] m920x_read = error: -19 [ 443.350622][T14468] dvb-usb: error while querying for an remote control event. [ 443.791247][ T4231] m920x_read = error: -19 [ 443.791315][ T4231] dvb-usb: error while querying for an remote control event. [ 443.893311][ T1108] m920x_read = error: -19 [ 443.893335][ T1108] dvb-usb: error while querying for an remote control event. [ 444.005564][ T1108] m920x_read = error: -19 [ 444.012765][ T1108] dvb-usb: error while querying for an remote control event. [ 444.145146][ T1108] m920x_read = error: -19 [ 444.145173][ T1108] dvb-usb: error while querying for an remote control event. [ 444.253812][ T4231] m920x_read = error: -19 [ 444.253837][ T4231] dvb-usb: error while querying for an remote control event. [ 444.363598][ T4231] m920x_read = error: -19 [ 444.363620][ T4231] dvb-usb: error while querying for an remote control event. [ 444.379609][T16488] loop6: detected capacity change from 0 to 512 [ 444.428613][T16490] loop2: detected capacity change from 0 to 1024 [ 444.428814][T16492] loop5: detected capacity change from 0 to 8 [ 444.466629][T16488] EXT4-fs (loop6): Ignoring removed nobh option [ 444.467401][T16488] EXT4-fs (loop6): Test dummy encryption mode enabled [ 444.475843][ T4231] m920x_read = error: -19 [ 444.475866][ T4231] dvb-usb: error while querying for an remote control event. [ 444.490017][T16490] EXT4-fs (loop2): Ignoring removed orlov option [ 444.554014][T16488] EXT4-fs error (device loop6): __ext4_iget:4919: inode #11: block 1: comm syz.6.5008: invalid block [ 444.555607][T16488] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.5008: couldn't read orphan inode 11 (err -117) [ 444.555967][T16488] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,noauto_da_alloc,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 444.558496][T16490] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 444.583743][ T4231] m920x_read = error: -19 [ 444.583769][ T4231] dvb-usb: error while querying for an remote control event. [ 444.693029][ T1108] m920x_read = error: -19 [ 444.693055][ T1108] dvb-usb: error while querying for an remote control event. [ 444.820041][ T4231] m920x_read = error: -19 [ 444.820067][ T4231] dvb-usb: error while querying for an remote control event. [ 444.954396][ T1108] m920x_read = error: -19 [ 444.954429][ T1108] dvb-usb: error while querying for an remote control event. [ 445.066011][ T9182] m920x_read = error: -19 [ 445.066036][ T9182] dvb-usb: error while querying for an remote control event. [ 445.210426][ T1108] m920x_read = error: -19 [ 445.210450][ T1108] dvb-usb: error while querying for an remote control event. [ 445.313863][ T4231] m920x_read = error: -19 [ 445.313890][ T4231] dvb-usb: error while querying for an remote control event. [ 445.340679][T16515] loop2: detected capacity change from 0 to 4096 [ 445.350043][T16520] loop5: detected capacity change from 0 to 256 [ 445.424763][ T4231] m920x_read = error: -19 [ 445.429298][ T4231] dvb-usb: error while querying for an remote control event. [ 445.555919][ T4231] m920x_read = error: -19 [ 445.560633][T16528] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 445.578373][ T4231] dvb-usb: error while querying for an remote control event. [ 445.732997][ T4231] m920x_read = error: -19 [ 445.742897][ T4231] dvb-usb: error while querying for an remote control event. [ 445.796335][T16534] loop6: detected capacity change from 0 to 512 [ 445.875818][ T4231] m920x_read = error: -19 [ 445.880242][ T4231] dvb-usb: error while querying for an remote control event. [ 445.982037][T16548] netlink: 'syz.2.5035': attribute type 2 has an invalid length. [ 446.003133][ T4231] m920x_read = error: -19 [ 446.007593][ T4231] dvb-usb: error while querying for an remote control event. [ 446.104980][T16534] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000100,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 446.133032][ T4231] m920x_read = error: -19 [ 446.137660][ T4231] dvb-usb: error while querying for an remote control event. [ 446.199567][T16560] loop2: detected capacity change from 0 to 736 [ 446.217770][T16534] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 446.241146][T16556] loop5: detected capacity change from 0 to 1024 [ 446.275426][ T4231] m920x_read = error: -19 [ 446.279834][ T4231] dvb-usb: error while querying for an remote control event. [ 446.425292][ T4231] m920x_read = error: -19 [ 446.432983][ T4231] dvb-usb: error while querying for an remote control event. [ 446.555422][ T154] hfsplus: b-tree write err: -5, ino 8 [ 446.583152][ T9182] m920x_read = error: -19 [ 446.587798][ T9182] dvb-usb: error while querying for an remote control event. [ 446.692428][T16572] binder: BINDER_SET_CONTEXT_MGR already set [ 446.725946][ T4231] m920x_read = error: -19 [ 446.730397][ T4231] dvb-usb: error while querying for an remote control event. [ 446.739622][T16572] binder: 16570:16572 ioctl 40046207 0 returned -16 [ 446.904760][ T4231] m920x_read = error: -19 [ 446.909173][ T4231] dvb-usb: error while querying for an remote control event. [ 447.064945][ T4231] m920x_read = error: -19 [ 447.073636][T16554] loop4: detected capacity change from 0 to 40427 [ 447.079902][ T4231] dvb-usb: error while querying for an remote control event. [ 447.133807][T16554] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 447.140252][T16554] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 447.221208][T16554] F2FS-fs (loop4): invalid crc value [ 447.227743][ T4231] m920x_read = error: -19 [ 447.232539][ T4231] dvb-usb: error while querying for an remote control event. [ 447.293972][T16554] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 447.404540][ T4231] m920x_read = error: -19 [ 447.408959][ T4231] dvb-usb: error while querying for an remote control event. [ 447.500471][T16604] netlink: 'syz.2.5060': attribute type 1 has an invalid length. [ 447.579149][T16554] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 447.588993][ T4231] m920x_read = error: -19 [ 447.596300][ T4231] dvb-usb: error while querying for an remote control event. [ 447.605917][T16554] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 447.703213][T16609] netlink: 'syz.2.5062': attribute type 29 has an invalid length. [ 447.722921][ T4231] m920x_read = error: -19 [ 447.727340][ T4231] dvb-usb: error while querying for an remote control event. [ 447.756632][T16613] loop5: detected capacity change from 0 to 1024 [ 447.776991][T16609] netlink: 'syz.2.5062': attribute type 29 has an invalid length. [ 447.816050][T16614] netlink: 'syz.2.5062': attribute type 29 has an invalid length. [ 447.854541][ T4231] m920x_read = error: -19 [ 447.858960][ T4231] dvb-usb: error while querying for an remote control event. [ 447.901035][T16613] hfsplus: small file entry [ 448.008673][ T9182] m920x_read = error: -19 [ 448.013564][ T9182] dvb-usb: error while querying for an remote control event. [ 448.124222][ T9182] m920x_read = error: -19 [ 448.128722][ T9182] dvb-usb: error while querying for an remote control event. [ 448.303094][ T4231] m920x_read = error: -19 [ 448.303119][ T4231] dvb-usb: error while querying for an remote control event. [ 448.413047][ T9182] m920x_read = error: -19 [ 448.413071][ T9182] dvb-usb: error while querying for an remote control event. [ 448.415645][T16600] loop6: detected capacity change from 0 to 32768 [ 448.523295][ T9182] m920x_read = error: -19 [ 448.523320][ T9182] dvb-usb: error while querying for an remote control event. [ 448.601509][T16638] netlink: 'syz.4.5066': attribute type 4 has an invalid length. [ 448.633055][ T9182] m920x_read = error: -19 [ 448.633083][ T9182] dvb-usb: error while querying for an remote control event. [ 448.743560][ T9182] m920x_read = error: -19 [ 448.747963][ T9182] dvb-usb: error while querying for an remote control event. [ 448.896451][ T9176] m920x_read = error: -19 [ 448.900867][ T9176] dvb-usb: error while querying for an remote control event. [ 449.043181][ T9176] m920x_read = error: -19 [ 449.047747][ T9176] dvb-usb: error while querying for an remote control event. [ 449.174570][ T9176] m920x_read = error: -19 [ 449.179035][ T9176] dvb-usb: error while querying for an remote control event. [ 449.315113][ T9176] m920x_read = error: -19 [ 449.319645][ T9176] dvb-usb: error while querying for an remote control event. [ 449.459967][ T9176] m920x_read = error: -19 [ 449.464614][ T9176] dvb-usb: error while querying for an remote control event. [ 449.573266][ T9176] m920x_read = error: -19 [ 449.577772][ T9176] dvb-usb: error while querying for an remote control event. [ 449.677127][T16678] loop6: detected capacity change from 0 to 8192 [ 449.732923][ T9176] m920x_read = error: -19 [ 449.737639][ T9176] dvb-usb: error while querying for an remote control event. [ 449.819593][T16678] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 449.872115][T16678] REISERFS (device loop6): using ordered data mode [ 449.880074][ T9176] m920x_read = error: -19 [ 449.892888][ T9176] dvb-usb: error while querying for an remote control event. [ 449.917288][T16678] reiserfs: using flush barriers [ 449.943108][T16678] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 11, max trans age 11 [ 449.971219][T16672] loop4: detected capacity change from 0 to 32768 [ 449.978641][T16678] REISERFS (device loop6): checking transaction log (loop6) [ 450.004242][ T9176] m920x_read = error: -19 [ 450.013047][T16678] REISERFS (device loop6): Using r5 hash to sort names [ 450.020200][ T9176] dvb-usb: error while querying for an remote control event. [ 450.035308][T16678] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 450.072997][T16678] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 450.106495][T16672] ERROR: (device loop4): dbAllocAG: Corrupt dmapctl page [ 450.106495][T16672] [ 450.151239][T16672] ERROR: (device loop4): remounting filesystem as read-only [ 450.163025][ T9176] m920x_read = error: -19 [ 450.169254][ T9176] dvb-usb: error while querying for an remote control event. [ 450.264869][T16672] ERROR: (device loop4): dbDiscardAG: -EIO [ 450.264869][T16672] [ 450.303027][ T9176] m920x_read = error: -19 [ 450.307720][ T9176] dvb-usb: error while querying for an remote control event. [ 450.424444][ T9176] m920x_read = error: -19 [ 450.428917][ T9176] dvb-usb: error while querying for an remote control event. [ 450.545279][T16706] loop6: detected capacity change from 0 to 164 [ 450.621469][T16706] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 450.630618][ T5353] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 450.670426][ T9182] m920x_read = error: -19 [ 450.673472][T16706] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 450.683030][ T9182] dvb-usb: error while querying for an remote control event. [ 450.735132][T16706] Symlink component flag not implemented [ 450.740958][T16706] Symlink component flag not implemented [ 450.752990][ T9182] Bluetooth: hci1: command 0x0405 tx timeout [ 450.786400][T16709] Symlink component flag not implemented (7) [ 450.793488][ T9182] m920x_read = error: -19 [ 450.797880][ T9182] dvb-usb: error while querying for an remote control event. [ 450.843592][T16709] Symlink component flag not implemented (116) [ 450.860375][T16709] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 450.902918][T16709] rock: directory entry would overflow storage [ 450.909141][T16709] rock: sig=0x4f50, size=4, remaining=3 [ 450.923421][ T5353] usb 3-1: Using ep0 maxpacket: 16 [ 450.924025][ T9182] m920x_read = error: -19 [ 450.943363][ T9182] dvb-usb: error while querying for an remote control event. [ 450.973280][T16709] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 450.973322][T16713] loop4: detected capacity change from 0 to 512 [ 451.030472][T16687] loop5: detected capacity change from 0 to 32768 [ 451.053895][ T5353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.081941][ T9182] m920x_read = error: -19 [ 451.087684][ T5353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.097146][ T9182] dvb-usb: error while querying for an remote control event. [ 451.173248][ T5353] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 451.195713][ T5353] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 451.211341][ T5353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.235635][ T9182] m920x_read = error: -19 [ 451.240087][ T9182] dvb-usb: error while querying for an remote control event. [ 451.247507][ T5353] usb 3-1: config 0 descriptor?? [ 451.265170][T16713] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 451.281713][T16713] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.5108: corrupted in-inode xattr [ 451.313874][T16713] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.5108: couldn't read orphan inode 15 (err -117) [ 451.356121][T16713] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,nogrpid,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000008,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 451.393841][ C0] vkms_vblank_simulate: vblank timer overrun [ 451.413448][ T9182] m920x_read = error: -19 [ 451.417850][ T9182] dvb-usb: error while querying for an remote control event. [ 451.534367][ T4231] m920x_read = error: -19 [ 451.538814][ T4231] dvb-usb: error while querying for an remote control event. [ 451.685857][ T4231] m920x_read = error: -19 [ 451.693290][ T4231] dvb-usb: error while querying for an remote control event. [ 451.745942][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 451.781179][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 451.802358][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 451.823537][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 451.833032][ T4231] m920x_read = error: -19 [ 451.837567][ T4231] dvb-usb: error while querying for an remote control event. [ 451.854155][T16734] loop4: detected capacity change from 0 to 1024 [ 451.865939][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 451.890215][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 451.920064][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 451.943474][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 451.964834][ T4231] m920x_read = error: -19 [ 451.969611][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 451.978328][ T4231] dvb-usb: error while querying for an remote control event. [ 452.018756][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 452.053468][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 452.081199][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 452.091691][T16738] loop5: detected capacity change from 0 to 2048 [ 452.120617][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 452.132954][ T4231] m920x_read = error: -19 [ 452.137415][ T4231] dvb-usb: error while querying for an remote control event. [ 452.145230][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 452.145264][ T5353] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 452.163222][ T5353] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0027/input/input37 [ 452.201300][T16744] loop6: detected capacity change from 0 to 1024 [ 452.225837][T16745] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 452.264268][ T26] audit: type=1800 audit(1778307127.518:70): pid=16738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5115" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 452.268595][ T5353] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 452.289756][ T9176] m920x_read = error: -19 [ 452.320196][ T5353] usb 3-1: USB disconnect, device number 23 [ 452.332942][ T9176] dvb-usb: error while querying for an remote control event. [ 452.392355][ T6587] hfsplus: b-tree write err: -5, ino 25 [ 452.436905][T16744] hfsplus: bad catalog entry type [ 452.453618][ T6587] hfsplus: b-tree write err: -5, ino 4 [ 452.494903][ T9176] m920x_read = error: -19 [ 452.499326][ T9176] dvb-usb: error while querying for an remote control event. [ 452.500401][ T6587] hfsplus: b-tree write err: -5, ino 2 [ 452.566957][ T4255] hfsplus: b-tree write err: -5, ino 25 [ 452.603353][ T4255] hfsplus: b-tree write err: -5, ino 4 [ 452.609054][ T4255] hfsplus: b-tree write err: -5, ino 2 [ 452.660834][ T4231] m920x_read = error: -19 [ 452.675861][ T4231] dvb-usb: error while querying for an remote control event. [ 452.690970][T16748] fido_id[16748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 452.732021][T16752] loop2: detected capacity change from 0 to 512 [ 452.884317][T16752] EXT4-fs (loop2): orphan cleanup on readonly fs [ 452.891798][ T4262] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 452.902089][ T9176] m920x_read = error: -19 [ 452.907630][ T9176] dvb-usb: error while querying for an remote control event. [ 452.937872][T16752] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 452.988105][T16752] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 452.998276][T16752] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.5130: Failed to acquire dquot type 1 [ 453.010727][T16752] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 453.074703][ T9176] m920x_read = error: -19 [ 453.082405][ T9176] dvb-usb: error while querying for an remote control event. [ 453.132076][T16752] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 453.163936][T16752] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.5130: Failed to acquire dquot type 1 [ 453.228850][T16752] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5130: bg 0: block 248: padding at end of block bitmap is not set [ 453.237977][ T9176] m920x_read = error: -19 [ 453.253308][ T9176] dvb-usb: error while querying for an remote control event. [ 453.260213][T16767] loop4: detected capacity change from 0 to 512 [ 453.284083][T16752] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 453.305598][T16752] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 453.324131][T16752] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 453.360304][T16752] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.5130: Failed to acquire dquot type 1 [ 453.383792][ T9176] m920x_read = error: -19 [ 453.383824][ T9176] dvb-usb: error while querying for an remote control event. [ 453.386415][T16752] EXT4-fs (loop2): 1 orphan inode deleted [ 453.386691][T16752] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 453.436897][T16767] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.5135: iget: bad i_size value: 38620345925642 [ 453.437425][T16767] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.5135: couldn't read orphan inode 15 (err -117) [ 453.437768][T16767] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 453.466311][T16767] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.5135: bg 0: block 5: invalid block bitmap [ 453.484217][ T4262] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=d5.70 [ 453.484254][ T4262] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.484279][ T4262] usb 6-1: Product: syz [ 453.484296][ T4262] usb 6-1: Manufacturer: syz [ 453.484315][ T4262] usb 6-1: SerialNumber: syz [ 453.487966][ T4262] usb 6-1: config 0 descriptor?? [ 453.494491][ T9176] m920x_read = error: -19 [ 453.560433][ T4262] kl5kusb105 6-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 453.611166][ T4262] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 453.631349][T16752] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 453.678241][T16774] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.5130: deleted inode referenced: 12 [ 453.706488][T16752] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 453.718104][T16752] ext4 filesystem being remounted at /1013/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.773298][ T4262] usb 6-1: USB disconnect, device number 8 [ 453.784410][ T4262] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 453.799706][ T4262] kl5kusb105 6-1:0.0: device disconnected [ 453.849211][ T9176] dvb-usb: error while querying for an remote control event. [ 453.930158][T16780] loop4: detected capacity change from 0 to 1024 [ 453.976636][ T4231] m920x_read = error: -19 [ 453.987951][ T4231] dvb-usb: error while querying for an remote control event. [ 454.033724][T16780] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 454.096495][T16782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5141'. [ 454.133127][ T4231] m920x_read = error: -19 [ 454.137800][ T4231] dvb-usb: error while querying for an remote control event. [ 454.273699][ T4231] m920x_read = error: -19 [ 454.278138][ T4231] dvb-usb: error while querying for an remote control event. [ 454.472998][ T9176] m920x_read = error: -19 [ 454.477422][ T9176] dvb-usb: error while querying for an remote control event. [ 454.546372][T16801] device macsec1 entered promiscuous mode [ 454.552199][T16801] device virt_wifi0 entered promiscuous mode [ 454.592100][T16807] loop5: detected capacity change from 0 to 512 [ 454.627243][ T4231] m920x_read = error: -19 [ 454.631984][ T4231] dvb-usb: error while querying for an remote control event. [ 454.691836][T16807] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.5153: invalid indirect mapped block 256 (level 2) [ 454.793725][T16807] EXT4-fs (loop5): 2 truncates cleaned up [ 454.799651][T16807] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,nombcache,,errors=continue. Quota mode: writeback. [ 454.865069][ T4231] m920x_read = error: -19 [ 454.872885][ T4231] dvb-usb: error while querying for an remote control event. [ 455.035215][ T4231] m920x_read = error: -19 [ 455.043859][ T4231] dvb-usb: error while querying for an remote control event. [ 455.139730][T16828] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5159'. [ 455.182614][ T9182] m920x_read = error: -19 [ 455.187415][ T9182] dvb-usb: error while querying for an remote control event. [ 455.212763][T16824] EXT4-fs (loop6): Test dummy encryption mode enabled [ 455.220243][T16824] EXT4-fs (loop6): Ignoring removed oldalloc option [ 455.333846][ T9182] m920x_read = error: -19 [ 455.338293][ T9182] dvb-usb: error while querying for an remote control event. [ 455.380066][T16824] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 455.511101][T16824] EXT4-fs warning (device loop6): verify_group_input:165: Last group not full [ 455.561626][ T9182] m920x_read = error: -19 [ 455.583140][ T9182] dvb-usb: error while querying for an remote control event. [ 455.589403][T16841] syz.0.5166 (16841) used greatest stack depth: 19760 bytes left [ 455.686606][T16805] set_capacity_and_notify: 2 callbacks suppressed [ 455.686624][T16805] loop2: detected capacity change from 0 to 32768 [ 455.712591][T16848] xt_policy: too many policy elements [ 455.753860][ T9182] m920x_read = error: -19 [ 455.758275][ T9182] dvb-usb: error while querying for an remote control event. [ 455.899805][T16863] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5174'. [ 455.966252][ T4231] m920x_read = error: -19 [ 455.977610][ T4231] dvb-usb: error while querying for an remote control event. [ 456.059270][T16805] XFS (loop2): Mounting V5 Filesystem [ 456.098410][ T4231] m920x_read = error: -19 [ 456.105312][ T4231] dvb-usb: error while querying for an remote control event. [ 456.232969][ T9182] m920x_read = error: -19 [ 456.241491][ T9182] dvb-usb: error while querying for an remote control event. [ 456.363986][ T9182] m920x_read = error: -19 [ 456.368409][ T9182] dvb-usb: error while querying for an remote control event. [ 456.377672][T16805] XFS (loop2): Ending clean mount [ 456.413699][T16805] XFS (loop2): Quotacheck needed: Please wait. [ 456.500182][ T9182] m920x_read = error: -19 [ 456.506420][ T9182] dvb-usb: error while querying for an remote control event. [ 456.626306][T16805] XFS (loop2): Quotacheck: Done. [ 456.655649][ T9176] m920x_read = error: -19 [ 456.666106][ T9176] dvb-usb: error while querying for an remote control event. [ 456.814225][ T9176] m920x_read = error: -19 [ 456.818932][ T9176] dvb-usb: error while querying for an remote control event. [ 456.858964][ T4195] XFS (loop2): Unmounting Filesystem [ 456.916610][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5186'. [ 456.931726][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5186'. [ 456.950241][T16891] netlink: 'syz.4.5186': attribute type 14 has an invalid length. [ 456.960995][ T9176] m920x_read = error: -19 [ 456.966482][ T9176] dvb-usb: error while querying for an remote control event. [ 456.975099][T16891] netlink: 'syz.4.5186': attribute type 11 has an invalid length. [ 457.083059][ T9176] m920x_read = error: -19 [ 457.087857][ T9176] dvb-usb: error while querying for an remote control event. [ 457.214162][ T9176] m920x_read = error: -19 [ 457.218676][ T9176] dvb-usb: error while querying for an remote control event. [ 457.293643][T16904] netlink: 'syz.4.5193': attribute type 1 has an invalid length. [ 457.344205][ T9182] m920x_read = error: -19 [ 457.348612][ T9182] dvb-usb: error while querying for an remote control event. [ 457.480532][T14470] m920x_read = error: -19 [ 457.498508][T14470] dvb-usb: error while querying for an remote control event. [ 457.535056][ T9176] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 457.622964][T14470] m920x_read = error: -19 [ 457.627493][T14470] dvb-usb: error while querying for an remote control event. [ 457.753562][T14470] m920x_read = error: -19 [ 457.757969][T14470] dvb-usb: error while querying for an remote control event. [ 457.793363][ T9176] usb 6-1: Using ep0 maxpacket: 8 [ 457.898090][T14470] m920x_read = error: -19 [ 457.902761][T14470] dvb-usb: error while querying for an remote control event. [ 457.966267][ T9176] usb 6-1: unable to get BOS descriptor or descriptor too short [ 458.061003][T14470] m920x_read = error: -19 [ 458.066988][ T9176] usb 6-1: config 8 has an invalid interface number: 187 but max is 0 [ 458.085445][ T9176] usb 6-1: config 8 has no interface number 0 [ 458.097568][T14470] dvb-usb: error while querying for an remote control event. [ 458.109183][ T9176] usb 6-1: config 8 interface 187 altsetting 72 has an invalid endpoint with address 0xEB, skipping [ 458.129987][ T9176] usb 6-1: config 8 interface 187 has no altsetting 0 [ 458.233054][ T9182] m920x_read = error: -19 [ 458.237695][ T9182] dvb-usb: error while querying for an remote control event. [ 458.303491][ T9176] usb 6-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=7b.bd [ 458.318694][ T9176] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.357762][ T9176] usb 6-1: Product: syz [ 458.362012][ T9176] usb 6-1: Manufacturer: syz [ 458.388325][ T9176] usb 6-1: SerialNumber: syz [ 458.414583][ T9182] m920x_read = error: -19 [ 458.419127][ T9182] dvb-usb: error while querying for an remote control event. [ 458.581890][ T4231] m920x_read = error: -19 [ 458.586899][ T4231] dvb-usb: error while querying for an remote control event. [ 458.605742][T16950] loop4: detected capacity change from 0 to 256 [ 458.694167][ T9176] ums-sddr55 6-1:8.187: USB Mass Storage device detected [ 458.731911][ T9182] m920x_read = error: -19 [ 458.742005][ T9182] dvb-usb: error while querying for an remote control event. [ 458.819293][ T9176] usb 6-1: USB disconnect, device number 9 [ 458.863156][ T9182] m920x_read = error: -19 [ 458.867574][ T9182] dvb-usb: error while querying for an remote control event. [ 458.993183][ T9182] m920x_read = error: -19 [ 458.998081][ T9182] dvb-usb: error while querying for an remote control event. [ 459.112905][ T9182] m920x_read = error: -19 [ 459.117422][ T9182] dvb-usb: error while querying for an remote control event. [ 459.243357][ T9182] m920x_read = error: -19 [ 459.247770][ T9182] dvb-usb: error while querying for an remote control event. [ 459.413757][ T9182] m920x_read = error: -19 [ 459.442896][ T9182] dvb-usb: error while querying for an remote control event. [ 459.554925][ T9182] m920x_read = error: -19 [ 459.559353][ T9182] dvb-usb: error while querying for an remote control event. [ 459.705383][ T9176] m920x_read = error: -19 [ 459.709815][ T9176] dvb-usb: error while querying for an remote control event. [ 459.843299][ T9176] m920x_read = error: -19 [ 459.847717][ T9176] dvb-usb: error while querying for an remote control event. [ 459.988439][ T9182] m920x_read = error: -19 [ 459.993296][ T9182] dvb-usb: error while querying for an remote control event. [ 460.104381][ T9182] m920x_read = error: -19 [ 460.108792][ T9182] dvb-usb: error while querying for an remote control event. [ 460.173667][T17022] loop5: detected capacity change from 0 to 1024 [ 460.253010][ T9182] m920x_read = error: -19 [ 460.257530][ T9182] dvb-usb: error while querying for an remote control event. [ 460.393588][ T9182] m920x_read = error: -19 [ 460.398097][ T9182] dvb-usb: error while querying for an remote control event. [ 460.439074][T17030] program syz.2.5252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.566646][ T9182] m920x_read = error: -19 [ 460.571119][ T9182] dvb-usb: error while querying for an remote control event. [ 460.770000][ T9176] m920x_read = error: -19 [ 460.774911][ T9176] dvb-usb: error while querying for an remote control event. [ 460.824079][T17042] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5258'. [ 460.834516][T17044] netlink: 'syz.2.5259': attribute type 5 has an invalid length. [ 460.901342][ T9176] m920x_read = error: -19 [ 460.916415][ T9176] dvb-usb: error while querying for an remote control event. [ 461.051101][T17055] mkiss: ax0: crc mode is auto. [ 461.066162][ T9176] m920x_read = error: -19 [ 461.070623][ T9176] dvb-usb: error while querying for an remote control event. [ 461.225134][T17063] loop5: detected capacity change from 0 to 2048 [ 461.243540][ T9176] m920x_read = error: -19 [ 461.248115][ T9176] dvb-usb: error while querying for an remote control event. [ 461.310851][T17063] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 461.382944][ T9176] m920x_read = error: -19 [ 461.387475][ T9176] dvb-usb: error while querying for an remote control event. [ 461.394848][ T5353] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 461.405428][T17063] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 461.426778][T17063] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 461.463482][T17063] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 461.505942][T17063] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 461.537798][T17063] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 461.553006][T17063] UDF-fs: Scanning with blocksize 512 failed [ 461.563120][ T9176] m920x_read = error: -19 [ 461.567530][ T9176] dvb-usb: error while querying for an remote control event. [ 461.585534][T17063] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 461.614299][T17063] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 461.643696][ T5353] usb 3-1: Using ep0 maxpacket: 32 [ 461.659372][T17063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 461.706837][ T9176] m920x_read = error: -19 [ 461.711241][ T9176] dvb-usb: error while querying for an remote control event. [ 461.763678][ T5353] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 461.792507][ T5353] usb 3-1: config 2 has no interface number 0 [ 461.809697][ T5353] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 461.834914][ T5353] usb 3-1: config 2 interface 88 has no altsetting 0 [ 461.876378][ T1108] m920x_read = error: -19 [ 461.880801][ T1108] dvb-usb: error while querying for an remote control event. [ 462.023196][ T1108] m920x_read = error: -19 [ 462.027951][ T1108] dvb-usb: error while querying for an remote control event. [ 462.043380][ T5353] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 462.065021][ T5353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.083417][T17078] loop5: detected capacity change from 0 to 256 [ 462.103683][ T5353] usb 3-1: Product: syz [ 462.107921][ T5353] usb 3-1: Manufacturer: syz [ 462.112590][ T5353] usb 3-1: SerialNumber: syz [ 462.173954][T17059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 462.181321][ T1108] m920x_read = error: -19 [ 462.187780][ T1108] dvb-usb: error while querying for an remote control event. [ 462.202019][T17080] loop4: detected capacity change from 0 to 64 [ 462.228545][T17078] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 462.341121][ T1108] m920x_read = error: -19 [ 462.358065][ T26] audit: type=1400 audit(1778307137.608:71): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A2F2F26B43138FC84 pid=17079 comm="syz.4.5276" [ 462.378195][ T1108] dvb-usb: error while querying for an remote control event. [ 462.417853][T17059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 462.492378][T17068] loop6: detected capacity change from 0 to 32768 [ 462.529275][ T1108] m920x_read = error: -19 [ 462.547825][ T1108] dvb-usb: error while querying for an remote control event. [ 462.573048][T17088] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 462.689724][ T1108] m920x_read = error: -19 [ 462.707609][T17099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5282'. [ 462.714731][ T1108] dvb-usb: error while querying for an remote control event. [ 462.730626][T17068] XFS (loop6): Mounting V5 Filesystem [ 462.746920][T17099] tipc: Started in network mode [ 462.751879][T17099] tipc: Node identity 2d1414aa, cluster identity 4711 [ 462.760624][T17099] tipc: Enabling of bearer rejected, failed to enable media [ 462.834278][ T1108] m920x_read = error: -19 [ 462.846033][ T1108] dvb-usb: error while querying for an remote control event. [ 462.852121][T17068] XFS (loop6): Ending clean mount [ 462.905843][ T5353] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 462.948123][ T5353] asix: probe of 3-1:2.88 failed with error -71 [ 463.003985][ T5353] usb 3-1: USB disconnect, device number 24 [ 463.010396][ T1108] m920x_read = error: -19 [ 463.040173][ T1108] dvb-usb: error while querying for an remote control event. [ 463.057147][T13941] XFS (loop6): Unmounting Filesystem [ 463.169810][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.209455][ T9182] m920x_read = error: -19 [ 463.214189][ T9182] dvb-usb: error while querying for an remote control event. [ 463.332945][ T1108] m920x_read = error: -19 [ 463.337421][ T1108] dvb-usb: error while querying for an remote control event. [ 463.404798][T17121] loop5: detected capacity change from 0 to 512 [ 463.453346][ T9182] m920x_read = error: -19 [ 463.457860][ T9182] dvb-usb: error while querying for an remote control event. [ 463.498830][T17121] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 463.550617][T17124] netlink: 'syz.2.5295': attribute type 3 has an invalid length. [ 463.625191][T17121] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.5293: bad orphan inode 131083 [ 463.653653][ T9182] m920x_read = error: -19 [ 463.658071][ T9182] dvb-usb: error while querying for an remote control event. [ 463.673863][T17121] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000004,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 463.785599][ T9182] m920x_read = error: -19 [ 463.790053][ T9182] dvb-usb: error while querying for an remote control event. [ 463.812475][T17132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5298'. [ 463.946311][T17138] loop4: detected capacity change from 0 to 512 [ 463.964612][ T9176] m920x_read = error: -19 [ 463.969384][ T9176] dvb-usb: error while querying for an remote control event. [ 464.006276][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.039093][T17138] EXT4-fs (loop4): Ignoring removed orlov option [ 464.103447][ T9176] m920x_read = error: -19 [ 464.107891][ T9176] dvb-usb: error while querying for an remote control event. [ 464.136125][T17138] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 464.195582][T17138] ext4 filesystem being mounted at /1059/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 464.232911][ T9176] m920x_read = error: -19 [ 464.237390][ T9176] dvb-usb: error while querying for an remote control event. [ 464.341369][T17156] loop5: detected capacity change from 0 to 16 [ 464.356086][ T1108] m920x_read = error: -19 [ 464.360531][ T1108] dvb-usb: error while querying for an remote control event. [ 464.394196][T17156] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 464.451110][ T4181] udevd[4181]: incorrect cramfs checksum on /dev/loop5 [ 464.499334][T17156] cramfs: Error -3 while decompressing! [ 464.528910][ T1108] m920x_read = error: -19 [ 464.537061][ T1108] dvb-usb: error while querying for an remote control event. [ 464.547827][T17156] cramfs: ffffffff96404078(42)->ffff888064a5e000(4096) [ 464.580304][T17165] loop6: detected capacity change from 0 to 1024 [ 464.666403][ T1108] m920x_read = error: -19 [ 464.670861][ T1108] dvb-usb: error while querying for an remote control event. [ 464.712679][T17165] EXT4-fs (loop6): Ignoring removed oldalloc option [ 464.763621][T17165] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 464.836262][ T1108] m920x_read = error: -19 [ 464.857394][ T1108] dvb-usb: error while querying for an remote control event. [ 464.871839][T17165] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,bsddf,init_itable=0x0000000000000ddd,norecovery,dioread_nolock,oldalloc,user_xattr,errors=remount-ro,norecovery,. Quota mode: none. [ 464.983385][ T1108] m920x_read = error: -19 [ 464.989225][ T1108] dvb-usb: error while querying for an remote control event. [ 465.008935][T17185] loop5: detected capacity change from 0 to 512 [ 465.065152][T17185] EXT4-fs (loop5): Ignoring removed orlov option [ 465.095870][T17185] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 465.112979][ T9176] m920x_read = error: -19 [ 465.117478][ T9176] dvb-usb: error while querying for an remote control event. [ 465.127880][T17185] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 465.232915][ T1108] m920x_read = error: -19 [ 465.237378][ T1108] dvb-usb: error while querying for an remote control event. [ 465.478282][ T9176] m920x_read = error: -19 [ 465.482696][ T9176] dvb-usb: error while querying for an remote control event. [ 465.608168][T17207] loop5: detected capacity change from 0 to 4096 [ 465.614871][ T9176] m920x_read = error: -19 [ 465.619296][ T9176] dvb-usb: error while querying for an remote control event. [ 465.678392][T17216] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 465.743265][ T9176] m920x_read = error: -19 [ 465.747771][ T9176] dvb-usb: error while querying for an remote control event. [ 465.848022][T17207] ntfs3: loop5: ino=1f, "file3" failed to undo rename [ 465.867323][ T9176] m920x_read = error: -19 [ 465.873034][ T9176] dvb-usb: error while querying for an remote control event. [ 465.998313][T17226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5340'. [ 466.015325][ T9176] m920x_read = error: -19 [ 466.019825][ T9176] dvb-usb: error while querying for an remote control event. [ 466.066975][T17226] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5340'. [ 466.110441][T17226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5340'. [ 466.174220][ T9182] m920x_read = error: -19 [ 466.178696][ T9182] dvb-usb: error while querying for an remote control event. [ 466.323249][ T1108] m920x_read = error: -19 [ 466.327780][ T1108] dvb-usb: error while querying for an remote control event. [ 466.403355][ T9182] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 466.465285][ T9176] m920x_read = error: -19 [ 466.471163][ T9176] dvb-usb: error while querying for an remote control event. [ 466.533121][ T1108] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 466.583369][ T4231] m920x_read = error: -19 [ 466.588827][ T4231] dvb-usb: error while querying for an remote control event. [ 466.641020][T17256] set_capacity_and_notify: 1 callbacks suppressed [ 466.641039][T17256] loop4: detected capacity change from 0 to 1024 [ 466.664453][ T9182] usb 1-1: Using ep0 maxpacket: 16 [ 466.690734][T17256] EXT4-fs (loop4): filesystem is read-only [ 466.703664][ T4231] m920x_read = error: -19 [ 466.708085][ T4231] dvb-usb: error while querying for an remote control event. [ 466.711343][T17256] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 3328 [ 466.772960][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 466.783633][ T9182] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 466.795121][ T9182] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 466.806784][ T9182] usb 1-1: config 0 interface 0 has no altsetting 0 [ 466.806795][T17260] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5356'. [ 466.806834][ T9182] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 466.863296][T17260] nbd: must specify at least one socket [ 466.889355][ T9182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.903156][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.933810][ T9182] usb 1-1: config 0 descriptor?? [ 466.938955][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.959417][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 466.995932][ T1108] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 467.041277][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.060063][ T1108] usb 3-1: config 0 descriptor?? [ 467.102676][ T4231] m920x_read = error: -19 [ 467.108016][ T4231] dvb-usb: error while querying for an remote control event. [ 467.224752][ T9182] m920x_read = error: -19 [ 467.239397][ T9182] dvb-usb: error while querying for an remote control event. [ 467.321980][T17280] loop4: detected capacity change from 0 to 1024 [ 467.373867][ T4231] m920x_read = error: -19 [ 467.378272][ T4231] dvb-usb: error while querying for an remote control event. [ 467.436571][ T4231] usb 1-1: USB disconnect, device number 31 [ 467.503083][ T9182] m920x_read = error: -19 [ 467.507721][ T9182] dvb-usb: error while querying for an remote control event. [ 467.568493][T17280] hfsplus: bad catalog file entry [ 467.587154][ T1108] kye 0003:0458:0087.0028: unknown main item tag 0xe [ 467.603829][ T1108] kye 0003:0458:0087.0028: unknown main item tag 0x0 [ 467.610986][ T1108] kye 0003:0458:0087.0028: unknown main item tag 0x5 [ 467.631109][ T1108] kye 0003:0458:0087.0028: unknown main item tag 0xe [ 467.651402][ T1108] kye 0003:0458:0087.0028: unknown global tag 0xe [ 467.669327][ T1108] kye 0003:0458:0087.0028: item 0 1 1 14 parsing failed [ 467.686035][ T1108] kye 0003:0458:0087.0028: parse failed [ 467.700227][ T1108] kye: probe of 0003:0458:0087.0028 failed with error -22 [ 467.760604][ T1108] m920x_read = error: -19 [ 467.765231][ T1108] dvb-usb: error while querying for an remote control event. [ 467.783576][T17295] loop5: detected capacity change from 0 to 64 [ 467.801545][ T4231] Bluetooth: hci5: command 0x0406 tx timeout [ 467.813915][ T1108] usb 3-1: USB disconnect, device number 25 [ 467.830069][ T4255] hfsplus: bad catalog file entry [ 467.857919][ T26] audit: type=1400 audit(1778307143.108:72): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A2F2F26B43138FC84 pid=17294 comm="syz.5.5372" [ 467.904700][ T4231] m920x_read = error: -19 [ 467.918011][ T4231] dvb-usb: error while querying for an remote control event. [ 468.033063][ T4231] m920x_read = error: -19 [ 468.045686][ T4231] dvb-usb: error while querying for an remote control event. [ 468.152894][ T1108] m920x_read = error: -19 [ 468.157428][ T1108] dvb-usb: error while querying for an remote control event. [ 468.229438][T17311] loop5: detected capacity change from 0 to 128 [ 468.284709][ T4231] m920x_read = error: -19 [ 468.289163][ T4231] dvb-usb: error while querying for an remote control event. [ 468.410368][T17315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5382'. [ 468.425648][ T1108] m920x_read = error: -19 [ 468.430165][ T1108] dvb-usb: error while querying for an remote control event. [ 468.573616][ T1108] m920x_read = error: -19 [ 468.578155][ T1108] dvb-usb: error while querying for an remote control event. [ 468.615108][T17327] loop5: detected capacity change from 0 to 256 [ 468.713252][ T4231] m920x_read = error: -19 [ 468.718042][ T4231] dvb-usb: error while querying for an remote control event. [ 468.739982][T17327] FAT-fs (loop5): Directory bread(block 64) failed [ 468.767563][T17327] FAT-fs (loop5): Directory bread(block 65) failed [ 468.787873][T17327] FAT-fs (loop5): Directory bread(block 66) failed [ 468.818201][T17327] FAT-fs (loop5): Directory bread(block 67) failed [ 468.838530][T17327] FAT-fs (loop5): Directory bread(block 68) failed [ 468.845501][ T4231] m920x_read = error: -19 [ 468.850067][ T4231] dvb-usb: error while querying for an remote control event. [ 468.878452][T17327] FAT-fs (loop5): Directory bread(block 69) failed [ 468.919780][T17327] FAT-fs (loop5): Directory bread(block 70) failed [ 468.970509][T17327] FAT-fs (loop5): Directory bread(block 71) failed [ 468.977790][ T4231] m920x_read = error: -19 [ 468.982165][ T4231] dvb-usb: error while querying for an remote control event. [ 469.014178][T17327] FAT-fs (loop5): Directory bread(block 72) failed [ 469.020848][T17327] FAT-fs (loop5): Directory bread(block 73) failed [ 469.116022][ T4231] m920x_read = error: -19 [ 469.120580][ T4231] dvb-usb: error while querying for an remote control event. [ 469.263382][ T1108] m920x_read = error: -19 [ 469.267782][ T1108] dvb-usb: error while querying for an remote control event. [ 469.403195][ T4231] m920x_read = error: -19 [ 469.407615][ T4231] dvb-usb: error while querying for an remote control event. [ 469.467197][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5392'. [ 469.498904][T17341] netlink: 'syz.5.5392': attribute type 1 has an invalid length. [ 469.583201][ T1108] m920x_read = error: -19 [ 469.587850][ T1108] dvb-usb: error while querying for an remote control event. [ 469.743079][ T4231] m920x_read = error: -19 [ 469.747589][ T4231] dvb-usb: error while querying for an remote control event. [ 469.875029][ T4231] m920x_read = error: -19 [ 469.879466][ T4231] dvb-usb: error while querying for an remote control event. [ 470.013823][ T4231] m920x_read = error: -19 [ 470.018395][ T4231] dvb-usb: error while querying for an remote control event. [ 470.048152][T17342] loop4: detected capacity change from 0 to 32768 [ 470.162935][ T4231] m920x_read = error: -19 [ 470.167387][ T4231] dvb-usb: error while querying for an remote control event. [ 470.303480][ T4231] m920x_read = error: -19 [ 470.307895][ T4231] dvb-usb: error while querying for an remote control event. [ 470.456531][ T4231] m920x_read = error: -19 [ 470.460956][ T4231] dvb-usb: error while querying for an remote control event. [ 470.603914][ T1108] m920x_read = error: -19 [ 470.609057][ T1108] dvb-usb: error while querying for an remote control event. [ 470.678545][T17373] loop5: detected capacity change from 0 to 8192 [ 470.754895][ T1108] m920x_read = error: -19 [ 470.768383][ T1108] dvb-usb: error while querying for an remote control event. [ 470.790696][T17357] loop2: detected capacity change from 0 to 32768 [ 470.903218][ T1108] m920x_read = error: -19 [ 470.907913][ T1108] dvb-usb: error while querying for an remote control event. [ 470.935053][T17377] loop4: detected capacity change from 0 to 4096 [ 471.049994][T17380] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 471.076456][ T1108] m920x_read = error: -19 [ 471.080886][ T1108] dvb-usb: error while querying for an remote control event. [ 471.213137][ T1108] m920x_read = error: -19 [ 471.217549][ T1108] dvb-usb: error while querying for an remote control event. [ 471.368451][ T1108] m920x_read = error: -19 [ 471.383596][ T1108] dvb-usb: error while querying for an remote control event. [ 471.543085][ T4231] m920x_read = error: -19 [ 471.547547][ T4231] dvb-usb: error while querying for an remote control event. [ 471.659656][T17398] loop5: detected capacity change from 0 to 512 [ 471.696685][ T4231] m920x_read = error: -19 [ 471.716030][ T4231] dvb-usb: error while querying for an remote control event. [ 471.813039][T17398] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 471.821096][T17398] System zones: 1-12 [ 471.843045][ T4231] m920x_read = error: -19 [ 471.847596][ T4231] dvb-usb: error while querying for an remote control event. [ 471.871474][T17408] loop6: detected capacity change from 0 to 1024 [ 471.897454][T17398] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.5419: Directory hole found for htree index block 0 [ 471.962927][ T4231] m920x_read = error: -19 [ 471.967517][ T4231] dvb-usb: error while querying for an remote control event. [ 472.001778][ T6587] hfsplus: b-tree write err: -5, ino 25 [ 472.009082][ T6587] hfsplus: b-tree write err: -5, ino 4 [ 472.018371][T17398] EXT4-fs (loop5): Remounting filesystem read-only [ 472.029393][T17398] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 472.035159][ T6587] hfsplus: b-tree write err: -5, ino 2 [ 472.040618][T17398] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.5419: Directory hole found for htree index block 0 [ 472.064915][T17398] EXT4-fs (loop5): Remounting filesystem read-only [ 472.071651][T17398] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 472.103350][ T4231] m920x_read = error: -19 [ 472.108437][ T4231] dvb-usb: error while querying for an remote control event. [ 472.113067][T17398] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback. [ 472.139715][T17416] device vlan3 entered promiscuous mode [ 472.195309][T17416] device bridge0 entered promiscuous mode [ 472.266753][ T4231] m920x_read = error: -19 [ 472.271313][ T4231] dvb-usb: error while querying for an remote control event. [ 472.443557][ T4231] m920x_read = error: -19 [ 472.448032][ T4231] dvb-usb: error while querying for an remote control event. [ 472.586656][T17438] loop4: detected capacity change from 0 to 512 [ 472.612966][ T1108] m920x_read = error: -19 [ 472.617493][ T1108] dvb-usb: error while querying for an remote control event. [ 472.722458][T17438] EXT4-fs (loop4): Ignoring removed nobh option [ 472.763057][ T1108] m920x_read = error: -19 [ 472.768926][T17438] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 472.798803][ T1108] dvb-usb: error while querying for an remote control event. [ 472.877590][T17438] EXT4-fs (loop4): 1 truncate cleaned up [ 472.941781][T17438] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nobh,bsddf,,errors=continue. Quota mode: none. [ 472.964715][ T1108] m920x_read = error: -19 [ 472.969156][ T1108] dvb-usb: error while querying for an remote control event. [ 473.083091][ T1108] m920x_read = error: -19 [ 473.112860][ T1108] dvb-usb: error while querying for an remote control event. [ 473.243271][ T4231] m920x_read = error: -19 [ 473.248153][ T4231] dvb-usb: error while querying for an remote control event. [ 473.393309][ T27] INFO: task syz-executor:4187 blocked for more than 143 seconds. [ 473.415894][ T4231] m920x_read = error: -19 [ 473.420355][ T4231] dvb-usb: error while querying for an remote control event. [ 473.442835][ T27] Not tainted syzkaller #0 [ 473.447889][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.516487][ T27] task:syz-executor state:D stack:21808 pid: 4187 ppid: 1 flags:0x00004004 [ 473.553987][ T4231] m920x_read = error: -19 [ 473.560760][ T4231] dvb-usb: error while querying for an remote control event. [ 473.563105][ T27] Call Trace: [ 473.571601][ T27] [ 473.603778][ T27] __schedule+0x11ef/0x43c0 [ 473.618637][ T27] ? verify_lock_unused+0x140/0x140 [ 473.634282][ T27] ? mark_lock+0x94/0x320 [ 473.649101][ T27] ? release_firmware_map_entry+0x190/0x190 [ 473.669360][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 473.681193][T17435] loop2: detected capacity change from 0 to 32768 [ 473.693459][ T27] ? lock_chain_count+0x20/0x20 [ 473.698542][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 473.703907][ T1108] m920x_read = error: -19 [ 473.703932][ T1108] dvb-usb: error while querying for an remote control event. [ 473.747343][ T27] schedule+0x11b/0x1e0 [ 473.751636][ T27] io_schedule+0x7c/0xd0 [ 473.767812][ T27] wait_on_page_bit_common+0x83b/0xe50 [ 473.777989][ T27] ? wait_on_page_bit+0x50/0x50 [ 473.788135][ T27] ? rcu_lock_release+0x20/0x20 [ 473.798273][ T27] truncate_inode_pages_range+0xa24/0xfe0 [ 473.809716][ T27] ? invalidate_inode_page+0x360/0x360 [ 473.820234][ T4231] m920x_read = error: -19 [ 473.827255][ T4231] dvb-usb: error while querying for an remote control event. [ 473.834859][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 473.840958][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 473.858200][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 473.868036][ T27] evict+0x4dc/0x8d0 [ 473.872063][ T27] ? proc_nr_inodes+0x320/0x320 [ 473.880833][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 473.891768][ T27] evict_inodes+0x60c/0x6a0 [ 473.898788][ T27] ? __dentry_kill+0x530/0x650 [ 473.908306][ T27] ? clear_inode+0x150/0x150 [ 473.915601][ T27] generic_shutdown_super+0x93/0x300 [ 473.921003][ T27] kill_block_super+0x7c/0xe0 [ 473.930266][ T27] deactivate_locked_super+0x93/0xf0 [ 473.937977][ T27] cleanup_mnt+0x42d/0x4e0 [ 473.942457][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 473.958925][ T27] task_work_run+0x125/0x1a0 [ 473.966531][ T1108] m920x_read = error: -19 [ 473.970978][ T1108] dvb-usb: error while querying for an remote control event. [ 473.985421][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 473.990911][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 474.001347][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 474.010723][ T27] do_syscall_64+0x58/0xa0 [ 474.018603][ T27] ? clear_bhb_loop+0x30/0x80 [ 474.026804][ T27] ? clear_bhb_loop+0x30/0x80 [ 474.031568][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 474.041594][ T27] RIP: 0033:0x7fea1ccfe017 [ 474.049268][ T27] RSP: 002b:00007fff6201e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 474.062403][ T27] RAX: 0000000000000000 RBX: 00007fea1cd92120 RCX: 00007fea1ccfe017 [ 474.075804][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6201e0f0 [ 474.085491][ T27] RBP: 00007fff6201e0f0 R08: 00007fff6201f0f0 R09: 00000000ffffffff [ 474.094430][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff6201f180 [ 474.102544][ T27] R13: 00007fea1cd92120 R14: 000000000004fbde R15: 00007fff6201f1c0 [ 474.105717][ T1108] m920x_read = error: -19 [ 474.113942][ T27] [ 474.118146][ T27] [ 474.118146][ T27] Showing all locks held in the system: [ 474.127141][ T27] 1 lock held by khungtaskd/27: [ 474.130747][ T1108] dvb-usb: error while querying for an remote control event. [ 474.141954][ T27] #0: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 474.152343][ T27] 2 locks held by kworker/0:2/1108: [ 474.159813][ T27] 1 lock held by udevd/3559: [ 474.175660][ T27] 2 locks held by getty/3943: [ 474.180528][ T27] #0: ffff88814ca74098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 474.197092][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 474.208713][ T27] 1 lock held by syz-executor/4187: [ 474.215065][ T27] #0: ffff888072a700e0 (&type->s_umount_key#88){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 474.227231][ T27] 3 locks held by kworker/u4:8/10722: [ 474.234494][ T27] 7 locks held by syz.2.5438/17435: [ 474.244821][ T27] [ 474.248416][ T27] ============================================= [ 474.248416][ T27] [ 474.276990][ T27] NMI backtrace for cpu 0 [ 474.281403][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 474.288641][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 474.298733][ T27] Call Trace: [ 474.302057][ T27] [ 474.305028][ T27] dump_stack_lvl+0x188/0x250 [ 474.309755][ T27] ? show_regs_print_info+0x20/0x20 [ 474.315008][ T27] ? load_image+0x400/0x400 [ 474.319549][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 474.324973][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 474.329711][T17435] UFO tlock:0xffffc900026f21b0 [ 474.330135][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 474.339869][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 474.346073][ T27] ? _printk+0xda/0x130 [ 474.350264][ T27] ? load_image+0x400/0x400 [ 474.354805][ T27] ? load_image+0x400/0x400 [ 474.359351][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 474.365465][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 474.371511][ T27] watchdog+0xe0f/0xe50 [ 474.375731][ T27] kthread+0x436/0x520 [ 474.379850][ T27] ? hungtask_pm_notify+0x40/0x40 [ 474.384924][ T27] ? kthread_blkcg+0xd0/0xd0 [ 474.389561][ T27] ret_from_fork+0x1f/0x30 [ 474.394029][ T27] [ 474.397139][ C0] vkms_vblank_simulate: vblank timer overrun [ 474.404446][ T27] Sending NMI from CPU 0 to CPUs 1: [ 474.409713][ C1] NMI backtrace for cpu 1 [ 474.409725][ C1] CPU: 1 PID: 10722 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 474.409745][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 474.409757][ C1] Workqueue: bat_events batadv_nc_worker [ 474.409781][ C1] RIP: 0010:kasan_check_range+0x10/0x290 [ 474.409805][ C1] Code: b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 41 57 41 56 <41> 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 f8 49 c1 e8 2f [ 474.409822][ C1] RSP: 0000:ffffc90004c07800 EFLAGS: 00000002 [ 474.409836][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff815d1f15 [ 474.409849][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901d51b0 [ 474.409861][ C1] RBP: ffffc90004c07a70 R08: dffffc0000000000 R09: 1ffffffff203aa36 [ 474.409876][ C1] R10: dffffc0000000000 R11: fffffbfff203aa37 R12: ffff888021c046b8 [ 474.409890][ C1] R13: ffff888021c04604 R14: 0000000000000782 R15: ffff888021c046b8 [ 474.409904][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 474.409921][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.409934][ C1] CR2: 0000001b32a15ff8 CR3: 0000000061ed2000 CR4: 00000000003506e0 [ 474.409952][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 474.409968][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 474.409980][ C1] Call Trace: [ 474.409986][ C1] [ 474.409995][ C1] __lock_acquire+0x925/0x7d10 [ 474.410019][ C1] ? mark_lock+0x94/0x320 [ 474.410043][ C1] ? verify_lock_unused+0x140/0x140 [ 474.410068][ C1] ? verify_lock_unused+0x140/0x140 [ 474.410093][ C1] lock_acquire+0x19e/0x400 [ 474.410113][ C1] ? rcu_lock_acquire+0x5/0x30 [ 474.410133][ C1] ? rcu_lock_release+0x5/0x20 [ 474.410150][ C1] ? read_lock_is_recursive+0x10/0x10 [ 474.410171][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 474.410192][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 474.410218][ C1] rcu_lock_acquire+0x2a/0x30 [ 474.410235][ C1] ? rcu_lock_acquire+0x5/0x30 [ 474.410251][ C1] batadv_nc_worker+0xc9/0x5c0 [ 474.410273][ C1] process_one_work+0x85f/0x1010 [ 474.410299][ C1] ? worker_detach_from_pool+0x240/0x240 [ 474.410318][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 474.410341][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 474.410359][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 474.410378][ C1] ? wq_worker_running+0x97/0x170 [ 474.410396][ C1] worker_thread+0xaa6/0x1290 [ 474.410420][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 474.410440][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 474.410468][ C1] kthread+0x436/0x520 [ 474.410484][ C1] ? rcu_lock_release+0x20/0x20 [ 474.410502][ C1] ? kthread_blkcg+0xd0/0xd0 [ 474.410520][ C1] ret_from_fork+0x1f/0x30 [ 474.410546][ C1] [ 474.411566][T17435] MetaData crosses page boundary!! [ 474.412757][ T1108] m920x_read = error: -19 [ 474.434919][T17435] lblock = 6300000010, size = -820051968 [ 474.446375][ T1108] dvb-usb: error while querying for an remote control event. [ 474.458677][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 474.507071][T17435] CPU: 1 PID: 17435 Comm: syz.2.5438 Not tainted syzkaller #0 [ 474.728141][T17435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 474.738221][T17435] Call Trace: [ 474.741520][T17435] [ 474.744470][T17435] dump_stack_lvl+0x188/0x250 [ 474.749172][T17435] ? show_regs_print_info+0x20/0x20 [ 474.754389][T17435] ? load_image+0x400/0x400 [ 474.758916][T17435] ? unlock_page+0x17c/0x1f0 [ 474.763533][T17435] ? release_metapage+0x2f7/0xe10 [ 474.768580][T17435] ? unlock_page+0x17c/0x1f0 [ 474.773277][T17435] __get_metapage+0xbfa/0x1060 [ 474.778087][T17435] dtSearch+0x5d5/0x2050 [ 474.782616][T17435] jfs_lookup+0x1ad/0x420 [ 474.787004][T17435] ? jfs_get_parent+0xa0/0xa0 [ 474.791741][T17435] ? d_alloc_parallel+0x1222/0x1330 [ 474.797139][T17435] ? __init_waitqueue_head+0xa5/0x150 [ 474.802691][T17435] __lookup_slow+0x29d/0x410 [ 474.807332][T17435] ? lookup_one_len+0x2d0/0x2d0 [ 474.812221][T17435] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 474.818250][T17435] ? down_read+0x1aa/0x2e0 [ 474.822694][T17435] lookup_slow+0x53/0x70 [ 474.826970][T17435] walk_component+0x319/0x460 [ 474.831686][T17435] link_path_walk+0x665/0xd70 [ 474.836401][T17435] ? handle_lookup_down+0x130/0x130 [ 474.841637][T17435] __filename_parentat+0x252/0x690 [ 474.846778][T17435] ? verify_lock_unused+0x140/0x140 [ 474.852005][T17435] ? vfs_path_parent_lookup+0x50/0x50 [ 474.857401][T17435] ? slab_post_alloc_hook+0x4c/0x380 [ 474.862740][T17435] ? rcu_lock_release+0x5/0x20 [ 474.867534][T17435] filename_create+0xd5/0x470 [ 474.872237][T17435] ? __might_fault+0xb7/0x110 [ 474.876942][T17435] ? kern_path_create+0x190/0x190 [ 474.881993][T17435] ? __virt_addr_valid+0x3c6/0x470 [ 474.887133][T17435] do_mkdirat+0xa5/0x5b0 [ 474.891410][T17435] ? vfs_mkdir+0x570/0x570 [ 474.895847][T17435] ? getname_flags+0x1fe/0x500 [ 474.900817][T17435] __x64_sys_mkdirat+0x85/0x90 [ 474.905603][T17435] do_syscall_64+0x4c/0xa0 [ 474.910049][T17435] ? clear_bhb_loop+0x30/0x80 [ 474.914750][T17435] ? clear_bhb_loop+0x30/0x80 [ 474.919452][T17435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 474.925478][T17435] RIP: 0033:0x7f7b39ea6c47 [ 474.929917][T17435] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.949634][T17435] RSP: 002b:00007f7b38100e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 474.958101][T17435] RAX: ffffffffffffffda RBX: 00007f7b38100ee0 RCX: 00007f7b39ea6c47 [ 474.966117][T17435] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: 00000000ffffff9c [ 474.974118][T17435] RBP: 0000000000000000 R08: 0000200000000000 R09: 0000000000000000 [ 474.982204][T17435] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 474.990212][T17435] R13: 00007f7b38100ea0 R14: 0000000000000000 R15: 0000000000000000 [ 474.998375][T17435] [ 475.001438][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 475.008687][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 475.018884][ T27] Call Trace: [ 475.022211][ T27] [ 475.025178][ T27] dump_stack_lvl+0x188/0x250 [ 475.029922][ T27] ? show_regs_print_info+0x20/0x20 [ 475.035196][ T27] ? load_image+0x400/0x400 [ 475.039767][ T27] panic+0x2e5/0x810 [ 475.043710][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 475.045693][T17435] bread failed! [ 475.049387][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 475.053102][T17435] jfs_lookup: dtSearch returned -5 [ 475.057411][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 475.057449][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 475.074423][ T27] watchdog+0xe4e/0xe50 [ 475.078638][ T27] kthread+0x436/0x520 [ 475.082757][ T27] ? hungtask_pm_notify+0x40/0x40 [ 475.087848][ T27] ? kthread_blkcg+0xd0/0xd0 [ 475.092674][ T27] ret_from_fork+0x1f/0x30 [ 475.097158][ T27] [ 475.100338][ T27] Kernel Offset: disabled [ 475.104693][ T27] Rebooting in 86400 seconds..