last executing test programs: 2m27.47144696s ago: executing program 0 (id=371): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 2m27.294898918s ago: executing program 0 (id=373): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x78d, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 2m26.29706923s ago: executing program 0 (id=384): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = dup(r0) copy_file_range(r0, 0x0, r1, 0x0, 0x7000, 0x2000000) 2m25.956521787s ago: executing program 0 (id=387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2m24.978739087s ago: executing program 0 (id=398): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x80040005, 0x0, 0x0, 0x40f00, 0x18}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 2m24.76405861s ago: executing program 0 (id=402): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab08, r1) 2m9.654896848s ago: executing program 32 (id=402): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab08, r1) 5.545326153s ago: executing program 3 (id=1519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000040)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 5.346772504s ago: executing program 3 (id=1521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r2, r0}, 0x4) 5.148440582s ago: executing program 3 (id=1524): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 4.857719508s ago: executing program 3 (id=1529): syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_complete(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x2000000, 0x0) 4.751111851s ago: executing program 5 (id=1530): r0 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000006580)='*\x00', &(0x7f0000006480)="04", 0x1) 4.721609026s ago: executing program 4 (id=1532): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) 4.521271374s ago: executing program 4 (id=1534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000046365608b40413868f95010203010902120001000000000904"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 4.491036979s ago: executing program 5 (id=1536): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf", 0x12}], 0x1, 0x4000001, 0x0) sendfile(r0, r1, 0x0, 0x8000fb00) 4.173056805s ago: executing program 3 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000480)='./file0\x00', 0x3004050, &(0x7f0000000540)=ANY=[], 0x3, 0x1063a, &(0x7f0000010640)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 3.159520938s ago: executing program 5 (id=1541): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0xffff, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 2.902427891s ago: executing program 1 (id=1542): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 2.795575357s ago: executing program 3 (id=1543): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @empty, [@srh={0x2b}]}}}}}}}, 0x0) 2.737333712s ago: executing program 4 (id=1544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000a76e089b0000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.610296732s ago: executing program 1 (id=1545): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 2.584496519s ago: executing program 5 (id=1546): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000000)=ANY=[@ANYRES64=r0]) 2.571124999s ago: executing program 2 (id=1547): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b40)={0x2c, r1, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 2.48158251s ago: executing program 4 (id=1548): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xcb6a, 0xc000, 0xc, 0xa0002f1}) syz_clone(0x20e200, 0x0, 0x0, 0x0, 0x0, 0x0) 2.358737809s ago: executing program 5 (id=1549): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002b40)={0x1c, &(0x7f00000029c0)={0x20, 0x18, 0x6, "9a26631bbbb3"}, 0x0, 0x0}) 2.299685569s ago: executing program 2 (id=1550): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 2.190058277s ago: executing program 1 (id=1551): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mlock2(&(0x7f000043c000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f000035b000/0x400000)=nil, 0x400000) 1.976448656s ago: executing program 1 (id=1552): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40c0) 1.781504227s ago: executing program 2 (id=1553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x1000, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) 1.495326284s ago: executing program 1 (id=1554): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT], 0xff, 0x17d, &(0x7f0000000d80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x100, 0x1) getdents64(r0, 0x0, 0x4f) 1.467793642s ago: executing program 4 (id=1555): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00') 1.091747831s ago: executing program 2 (id=1556): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x2}, 0xe) 746.830406ms ago: executing program 2 (id=1557): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 381.854926ms ago: executing program 4 (id=1558): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000040)='!', 0x1}], 0x1}}], 0x2, 0x40088d4) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x80}, &(0x7f0000000140)=0xc) 221.167304ms ago: executing program 1 (id=1559): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000900000005000000010000130200000005000000010000000e0000000030302e2e61"], 0x0, 0x39, 0x0, 0x1, 0x8}, 0x28) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xc) 208.816143ms ago: executing program 5 (id=1560): unshare(0x22020400) socket$packet(0x11, 0x3, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) recvmsg(r0, &(0x7f0000000800)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000740)=[{0x0}, {0x0}, {&(0x7f0000000200)=""/226, 0xe2}, {0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)=""/206, 0xce}, {0x0}, {0x0}], 0x9}, 0x2142) 0s ago: executing program 2 (id=1561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r0], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kernel console output (not intermixed with test programs): 0x81 has invalid wMaxPacketSize 0 [ 136.849113][ T5713] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 136.849136][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.913748][ T5713] usb 1-1: config 0 descriptor?? [ 137.334949][ T5713] hid_parser_main: 446 callbacks suppressed [ 137.334971][ T5713] hkems 0003:2006:0118.0007: unknown main item tag 0x1 [ 137.403772][ T5713] hkems 0003:2006:0118.0007: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.0-1/input0 [ 137.403804][ T5713] hkems 0003:2006:0118.0007: no inputs found [ 137.403816][ T5713] hkems 0003:2006:0118.0007: force feedback init failed [ 137.608981][ T5713] usb 1-1: USB disconnect, device number 5 [ 137.651145][ T6575] fido_id[6575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 138.487188][ T6581] loop2: detected capacity change from 0 to 131072 [ 138.494892][ T6581] F2FS-fs (loop2): invalid crc value [ 138.662607][ T6581] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 138.698641][ T6581] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 138.964018][ T6592] Bluetooth: MGMT ver 1.23 [ 139.402671][ T6597] ref_ctr_offset mismatch. inode: 0x13c offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 140.227566][ T6617] loop1: detected capacity change from 0 to 1024 [ 140.247438][ T6617] EXT4-fs: Ignoring removed i_version option [ 140.248322][ T6617] EXT4-fs (loop1): Test dummy encryption mode enabled [ 140.315098][ T6617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.546065][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.589592][ T6643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.319'. [ 141.941491][ T33] block nbd0: Possible stuck request ffff8880272be000: control (read@0,1024B). Runtime 30 seconds [ 141.947172][ T33] block nbd0: Possible stuck request ffff8880272be1c0: control (read@1024,1024B). Runtime 30 seconds [ 141.947207][ T33] block nbd0: Possible stuck request ffff8880272be380: control (read@2048,1024B). Runtime 30 seconds [ 141.947234][ T33] block nbd0: Possible stuck request ffff8880272be540: control (read@3072,1024B). Runtime 30 seconds [ 141.962054][ T6653] netlink: 56 bytes leftover after parsing attributes in process `syz.3.324'. [ 142.112840][ T6655] net_ratelimit: 54 callbacks suppressed [ 142.112852][ T6655] TCP: tcp_parse_options: Illegal window scaling value 19 > 14 received [ 142.485163][ T6665] loop4: detected capacity change from 0 to 16 [ 142.760416][ T6665] erofs (device loop4): mounted with root inode @ nid 36. [ 142.882789][ T6673] loop2: detected capacity change from 0 to 4096 [ 143.204779][ T6679] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.867772][ T6694] loop1: detected capacity change from 0 to 256 [ 145.467620][ T973] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 145.567102][ T5745] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.619912][ T973] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.619940][ T973] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 145.619960][ T973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.620007][ T973] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 145.620032][ T973] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 145.632094][ T973] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.632124][ T973] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.632142][ T973] usb 2-1: Product: syz [ 145.632155][ T973] usb 2-1: Manufacturer: syz [ 145.728655][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 145.751846][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'. [ 145.849849][ T5745] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.849887][ T5745] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 145.913472][ T5745] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.913491][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.913501][ T5745] usb 4-1: Product: syz [ 145.913508][ T5745] usb 4-1: Manufacturer: syz [ 145.913515][ T5745] usb 4-1: SerialNumber: syz [ 145.935135][ T973] cdc_wdm 2-1:1.0: skipping garbage [ 145.935154][ T973] cdc_wdm 2-1:1.0: skipping garbage [ 146.258096][ T973] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 146.258130][ T973] cdc_wdm 2-1:1.0: Unknown control protocol [ 146.260980][ T6731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.261554][ T6731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.420899][ T6752] overlayfs: missing 'workdir' [ 146.453542][ T6753] loop0: detected capacity change from 0 to 512 [ 146.455636][ T5745] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 146.481044][ T5745] usb 4-1: USB disconnect, device number 5 [ 146.540393][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 146.670147][ T6753] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.364: iget: bad i_size value: 38620345925642 [ 146.670182][ T6753] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.670890][ T6753] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.364: couldn't read orphan inode 15 (err -117) [ 146.670978][ T6753] loop0: lost filesystem error report for type 5 error -117 [ 146.812008][ T5723] usb 2-1: USB disconnect, device number 4 [ 146.915878][ T6753] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.120996][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 147.228311][ T5745] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.260521][ T6763] ptrace attach of "./syz-executor exec"[5609] was attempted by ""[6763] [ 147.376936][ T5745] usb 4-1: Using ep0 maxpacket: 8 [ 147.379629][ T5745] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 147.379656][ T5745] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 147.379700][ T5745] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.379720][ T5745] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.379742][ T5745] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 147.379764][ T5745] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.379786][ T5745] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.379821][ T5745] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.379842][ T5745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.415136][ T6767] netlink: 512 bytes leftover after parsing attributes in process `syz.2.368'. [ 147.678798][ T6774] loop0: detected capacity change from 0 to 2048 [ 147.706088][ T5745] usb 4-1: usb_control_msg returned -71 [ 147.706136][ T5745] usbtmc 4-1:16.0: can't read capabilities [ 147.706180][ T5745] usbtmc 4-1:16.0: Failed to submit iin_urb [ 147.706274][ T5745] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -90 [ 147.778674][ T5745] usb 4-1: USB disconnect, device number 6 [ 147.912612][ T6774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.353097][ T6788] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 148.384998][ T6774] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 148.385029][ T6774] EXT4-fs (loop0): This should not happen!! Data will be lost [ 148.385029][ T6774] [ 148.385042][ T6774] EXT4-fs (loop0): Total free blocks count 0 [ 148.385055][ T6774] EXT4-fs (loop0): Free/Dirty block details [ 148.385089][ T6774] EXT4-fs (loop0): free_blocks=2415919504 [ 148.385124][ T6774] EXT4-fs (loop0): dirty_blocks=48 [ 148.385142][ T6774] EXT4-fs (loop0): Block reservation details [ 148.385153][ T6774] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 148.386311][ T6788] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 148.552569][ T5609] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 149.366038][ T6820] loop9: detected capacity change from 0 to 524287935 [ 149.667566][ T6827] netlink: 168 bytes leftover after parsing attributes in process `syz.3.394'. [ 149.986822][ T6834] loop3: detected capacity change from 0 to 1024 [ 149.995945][ T6834] ext4: Bad value for 'max_batch_time' [ 150.140730][ T6839] loop2: detected capacity change from 0 to 512 [ 150.175202][ T6839] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.207376][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 150.531518][ T6839] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 150.531761][ T6839] Quota error (device loop2): write_blk: dquota write failed [ 150.531776][ T6839] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 150.531883][ T6839] Quota error (device loop2): write_blk: dquota write failed [ 150.531988][ T6839] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 150.532038][ T6839] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.399: Failed to acquire dquot type 1 [ 150.532072][ T6839] loop2: lost filesystem error report for type 5 error -28 [ 150.540074][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 150.540097][ C1] EXT4-fs (loop2): initial error at time 1777472849: ext4_mb_generate_buddy:1317 [ 150.540116][ C1] EXT4-fs (loop2): last error at time 1777472849: ext4_acquire_dquot:7034 [ 150.586800][ T6839] EXT4-fs (loop2): 1 truncate cleaned up [ 150.720361][ T6839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.022313][ T6863] ALSA: mixer_oss: invalid OSS volume ' ' [ 151.404846][ T5608] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.983721][ T6880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.416'. [ 153.596675][ T5713] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 153.776604][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 153.781222][ T5713] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 153.781251][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.781268][ T5713] usb 3-1: Product: syz [ 153.781281][ T5713] usb 3-1: Manufacturer: syz [ 153.781293][ T5713] usb 3-1: SerialNumber: syz [ 153.795666][ T5713] usb 3-1: config 0 descriptor?? [ 153.810964][ T5713] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 153.857327][ T6912] loop3: detected capacity change from 0 to 256 [ 154.335825][ T5713] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 154.704926][ T5745] usb 3-1: USB disconnect, device number 4 [ 154.748410][ T6923] loop3: detected capacity change from 0 to 32768 [ 154.778965][ T5745] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 154.822991][ T5745] visor 3-1:0.0: device disconnected [ 154.923482][ T6923] JBD2: Ignoring recovery information on journal [ 155.016467][ T6923] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 155.282598][ T6916] loop4: detected capacity change from 0 to 32768 [ 155.559363][ T6916] add_index: next_index = 0. Resetting! [ 155.559392][ T6916] find_entry called with index >= next_index [ 155.559401][ T6916] find_entry called with index >= next_index [ 155.559408][ T6916] find_entry called with index >= next_index [ 155.559415][ T6916] find_entry called with index >= next_index [ 155.693259][ T38] audit: type=1800 audit(1777472854.554:4): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.432" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 155.821963][ T6936] loop2: detected capacity change from 0 to 4096 [ 155.868391][ T6936] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 156.280013][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'. [ 156.355210][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'. [ 156.562500][ T6936] ntfs3(loop2): ino=1a, mi_enum_attr [ 156.562830][ T6936] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 156.616086][ T6945] loop1: detected capacity change from 0 to 4096 [ 156.638918][ T6945] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 156.862518][ T6945] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 156.956122][ T5606] ocfs2: Unmounting device (7,3) on (node local) [ 157.350685][ T6949] loop4: detected capacity change from 0 to 4096 [ 157.577169][ T6953] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.394352][ T6972] program syz.1.453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.546732][ T32] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 158.706600][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 158.724684][ T32] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 158.724712][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.724731][ T32] usb 4-1: Product: syz [ 158.724745][ T32] usb 4-1: Manufacturer: syz [ 158.724759][ T32] usb 4-1: SerialNumber: syz [ 158.784664][ T32] usb 4-1: config 0 descriptor?? [ 158.804992][ T32] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 159.284707][ T6982] loop4: detected capacity change from 0 to 8192 [ 159.334416][ T6982] vfat: Unknown parameter 'ÿ01777777777777777777777' [ 159.425625][ T32] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 159.430755][ T32] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 159.461763][ T32] usb 4-1: USB disconnect, device number 7 [ 160.264402][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.467'. [ 160.336592][ T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.531954][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.548367][ T32] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 160.548403][ T32] usb 3-1: can't read configurations, error -71 [ 160.549024][ T7008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.471'. [ 160.748537][ T7016] loop1: detected capacity change from 0 to 512 [ 160.823927][ T7016] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.474: missing EA_INODE flag [ 160.823950][ T7016] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 160.830856][ C0] EXT4-fs (loop1): initial error at time 1777472859: ext4_xattr_inode_iget:441: inode 12 [ 160.830893][ C0] EXT4-fs (loop1): last error at time 1777472859: ext4_xattr_inode_iget:441: inode 12 [ 161.024211][ T7016] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.474: error while reading EA inode 12 err=-117 [ 161.024242][ T7016] loop1: lost filesystem error report for type 5 error -117 [ 161.025313][ T7016] EXT4-fs (loop1): 1 orphan inode deleted [ 161.031210][ T7016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.138161][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 161.565703][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.847036][ T5723] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 163.008916][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 163.008950][ T5723] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.008989][ T5723] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 163.009092][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.107881][ T5723] usb 4-1: config 0 descriptor?? [ 163.598550][ T5723] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 163.598587][ T5723] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 163.598616][ T5723] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 163.598643][ T5723] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 163.598669][ T5723] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 163.598695][ T5723] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 163.598723][ T5723] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 163.598749][ T5723] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 163.598775][ T5723] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 163.598801][ T5723] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 163.603047][ T5723] kovaplus 0003:1E7D:2D50.0008: item fetching failed at offset 140/235 [ 163.603736][ T5723] kovaplus 0003:1E7D:2D50.0008: parse failed [ 163.709308][ T5723] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -22 [ 163.792529][ T5723] usb 4-1: USB disconnect, device number 8 [ 164.723649][ T7092] loop2: detected capacity change from 0 to 131072 [ 164.736524][ T7092] F2FS-fs (loop2): Test dummy encryption mode enabled [ 164.768164][ T7092] F2FS-fs (loop2): invalid crc value [ 164.871541][ T7092] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 164.879169][ T7092] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 165.086199][ T7104] loop4: detected capacity change from 0 to 512 [ 165.191902][ T7104] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.289797][ T7104] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 165.306469][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 165.306488][ C1] EXT4-fs (loop4): initial error at time 1777472864: ext4_mb_generate_buddy:1317 [ 165.306506][ C1] EXT4-fs (loop4): last error at time 1777472864: ext4_mb_generate_buddy:1317 [ 165.339626][ T7104] Quota error (device loop4): write_blk: dquota write failed [ 165.339649][ T7104] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 165.339762][ T7104] Quota error (device loop4): write_blk: dquota write failed [ 165.339875][ T7104] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 165.339925][ T7104] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.507: Failed to acquire dquot type 1 [ 165.339947][ T7104] loop4: lost filesystem error report for type 5 error -28 [ 165.344008][ T7104] EXT4-fs (loop4): 1 truncate cleaned up [ 165.348910][ T7104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.766596][ T5723] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 165.887320][ T4926] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 165.920188][ T4926] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 165.925905][ T4926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 165.930976][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.931016][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.931052][ T5723] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 165.931074][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.979556][ T4926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 165.981483][ T4926] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.212261][ T5723] usb 4-1: config 0 descriptor?? [ 166.425114][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.701705][ T5723] elan 0003:04F3:0755.0009: failed to start in urb: -90 [ 166.810763][ T5723] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 166.907281][ T5723] usb 4-1: USB disconnect, device number 9 [ 167.177985][ T7133] fido_id[7133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 168.116552][ T5616] Bluetooth: hci5: command tx timeout [ 168.249837][ T7156] loop4: detected capacity change from 0 to 1024 [ 168.298086][ T7156] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.305091][ T7156] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 168.305393][ T7156] EXT4-fs (loop4): orphan cleanup on readonly fs [ 168.311390][ T7156] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 168.311548][ T7156] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 168.311574][ T7156] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 168.332848][ T7159] netlink: 104 bytes leftover after parsing attributes in process `syz.3.527'. [ 168.483049][ T7165] loop2: detected capacity change from 0 to 256 [ 168.484135][ T7165] exfat: Deprecated parameter 'utf8' [ 168.651772][ T7165] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 168.716266][ T7156] EXT4-fs (loop4): 1 truncate cleaned up [ 168.725093][ T7156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.852692][ T38] audit: type=1800 audit(1777472867.714:5): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.508" name="file1" dev="loop2" ino=1048616 res=0 errno=0 [ 168.966116][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.182561][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 169.194819][ T7180] loop2: detected capacity change from 0 to 256 [ 169.211100][ T5713] kernel read not supported for file /dsp1 (pid: 5713 comm: kworker/1:4) [ 170.206583][ T5616] Bluetooth: hci5: command tx timeout [ 170.323561][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 170.743224][ T7115] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.752410][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.752708][ T7115] bridge_slave_0: entered allmulticast mode [ 170.848477][ T7199] program syz.2.541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.869050][ T7115] bridge_slave_0: entered promiscuous mode [ 170.899434][ T7115] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.928264][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.928544][ T7115] bridge_slave_1: entered allmulticast mode [ 170.990418][ T7115] bridge_slave_1: entered promiscuous mode [ 171.317490][ T7201] loop1: detected capacity change from 0 to 256 [ 171.829386][ T7201] exfat: Deprecated parameter 'namecase' [ 171.829505][ T7201] exfat: Deprecated parameter 'utf8' [ 171.829529][ T7201] exfat: Deprecated parameter 'namecase' [ 171.829575][ T7201] exfat: Deprecated parameter 'utf8' [ 171.964845][ T7208] loop2: detected capacity change from 0 to 1024 [ 171.981130][ T7207] loop4: detected capacity change from 0 to 256 [ 172.024424][ T33] block nbd0: Possible stuck request ffff8880272be000: control (read@0,1024B). Runtime 60 seconds [ 172.024464][ T33] block nbd0: Possible stuck request ffff8880272be1c0: control (read@1024,1024B). Runtime 60 seconds [ 172.024485][ T33] block nbd0: Possible stuck request ffff8880272be380: control (read@2048,1024B). Runtime 60 seconds [ 172.024505][ T33] block nbd0: Possible stuck request ffff8880272be540: control (read@3072,1024B). Runtime 60 seconds [ 172.159057][ T7207] exfat: Deprecated parameter 'utf8' [ 172.160523][ T7208] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.160590][ T7208] EXT4-fs: Ignoring removed orlov option [ 172.282671][ T5616] Bluetooth: hci5: command tx timeout [ 172.412198][ T7201] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36332e94, utbl_chksum : 0xe619d30d) [ 172.650063][ T7207] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 172.832841][ T7115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.906271][ T7115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.303330][ T7115] team0: Port device team_slave_0 added [ 173.607969][ T7115] team0: Port device team_slave_1 added [ 173.758137][ T7235] loop4: detected capacity change from 0 to 1024 [ 173.821791][ T7235] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 173.821914][ T7235] System zones: 0-1, 3-36 [ 173.932579][ T7235] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.556: bad orphan inode 134217728 [ 173.932608][ T7235] loop4: lost filesystem error report for type 5 error -117 [ 173.936448][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 173.936469][ C0] EXT4-fs (loop4): initial error at time 1777472872: ext4_orphan_get:1423 [ 173.936487][ C0] EXT4-fs (loop4): last error at time 1777472872: ext4_orphan_get:1423 [ 173.941168][ T7235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.994858][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.994869][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.994882][ T7115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.011705][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.011722][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.011747][ T7115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.203549][ T7247] loop1: detected capacity change from 0 to 1024 [ 174.204527][ T7247] EXT4-fs: Ignoring removed bh option [ 174.215622][ T7247] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.232591][ T7247] EXT4-fs (loop1): orphan cleanup on readonly fs [ 174.232612][ T7247] EXT4-fs error (device loop1): ext4_quota_enable:7221: comm syz.1.561: Bad quota inum: 4294934528, type: 0 [ 174.232636][ T7247] loop1: lost filesystem error report for type 5 error -117 [ 174.241083][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 174.241106][ C1] EXT4-fs (loop1): initial error at time 1777472873: ext4_quota_enable:7221 [ 174.241125][ C1] EXT4-fs (loop1): last error at time 1777472873: ext4_quota_enable:7221 [ 174.246739][ T7247] EXT4-fs (loop1): Remounting filesystem read-only [ 174.246757][ T7247] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 174.246782][ T7247] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 174.313825][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.386132][ T5616] Bluetooth: hci5: command tx timeout [ 174.478160][ T7247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.767997][ T7115] hsr_slave_0: entered promiscuous mode [ 174.779645][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.809939][ T7115] hsr_slave_1: entered promiscuous mode [ 174.811648][ T7115] debugfs: 'hsr0' already exists in 'hsr' [ 174.811670][ T7115] Cannot create hsr debugfs directory [ 175.151802][ T7268] binder: 7265:7268 ioctl c0306201 200000000040 returned -22 [ 175.909526][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.577'. [ 175.978468][ T7288] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 175.980579][ T7288] team0: Port device batadv1 added [ 176.066228][ T7292] loop3: detected capacity change from 0 to 1024 [ 176.657686][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 176.785759][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 177.379189][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 178.273645][ T7115] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.513780][ T7115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.540016][ T7115] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.746064][ T7115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.748020][ T7115] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.943280][ T7115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.963035][ T7115] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.137869][ T7115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.852885][ T7387] loop2: detected capacity change from 0 to 256 [ 180.076144][ T7391] loop1: detected capacity change from 0 to 1024 [ 180.173718][ T7387] FAT-fs (loop2): Directory bread(block 64) failed [ 180.173739][ T7387] FAT-fs (loop2): Directory bread(block 65) failed [ 180.173791][ T7387] FAT-fs (loop2): Directory bread(block 66) failed [ 180.173803][ T7387] FAT-fs (loop2): Directory bread(block 67) failed [ 180.173851][ T7387] FAT-fs (loop2): Directory bread(block 68) failed [ 180.173862][ T7387] FAT-fs (loop2): Directory bread(block 69) failed [ 180.173911][ T7387] FAT-fs (loop2): Directory bread(block 70) failed [ 180.173922][ T7387] FAT-fs (loop2): Directory bread(block 71) failed [ 180.173971][ T7387] FAT-fs (loop2): Directory bread(block 72) failed [ 180.173981][ T7387] FAT-fs (loop2): Directory bread(block 73) failed [ 180.303940][ T7391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 180.304080][ T7391] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.372899][ T7115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.648473][ T38] audit: type=1800 audit(1777472879.504:6): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.614" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 180.709776][ T7115] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.772000][ T7399] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.614: bg 0: block 112: padding at end of block bitmap is not set [ 180.777918][ T7405] Zero length message leads to an empty skb [ 180.801640][ T7399] EXT4-fs (loop1): Remounting filesystem read-only [ 180.824006][ T3184] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.840595][ T3184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.988504][ T3402] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.988697][ T3402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.080133][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.312967][ T7412] loop3: detected capacity change from 0 to 512 [ 181.417584][ T7412] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 181.512909][ T7412] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 181.513045][ T7412] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.624: iget: bad i_size value: 12154757448730 [ 181.513074][ T7412] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 181.516529][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 181.516551][ C1] EXT4-fs (loop3): initial error at time 1777472880: ext4_orphan_get:1397: inode 13 [ 181.516579][ C1] EXT4-fs (loop3): last error at time 1777472880: ext4_orphan_get:1397: inode 13 [ 181.519898][ T7412] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.624: couldn't read orphan inode 13 (err -117) [ 181.519926][ T7412] loop3: lost filesystem error report for type 5 error -117 [ 181.529368][ T7412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.783528][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.830285][ T7423] loop4: detected capacity change from 0 to 128 [ 181.831716][ T7423] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.904757][ T7423] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.123044][ T1174] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 183.106558][ T32] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 183.300882][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 183.313995][ T32] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.314021][ T32] usb 5-1: config 0 has no interface number 0 [ 183.317948][ T32] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 183.317983][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.318002][ T32] usb 5-1: Product: syz [ 183.318015][ T32] usb 5-1: Manufacturer: syz [ 183.318028][ T32] usb 5-1: SerialNumber: syz [ 183.462426][ T32] usb 5-1: config 0 descriptor?? [ 183.480046][ T32] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 183.480075][ T32] usb 5-1: selecting invalid altsetting 1 [ 183.480083][ T32] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 183.712223][ T7115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.885682][ T32] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.886343][ T32] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 183.886750][ T32] usb 5-1: media controller created [ 183.964587][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.295690][ T7483] overlayfs: upper fs does not support tmpfile. [ 184.570872][ T32] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 184.570931][ T32] zl10353_read_register: readreg error (reg=127, ret==-32) [ 184.594681][ T32] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 184.712054][ T7115] veth0_vlan: entered promiscuous mode [ 184.791701][ T7115] veth1_vlan: entered promiscuous mode [ 184.863657][ T7493] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 184.863820][ T7493] syzkaller0: linktype set to 774 [ 185.121859][ T7495] syz.1.651 (7495) used greatest stack depth: 18368 bytes left [ 185.122493][ T32] usb 5-1: USB disconnect, device number 6 [ 185.452525][ T7504] loop2: detected capacity change from 0 to 512 [ 185.511920][ T7504] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.655: missing EA_INODE flag [ 185.511953][ T7504] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 185.513409][ T7504] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.655: error while reading EA inode 12 err=-117 [ 185.513440][ T7504] loop2: lost filesystem error report for type 5 error -117 [ 185.513754][ T7504] EXT4-fs (loop2): 1 orphan inode deleted [ 185.517748][ T7504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.604843][ T5608] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.928225][ T7115] veth0_macvtap: entered promiscuous mode [ 185.977573][ T7115] veth1_macvtap: entered promiscuous mode [ 186.045614][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.084241][ T7513] loop3: detected capacity change from 0 to 2048 [ 186.146361][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.191651][ T7513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.261683][ T3430] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.303444][ T3430] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.305476][ T3430] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.313523][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.319350][ T5908] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 186.348219][ T3430] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.510216][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.510271][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.510298][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.510335][ T5908] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 186.510357][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.602792][ T5908] usb 5-1: config 0 descriptor?? [ 187.444438][ T5908] hid_parser_main: 119 callbacks suppressed [ 187.444462][ T5908] hid-rmi 0003:0461:4E72.000A: unknown main item tag 0x2 [ 187.444493][ T5908] hid-rmi 0003:0461:4E72.000A: unknown main item tag 0x0 [ 187.444517][ T5908] hid-rmi 0003:0461:4E72.000A: unknown main item tag 0x0 [ 187.444544][ T5908] hid-rmi 0003:0461:4E72.000A: unknown main item tag 0x0 [ 187.444567][ T5908] hid-rmi 0003:0461:4E72.000A: unknown main item tag 0x0 [ 187.444590][ T5908] hid-rmi 0003:0461:4E72.000A: unknown main item tag 0x0 [ 187.533579][ T5908] hid-rmi 0003:0461:4E72.000A: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.4-1/input0 [ 187.605534][ T5908] usb 5-1: USB disconnect, device number 7 [ 187.882815][ T7531] fido_id[7531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 188.208196][ T3402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.208215][ T3402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.267535][ T7534] loop2: detected capacity change from 0 to 512 [ 188.272918][ T7534] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.407186][ T7534] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 188.434655][ T7534] EXT4-fs (loop2): 1 truncate cleaned up [ 188.476632][ T7534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.712045][ T3402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.712064][ T3402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.992175][ T5608] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.738988][ T7577] loop5: detected capacity change from 0 to 128 [ 189.828462][ T7573] loop3: detected capacity change from 0 to 8192 [ 189.949699][ T7577] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 190.028115][ T7577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.036702][ T32] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 190.249473][ T32] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 190.249500][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.265631][ T32] usb 2-1: config 0 descriptor?? [ 190.312131][ T7573] loop3: [POWERTEC] [ 190.336696][ T32] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 190.414230][ T7593] loop4: detected capacity change from 0 to 128 [ 190.499971][ T7593] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.500456][ T7593] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.111150][ T5610] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.133908][ T32] usb 2-1: USB disconnect, device number 5 [ 191.422252][ T7611] netlink: 277 bytes leftover after parsing attributes in process `syz.3.695'. [ 192.911261][ T7648] syz.1.710 uses obsolete (PF_INET,SOCK_PACKET) [ 193.808355][ T7671] input: syz1 as /devices/virtual/input/input9 [ 194.031437][ T32] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 194.082017][ T7681] netlink: 52 bytes leftover after parsing attributes in process `syz.2.726'. [ 194.213055][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 194.213084][ T32] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 194.213097][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.259968][ T32] usb 4-1: config 0 descriptor?? [ 194.274310][ T7672] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 194.414476][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.414824][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.655848][ T7686] netlink: 84 bytes leftover after parsing attributes in process `syz.2.728'. [ 194.774604][ T32] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 194.774641][ T32] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 194.774667][ T32] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 194.774692][ T32] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 194.774718][ T32] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 194.774744][ T32] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 194.774770][ T32] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 194.774795][ T32] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 194.774821][ T32] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 194.776216][ T32] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0 [ 194.790877][ T32] logitech-djreceiver 0003:046D:C71F.000B: collection stack underflow [ 194.790909][ T32] logitech-djreceiver 0003:046D:C71F.000B: item 0 1 0 12 parsing failed [ 194.791565][ T32] logitech-djreceiver 0003:046D:C71F.000B: logi_dj_probe: parse failed [ 194.791634][ T32] logitech-djreceiver 0003:046D:C71F.000B: probe with driver logitech-djreceiver failed with error -22 [ 194.928660][ T10] usb 4-1: USB disconnect, device number 10 [ 195.051699][ T7688] loop5: detected capacity change from 0 to 32768 [ 195.109072][ T7688] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 195.266850][ T7704] netlink: 27 bytes leftover after parsing attributes in process `syz.2.733'. [ 195.301611][ T7688] XFS (loop5): Ending clean mount [ 195.935869][ T7721] loop3: detected capacity change from 0 to 2048 [ 196.069364][ T7721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.069451][ T7721] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.214737][ T7725] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 196.214764][ T7725] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.323772][ T32] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 196.344703][ T7115] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 196.354520][ T7725] vhci_hcd vhci_hcd.0: Device attached [ 196.418085][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.580145][ T37] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 196.634485][ T32] usb 5-1: config 0 has no interfaces? [ 196.634522][ T32] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.634545][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.693282][ T32] usb 5-1: config 0 descriptor?? [ 196.758772][ T7736] program syz.2.746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.969236][ T7729] usb 41-1: recv xbuf, 0 [ 196.973883][ T32] usb 5-1: USB disconnect, device number 8 [ 197.134076][ T3184] vhci_hcd vhci_hcd.4: stop threads [ 197.158298][ T3184] vhci_hcd vhci_hcd.4: release socket [ 197.199065][ T3184] vhci_hcd vhci_hcd.4: disconnect device [ 197.238607][ T37] usb 41-1: device descriptor read/64, error -71 [ 197.440777][ T37] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 197.628254][ T7745] loop2: detected capacity change from 0 to 128 [ 197.679366][ T7745] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 197.835047][ T7749] loop5: detected capacity change from 0 to 128 [ 197.838574][ T7747] loop3: detected capacity change from 0 to 2048 [ 197.873342][ T7747] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 197.883102][ T7747] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 197.886327][ T7747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.998812][ T7749] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.001437][ T7749] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.213308][ T7756] loop1: detected capacity change from 0 to 512 [ 198.307728][ T7756] FAT-fs (loop1): bogus logical sector size 0 [ 198.307751][ T7756] FAT-fs (loop1): Can't find a valid FAT filesystem [ 198.309529][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 198.801369][ T58] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 198.876256][ T7115] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.961584][ T7762] loop5: detected capacity change from 0 to 512 [ 198.964575][ T7762] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 199.018094][ T7762] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 199.046548][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 199.046570][ C1] EXT4-fs (loop5): initial error at time 1777472897: ext4_mb_generate_buddy:1317 [ 199.046589][ C1] EXT4-fs (loop5): last error at time 1777472897: ext4_mb_generate_buddy:1317 [ 199.071911][ T7762] EXT4-fs (loop5): 1 truncate cleaned up [ 199.074505][ T7762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.164066][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.758'. [ 199.164092][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.758'. [ 199.580859][ T7772] loop1: detected capacity change from 0 to 256 [ 200.053310][ T7115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.461328][ T7796] loop4: detected capacity change from 0 to 512 [ 200.505504][ T7803] netlink: 48 bytes leftover after parsing attributes in process `syz.5.775'. [ 201.096551][ T37] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 201.171554][ T7825] netlink: 'syz.4.781': attribute type 2 has an invalid length. [ 201.174768][ T7827] netpci0: tun_chr_ioctl cmd 1074025672 [ 201.174790][ T7827] netpci0: ignored: set checksum enabled [ 201.259001][ T37] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.259029][ T37] usb 6-1: config 0 has no interface number 0 [ 201.259068][ T37] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 201.259093][ T37] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 201.259129][ T37] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.259150][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.264991][ T37] usb 6-1: config 0 descriptor?? [ 201.272782][ T7813] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 201.384491][ T37] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 201.436330][ T7834] loop2: detected capacity change from 0 to 1024 [ 201.530365][ C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 201.553008][ T37] usb 6-1: USB disconnect, device number 2 [ 201.559750][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 201.568595][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 201.646541][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 201.646573][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 202.082230][ T33] block nbd0: Possible stuck request ffff8880272be000: control (read@0,1024B). Runtime 90 seconds [ 202.082274][ T33] block nbd0: Possible stuck request ffff8880272be1c0: control (read@1024,1024B). Runtime 90 seconds [ 202.082303][ T33] block nbd0: Possible stuck request ffff8880272be380: control (read@2048,1024B). Runtime 90 seconds [ 202.082328][ T33] block nbd0: Possible stuck request ffff8880272be540: control (read@3072,1024B). Runtime 90 seconds [ 202.371650][ T7849] netlink: 100 bytes leftover after parsing attributes in process `syz.4.794'. [ 202.372003][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.796'. [ 202.787375][ T7863] input: syz1 as /devices/virtual/input/input10 [ 202.787408][ T7863] input: failed to attach handler leds to device input10, error: -6 [ 202.794659][ T7859] loop4: detected capacity change from 0 to 4096 [ 202.882931][ T7859] NILFS (loop4): invalid segment: Checksum error in segment payload [ 202.882957][ T7859] NILFS (loop4): trying rollback from an earlier position [ 203.050626][ T7859] NILFS (loop4): recovery complete [ 203.066336][ T7871] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.152979][ T7873] loop2: detected capacity change from 0 to 512 [ 203.267324][ T7873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.267445][ T7873] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.491846][ T7880] loop3: detected capacity change from 0 to 1024 [ 203.622742][ T7880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 203.622877][ T7880] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.803492][ T38] audit: type=1800 audit(1777472902.664:7): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.806" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 203.916172][ T7886] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.806: bg 0: block 112: padding at end of block bitmap is not set [ 203.942028][ T7886] EXT4-fs (loop3): Remounting filesystem read-only [ 204.337125][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 205.256969][ T7915] loop3: detected capacity change from 0 to 128 [ 205.421054][ T7915] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.444803][ T7915] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.746627][ T5608] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.912042][ T5606] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.425454][ T7941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.279892][ T5614] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 208.692443][ T7992] loop1: detected capacity change from 0 to 32768 [ 208.719707][ T7992] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.849 (7992) [ 208.804407][ T7992] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.804452][ T7992] BTRFS info (device loop1): using sha256 checksum algorithm [ 208.835646][ T5614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.835693][ T5614] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 208.835713][ T5614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.863693][ T5614] usb 3-1: config 0 descriptor?? [ 209.275158][ T7992] BTRFS info (device loop1): rebuilding free space tree [ 209.367873][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.372080][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.436924][ T5614] kye 0003:0458:5010.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 209.437518][ T5614] hid_parser_main: 368 callbacks suppressed [ 209.437536][ T5614] kye 0003:0458:5010.000C: unknown main item tag 0x0 [ 209.437562][ T5614] kye 0003:0458:5010.000C: unknown main item tag 0x4 [ 209.437622][ T5614] kye 0003:0458:5010.000C: unknown main item tag 0x0 [ 209.437647][ T5614] kye 0003:0458:5010.000C: unknown main item tag 0x0 [ 209.437670][ T5614] kye 0003:0458:5010.000C: unknown main item tag 0x0 [ 209.437693][ T5614] kye 0003:0458:5010.000C: unknown main item tag 0x0 [ 209.437715][ T5614] kye 0003:0458:5010.000C: unknown main item tag 0x0 [ 209.437739][ T5614] kye 0003:0458:5010.000C: unknown main item tag 0x0 [ 209.447042][ T5614] kye 0003:0458:5010.000C: unknown main item tag 0x0 [ 209.447084][ T5614] kye 0003:0458:5010.000C: unknown main item tag 0x0 [ 209.549216][ T4938] kernel read not supported for file /adsp1 (pid: 4938 comm: kworker/1:3) [ 209.779038][ T5614] kye 0003:0458:5010.000C: hidraw0: USB HID v0.07 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 209.779072][ T5614] kye 0003:0458:5010.000C: tablet-enabling feature report not found [ 209.779085][ T5614] kye 0003:0458:5010.000C: tablet enabling failed [ 209.829272][ T7992] BTRFS info (device loop1): disabling free space tree [ 209.829767][ T7992] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 209.829795][ T7992] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 209.889150][ T7992] BTRFS info (device loop1): setting nodatasum [ 209.889182][ T7992] BTRFS info (device loop1): setting nodatacow [ 209.889202][ T7992] BTRFS info (device loop1): turning off barriers [ 209.889221][ T7992] BTRFS info (device loop1): force clearing of disk cache [ 209.983627][ T5614] usb 3-1: USB disconnect, device number 7 [ 210.374403][ T8022] fido_id[8022]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 211.101127][ T5272] veth1_macvtap: left promiscuous mode [ 211.350954][ T8046] loop3: detected capacity change from 0 to 512 [ 211.535337][ T8046] EXT4-fs error (device loop3): __ext4_iget:5481: inode #11: block 1: comm syz.3.862: invalid block [ 211.535370][ T8046] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 211.536238][ T8046] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.862: couldn't read orphan inode 11 (err -117) [ 211.536268][ T8046] loop3: lost filesystem error report for type 5 error -117 [ 211.553035][ T8046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.654521][ T8046] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 211.834633][ T8055] loop5: detected capacity change from 0 to 164 [ 211.840838][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.299608][ T8069] gtp0: entered promiscuous mode [ 212.299632][ T8069] gtp0: entered allmulticast mode [ 212.697287][ T8055] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 212.903890][ T8080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.869'. [ 213.368644][ T8086] netlink: 'syz.3.871': attribute type 12 has an invalid length. [ 214.044657][ T5605] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 214.314468][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 214.461200][ T10] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 214.461230][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.461248][ T10] usb 4-1: Product: syz [ 214.461260][ T10] usb 4-1: Manufacturer: syz [ 214.461272][ T10] usb 4-1: SerialNumber: syz [ 214.504591][ T10] usb 4-1: config 0 descriptor?? [ 214.993851][ T10] usb 4-1: Firmware: major: 0, minor: 224, hardware type: UNKNOWN (223) [ 215.221466][ T10] usb 4-1: failed to fetch extended address, random address set [ 215.275636][ T10] usb 4-1: atusb_probe: initialization failed, error = -524 [ 215.276318][ T10] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 215.369821][ T10] usb 4-1: USB disconnect, device number 11 [ 215.715455][ T8121] loop4: detected capacity change from 0 to 64 [ 215.992365][ T8127] netlink: 128 bytes leftover after parsing attributes in process `syz.2.889'. [ 215.992422][ T8127] netlink: 'syz.2.889': attribute type 6 has an invalid length. [ 216.104918][ T8132] loop3: detected capacity change from 0 to 128 [ 216.335063][ T8136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.891'. [ 216.778686][ T8145] netlink: 'syz.1.897': attribute type 4 has an invalid length. [ 216.778707][ T8145] netlink: 17 bytes leftover after parsing attributes in process `syz.1.897'. [ 216.783858][ T8145] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.897'. [ 217.174469][ T8152] loop2: detected capacity change from 0 to 4096 [ 217.407139][ T5908] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 217.576600][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 217.578714][ T5908] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 217.578736][ T5908] usb 6-1: config 2 has no interface number 0 [ 217.578773][ T5908] usb 6-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 217.578796][ T5908] usb 6-1: config 2 interface 88 has no altsetting 0 [ 217.581836][ T5908] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 217.581863][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.581892][ T5908] usb 6-1: Product: syz [ 217.581906][ T5908] usb 6-1: Manufacturer: syz [ 217.581920][ T5908] usb 6-1: SerialNumber: syz [ 217.636878][ T8152] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 217.726897][ T8158] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 217.956288][ T8158] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 218.376764][ T5908] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 218.377064][ T5908] asix 6-1:2.88: probe with driver asix failed with error -71 [ 218.420703][ T5908] usb 6-1: USB disconnect, device number 3 [ 218.560037][ T8177] loop2: detected capacity change from 0 to 256 [ 218.575508][ T8177] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xb963610a, utbl_chksum : 0xe619d30d) [ 219.326976][ T8199] netlink: 48 bytes leftover after parsing attributes in process `syz.5.917'. [ 219.486044][ T8199] ip6gre1: entered allmulticast mode [ 219.936361][ T8219] program syz.4.926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.257877][ T8223] loop5: detected capacity change from 0 to 512 [ 220.347579][ T8223] EXT4-fs (loop5): 1 truncate cleaned up [ 220.350589][ T8223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.859674][ T7115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.889502][ T8240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.144699][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.937'. [ 221.144735][ T8254] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.439162][ T8261] loop5: detected capacity change from 0 to 512 [ 221.439450][ T8262] loop2: detected capacity change from 0 to 256 [ 221.445651][ T8262] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 221.478772][ T8262] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.516383][ T8266] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 221.576341][ T8261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.607319][ T8261] EXT4-fs warning (device loop5): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 221.737151][ T7115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.925368][ T38] audit: type=1326 audit(1777472920.784:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300d3cdd9 code=0x7ffc0000 [ 221.990077][ T38] audit: type=1326 audit(1777472920.804:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300d3cdd9 code=0x7ffc0000 [ 221.990410][ T38] audit: type=1326 audit(1777472920.854:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd300d3cdd9 code=0x7ffc0000 [ 222.001751][ T38] audit: type=1326 audit(1777472920.864:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300d3cdd9 code=0x7ffc0000 [ 222.001804][ T38] audit: type=1326 audit(1777472920.864:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd300d3cdd9 code=0x7ffc0000 [ 222.141855][ T38] audit: type=1326 audit(1777472921.004:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300d3cdd9 code=0x7ffc0000 [ 222.141914][ T38] audit: type=1326 audit(1777472921.004:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300d3cdd9 code=0x7ffc0000 [ 222.280736][ T8279] loop2: detected capacity change from 0 to 128 [ 222.294863][ T8279] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 222.319895][ T8279] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.549534][ T8248] loop4: detected capacity change from 0 to 32768 [ 222.641032][ T8248] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 222.744836][ T8248] XFS (loop4): Ending clean mount [ 223.501924][ T8318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.964'. [ 223.786677][ T5610] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 223.833222][ T8328] overlayfs: overlapping lowerdir path [ 224.491483][ T8347] batadv_slave_0: entered promiscuous mode [ 224.678516][ T8347] batman_adv: batadv0: Adding interface: macsec2 [ 224.678535][ T8347] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.678564][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.678580][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.678595][ T8347] batman_adv: batadv0: Interface activated: macsec2 [ 224.833942][ T8355] loop2: detected capacity change from 0 to 64 [ 225.275861][ T38] audit: type=1326 audit(1777472924.134:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.1.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300d3cdd9 code=0x7ffc0000 [ 225.427610][ T38] audit: type=1326 audit(1777472924.134:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.1.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300d3cdd9 code=0x7ffc0000 [ 225.427665][ T38] audit: type=1326 audit(1777472924.264:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.1.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd300d3cdd9 code=0x7ffc0000 [ 225.785507][ T8376] loop2: detected capacity change from 0 to 256 [ 226.832396][ T8406] netlink: 48 bytes leftover after parsing attributes in process `syz.1.998'. [ 226.835078][ T8403] loop4: detected capacity change from 0 to 1024 [ 226.934068][ T8403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 226.934220][ T8403] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.066314][ T8414] loop3: detected capacity change from 0 to 128 [ 227.106593][ T8410] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 227.158039][ T8414] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.173338][ T8410] EXT4-fs (loop4): Remounting filesystem read-only [ 227.188919][ T8414] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.230890][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 227.445289][ T5606] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.693833][ T8426] loop3: detected capacity change from 0 to 256 [ 228.025685][ T8437] netlink: 'syz.4.1011': attribute type 16 has an invalid length. [ 228.482478][ T8454] loop4: detected capacity change from 0 to 256 [ 228.601051][ T8454] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 228.710614][ T8458] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1018'. [ 229.943422][ T8501] loop4: detected capacity change from 0 to 2048 [ 230.013488][ T8501] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.281978][ T4938] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 230.300481][ T8513] loop3: detected capacity change from 0 to 256 [ 230.437471][ T4938] usb 2-1: Using ep0 maxpacket: 8 [ 230.439366][ T4938] usb 2-1: config 0 has no interfaces? [ 230.447874][ T4938] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 230.447903][ T4938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.447922][ T4938] usb 2-1: Product: syz [ 230.447936][ T4938] usb 2-1: Manufacturer: syz [ 230.447948][ T4938] usb 2-1: SerialNumber: syz [ 230.585337][ T4938] usb 2-1: config 0 descriptor?? [ 230.769595][ T37] hid_parser_main: 28 callbacks suppressed [ 230.769619][ T37] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 230.769648][ T37] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 230.769673][ T37] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 230.769697][ T37] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 230.769720][ T37] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 230.772758][ T37] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 230.772789][ T37] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 230.772821][ T37] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 230.772847][ T37] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 230.772872][ T37] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 231.010513][ T5908] usb 2-1: USB disconnect, device number 6 [ 231.199271][ T8526] erspan0: entered promiscuous mode [ 231.461154][ T37] hid-generic 0006:0004:0009.000D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 231.542476][ T8540] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1051'. [ 231.686339][ T8546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1054'. [ 232.157130][ T33] block nbd0: Possible stuck request ffff8880272be000: control (read@0,1024B). Runtime 120 seconds [ 232.157175][ T33] block nbd0: Possible stuck request ffff8880272be1c0: control (read@1024,1024B). Runtime 120 seconds [ 232.157203][ T33] block nbd0: Possible stuck request ffff8880272be380: control (read@2048,1024B). Runtime 120 seconds [ 232.157229][ T33] block nbd0: Possible stuck request ffff8880272be540: control (read@3072,1024B). Runtime 120 seconds [ 232.289030][ T8554] loop4: detected capacity change from 0 to 512 [ 232.403378][ T8554] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.614172][ T8554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.614319][ T8554] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.859822][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.247532][ T8574] loop5: detected capacity change from 0 to 512 [ 233.528157][ T8574] EXT4-fs (loop5): 1 truncate cleaned up [ 233.537634][ T8574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.650565][ T38] kauditd_printk_skb: 213 callbacks suppressed [ 233.650580][ T38] audit: type=1800 audit(1777472932.474:231): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1064" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 233.995644][ T7115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.171077][ T5614] IPVS: starting estimator thread 0... [ 234.282815][ T8587] IPVS: using max 9 ests per chain, 21600 per kthread [ 234.471473][ T8597] loop1: detected capacity change from 0 to 256 [ 234.527975][ T8597] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 234.621430][ T38] audit: type=1326 audit(1777472933.484:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f172405dbc9 code=0x7ffc0000 [ 234.621475][ T38] audit: type=1326 audit(1777472933.484:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1724019b3b code=0x7ffc0000 [ 234.621512][ T38] audit: type=1326 audit(1777472933.484:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172405cdd9 code=0x7ffc0000 [ 234.621547][ T38] audit: type=1326 audit(1777472933.484:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172405cdd9 code=0x7ffc0000 [ 234.636287][ T38] audit: type=1326 audit(1777472933.494:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f172401922c code=0x7ffc0000 [ 234.636338][ T38] audit: type=1326 audit(1777472933.494:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f172401928e code=0x7ffc0000 [ 234.636375][ T38] audit: type=1326 audit(1777472933.494:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f172405ca6b code=0x7ffc0000 [ 234.636671][ T38] audit: type=1326 audit(1777472933.494:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f172405cdd9 code=0x7ffc0000 [ 234.636709][ T38] audit: type=1326 audit(1777472933.494:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172405cdd9 code=0x7ffc0000 [ 235.069813][ T8610] loop1: detected capacity change from 0 to 256 [ 235.150540][ T8614] loop2: detected capacity change from 0 to 256 [ 235.353037][ T5713] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 235.547830][ T5713] usb 5-1: Using ep0 maxpacket: 8 [ 235.575253][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.575287][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.575308][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 235.575348][ T5713] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 235.575371][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.647468][ T5713] usb 5-1: config 0 descriptor?? [ 235.869970][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.870566][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.906912][ T8631] loop1: detected capacity change from 0 to 64 [ 236.252731][ T8635] sctp: [Deprecated]: syz.5.1089 (pid 8635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.252731][ T8635] Use struct sctp_sack_info instead [ 236.366893][ T5713] hid_parser_main: 7 callbacks suppressed [ 236.366920][ T5713] elecom 0003:056E:00FE.000E: unknown main item tag 0x4 [ 236.366956][ T5713] elecom 0003:056E:00FE.000E: unknown main item tag 0x6 [ 236.366979][ T5713] elecom 0003:056E:00FE.000E: unknown main item tag 0x5 [ 236.367004][ T5713] elecom 0003:056E:00FE.000E: unknown main item tag 0x0 [ 236.367030][ T5713] elecom 0003:056E:00FE.000E: unknown main item tag 0x0 [ 236.367058][ T5713] elecom 0003:056E:00FE.000E: unknown main item tag 0x0 [ 236.367086][ T5713] elecom 0003:056E:00FE.000E: unknown main item tag 0x0 [ 236.367114][ T5713] elecom 0003:056E:00FE.000E: unknown main item tag 0x0 [ 236.367139][ T5713] elecom 0003:056E:00FE.000E: unknown main item tag 0x0 [ 236.367167][ T5713] elecom 0003:056E:00FE.000E: unknown main item tag 0x0 [ 236.493585][ T5713] elecom 0003:056E:00FE.000E: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 236.664735][ T5713] usb 5-1: USB disconnect, device number 9 [ 237.483553][ T8660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.773965][ T8669] trusted_key: encrypted_key: keyword 'epdate' not recognized [ 238.001135][ T5614] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 238.222363][ T8673] loop5: detected capacity change from 0 to 40427 [ 238.224347][ T8673] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 238.224371][ T8673] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 238.261146][ T8673] F2FS-fs (loop5): build fault injection rate: 2 [ 238.261172][ T8673] F2FS-fs (loop5): build fault injection type: 0x1f8 [ 238.275781][ T8679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1110'. [ 238.275806][ T8679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1110'. [ 238.291857][ T8673] F2FS-fs (loop5): invalid crc value [ 238.347223][ T5614] usb 5-1: Using ep0 maxpacket: 32 [ 238.349537][ T5614] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 238.349563][ T5614] usb 5-1: config 0 has no interface number 0 [ 238.351772][ T5614] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 238.351797][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.351817][ T5614] usb 5-1: Product: syz [ 238.351830][ T5614] usb 5-1: Manufacturer: syz [ 238.351844][ T5614] usb 5-1: SerialNumber: syz [ 238.406380][ T8673] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 238.433431][ T8673] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 238.433461][ T8673] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 238.433854][ T5614] usb 5-1: config 0 descriptor?? [ 238.465438][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1110'. [ 238.465458][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1110'. [ 238.513146][ T5614] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 238.530719][ T8673] F2FS-fs (loop5): inject orphan in f2fs_acquire_orphan_inode of __f2fs_tmpfile+0x28d/0x460 [ 238.826517][ T5595] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 238.891494][ T8692] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1113'. [ 238.908362][ T5614] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 238.955451][ T5614] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 238.976626][ T5595] usb 4-1: Using ep0 maxpacket: 16 [ 238.998012][ T5595] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 238.998044][ T5595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 239.004813][ T5595] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 239.004843][ T5595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.004862][ T5595] usb 4-1: Product: syz [ 239.004875][ T5595] usb 4-1: Manufacturer: syz [ 239.004890][ T5595] usb 4-1: SerialNumber: syz [ 239.135056][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 239.199962][ T5595] usb 4-1: config 0 descriptor?? [ 239.221538][ T5614] usb 5-1: USB disconnect, device number 10 [ 239.261241][ T5595] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 239.261278][ T5595] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 239.419843][ T5614] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 239.611608][ T5614] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 239.633775][ T5614] quatech2 5-1:0.51: device disconnected [ 239.764081][ T8697] loop1: detected capacity change from 0 to 8192 [ 239.849594][ T5595] em28xx 4-1:0.0: chip ID is em28178 [ 240.129476][ T5723] usb 4-1: USB disconnect, device number 12 [ 240.147133][ T5723] em28xx 4-1:0.0: Disconnecting em28xx [ 241.090057][ T5723] em28xx 4-1:0.0: Freeing device [ 241.853680][ T8751] loop4: detected capacity change from 0 to 64 [ 242.147467][ T8758] loop2: detected capacity change from 0 to 2048 [ 242.165052][ T8758] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.413888][ T8787] loop1: detected capacity change from 0 to 512 [ 243.736050][ T8787] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.1152: ea_inode file size=16777216 entry size=6 [ 243.737275][ T8787] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1152: iget: bad extra_isize 90 (inode size 256) [ 243.737309][ T8787] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 243.738379][ T8787] EXT4-fs (loop1): Remounting filesystem read-only [ 243.738759][ T8787] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -30) [ 243.738831][ T8787] EXT4-fs (loop1): 1 orphan inode deleted [ 243.741467][ T8787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.080993][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.458645][ T8812] loop4: detected capacity change from 0 to 512 [ 244.466710][ T8812] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 244.654423][ T8812] EXT4-fs (loop4): 1 truncate cleaned up [ 244.668971][ T8812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.831334][ T8825] loop5: detected capacity change from 0 to 128 [ 245.074570][ T8822] EXT4-fs error (device loop4): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.4.1162: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 245.277706][ T8837] loop2: detected capacity change from 0 to 1024 [ 245.278855][ T8837] EXT4-fs: Ignoring removed orlov option [ 245.358286][ T8822] EXT4-fs (loop4): Remounting filesystem read-only [ 245.358313][ T8822] EXT4-fs warning (device loop4): ext4_rename_delete:3739: inode #2: comm syz.4.1162: Deleting old file: nlink 5, error=-117 [ 245.390644][ T8837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.470964][ T38] kauditd_printk_skb: 15 callbacks suppressed [ 245.470982][ T38] audit: type=1800 audit(1777472944.334:256): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1173" name="bus" dev="loop2" ino=11 res=0 errno=0 [ 245.506351][ T8843] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1174'. [ 245.612212][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.765118][ T5608] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.209032][ T37] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 246.237516][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 246.273305][ T8867] program syz.2.1185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.376565][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 246.378922][ T37] usb 6-1: config 8 has an invalid interface number: 111 but max is 0 [ 246.378948][ T37] usb 6-1: config 8 has no interface number 0 [ 246.378992][ T37] usb 6-1: config 8 interface 111 altsetting 0 endpoint 0xB has invalid maxpacket 2007, setting to 1024 [ 246.379018][ T37] usb 6-1: config 8 interface 111 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 246.381167][ T37] usb 6-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 246.381195][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.381214][ T37] usb 6-1: Product: syz [ 246.381226][ T37] usb 6-1: Manufacturer: syz [ 246.381239][ T37] usb 6-1: SerialNumber: syz [ 246.474808][ T8853] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 246.555305][ T8874] loop4: detected capacity change from 0 to 512 [ 246.740985][ T8874] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 246.741069][ T8874] System zones: 1-12 [ 246.744412][ T8874] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.1189: missing EA_INODE flag [ 246.744441][ T8874] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.747046][ T8874] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1189: error while reading EA inode 12 err=-117 [ 246.747078][ T8874] loop4: lost filesystem error report for type 5 error -117 [ 246.748188][ T8874] EXT4-fs (loop4): 1 orphan inode deleted [ 246.751051][ T8874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.856080][ T37] aircable 6-1:8.111: aircable converter detected [ 246.962809][ T37] usb 6-1: aircable converter now attached to ttyUSB0 [ 246.997467][ T37] usb 6-1: USB disconnect, device number 4 [ 247.030727][ T37] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 247.040828][ T37] aircable 6-1:8.111: device disconnected [ 247.338439][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.584093][ T8889] batman_adv: batadv0: Adding interface: ipvlan2 [ 247.584120][ T8889] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.584149][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.584163][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.584173][ T8889] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 248.035142][ T8899] loop1: detected capacity change from 0 to 40427 [ 248.056477][ T8899] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 248.056506][ T8899] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 248.063980][ T8899] F2FS-fs (loop1): build fault injection rate: 2 [ 248.064004][ T8899] F2FS-fs (loop1): build fault injection type: 0x1f8 [ 248.066029][ T8899] F2FS-fs (loop1): invalid crc value [ 248.167737][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1197'. [ 248.216993][ T8899] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 248.255503][ T8899] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 248.255535][ T8899] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 248.342190][ T8899] F2FS-fs (loop1): inject orphan in f2fs_acquire_orphan_inode of __f2fs_tmpfile+0x28d/0x460 [ 248.417515][ T8909] loop5: detected capacity change from 0 to 512 [ 248.440124][ T8909] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 248.522041][ T8913] loop4: detected capacity change from 0 to 128 [ 248.798935][ T8916] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 248.895989][ T8909] EXT4-fs (loop5): 1 orphan inode deleted [ 248.896018][ T8909] EXT4-fs (loop5): 1 truncate cleaned up [ 248.949557][ T8909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.067829][ T8917] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 249.812110][ T7115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.972426][ T8927] input: syz0 as /devices/virtual/input/input11 [ 250.423908][ C1] sd 0:0:1:0: [sda] tag#2210 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 250.423989][ C1] sd 0:0:1:0: [sda] tag#2210 CDB: Write(6) 0a 00 00 00 0c 00 [ 250.934329][ T8953] netlink: 'syz.5.1217': attribute type 12 has an invalid length. [ 250.934350][ T8953] netlink: 'syz.5.1217': attribute type 29 has an invalid length. [ 250.934364][ T8953] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1217'. [ 250.934400][ T8953] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1217'. [ 251.052996][ T5908] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 251.218447][ T5908] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 251.218474][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.255675][ T5908] usb 4-1: config 0 descriptor?? [ 251.269160][ T5908] cp210x 4-1:0.0: cp210x converter detected [ 251.697703][ T5908] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 251.698708][ T5908] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 251.768852][ T5908] usb 4-1: cp210x converter now attached to ttyUSB0 [ 251.844403][ T8976] program syz.2.1226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.915294][ T32] usb 4-1: USB disconnect, device number 13 [ 252.204707][ T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 252.280921][ T32] cp210x 4-1:0.0: device disconnected [ 252.319195][ T8984] loop5: detected capacity change from 0 to 512 [ 252.320300][ T8984] EXT4-fs: Ignoring removed nobh option [ 252.408047][ T8984] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.550054][ T8984] EXT4-fs (loop5): 1 truncate cleaned up [ 252.568530][ T8984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.084240][ T7115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.546670][ T5723] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 253.708310][ T5723] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 253.708340][ T5723] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 253.708362][ T5723] usb 6-1: config 150 has no interface number 0 [ 253.708404][ T5723] usb 6-1: config 150 interface 204 has no altsetting 0 [ 253.710908][ T5723] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 253.710934][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.710954][ T5723] usb 6-1: Product: syz [ 253.710969][ T5723] usb 6-1: Manufacturer: syz [ 253.710983][ T5723] usb 6-1: SerialNumber: syz [ 253.879685][ T9016] loop3: detected capacity change from 0 to 4096 [ 254.164334][ T5723] xr_serial 6-1:150.204: skipping garbage [ 254.164385][ T5723] xr_serial 6-1:150.204: xr_serial converter detected [ 254.244473][ T9023] erspan0: entered promiscuous mode [ 254.432595][ T9027] loop1: detected capacity change from 0 to 256 [ 254.467278][ T9027] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 254.480039][ T9027] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.331756][ T9026] loop2: detected capacity change from 0 to 131072 [ 255.341187][ T9026] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 255.341212][ T9026] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 255.346798][ T9026] F2FS-fs (loop2): invalid crc value [ 255.479909][ T9026] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 255.549335][ T9026] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 255.549366][ T9026] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 255.585794][ T9026] fscrypt (loop2, inode 8): Error -61 getting encryption context [ 255.685824][ T5723] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 255.685881][ T5723] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 255.803509][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.803601][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.825845][ T5723] usb 6-1: USB disconnect, device number 5 [ 255.894853][ T5723] xr_serial 6-1:150.204: device disconnected [ 256.662474][ T9057] loop3: detected capacity change from 0 to 64 [ 257.226932][ T5614] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 257.389311][ T5614] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.389340][ T5614] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 257.389360][ T5614] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.389408][ T5614] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 257.389435][ T5614] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 257.391640][ T5614] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.391668][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.391688][ T5614] usb 2-1: Product: syz [ 257.391701][ T5614] usb 2-1: Manufacturer: syz [ 257.526188][ T5614] cdc_wdm 2-1:1.0: skipping garbage [ 257.526209][ T5614] cdc_wdm 2-1:1.0: skipping garbage [ 257.550584][ T5614] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 257.550606][ T5614] cdc_wdm 2-1:1.0: Unknown control protocol [ 257.980582][ T4938] usb 2-1: USB disconnect, device number 7 [ 258.011777][ T9082] pimreg: entered allmulticast mode [ 258.017680][ T9083] pimreg: left allmulticast mode [ 258.508308][ T32] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 258.644736][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1270'. [ 258.645013][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1270'. [ 258.715765][ T32] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 258.715793][ T32] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 258.715812][ T32] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 258.715855][ T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 258.715870][ T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 258.778557][ T32] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 258.778588][ T32] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 258.778608][ T32] usb 5-1: Product: syz [ 258.778622][ T32] usb 5-1: Manufacturer: syz [ 258.820607][ T9102] netlink: 'syz.3.1272': attribute type 14 has an invalid length. [ 258.950302][ T32] cdc_wdm 5-1:1.0: skipping garbage [ 258.950318][ T32] cdc_wdm 5-1:1.0: skipping garbage [ 259.055071][ T32] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 259.055098][ T32] cdc_wdm 5-1:1.0: Unknown control protocol [ 259.440168][ T9118] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 259.544401][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -75 [ 259.843466][ T10] usb 5-1: USB disconnect, device number 11 [ 259.898232][ T9135] netlink: 'syz.2.1286': attribute type 3 has an invalid length. [ 259.898255][ T9135] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1286'. [ 260.213470][ T9146] Bluetooth: MGMT ver 1.23 [ 260.300161][ T9147] loop2: detected capacity change from 0 to 1024 [ 260.359750][ T9147] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0102] [ 260.359842][ T9147] System zones: 0-1, 3-12 [ 260.380488][ T9147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.409160][ T9147] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #12: block 7: comm syz.2.1290: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 260.651053][ T9165] loop3: detected capacity change from 0 to 512 [ 260.971959][ T9165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.062598][ T32] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 261.181401][ T5608] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.219904][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.256717][ T32] usb 6-1: Using ep0 maxpacket: 16 [ 261.273487][ T32] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 261.273522][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.296596][ T32] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 261.296627][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.296647][ T32] usb 6-1: Product: syz [ 261.296661][ T32] usb 6-1: Manufacturer: syz [ 261.296675][ T32] usb 6-1: SerialNumber: syz [ 261.324673][ T32] usb 6-1: config 0 descriptor?? [ 261.480519][ T32] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 261.480556][ T32] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 261.596219][ T9182] sctp: [Deprecated]: syz.2.1303 (pid 9182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.596219][ T9182] Use struct sctp_sack_info instead [ 261.778637][ T9189] IPv6: Can't replace route, no match found [ 261.979427][ T32] em28xx 6-1:0.0: chip ID is em2710 [ 262.174129][ T32] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 262.174556][ T32] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 262.174574][ T32] em28xx 6-1:0.0: No AC97 audio processor [ 262.327602][ T33] block nbd0: Possible stuck request ffff8880272be000: control (read@0,1024B). Runtime 150 seconds [ 262.327645][ T33] block nbd0: Possible stuck request ffff8880272be1c0: control (read@1024,1024B). Runtime 150 seconds [ 262.327674][ T33] block nbd0: Possible stuck request ffff8880272be380: control (read@2048,1024B). Runtime 150 seconds [ 262.327710][ T33] block nbd0: Possible stuck request ffff8880272be540: control (read@3072,1024B). Runtime 150 seconds [ 262.345056][ T32] usb 6-1: USB disconnect, device number 6 [ 262.425331][ T32] em28xx 6-1:0.0: Disconnecting em28xx [ 262.590243][ T4938] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 262.736536][ T4938] usb 4-1: Using ep0 maxpacket: 16 [ 262.738753][ T4938] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 262.738787][ T4938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 262.738816][ T4938] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 262.738838][ T4938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.790440][ T32] em28xx 6-1:0.0: Freeing device [ 262.807280][ T4938] usb 4-1: config 0 descriptor?? [ 262.951588][ T9215] loop2: detected capacity change from 0 to 2048 [ 263.001928][ T9215] UDF-fs: error (device loop2): udf_read_tagged: block 256: CRC length 65535 exceeds block size [ 263.213086][ T9215] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 1344: 0x15 != 0x00 [ 263.213116][ T9215] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 263.331789][ T4938] hid_parser_main: 47 callbacks suppressed [ 263.331814][ T4938] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 263.331845][ T4938] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 263.331869][ T4938] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 263.331894][ T4938] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 263.331919][ T4938] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 263.331944][ T4938] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 263.331968][ T4938] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x7 [ 263.331993][ T4938] greenasia 0003:0E8F:0012.000F: invalid report_size 12084 [ 263.332008][ T4938] greenasia 0003:0E8F:0012.000F: item 0 2 1 7 parsing failed [ 263.332533][ T4938] greenasia 0003:0E8F:0012.000F: parse failed [ 263.332596][ T4938] greenasia 0003:0E8F:0012.000F: probe with driver greenasia failed with error -22 [ 263.524415][ T9225] CUSE: unknown device info "" [ 263.524431][ T9225] CUSE: unknown device info "" [ 263.524441][ T9225] CUSE: unknown device info "ÿw" [ 263.524449][ T9225] CUSE: unknown device info "" [ 263.524457][ T9225] CUSE: unknown device info "" [ 263.524465][ T9225] CUSE: unknown device info "" [ 263.524473][ T9225] CUSE: unknown device info "" [ 263.524480][ T9225] CUSE: unknown device info "" [ 263.524492][ T9225] CUSE: DEVNAME unspecified [ 263.558602][ T4938] usb 4-1: USB disconnect, device number 14 [ 263.674572][ T9230] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1323'. [ 263.674651][ T9230] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1323'. [ 263.702760][ T9231] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1324'. [ 264.056979][ T5908] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 264.238249][ T5908] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 264.238278][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.243932][ T5908] usb 6-1: config 0 descriptor?? [ 264.274990][ T5908] cp210x 6-1:0.0: cp210x converter detected [ 264.430295][ T9254] loop4: detected capacity change from 0 to 128 [ 264.496564][ T5614] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 264.502221][ T32] kernel read not supported for file /media4 (pid: 32 comm: kworker/1:0) [ 264.656303][ T5908] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 264.697462][ T5614] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 264.697499][ T5614] usb 2-1: can't read configurations, error -71 [ 264.776588][ T5908] usb 6-1: cp210x converter now attached to ttyUSB0 [ 264.915607][ T32] usb 6-1: USB disconnect, device number 7 [ 265.134270][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1340'. [ 265.134303][ T9267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1340'. [ 265.139358][ T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 265.246578][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 265.342904][ T32] cp210x 6-1:0.0: device disconnected [ 265.400773][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 265.400805][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.400824][ T10] usb 4-1: Product: syz [ 265.400837][ T10] usb 4-1: Manufacturer: syz [ 265.400851][ T10] usb 4-1: SerialNumber: syz [ 265.770584][ T9263] FAT-fs (loop4): error, clusters badly computed (2 != 0) [ 265.770617][ T9263] FAT-fs (loop4): Filesystem has been set read-only [ 265.856701][ T5614] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 265.975129][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 265.975184][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 266.036776][ T5614] usb 2-1: Using ep0 maxpacket: 16 [ 266.053539][ T5614] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.053626][ T5614] usb 2-1: config 0 interface 0 has no altsetting 0 [ 266.053661][ T5614] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 266.053683][ T5614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.215193][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 266.215251][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 266.318658][ T5614] usb 2-1: config 0 descriptor?? [ 266.399867][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 266.611888][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 266.788813][ T5614] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 266.788850][ T5614] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 266.788878][ T5614] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 266.829640][ T10] usb 4-1: USB disconnect, device number 15 [ 266.846021][ T5614] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 266.941327][ C0] usb 2-1: input irq status -75 received [ 267.031392][ T9286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.293961][ T5614] usb 2-1: USB disconnect, device number 10 [ 267.414511][ T9287] fido_id[9287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 267.517147][ T9292] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 267.517516][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.574996][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.820890][ T9294] loop2: detected capacity change from 0 to 512 [ 267.822065][ T9294] EXT4-fs: Ignoring removed mblk_io_submit option [ 267.933803][ T9294] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 268.026554][ T9294] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e840e028, mo2=0002] [ 268.026681][ T9294] System zones: 1-12 [ 268.026949][ T9294] EXT4-fs (loop2): orphan cleanup on readonly fs [ 268.088930][ T9294] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1352: bg 0: block 361: padding at end of block bitmap is not set [ 268.088967][ T9294] loop2: lost filesystem error report for type 5 error -117 [ 268.103974][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 268.104000][ C0] EXT4-fs (loop2): initial error at time 1777472966: ext4_validate_block_bitmap:441 [ 268.104019][ C0] EXT4-fs (loop2): last error at time 1777472966: ext4_validate_block_bitmap:441 [ 268.183287][ T9294] EXT4-fs (loop2): Remounting filesystem read-only [ 268.564045][ T9294] EXT4-fs (loop2): 1 truncate cleaned up [ 268.574315][ T9294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 268.679058][ T9294] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.1352: error -117 reading directory block [ 268.681864][ T9294] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.1352: error -117 reading directory block [ 268.816944][ T5608] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 269.239781][ T32] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 269.409466][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 269.413863][ T32] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 269.413889][ T32] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 269.413906][ T32] usb 2-1: Product: syz [ 269.413918][ T32] usb 2-1: Manufacturer: syz [ 269.413930][ T32] usb 2-1: SerialNumber: syz [ 269.436489][ T32] usb 2-1: config 0 descriptor?? [ 269.452755][ T4938] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 269.639518][ T4938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 269.639587][ T4938] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 269.639610][ T4938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.663137][ T4938] usb 3-1: config 0 descriptor?? [ 269.683289][ T9320] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 269.911300][ T5723] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 269.981513][ T9311] loop1: detected capacity change from 0 to 1024 [ 270.138087][ T4938] uclogic 0003:28BD:0055.0011: interface is invalid, ignoring [ 270.218279][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 270.222065][ T5723] usb 4-1: Using ep0 maxpacket: 8 [ 270.339679][ T5723] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 270.339713][ T5723] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 270.339737][ T5723] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.339761][ T5723] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.339802][ T5723] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.339825][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.399512][ T5713] usb 3-1: USB disconnect, device number 8 [ 270.506841][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 270.507536][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 270.574815][ T10] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 270.574845][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.574864][ T10] usb 6-1: Product: syz [ 270.574879][ T10] usb 6-1: Manufacturer: syz [ 270.574892][ T10] usb 6-1: SerialNumber: syz [ 270.815339][ T5723] usb 4-1: GET_CAPABILITIES returned 0 [ 270.815380][ T5723] usbtmc 4-1:16.0: can't read capabilities [ 271.023638][ T10] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 271.211818][ T5723] usb 4-1: USB disconnect, device number 16 [ 271.591068][ T10] gp8psk: usb out operation failed. [ 271.591103][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 271.591149][ T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 271.671399][ T10] usb 6-1: USB disconnect, device number 8 [ 271.999506][ T32] usb 2-1: USB disconnect, device number 11 [ 272.113897][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1380'. [ 272.526629][ T5723] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 272.690826][ T5723] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 272.690855][ T5723] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 272.690874][ T5723] usb 3-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 272.690892][ T5723] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 272.690911][ T5723] usb 3-1: config 220 has no interface number 2 [ 272.690955][ T5723] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 272.690969][ T5723] usb 3-1: config 220 interface 0 has no altsetting 0 [ 272.690978][ T5723] usb 3-1: config 220 interface 76 has no altsetting 0 [ 272.690987][ T5723] usb 3-1: config 220 interface 1 has no altsetting 0 [ 272.693139][ T5723] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 272.693166][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.693186][ T5723] usb 3-1: Product: syz [ 272.693199][ T5723] usb 3-1: Manufacturer: syz [ 272.693210][ T5723] usb 3-1: SerialNumber: syz [ 273.131835][ T5723] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 273.131878][ T5723] uvcvideo 3-1:220.0: No valid video chain found. [ 273.132125][ T5723] usb 3-1: selecting invalid altsetting 0 [ 273.241286][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 273.471674][ T5723] usb 3-1: selecting invalid altsetting 0 [ 273.471707][ T5723] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 273.593722][ T9387] netlink: 'syz.4.1390': attribute type 1 has an invalid length. [ 273.621078][ T5723] usb 3-1: USB disconnect, device number 9 [ 274.056314][ T9398] loop1: detected capacity change from 0 to 512 [ 274.226600][ T37] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 274.242601][ T5723] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 274.323502][ T9398] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1397: invalid indirect mapped block 256 (level 2) [ 274.323540][ T9398] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 274.327994][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 274.328023][ C0] EXT4-fs (loop1): initial error at time 1777472973: ext4_free_branches:1023: inode 11 [ 274.328048][ C0] EXT4-fs (loop1): last error at time 1777472973: ext4_free_branches:1023: inode 11 [ 274.364424][ T9398] EXT4-fs (loop1): 2 truncates cleaned up [ 274.376658][ T9398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.386891][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 274.389435][ T37] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 274.389459][ T37] usb 5-1: config 0 has no interface number 0 [ 274.389500][ T37] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 274.389523][ T37] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 274.392155][ T37] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 274.392181][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.392220][ T37] usb 5-1: Product: syz [ 274.392233][ T37] usb 5-1: Manufacturer: syz [ 274.392247][ T37] usb 5-1: SerialNumber: syz [ 274.406716][ T5723] usb 3-1: Using ep0 maxpacket: 16 [ 274.408655][ T5723] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.408678][ T5723] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.408712][ T5723] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 274.408733][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.416253][ T37] usb 5-1: config 0 descriptor?? [ 274.417358][ T9394] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 274.417529][ T9394] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 274.532593][ T9398] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1397: bg 0: block 5: invalid block bitmap [ 274.584020][ T5723] usb 3-1: config 0 descriptor?? [ 274.694093][ T9394] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 274.700899][ T9394] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 274.718873][ T9398] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 274.719122][ T9398] EXT4-fs (loop1): This should not happen!! Data will be lost [ 274.719122][ T9398] [ 274.719140][ T9398] EXT4-fs (loop1): Total free blocks count 0 [ 274.719153][ T9398] EXT4-fs (loop1): Free/Dirty block details [ 274.719164][ T9398] EXT4-fs (loop1): free_blocks=0 [ 274.719186][ T9398] EXT4-fs (loop1): dirty_blocks=66 [ 274.719199][ T9398] EXT4-fs (loop1): Block reservation details [ 274.719211][ T9398] EXT4-fs (loop1): i_reserved_data_blocks=66 [ 275.042637][ T5716] usb 3-1: USB disconnect, device number 10 [ 275.109701][ T37] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 123 [ 275.174306][ T1528] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 275.216837][ T5605] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 275.391221][ T5723] usb 5-1: USB disconnect, device number 12 [ 275.804930][ T9436] loop3: detected capacity change from 0 to 1024 [ 276.197598][ T9441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.218439][ T9441] bond0: (slave bond1): Enslaving as an active interface with an up link [ 277.679785][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1431'. [ 278.178986][ T9492] loop5: detected capacity change from 0 to 256 [ 280.154818][ T38] audit: type=1326 audit(1777472978.454:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300d3cdd9 code=0x7ffc0000 [ 280.154874][ T38] audit: type=1326 audit(1777472978.454:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300d3cdd9 code=0x7ffc0000 [ 280.154913][ T38] audit: type=1326 audit(1777472978.474:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd300cde159 code=0x7ffc0000 [ 280.154951][ T38] audit: type=1326 audit(1777472978.474:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd300cde159 code=0x7ffc0000 [ 280.154987][ T38] audit: type=1326 audit(1777472978.474:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd300cde159 code=0x7ffc0000 [ 280.155025][ T38] audit: type=1326 audit(1777472978.484:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd300cde159 code=0x7ffc0000 [ 280.155062][ T38] audit: type=1326 audit(1777472978.484:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd300cde159 code=0x7ffc0000 [ 280.155100][ T38] audit: type=1326 audit(1777472978.484:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd300cde159 code=0x7ffc0000 [ 280.155142][ T38] audit: type=1326 audit(1777472978.494:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd300cde159 code=0x7ffc0000 [ 280.155182][ T38] audit: type=1326 audit(1777472978.494:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.1.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd300cde159 code=0x7ffc0000 [ 280.384686][ T9518] loop5: detected capacity change from 0 to 131072 [ 280.612249][ T9518] F2FS-fs (loop5): Test dummy encryption mode enabled [ 280.640195][ T9518] F2FS-fs (loop5): invalid crc value [ 280.759130][ T9518] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 280.776253][ T9518] F2FS-fs (loop5): Start checkpoint disabled! [ 280.883200][ T9518] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 280.883608][ T9518] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 281.833276][ T9553] loop3: detected capacity change from 0 to 24 [ 281.837225][ T9553] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 282.293414][ T9553] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 283.108461][ T9578] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1472'. [ 283.108490][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 283.148334][ T9580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.148365][ T9580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.203267][ T9580] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 283.579749][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1476'. [ 285.205795][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.241562][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.241609][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.241642][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.289069][ T9610] C: renamed from veth1_to_team (while UP) [ 285.374720][ T9610] netlink: 'syz.4.1484': attribute type 8 has an invalid length. [ 285.374742][ T9610] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 285.393098][ T9614] netlink: 'syz.3.1485': attribute type 1 has an invalid length. [ 285.856669][ T9614] bond2: entered promiscuous mode [ 285.856719][ T9614] bond2: entered allmulticast mode [ 285.857558][ T9614] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.079432][ T9625] loop5: detected capacity change from 0 to 164 [ 286.562408][ T9625] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 286.925663][ T9612] loop2: detected capacity change from 0 to 40427 [ 287.329724][ T9612] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 287.329750][ T9612] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 287.352998][ T9612] F2FS-fs (loop2): invalid crc value [ 288.093227][ T9612] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 288.345983][ T9612] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 288.346015][ T9612] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 288.444061][ T9668] loop4: detected capacity change from 0 to 512 [ 288.445614][ T9668] EXT4-fs: inline encryption not supported [ 288.569710][ T9668] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1511: bad orphan inode 15 [ 288.569743][ T9668] loop4: lost filesystem error report for type 5 error -117 [ 288.573172][ T9668] ext4_test_bit(bit=14, block=5) = 0 [ 288.601615][ T9668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.639625][ T9668] EXT4-fs (loop4): shut down requested (1) [ 288.848409][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1514'. [ 288.942530][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.238375][ T9720] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 290.646524][ T7530] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 290.804664][ T7530] usb 5-1: string descriptor 0 read error: -22 [ 290.804807][ T7530] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 290.804830][ T7530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.959622][ T7530] usb 5-1: config 0 descriptor?? [ 290.974794][ T7530] usbtest 5-1:0.0: FX2 device [ 290.976582][ T7530] usbtest 5-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 291.356930][ T5716] usb 5-1: USB disconnect, device number 13 [ 291.685943][ T9732] loop3: detected capacity change from 0 to 131072 [ 291.698908][ T9732] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 291.698936][ T9732] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 291.708251][ T9732] F2FS-fs (loop3): invalid crc value [ 291.828855][ T9732] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 291.866066][ T9732] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 291.866098][ T9732] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 292.648055][ T9757] loop2: detected capacity change from 0 to 128 [ 292.837558][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 293.008716][ T33] block nbd0: Possible stuck request ffff8880272be000: control (read@0,1024B). Runtime 180 seconds [ 293.008771][ T33] block nbd0: Possible stuck request ffff8880272be1c0: control (read@1024,1024B). Runtime 180 seconds [ 293.008799][ T33] block nbd0: Possible stuck request ffff8880272be380: control (read@2048,1024B). Runtime 180 seconds [ 293.008826][ T33] block nbd0: Possible stuck request ffff8880272be540: control (read@3072,1024B). Runtime 180 seconds [ 293.022859][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 293.022890][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 293.029234][ T9] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 293.029261][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.029281][ T9] usb 6-1: Product: syz [ 293.029294][ T9] usb 6-1: Manufacturer: syz [ 293.029308][ T9] usb 6-1: SerialNumber: syz [ 293.046469][ T9] usb 6-1: config 0 descriptor?? [ 293.050880][ T9754] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 293.050990][ T9754] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 293.321582][ T9754] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 293.321681][ T9754] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 293.429687][ T9766] loop4: detected capacity change from 0 to 512 [ 293.430819][ T9766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.543798][ T9768] loop1: detected capacity change from 0 to 8 [ 293.727432][ T5613] Bluetooth: hci5: command 0x0406 tx timeout [ 293.952464][ T9] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 294.019084][ T9] usb 6-1: USB disconnect, device number 9 [ 294.084919][ T9766] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 294.094652][ T9766] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.1555: corrupted in-inode xattr: e_value size too large [ 294.094685][ T9766] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 294.096497][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 294.096516][ C1] EXT4-fs (loop4): initial error at time 1777472992: ext4_iget_extra_inode:5128: inode 15 [ 294.096544][ C1] EXT4-fs (loop4): last error at time 1777472992: ext4_iget_extra_inode:5128: inode 15 [ 294.107019][ T9766] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1555: couldn't read orphan inode 15 (err -117) [ 294.107057][ T9766] loop4: lost filesystem error report for type 5 error -117 [ 294.183818][ T9774] loop2: detected capacity change from 0 to 512 [ 294.206998][ T9766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.453279][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.837050][ T39] INFO: task syz.0.402:6841 blocked for more than 143 seconds. [ 294.837076][ T39] Tainted: G L syzkaller #0 [ 294.837087][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.837109][ T39] task:syz.0.402 state:D stack:27864 pid:6841 tgid:6838 ppid:5609 task_flags:0x400040 flags:0x00080002 [ 294.837164][ T39] Call Trace: [ 294.837170][ T39] [ 294.837183][ T39] __schedule+0x169e/0x54f0 [ 294.837228][ T39] ? __pfx_sched_clock_cpu+0x10/0x10 [ 294.837263][ T39] ? __pfx___schedule+0x10/0x10 [ 294.837283][ T39] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 294.837320][ T39] rt_mutex_schedule+0x76/0xf0 [ 294.837341][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 294.837374][ T39] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 294.837397][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 294.837420][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 294.837441][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 294.837547][ T39] ? bdev_open+0xe0/0xcc0 [ 294.837579][ T39] ? bdev_open+0xe0/0xcc0 [ 294.837615][ T39] ? bdev_open+0xe0/0xcc0 [ 294.837638][ T39] mutex_lock_nested+0x168/0x1d0 [ 294.837664][ T39] bdev_open+0xe0/0xcc0 [ 294.837700][ T39] blkdev_open+0x485/0x620 [ 294.837723][ T39] ? __pfx_blkdev_open+0x10/0x10 [ 294.837741][ T39] do_dentry_open+0x83d/0x13e0 [ 294.837773][ T39] vfs_open+0x3b/0x350 [ 294.837789][ T39] ? path_openat+0x2e2b/0x38a0 [ 294.837815][ T39] path_openat+0x2e43/0x38a0 [ 294.837871][ T39] ? __pfx_path_openat+0x10/0x10 [ 294.837898][ T39] ? kasan_save_track+0x4f/0x80 [ 294.837919][ T39] ? kasan_save_track+0x3e/0x80 [ 294.837937][ T39] ? __kasan_slab_alloc+0x6c/0x80 [ 294.837958][ T39] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 294.837988][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 294.838021][ T39] do_file_open+0x23e/0x4a0 [ 294.838043][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 294.838071][ T39] ? __pfx_do_file_open+0x10/0x10 [ 294.838090][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 294.838132][ T39] ? alloc_fd+0x64e/0x6c0 [ 294.838162][ T39] do_sys_openat2+0x113/0x200 [ 294.838183][ T39] ? __pfx_do_sys_openat2+0x10/0x10 [ 294.838203][ T39] ? exc_page_fault+0x6a/0xc0 [ 294.838230][ T39] ? do_user_addr_fault+0xc6f/0x1340 [ 294.838257][ T39] __x64_sys_openat+0x138/0x170 [ 294.838279][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.838299][ T39] do_syscall_64+0x15f/0xf80 [ 294.838322][ T39] ? trace_irq_disable+0x3b/0x140 [ 294.838357][ T39] ? clear_bhb_loop+0x40/0x90 [ 294.838379][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.838397][ T39] RIP: 0033:0x7fb78d21d60e [ 294.838747][ T39] RSP: 002b:00007fb78b4adb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 294.838766][ T39] RAX: ffffffffffffffda RBX: 00007fb78b4ae6c0 RCX: 00007fb78d21d60e [ 294.838777][ T39] RDX: 0000000000008000 RSI: 00007fb78b4adc00 RDI: ffffffffffffff9c [ 294.838787][ T39] RBP: 00007fb78b4adc00 R08: 0000000000000000 R09: 0000000000000000 [ 294.838795][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 294.838805][ T39] R13: 00007fb78d4d6038 R14: 00007fb78d4d5fa0 R15: 00007fff3587bea8 [ 294.838828][ T39] [ 294.838861][ T39] [ 294.838861][ T39] Showing all locks held in the system: [ 294.838872][ T39] 1 lock held by khungtaskd/39: [ 294.838882][ T39] #0: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 294.838932][ T39] 3 locks held by kworker/u8:3/58: [ 294.838940][ T39] #0: ffff88801b6ad138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 294.838976][ T39] #1: ffffc9000124fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 294.839010][ T39] #2: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 294.839072][ T39] 2 locks held by getty/5366: [ 294.839081][ T39] #0: ffff88803672b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 294.839126][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 294.839170][ T39] 2 locks held by kworker/0:3/5595: [ 294.839180][ T39] #0: ffff88813fe43938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 294.839224][ T39] #1: ffffc900043a7c40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 294.839265][ T39] 1 lock held by syz-executor/5605: [ 294.839275][ T39] #0: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: path_init+0x12d/0x14d0 [ 294.839318][ T39] 2 locks held by syz-executor/5608: [ 294.839327][ T39] #0: ffff88803d3260d0 (&type->s_umount_key#65){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 294.839376][ T39] #1: ffff8880267a8940 (&bdi->wb_waitq){+.+.}-{3:3}, at: finish_wait+0xbe/0x1e0 [ 294.839426][ T39] 1 lock held by udevd/5901: [ 294.839435][ T39] #0: ffff8880272274c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 294.839482][ T39] 1 lock held by syz.0.402/6841: [ 294.839492][ T39] #0: ffff8880272274c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 294.839543][ T39] 5 locks held by syz.4.1558/9775: [ 294.839553][ T39] #0: ffff8880374710b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0 [ 294.839600][ T39] #1: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 294.839655][ T39] #2: ffff888042cd0ad8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 294.839703][ T39] #3: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 294.839744][ T39] #4: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: page_table_check_clear+0x124/0x4f0 [ 294.839789][ T39] 6 locks held by syz.5.1560/9777: [ 294.839799][ T39] #0: ffff8880381c11c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 294.839848][ T39] #1: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x12b5/0x2940 [ 294.839897][ T39] #2: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x201/0x1d10 [ 294.839963][ T39] #3: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 294.840006][ T39] #4: ffff888042cf1ad8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 294.840055][ T39] #5: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 294.840099][ T39] [ 294.840103][ T39] ============================================= [ 294.840103][ T39] [ 294.840119][ T39] NMI backtrace for cpu 0 [ 294.840138][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 294.840164][ T39] Tainted: [L]=SOFTLOCKUP [ 294.840171][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.840180][ T39] Call Trace: [ 294.840188][ T39] [ 294.840195][ T39] dump_stack_lvl+0xe8/0x150 [ 294.840223][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 294.840244][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 294.840267][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 294.840290][ T39] sys_info+0x135/0x170 [ 294.840306][ T39] watchdog+0xfd3/0x1030 [ 294.840337][ T39] ? watchdog+0x1c9/0x1030 [ 294.840365][ T39] kthread+0x388/0x470 [ 294.840391][ T39] ? __pfx_watchdog+0x10/0x10 [ 294.840411][ T39] ? __pfx_kthread+0x10/0x10 [ 294.840436][ T39] ret_from_fork+0x514/0xb70 [ 294.840461][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 294.840483][ T39] ? __switch_to+0xc79/0x1410 [ 294.840505][ T39] ? __pfx_kthread+0x10/0x10 [ 294.840531][ T39] ret_from_fork_asm+0x1a/0x30 [ 294.840587][ T39] [ 294.840615][ T39] Sending NMI from CPU 0 to CPUs 1: [ 294.840645][ C1] NMI backtrace for cpu 1 [ 294.840659][ C1] CPU: 1 UID: 0 PID: 5606 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 294.840680][ C1] Tainted: [L]=SOFTLOCKUP [ 294.840686][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.840694][ C1] RIP: 0010:lock_is_held_type+0xd/0x150 [ 294.840717][ C1] Code: 48 0f b9 3a 90 eb ce 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 <53> bb ff ff ff ff 83 3d 96 72 63 04 00 0f 84 e4 00 00 00 65 8b 05 [ 294.840730][ C1] RSP: 0018:ffffc90004847460 EFLAGS: 00000202 [ 294.840743][ C1] RAX: 1ffffffff1bf9b01 RBX: ffffc900048475b8 RCX: 0000000080000001 [ 294.840755][ C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8dfc81c0 [ 294.840765][ C1] RBP: ffffea0001103140 R08: 0000000000000000 R09: 0000000000000000 [ 294.840775][ C1] R10: 0000000000000100 R11: 0000000000000003 R12: ffffc900048475a0 [ 294.840786][ C1] R13: ffff888050ac93b0 R14: 0000000000000000 R15: 1ffff92000908eb7 [ 294.840797][ C1] FS: 00005555848fd500(0000) GS:ffff88812602d000(0000) knlGS:0000000000000000 [ 294.840813][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.840824][ C1] CR2: 000000110c24a2be CR3: 0000000037022000 CR4: 00000000003526f0 [ 294.840837][ C1] Call Trace: [ 294.840843][ C1] [ 294.840850][ C1] xas_find+0x489/0x990 [ 294.840881][ C1] find_lock_entries+0x215/0xb20 [ 294.840903][ C1] ? find_lock_entries+0x126/0xb20 [ 294.840923][ C1] ? __pfx_find_lock_entries+0x10/0x10 [ 294.840950][ C1] shmem_undo_range+0x2d6/0x1660 [ 294.840972][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 294.840994][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 294.841039][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 294.841061][ C1] shmem_evict_inode+0x289/0xae0 [ 294.841084][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 294.841100][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 294.841129][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 294.841145][ C1] ? rt_spin_unlock+0x14f/0x200 [ 294.841163][ C1] ? rt_spin_unlock+0x160/0x200 [ 294.841177][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 294.841198][ C1] evict+0x61e/0xb10 [ 294.841218][ C1] ? rt_spin_unlock+0x14f/0x200 [ 294.841234][ C1] ? __pfx_evict+0x10/0x10 [ 294.841252][ C1] ? rt_spin_unlock+0x160/0x200 [ 294.841269][ C1] ? iput+0xb25/0xe80 [ 294.841288][ C1] __dentry_kill+0x1a2/0x690 [ 294.841308][ C1] ? finish_dput+0xad/0x480 [ 294.841323][ C1] finish_dput+0xc9/0x480 [ 294.841339][ C1] __fput+0x6a3/0xa70 [ 294.841359][ C1] task_work_run+0x1d9/0x270 [ 294.841374][ C1] ? __pfx_task_work_run+0x10/0x10 [ 294.841387][ C1] ? fput_close_sync+0x11f/0x240 [ 294.841405][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.841420][ C1] exit_to_user_mode_loop+0xed/0x480 [ 294.841441][ C1] ? rcu_is_watching+0x15/0xb0 [ 294.841456][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.841471][ C1] do_syscall_64+0x33e/0xf80 [ 294.841491][ C1] ? clear_bhb_loop+0x40/0x90 [ 294.841507][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.841521][ C1] RIP: 0033:0x7f172401d60e [ 294.841535][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.841551][ C1] RSP: 002b:00007ffc0ad404a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 294.841565][ C1] RAX: 0000000000000000 RBX: 00005555848fd500 RCX: 00007f172401d60e [ 294.841575][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 294.841584][ C1] RBP: 00007ffc0ad4054c R08: 0000000000000000 R09: 0000000000000000 [ 294.841593][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000158 [ 294.841603][ C1] R13: 00000000000927c0 R14: 00000000000473c9 R15: 00007ffc0ad405a0 [ 294.841622][ C1] [ 294.842327][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 294.842350][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 294.842375][ T39] Tainted: [L]=SOFTLOCKUP [ 294.842381][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.842392][ T39] Call Trace: [ 294.842399][ T39] [ 294.842407][ T39] vpanic+0x56c/0xa60 [ 294.842433][ T39] ? __pfx___schedule+0x10/0x10 [ 294.842457][ T39] ? __pfx_vpanic+0x10/0x10 [ 294.842491][ T39] panic+0xc5/0xd0 [ 294.842514][ T39] ? __pfx_panic+0x10/0x10 [ 294.842540][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 294.842564][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 294.842590][ T39] watchdog+0x102c/0x1030 [ 294.842628][ T39] ? watchdog+0x1c9/0x1030 [ 294.842655][ T39] kthread+0x388/0x470 [ 294.842683][ T39] ? __pfx_watchdog+0x10/0x10 [ 294.842703][ T39] ? __pfx_kthread+0x10/0x10 [ 294.842734][ T39] ret_from_fork+0x514/0xb70 [ 294.842760][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 294.842783][ T39] ? __switch_to+0xc79/0x1410 [ 294.842805][ T39] ? __pfx_kthread+0x10/0x10 [ 294.842837][ T39] ret_from_fork_asm+0x1a/0x30 [ 294.842876][ T39] [ 294.843009][ T39] Kernel Offset: disabled