last executing test programs: 3.369037503s ago: executing program 2 (id=843): socket$inet6(0xa, 0x803, 0x6) r0 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600000ff00140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) 3.203284652s ago: executing program 1 (id=845): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="a0572c4a1555dccd5b3aeb8ebdc9ea9eeee0cc552d3bf5c3cf9e1902ea4e1f86911a5221", @ANYRES64, @ANYRES64], 0x2, 0x5dfd, &(0x7f0000011c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x0) getdents64(r0, 0x0, 0x0) 3.100207282s ago: executing program 2 (id=847): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xb2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000841}, 0x850) 2.934767862s ago: executing program 2 (id=849): r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000240)=[{0x2, 0x8001}], 0x1) semop(r0, &(0x7f00000001c0)=[{0x2, 0xffca}, {}], 0x2) semop(r0, &(0x7f0000000000)=[{0x2, 0xfff}], 0x1) 2.771079251s ago: executing program 4 (id=851): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2.337825119s ago: executing program 1 (id=856): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) 2.070086598s ago: executing program 1 (id=859): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x80}, 'port1\x00'}) 2.067405108s ago: executing program 3 (id=860): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xe, &(0x7f0000000780)={[{@jqfmt_vfsv0}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@auto_da_alloc}, {@barrier}, {@quota}]}, 0x3, 0x44b, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x3376039, 0x0) 1.993449218s ago: executing program 2 (id=863): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000940), 0xfc, 0x564, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000280)) 1.816993667s ago: executing program 1 (id=865): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0x3c}], 0x1}, 0x0) 1.651367187s ago: executing program 1 (id=868): fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x2, 0x3a0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) 1.650277167s ago: executing program 3 (id=869): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) unshare(0x2040400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) 1.475255986s ago: executing program 1 (id=870): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000200)={[{@nodatacow}, {@datacow}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@ssd_spread}, {@nossd_spread}, {@enospc_debug}, {@ssd_spread}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa3) getdents(r0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001480)={{r0}, 0x0, 0x0, @unused=[0x0, 0x0, 0xfffffffffffffffc], @subvolid=0x3}) 1.469935306s ago: executing program 2 (id=871): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1.403447326s ago: executing program 3 (id=873): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1.077282675s ago: executing program 2 (id=876): alarm(0x400) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xfe, 0x68, 0x16, 0x20, 0x86a, 0x3, 0xa566, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x7, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x10, 0x0, 0xc8, 0x4a, 0x2b, 0x5}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) alarm(0x5) 864.883514ms ago: executing program 4 (id=878): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@local, 0x4e20, 0x0, 0x0, 0xbfcc, 0xa, 0x10}, {0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffdfffffffff, 0x0, 0x40000000000000}, {0x0, 0x200000000000, 0x400, 0x3}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 811.352974ms ago: executing program 0 (id=879): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x296, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) truncate(&(0x7f0000000080)='./file1\x00', 0x608c) 760.546934ms ago: executing program 4 (id=880): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) 671.701273ms ago: executing program 3 (id=881): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2411}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) 614.265933ms ago: executing program 4 (id=882): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000940), 0xfc, 0x564, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000280)) 610.561263ms ago: executing program 0 (id=892): openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x80000000}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 487.346513ms ago: executing program 3 (id=883): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0xc, 0xffffffff}, {0x6}]}) write$ppp(r0, &(0x7f00000010c0)="1e00", 0x2) 426.426092ms ago: executing program 0 (id=884): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 327.039982ms ago: executing program 0 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 290.142802ms ago: executing program 3 (id=886): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x4) write$binfmt_misc(r1, 0x0, 0xfffffecc) vmsplice(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="86", 0x1}], 0x1, 0x0) 200.502252ms ago: executing program 4 (id=887): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0xfffffffb}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 139.411521ms ago: executing program 0 (id=888): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd2d, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xe2, 0xa}}, 0x1c}}, 0x48000) 36.586761ms ago: executing program 4 (id=889): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a7, 0x8000000}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000380)=0x2) 0s ago: executing program 0 (id=890): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) close_range(r0, r0, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) getpeername$packet(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 024 [ 73.673533][ T4299] gspca_stk1135: serial bus timeout: status=0x00 [ 73.683979][ T4258] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 73.697641][ T4430] ntfs: (device loop1): load_attribute_list(): Cannot read attribute list since runlist is missing. [ 73.711482][ T4299] gspca_stk1135: Sensor write failed [ 73.720952][ T4258] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 73.729171][ T4299] gspca_stk1135: serial bus timeout: status=0x00 [ 73.733593][ T4430] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to load attribute list attribute. [ 73.735510][ T4299] gspca_stk1135: Sensor read failed [ 73.735545][ T4299] gspca_stk1135: serial bus timeout: status=0x00 [ 73.764949][ T4258] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 73.773100][ T4258] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.782401][ T4430] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 73.782575][ T4430] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 73.818015][ T4299] gspca_stk1135: Sensor read failed [ 73.818406][ T4430] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 73.823271][ T4299] gspca_stk1135: Detected sensor type unknown (0x0) [ 73.851176][ T4299] gspca_stk1135: serial bus timeout: status=0x00 [ 73.857684][ T4258] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.866799][ T4299] gspca_stk1135: Sensor read failed [ 73.871991][ T4430] ntfs: volume version 3.1. [ 73.872134][ T4430] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 73.884841][ T4258] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 73.897849][ T4299] gspca_stk1135: serial bus timeout: status=0x00 [ 73.904213][ T4299] gspca_stk1135: Sensor read failed [ 73.905468][ T4430] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 73.915962][ T4258] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 73.940150][ T4299] gspca_stk1135: serial bus timeout: status=0x00 [ 73.947142][ T4299] gspca_stk1135: Sensor write failed [ 73.952527][ T4299] gspca_stk1135: serial bus timeout: status=0x00 [ 73.959494][ T4299] gspca_stk1135: Sensor write failed [ 73.964896][ T4258] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 73.972363][ T4299] stk1135: probe of 1-1:64.0 failed with error -71 [ 73.979245][ T4258] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 73.991179][ T4299] usb 1-1: USB disconnect, device number 2 [ 73.997275][ T4258] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.002710][ T4430] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 74.014731][ T4258] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.027733][ T4430] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 74.056380][ T4258] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.060467][ T4430] ntfs: (device loop1): ntfs_check_logfile(): Error mapping $LogFile page (index 0). [ 74.079831][ T4258] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 74.101291][ T4258] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 74.109259][ T4258] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 74.119151][ T4258] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 74.126913][ T4297] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 74.166603][ T4258] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.190839][ T4258] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 74.206248][ T4258] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.225424][ T4258] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.244533][ T4258] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 74.273669][ T4258] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 74.342038][ T4297] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 74.356914][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.383084][ T4297] usb 4-1: config 0 descriptor?? [ 74.411124][ T4297] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 74.615077][ T4297] gp8psk: usb in 128 operation failed. [ 74.831928][ T4297] gp8psk: FW Version = 241.01.130 (0xf10182) Build 2088/100/55 [ 75.040842][ T4297] gp8psk: usb in 149 operation failed. [ 75.049257][ T4297] gp8psk: failed to get FPGA version [ 75.089118][ T4297] gp8psk: usb in 138 operation failed. [ 75.096164][ T4297] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 75.129397][ T4297] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 75.162709][ T4447] loop2: detected capacity change from 0 to 32768 [ 75.177658][ T4297] usb 4-1: USB disconnect, device number 2 [ 75.212702][ T4443] loop0: detected capacity change from 0 to 32768 [ 75.240387][ T4405] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.338617][ T4443] JBD2: Ignoring recovery information on journal [ 75.464860][ T4443] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 75.872274][ T4257] ocfs2: Unmounting device (7,0) on (node local) [ 75.943713][ T4470] loop3: detected capacity change from 0 to 8 [ 76.201564][ T4477] capability: warning: `syz.1.56' uses deprecated v2 capabilities in a way that may be insecure [ 76.369754][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 76.455327][ T4297] kernel write not supported for file /snd/midiC2D0 (pid: 4297 comm: kworker/0:6) [ 76.685215][ T4491] mmap: syz.4.62 (4491) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.825215][ T4468] loop2: detected capacity change from 0 to 40427 [ 76.851233][ T4468] F2FS-fs (loop2): invalid crc value [ 76.910204][ T4468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 77.011854][ T4468] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 77.036843][ T4468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 77.043224][ T4481] loop0: detected capacity change from 0 to 32768 [ 77.079806][ T4481] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.52 (4481) [ 77.121964][ T4481] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 77.159680][ T4481] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 77.205518][ T4481] BTRFS info (device loop0): max_inline at 0 [ 77.221920][ T4481] BTRFS info (device loop0): use zlib compression, level 3 [ 77.240021][ T4481] BTRFS info (device loop0): enabling ssd optimizations [ 77.264720][ T4481] BTRFS info (device loop0): using free space tree [ 77.685400][ T4493] loop1: detected capacity change from 0 to 40427 [ 77.717900][ T4493] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 77.733178][ T4527] input: syz1 as /devices/virtual/input/input5 [ 77.763757][ T4493] F2FS-fs (loop1): invalid crc value [ 77.802446][ T4257] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 77.829578][ T4493] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.845710][ T4531] loop3: detected capacity change from 0 to 128 [ 77.884152][ T4531] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.935515][ T4533] loop2: detected capacity change from 0 to 2048 [ 77.985995][ T4493] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 78.041210][ T4533] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.125248][ T4533] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.72: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 78.131371][ T4523] loop4: detected capacity change from 0 to 32768 [ 78.210357][ T4523] JBD2: Ignoring recovery information on journal [ 78.265849][ T4250] syz-executor: attempt to access beyond end of device [ 78.265849][ T4250] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 78.345297][ T4523] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 78.401990][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 78.537707][ T4553] loop3: detected capacity change from 0 to 2048 [ 78.570296][ T4249] ocfs2: Unmounting device (7,4) on (node local) [ 78.589024][ T4553] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 78.644922][ T4553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.306818][ T4577] [U]  [ 79.321633][ T4575] loop2: detected capacity change from 0 to 4096 [ 79.339005][ T4575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.369506][ T4575] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 79.384737][ T4546] hid-generic 0005:046D:0A0E.0001: item fetching failed at offset 0/1 [ 79.423924][ T4546] hid-generic: probe of 0005:046D:0A0E.0001 failed with error -22 [ 79.582297][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 79.839385][ T4599] loop0: detected capacity change from 0 to 128 [ 79.959783][ T4257] sysv_free_block: flc_count > flc_size [ 79.970766][ T4257] sysv_free_block: flc_count > flc_size [ 79.977714][ T4257] sysv_free_block: flc_count > flc_size [ 79.983662][ T4257] sysv_free_block: flc_count > flc_size [ 80.003578][ T4257] sysv_free_block: flc_count > flc_size [ 80.024367][ T4257] sysv_free_block: flc_count > flc_size [ 80.044647][ T4257] sysv_free_block: flc_count > flc_size [ 80.054768][ T4257] sysv_free_block: flc_count > flc_size [ 80.074830][ T4257] sysv_free_block: flc_count > flc_size [ 80.084949][ T4257] sysv_free_block: flc_count > flc_size [ 80.112743][ T4257] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 80.245684][ T4595] loop1: detected capacity change from 0 to 40427 [ 80.276389][ T4595] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 80.311167][ T4595] F2FS-fs (loop1): invalid crc value [ 80.343095][ T4595] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.354131][ T4611] Illegal XDP return value 4294967294 on prog (id 13) dev N/A, expect packet loss! [ 80.371276][ T4607] loop0: detected capacity change from 0 to 4096 [ 80.421303][ T4612] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.481018][ T4595] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 80.622913][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 80.622930][ T26] audit: type=1800 audit(1734640596.650:23): pid=4595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.91" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 80.649206][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.760337][ T4250] syz-executor: attempt to access beyond end of device [ 80.760337][ T4250] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 81.083806][ T4626] loop3: detected capacity change from 0 to 512 [ 81.129114][ T4264] Bluetooth: hci4: command 0x0405 tx timeout [ 81.165890][ T4626] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 81.202439][ T4626] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.369531][ T1191] cfg80211: failed to load regulatory.db [ 81.385205][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 81.456135][ T4331] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.575871][ T4643] loop4: detected capacity change from 0 to 64 [ 81.618127][ T4620] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 81.636123][ T4331] usb 1-1: Using ep0 maxpacket: 8 [ 81.674200][ T4331] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 81.683156][ T4331] usb 1-1: config 179 has no interface number 0 [ 81.694724][ T4331] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 81.714519][ T4331] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 81.731800][ T4331] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 81.744163][ T4331] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 81.760239][ T4331] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 81.791276][ T4331] usb 1-1: config 179 interface 65 has no altsetting 0 [ 81.804689][ T4331] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 81.820353][ T4331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.869503][ T4331] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 82.181687][ T22] usb 1-1: USB disconnect, device number 3 [ 82.181701][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 82.197461][ T22] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 82.214301][ T4657] loop1: detected capacity change from 0 to 4096 [ 82.259970][ T4661] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.413173][ T4665] loop2: detected capacity change from 0 to 2048 [ 82.460148][ T4665] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 82.554711][ T4665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.886455][ T4253] Bluetooth: hci0: command 0x080f tx timeout [ 83.009358][ T4681] netlink: 'syz.1.126': attribute type 5 has an invalid length. [ 83.416814][ T4696] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.675631][ T4708] loop4: detected capacity change from 0 to 1024 [ 83.762540][ T4687] loop2: detected capacity change from 0 to 32768 [ 83.833948][ T4687] XFS (loop2): Mounting V5 Filesystem [ 83.861021][ T4708] hfsplus: keylen 65060 too large [ 83.866702][ T4708] hfsplus: xattr searching failed [ 83.880475][ T4708] hfsplus: keylen 65060 too large [ 83.885730][ T4708] hfsplus: xattr searching failed [ 83.981270][ T4687] XFS (loop2): Ending clean mount [ 84.035378][ T4705] loop0: detected capacity change from 0 to 32768 [ 84.044991][ T4705] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.136 (4705) [ 84.066153][ T4422] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.073874][ T4705] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.087321][ T4705] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 84.099100][ T4258] XFS (loop2): Unmounting Filesystem [ 84.107980][ T4705] BTRFS info (device loop0): allowing degraded mounts [ 84.114793][ T4705] BTRFS info (device loop0): setting nodatasum [ 84.133496][ T4705] BTRFS info (device loop0): disabling tree log [ 84.140955][ T4705] BTRFS info (device loop0): using free space tree [ 84.267628][ T4422] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.288909][ T4422] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.316122][ T4422] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 84.335436][ T4422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.357580][ T4422] usb 4-1: config 0 descriptor?? [ 84.401525][ T4257] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.779074][ T4422] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 84.786325][ T4756] loop0: detected capacity change from 0 to 2048 [ 84.829384][ T4422] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 84.855080][ T4756] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 84.976355][ T4422] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 84.993155][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 85.105956][ T4773] loop2: detected capacity change from 0 to 16 [ 85.124714][ T4773] erofs: (device loop2): mounted with root inode @ nid 36. [ 85.177109][ T4422] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 85.183632][ T4773] overlayfs: failed to get redirect (-117) [ 85.210593][ T4422] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71 [ 85.228526][ T4422] usb 4-1: USB disconnect, device number 3 [ 85.576149][ T1191] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 85.703096][ T4777] loop1: detected capacity change from 0 to 32768 [ 85.731589][ T4777] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.157 (4777) [ 85.764931][ T4777] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 85.769472][ T1191] usb 5-1: unable to get BOS descriptor or descriptor too short [ 85.792069][ T4777] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 85.814551][ T1191] usb 5-1: not running at top speed; connect to a high speed hub [ 85.823284][ T4777] BTRFS info (device loop1): force zlib compression, level 3 [ 85.845850][ T1191] usb 5-1: config 1 interface 0 has no altsetting 0 [ 85.852881][ T4777] BTRFS info (device loop1): max_inline at 4096 [ 85.877766][ T1191] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.883322][ T4777] BTRFS info (device loop1): using free space tree [ 85.916251][ T1191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.937980][ T1191] usb 5-1: Product: syz [ 85.955029][ T1191] usb 5-1: Manufacturer: syz [ 85.962203][ T4783] loop2: detected capacity change from 0 to 32768 [ 85.975351][ T1191] usb 5-1: SerialNumber: syz [ 85.979252][ T4783] JBD2: Ignoring recovery information on journal [ 86.051563][ T4803] loop3: detected capacity change from 0 to 64 [ 86.064045][ T4783] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 86.143486][ T4777] BTRFS info (device loop1): enabling ssd optimizations [ 86.204061][ T4258] ocfs2: Unmounting device (7,2) on (node local) [ 86.219820][ T1191] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 86.239191][ T1191] usb 5-1: USB disconnect, device number 2 [ 86.390397][ T4820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 86.478282][ T4250] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 86.833969][ T4830] netem: change failed [ 86.841659][ T4828] loop2: detected capacity change from 0 to 4096 [ 86.886737][ T4831] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.985437][ T4817] loop0: detected capacity change from 0 to 32768 [ 87.000586][ T4835] netlink: 'syz.3.175': attribute type 21 has an invalid length. [ 87.018386][ T4835] netlink: 'syz.3.175': attribute type 1 has an invalid length. [ 87.027728][ T4835] netlink: 14374 bytes leftover after parsing attributes in process `syz.3.175'. [ 87.036216][ T4817] XFS (loop0): Mounting V5 Filesystem [ 87.189137][ T4817] XFS (loop0): Ending clean mount [ 87.216942][ T4817] XFS (loop0): Quotacheck needed: Please wait. [ 87.253082][ T4855] loop4: detected capacity change from 0 to 1024 [ 87.270414][ T4817] XFS (loop0): Quotacheck: Done. [ 87.354201][ T4855] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.378785][ T4817] XFS (loop0): User initiated shutdown received. [ 87.385548][ T4817] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:486). Shutting down filesystem. [ 87.411245][ T26] audit: type=1800 audit(1734640603.440:24): pid=4855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.179" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 87.431582][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.454252][ T4817] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 87.527458][ T4257] XFS (loop0): Unmounting Filesystem [ 87.575001][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 87.689362][ T4870] netlink: 'syz.1.186': attribute type 7 has an invalid length. [ 87.935455][ T4876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 88.278637][ T4863] loop3: detected capacity change from 0 to 32768 [ 88.278928][ T4882] loop0: detected capacity change from 0 to 1024 [ 88.299685][ T4863] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.181 (4863) [ 88.353466][ T4863] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 88.354369][ T4882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 88.363899][ T4863] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 88.381510][ T4863] BTRFS info (device loop3): force zlib compression, level 3 [ 88.389945][ T4863] BTRFS info (device loop3): max_inline at 4096 [ 88.397125][ T4863] BTRFS info (device loop3): using free space tree [ 88.570822][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 88.676354][ T4863] BTRFS info (device loop3): enabling ssd optimizations [ 88.687797][ T4874] loop4: detected capacity change from 0 to 32768 [ 88.694997][ T4874] XFS: ikeep mount option is deprecated. [ 88.735725][ T4874] XFS (loop4): Mounting V5 Filesystem [ 88.885572][ T4256] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 88.928532][ T4874] XFS (loop4): Ending clean mount [ 88.949531][ T4874] XFS (loop4): Quotacheck needed: Please wait. [ 89.148819][ T4874] XFS (loop4): Quotacheck: Done. [ 89.247525][ T4932] syz.1.200 uses obsolete (PF_INET,SOCK_PACKET) [ 89.387516][ T4249] XFS (loop4): Unmounting Filesystem [ 89.891697][ T4950] netlink: 'syz.4.203': attribute type 1 has an invalid length. [ 90.047719][ T4928] loop0: detected capacity change from 0 to 32768 [ 90.117615][ T4960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.211'. [ 90.202946][ T4928] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 90.220943][ T4928] XFS (loop0): Mounting V5 Filesystem [ 90.306808][ T4928] XFS (loop0): Ending clean mount [ 90.337145][ T4928] XFS (loop0): Quotacheck needed: Please wait. [ 90.415142][ T4928] XFS (loop0): Quotacheck: Done. [ 90.538771][ T4257] XFS (loop0): Unmounting Filesystem [ 90.658492][ T4982] loop2: detected capacity change from 0 to 512 [ 90.665468][ T4982] EXT4-fs: Ignoring removed i_version option [ 90.686072][ T4982] EXT4-fs: Ignoring removed nobh option [ 90.697490][ T4982] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.731557][ T4982] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.788584][ T4982] EXT4-fs (loop2): 1 truncate cleaned up [ 90.804553][ T4982] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.905411][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 91.175184][ T4996] loop1: detected capacity change from 0 to 4096 [ 91.221798][ T4996] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 91.278880][ T4996] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 91.609337][ T5021] loop4: detected capacity change from 0 to 512 [ 91.641685][ T5021] EXT4-fs (loop4): 1 truncate cleaned up [ 91.655531][ T5021] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.677584][ T26] audit: type=1800 audit(1734640607.710:25): pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.236" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 91.677920][ T5021] EXT4-fs (loop4): Online resizing not supported with sparse_super2 [ 91.744649][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 91.786407][ T4331] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.927782][ T4925] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.976277][ T4331] usb 3-1: Using ep0 maxpacket: 32 [ 91.999592][ T4331] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 92.012969][ T4331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.023623][ T4331] usb 3-1: Product: syz [ 92.032503][ T4331] usb 3-1: Manufacturer: syz [ 92.039870][ T4331] usb 3-1: SerialNumber: syz [ 92.049851][ T4331] usb 3-1: config 0 descriptor?? [ 92.088886][ T5038] loop1: detected capacity change from 0 to 8192 [ 92.099941][ T5038] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.113966][ T5038] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 92.123281][ T4925] usb 1-1: Using ep0 maxpacket: 8 [ 92.124661][ T5038] REISERFS (device loop1): using ordered data mode [ 92.128676][ T4540] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.143691][ T5038] reiserfs: using flush barriers [ 92.145778][ T4925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.160298][ T4925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.167165][ T5038] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.170906][ T4925] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 92.187433][ T5038] REISERFS (device loop1): checking transaction log (loop1) [ 92.208066][ T5038] REISERFS (device loop1): Using r5 hash to sort names [ 92.210394][ T4925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.220045][ T5038] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 92.238021][ T5038] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 92.240525][ T4925] usb 1-1: config 0 descriptor?? [ 92.279699][ T5038] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 92.301127][ T5038] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 92.319006][ T5038] overlayfs: upper fs needs to support d_type. [ 92.325487][ T5038] overlayfs: upper fs does not support tmpfile. [ 92.332586][ T5038] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 92.349219][ T5038] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 92.357702][ T5038] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 92.366124][ T4540] usb 5-1: Using ep0 maxpacket: 32 [ 92.374246][ T5038] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 92.390727][ T4540] usb 5-1: config 1 interface 0 has no altsetting 0 [ 92.391958][ T5038] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 92.409069][ T4540] usb 5-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.40 [ 92.420847][ T5038] overlayfs: failed to set xattr on upper [ 92.427200][ T5038] overlayfs: ...falling back to index=off,metacopy=off. [ 92.431246][ T4540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.436818][ T5038] overlayfs: failed to resolve './file0': -2 [ 92.444600][ T4540] usb 5-1: Product: syz [ 92.453152][ T4540] usb 5-1: Manufacturer: syz [ 92.457892][ T4540] usb 5-1: SerialNumber: syz [ 92.664093][ T4331] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 92.674567][ T4331] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 92.680003][ T4925] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 92.687633][ T4331] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 92.696081][ T4925] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 92.703822][ T4925] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 92.711350][ T4925] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 92.720019][ T4925] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 92.728761][ T4925] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 92.736250][ T4925] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 92.746555][ T4925] playstation 0003:054C:0CE6.0003: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 92.786844][ T4331] peak_usb: probe of 3-1:0.0 failed with error -22 [ 92.871447][ T4331] usb 3-1: USB disconnect, device number 2 [ 92.877826][ T4925] playstation 0003:054C:0CE6.0003: Invalid reportID received, expected 9 got 119 [ 92.889689][ T4925] playstation 0003:054C:0CE6.0003: Failed to retrieve DualSense pairing info: -22 [ 92.909986][ T4925] playstation 0003:054C:0CE6.0003: Failed to get MAC address from DualSense [ 92.922285][ T4925] playstation 0003:054C:0CE6.0003: Failed to create dualsense. [ 92.933598][ T4925] playstation: probe of 0003:054C:0CE6.0003 failed with error -22 [ 93.068506][ T5041] loop1: detected capacity change from 0 to 32768 [ 93.103975][ T4547] usb 1-1: USB disconnect, device number 4 [ 93.280704][ T4540] usbhid 5-1:1.0: can't add hid device: -71 [ 93.297224][ T4540] usbhid: probe of 5-1:1.0 failed with error -71 [ 93.313957][ T4540] usb 5-1: USB disconnect, device number 3 [ 93.382979][ T5045] loop3: detected capacity change from 0 to 32768 [ 93.929603][ T5051] loop1: detected capacity change from 0 to 32768 [ 94.034581][ T5051] XFS (loop1): Mounting V5 Filesystem [ 94.144338][ T5051] XFS (loop1): Ending clean mount [ 94.190229][ T5066] loop2: detected capacity change from 0 to 4096 [ 94.236353][ T4250] XFS (loop1): Unmounting Filesystem [ 94.242971][ T5066] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 94.415764][ T5062] loop4: detected capacity change from 0 to 32768 [ 94.479548][ T5062] XFS (loop4): Mounting V5 Filesystem [ 94.506529][ T4258] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 94.513186][ T4258] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 94.565906][ T5088] input: syz0 as /devices/virtual/input/input7 [ 94.585516][ T4258] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 94.642517][ T5090] loop2: detected capacity change from 0 to 256 [ 94.714836][ T5062] XFS (loop4): Ending clean mount [ 94.721167][ T5090] FAT-fs (loop2): Directory bread(block 64) failed [ 94.737303][ T5062] XFS (loop4): Quotacheck needed: Please wait. [ 94.776266][ T5090] FAT-fs (loop2): Directory bread(block 65) failed [ 94.814398][ T5090] FAT-fs (loop2): Directory bread(block 66) failed [ 94.822194][ T5060] loop3: detected capacity change from 0 to 32768 [ 94.830305][ T5062] XFS (loop4): Quotacheck: Done. [ 94.844673][ T5090] FAT-fs (loop2): Directory bread(block 67) failed [ 94.845820][ T4320] bond0: (slave bond_slave_0): interface is now down [ 94.865791][ T5090] FAT-fs (loop2): Directory bread(block 68) failed [ 94.874996][ T4320] bond0: (slave bond_slave_1): interface is now down [ 94.883308][ T5090] FAT-fs (loop2): Directory bread(block 69) failed [ 94.913355][ T4320] bond0: now running without any active interface! [ 94.936207][ T5090] FAT-fs (loop2): Directory bread(block 70) failed [ 94.942821][ T5090] FAT-fs (loop2): Directory bread(block 71) failed [ 94.962622][ T5060] XFS (loop3): Mounting V5 Filesystem [ 95.017397][ T5090] FAT-fs (loop2): Directory bread(block 72) failed [ 95.046508][ T5090] FAT-fs (loop2): Directory bread(block 73) failed [ 95.060411][ T4249] XFS (loop4): Unmounting Filesystem [ 95.098812][ T5060] XFS (loop3): Ending clean mount [ 95.115614][ T5060] XFS (loop3): Quotacheck needed: Please wait. [ 95.210281][ T5060] XFS (loop3): Quotacheck: Done. [ 95.285009][ T5095] loop1: detected capacity change from 0 to 32768 [ 95.421634][ T4256] XFS (loop3): Unmounting Filesystem [ 96.147571][ T5108] loop2: detected capacity change from 0 to 32768 [ 96.176934][ T5108] XFS: ikeep mount option is deprecated. [ 96.271276][ T5132] loop3: detected capacity change from 0 to 24 [ 96.278558][ T5134] loop1: detected capacity change from 0 to 2048 [ 96.292920][ T5108] XFS (loop2): Mounting V5 Filesystem [ 96.305615][ T5134] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.390361][ T5141] loop0: detected capacity change from 0 to 256 [ 96.429955][ T5108] XFS (loop2): Ending clean mount [ 96.456586][ T5108] XFS (loop2): Quotacheck needed: Please wait. [ 96.541505][ T5108] XFS (loop2): Quotacheck: Done. [ 96.662049][ T4258] XFS (loop2): Unmounting Filesystem [ 96.998326][ T26] audit: type=1326 audit(1734640613.030:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cd985d29 code=0x7ffc0000 [ 97.063515][ T26] audit: type=1326 audit(1734640613.050:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72cd985d29 code=0x7ffc0000 [ 97.134972][ T26] audit: type=1326 audit(1734640613.050:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cd985d29 code=0x7ffc0000 [ 97.193271][ T5167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 97.213020][ T26] audit: type=1326 audit(1734640613.050:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cd985d29 code=0x7ffc0000 [ 97.246322][ T26] audit: type=1326 audit(1734640613.050:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72cd985d29 code=0x7ffc0000 [ 97.331598][ T26] audit: type=1326 audit(1734640613.050:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cd985d29 code=0x7ffc0000 [ 97.398580][ T26] audit: type=1326 audit(1734640613.050:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cd985d29 code=0x7ffc0000 [ 97.440922][ T26] audit: type=1326 audit(1734640613.050:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f72cd985d29 code=0x7ffc0000 [ 97.463029][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.487261][ T26] audit: type=1326 audit(1734640613.060:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cd985d29 code=0x7ffc0000 [ 97.509369][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.550900][ T26] audit: type=1326 audit(1734640613.060:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cd985d29 code=0x7ffc0000 [ 97.713585][ T5181] loop2: detected capacity change from 0 to 64 [ 97.766050][ T5158] loop0: detected capacity change from 0 to 32768 [ 97.842339][ T5158] find_entry called with index >= next_index [ 97.851380][ T5158] find_entry called with index >= next_index [ 97.864387][ T5158] find_entry called with index >= next_index [ 97.877292][ T5158] find_entry called with index >= next_index [ 97.890194][ T5158] find_entry called with index >= next_index [ 97.931642][ T5158] jfs_lookup: iget failed on inum 32 [ 97.940619][ T5158] jfs_lookup: iget failed on inum 32 [ 97.978191][ T4258] Trying to free block not in datazone [ 98.011665][ T4258] Trying to free block not in datazone [ 98.036763][ T4258] Trying to free block not in datazone [ 98.046243][ T4258] Trying to free block not in datazone [ 98.052421][ T4258] Trying to free block not in datazone [ 98.079272][ T4258] Trying to free block not in datazone [ 98.084787][ T4258] minix_free_inode: bit 6 already cleared [ 98.100892][ T4258] Trying to free block not in datazone [ 98.112043][ T4258] minix_free_inode: bit 7 already cleared [ 98.374065][ T5195] loop3: detected capacity change from 0 to 1024 [ 98.457052][ T5195] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 98.525101][ T5183] loop4: detected capacity change from 0 to 32768 [ 98.547885][ T5183] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.297 (5183) [ 98.578790][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 98.593983][ T5183] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.606545][ T5183] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 98.615218][ T5183] BTRFS info (device loop4): using free space tree [ 98.833601][ T5183] BTRFS info (device loop4): enabling ssd optimizations [ 98.958243][ T4249] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.993348][ T5230] mkiss: ax0: crc mode is auto. [ 99.427127][ T5243] loop0: detected capacity change from 0 to 4096 [ 99.449046][ T5243] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 99.493056][ T5243] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 99.606242][ T5234] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.630423][ T5243] syz.0.314 (5243) used greatest stack depth: 19984 bytes left [ 99.801905][ T5234] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 99.816086][ T5234] usb 5-1: config 0 has no interface number 0 [ 99.831916][ T5234] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 99.852947][ T5234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.872165][ T5234] usb 5-1: Product: syz [ 99.892002][ T5234] usb 5-1: Manufacturer: syz [ 99.898684][ T5234] usb 5-1: SerialNumber: syz [ 99.914348][ T5234] usb 5-1: config 0 descriptor?? [ 100.140263][ T5245] loop4: detected capacity change from 0 to 1024 [ 100.182192][ T5245] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 100.206110][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.221533][ T5245] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 100.247696][ T5245] EXT4-fs error (device loop4): ext4_get_journal_inode:5722: inode #5: comm syz.4.310: unexpected bad inode w/o EXT4_IGET_BAD [ 100.281771][ T5245] EXT4-fs (loop4): no journal found [ 100.347868][ T5234] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 100.364591][ T5234] uvcvideo 5-1:0.64: Entity type for entity Output 3 was not initialized! [ 100.387187][ T5238] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.407188][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 100.414264][ T22] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 100.414290][ T5234] usb 5-1: Failed to create links for entity 3 [ 100.444039][ T22] usb 4-1: config 179 has no interface number 0 [ 100.464167][ T22] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 100.475424][ T5234] usb 5-1: Failed to register entities (-22). [ 100.486125][ T22] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 100.501073][ T5234] usb 5-1: USB disconnect, device number 4 [ 100.524095][ T22] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.556145][ T22] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 100.576328][ T22] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 100.595900][ T22] usb 4-1: config 179 interface 65 has no altsetting 0 [ 100.610159][ T5238] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 100.626925][ T5238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.630237][ T22] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 100.645235][ T5238] usb 3-1: Product: syz [ 100.648958][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.649866][ T5238] usb 3-1: Manufacturer: syz [ 100.673700][ T5238] usb 3-1: SerialNumber: syz [ 100.682985][ T22] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 100.695421][ T5238] usb 3-1: config 0 descriptor?? [ 100.785309][ T5270] loop1: detected capacity change from 0 to 32768 [ 100.805122][ T5270] XFS (loop1): Mounting V5 Filesystem [ 100.862934][ T5270] XFS (loop1): Ending clean mount [ 100.870811][ T5270] XFS (loop1): Quotacheck needed: Please wait. [ 100.917098][ T5238] usb 3-1: USB disconnect, device number 3 [ 100.956427][ T5270] XFS (loop1): Quotacheck: Done. [ 100.972007][ T5234] usb 4-1: USB disconnect, device number 4 [ 100.972106][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 100.989179][ T5234] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 101.323522][ T5286] loop0: detected capacity change from 0 to 32768 [ 101.331402][ T5291] loop4: detected capacity change from 0 to 4096 [ 101.347468][ T5291] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 101.380083][ T5291] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 101.660967][ T5297] Cannot find set identified by id 0 to match [ 101.703580][ T5301] loop0: detected capacity change from 0 to 256 [ 101.747402][ T5301] exfat: Deprecated parameter 'namecase' [ 101.789850][ T5301] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 102.091642][ T5270] XFS (loop1): User initiated shutdown received. [ 102.113475][ T5270] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:486). Shutting down filesystem. [ 102.184254][ T5270] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 102.276267][ T4250] XFS (loop1): Unmounting Filesystem [ 102.482695][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.503909][ T5326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.348'. [ 102.585520][ T5307] loop3: detected capacity change from 0 to 40427 [ 102.623607][ T5307] F2FS-fs (loop3): invalid crc value [ 102.664678][ T5307] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.695689][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 102.706250][ T22] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 102.714675][ T22] usb 3-1: config 179 has no interface number 0 [ 102.754471][ T22] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 102.773237][ T22] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 102.802359][ T22] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 102.803503][ T5307] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 102.819299][ T22] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 102.843954][ T22] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 102.869095][ T22] usb 3-1: config 179 interface 65 has no altsetting 0 [ 102.876690][ T5307] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.882051][ T22] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 102.917313][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.949884][ T22] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input9 [ 103.020704][ T5327] f2fs_ckpt-7:3: attempt to access beyond end of device [ 103.020704][ T5327] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.207888][ T22] usb 3-1: USB disconnect, device number 4 [ 103.213785][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 103.237126][ T22] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 103.412635][ T4547] kernel write not supported for file /sg0 (pid: 4547 comm: kworker/1:15) [ 103.656053][ T4540] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.857044][ T4540] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 103.868212][ T4540] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.895259][ T4540] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.923454][ T4540] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.947771][ T4540] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.981010][ T4540] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.003030][ T4540] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.015337][ T4540] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.034749][ T4540] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.064572][ T4540] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.087259][ T4540] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.103390][ T4540] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.114783][ T4540] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.131266][ T4540] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.150570][ T4540] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.166160][ T4925] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.180169][ T4540] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.197243][ T4540] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.217331][ T4540] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.246091][ T4540] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.254071][ T4540] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.273547][ T4540] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.296041][ T4540] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.326774][ T4540] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.335705][ T4540] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.357439][ T4540] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.374036][ T4540] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 104.383241][ T4925] usb 5-1: Using ep0 maxpacket: 32 [ 104.391259][ T4925] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 104.406037][ T4540] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 104.424644][ T4925] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 104.433752][ T4540] usb 2-1: Product: syz [ 104.444779][ T4925] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 104.454160][ T4540] usb 2-1: Manufacturer: syz [ 104.464237][ T4540] usb 2-1: SerialNumber: syz [ 104.469201][ T4925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.481573][ T4540] usb 2-1: config 0 descriptor?? [ 104.487891][ T4925] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.510823][ T4540] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 104.518160][ T4925] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.534288][ T4925] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 104.543890][ T4925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.556088][ T4925] usb 5-1: config 0 descriptor?? [ 104.600276][ T5374] loop0: detected capacity change from 0 to 4096 [ 104.625325][ T5374] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.641374][ T5366] loop3: detected capacity change from 0 to 32768 [ 104.649995][ T5366] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.364 (5366) [ 104.667188][ T5374] fs-verity: sha512 using implementation "sha512-avx2" [ 104.680548][ T5366] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 104.691058][ T5366] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 104.702952][ T5366] BTRFS info (device loop3): using free space tree [ 104.745221][ T5374] syz.0.368 (5374) used greatest stack depth: 19264 bytes left [ 104.758675][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 104.786466][ T4925] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 104.798492][ T5366] BTRFS info (device loop3): enabling ssd optimizations [ 104.830485][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 104.830531][ T26] audit: type=1800 audit(1734640620.860:37): pid=5366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.364" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 104.998295][ T4925] usb 5-1: USB disconnect, device number 5 [ 105.020789][ T4925] usblp1: removed [ 105.112359][ T4256] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 105.202991][ T5401] netlink: 'syz.0.371': attribute type 25 has an invalid length. [ 105.219838][ T5401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.371'. [ 105.736099][ T5238] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.917596][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.936084][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.951772][ T5238] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 105.961056][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.970986][ T5238] usb 4-1: config 0 descriptor?? [ 106.012878][ T5399] syz.2.372 (5399) used greatest stack depth: 18840 bytes left [ 106.392171][ T5238] logitech 0003:046D:C29C.0004: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 106.413799][ T4546] usb 2-1: USB disconnect, device number 3 [ 106.459296][ T4546] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 106.698705][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 106.753349][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 106.794084][ T5238] logitech 0003:046D:C29C.0004: no inputs found [ 106.816451][ T5238] usb 4-1: USB disconnect, device number 5 [ 106.948596][ T5234] hid-generic 0005:046D:0A0E.0005: item fetching failed at offset 0/1 [ 106.965155][ T5234] hid-generic: probe of 0005:046D:0A0E.0005 failed with error -22 [ 107.128689][ T5440] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 108.104073][ T5469] loop1: detected capacity change from 0 to 16 [ 108.125054][ T5469] erofs: (device loop1): mounted with root inode @ nid 36. [ 108.722697][ T5483] loop4: detected capacity change from 0 to 512 [ 108.792848][ T5483] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 108.797187][ T5466] loop2: detected capacity change from 0 to 32768 [ 108.822507][ T5483] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.912337][ T5466] XFS (loop2): Mounting V5 Filesystem [ 109.001517][ T5466] XFS (loop2): Ending clean mount [ 109.003942][ T5499] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 109.089539][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 109.102239][ T4258] XFS (loop2): Unmounting Filesystem [ 109.468223][ T5485] loop3: detected capacity change from 0 to 32768 [ 109.553040][ T5485] XFS (loop3): Mounting V5 Filesystem [ 109.689227][ T5485] XFS (loop3): Ending clean mount [ 109.723182][ T5485] XFS (loop3): Quotacheck needed: Please wait. [ 109.802661][ T5485] XFS (loop3): Quotacheck: Done. [ 110.304101][ T5536] loop2: detected capacity change from 0 to 4096 [ 110.359878][ T5536] ntfs: volume version 3.1. [ 110.367428][ T5538] loop4: detected capacity change from 0 to 512 [ 110.383641][ T5538] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.416559][ T5536] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 110.466804][ T5538] EXT4-fs (loop4): 1 orphan inode deleted [ 110.472795][ T5538] EXT4-fs (loop4): 1 truncate cleaned up [ 110.478936][ T5538] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.486264][ T5536] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 110.517282][ T5538] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.4.420: path /97/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 110.540333][ T5536] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to map page. [ 110.561590][ T5536] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 110.569634][ T5538] EXT4-fs (loop4): Remounting filesystem read-only [ 110.683468][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 110.782481][ T5544] loop2: detected capacity change from 0 to 1024 [ 110.828290][ T5544] hfsplus: bad catalog entry type [ 110.864014][ T5532] loop1: detected capacity change from 0 to 32768 [ 110.902075][ T46] hfsplus: b-tree write err: -5, ino 4 [ 110.957880][ T5532] XFS (loop1): Mounting V5 Filesystem [ 111.028519][ T5532] XFS (loop1): Ending clean mount [ 111.037222][ T5532] XFS (loop1): Quotacheck needed: Please wait. [ 111.045496][ T5556] Zero length message leads to an empty skb [ 111.046161][ T4264] Bluetooth: hci0: command 0x080f tx timeout [ 111.151918][ T5532] XFS (loop1): Quotacheck: Done. [ 111.224758][ T5485] XFS (loop3): User initiated shutdown received. [ 111.242467][ T5485] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:486). Shutting down filesystem. [ 111.286214][ T5485] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 111.347662][ T5542] loop0: detected capacity change from 0 to 40427 [ 111.352735][ T5546] loop4: detected capacity change from 0 to 32768 [ 111.375952][ T4250] XFS (loop1): Unmounting Filesystem [ 111.388706][ T5542] F2FS-fs (loop0): invalid crc value [ 111.389653][ T4256] XFS (loop3): Unmounting Filesystem [ 111.430371][ T5542] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.448270][ T5546] XFS (loop4): Mounting V5 Filesystem [ 111.505343][ T5542] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 111.564074][ T5542] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 111.646336][ T5546] XFS (loop4): Ending clean mount [ 111.668683][ T5546] XFS (loop4): Quotacheck needed: Please wait. [ 111.678687][ T5561] f2fs_ckpt-7:0: attempt to access beyond end of device [ 111.678687][ T5561] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.745406][ T5546] XFS (loop4): Quotacheck: Done. [ 111.800351][ T5546] XFS (loop4): User initiated shutdown received. [ 111.829596][ T5546] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:486). Shutting down filesystem. [ 111.850847][ T5546] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 111.910579][ T4249] XFS (loop4): Unmounting Filesystem [ 111.916976][ T4925] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.118401][ T5581] loop3: detected capacity change from 0 to 2048 [ 112.126345][ T4925] usb 3-1: Using ep0 maxpacket: 32 [ 112.137317][ T5581] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 112.138610][ T4925] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 112.169793][ T5581] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.206234][ T4925] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 112.214915][ T4925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 112.256095][ T4925] usb 3-1: config 1 has no interface number 0 [ 112.262238][ T4925] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.278938][ T4925] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 112.292735][ T4925] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 112.301905][ T4925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.355544][ T4925] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 112.884150][ T4925] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 112.891358][ T26] audit: type=1326 audit(1734640628.920:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb7585d29 code=0x7ffc0000 [ 112.946032][ T26] audit: type=1326 audit(1734640628.930:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fdfb7585d29 code=0x7ffc0000 [ 112.990913][ T26] audit: type=1326 audit(1734640628.930:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb7585d29 code=0x7ffc0000 [ 113.066140][ T26] audit: type=1326 audit(1734640628.930:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb7585d29 code=0x7ffc0000 [ 113.128707][ T4925] usb 3-1: USB disconnect, device number 5 [ 113.135748][ T4925] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 113.146206][ T26] audit: type=1326 audit(1734640628.930:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdfb7585d29 code=0x7ffc0000 [ 113.194555][ T26] audit: type=1326 audit(1734640628.930:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.0.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb7585d29 code=0x7ffc0000 [ 113.263860][ T5589] loop3: detected capacity change from 0 to 32768 [ 113.287801][ T5604] loop1: detected capacity change from 0 to 1024 [ 113.294336][ T5589] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.435 (5589) [ 113.322178][ T5589] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.332777][ T5604] hfsplus: keylen 65060 too large [ 113.352861][ T5589] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 113.357502][ T5604] hfsplus: xattr searching failed [ 113.373158][ T5589] BTRFS info (device loop3): using free space tree [ 113.382508][ T5604] hfsplus: keylen 65060 too large [ 113.398021][ T5604] hfsplus: xattr searching failed [ 113.549732][ T5589] BTRFS info (device loop3): enabling ssd optimizations [ 113.767622][ T4256] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.882920][ T5636] sctp: [Deprecated]: syz.1.446 (pid 5636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.882920][ T5636] Use struct sctp_sack_info instead [ 113.982071][ T5609] loop4: detected capacity change from 0 to 40427 [ 114.005335][ T5609] F2FS-fs (loop4): invalid crc value [ 114.044012][ T5609] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.150449][ T5609] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 114.180866][ T5609] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.318819][ T5639] f2fs_ckpt-7:4: attempt to access beyond end of device [ 114.318819][ T5639] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.396268][ T5655] loop3: detected capacity change from 0 to 512 [ 114.428935][ T5655] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.482532][ T5655] EXT4-fs (loop3): shut down requested (2) [ 114.537870][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 114.694986][ T5663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.896999][ T5669] loop0: detected capacity change from 0 to 512 [ 114.916675][ T5670] loop3: detected capacity change from 0 to 1024 [ 114.925873][ T5651] loop2: detected capacity change from 0 to 32768 [ 114.941360][ T5651] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 114.957810][ T5651] XFS (loop2): Mounting V5 Filesystem [ 114.968987][ T5669] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.983889][ T5669] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.008398][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.059758][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.097821][ T5651] XFS (loop2): Ending clean mount [ 115.104682][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.124596][ T5651] XFS (loop2): Quotacheck needed: Please wait. [ 115.134368][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 115.159403][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.226299][ T5651] XFS (loop2): Quotacheck: Done. [ 115.245813][ T5683] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.265479][ T5683] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.285039][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.324110][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.336544][ T5683] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.349823][ T4258] XFS (loop2): Unmounting Filesystem [ 115.370051][ T5683] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.406302][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.444536][ T5693] loop4: detected capacity change from 0 to 256 [ 115.450320][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.482577][ T5683] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.501847][ T5693] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104b5, chksum : 0x72e3a6c8, utbl_chksum : 0xe619d30d) [ 115.515252][ T5683] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.545427][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.565124][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.583758][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.636093][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.683085][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.700924][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.751616][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.778705][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.816215][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.830741][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.851311][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.865318][ T5699] program syz.0.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.875427][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.886324][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.893875][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.907273][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.921327][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.935591][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.951170][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.965371][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.982573][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 115.996853][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 116.020252][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 116.032945][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 116.044346][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 116.062883][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 116.086290][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 116.100168][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 116.113529][ T5690] loop1: detected capacity change from 0 to 32768 [ 116.115428][ T5670] hfsplus: request for non-existent node 16777216 in B*Tree [ 116.146233][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 116.146247][ T26] audit: type=1800 audit(1734640632.180:48): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.462" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 116.149299][ T5690] XFS: noikeep mount option is deprecated. [ 116.263662][ T5690] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 116.282594][ T5690] XFS (loop1): Mounting V5 Filesystem [ 116.410165][ T5690] XFS (loop1): Ending clean mount [ 116.553615][ T5722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.477'. [ 116.715930][ T4250] XFS (loop1): Unmounting Filesystem [ 116.808569][ T5702] loop2: detected capacity change from 0 to 40427 [ 116.863678][ T5702] F2FS-fs (loop2): invalid crc value [ 116.908717][ T5702] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.009610][ T5702] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 117.022604][ T5738] netlink: 60 bytes leftover after parsing attributes in process `syz.4.483'. [ 117.046125][ T5702] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.048240][ T5738] netlink: 60 bytes leftover after parsing attributes in process `syz.4.483'. [ 117.111832][ T5737] netlink: 60 bytes leftover after parsing attributes in process `syz.4.483'. [ 117.125760][ T5731] f2fs_ckpt-7:2: attempt to access beyond end of device [ 117.125760][ T5731] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.150537][ T5742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.483'. [ 117.173038][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 117.630685][ T5756] loop3: detected capacity change from 0 to 256 [ 117.651683][ T5756] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 117.683011][ T26] audit: type=1800 audit(1734640633.710:49): pid=5756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.491" name="file1" dev="loop3" ino=1048618 res=0 errno=0 [ 117.721269][ T5756] exFAT-fs (loop3): hint_cluster is invalid (17) [ 117.929809][ T5765] netlink: 'syz.3.494': attribute type 25 has an invalid length. [ 117.952211][ T5765] netlink: 'syz.3.494': attribute type 7 has an invalid length. [ 117.973757][ T5767] loop1: detected capacity change from 0 to 2048 [ 118.058637][ T5767] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 118.072490][ T5767] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.157469][ T5776] process 'syz.0.500' launched '/dev/fd/3' with NULL argv: empty string added [ 118.257185][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 118.402986][ T5785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 118.615170][ T5792] netlink: 'syz.1.507': attribute type 1 has an invalid length. [ 118.977433][ T5811] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.984696][ T5811] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 119.002634][ T5809] netlink: 888 bytes leftover after parsing attributes in process `syz.1.516'. [ 119.064787][ T5774] loop2: detected capacity change from 0 to 40427 [ 119.095170][ T5774] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 119.137712][ T5774] F2FS-fs (loop2): invalid crc value [ 119.179588][ T5774] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.193354][ T5813] loop0: detected capacity change from 0 to 4096 [ 119.365523][ T5774] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.601990][ T4258] syz-executor: attempt to access beyond end of device [ 119.601990][ T4258] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.273233][ T5830] loop4: detected capacity change from 0 to 32768 [ 120.339187][ T5830] XFS (loop4): Mounting V5 Filesystem [ 120.491926][ T5860] loop2: detected capacity change from 0 to 512 [ 120.531013][ T5830] XFS (loop4): Ending clean mount [ 120.555686][ T5830] XFS (loop4): Quotacheck needed: Please wait. [ 120.562291][ T5860] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.583314][ T5860] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.591974][ T5840] loop1: detected capacity change from 0 to 40427 [ 120.616525][ T5840] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 120.624302][ T5840] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 120.651101][ T5830] XFS (loop4): Quotacheck: Done. [ 120.658845][ T5842] loop3: detected capacity change from 0 to 40427 [ 120.667650][ T5842] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 120.675410][ T5842] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 120.695466][ T5840] F2FS-fs (loop1): invalid crc value [ 120.723969][ T5840] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.767883][ T5842] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.784625][ T4249] XFS (loop4): Unmounting Filesystem [ 120.818607][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 120.861271][ T5872] loop0: detected capacity change from 0 to 1024 [ 120.870224][ T5840] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.883313][ T5840] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.997954][ T5875] QAT: Device 1 not found [ 121.020029][ T5842] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 121.030782][ T5842] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.214686][ T26] audit: type=1804 audit(1734640637.240:50): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.531" name="/newroot/101/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 121.494013][ T5889] loop0: detected capacity change from 0 to 512 [ 121.511235][ T5889] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.573051][ T5889] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.606850][ T5889] EXT4-fs (loop0): 1 truncate cleaned up [ 121.612646][ T5889] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.658897][ T5889] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 121.730759][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 121.757618][ T5895] sg_write: data in/out 16777180/17 bytes for SCSI command 0x0-- guessing data in; [ 121.757618][ T5895] program syz.1.540 not setting count and/or reply_len properly [ 122.029081][ T5905] loop3: detected capacity change from 0 to 1024 [ 122.074220][ T5908] loop0: detected capacity change from 0 to 16 [ 122.097644][ T5905] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 122.143377][ T5908] erofs: (device loop0): mounted with root inode @ nid 36. [ 122.356353][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 122.374804][ T4298] hid-generic 0005:15C2:00E3.0006: item fetching failed at offset 0/1 [ 122.394259][ T4298] hid-generic: probe of 0005:15C2:00E3.0006 failed with error -22 [ 122.719684][ T5937] loop3: detected capacity change from 0 to 2048 [ 122.748201][ T5937] EXT4-fs: Ignoring removed nobh option [ 122.808390][ T5937] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.826158][ T5937] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.058955][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 123.269910][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 123.338764][ T5958] loop2: detected capacity change from 0 to 512 [ 123.387520][ T5958] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c028, mo2=0002] [ 123.414974][ T5958] System zones: 0-2, 18-18, 34-35 [ 123.441978][ T5933] loop4: detected capacity change from 0 to 32768 [ 123.453340][ T5958] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 123.489644][ T5958] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.511699][ T5958] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.574: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 123.561032][ T5933] XFS (loop4): Mounting V5 Filesystem [ 123.576309][ T5958] EXT4-fs (loop2): Remounting filesystem read-only [ 123.588309][ T5958] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 3: comm syz.2.574: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 123.621998][ T5958] EXT4-fs (loop2): Remounting filesystem read-only [ 123.631683][ T5933] XFS (loop4): Ending clean mount [ 123.667066][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 123.765639][ T4249] XFS (loop4): Unmounting Filesystem [ 123.880593][ T5960] loop0: detected capacity change from 0 to 32768 [ 123.921106][ T5960] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.575 (5960) [ 123.929951][ T5980] loop2: detected capacity change from 0 to 64 [ 123.968088][ T5960] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 124.001292][ T5960] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 124.027969][ T5960] BTRFS info (device loop0): using free space tree [ 124.043197][ T5982] loop1: detected capacity change from 0 to 128 [ 124.326113][ T5960] BTRFS info (device loop0): enabling ssd optimizations [ 124.361892][ T26] audit: type=1800 audit(1734640640.390:51): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.575" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 124.413659][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.422184][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.473488][ T6015] input: syz0 as /devices/virtual/input/input12 [ 124.516230][ T128] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.684132][ T4257] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 124.726370][ T128] usb 3-1: Using ep0 maxpacket: 16 [ 124.738510][ T128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.769456][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.796083][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.816223][ T128] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 124.825915][ T128] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.898129][ T128] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 124.913200][ T128] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 124.926156][ T128] usb 3-1: Manufacturer: syz [ 124.952032][ T128] usb 3-1: config 0 descriptor?? [ 125.346099][ T128] rc_core: IR keymap rc-hauppauge not found [ 125.352252][ T128] Registered IR keymap rc-empty [ 125.363225][ T128] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.406125][ T128] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.438444][ T128] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 125.498157][ T128] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 125.556499][ T128] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.616218][ T128] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.656282][ T128] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.696238][ T128] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.766243][ T128] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.796161][ T128] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.846286][ T128] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.886258][ T128] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.926235][ T128] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.966090][ T128] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 126.009855][ T128] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 126.018161][ T4330] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 126.038393][ T128] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 126.066270][ T128] usb 3-1: USB disconnect, device number 6 [ 126.194696][ T6065] loop1: detected capacity change from 0 to 64 [ 126.216065][ T4330] usb 4-1: Using ep0 maxpacket: 32 [ 126.223213][ T4330] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 126.243423][ T4330] usb 4-1: config 0 has no interface number 0 [ 126.255939][ T4330] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 126.279296][ T4330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.300362][ T4330] usb 4-1: Product: syz [ 126.309581][ T4330] usb 4-1: Manufacturer: syz [ 126.326300][ T4330] usb 4-1: SerialNumber: syz [ 126.337723][ T4330] usb 4-1: config 0 descriptor?? [ 126.365010][ T4330] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 126.510461][ T6069] loop2: detected capacity change from 0 to 512 [ 126.542226][ T6069] EXT4-fs: Ignoring removed oldalloc option [ 126.562664][ T6069] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.564648][ T4330] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 126.628120][ T4330] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 126.662376][ T6069] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 126.787767][ T6052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.818163][ T6062] loop4: detected capacity change from 0 to 32768 [ 126.826823][ T6052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.055922][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 127.058483][ T5234] usb 4-1: USB disconnect, device number 6 [ 127.114217][ T5234] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 127.158900][ T5234] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 127.198072][ T5234] quatech2 4-1:0.51: device disconnected [ 127.588147][ T6081] loop0: detected capacity change from 0 to 32768 [ 127.632942][ T6081] JBD2: Ignoring recovery information on journal [ 127.718880][ T6081] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 127.852724][ T4257] ocfs2: Unmounting device (7,0) on (node local) [ 128.199574][ T6106] loop1: detected capacity change from 0 to 512 [ 128.266787][ T6106] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.368729][ T6106] EXT4-fs (loop1): 1 truncate cleaned up [ 128.374610][ T6106] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.542406][ T6106] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 128.662125][ T6119] loop4: detected capacity change from 0 to 4096 [ 128.690973][ T6119] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 128.691885][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 128.717582][ T5234] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 128.751516][ T6119] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 128.876193][ T40] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 128.898588][ T6119] ntfs3: loop4: ino=5, "/" attr_set_size [ 128.917997][ T5234] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 128.966214][ T5234] usb 4-1: config 0 has no interface number 0 [ 128.986661][ T5234] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 129.018038][ T5234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.051897][ T5234] usb 4-1: Product: syz [ 129.068231][ T5234] usb 4-1: Manufacturer: syz [ 129.078347][ T5234] usb 4-1: SerialNumber: syz [ 129.098765][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.106367][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.109269][ T5234] usb 4-1: config 0 descriptor?? [ 129.509906][ T6124] loop1: detected capacity change from 0 to 32768 [ 129.537419][ T6124] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.633 (6124) [ 129.570064][ T6124] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 129.596150][ T6124] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 129.622970][ T6124] BTRFS info (device loop1): using free space tree [ 129.690884][ T5234] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 129.707721][ T5234] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 129.715925][ T5234] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 129.724517][ T5234] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 129.734848][ T5234] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 129.813590][ T6163] loop2: detected capacity change from 0 to 128 [ 129.835547][ T6166] loop4: detected capacity change from 0 to 64 [ 129.873107][ T6124] BTRFS info (device loop1): enabling ssd optimizations [ 129.932239][ T26] audit: type=1800 audit(1734640645.960:52): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.633" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 129.935858][ T6172] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 129.935858][ T6172] The task syz.0.646 (6172) triggered the difference, watch for misbehavior. [ 129.979154][ T4330] usb 4-1: USB disconnect, device number 7 [ 130.002080][ T4330] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 130.041848][ T4330] keyspan 4-1:0.133: device disconnected [ 130.070078][ T6174] loop4: detected capacity change from 0 to 256 [ 130.085508][ T6174] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xa154a131, utbl_chksum : 0xe619d30d) [ 130.135674][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 130.152148][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.161236][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.175366][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.200658][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.229810][ T4250] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 130.681430][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 130.845053][ T6197] loop4: detected capacity change from 0 to 8 [ 130.886204][ T6178] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.901299][ T6197] SQUASHFS error: Failed to read block 0x8f: -5 [ 130.920368][ T6197] SQUASHFS error: Failed to read block 0xc00090: -5 [ 130.929029][ T6197] SQUASHFS error: Failed to read block 0x8f: -5 [ 130.938215][ T6197] SQUASHFS error: Failed to read block 0x8f: -5 [ 130.946723][ T6197] SQUASHFS error: Failed to read block 0x8f: -5 [ 130.953072][ T6197] SQUASHFS error: Failed to read block 0x8f: -5 [ 130.960100][ T6197] SQUASHFS error: Failed to read block 0x8f: -5 [ 130.971317][ T26] audit: type=1800 audit(1734640647.000:53): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.657" name="file3" dev="loop4" ino=6 res=0 errno=0 [ 131.025027][ T6203] loop0: detected capacity change from 0 to 4096 [ 131.039269][ T6203] NILFS (loop0): invalid segment: Checksum error in segment payload [ 131.049578][ T6203] NILFS (loop0): trying rollback from an earlier position [ 131.074963][ T6203] NILFS (loop0): recovery complete [ 131.082333][ T6205] loop4: detected capacity change from 0 to 256 [ 131.088325][ T6206] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.104848][ T6178] usb 4-1: Using ep0 maxpacket: 8 [ 131.114218][ T6205] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 131.128801][ T6178] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 131.130207][ T6205] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 131.148598][ T6178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.156819][ T6178] usb 4-1: Product: syz [ 131.161002][ T6178] usb 4-1: Manufacturer: syz [ 131.165637][ T6178] usb 4-1: SerialNumber: syz [ 131.172156][ T6178] usb 4-1: config 0 descriptor?? [ 131.182566][ T6178] gspca_main: sq930x-2.14.0 probing 2770:930c [ 131.206220][ T4297] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 131.337162][ T6210] device batadv0 entered promiscuous mode [ 131.345686][ T6210] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.361848][ T6210] device batadv0 left promiscuous mode [ 131.397849][ T4297] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.417931][ T4297] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.430945][ T4297] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.442424][ T4297] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 131.453769][ T4297] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 131.483718][ T4297] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.495500][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.503712][ T4297] usb 3-1: Product: syz [ 131.508056][ T4297] usb 3-1: Manufacturer: syz [ 131.526377][ T4297] cdc_wdm 3-1:1.0: skipping garbage [ 131.531715][ T4297] cdc_wdm 3-1:1.0: skipping garbage [ 131.544213][ T4297] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 131.550379][ T4297] cdc_wdm 3-1:1.0: Unknown control protocol [ 131.753489][ T26] audit: type=1326 audit(1734640647.780:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb7585d29 code=0x7ffc0000 [ 131.773090][ T4297] usb 3-1: USB disconnect, device number 7 [ 131.797955][ T26] audit: type=1326 audit(1734640647.820:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb7585d29 code=0x7ffc0000 [ 131.820764][ T26] audit: type=1326 audit(1734640647.820:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfb7585d29 code=0x7ffc0000 [ 131.825207][ T6212] loop4: detected capacity change from 0 to 32768 [ 131.844733][ T26] audit: type=1326 audit(1734640647.820:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb7585d29 code=0x7ffc0000 [ 131.887851][ T6212] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.664 (6212) [ 131.923301][ T26] audit: type=1326 audit(1734640647.820:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb7585d29 code=0x7ffc0000 [ 131.928499][ T6212] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.969206][ T6212] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 131.981645][ T6212] BTRFS info (device loop4): using free space tree [ 131.982951][ T26] audit: type=1326 audit(1734640647.820:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfb7585d29 code=0x7ffc0000 [ 132.011576][ T6178] gspca_sq930x: ucbus_write failed -71 [ 132.019152][ T6178] sq930x: probe of 4-1:0.0 failed with error -71 [ 132.029522][ T26] audit: type=1326 audit(1734640647.820:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb7585d29 code=0x7ffc0000 [ 132.038565][ T6178] usb 4-1: USB disconnect, device number 8 [ 132.060852][ T26] audit: type=1326 audit(1734640647.820:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb7585d29 code=0x7ffc0000 [ 132.117839][ T6212] BTRFS info (device loop4): enabling ssd optimizations [ 132.215466][ T4249] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.571964][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.578515][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.802238][ T6254] loop4: detected capacity change from 0 to 1024 [ 132.836362][ T6254] hfsplus: walked past end of dir [ 132.927876][ T6260] loop0: detected capacity change from 0 to 512 [ 132.947820][ T6260] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.678: Invalid inode bitmap blk 4 in block_group 0 [ 132.963085][ T6260] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 133.005254][ T6260] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.678: Invalid inode bitmap blk 4 in block_group 0 [ 133.020251][ T6264] loop1: detected capacity change from 0 to 512 [ 133.028086][ T6264] ext4: Unknown parameter 'nouser_xattr' [ 133.033236][ T6260] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 133.082369][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 133.136221][ T4298] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 133.296110][ T4294] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.315749][ T6274] loop0: detected capacity change from 0 to 64 [ 133.326350][ T4298] usb 3-1: Using ep0 maxpacket: 16 [ 133.334164][ T4298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.350656][ T4298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.361306][ T4298] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 133.373110][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.386453][ T4298] usb 3-1: config 0 descriptor?? [ 133.486284][ T4294] usb 5-1: Using ep0 maxpacket: 32 [ 133.494776][ T4294] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 133.526043][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.546369][ T4294] usb 5-1: config 0 descriptor?? [ 133.676224][ T6288] loop3: detected capacity change from 0 to 8 [ 133.690506][ T6285] loop0: detected capacity change from 0 to 512 [ 133.728176][ T6285] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.690: invalid block [ 133.729082][ T6288] SQUASHFS error: Failed to read block 0x8f: -5 [ 133.773917][ T6285] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.690: invalid indirect mapped block 10 (level 1) [ 133.799232][ T4294] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 133.809329][ T6258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.812975][ T6288] SQUASHFS error: Failed to read block 0xc00090: -5 [ 133.826295][ T6258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.838787][ T4298] hid (null): bogus close delimiter [ 133.859399][ T4294] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.874072][ T6285] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.690: invalid indirect mapped block 8 (level 1) [ 133.876918][ T4294] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 133.901385][ T6288] SQUASHFS error: Failed to read block 0x8f: -5 [ 133.901919][ T6285] EXT4-fs (loop0): 1 truncate cleaned up [ 133.917800][ T6288] SQUASHFS error: Failed to read block 0x8f: -5 [ 133.920844][ T6285] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 133.943820][ T6288] SQUASHFS error: Failed to read block 0x8f: -5 [ 133.956147][ T4294] usb 5-1: media controller created [ 133.970710][ T6288] SQUASHFS error: Failed to read block 0x8f: -5 [ 134.001325][ T4294] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.010066][ T6288] SQUASHFS error: Failed to read block 0x8f: -5 [ 134.045933][ T4298] usb 3-1: string descriptor 0 read error: -71 [ 134.083846][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 134.090010][ T4298] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 134.107203][ T4298] letsketch: probe of 0003:6161:4D15.0007 failed with error -32 [ 134.126589][ T4298] usb 3-1: USB disconnect, device number 8 [ 134.255224][ T6294] loop0: detected capacity change from 0 to 4096 [ 134.282942][ T6294] NILFS (loop0): invalid segment: Checksum error in segment payload [ 134.292381][ T6294] NILFS (loop0): trying rollback from an earlier position [ 134.325551][ T6294] NILFS (loop0): recovery complete [ 134.332362][ T6297] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.467331][ T4294] az6027: usb out operation failed. (-71) [ 134.476216][ T4294] stb0899_attach: Driver disabled by Kconfig [ 134.482235][ T4294] az6027: no front-end attached [ 134.482235][ T4294] [ 134.518958][ T6301] netlink: 'syz.0.695': attribute type 1 has an invalid length. [ 134.523516][ T4294] az6027: usb out operation failed. (-71) [ 134.532776][ T4294] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 134.562195][ T4294] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 134.585325][ T4294] dvb-usb: schedule remote query interval to 400 msecs. [ 134.602646][ T4294] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 134.638124][ T4294] usb 5-1: USB disconnect, device number 6 [ 134.741116][ T4294] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 135.023468][ T6314] loop1: detected capacity change from 0 to 128 [ 135.039650][ T6314] zonefs (loop1) ERROR: Not a zoned block device [ 135.163452][ T6299] loop3: detected capacity change from 0 to 32768 [ 135.186827][ T6299] XFS: ikeep mount option is deprecated. [ 135.251407][ T6299] XFS (loop3): Mounting V5 Filesystem [ 135.365087][ T6329] loop4: detected capacity change from 0 to 2048 [ 135.381238][ T6299] XFS (loop3): Ending clean mount [ 135.407722][ T6329] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 135.411921][ T6299] XFS (loop3): Quotacheck needed: Please wait. [ 135.447657][ T6335] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.526846][ T6299] XFS (loop3): Quotacheck: Done. [ 135.595416][ T6341] netlink: 104 bytes leftover after parsing attributes in process `syz.2.710'. [ 135.683487][ T4256] XFS (loop3): Unmounting Filesystem [ 136.036139][ T4294] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.152152][ T4750] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.164196][ T6338] loop0: detected capacity change from 0 to 40427 [ 136.205238][ T6338] F2FS-fs (loop0): Found nat_bits in checkpoint [ 136.260276][ T6338] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 136.269393][ T6338] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.288298][ T4294] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.306053][ T4294] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.321357][ T4294] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.340730][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.356471][ T4294] usb 3-1: SerialNumber: syz [ 136.362318][ T4750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.379441][ T6338] syz.0.708: attempt to access beyond end of device [ 136.379441][ T6338] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 136.384346][ T4750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.436280][ T4750] usb 2-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 136.465743][ T4750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.487053][ T4750] usb 2-1: config 0 descriptor?? [ 136.621338][ T4294] usb 3-1: 0:2 : does not exist [ 136.636140][ T4294] usb 3-1: unit 255 not found! [ 136.690185][ T4294] usb 3-1: USB disconnect, device number 9 [ 136.916241][ T4750] hid-generic 0003:18D1:5030.0008: hidraw0: USB HID v0.00 Device [HID 18d1:5030] on usb-dummy_hcd.1-1/input0 [ 137.098409][ T6367] syz.3.720[6367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.098521][ T6367] syz.3.720[6367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.130268][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 137.170800][ T4298] usb 2-1: USB disconnect, device number 4 [ 137.295052][ T6373] netlink: 'syz.4.723': attribute type 10 has an invalid length. [ 137.307449][ T6373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.723'. [ 137.321996][ T6373] batman_adv: batadv0: Adding interface: virt_wifi0 [ 137.331795][ T6373] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.362778][ T6373] batman_adv: batadv0: Interface activated: virt_wifi0 [ 137.460028][ T6381] loop4: detected capacity change from 0 to 1024 [ 137.486157][ T4421] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.507764][ T6381] syz.4.727: attempt to access beyond end of device [ 137.507764][ T6381] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 137.523289][ T6381] syz.4.727: attempt to access beyond end of device [ 137.523289][ T6381] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 137.537149][ T6381] syz.4.727: attempt to access beyond end of device [ 137.537149][ T6381] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 137.579187][ T4750] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.677853][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.710216][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.746081][ T4421] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 137.767368][ T4421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.787493][ T4421] usb 1-1: config 0 descriptor?? [ 137.794797][ T4750] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 137.826021][ T4750] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 137.856116][ T4750] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 137.893354][ T4750] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.926902][ T4750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 137.935012][ T4750] usb 4-1: SerialNumber: syz [ 137.949132][ T6371] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.019508][ T6397] loop1: detected capacity change from 0 to 1024 [ 138.027625][ T6397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.045119][ T6397] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.068925][ T6397] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.086091][ T6397] EXT4-fs (loop1): Test dummy encryption mode enabled [ 138.130174][ T6389] loop4: detected capacity change from 0 to 32768 [ 138.143768][ T6397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 138.165520][ T6389] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 138.189396][ T6389] JBD2: Ignoring recovery information on journal [ 138.199616][ T6371] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.207863][ T4421] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 138.214692][ T4421] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 138.242027][ T4421] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 138.248948][ T4421] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 138.262739][ T4421] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 138.296065][ T4421] sony 0003:1345:3008.0009: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 138.318173][ T4421] sony 0003:1345:3008.0009: failed to claim input [ 138.341495][ T6389] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 138.431376][ T4330] usb 1-1: USB disconnect, device number 5 [ 138.499637][ T6395] loop2: detected capacity change from 0 to 32768 [ 138.516338][ T6395] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.735 (6395) [ 138.544787][ T6395] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.562966][ T6395] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 138.572713][ T6395] BTRFS info (device loop2): using free space tree [ 138.584885][ T4249] ocfs2: Unmounting device (7,4) on (node local) [ 138.666826][ T4750] cdc_ether 4-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.3-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 138.691060][ T6397] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 138.755707][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 138.763695][ T6395] BTRFS info (device loop2): enabling ssd optimizations [ 138.853331][ T4258] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.885679][ T4750] usb 4-1: USB disconnect, device number 9 [ 138.900197][ T4750] cdc_ether 4-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.3-1, Mobile Broadband Network Device [ 139.193450][ T6441] loop0: detected capacity change from 0 to 1024 [ 139.206739][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'. [ 139.248227][ T6441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 139.579755][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 139.581703][ T6461] loop3: detected capacity change from 0 to 256 [ 139.612149][ T6461] FAT-fs (loop3): Directory bread(block 64) failed [ 139.623067][ T6461] FAT-fs (loop3): Directory bread(block 65) failed [ 139.632948][ T6461] FAT-fs (loop3): Directory bread(block 66) failed [ 139.649591][ T6461] FAT-fs (loop3): Directory bread(block 67) failed [ 139.663286][ T6461] FAT-fs (loop3): Directory bread(block 68) failed [ 139.671778][ T6461] FAT-fs (loop3): Directory bread(block 69) failed [ 139.685234][ T6461] FAT-fs (loop3): Directory bread(block 70) failed [ 139.694485][ T6461] FAT-fs (loop3): Directory bread(block 71) failed [ 139.705630][ T6461] FAT-fs (loop3): Directory bread(block 72) failed [ 139.714469][ T6461] FAT-fs (loop3): Directory bread(block 73) failed [ 139.810101][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'. [ 139.935834][ T6474] sch_tbf: burst 6758 is lower than device lo mtu (65550) ! [ 140.015358][ T6480] loop2: detected capacity change from 0 to 2048 [ 140.022828][ T6479] ALSA: mixer_oss: invalid OSS volume '' [ 140.053060][ T6480] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.132121][ T6482] loop4: detected capacity change from 0 to 2048 [ 140.175843][ T6482] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.238444][ T6488] loop0: detected capacity change from 0 to 2048 [ 140.271364][ T6488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.592411][ T6503] syz.2.766 sent an empty control message without MSG_MORE. [ 140.791436][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 140.809024][ T6512] loop2: detected capacity change from 0 to 256 [ 140.857299][ T6512] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb69a62dc, utbl_chksum : 0xe619d30d) [ 141.296548][ T4299] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.332683][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'. [ 141.352163][ T6533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.780'. [ 141.363168][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'. [ 141.503242][ T6537] loop1: detected capacity change from 0 to 4096 [ 141.516506][ T4299] usb 3-1: Using ep0 maxpacket: 8 [ 141.521959][ T6537] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 141.559662][ T4299] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 141.573157][ T4299] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 141.602838][ T4299] usb 3-1: Product: syz [ 141.615420][ T4299] usb 3-1: Manufacturer: syz [ 141.631577][ T4299] usb 3-1: SerialNumber: syz [ 141.646330][ T4299] usb 3-1: config 0 descriptor?? [ 141.675662][ T4299] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 141.832197][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 141.843653][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.855125][ T6543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.895240][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.919859][ T6543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.042427][ T6549] loop3: detected capacity change from 0 to 1024 [ 142.074918][ T6549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.278856][ T4299] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 142.376234][ T6559] loop1: detected capacity change from 0 to 4096 [ 142.378090][ T6557] loop3: detected capacity change from 0 to 2048 [ 142.406262][ T6559] NILFS (loop1): invalid segment: Checksum error in segment payload [ 142.414383][ T6559] NILFS (loop1): trying rollback from an earlier position [ 142.449141][ T6557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.467374][ T6559] NILFS (loop1): recovery complete [ 142.479382][ T4294] usb 3-1: USB disconnect, device number 10 [ 142.480526][ T6557] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 142.526892][ T6562] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.822757][ T6568] loop1: detected capacity change from 0 to 4096 [ 142.873283][ T6568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 142.930097][ T6578] loop4: detected capacity change from 0 to 256 [ 142.962538][ T6568] EXT4-fs (loop1): shut down requested (0) [ 143.236533][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 143.329239][ T6586] loop4: detected capacity change from 0 to 16 [ 143.350122][ T6586] erofs: (device loop4): mounted with root inode @ nid 36. [ 143.454869][ T6592] loop3: detected capacity change from 0 to 256 [ 143.493298][ T6577] loop0: detected capacity change from 0 to 32768 [ 143.514963][ T6577] XFS: ikeep mount option is deprecated. [ 143.525429][ T6592] FAT-fs (loop3): unable to read block(17179869184) for building NFS inode [ 143.625685][ T6577] XFS (loop0): Mounting V5 Filesystem [ 143.724922][ T6577] XFS (loop0): Ending clean mount [ 143.778044][ T6605] loop1: detected capacity change from 0 to 64 [ 143.786117][ T6577] XFS (loop0): Quotacheck needed: Please wait. [ 143.919629][ T6577] XFS (loop0): Quotacheck: Done. [ 144.060611][ T4257] XFS (loop0): Unmounting Filesystem [ 144.205549][ T6588] loop2: detected capacity change from 0 to 32768 [ 144.271341][ T6588] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 144.542592][ T4258] ocfs2: Unmounting device (7,2) on (node local) [ 144.575554][ T6635] loop4: detected capacity change from 0 to 512 [ 144.632666][ T6635] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.819: casefold flag without casefold feature [ 144.678864][ T6635] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.819: couldn't read orphan inode 15 (err -117) [ 144.694168][ T4298] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 144.732735][ T6635] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.897052][ T4298] usb 4-1: Using ep0 maxpacket: 32 [ 144.911176][ T4298] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 144.930065][ T4298] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 144.962193][ T4298] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.979732][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 144.990549][ T4298] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.022821][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.035709][ T4298] usb 4-1: Product: syz [ 145.040723][ T4298] usb 4-1: Manufacturer: syz [ 145.045418][ T4298] usb 4-1: SerialNumber: syz [ 145.225109][ T6655] loop4: detected capacity change from 0 to 8192 [ 145.233728][ T4925] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.249946][ T6657] loop1: detected capacity change from 0 to 1024 [ 145.264937][ T4298] usb 4-1: 0:2 : does not exist [ 145.266947][ T6657] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 145.281988][ T6655] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 145.290638][ T4298] usb 4-1: USB disconnect, device number 10 [ 145.297557][ T6657] EXT4-fs (loop1): orphan cleanup on readonly fs [ 145.311303][ T6657] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.829: Freeing blocks not in datazone - block = 0, count = 4096 [ 145.325076][ T6655] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 145.334742][ T6655] REISERFS (device loop4): using ordered data mode [ 145.345305][ T6655] reiserfs: using flush barriers [ 145.350778][ T6657] EXT4-fs (loop1): Remounting filesystem read-only [ 145.357695][ T6657] EXT4-fs (loop1): 1 truncate cleaned up [ 145.364066][ T6657] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 145.386590][ T6655] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 145.421491][ T6655] REISERFS (device loop4): checking transaction log (loop4) [ 145.433865][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 145.443341][ T4925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.479899][ T6655] REISERFS (device loop4): Using r5 hash to sort names [ 145.487226][ T4925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.502327][ T6655] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 145.519424][ T4925] usb 1-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 145.544008][ T4925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.567968][ T4925] usb 1-1: config 0 descriptor?? [ 145.802974][ T6669] loop2: detected capacity change from 0 to 2048 [ 145.841241][ T6669] UDF-fs: bad mount option "ÿÿÿÿÿÿÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value [ 145.961731][ T6675] batman_adv: The newly added mac address (02:67:5e:1e:6a:13) already exists on: virt_wifi0 [ 145.996115][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.000096][ T4925] hid-generic 0003:18D1:5030.000A: hidraw0: USB HID v0.00 Device [HID 18d1:5030] on usb-dummy_hcd.0-1/input0 [ 146.017398][ T6675] device vlan2 entered promiscuous mode [ 146.023518][ T6675] device virt_wifi0 entered promiscuous mode [ 146.048185][ T6675] team0: Port device vlan2 added [ 146.141845][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 146.141861][ T26] audit: type=1326 audit(1734640918.172:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f36f85d29 code=0x7ffc0000 [ 146.207075][ T4298] usb 1-1: USB disconnect, device number 6 [ 146.224098][ T26] audit: type=1326 audit(1734640918.212:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f36f85d29 code=0x7ffc0000 [ 146.247230][ T4421] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 146.267949][ T26] audit: type=1326 audit(1734640918.212:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f36f85d29 code=0x7ffc0000 [ 146.292130][ T26] audit: type=1326 audit(1734640918.212:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f36f85d29 code=0x7ffc0000 [ 146.315134][ T26] audit: type=1326 audit(1734640918.212:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3f36f85d29 code=0x7ffc0000 [ 146.356083][ T26] audit: type=1326 audit(1734640918.212:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f36f85d29 code=0x7ffc0000 [ 146.389742][ T26] audit: type=1326 audit(1734640918.212:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f36f85d29 code=0x7ffc0000 [ 146.405898][ T6673] loop1: detected capacity change from 0 to 40427 [ 146.412739][ T26] audit: type=1326 audit(1734640918.212:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3f36f85d29 code=0x7ffc0000 [ 146.445678][ T26] audit: type=1326 audit(1734640918.212:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f36f85d29 code=0x7ffc0000 [ 146.470686][ T26] audit: type=1326 audit(1734640918.212:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.4.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f36f85d29 code=0x7ffc0000 [ 146.471595][ T4421] usb 4-1: Using ep0 maxpacket: 32 [ 146.504695][ T6673] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 146.521490][ T4421] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 146.531910][ T4421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.547979][ T6673] F2FS-fs (loop1): invalid crc value [ 146.550999][ T4421] usb 4-1: config 0 descriptor?? [ 146.585854][ T6673] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.607603][ T6690] loop2: detected capacity change from 0 to 1024 [ 146.674203][ T6690] syz.2.852: attempt to access beyond end of device [ 146.674203][ T6690] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 146.676151][ T6673] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 146.770936][ T4421] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 146.794453][ T4421] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.814906][ T4421] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 146.846676][ T4421] usb 4-1: media controller created [ 146.903773][ T4250] syz-executor: attempt to access beyond end of device [ 146.903773][ T4250] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.904646][ T4421] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.953610][ T6697] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 147.066710][ T6699] netlink: 'syz.0.846': attribute type 29 has an invalid length. [ 147.096644][ T6699] netlink: 'syz.0.846': attribute type 29 has an invalid length. [ 147.128859][ T6700] netlink: 'syz.0.846': attribute type 29 has an invalid length. [ 147.151183][ T6699] netlink: 'syz.0.846': attribute type 29 has an invalid length. [ 147.190729][ T6704] ptrace attach of "./syz-executor exec"[4249] was attempted by "_bond\x0afe80000000000000a8aaaafffeaaaa31 35 40 20 80 veth1_vlan\x0afe800000000000000000000000000044 1b 78 20 80 wg2\x0a"[6704] [ 147.397125][ T4421] az6027: usb out operation failed. (-71) [ 147.402974][ T4421] stb0899_attach: Driver disabled by Kconfig [ 147.416943][ T4421] az6027: no front-end attached [ 147.416943][ T4421] [ 147.432092][ T4421] az6027: usb out operation failed. (-71) [ 147.439173][ T4421] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 147.454025][ T4421] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 147.477959][ T4421] dvb-usb: schedule remote query interval to 400 msecs. [ 147.493027][ T4421] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 147.510060][ T4421] usb 4-1: USB disconnect, device number 11 [ 147.544857][ T4421] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 147.726316][ T4294] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 147.754280][ T6714] loop1: detected capacity change from 0 to 32768 [ 147.769771][ T6723] loop0: detected capacity change from 0 to 64 [ 147.803719][ T6723] hfs: request for non-existent node 131072 in B*Tree [ 147.817295][ T6723] hfs: request for non-existent node 131072 in B*Tree [ 147.937275][ T4294] usb 5-1: Using ep0 maxpacket: 32 [ 147.944321][ T4294] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 147.965878][ T4294] usb 5-1: config 0 has no interface number 0 [ 147.986134][ T4294] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 148.018964][ T4294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.036483][ T4294] usb 5-1: Product: syz [ 148.040799][ T4294] usb 5-1: Manufacturer: syz [ 148.045421][ T4294] usb 5-1: SerialNumber: syz [ 148.083807][ T4294] usb 5-1: config 0 descriptor?? [ 148.109247][ T4294] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 148.168127][ T6731] loop3: detected capacity change from 0 to 512 [ 148.183999][ T6731] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.230128][ T6731] EXT4-fs (loop3): 1 truncate cleaned up [ 148.249211][ T6738] loop2: detected capacity change from 0 to 1024 [ 148.249553][ T6731] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.300697][ T4294] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 148.310316][ T6731] EXT4-fs (loop3): shut down requested (2) [ 148.320565][ T4294] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 148.345745][ T6731] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 148.357734][ T6738] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.497618][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 148.709510][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 148.719486][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 148.720280][ T1191] usb 5-1: USB disconnect, device number 7 [ 148.749146][ T1191] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 148.821035][ T1191] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 148.857433][ T1191] quatech2 5-1:0.51: device disconnected [ 149.051495][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 149.216560][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 149.309484][ T6755] loop1: detected capacity change from 0 to 32768 [ 149.336105][ T6755] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.870 (6755) [ 149.376895][ T6755] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 149.390072][ T6774] loop0: detected capacity change from 0 to 64 [ 149.396398][ T4294] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 149.416202][ T6755] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 149.424895][ T6755] BTRFS info (device loop1): setting nodatacow, compression disabled [ 149.440984][ T6755] BTRFS info (device loop1): setting datacow [ 149.449223][ T6755] BTRFS info (device loop1): doing ref verification [ 149.457865][ T6755] BTRFS info (device loop1): force clearing of disk cache [ 149.465147][ T6755] BTRFS info (device loop1): turning off barriers [ 149.483694][ T6755] BTRFS info (device loop1): enabling ssd optimizations [ 149.499349][ T6755] BTRFS info (device loop1): using spread ssd allocation scheme [ 149.523350][ T6755] BTRFS info (device loop1): not using spread ssd allocation scheme [ 149.542670][ T6755] BTRFS info (device loop1): using spread ssd allocation scheme [ 149.556872][ T6755] BTRFS info (device loop1): using free space tree [ 149.577171][ T6778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.598656][ T4294] usb 3-1: Using ep0 maxpacket: 32 [ 149.611045][ T4294] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 149.629188][ T4294] usb 3-1: config 0 has no interface number 0 [ 149.640357][ T4294] usb 3-1: config 0 interface 2 has no altsetting 0 [ 149.663503][ T4294] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 149.681096][ T6786] loop4: detected capacity change from 0 to 1024 [ 149.699149][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.710698][ T4294] usb 3-1: Product: syz [ 149.714944][ T4294] usb 3-1: Manufacturer: syz [ 149.725124][ T4294] usb 3-1: SerialNumber: syz [ 149.737898][ T4294] usb 3-1: config 0 descriptor?? [ 149.744252][ T6786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 149.808530][ T6755] BTRFS info (device loop1): rebuilding free space tree [ 149.982224][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 149.998711][ T4294] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 150.011953][ T4294] usb 3-1: USB disconnect, device number 11 [ 150.060810][ T6815] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 255.195927][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 255.202995][ C0] rcu: 1-...!: (1 GPs behind) idle=8a2c/1/0x4000000000000000 softirq=16565/16566 fqs=1 [ 255.214298][ C0] (detected by 0, t=10502 jiffies, g=22409, q=29 ncpus=2) [ 255.221536][ C0] Sending NMI from CPU 0 to CPUs 1: [ 255.226774][ C1] NMI backtrace for cpu 1 [ 255.226800][ C1] CPU: 1 PID: 6755 Comm: syz.1.870 Tainted: G W 6.1.121-syzkaller #0 [ 255.226818][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 255.226834][ C1] RIP: 0010:match_held_lock+0x0/0xb0 [ 255.226867][ C1] Code: ad ef e8 03 00 75 cf 48 c7 c7 e0 01 0c 8b 48 c7 c6 20 02 0c 8b e8 20 6c a0 f6 0f 0b eb b6 e8 e7 fa ff ff 0f 1f 80 00 00 00 00 <55> 53 bd 01 00 00 00 48 39 77 10 74 67 48 89 fb 81 7f 20 00 00 10 [ 255.226884][ C1] RSP: 0018:ffffc900001e0c70 EFLAGS: 00000087 [ 255.226900][ C1] RAX: 000000000000000b RBX: 0000000000000009 RCX: ffff888074515940 [ 255.226912][ C1] RDX: ffff888074515940 RSI: ffff888056450300 RDI: ffff888074516588 [ 255.226925][ C1] RBP: ffff888074516588 R08: ffffffff88dae8eb R09: 0000000000000003 [ 255.226937][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000046 [ 255.226949][ C1] R13: ffff888074515940 R14: 00000000ffffffff R15: ffff888056450300 [ 255.226965][ C1] FS: 00007fdddbff56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 255.226980][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.226992][ C1] CR2: 0000000020000440 CR3: 000000007b0a6000 CR4: 00000000003506e0 [ 255.227006][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 255.227016][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.227027][ C1] Call Trace: [ 255.227033][ C1] [ 255.227041][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 255.227068][ C1] ? read_lock_is_recursive+0x10/0x10 [ 255.227095][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 255.227129][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 255.227145][ C1] ? nmi_handle+0x12e/0x440 [ 255.227171][ C1] ? nmi_handle+0x25/0x440 [ 255.227196][ C1] ? look_up_lock_class+0x140/0x140 [ 255.227214][ C1] ? default_do_nmi+0x62/0x150 [ 255.227230][ C1] ? exc_nmi+0xa8/0x100 [ 255.227245][ C1] ? end_repeat_nmi+0x16/0x31 [ 255.227262][ C1] ? advance_sched+0x12b/0x970 [ 255.227314][ C1] ? look_up_lock_class+0x140/0x140 [ 255.227333][ C1] ? look_up_lock_class+0x140/0x140 [ 255.227351][ C1] ? look_up_lock_class+0x140/0x140 [ 255.227369][ C1] [ 255.227374][ C1] [ 255.227379][ C1] lock_is_held_type+0xa4/0x180 [ 255.227399][ C1] advance_sched+0x13d/0x970 [ 255.227419][ C1] ? _raw_spin_unlock+0x40/0x40 [ 255.227442][ C1] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 255.227463][ C1] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 255.227483][ C1] __hrtimer_run_queues+0x5e5/0xe50 [ 255.227512][ C1] ? hrtimer_interrupt+0x980/0x980 [ 255.227532][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 255.227560][ C1] hrtimer_interrupt+0x392/0x980 [ 255.227590][ C1] __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 255.227616][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 255.227635][ C1] [ 255.227640][ C1] [ 255.227645][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 255.227671][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 255.227695][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 92 78 25 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 e7 e0 a1 f6 65 8b 05 a8 c0 45 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 255.227709][ C1] RSP: 0018:ffffc9000c3f6720 EFLAGS: 00000206 [ 255.227723][ C1] RAX: 1cdb0fa4367caa00 RBX: 1ffff9200187ece8 RCX: ffffffff816b123a [ 255.227736][ C1] RDX: dffffc0000000000 RSI: ffffffff8b0c0340 RDI: 0000000000000001 [ 255.227748][ C1] RBP: ffffc9000c3f67a8 R08: dffffc0000000000 R09: fffffbfff2249c84 [ 255.227761][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 255.227773][ C1] R13: 1ffff9200187ece4 R14: ffffc9000c3f6740 R15: 0000000000000246 [ 255.227788][ C1] ? mark_lock+0x9a/0x340 [ 255.227816][ C1] ? _raw_spin_unlock+0x40/0x40 [ 255.227836][ C1] ? stack_trace_save+0x113/0x1c0 [ 255.227861][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 255.227885][ C1] __stack_depot_save+0x3f5/0x470 [ 255.227907][ C1] kasan_set_track+0x60/0x70 [ 255.227933][ C1] ? kasan_set_track+0x4b/0x70 [ 255.227957][ C1] ? __kasan_slab_alloc+0x65/0x70 [ 255.227972][ C1] ? slab_post_alloc_hook+0x52/0x3a0 [ 255.227993][ C1] ? kmem_cache_alloc+0x10c/0x2d0 [ 255.228013][ C1] ? alloc_extent_state+0x25/0x350 [ 255.228033][ C1] ? __set_extent_bit+0x1af/0x18c0 [ 255.228053][ C1] ? set_extent_bit+0x3c/0x50 [ 255.228072][ C1] ? btrfs_alloc_tree_block+0xae9/0x1800 [ 255.228094][ C1] ? __btrfs_cow_block+0x461/0x1970 [ 255.228110][ C1] ? btrfs_cow_block+0x355/0xa90 [ 255.228125][ C1] ? btrfs_search_slot+0xc06/0x2f10 [ 255.228142][ C1] ? btrfs_insert_empty_items+0x98/0x180 [ 255.228160][ C1] ? btrfs_uuid_tree_add+0x6b6/0xc70 [ 255.228179][ C1] ? create_pending_snapshot+0x1259/0x2940 [ 255.228199][ C1] ? create_pending_snapshots+0x195/0x1d0 [ 255.228217][ C1] ? btrfs_commit_transaction+0x13bb/0x3c70 [ 255.228236][ C1] ? create_snapshot+0x57c/0x950 [ 255.228259][ C1] ? btrfs_mksubvol+0x71a/0x8a0 [ 255.228283][ C1] ? btrfs_mksnapshot+0xb5/0xf0 [ 255.228312][ C1] ? __btrfs_ioctl_snap_create+0x377/0x4a0 [ 255.228337][ C1] ? btrfs_ioctl_snap_create_v2+0x1c4/0x400 [ 255.228359][ C1] ? btrfs_ioctl+0xaa0/0xc10 [ 255.228379][ C1] ? __se_sys_ioctl+0xf1/0x160 [ 255.228394][ C1] ? do_syscall_64+0x3b/0xb0 [ 255.228417][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.228456][ C1] __kasan_slab_alloc+0x65/0x70 [ 255.228472][ C1] slab_post_alloc_hook+0x52/0x3a0 [ 255.228497][ C1] kmem_cache_alloc+0x10c/0x2d0 [ 255.228517][ C1] ? alloc_extent_state+0x25/0x350 [ 255.228539][ C1] alloc_extent_state+0x25/0x350 [ 255.228562][ C1] __set_extent_bit+0x1af/0x18c0 [ 255.228586][ C1] ? PageUptodate+0xd9/0x290 [ 255.228613][ C1] set_extent_bit+0x3c/0x50 [ 255.228635][ C1] btrfs_alloc_tree_block+0xae9/0x1800 [ 255.228663][ C1] ? alloc_reserved_file_extent+0x5e0/0x5e0 [ 255.228685][ C1] ? mark_lock+0x260/0x340 [ 255.228714][ C1] ? read_extent_buffer+0x11b/0x2a0 [ 255.228740][ C1] ? memcpy+0x3c/0x60 [ 255.228760][ C1] __btrfs_cow_block+0x461/0x1970 [ 255.228781][ C1] ? read_lock_is_recursive+0x10/0x10 [ 255.228807][ C1] ? btrfs_root_node+0x3c/0x3b0 [ 255.228826][ C1] ? btrfs_cow_block+0xa90/0xa90 [ 255.228844][ C1] ? btrfs_qgroup_trace_subtree_after_cow+0x113/0xf70 [ 255.228875][ C1] btrfs_cow_block+0x355/0xa90 [ 255.228897][ C1] btrfs_search_slot+0xc06/0x2f10 [ 255.228925][ C1] ? btrfs_find_item+0x5a0/0x5a0 [ 255.228943][ C1] ? __kasan_slab_alloc+0x65/0x70 [ 255.228962][ C1] ? rcu_is_watching+0x11/0xb0 [ 255.228979][ C1] btrfs_insert_empty_items+0x98/0x180 [ 255.228999][ C1] btrfs_uuid_tree_add+0x6b6/0xc70 [ 255.229024][ C1] ? validate_rbio_for_parity_scrub+0x3a0/0x3a0 [ 255.229045][ C1] ? btrfs_update_inode+0x2a9/0x350 [ 255.229066][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 255.229089][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 255.229110][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 255.229129][ C1] ? _raw_spin_unlock+0x24/0x40 [ 255.229150][ C1] ? btrfs_update_inode+0x2a9/0x350 [ 255.229173][ C1] create_pending_snapshot+0x1259/0x2940 [ 255.229206][ C1] ? trace_btrfs_space_reservation+0x2a0/0x2a0 [ 255.229226][ C1] ? __mutex_trylock_common+0x3f/0x2e0 [ 255.229250][ C1] ? rcu_is_watching+0x11/0xb0 [ 255.229266][ C1] ? trace_contention_end+0x61/0x170 [ 255.229287][ C1] ? __mutex_lock+0x2f7/0xd80 [ 255.229316][ C1] ? mutex_lock_nested+0x10/0x10 [ 255.229336][ C1] create_pending_snapshots+0x195/0x1d0 [ 255.229358][ C1] ? btrfs_commit_transaction+0x16e/0x3c70 [ 255.229377][ C1] btrfs_commit_transaction+0x13bb/0x3c70 [ 255.229397][ C1] ? btrfs_commit_transaction+0x16e/0x3c70 [ 255.229422][ C1] ? read_lock_is_recursive+0x10/0x10 [ 255.229446][ C1] ? join_transaction+0x621/0xd40 [ 255.229467][ C1] ? btrfs_commit_transaction_async+0x470/0x470 [ 255.229488][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 255.229508][ C1] ? join_transaction+0x628/0xd40 [ 255.229526][ C1] ? join_transaction+0x668/0xd40 [ 255.229544][ C1] ? join_transaction+0x628/0xd40 [ 255.229564][ C1] ? btrfs_record_root_in_trans+0x129/0x180 [ 255.229583][ C1] ? btrfs_qgroup_convert_reserved_meta+0xd9/0xa60 [ 255.229611][ C1] ? __btrfs_qgroup_free_meta+0x380/0x380 [ 255.229636][ C1] ? btrfs_record_root_in_trans+0x129/0x180 [ 255.229656][ C1] create_snapshot+0x57c/0x950 [ 255.229685][ C1] btrfs_mksubvol+0x71a/0x8a0 [ 255.229713][ C1] ? __btrfs_ioctl_snap_create+0x4a0/0x4a0 [ 255.229739][ C1] ? __fget_files+0x435/0x4a0 [ 255.229757][ C1] ? __fget_files+0x28/0x4a0 [ 255.229775][ C1] btrfs_mksnapshot+0xb5/0xf0 [ 255.229801][ C1] __btrfs_ioctl_snap_create+0x377/0x4a0 [ 255.229830][ C1] btrfs_ioctl_snap_create_v2+0x1c4/0x400 [ 255.229855][ C1] ? __fget_files+0x28/0x4a0 [ 255.229873][ C1] btrfs_ioctl+0xaa0/0xc10 [ 255.229895][ C1] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 255.229919][ C1] __se_sys_ioctl+0xf1/0x160 [ 255.229936][ C1] do_syscall_64+0x3b/0xb0 [ 255.229960][ C1] ? clear_bhb_loop+0x45/0xa0 [ 255.229975][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.230000][ C1] RIP: 0033:0x7fdddb185d29 [ 255.230019][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.230033][ C1] RSP: 002b:00007fdddbff5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.230050][ C1] RAX: ffffffffffffffda RBX: 00007fdddb375fa0 RCX: 00007fdddb185d29 [ 255.230062][ C1] RDX: 0000000020001480 RSI: 0000000050009417 RDI: 0000000000000004 [ 255.230073][ C1] RBP: 00007fdddb201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 255.230084][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.230094][ C1] R13: 0000000000000000 R14: 00007fdddb375fa0 R15: 00007ffccdb41958 [ 255.230112][ C1] [ 255.230761][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g22409 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 256.195823][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=9189 [ 256.203639][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g22409 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 256.215018][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 256.224998][ C0] rcu: RCU grace-period kthread stack dump: [ 256.230895][ C0] task:rcu_preempt state:I stack:25528 pid:16 ppid:2 flags:0x00004000 [ 256.240135][ C0] Call Trace: [ 256.243437][ C0] [ 256.246388][ C0] __schedule+0x143f/0x4570 [ 256.251002][ C0] ? _raw_spin_unlock+0x40/0x40 [ 256.255886][ C0] ? __mod_timer+0x956/0xee0 [ 256.260521][ C0] ? release_firmware_map_entry+0x186/0x186 [ 256.266430][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 256.271828][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 256.277748][ C0] ? _raw_spin_unlock+0x40/0x40 [ 256.282629][ C0] schedule+0xbf/0x180 [ 256.286717][ C0] schedule_timeout+0x1b9/0x300 [ 256.291590][ C0] ? console_conditional_schedule+0x40/0x40 [ 256.297506][ C0] ? update_process_times+0x1b0/0x1b0 [ 256.302903][ C0] ? prepare_to_swait_event+0x329/0x350 [ 256.308479][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 256.313366][ C0] ? dump_blkd_tasks+0x810/0x810 [ 256.318337][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 256.323558][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 256.328430][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 256.334356][ C0] ? finish_swait+0xcf/0x1e0 [ 256.339069][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 256.343721][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 256.348931][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 256.354870][ C0] ? __kthread_parkme+0x168/0x1c0 [ 256.359936][ C0] kthread+0x28d/0x320 [ 256.364119][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 256.369260][ C0] ? kthread_blkcg+0xd0/0xd0 [ 256.373869][ C0] ret_from_fork+0x1f/0x30 [ 256.378322][ C0] [ 256.381375][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 256.387713][ C0] CPU: 0 PID: 56 Comm: kworker/u4:4 Tainted: G W 6.1.121-syzkaller #0 [ 256.397271][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 256.407433][ C0] Workqueue: events_unbound toggle_allocation_gate [ 256.413966][ C0] RIP: 0010:smp_call_function_many_cond+0x1fae/0x3460 [ 256.420770][ C0] Code: 2f 44 89 ee 83 e6 01 31 ff e8 0e 44 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 0a e8 99 40 0b 00 e9 1b ff ff ff f3 90 <42> 0f b6 04 2b 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 fe fe ff ff [ 256.440400][ C0] RSP: 0018:ffffc900015775a0 EFLAGS: 00000293 [ 256.446484][ C0] RAX: ffffffff817f5bf9 RBX: 1ffff110171e81b1 RCX: ffff88801e6b9dc0 [ 256.454473][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 256.462464][ C0] RBP: ffffc90001577980 R08: ffffffff817f5bc2 R09: fffffbfff2249c4d [ 256.470477][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000800000000 [ 256.478470][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b8f40d88 [ 256.486457][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 256.495403][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.502005][ C0] CR2: 000000110c39e3c1 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 256.509998][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 256.517983][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 256.525972][ C0] Call Trace: [ 256.529269][ C0] [ 256.532128][ C0] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 256.538493][ C0] ? print_other_cpu_stall+0x150c/0x1640 [ 256.544166][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 256.549148][ C0] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 256.554544][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 256.559415][ C0] ? hrtimer_run_queues+0x163/0x450 [ 256.564638][ C0] ? acct_account_cputime+0x26e/0x270 [ 256.570034][ C0] ? update_process_times+0x147/0x1b0 [ 256.575446][ C0] ? tick_sched_timer+0x386/0x550 [ 256.580492][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 256.586063][ C0] ? __hrtimer_run_queues+0x5a7/0xe50 [ 256.591480][ C0] ? hrtimer_interrupt+0x980/0x980 [ 256.596615][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 256.602716][ C0] ? hrtimer_interrupt+0x392/0x980 [ 256.607876][ C0] ? __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 256.614063][ C0] ? sysvec_apic_timer_interrupt+0x9b/0xc0 [ 256.619891][ C0] [ 256.622835][ C0] [ 256.625781][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 256.631972][ C0] ? smp_call_function_many_cond+0x1f92/0x3460 [ 256.638159][ C0] ? smp_call_function_many_cond+0x1fc9/0x3460 [ 256.644346][ C0] ? smp_call_function_many_cond+0x1fae/0x3460 [ 256.650549][ C0] ? text_poke_sync+0x20/0x20 [ 256.655255][ C0] ? __text_poke+0x81a/0x9a0 [ 256.659870][ C0] ? mark_lock+0x9a/0x340 [ 256.664230][ C0] ? smp_call_function_many+0x30/0x30 [ 256.669625][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 256.675638][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 256.680863][ C0] ? _raw_spin_unlock+0x24/0x40 [ 256.685738][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 256.691229][ C0] ? __text_poke+0x81a/0x9a0 [ 256.696109][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 256.701683][ C0] ? __text_poke+0x9a0/0x9a0 [ 256.706402][ C0] ? text_poke+0x90/0x90 [ 256.710670][ C0] ? read_lock_is_recursive+0x10/0x10 [ 256.716069][ C0] ? __mutex_trylock_common+0x17e/0x2e0 [ 256.721661][ C0] ? __might_sleep+0xb0/0xb0 [ 256.726290][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 256.732496][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 256.738012][ C0] ? text_poke_sync+0x20/0x20 [ 256.742730][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 256.748141][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 256.753632][ C0] text_poke_bp_batch+0x2bb/0x940 [ 256.758692][ C0] ? arch_jump_label_transform_apply+0xe/0x20 [ 256.764819][ C0] ? text_poke_loc_init+0x680/0x680 [ 256.770051][ C0] ? arch_jump_label_transform_queue+0x7d/0xd0 [ 256.776240][ C0] text_poke_finish+0x16/0x30 [ 256.780944][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 256.786944][ C0] static_key_enable_cpuslocked+0x12e/0x250 [ 256.792865][ C0] ? process_one_work+0x7a9/0x11d0 [ 256.797998][ C0] static_key_enable+0x16/0x20 [ 256.802812][ C0] toggle_allocation_gate+0xbf/0x480 [ 256.808148][ C0] ? show_object+0xa0/0xa0 [ 256.812732][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 256.818772][ C0] ? print_irqtrace_events+0x210/0x210 [ 256.824358][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 256.830394][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 256.835641][ C0] ? process_one_work+0x7a9/0x11d0 [ 256.840793][ C0] process_one_work+0x8a9/0x11d0 [ 256.845778][ C0] ? worker_detach_from_pool+0x260/0x260 [ 256.851440][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 256.857112][ C0] ? kthread_data+0x4e/0xc0 [ 256.861677][ C0] ? wq_worker_running+0x97/0x190 [ 256.866726][ C0] worker_thread+0xa47/0x1200 [ 256.871468][ C0] kthread+0x28d/0x320 [ 256.875717][ C0] ? worker_clr_flags+0x190/0x190 [ 256.880774][ C0] ? kthread_blkcg+0xd0/0xd0 [ 256.885396][ C0] ret_from_fork+0x1f/0x30 [ 256.889861][ C0]