last executing test programs: 5.23039057s ago: executing program 0 (id=745): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f00000016c0)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0}) 3.149932535s ago: executing program 4 (id=775): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 2.958835881s ago: executing program 3 (id=779): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/107, 0x6b) sendfile(r1, r0, 0x0, 0x3fffff) 2.865953961s ago: executing program 4 (id=781): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020000004025057a120001010200010902200001010080320904"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x802, 0x0) 2.477808818s ago: executing program 1 (id=786): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-192.168.1.1', 0xc) 2.231712537s ago: executing program 1 (id=788): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x184000000002, 0x12) 2.126645311s ago: executing program 3 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)='\x00!', 0x2}], 0x1, 0x0, 0x0) 2.018214356s ago: executing program 0 (id=790): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) write(r0, &(0x7f00000002c0)='0', 0x1) 2.017523474s ago: executing program 2 (id=791): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 1.934873733s ago: executing program 1 (id=792): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) 1.854471555s ago: executing program 3 (id=793): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) 1.657029649s ago: executing program 1 (id=794): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f00000004c0)={[{@grpquota}]}, 0x1, 0x7bd, &(0x7f0000000f80)="$eJzs3c1rG2caAPBn5G8nu/bCHjY5GRZ2DSHyOvEmu7CwWfawLDQQaM9JjKyY1LIVLDnExhDnUOi1pYdAc8m5Ke2hkGvbc3rp39BDSUhbJzQ9FZeRRon8IX8klkSb3w/Gft+ZV37eZ975smaQAnhtjaU/chHHIvrS4kg2P4lsRvRGnKu3e7a+WkinJDY23vw+qbV5ur5aiKbXpI5klT9FxJfvRJzIbY9bWV6Zmy6ViotZfaI6f22isrxy8ur89GxxtrhwZnJq6tTZv589c3i5/vjVytFH7/3vrxGxVu/iuTiaLavlMXR4saK2bseyddKXrsJN/nu4obou2We73jb3g4NJd82ebFyOxUj07DKS/+5ozwCAdrkZERsAwGsmiY30f/5udwMA6JjG+wBP11cLjSnq93PWuvrGRIc8/k9EDNbzb9zfrC/prd+z+3qwdh90+Gmy6d5VEhGjhxB/LCLu3L94L51iy/1UgHZauxURl0fHth7/609HvJq/7aPN2Ja64x90zufp9c8/tl//ReSy/X+w9nPr9c/ADvvuy9h7/8893FTtO4SgTdLrv381Pdv2rCn/zGhPVvtd7ZqvL7lytVRMj22/j4jx6BtI65O7xBh/8vOTVsuar/9+eP/tj9L46e8XLXIPewc2v2Zmujr9Kjk3e3wr4njvTvknz8c/aXH9e2GfMf7/z3c/bLUszT/NtzFtz7+9Nu5G/GXH8X/xHFSy6/OJE7XNYaKxUezg029uD7eK3zz+d+6nkVYLjf8FOiEd/+Hd8x9Nmp/XrBw8xoO7I1+0WrY5/4v30vib8995++9P3qqV+7N5N6ar1cXJiP7kje3zT714baPeaJ/mP/7nnff/3bb/9DB0OStv7PHwY++j7z5++fzbK81/Jh3/JEtiz/E/eOGTZ3M9reLvb/ynaqXxbM7249/2p0r30a/BV1pxAAAAAAAAAAAAAAAAAAAAAAAAAHAAuYg4Gkku/7ycy+Xz9e/w/mMM50rlSvXElfLSwkzUvit7NPpyjY+6HGn6PNTJ7PPwG/VTW+qnI+IPEfHBwFCtni+USzPdTh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMkdafP9/6tuBbvcOAGibwT1b3O5IPwCAztn7/A8A/Na0OP/37zx7qK19AQA6o3b+T3q73Q0AoIO8/w8Arx/nfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANrswvnz6bTx0/pqIa3PXF9emitfPzlTrMzl55cK+UJ58Vp+tlyeLRXzhfJ8yz+0Vv9VKpevTcXC0o2JarFSnagsr1yaLy8tVC9dnZ+eLV4q9nUsMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv8ryytx0qVRcVNi9cLN9IT47ve/Gt7Jh6/baUOh64fiDiIGIyOYk2ZZxaCGajxJDnT8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxK/BIAAP//ix8R/Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2042, 0x8) setuid(0xee00) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) 1.541209694s ago: executing program 3 (id=795): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000054c0)={0x0, 0x0, 0x0}, &(0x7f0000005500)=0xc) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000780)={[{@gid={'gid', 0x3d, r2}}, {}, {@uid={'uid', 0x3d, r1}}]}) 1.458049932s ago: executing program 4 (id=796): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0), 0x0, 0xbcd, &(0x7f0000000640)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgMW8sooWv9AUnAk67BK/oGQ5BzIJZDEJPgQn31JINdcEucak0PABMVKIIREYfaHJEu7+mGtNIr0+cDTvDdvZt7369n1vAe7G8CBNZD9SSOOR8SVJKJQ359GRHe11htRqR23MD878t387EgSi4v/+zqJJCKezM+ONK6V1LdH6o3eiPjkn0n8+uW1405Oz4wPl8uliXr79NT1W6cnp2f+MnZ9+FrpWunGmXN/Gzo7dG7w/FDbcv3+i4v3v/3Dv7+s/PDOj3e/ee2tJC5GX71vZR71rLdtIAaW/k1W6oyI4TZcfy/oqOezMs+kc4OT0h0OCgCAltIVc7jfRiE6YnnyVogPP801OAAAAKAtFjsiFgEAAIB9LrH+BwAAgH2u8TmAJ/OzI42S7ycSdtfjSxHRX8t/oV5qPZ1RqW57oysiDj9JYuXXWpPaads2EBGPPj//flaiyfeQd1plLiJ+1+z+J9X8++vfhF6dfxoRg20Yf2BV+5eU/8U2jJ93/gAcTA8u1R5ka59/6dL8J5o8/zqbPLueRd7Pv8b8b2HN/G85/44W87//bnKMO2+/cbtVX5b/3+//671GycbPtttKagsez0X8vrNZ/slS/kmL/K9scozCT7dLrfryzn/xzYiT0Tz/hmT93yc6PTpWLg3W/jYdY+7joXdbjZ93/tn9P9wi/3Xuf2+279ZTV2r9oz7PXb58r1XfxvmnX3Un/6/Wuut7Xhyempo4E9Gd/Gft/rPr59s4pnGNLP9Tf1z//d/s9Z/9n1CpvzayzOfq26z90qox/3H3zgfr5Z+t/fK8/1e3fv+r+17Z5Bh/+ujVU636Vq5/s5KN/yiprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV6mhaLEUci4jdxOC3fnJz68+jNF25czfoi+qMrHR0rlwYjolBrJ1n7TLW+3D67qv3XiDgWEa8XDlXbxZGb5at5Jw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCSIxHRF0lajIg0IhYKaVos5h0VAAAA0Hb9eQcAAAAA7DjrfwAAANj/rP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYYcdOPHiYRETlwqFqyXTX+7pyjQzYaWneAQC56cg7ACA3nXkHAORmi2t80wXYh5IN+p9v2dPT9lgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2LtOHn/wMImIyoVD1ZLprvd1NT3jxC5GB+ykNO8AgNx0rNfZuXtxALvvmd/iR9sbB7D7mq/xgYMk2aC/d/mYytM9PTsWEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB7T1+1JGkxItJqPU2LxYijEdEfXcnoWLk0GBG/iojPCl09Wbsn76ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABou8npmfHhcrk08SyVZHunqxzsSuM1uFfiyb2S7I0wnr47AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcJJPTM+PD5XJpYjLvSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJTVTubeXgFZW8cwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID8/BwAA//8lZwog") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000002c0)=0xc) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r2, 0x0) 1.241711413s ago: executing program 3 (id=797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x550}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) 1.141936771s ago: executing program 1 (id=798): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000940)=@newqdisc={0x150, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xc, 0xfffd}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "1d01000080b9639cda1554de667145238cfe634ebf62812d9ee1a5246cdcd657af6d8526e028059d2dd72fc3aef8fb5e51a294ea4d7090fba24662c7698fce7b84dbacba6bdcf51e642fce176ef4962b254f798c53f18d96841c2940e5a0049fb2e6c126d8b49da8378b0c5c6b321632339f59f4773aa2f2457985b0842691990da8447b7b4a63e37dbb547300c4c55aa5b0e91123fda1a374537f7901297ff26d16d7beefc6bef8e448eb58b3d478fdfbf0dc18581e29a8e7287015fa699edaaed818f95817335467b7fb3716b9e44d9ef8d54343a04cbe3f22ae18d72d994e0c4e493a1c9f2812fd8d5e68f97da8757553c2dbd72400"}, @TCA_RED_MAX_P={0x8}, @TCA_RED_PARMS={0x14, 0x1, {0x2, 0x9, 0x6, 0xf, 0x11, 0x0, 0x3}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20004941}, 0x400081c) 1.129192558s ago: executing program 3 (id=799): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x21c1) close_range(r0, 0xffffffffffffffff, 0x0) 1.05832097s ago: executing program 2 (id=800): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) ioprio_set$pid(0x2, 0x0, 0x2004) 953.773073ms ago: executing program 0 (id=801): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000003c0)=[@ioring_restriction_sqe_op], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 883.62763ms ago: executing program 1 (id=802): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x3, r0, 0xc4b, 0x80000}) 869.472989ms ago: executing program 4 (id=803): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f0000000000)=0x7, 0x12) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000300)="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"}], 0x1000000000000389, 0x0) 854.058945ms ago: executing program 2 (id=804): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='auto', 0x4) 643.715935ms ago: executing program 0 (id=805): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000300)={0xa0, 0x0, 0x0, {{0x3, 0x0, 0x6, 0x3ff, 0x3, 0xfffffffa, {0x3, 0x1, 0x0, 0x20355456, 0xc91b012, 0x9, 0x73, 0x3, 0x1, 0xc000, 0x5, 0xee01, 0x0, 0x2, 0x5}}, {0x0, 0x10}}}, 0xa0) 599.056392ms ago: executing program 2 (id=806): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000580)='./file0/../file0\x00') 539.752947ms ago: executing program 4 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 505.279195ms ago: executing program 2 (id=808): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x4044000) 476.487972ms ago: executing program 0 (id=809): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000180)="da", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 210.261976ms ago: executing program 2 (id=810): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @pix_mp={0x81, 0xc00, 0x50313134, 0x1, 0x7, [{0x9, 0xffff}, {0x7f, 0x10}, {0x1}, {0x5}, {0x4, 0x7}, {0x4, 0x2f}, {0x8, 0x3}, {0x81, 0x1}], 0x3, 0x1, 0x0, 0x2}}}) 119.854042ms ago: executing program 0 (id=811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="04006700060066008e8800000a000600ffffffffffff0000220033"], 0x58}}, 0x0) 0s ago: executing program 4 (id=812): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) kernel console output (not intermixed with test programs): idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 96.883194][ T5353] usb 2-1: config 1 has an invalid interface number: 27 but max is 1 [ 96.883217][ T5353] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.883234][ T5353] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 96.883254][ T5353] usb 2-1: config 1 has no interface number 2 [ 96.883305][ T5353] usb 2-1: config 1 interface 1 has no altsetting 0 [ 96.885738][ T5353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.885760][ T5353] usb 2-1: Product: syz [ 96.885774][ T5353] usb 2-1: Manufacturer: syz [ 96.885788][ T5353] usb 2-1: SerialNumber: syz [ 96.935883][ T5989] ntfs3(loop0): Failed to load $Extend (-22). [ 96.935911][ T5989] ntfs3(loop0): Failed to initialize $Extend. [ 97.657996][ T5353] speedtch 2-1:1.0: usbatm_usb_probe: invalid endpoint 07! [ 97.658050][ T5353] usb 2-1: selecting invalid altsetting 0 [ 97.658173][ T5353] speedtch 2-1:1.0: probe with driver speedtch failed with error -22 [ 97.714099][ T6007] loop3: detected capacity change from 0 to 128 [ 97.716174][ T6007] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.742446][ T6007] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.874875][ T5353] speedtch 2-1:1.27: speedtch_bind: setting interface to 1 failed (-71)! [ 97.900984][ T5353] usb 2-1: selecting invalid altsetting 0 [ 97.901016][ T5353] speedtch 2-1:1.27: usbatm_usb_probe: bind failed: -71! [ 97.901068][ T5353] speedtch 2-1:1.27: probe with driver speedtch failed with error -71 [ 97.905057][ T5353] usb 2-1: selecting invalid altsetting 0 [ 97.905086][ T5353] usbtest 2-1:1.1: probe with driver usbtest failed with error -22 [ 97.905442][ T5353] usb 2-1: selecting invalid altsetting 0 [ 97.905462][ T5353] speedtch 2-1:1.1: probe with driver speedtch failed with error -22 [ 97.945169][ T5353] usb 2-1: USB disconnect, device number 3 [ 98.032870][ T13] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.120707][ T6014] loop0: detected capacity change from 0 to 128 [ 98.164113][ T6014] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.165676][ T6014] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.212411][ T6019] block nbd0: server does not support multiple connections per device. [ 98.213738][ T6019] block nbd0: shutting down sockets [ 98.241262][ T5719] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.327133][ T5618] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.392295][ T5719] usb 5-1: Using ep0 maxpacket: 8 [ 98.398904][ T5719] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 98.405765][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.458958][ T5719] pvrusb2: Hardware description: Terratec Grabster AV400 [ 98.458977][ T5719] pvrusb2: ********** [ 98.458984][ T5719] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 98.459144][ T5719] pvrusb2: Important functionality might not be entirely working. [ 98.459154][ T5719] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 98.459172][ T5719] pvrusb2: ********** [ 98.652992][ T2348] pvrusb2: Invalid write control endpoint [ 98.719685][ T6026] capability: warning: `syz.3.72' uses 32-bit capabilities (legacy support in use) [ 98.727820][ T6026] program syz.3.72 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.773731][ T6022] loop2: detected capacity change from 0 to 32768 [ 98.836910][ T6022] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 98.840308][ T6033] loop1: detected capacity change from 0 to 2048 [ 98.869945][ T9] usb 5-1: USB disconnect, device number 2 [ 98.895420][ T6033] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 98.997881][ T6022] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 98.998630][ T6042] program syz.0.75 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.090864][ T2348] pvrusb2: Invalid write control endpoint [ 99.090880][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 99.090890][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 99.090898][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 99.090908][ T2348] pvrusb2: Device being rendered inoperable [ 99.105093][ T6022] XFS (loop2): Starting recovery (logdev: internal) [ 99.107985][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 99.108032][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 99.163330][ T2348] pvrusb2: Attached sub-driver cx25840 [ 99.163346][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 99.163355][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 99.235054][ T6022] XFS (loop2): Ending recovery (logdev: internal) [ 99.621433][ T6054] loop4: detected capacity change from 0 to 128 [ 99.701576][ T6022] XFS (loop2): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 [ 99.701625][ T6022] XFS (loop2): Unmount and run xfs_repair [ 99.701639][ T6022] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 99.701656][ T6022] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 99.701671][ T6022] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 99.701684][ T6022] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 99.701697][ T6022] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 99.701711][ T6022] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 99.701725][ T6022] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.701738][ T6022] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.701752][ T6022] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.701924][ T6022] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x8 len 8 error 117 [ 99.890533][ T5623] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.903878][ T5623] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 100.164686][ T6066] loop4: detected capacity change from 0 to 256 [ 100.206125][ T6064] sctp: [Deprecated]: syz.0.86 (pid 6064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.206125][ T6064] Use struct sctp_sack_info instead [ 100.259911][ T6066] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 100.259940][ T6066] FAT-fs (loop4): Filesystem has been set read-only [ 100.500633][ T6072] netlink: 60 bytes leftover after parsing attributes in process `syz.2.85'. [ 100.554555][ T6046] loop1: detected capacity change from 0 to 32768 [ 100.612418][ T6046] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.678766][ T6046] XFS (loop1): Ending clean mount [ 100.761481][ T33] audit: type=1800 audit(1788919780.136:3): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.78" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 100.819778][ T6046] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 100.919415][ T6088] netlink: 260 bytes leftover after parsing attributes in process `syz.4.94'. [ 101.114535][ T6068] loop0: detected capacity change from 0 to 32768 [ 101.150492][ T6068] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 101.239949][ T6068] XFS (loop0): Ending clean mount [ 101.278961][ T33] audit: type=1800 audit(1788919780.646:4): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.89" name="file1" dev="loop0" ino=5766 res=0 errno=0 [ 101.574832][ T5622] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.633786][ T5618] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 101.768829][ T6086] loop2: detected capacity change from 0 to 131072 [ 101.844591][ T6086] F2FS-fs (loop2): invalid crc value [ 101.950849][ T6086] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 101.962186][ T6086] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 102.612780][ T6113] loop1: detected capacity change from 0 to 256 [ 102.809509][ T6115] netlink: 104 bytes leftover after parsing attributes in process `syz.0.101'. [ 103.320430][ T6106] loop4: detected capacity change from 0 to 32768 [ 103.350505][ T6106] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 103.446141][ T6128] nbd0: detected capacity change from 0 to 127 [ 103.464595][ T6106] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 103.481119][ T5631] block nbd0: Receive control failed (result -104) [ 103.494211][ T3825] block nbd0: Dead connection, failed to find a fallback [ 103.494236][ T3825] block nbd0: shutting down sockets [ 103.494297][ T3825] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 103.494368][ T3825] Buffer I/O error on dev nbd0, logical block 1, async page read [ 103.494402][ T3825] Buffer I/O error on dev nbd0, logical block 2, async page read [ 103.494418][ T3825] Buffer I/O error on dev nbd0, logical block 3, async page read [ 103.562509][ T6106] XFS (loop4): Starting recovery (logdev: internal) [ 103.636853][ T6106] XFS (loop4): Ending recovery (logdev: internal) [ 103.718192][ T5628] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 103.855253][ T6139] loop1: detected capacity change from 0 to 512 [ 103.964664][ T6139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.972946][ T6139] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.074471][ T6139] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.110: corrupted inode contents [ 104.182341][ T6139] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #2: comm syz.1.110: mark_inode_dirty error [ 104.201536][ T6139] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.110: corrupted inode contents [ 104.245144][ T6149] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.110: corrupted inode contents [ 104.290876][ T6153] loop2: detected capacity change from 0 to 512 [ 104.296212][ T6149] EXT4-fs error (device loop1): ext4_setattr:6073: inode #2: comm syz.1.110: mark_inode_dirty error [ 104.348490][ T6153] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.99: ea_inode with extended attributes [ 104.348654][ T6153] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.349249][ C1] EXT4-fs (loop2): initial error at time 1788919783: ext4_xattr_inode_iget:437: inode 11 [ 104.349282][ C1] EXT4-fs (loop2): last error at time 1788919783: ext4_xattr_inode_iget:437: inode 11 [ 104.376119][ T6158] usb usb7: usbfs: process 6158 (syz.0.113) did not claim interface 0 before use [ 104.385013][ T6153] EXT4-fs (loop2): Remounting filesystem read-only [ 104.385223][ T6153] EXT4-fs (loop2): 1 orphan inode deleted [ 104.430216][ T6153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.483828][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.581495][ T6164] loop4: detected capacity change from 0 to 256 [ 104.583509][ T6164] exfat: Deprecated parameter 'utf8' [ 104.583667][ T6164] exfat: Deprecated parameter 'namecase' [ 104.706476][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.708012][ T6162] loop0: detected capacity change from 0 to 2048 [ 104.718084][ T6164] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 104.937480][ T6172] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.281264][ T6172] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 105.281294][ T6172] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 105.332089][ T6172] Remounting filesystem read-only [ 105.352490][ T5618] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 105.562520][ T6188] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.752058][ T33] audit: type=1800 audit(1788919785.126:5): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.128" name="dev" dev="loop2" ino=19 res=0 errno=0 [ 105.898572][ T6190] set_capacity_and_notify: 1 callbacks suppressed [ 105.898595][ T6190] loop0: detected capacity change from 0 to 4096 [ 105.940142][ T6188] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 105.940173][ T6188] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 105.943409][ T6188] Remounting filesystem read-only [ 105.944131][ T5623] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 106.075310][ T6192] loop1: detected capacity change from 0 to 32768 [ 106.078350][ T6192] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.130 (6192) [ 106.113072][ T6192] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 106.113108][ T6192] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 106.188622][ T6212] capability: warning: `syz.2.133' uses deprecated v2 capabilities in a way that may be insecure [ 106.292470][ T6192] BTRFS info (device loop1): enabling ssd optimizations [ 106.292500][ T6192] BTRFS info (device loop1): turning on async discard [ 106.292516][ T6192] BTRFS info (device loop1): enabling free space tree [ 106.348302][ T6190] ntfs3(loop0): failed to convert "0080" to macinuit [ 106.676055][ T6228] loop0: detected capacity change from 0 to 1024 [ 106.708532][ T5622] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 106.731112][ T6228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.794859][ T3825] block nbd0: Connection timed out, retrying (0/1 alive) [ 106.795264][ T3825] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.795296][ T3825] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.826642][ T3825] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 106.828276][ T3825] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.828297][ T3825] Buffer I/O error on dev nbd0, logical block 1, async page read [ 106.828312][ T3825] Buffer I/O error on dev nbd0, logical block 2, async page read [ 106.828326][ T3825] Buffer I/O error on dev nbd0, logical block 3, async page read [ 106.840222][ T3825] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 106.840254][ T3825] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.840270][ T3825] Buffer I/O error on dev nbd0, logical block 1, async page read [ 106.840458][ T3825] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 106.840635][ T3825] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 106.840842][ T3825] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 106.841066][ T3825] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 106.849262][ T3825] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 106.859834][ T5866] ldm_validate_partition_table(): Disk read failed. [ 106.859978][ T1981] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.865008][ T5866] Dev nbd0: unable to read RDB block 0 [ 106.872418][ T5866] nbd0: unable to read partition table [ 106.916785][ T5866] ldm_validate_partition_table(): Disk read failed. [ 106.919697][ T5866] Dev nbd0: unable to read RDB block 0 [ 106.922073][ T5866] nbd0: unable to read partition table [ 107.403218][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.891140][ T5719] kernel write not supported for file /input/mice (pid: 5719 comm: kworker/1:3) [ 108.074599][ T6255] netlink: Unknown NAT attribute (type=13103, max=9) [ 108.074641][ T6255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.343229][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 108.426388][ T6270] loop2: detected capacity change from 0 to 128 [ 108.503657][ T6263] loop3: detected capacity change from 0 to 4096 [ 108.615409][ T6274] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.631140][ T6273] loop4: detected capacity change from 0 to 4096 [ 109.319866][ T6288] loop0: detected capacity change from 0 to 1024 [ 109.339473][ T6288] EXT4-fs: Ignoring removed orlov option [ 109.366329][ T6288] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.368863][ T6288] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 109.383668][ T6288] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 109.383914][ T6288] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.415502][ T6288] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.162: Invalid inode table block 0 in block_group 0 [ 109.415655][ T6288] loop0: lost filesystem error report for type 5 error -117 [ 109.419784][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 109.419808][ C1] EXT4-fs (loop0): initial error at time 1788919788: __ext4_get_inode_loc:4916 [ 109.419834][ C1] EXT4-fs (loop0): last error at time 1788919788: __ext4_get_inode_loc:4916 [ 109.428904][ T6288] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 109.428946][ T6288] loop0: lost filesystem error report for type 5 error -117 [ 109.429409][ T6288] EXT4-fs error (device loop0): ext4_quota_write:7458: inode #3: comm syz.0.162: mark_inode_dirty error [ 109.429435][ T6288] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 109.429798][ T6288] Quota error (device loop0): write_blk: dquota write failed [ 109.429890][ T6288] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 109.429924][ T6288] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.162: Failed to acquire dquot type 0 [ 109.429941][ T6288] loop0: lost filesystem error report for type 5 error -117 [ 109.430488][ T6288] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.162: Invalid inode table block 0 in block_group 0 [ 109.430512][ T6288] loop0: lost filesystem error report for type 5 error -117 [ 109.436322][ T6288] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 109.436345][ T6288] loop0: lost filesystem error report for type 5 error -117 [ 109.437435][ T6288] EXT4-fs error (device loop0): ext4_ext_truncate:4565: inode #15: comm syz.0.162: mark_inode_dirty error [ 109.437463][ T6288] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.437808][ T6288] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.162: Invalid inode table block 0 in block_group 0 [ 109.437832][ T6288] loop0: lost filesystem error report for type 5 error -117 [ 109.444854][ T6288] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 109.444876][ T6288] loop0: lost filesystem error report for type 5 error -117 [ 109.445232][ T6288] EXT4-fs error (device loop0) in ext4_orphan_del:304: Corrupt filesystem [ 109.445250][ T6288] loop0: lost filesystem error report for type 5 error -117 [ 109.445604][ T6288] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.162: Invalid inode table block 0 in block_group 0 [ 109.445628][ T6288] loop0: lost filesystem error report for type 5 error -117 [ 109.445923][ T6288] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 109.445940][ T6288] loop0: lost filesystem error report for type 5 error -117 [ 109.446242][ T6288] EXT4-fs error (device loop0): ext4_truncate:4721: inode #15: comm syz.0.162: mark_inode_dirty error [ 109.446264][ T6288] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.446941][ T6288] EXT4-fs error (device loop0) in ext4_process_orphan:346: Corrupt filesystem [ 109.448410][ T6288] EXT4-fs (loop0): 1 truncate cleaned up [ 109.461918][ T6288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.475270][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.491290][ T6288] EXT4-fs (loop0): shut down requested (2) [ 109.662413][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.694689][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 109.715856][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 109.744849][ T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 109.744878][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 109.744897][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 109.744917][ T9] usb 5-1: config 1 has no interface number 0 [ 109.744959][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.744984][ T9] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 109.745028][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.835175][ T6298] loop2: detected capacity change from 0 to 1024 [ 109.871985][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 109.916580][ T6298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.105023][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.107420][ T6286] loop4: detected capacity change from 0 to 512 [ 110.127615][ T6286] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.161: bg 0: block 16: invalid block bitmap [ 110.129071][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 110.129575][ C1] EXT4-fs (loop4): initial error at time 1788919789: ext4_validate_block_bitmap:436 [ 110.129604][ C1] EXT4-fs (loop4): last error at time 1788919789: ext4_validate_block_bitmap:436 [ 110.175617][ T6286] EXT4-fs (loop4): Remounting filesystem read-only [ 110.176117][ T6286] EXT4-fs (loop4): 1 truncate cleaned up [ 110.205782][ T6286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.236787][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 110.485105][ T6314] loop1: detected capacity change from 0 to 1024 [ 110.515099][ T6316] zero sized request [ 110.733826][ T5719] usb 5-1: USB disconnect, device number 3 [ 110.749363][ T5719] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 110.758115][ T6320] netlink: 'syz.0.174': attribute type 83 has an invalid length. [ 110.860020][ T6324] netlink: 136 bytes leftover after parsing attributes in process `syz.2.177'. [ 110.941429][ T6326] ipvlan2: entered allmulticast mode [ 110.941455][ T6326] batadv_slave_1: entered allmulticast mode [ 110.945034][ T6326] batman_adv: batadv0: Adding interface: ipvlan2 [ 110.945047][ T6326] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.945068][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.945081][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.945092][ T6326] batman_adv: batadv0: Interface activated: ipvlan2 [ 111.179871][ T6332] netlink: 72 bytes leftover after parsing attributes in process `syz.1.180'. [ 111.179898][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'. [ 111.179912][ T6332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.180'. [ 111.252688][ T6336] netlink: 'syz.2.182': attribute type 3 has an invalid length. [ 111.252713][ T6336] netlink: 'syz.2.182': attribute type 1 has an invalid length. [ 111.252726][ T6336] netlink: 224 bytes leftover after parsing attributes in process `syz.2.182'. [ 111.396217][ T6340] loop0: detected capacity change from 0 to 4096 [ 111.475595][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.568438][ T6340] ntfs3(loop0): Failed to load $Extend (-22). [ 111.568465][ T6340] ntfs3(loop0): Failed to initialize $Extend. [ 111.655338][ T6349] netlink: 36 bytes leftover after parsing attributes in process `syz.2.190'. [ 112.127070][ T6357] loop9: detected capacity change from 0 to 524287998 [ 112.571354][ T6345] loop1: detected capacity change from 0 to 32768 [ 112.674401][ T6345] JBD2: Ignoring recovery information on journal [ 112.697274][ T6345] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 112.697562][ T6345] JBD2: bad block at offset 32 [ 112.735925][ T6345] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 112.841776][ T6345] (syz.1.186,6345,1):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0 [ 113.016195][ T5622] ocfs2: Unmounting device (7,1) on (node local) [ 113.447439][ T6365] loop0: detected capacity change from 0 to 131072 [ 113.474249][ T6365] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 113.474280][ T6365] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 113.504551][ T6365] F2FS-fs (loop0): invalid crc value [ 113.586247][ T6365] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 113.607417][ T6365] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 113.607445][ T6365] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 113.753875][ T6390] program syz.3.204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.784406][ T6392] loop1: detected capacity change from 0 to 1024 [ 114.385383][ T6400] loop1: detected capacity change from 0 to 2048 [ 114.398434][ T6400] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.457462][ T6401] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds Ý$Æšg¢ºJu—ôpcÚË]ᔺX" ^æNÖOý©a*Ââ¦/H ýlˆ´Ì2„<â6x7Ê1X=ÁSšln¯à¯&*i'¨¥‚‚·¦‘{8cÁö@p²Uèð„ÜN’)Æ='¨Š(À@B‚R«8G¿^OõF)‹éòrmÏÑ„)ôÆbð’‹ešÜš?Ô\Ó½¼í =ǯÐ.™96ýä°–Rèít†~·®V]Rœ¡íؤ02 PÙç[ 115.075888][ T6386] loop2: detected capacity change from 0 to 40427 [ 115.094260][ T6386] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 115.094287][ T6386] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 115.464144][ T6386] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 115.500474][ T6386] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 115.500506][ T6386] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.767837][ T6426] jffs2: notice: (6426) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 115.882828][ T6398] loop3: detected capacity change from 0 to 40427 [ 115.897271][ T6398] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 115.897298][ T6398] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 116.119891][ T6436] loop1: detected capacity change from 0 to 512 [ 116.135090][ T6436] EXT4-fs: Ignoring removed nobh option [ 116.211188][ T6436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.211273][ T6436] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.231165][ T6398] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 116.265326][ T6398] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 116.265355][ T6398] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.430615][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.550417][ T5818] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 116.700060][ T5818] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 116.701268][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.735849][ T5818] usb 5-1: config 0 descriptor?? [ 116.764366][ T5818] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 116.967214][ T5818] gp8psk: usb in 128 operation failed. [ 117.018554][ T6450] loop3: detected capacity change from 0 to 128 [ 117.055899][ T6450] EXT4-fs (loop3): Test dummy encryption mode enabled [ 117.088670][ T6450] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.108567][ T6450] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.155794][ T6453] loop0: detected capacity change from 0 to 1024 [ 117.157164][ T6453] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.158531][ T6453] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.190231][ T5818] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 117.193255][ T6453] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 117.193395][ T6453] System zones: 0-1, 3-36 [ 117.226101][ T6453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.375632][ T6450] fscrypt: AES-256-XTS using blk-crypto-fallback [ 117.377633][ T33] audit: type=1800 audit(1788919796.746:6): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.225" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 117.411489][ T5818] gp8psk: usb in 149 operation failed. [ 117.411509][ T5818] gp8psk: failed to get FPGA version [ 117.421816][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.433191][ T5818] gp8psk: usb in 138 operation failed. [ 117.433339][ T5818] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 117.433379][ T5818] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 117.469993][ T5818] usb 5-1: USB disconnect, device number 4 [ 117.531457][ T5625] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.639208][ T6462] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 117.639246][ T6462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.857208][ T6458] loop2: detected capacity change from 0 to 32768 [ 117.917409][ T6458] XFS (loop2): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 118.228201][ T5623] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 118.516626][ T6459] loop1: detected capacity change from 0 to 32768 [ 118.546128][ T6459] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.228 (6459) [ 118.621438][ T6459] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.621474][ T6459] BTRFS info (device loop1): using sha256 checksum algorithm [ 118.753256][ T6488] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 118.776376][ T6459] BTRFS info (device loop1): rebuilding free space tree [ 118.787543][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.880572][ T6459] BTRFS info (device loop1): disabling free space tree [ 118.881195][ T6459] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.881223][ T6459] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 118.957086][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 118.971079][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 118.971132][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.975621][ T9] usb 3-1: config 0 descriptor?? [ 118.977776][ T6481] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.980851][ T6459] BTRFS info (device loop1): checking UUID tree [ 118.982670][ T6459] BTRFS info (device loop1): turning off barriers [ 118.982691][ T6459] BTRFS info (device loop1): force clearing of disk cache [ 118.982707][ T6459] BTRFS info (device loop1): use lzo compression, level 1 [ 119.499448][ T9] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 119.499486][ T9] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 119.499510][ T9] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 119.499533][ T9] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 119.499556][ T9] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 119.499580][ T9] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 119.499604][ T9] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 119.499629][ T9] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 119.499652][ T9] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 119.499676][ T9] uclogic 0003:5543:0064.0002: unknown main item tag 0x0 [ 119.505889][ T9] uclogic 0003:5543:0064.0002: unexpected long global item [ 119.506751][ T9] uclogic 0003:5543:0064.0002: parse failed [ 119.506862][ T9] uclogic 0003:5543:0064.0002: probe with driver uclogic failed with error -22 [ 119.645998][ T6479] loop4: detected capacity change from 0 to 40427 [ 119.663150][ T6479] F2FS-fs (loop4): invalid crc value [ 119.697503][ T5622] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.727980][ T5818] usb 3-1: USB disconnect, device number 3 [ 120.070669][ T6479] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 120.083489][ T6479] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 120.253128][ T33] audit: type=1800 audit(1788919799.626:7): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.233" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 120.303643][ T6479] syz.4.233: attempt to access beyond end of device [ 120.303643][ T6479] loop4: rw=8423425, sector=77824, nr_sectors = 8 limit=40427 [ 120.471013][ T5628] syz-executor: attempt to access beyond end of device [ 120.471013][ T5628] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.485014][ T5628] CPU: 1 UID: 0 PID: 5628 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 120.485044][ T5628] Tainted: [L]=SOFTLOCKUP [ 120.485052][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.485062][ T5628] Call Trace: [ 120.485070][ T5628] [ 120.485077][ T5628] dump_stack_lvl+0xe8/0x150 [ 120.485110][ T5628] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 120.485136][ T5628] f2fs_write_end_bio+0x1211/0x16e0 [ 120.485162][ T5628] ? blkg_put+0x22/0x240 [ 120.485197][ T5628] __submit_merged_bio+0x258/0x6a0 [ 120.485216][ T5628] ? rcu_is_watching+0x16/0xb0 [ 120.485243][ T5628] __submit_merged_write_cond+0x3c9/0x4e0 [ 120.485272][ T5628] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 120.485314][ T5628] f2fs_write_data_pages+0x2a1d/0x36f0 [ 120.485378][ T5628] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 120.485398][ T5628] ? is_bpf_text_address+0x26/0x2b0 [ 120.485433][ T5628] ? arch_stack_walk+0xfb/0x150 [ 120.485480][ T5628] ? add_lock_to_list+0xc7/0x100 [ 120.485505][ T5628] ? lockdep_unlock+0x5c/0xd0 [ 120.485521][ T5628] ? __lock_acquire+0x1511/0x2de0 [ 120.485566][ T5628] ? do_raw_spin_lock+0x12b/0x2f0 [ 120.485601][ T5628] ? do_raw_spin_unlock+0xf5/0x200 [ 120.485625][ T5628] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 120.485648][ T5628] do_writepages+0x338/0x560 [ 120.485679][ T5628] ? do_raw_spin_unlock+0xf5/0x200 [ 120.485707][ T5628] filemap_fdatawrite+0x1e9/0x2f0 [ 120.485731][ T5628] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 120.485796][ T5628] ? do_raw_spin_unlock+0xf5/0x200 [ 120.485825][ T5628] f2fs_sync_dirty_inodes+0x30e/0x830 [ 120.485862][ T5628] f2fs_write_checkpoint+0xa38/0x2710 [ 120.485884][ T5628] ? __lock_acquire+0x747/0x2de0 [ 120.485933][ T5628] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 120.486008][ T5628] kill_f2fs_super+0x2dd/0x700 [ 120.486040][ T5628] ? __pfx_kill_f2fs_super+0x10/0x10 [ 120.486073][ T5628] ? call_rcu+0x64d/0x8b0 [ 120.486095][ T5628] ? lockdep_hardirqs_on+0x7b/0x110 [ 120.486127][ T5628] deactivate_locked_super+0xbc/0x110 [ 120.486148][ T5628] cleanup_mnt+0x3d3/0x460 [ 120.486175][ T5628] task_work_run+0x1d9/0x260 [ 120.486199][ T5628] ? __pfx_task_work_run+0x10/0x10 [ 120.486229][ T5628] exit_to_user_mode_loop+0x204/0x770 [ 120.486248][ T5628] ? rcu_is_watching+0x16/0xb0 [ 120.486274][ T5628] do_syscall_64+0x328/0x520 [ 120.486292][ T5628] ? trace_irq_disable+0x3b/0x140 [ 120.486311][ T5628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.486328][ T5628] ? clear_bhb_loop+0x70/0xc0 [ 120.486350][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.486374][ T5628] RIP: 0033:0x7f340639f397 [ 120.486392][ T5628] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 120.486405][ T5628] RSP: 002b:00007ffef5ecd358 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 120.486425][ T5628] RAX: 0000000000000000 RBX: 00007f340643448b RCX: 00007f340639f397 [ 120.486437][ T5628] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef5ecd410 [ 120.486447][ T5628] RBP: 00007ffef5ecd410 R08: 00007ffef5ece410 R09: 00000000ffffffff [ 120.486459][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef5ece4a0 [ 120.486469][ T5628] R13: 00007f340643448b R14: 000000000001d5d5 R15: 00007ffef5ece4e0 [ 120.486499][ T5628] [ 120.498544][ T5628] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 120.590045][ T6517] loop3: detected capacity change from 0 to 4096 [ 120.606220][ T6517] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 120.812378][ T6517] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 120.862159][ T6517] ntfs3(loop3): mft corrupted [ 120.862249][ T6517] ntfs3(loop3): Failed to load $Extend (-22). [ 120.862268][ T6517] ntfs3(loop3): Failed to initialize $Extend. [ 120.939813][ T33] audit: type=1800 audit(1788919800.316:8): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.242" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 121.082003][ T6529] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 121.082003][ T6529] The task syz.1.246 (6529) triggered the difference, watch for misbehavior. [ 121.466559][ T33] audit: type=1326 audit(1788919800.836:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.244" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340639e159 code=0x7ffc0000 [ 121.505499][ T33] audit: type=1326 audit(1788919800.876:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.244" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340639e159 code=0x7ffc0000 [ 121.529411][ T33] audit: type=1326 audit(1788919800.886:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.244" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340639e159 code=0x7ffc0000 [ 121.529459][ T33] audit: type=1326 audit(1788919800.886:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.244" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340639e159 code=0x7ffc0000 [ 121.532092][ T33] audit: type=1326 audit(1788919800.886:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.244" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f340639e159 code=0x7ffc0000 [ 121.581916][ T33] audit: type=1326 audit(1788919800.946:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.244" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340639e159 code=0x7ffc0000 [ 121.581965][ T33] audit: type=1326 audit(1788919800.946:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.244" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f340639dec2 code=0x7ffc0000 [ 121.866906][ T6546] loop0: detected capacity change from 0 to 256 [ 121.965936][ T6541] loop3: detected capacity change from 0 to 32768 [ 122.060709][ T6550] loop1: detected capacity change from 0 to 4096 [ 122.104782][ T6541] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 122.175638][ T6550] ntfs3(loop1): Failed to load $Extend (-22). [ 122.178067][ T6550] ntfs3(loop1): Failed to initialize $Extend. [ 122.374644][ T6554] netlink: 27 bytes leftover after parsing attributes in process `syz.0.256'. [ 122.396428][ T5625] ocfs2: Unmounting device (7,3) on (node local) [ 123.264775][ T6548] loop2: detected capacity change from 0 to 40427 [ 123.301950][ T6548] F2FS-fs (loop2): invalid crc value [ 123.455624][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 123.455832][ T6583] Zero length message leads to an empty skb [ 123.618232][ T6548] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 123.684231][ T6587] loop0: detected capacity change from 0 to 128 [ 123.696094][ T6587] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.699713][ T6587] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.700142][ T6548] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 123.746011][ T6590] loop4: detected capacity change from 0 to 1024 [ 123.862780][ T33] kauditd_printk_skb: 241 callbacks suppressed [ 123.862803][ T33] audit: type=1800 audit(1788919803.236:257): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.254" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 123.900973][ T6548] syz.2.254: attempt to access beyond end of device [ 123.900973][ T6548] loop2: rw=8423425, sector=77824, nr_sectors = 8 limit=40427 [ 124.008713][ T5818] kernel read not supported for file /vcs (pid: 5818 comm: kworker/1:6) [ 124.067939][ T5623] syz-executor: attempt to access beyond end of device [ 124.067939][ T5623] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.097333][ T13] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.103247][ T5623] CPU: 0 UID: 0 PID: 5623 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 124.103275][ T5623] Tainted: [L]=SOFTLOCKUP [ 124.103282][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.103291][ T5623] Call Trace: [ 124.103298][ T5623] [ 124.103306][ T5623] dump_stack_lvl+0xe8/0x150 [ 124.103338][ T5623] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 124.103363][ T5623] f2fs_write_end_bio+0x1211/0x16e0 [ 124.103389][ T5623] ? blkg_put+0x22/0x240 [ 124.103424][ T5623] __submit_merged_bio+0x258/0x6a0 [ 124.103443][ T5623] ? rcu_is_watching+0x16/0xb0 [ 124.103470][ T5623] __submit_merged_write_cond+0x3c9/0x4e0 [ 124.103500][ T5623] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 124.103542][ T5623] f2fs_write_data_pages+0x2a1d/0x36f0 [ 124.103564][ T5623] ? __lock_acquire+0x747/0x2de0 [ 124.103616][ T5623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 124.103636][ T5623] ? is_bpf_text_address+0x26/0x2b0 [ 124.103670][ T5623] ? arch_stack_walk+0xfb/0x150 [ 124.103717][ T5623] ? add_lock_to_list+0xc7/0x100 [ 124.103742][ T5623] ? lockdep_unlock+0x5c/0xd0 [ 124.103757][ T5623] ? __lock_acquire+0x1511/0x2de0 [ 124.103810][ T5623] ? do_raw_spin_lock+0x12b/0x2f0 [ 124.103849][ T5623] ? do_raw_spin_unlock+0xf5/0x200 [ 124.103873][ T5623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 124.103896][ T5623] do_writepages+0x338/0x560 [ 124.103927][ T5623] ? do_raw_spin_unlock+0xf5/0x200 [ 124.103956][ T5623] filemap_fdatawrite+0x1e9/0x2f0 [ 124.103980][ T5623] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 124.104045][ T5623] ? do_raw_spin_unlock+0xf5/0x200 [ 124.104074][ T5623] f2fs_sync_dirty_inodes+0x30e/0x830 [ 124.104111][ T5623] f2fs_write_checkpoint+0xa38/0x2710 [ 124.104133][ T5623] ? __lock_acquire+0x747/0x2de0 [ 124.104182][ T5623] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 124.104256][ T5623] kill_f2fs_super+0x2dd/0x700 [ 124.104288][ T5623] ? __pfx_kill_f2fs_super+0x10/0x10 [ 124.104322][ T5623] ? call_rcu+0x64d/0x8b0 [ 124.104343][ T5623] ? lockdep_hardirqs_on+0x7b/0x110 [ 124.104376][ T5623] deactivate_locked_super+0xbc/0x110 [ 124.104397][ T5623] cleanup_mnt+0x3d3/0x460 [ 124.104423][ T5623] task_work_run+0x1d9/0x260 [ 124.104447][ T5623] ? __pfx_task_work_run+0x10/0x10 [ 124.104477][ T5623] exit_to_user_mode_loop+0x204/0x770 [ 124.104497][ T5623] ? rcu_is_watching+0x16/0xb0 [ 124.104523][ T5623] do_syscall_64+0x328/0x520 [ 124.104540][ T5623] ? trace_irq_disable+0x3b/0x140 [ 124.104559][ T5623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.104577][ T5623] ? clear_bhb_loop+0x70/0xc0 [ 124.104598][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.104615][ T5623] RIP: 0033:0x7fbb86b9f397 [ 124.104633][ T5623] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 124.104646][ T5623] RSP: 002b:00007fff009125a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 124.104666][ T5623] RAX: 0000000000000000 RBX: 00007fbb86c3448b RCX: 00007fbb86b9f397 [ 124.104678][ T5623] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff00912660 [ 124.104688][ T5623] RBP: 00007fff00912660 R08: 00007fff00913660 R09: 00000000ffffffff [ 124.104700][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff009136f0 [ 124.104710][ T5623] R13: 00007fbb86c3448b R14: 000000000001e3d5 R15: 00007fff00913730 [ 124.104739][ T5623] [ 124.115341][ T5623] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 124.949450][ T6611] loop3: detected capacity change from 0 to 512 [ 124.954787][ T6611] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.003377][ T6611] EXT4-fs (loop3): 1 truncate cleaned up [ 125.013275][ T6611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.208449][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.293859][ T6621] netlink: 'syz.0.287': attribute type 14 has an invalid length. [ 125.462254][ T6625] loop4: detected capacity change from 0 to 4096 [ 125.584014][ T6625] ntfs3(loop4): Failed to load $Extend (-22). [ 125.584043][ T6625] ntfs3(loop4): Failed to initialize $Extend. [ 125.870022][ T5791] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.912784][ T5719] hid-generic 0005:15C2:0003.0003: item fetching failed at offset 0/1 [ 125.913645][ T5719] hid-generic 0005:15C2:0003.0003: probe with driver hid-generic failed with error -22 [ 126.022887][ T5791] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 126.022932][ T5791] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 126.023948][ T5791] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.023997][ T5791] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.024023][ T5791] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.026015][ T5791] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.026065][ T5791] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.026090][ T5791] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.027052][ T5791] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.027099][ T5791] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.027122][ T5791] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.129820][ T5791] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.129948][ T5791] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.129975][ T5791] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.160521][ T5791] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.160577][ T5791] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.160603][ T5791] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.161718][ T5791] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.162015][ T5791] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.162042][ T5791] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.163253][ T5791] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.163299][ T5791] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.163324][ T5791] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.164267][ T5791] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.164313][ T5791] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.164337][ T5791] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.166551][ T5791] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 126.166576][ T5791] usb 4-1: Product: syz [ 126.166590][ T5791] usb 4-1: Manufacturer: syz [ 126.166605][ T5791] usb 4-1: SerialNumber: syz [ 126.262010][ T5791] usb 4-1: config 0 descriptor?? [ 126.334131][ T5791] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 126.461549][ T6624] loop0: detected capacity change from 0 to 32768 [ 126.508821][ T6624] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 126.647523][ T6624] XFS (loop0): Ending clean mount [ 126.743888][ T5734] usb 4-1: USB disconnect, device number 6 [ 126.762021][ T5734] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 126.872774][ T5618] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 127.525494][ T6690] process 'syz.1.314' launched './file0' with NULL argv: empty string added [ 127.699109][ T5791] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.864363][ T5791] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.867169][ T5791] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.867195][ T5791] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.867222][ T5791] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.867264][ T5791] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.928884][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.928914][ T5791] usb 5-1: Product: syz [ 127.928928][ T5791] usb 5-1: Manufacturer: syz [ 127.957154][ T5791] cdc_wdm 5-1:1.0: skipping garbage [ 127.957175][ T5791] cdc_wdm 5-1:1.0: skipping garbage [ 127.971135][ T5791] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 127.971156][ T5791] cdc_wdm 5-1:1.0: Unknown control protocol [ 128.130071][ T6694] loop3: detected capacity change from 0 to 32768 [ 128.171979][ T6694] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 128.205862][ T6694] JBD2: Ignoring recovery information on journal [ 128.229460][ T5734] usb 5-1: USB disconnect, device number 5 [ 128.348566][ T6694] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 128.534242][ T6698] loop1: detected capacity change from 0 to 32768 [ 128.593377][ T6698] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.642362][ T6698] XFS (loop1): Ending clean mount [ 128.718432][ T5622] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.925803][ T5625] ocfs2: Unmounting device (7,3) on (node local) [ 129.068842][ T6702] loop0: detected capacity change from 0 to 32768 [ 129.094206][ T6719] loop2: detected capacity change from 0 to 2048 [ 129.132315][ T6702] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 129.202383][ T6719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.202486][ T6719] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.263823][ T6702] XFS (loop0): Ending clean mount [ 129.441646][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.623115][ T5618] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 129.640497][ T5791] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.804204][ T5791] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 129.821718][ T5791] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 129.821750][ T5791] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 129.821774][ T5791] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 129.828611][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.828634][ T5791] usb 2-1: Product: syz [ 129.828647][ T5791] usb 2-1: Manufacturer: syz [ 129.828686][ T5791] usb 2-1: SerialNumber: syz [ 129.889547][ T5791] usb 2-1: config 0 descriptor?? [ 129.891042][ T6739] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.891161][ T6739] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.898389][ T5791] usb 2-1: ucan: probing device on interface #0 [ 130.527126][ T6764] netlink: 56 bytes leftover after parsing attributes in process `syz.0.337'. [ 130.532359][ T6743] loop4: detected capacity change from 0 to 32768 [ 130.549773][ T5791] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 130.555205][ T6743] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.329 (6743) [ 130.584994][ T5791] usb 2-1: USB disconnect, device number 4 [ 130.661880][ T6743] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.661916][ T6743] BTRFS info (device loop4): using sha256 checksum algorithm [ 130.833796][ T6743] BTRFS info (device loop4): rebuilding free space tree [ 130.837190][ T5734] kernel write not supported for file /input/event0 (pid: 5734 comm: kworker/0:6) [ 131.000157][ T6743] BTRFS info (device loop4): disabling free space tree [ 131.000258][ T6743] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.000281][ T6743] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.027319][ T6743] BTRFS info (device loop4): setting nodatasum [ 131.027346][ T6743] BTRFS info (device loop4): setting nodatacow [ 131.027362][ T6743] BTRFS info (device loop4): turning off barriers [ 131.027377][ T6743] BTRFS info (device loop4): turning on sync discard [ 131.027392][ T6743] BTRFS info (device loop4): force clearing of disk cache [ 131.173511][ T5628] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 131.295783][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 131.470197][ T6802] loop0: detected capacity change from 0 to 1024 [ 131.471401][ T6802] EXT4-fs: Ignoring removed orlov option [ 131.494245][ T6802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.509276][ T6802] EXT4-fs (loop0): stripe (10) is not aligned with cluster size (4096), stripe is disabled [ 131.514173][ T6802] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 131.514452][ T6802] EXT4-fs (loop0): orphan cleanup on readonly fs [ 131.575831][ T6802] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.348: Invalid inode table block 0 in block_group 0 [ 131.575894][ T6802] fserror_report: 2 callbacks suppressed [ 131.575906][ T6802] loop0: lost filesystem error report for type 5 error -117 [ 131.576245][ T6802] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 131.576267][ T6802] loop0: lost filesystem error report for type 5 error -117 [ 131.577042][ T6802] EXT4-fs error (device loop0): ext4_quota_write:7458: inode #3: comm syz.0.348: mark_inode_dirty error [ 131.577069][ T6802] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 131.578073][ T6802] Quota error (device loop0): write_blk: dquota write failed [ 131.578175][ T6802] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 131.578212][ T6802] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.348: Failed to acquire dquot type 0 [ 131.578232][ T6802] loop0: lost filesystem error report for type 5 error -117 [ 131.579066][ C1] EXT4-fs (loop0): error count since last fsck: 4 [ 131.579088][ C1] EXT4-fs (loop0): initial error at time 1788919810: __ext4_get_inode_loc:4916 [ 131.579112][ C1] EXT4-fs (loop0): last error at time 1788919810: ext4_acquire_dquot:7069 [ 131.592118][ T6802] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.348: Invalid inode table block 0 in block_group 0 [ 131.592149][ T6802] loop0: lost filesystem error report for type 5 error -117 [ 131.600040][ T6802] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 131.600063][ T6802] loop0: lost filesystem error report for type 5 error -117 [ 131.600301][ T6802] EXT4-fs error (device loop0): ext4_ext_truncate:4565: inode #15: comm syz.0.348: mark_inode_dirty error [ 131.600324][ T6802] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.600527][ T6802] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.348: Invalid inode table block 0 in block_group 0 [ 131.600549][ T6802] loop0: lost filesystem error report for type 5 error -117 [ 131.600738][ T6802] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 131.600755][ T6802] loop0: lost filesystem error report for type 5 error -117 [ 131.600948][ T6802] EXT4-fs error (device loop0) in ext4_orphan_del:304: Corrupt filesystem [ 131.600964][ T6802] loop0: lost filesystem error report for type 5 error -117 [ 131.603393][ T6802] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.348: Invalid inode table block 0 in block_group 0 [ 131.603418][ T6802] loop0: lost filesystem error report for type 5 error -117 [ 131.603730][ T6802] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 131.603747][ T6802] loop0: lost filesystem error report for type 5 error -117 [ 131.603941][ T6802] EXT4-fs error (device loop0): ext4_truncate:4721: inode #15: comm syz.0.348: mark_inode_dirty error [ 131.603962][ T6802] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.604161][ T6802] EXT4-fs error (device loop0) in ext4_process_orphan:346: Corrupt filesystem [ 131.604400][ T6802] EXT4-fs (loop0): 1 truncate cleaned up [ 131.612274][ T6802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.692524][ T6800] loop4: detected capacity change from 0 to 4096 [ 131.721750][ T6802] EXT4-fs (loop0): shut down requested (2) [ 131.797938][ T6800] ntfs3(loop4): Failed to load $Extend (-22). [ 131.797960][ T6800] ntfs3(loop4): Failed to initialize $Extend. [ 131.835635][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.955666][ T989] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.109284][ T989] usb 3-1: Using ep0 maxpacket: 8 [ 132.110048][ T989] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.113438][ T989] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 132.113484][ T989] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 132.113506][ T989] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 132.113527][ T989] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 132.113547][ T989] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 132.113566][ T989] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.113602][ T989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.370865][ T989] usb 3-1: GET_CAPABILITIES returned 0 [ 132.370921][ T989] usbtmc 3-1:16.0: can't read capabilities [ 132.474791][ T6811] loop1: detected capacity change from 0 to 4096 [ 132.564085][ T6811] ntfs3(loop1): Failed to load $Extend (-22). [ 132.564113][ T6811] ntfs3(loop1): Failed to initialize $Extend. [ 132.583398][ T5719] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 132.588669][ T989] usb 3-1: USB disconnect, device number 4 [ 132.740930][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 132.741690][ T5719] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 132.743112][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.788368][ T5719] usb 4-1: config 0 descriptor?? [ 133.023750][ T5719] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 133.040300][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.040356][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.075488][ T5719] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.078113][ T5719] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 133.078167][ T5719] usb 4-1: media controller created [ 133.118952][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.236059][ T5719] az6027: usb out operation failed. (-71) [ 133.236468][ T5719] az6027: usb out operation failed. (-71) [ 133.236481][ T5719] stb0899_attach: Driver disabled by Kconfig [ 133.236491][ T5719] az6027: no front-end attached [ 133.236491][ T5719] [ 133.266861][ T5719] az6027: usb out operation failed. (-71) [ 133.266882][ T5719] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 133.303021][ T5719] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 133.307494][ T5719] dvb-usb: schedule remote query interval to 400 msecs. [ 133.307546][ T5719] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 133.337187][ T5719] usb 4-1: USB disconnect, device number 7 [ 133.500041][ T5719] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 133.546130][ T6835] loop1: detected capacity change from 0 to 2048 [ 133.577337][ T6835] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 133.591719][ T6835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.035312][ T6846] loop0: detected capacity change from 0 to 1024 [ 134.084585][ T6846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.084695][ T6846] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.336368][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.617174][ T3103] hid-generic 0005:15C2:0003.0004: item fetching failed at offset 0/1 [ 134.617851][ T3103] hid-generic 0005:15C2:0003.0004: probe with driver hid-generic failed with error -22 [ 134.628581][ T6868] loop3: detected capacity change from 0 to 64 [ 135.509100][ T3103] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 135.691424][ T3103] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 135.693962][ T3103] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 135.693989][ T3103] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 135.694009][ T3103] usb 1-1: config 150 has no interface number 0 [ 135.694051][ T3103] usb 1-1: config 150 interface 204 has no altsetting 0 [ 135.697795][ T3103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.697818][ T3103] usb 1-1: Product: syz [ 135.697832][ T3103] usb 1-1: Manufacturer: syz [ 135.697846][ T3103] usb 1-1: SerialNumber: syz [ 135.909253][ T5791] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.009916][ T3103] xr_serial 1-1:150.204: skipping garbage [ 136.009972][ T3103] xr_serial 1-1:150.204: xr_serial converter detected [ 136.059883][ T5791] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.061332][ T5791] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.061357][ T5791] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.061374][ T5791] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.061451][ T5791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.066616][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.066641][ T5791] usb 4-1: Product: syz [ 136.066655][ T5791] usb 4-1: Manufacturer: syz [ 136.152235][ T5791] cdc_wdm 4-1:1.0: skipping garbage [ 136.152255][ T5791] cdc_wdm 4-1:1.0: skipping garbage [ 136.170143][ T5791] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 136.170166][ T5791] cdc_wdm 4-1:1.0: Unknown control protocol [ 136.266236][ T6891] loop4: detected capacity change from 0 to 32768 [ 136.280901][ T6891] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.388 (6891) [ 136.298745][ T6891] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 136.298776][ T6891] BTRFS info (device loop4): using blake2b checksum algorithm [ 136.442584][ T9] usb 4-1: USB disconnect, device number 8 [ 136.458508][ T6891] BTRFS info (device loop4): enabling ssd optimizations [ 136.458535][ T6891] BTRFS info (device loop4): turning on async discard [ 136.458551][ T6891] BTRFS info (device loop4): enabling free space tree [ 136.615850][ T3103] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 136.615919][ T3103] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 136.658298][ T3103] usb 1-1: USB disconnect, device number 2 [ 136.712694][ T3103] xr_serial 1-1:150.204: device disconnected [ 136.819216][ T5628] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 136.887315][ T6919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.396'. [ 137.058051][ T6920] loop2: detected capacity change from 0 to 4096 [ 137.072079][ T6923] netlink: 56 bytes leftover after parsing attributes in process `syz.1.397'. [ 137.231315][ T6920] ntfs3(loop2): ino=b, Correct links count -> 1. [ 137.238183][ T6920] ntfs3(loop2): ino=18, mi_enum_attr [ 137.238212][ T6920] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 137.330923][ T6929] loop0: detected capacity change from 0 to 1024 [ 137.474607][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'. [ 137.785804][ T6940] loop0: detected capacity change from 0 to 16 [ 137.832796][ T6943] loop1: detected capacity change from 0 to 128 [ 137.837205][ T6940] erofs (device loop0): mounted with root inode @ nid 36. [ 138.068717][ T6934] loop4: detected capacity change from 0 to 32768 [ 138.167493][ T6934] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 138.392306][ T6954] Bluetooth: MGMT ver 1.23 [ 138.430626][ T5628] ocfs2: Unmounting device (7,4) on (node local) [ 138.452300][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.599282][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 138.600126][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 138.602057][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.634570][ T9] usb 1-1: config 0 descriptor?? [ 138.673687][ T6956] loop1: detected capacity change from 0 to 1024 [ 139.339294][ T5818] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.514894][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 139.515824][ T5818] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 139.538299][ T5818] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 139.538327][ T5818] usb 3-1: config 179 has no interface number 0 [ 139.538374][ T5818] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 139.538399][ T5818] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 139.538425][ T5818] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 139.538450][ T5818] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 139.538475][ T5818] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 139.538518][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.639907][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 139.643702][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.646118][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 139.646182][ T9] usb 1-1: media controller created [ 139.658135][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.673578][ T9] az6027: usb out operation failed. (-71) [ 139.673956][ T9] az6027: usb out operation failed. (-71) [ 139.673967][ T9] stb0899_attach: Driver disabled by Kconfig [ 139.673976][ T9] az6027: no front-end attached [ 139.673976][ T9] [ 139.674314][ T9] az6027: usb out operation failed. (-71) [ 139.674325][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 139.676517][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 139.682804][ T6966] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 139.683464][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 139.683480][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 139.689237][ T9] usb 1-1: USB disconnect, device number 3 [ 139.811148][ T6960] loop4: detected capacity change from 0 to 131072 [ 139.826661][ T6960] F2FS-fs (loop4): invalid crc value [ 139.921875][ T6960] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 139.925089][ T989] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 139.925615][ T6960] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 139.968232][ T6968] loop1: detected capacity change from 0 to 32768 [ 140.012898][ T6968] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.067376][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 140.091471][ T989] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.091525][ T989] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 140.093711][ T989] usb 4-1: config 8 has an invalid interface number: 109 but max is 0 [ 140.093736][ T989] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 140.093755][ T989] usb 4-1: config 8 has no interface number 0 [ 140.093797][ T989] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 140.093822][ T989] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 140.093847][ T989] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 140.105384][ T5818] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input9 [ 140.201030][ T989] usb 4-1: string descriptor 0 read error: -22 [ 140.201193][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.239856][ T6959] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 140.251817][ T989] metro_usb 4-1:8.109: Metrologic USB to Serial converter detected [ 140.271230][ T989] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 140.344630][ T5734] usb 3-1: USB disconnect, device number 5 [ 140.344712][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 140.344989][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 140.381169][ T6968] XFS (loop1): Ending clean mount [ 140.482300][ T6968] XFS (loop1): Quotacheck needed: Please wait. [ 140.504303][ C0] metro-usb ttyUSB0: metrousb_read_int_callback - failed submitting interrupt in urb, error code=-1 [ 140.517460][ T5818] usb 4-1: USB disconnect, device number 9 [ 140.565676][ T5818] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 140.586635][ T5818] metro_usb 4-1:8.109: device disconnected [ 140.839228][ T6996] loop0: detected capacity change from 0 to 128 [ 140.879447][ T6968] XFS (loop1): Quotacheck: Done. [ 141.065431][ T5622] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.697402][ T7008] netlink: 256 bytes leftover after parsing attributes in process `syz.3.427'. [ 141.697429][ T7008] netlink: 'syz.3.427': attribute type 2 has an invalid length. [ 142.054429][ T7017] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 142.054454][ T7017] netlink: 'syz.1.430': attribute type 7 has an invalid length. [ 142.054466][ T7017] netlink: 'syz.1.430': attribute type 8 has an invalid length. [ 142.054478][ T7017] netlink: 208 bytes leftover after parsing attributes in process `syz.1.430'. [ 142.054493][ T7017] NCSI netlink: No device for ifindex 1073545264 [ 142.154359][ T7020] loop4: detected capacity change from 0 to 1024 [ 142.235672][ T7024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.370547][ T7001] loop2: detected capacity change from 0 to 32768 [ 142.459431][ T7001] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 142.761357][ T5623] ocfs2: Unmounting device (7,2) on (node local) [ 142.966832][ T7039] overlayfs: failed to clone lowerpath [ 143.595478][ T7026] loop1: detected capacity change from 0 to 40427 [ 143.613719][ T7026] F2FS-fs (loop1): invalid crc value [ 143.688072][ T7028] loop3: detected capacity change from 0 to 40427 [ 143.701553][ T7028] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 143.701582][ T7028] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 143.702010][ T7028] F2FS-fs (loop3): Image doesn't support compression [ 143.702039][ T7028] F2FS-fs (loop3): build fault injection rate: 690 [ 143.702054][ T7028] F2FS-fs (loop3): build fault injection type: 0x35f7 [ 143.703094][ T7028] F2FS-fs (loop3): invalid crc value [ 143.856878][ T7030] loop0: detected capacity change from 0 to 32768 [ 143.869544][ T7028] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 143.891758][ T7028] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 143.891785][ T7028] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 143.891840][ T7028] F2FS-fs (loop3): Start checkpoint disabled! [ 143.939696][ T7028] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 143.947379][ T7028] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 143.947407][ T7028] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 143.947647][ T7030] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.072549][ T7026] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 144.092902][ T7030] XFS (loop0): Ending clean mount [ 144.094292][ T1034] kworker/u8:7: attempt to access beyond end of device [ 144.094292][ T1034] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 144.097367][ T1034] CPU: 0 UID: 0 PID: 1034 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.097396][ T1034] Tainted: [L]=SOFTLOCKUP [ 144.097404][ T1034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.097420][ T1034] Workqueue: writeback wb_workfn (flush-7:3) [ 144.097459][ T1034] Call Trace: [ 144.097468][ T1034] [ 144.097477][ T1034] dump_stack_lvl+0xe8/0x150 [ 144.097508][ T1034] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 144.097535][ T1034] f2fs_write_end_bio+0x1211/0x16e0 [ 144.097563][ T1034] ? blkg_put+0x22/0x240 [ 144.097602][ T1034] __submit_merged_bio+0x258/0x6a0 [ 144.097623][ T1034] ? rcu_is_watching+0x16/0xb0 [ 144.097654][ T1034] __submit_merged_write_cond+0x3c9/0x4e0 [ 144.097686][ T1034] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 144.097735][ T1034] f2fs_write_data_pages+0x2a1d/0x36f0 [ 144.097798][ T1034] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.097894][ T1034] ? rcu_is_watching+0x16/0xb0 [ 144.097919][ T1034] ? trace_hrtimer_start+0x82/0x200 [ 144.097961][ T1034] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.097985][ T1034] do_writepages+0x338/0x560 [ 144.098016][ T1034] ? reacquire_held_locks+0x117/0x1a0 [ 144.098050][ T1034] ? writeback_sb_inodes+0x450/0x1af0 [ 144.098076][ T1034] __writeback_single_inode+0x136/0x1220 [ 144.098100][ T1034] ? do_raw_spin_unlock+0xf5/0x200 [ 144.098131][ T1034] writeback_sb_inodes+0x9de/0x1af0 [ 144.098149][ T1034] ? __lock_acquire+0x747/0x2de0 [ 144.098177][ T1034] ? current_time+0x22f/0x380 [ 144.098218][ T1034] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 144.098286][ T1034] ? rcu_is_watching+0x16/0xb0 [ 144.098312][ T1034] ? queue_io+0x2d3/0x470 [ 144.098337][ T1034] wb_writeback+0x41c/0xad0 [ 144.098360][ T1034] ? queue_io+0x2d1/0x470 [ 144.098387][ T1034] ? __pfx_wb_writeback+0x10/0x10 [ 144.098404][ T1034] ? do_raw_spin_lock+0x12b/0x2f0 [ 144.098450][ T1034] wb_workfn+0x431/0x10f0 [ 144.098499][ T1034] ? __pfx_wb_workfn+0x10/0x10 [ 144.098540][ T1034] ? do_raw_spin_lock+0x12b/0x2f0 [ 144.098578][ T1034] ? lock_acquire+0x115/0x350 [ 144.098610][ T1034] ? rcu_is_watching+0x16/0xb0 [ 144.098638][ T1034] ? process_scheduled_works+0x97a/0x1630 [ 144.098667][ T1034] process_scheduled_works+0xc3d/0x1630 [ 144.098730][ T1034] ? __pfx_process_scheduled_works+0x10/0x10 [ 144.098767][ T1034] ? assign_work+0x3cf/0x5d0 [ 144.098801][ T1034] worker_thread+0xa47/0xfb0 [ 144.098844][ T1034] ? __kthread_parkme+0x71/0x1f0 [ 144.098885][ T1034] kthread+0x38b/0x480 [ 144.098908][ T1034] ? __pfx_worker_thread+0x10/0x10 [ 144.098933][ T1034] ? __pfx_kthread+0x10/0x10 [ 144.098957][ T1034] ret_from_fork+0x514/0xb70 [ 144.098980][ T1034] ? __pfx_ret_from_fork+0x10/0x10 [ 144.099000][ T1034] ? __switch_to+0xc89/0x1420 [ 144.099038][ T1034] ? __pfx_kthread+0x10/0x10 [ 144.099061][ T1034] ret_from_fork_asm+0x1a/0x30 [ 144.099106][ T1034] [ 144.099940][ T7026] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 144.099965][ T7026] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 144.099992][ T7026] F2FS-fs (loop1): Start checkpoint disabled! [ 144.231428][ T1034] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 144.231517][ T1034] CPU: 1 UID: 0 PID: 1034 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.231551][ T1034] Tainted: [L]=SOFTLOCKUP [ 144.231557][ T1034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.231567][ T1034] Workqueue: writeback wb_workfn (flush-7:3) [ 144.231601][ T1034] Call Trace: [ 144.231609][ T1034] [ 144.231617][ T1034] dump_stack_lvl+0xe8/0x150 [ 144.231646][ T1034] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 144.231670][ T1034] f2fs_write_end_bio+0x1211/0x16e0 [ 144.231714][ T1034] __submit_merged_bio+0x258/0x6a0 [ 144.231732][ T1034] ? rcu_is_watching+0x16/0xb0 [ 144.231760][ T1034] __submit_merged_write_cond+0x3c9/0x4e0 [ 144.231788][ T1034] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 144.231830][ T1034] f2fs_write_data_pages+0x2a1d/0x36f0 [ 144.231886][ T1034] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.231972][ T1034] ? rcu_is_watching+0x16/0xb0 [ 144.231994][ T1034] ? trace_hrtimer_start+0x82/0x200 [ 144.232031][ T1034] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.232054][ T1034] do_writepages+0x338/0x560 [ 144.232083][ T1034] ? reacquire_held_locks+0x117/0x1a0 [ 144.232104][ T1034] ? writeback_sb_inodes+0x450/0x1af0 [ 144.232127][ T1034] __writeback_single_inode+0x136/0x1220 [ 144.232148][ T1034] ? do_raw_spin_unlock+0xf5/0x200 [ 144.232177][ T1034] writeback_sb_inodes+0x9de/0x1af0 [ 144.232193][ T1034] ? __lock_acquire+0x747/0x2de0 [ 144.232217][ T1034] ? current_time+0x22f/0x380 [ 144.232253][ T1034] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 144.232312][ T1034] ? rcu_is_watching+0x16/0xb0 [ 144.232334][ T1034] ? queue_io+0x2d3/0x470 [ 144.232355][ T1034] wb_writeback+0x41c/0xad0 [ 144.232380][ T1034] ? queue_io+0x2d1/0x470 [ 144.232403][ T1034] ? __pfx_wb_writeback+0x10/0x10 [ 144.232418][ T1034] ? do_raw_spin_lock+0x12b/0x2f0 [ 144.232463][ T1034] wb_workfn+0x431/0x10f0 [ 144.232504][ T1034] ? __pfx_wb_workfn+0x10/0x10 [ 144.232546][ T1034] ? do_raw_spin_lock+0x12b/0x2f0 [ 144.232580][ T1034] ? lock_acquire+0x115/0x350 [ 144.232608][ T1034] ? rcu_is_watching+0x16/0xb0 [ 144.232635][ T1034] ? process_scheduled_works+0x97a/0x1630 [ 144.232664][ T1034] process_scheduled_works+0xc3d/0x1630 [ 144.232724][ T1034] ? __pfx_process_scheduled_works+0x10/0x10 [ 144.232758][ T1034] ? assign_work+0x3cf/0x5d0 [ 144.232789][ T1034] worker_thread+0xa47/0xfb0 [ 144.232829][ T1034] ? __kthread_parkme+0x71/0x1f0 [ 144.232871][ T1034] kthread+0x38b/0x480 [ 144.232893][ T1034] ? __pfx_worker_thread+0x10/0x10 [ 144.232917][ T1034] ? __pfx_kthread+0x10/0x10 [ 144.232939][ T1034] ret_from_fork+0x514/0xb70 [ 144.232962][ T1034] ? __pfx_ret_from_fork+0x10/0x10 [ 144.232981][ T1034] ? __switch_to+0xc89/0x1420 [ 144.233011][ T1034] ? __pfx_kthread+0x10/0x10 [ 144.233032][ T1034] ret_from_fork_asm+0x1a/0x30 [ 144.233079][ T1034] [ 144.250993][ T1034] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 144.301767][ T3103] fserror_report: 1 callbacks suppressed [ 144.301784][ T3103] loop3: lost filesystem error report for type 5 error -108 [ 144.315569][ T7026] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 144.325613][ T7026] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 144.584261][ T5618] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.969937][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 144.976455][ T3318] kworker/u8:9: attempt to access beyond end of device [ 144.976455][ T3318] loop1: rw=1, sector=77824, nr_sectors = 408 limit=40427 [ 145.018049][ T3318] kworker/u8:9: attempt to access beyond end of device [ 145.018049][ T3318] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.046982][ T3318] CPU: 1 UID: 0 PID: 3318 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.047017][ T3318] Tainted: [L]=SOFTLOCKUP [ 145.047025][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.047036][ T3318] Workqueue: writeback wb_workfn (flush-7:1) [ 145.047076][ T3318] Call Trace: [ 145.047092][ T3318] [ 145.047101][ T3318] dump_stack_lvl+0xe8/0x150 [ 145.047133][ T3318] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 145.047162][ T3318] f2fs_write_end_bio+0x1211/0x16e0 [ 145.047193][ T3318] ? blkg_put+0x22/0x240 [ 145.047233][ T3318] __submit_merged_bio+0x258/0x6a0 [ 145.047255][ T3318] ? rcu_is_watching+0x16/0xb0 [ 145.047287][ T3318] __submit_merged_write_cond+0x3c9/0x4e0 [ 145.047325][ T3318] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 145.047373][ T3318] f2fs_write_data_pages+0x2a1d/0x36f0 [ 145.047437][ T3318] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 145.047475][ T3318] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 145.047540][ T3318] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 145.047584][ T3318] ? __lock_acquire+0x747/0x2de0 [ 145.047623][ T3318] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 145.047654][ T3318] ? f2fs_update_inode+0x1394/0x25c0 [ 145.047684][ T3318] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 145.047711][ T3318] do_writepages+0x338/0x560 [ 145.047745][ T3318] ? reacquire_held_locks+0x117/0x1a0 [ 145.047770][ T3318] ? writeback_sb_inodes+0x450/0x1af0 [ 145.047797][ T3318] __writeback_single_inode+0x136/0x1220 [ 145.047820][ T3318] ? do_raw_spin_unlock+0xf5/0x200 [ 145.047852][ T3318] writeback_sb_inodes+0x9de/0x1af0 [ 145.047870][ T3318] ? __lock_acquire+0x747/0x2de0 [ 145.047919][ T3318] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 145.047981][ T3318] ? rcu_is_watching+0x16/0xb0 [ 145.048008][ T3318] ? queue_io+0x2d3/0x470 [ 145.048034][ T3318] wb_writeback+0x41c/0xad0 [ 145.048058][ T3318] ? queue_io+0x2d1/0x470 [ 145.048092][ T3318] ? __pfx_wb_writeback+0x10/0x10 [ 145.048110][ T3318] ? do_raw_spin_lock+0x12b/0x2f0 [ 145.048158][ T3318] wb_workfn+0x431/0x10f0 [ 145.048188][ T3318] ? __lock_acquire+0x747/0x2de0 [ 145.048224][ T3318] ? __pfx_wb_workfn+0x10/0x10 [ 145.048264][ T3318] ? do_raw_spin_lock+0x12b/0x2f0 [ 145.048308][ T3318] ? lock_acquire+0x115/0x350 [ 145.048341][ T3318] ? rcu_is_watching+0x16/0xb0 [ 145.048369][ T3318] ? process_scheduled_works+0x97a/0x1630 [ 145.048398][ T3318] process_scheduled_works+0xc3d/0x1630 [ 145.048482][ T3318] ? __pfx_process_scheduled_works+0x10/0x10 [ 145.048518][ T3318] ? assign_work+0x3cf/0x5d0 [ 145.048553][ T3318] worker_thread+0xa47/0xfb0 [ 145.048607][ T3318] kthread+0x38b/0x480 [ 145.048630][ T3318] ? __pfx_worker_thread+0x10/0x10 [ 145.048656][ T3318] ? __pfx_kthread+0x10/0x10 [ 145.048680][ T3318] ret_from_fork+0x514/0xb70 [ 145.048703][ T3318] ? __pfx_ret_from_fork+0x10/0x10 [ 145.048724][ T3318] ? __switch_to+0xc89/0x1420 [ 145.048754][ T3318] ? __pfx_kthread+0x10/0x10 [ 145.048778][ T3318] ret_from_fork_asm+0x1a/0x30 [ 145.048827][ T3318] [ 145.090809][ T3318] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 145.638785][ T7081] loop3: detected capacity change from 0 to 128 [ 146.061472][ T7092] loop1: detected capacity change from 0 to 256 [ 146.139099][ T5734] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 146.243024][ T7096] loop1: detected capacity change from 0 to 256 [ 146.289354][ T5734] usb 5-1: Using ep0 maxpacket: 32 [ 146.291154][ T5734] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 146.294128][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.294159][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.294197][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.368034][ T5734] usb 5-1: config 0 descriptor?? [ 146.391289][ T5734] hub 5-1:0.0: USB hub found [ 146.652875][ T5734] hub 5-1:0.0: 1 port detected [ 146.761754][ T7099] loop2: detected capacity change from 0 to 512 [ 146.854771][ T7099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.855259][ T7099] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.926014][ T7099] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.463: iget: bad i_size value: 2533274857506816 [ 146.945496][ T7099] EXT4-fs (loop2): Remounting filesystem read-only [ 147.107903][ T5734] usb 5-1: USB disconnect, device number 6 [ 147.146713][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.203083][ T7094] loop3: detected capacity change from 0 to 131072 [ 147.205989][ T7094] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 147.206015][ T7094] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 147.211501][ T7094] F2FS-fs (loop3): invalid crc value [ 147.304239][ T7094] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 147.322239][ T7094] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 147.322269][ T7094] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 147.881942][ T7124] loop2: detected capacity change from 0 to 512 [ 147.903679][ T7124] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 147.903811][ T7124] System zones: 1-12 [ 147.904545][ T7124] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.472: missing EA_INODE flag [ 147.904571][ T7124] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 147.905354][ T7124] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.472: error while reading EA inode 12 err=-117 [ 147.905385][ T7124] loop2: lost filesystem error report for type 5 error -117 [ 147.908401][ T7124] EXT4-fs (loop2): 1 orphan inode deleted [ 147.997295][ T7124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.070354][ T7124] fscrypt (loop2, inode 15): Sub-block data units not yet supported with IV_INO_LBLK_32 [ 148.163755][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.667033][ T7150] loop2: detected capacity change from 0 to 64 [ 148.873802][ T7155] loop0: detected capacity change from 0 to 512 [ 148.912229][ T7155] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 148.912260][ T7155] EXT4-fs (loop0): inodes count not valid: 32 vs 800 [ 149.045982][ T7155] loop0: detected capacity change from 0 to 4096 [ 149.094259][ T7155] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 150.093207][ T7182] kvm [7180]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 150.402091][ T7193] loop3: detected capacity change from 0 to 256 [ 150.407494][ T7193] exfat: Deprecated parameter 'utf8' [ 150.407625][ T7193] exfat: Deprecated parameter 'namecase' [ 150.499364][ T7193] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 150.575573][ T33] audit: type=1800 audit(1788919829.946:258): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.502" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=1048620 res=0 errno=0 [ 150.576411][ T7196] netlink: 2 bytes leftover after parsing attributes in process `syz.2.504'. [ 150.598336][ T7197] loop1: detected capacity change from 0 to 64 [ 150.627169][ T5619] block nbd1: Receive control failed (result -32) [ 150.749673][ T7151] loop4: detected capacity change from 0 to 65536 [ 150.837284][ T7151] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 150.895212][ T7151] XFS (loop4): Ending clean mount [ 150.983953][ T7151] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x8001 [ 150.984010][ T7151] XFS (loop4): Unmount and run xfs_repair [ 150.984024][ T7151] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 150.984042][ T7151] 00000000: 58 41 47 46 00 00 00 01 00 00 00 01 00 00 40 00 XAGF..........@. [ 150.984058][ T7151] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 150.984073][ T7151] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 150.984087][ T7151] 00000030: 00 00 00 04 00 00 3b 5f 00 00 3b 5c 00 00 00 00 ......;_..;\.... [ 150.984101][ T7151] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 150.984115][ T7151] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 150.984129][ T7151] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 150.984142][ T7151] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 150.984156][ T7151] XFS (loop4): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x8001 len 1 error 74 [ 151.011122][ T7151] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 [ 151.011172][ T7151] XFS (loop4): Unmount and run xfs_repair [ 151.011185][ T7151] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 151.011200][ T7151] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 151.011214][ T7151] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 151.011227][ T7151] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 151.011240][ T7151] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 151.011252][ T7151] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 151.011265][ T7151] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.011277][ T7151] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.011289][ T7151] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.011304][ T7151] XFS (loop4): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74 [ 151.049353][ T7151] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 151.049406][ T7151] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 151.141550][ T7211] xt_hashlimit: size too large, truncated to 1048576 [ 151.226521][ T5628] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 151.826459][ T7221] loop4: detected capacity change from 0 to 512 [ 151.836198][ T7221] EXT4-fs (loop4): Test dummy encryption mode enabled [ 151.836220][ T7221] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.857504][ T7221] EXT4-fs (loop4): 1 truncate cleaned up [ 151.863829][ T7221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.877078][ T7221] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 152.037928][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.460943][ T7215] loop3: detected capacity change from 0 to 40427 [ 152.468692][ T7215] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 152.468721][ T7215] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 152.494686][ T7215] F2FS-fs (loop3): invalid crc value [ 152.639367][ T7217] loop2: detected capacity change from 0 to 131072 [ 152.642198][ T7217] F2FS-fs (loop2): invalid crc value [ 152.756034][ T7217] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 152.778363][ T7215] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 152.799827][ T7215] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 152.799857][ T7215] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 152.802652][ T7217] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 152.951335][ T33] audit: type=1800 audit(1788919832.326:259): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.510" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 153.813282][ T7230] loop4: detected capacity change from 0 to 32768 [ 153.822047][ T7230] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.512 (7230) [ 153.865436][ T7230] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 153.865477][ T7230] BTRFS info (device loop4): using blake2b checksum algorithm [ 154.011784][ T7230] BTRFS info (device loop4): enabling ssd optimizations [ 154.011817][ T7230] BTRFS info (device loop4): turning on async discard [ 154.011834][ T7230] BTRFS info (device loop4): enabling free space tree [ 154.011851][ T7230] BTRFS info (device loop4): use zstd compression, level 3 [ 154.171346][ T33] audit: type=1800 audit(1788919833.536:260): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.512" name="file0" dev="loop4" ino=258 res=0 errno=0 [ 154.384260][ T5628] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 154.526333][ T7279] loop3: detected capacity change from 0 to 1024 [ 154.616135][ T7279] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 154.616265][ T7279] System zones: 0-1, 3-8 [ 154.635265][ T7279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 154.635368][ T7279] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.816143][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 155.101662][ T7286] openvswitch: netlink: IP tunnel dst address not specified [ 155.101700][ T7286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.173905][ T7287] loop3: detected capacity change from 0 to 512 [ 155.214583][ T7287] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.528: bg 0: block 5: invalid block bitmap [ 155.214620][ T7287] loop3: lost filesystem error report for type 5 error -117 [ 155.219281][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 155.219308][ C1] EXT4-fs (loop3): initial error at time 1788919834: ext4_validate_block_bitmap:436 [ 155.219334][ C1] EXT4-fs (loop3): last error at time 1788919834: ext4_validate_block_bitmap:436 [ 155.290283][ T7287] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 155.290313][ T7287] loop3: lost filesystem error report for type 5 error -117 [ 155.291625][ T7287] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.528: invalid indirect mapped block 3 (level 2) [ 155.291660][ T7287] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 155.292171][ T7287] EXT4-fs (loop3): 1 orphan inode deleted [ 155.292190][ T7287] EXT4-fs (loop3): 1 truncate cleaned up [ 155.297089][ T7287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.524258][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.847346][ T7309] Illegal XDP return value 4294967274 on prog (id 30) dev N/A, expect packet loss! [ 156.208227][ T7304] loop0: detected capacity change from 0 to 32768 [ 156.255304][ T7304] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.354728][ T7304] XFS (loop0): Ending clean mount [ 156.419812][ T7304] XFS (loop0): Quotacheck needed: Please wait. [ 156.515026][ T7310] loop3: detected capacity change from 0 to 32768 [ 156.518367][ T7329] loop1: detected capacity change from 0 to 1024 [ 156.533049][ T5719] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.548578][ T7310] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.538 (7310) [ 156.613198][ T7304] XFS (loop0): Quotacheck: Done. [ 156.617467][ T7310] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.617503][ T7310] BTRFS info (device loop3): using sha256 checksum algorithm [ 156.726566][ T5719] usb 5-1: Using ep0 maxpacket: 8 [ 156.728859][ T5719] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.755911][ T5719] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 156.755970][ T5719] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 156.755996][ T5719] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 156.756021][ T5719] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 156.756045][ T5719] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 156.756068][ T5719] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.756110][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.877369][ T7345] loop1: detected capacity change from 0 to 128 [ 156.885851][ T7345] EXT4-fs: Ignoring removed i_version option [ 156.897559][ T7310] BTRFS info (device loop3): enabling ssd optimizations [ 156.897586][ T7310] BTRFS info (device loop3): turning on async discard [ 156.897603][ T7310] BTRFS info (device loop3): enabling free space tree [ 156.945006][ T7345] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.982590][ T5618] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.988129][ T7345] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.125475][ T5719] usb 5-1: GET_CAPABILITIES returned 0 [ 157.125530][ T5719] usbtmc 5-1:16.0: can't read capabilities [ 157.288707][ T5625] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.360592][ T5622] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.405842][ T7325] usb 5-1: usbtmc_ioctl_clear_in_halt returned -32 [ 157.442093][ T989] usb 5-1: USB disconnect, device number 7 [ 158.271248][ T7366] loop4: detected capacity change from 0 to 1024 [ 158.671216][ T7376] bond0: option arp_interval: invalid value () [ 158.671244][ T7376] bond0: option arp_interval: allowed values 0 - 2147483647 [ 158.845128][ T33] audit: type=1400 audit(1788919838.216:261): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=7378 comm="syz.3.558" name="p" offset=64 [ 158.848368][ T7360] loop1: detected capacity change from 0 to 32768 [ 159.033461][ T7383] loop2: detected capacity change from 0 to 512 [ 159.057898][ T7383] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 159.118341][ T7383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.118450][ T7383] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.305879][ T7385] loop3: detected capacity change from 0 to 4096 [ 159.343229][ T7394] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.416944][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.553382][ T7397] loop1: detected capacity change from 0 to 2048 [ 159.554983][ T7397] EXT4-fs: Ignoring removed oldalloc option [ 159.613716][ T7397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.656253][ T7403] macvlan0: entered promiscuous mode [ 159.657507][ T7403] netlink: 'syz.4.567': attribute type 2 has an invalid length. [ 159.657527][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 159.762444][ T7397] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 159.791313][ T7397] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 159.791347][ T7397] EXT4-fs (loop1): This should not happen!! Data will be lost [ 159.791347][ T7397] [ 159.791363][ T7397] EXT4-fs (loop1): Total free blocks count 0 [ 159.791377][ T7397] EXT4-fs (loop1): Free/Dirty block details [ 159.791411][ T7397] EXT4-fs (loop1): free_blocks=4096 [ 159.791442][ T7397] EXT4-fs (loop1): dirty_blocks=16 [ 159.791455][ T7397] EXT4-fs (loop1): Block reservation details [ 159.791466][ T7397] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 159.984769][ T61] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 160.367985][ T7419] loop3: detected capacity change from 0 to 1024 [ 160.416559][ T7419] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 160.416695][ T7419] System zones: 0-1, 3-12 [ 160.448931][ T7419] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.631087][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 160.638491][ T7427] loop0: detected capacity change from 0 to 512 [ 160.676774][ T7427] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.713712][ T7427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.737327][ T7427] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.001835][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.292179][ T7418] loop1: detected capacity change from 0 to 32768 [ 161.363361][ T7418] JBD2: Ignoring recovery information on journal [ 161.423246][ T7447] openvswitch: netlink: IP tunnel dst address not specified [ 161.423285][ T7447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.491626][ T7418] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 161.601989][ T5622] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 161.602046][ T5622] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 161.602057][ T5622] OCFS2: File system is now read-only. [ 161.602068][ T5622] (syz-executor,5622,1):_ocfs2_free_suballoc_bits:3068 ERROR: status = -30 [ 161.602089][ T5622] (syz-executor,5622,1):_ocfs2_free_clusters:3193 ERROR: status = -30 [ 161.602108][ T5622] (syz-executor,5622,1):ocfs2_sync_local_to_main:994 ERROR: status = -30 [ 161.602127][ T5622] (syz-executor,5622,1):ocfs2_sync_local_to_main:1007 ERROR: status = -30 [ 161.602145][ T5622] (syz-executor,5622,1):ocfs2_shutdown_local_alloc:450 ERROR: status = -30 [ 161.759727][ T5622] ocfs2: Unmounting device (7,1) on (node local) [ 161.779080][ T989] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 161.798241][ T7454] program syz.0.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.871712][ T7442] loop2: detected capacity change from 0 to 32768 [ 161.896133][ T7442] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 161.929461][ T989] usb 4-1: Using ep0 maxpacket: 16 [ 161.930316][ T989] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.931679][ T989] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.931729][ T989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.931756][ T989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.931778][ T989] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 161.931800][ T989] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.933180][ T989] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.933203][ T989] usb 4-1: Manufacturer: syz [ 162.028488][ T989] usb 4-1: config 0 descriptor?? [ 162.054420][ T7442] XFS (loop2): Ending clean mount [ 162.257977][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 162.349306][ T989] rc_core: IR keymap rc-hauppauge not found [ 162.349326][ T989] Registered IR keymap rc-empty [ 162.349725][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.378410][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.394362][ T989] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 162.413903][ T989] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 162.429253][ T5623] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 162.443388][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.459419][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.479456][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.500172][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.526867][ T7477] netlink: 'syz.1.594': attribute type 39 has an invalid length. [ 162.544421][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.559208][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.579832][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.600228][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.619999][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.639852][ T989] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.664498][ T989] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 162.664525][ T989] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 162.748114][ T989] usb 4-1: USB disconnect, device number 10 [ 163.223108][ T7481] loop4: detected capacity change from 0 to 32768 [ 163.625301][ T7500] netlink: 144 bytes leftover after parsing attributes in process `syz.0.605'. [ 164.092921][ T7514] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 164.149103][ T5353] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 164.299394][ T5353] usb 4-1: Using ep0 maxpacket: 16 [ 164.302347][ T5353] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.305577][ T5353] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.305604][ T5353] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.307789][ T5353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.307814][ T5353] usb 4-1: Product: syz [ 164.307829][ T5353] usb 4-1: Manufacturer: syz [ 164.307842][ T5353] usb 4-1: SerialNumber: syz [ 164.391042][ T5353] usb 4-1: 0:2 : does not exist [ 164.412958][ T7523] loop1: detected capacity change from 0 to 4096 [ 164.604938][ T5353] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 164.762497][ T5353] usb 4-1: USB disconnect, device number 11 [ 164.854394][ T7538] netlink: 36 bytes leftover after parsing attributes in process `syz.2.620'. [ 164.870724][ T7539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.621'. [ 164.870757][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 164.907877][ T6219] udevd[6219]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.393348][ T7553] loop1: detected capacity change from 0 to 1024 [ 165.548577][ T7557] loop0: detected capacity change from 0 to 16 [ 165.557036][ T7553] hfsplus: xattr search failed [ 165.666371][ T7557] erofs (device loop0): mounted with root inode @ nid 36. [ 165.697902][ T7557] erofs (device loop0): invalid fast symlink size 39 @ nid 83 [ 165.857326][ T7559] loop2: detected capacity change from 0 to 2048 [ 165.887578][ T7535] loop4: detected capacity change from 0 to 40427 [ 165.904006][ T7559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.922656][ T7535] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 165.922685][ T7535] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 165.934835][ T7559] EXT4-fs (loop2): shut down requested (1) [ 165.949973][ T7535] F2FS-fs (loop4): invalid crc value [ 166.098642][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.370562][ T7535] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 166.415921][ T7535] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 166.415951][ T7535] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 166.746658][ T7563] loop1: detected capacity change from 0 to 32768 [ 166.764302][ T7563] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.632 (7563) [ 166.794895][ T7563] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 166.794933][ T7563] BTRFS info (device loop1): using crc32c checksum algorithm [ 166.940927][ T7563] BTRFS info (device loop1): enabling ssd optimizations [ 166.940959][ T7563] BTRFS info (device loop1): turning on async discard [ 166.940974][ T7563] BTRFS info (device loop1): enabling free space tree [ 166.969989][ T7596] Bluetooth: MGMT ver 1.23 [ 167.187976][ T7574] loop0: detected capacity change from 0 to 512 [ 167.550269][ T5622] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 167.958829][ T7616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.647'. [ 168.237600][ T7613] input: syz0 as /devices/virtual/input/input11 [ 168.546998][ T7628] loop4: detected capacity change from 0 to 512 [ 168.585913][ T7628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.688355][ T7619] loop0: detected capacity change from 0 to 32768 [ 168.698500][ T7619] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.648 (7619) [ 168.724332][ T7619] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 168.724369][ T7619] BTRFS info (device loop0): using blake2b checksum algorithm [ 168.767946][ T7628] EXT4-fs warning (device loop4): ext4_begin_enable_verity:135: inode #15: comm syz.4.652: verity is only allowed on extent-based files [ 168.768751][ T7635] EXT4-fs warning (device loop4): ext4_begin_enable_verity:135: inode #15: comm syz.4.652: verity is only allowed on extent-based files [ 168.913129][ T7619] BTRFS info (device loop0): enabling ssd optimizations [ 168.913149][ T7619] BTRFS info (device loop0): turning on async discard [ 168.913159][ T7619] BTRFS info (device loop0): enabling free space tree [ 168.956655][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.033481][ T5618] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 169.335272][ T5734] kernel write not supported for file /snd/midiC2D0 (pid: 5734 comm: kworker/0:6) [ 170.904126][ T7687] loop2: detected capacity change from 0 to 32768 [ 170.982850][ T7687] JBD2: Ignoring recovery information on journal [ 171.151256][ T7687] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 171.383526][ T7715] loop1: detected capacity change from 0 to 256 [ 171.513820][ T5623] ocfs2: Unmounting device (7,2) on (node local) [ 171.606860][ T7703] loop4: detected capacity change from 0 to 32768 [ 171.630286][ T7703] XFS (loop4): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 171.871699][ T5628] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 172.272401][ T7736] loop3: detected capacity change from 0 to 512 [ 172.316747][ T7736] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 172.988838][ T7759] netlink: 128 bytes leftover after parsing attributes in process `syz.2.699'. [ 172.988896][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 173.147029][ T7762] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 173.362327][ T7770] loop0: detected capacity change from 0 to 256 [ 173.375882][ T5734] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 173.458093][ T7770] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 173.458124][ T7770] FAT-fs (loop0): Filesystem has been set read-only [ 173.519991][ T5734] usb 3-1: Using ep0 maxpacket: 16 [ 173.520892][ T5734] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 173.524491][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.524517][ T5734] usb 3-1: Product: syz [ 173.524531][ T5734] usb 3-1: Manufacturer: syz [ 173.524546][ T5734] usb 3-1: SerialNumber: syz [ 173.865343][ T5734] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 173.894679][ T5734] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 173.895091][ T5734] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 173.895145][ T5734] usb 3-1: media controller created [ 173.940252][ T5734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.190824][ T5734] zl10353_read_register: readreg error (reg=127, ret==-110) [ 174.296356][ T7797] warning: `syz.0.717' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 174.315215][ T5734] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 174.331263][ T5734] usb 3-1: USB disconnect, device number 6 [ 174.464200][ T7802] kAFS: Invalid Command on /proc/fs/afs/cells file [ 174.537953][ T7804] loop0: detected capacity change from 0 to 1024 [ 174.547484][ T7804] EXT4-fs: Ignoring removed orlov option [ 174.601450][ T7804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.683085][ T7804] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 174.737208][ T7783] loop3: detected capacity change from 0 to 32768 [ 174.773977][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.025207][ T7819] netlink: 140 bytes leftover after parsing attributes in process `syz.1.725'. [ 175.047182][ T7819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.725'. [ 175.559525][ T5719] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 175.713488][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 175.716410][ T5719] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 175.718435][ T5719] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.718467][ T5719] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.718488][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.718522][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.785836][ T5719] usb 2-1: config 0 descriptor?? [ 175.866729][ T7813] loop4: detected capacity change from 0 to 40427 [ 175.875904][ T7813] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 175.875930][ T7813] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 175.882324][ T7813] F2FS-fs (loop4): invalid crc value [ 175.950234][ T7845] loop0: detected capacity change from 0 to 16 [ 175.955279][ T7845] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 176.084661][ T7813] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 176.085536][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.738'. [ 176.090330][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.738'. [ 176.091073][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.738'. [ 176.131635][ T7813] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 176.131695][ T7813] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 176.218961][ T5719] hid_parser_main: 117 callbacks suppressed [ 176.225849][ T5719] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 176.225892][ T5719] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 176.225916][ T5719] nzxt-smart2 0003:1E71:2009.0005: collection stack underflow [ 176.225938][ T5719] nzxt-smart2 0003:1E71:2009.0005: item 0 0 0 12 parsing failed [ 176.226876][ T5719] nzxt-smart2 0003:1E71:2009.0005: probe with driver nzxt-smart2 failed with error -22 [ 176.441516][ T5719] usb 2-1: USB disconnect, device number 5 [ 176.597626][ T7858] loop2: detected capacity change from 0 to 4096 [ 177.173243][ T7868] loop4: detected capacity change from 0 to 4096 [ 177.186274][ T7868] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 177.306139][ T7874] loop1: detected capacity change from 0 to 64 [ 177.325409][ T7868] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 177.327285][ T7868] ntfs3(loop4): ino=1a, mi_enum_attr [ 177.327471][ T7868] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 177.436587][ T7868] ntfs3(loop4): ino=5, "/" indx_read_ra [ 178.257339][ T7902] loop4: detected capacity change from 0 to 4096 [ 178.278025][ T7902] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 178.358321][ T7902] ntfs3(loop4): ino=19, mi_enum_attr [ 178.358344][ T7902] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 178.614696][ T7916] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 179.439591][ T3103] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 179.467427][ T7950] input: syz0 as /devices/virtual/input/input13 [ 179.609785][ T3103] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 179.611331][ T3103] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.613197][ T3103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 179.613221][ T3103] usb 5-1: Product: syz [ 179.613235][ T3103] usb 5-1: Manufacturer: syz [ 179.626780][ T3103] usb_debug 5-1:1.0: debug converter detected [ 179.648940][ T3103] usb 5-1: debug converter now attached to ttyUSB0 [ 179.703104][ T7957] bond0: unable to remove nonexistent ARP target 192.168.1.1 [ 179.703136][ T7957] bond0: option arp_ip_target: invalid value (-192.168.1.1) [ 179.868749][ T989] usb 5-1: USB disconnect, device number 8 [ 179.894054][ T989] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 179.894696][ T989] usb_debug 5-1:1.0: device disconnected [ 180.606555][ T7974] loop1: detected capacity change from 0 to 2048 [ 180.669895][ T7976] bpf: Bad value for 'gid' [ 180.672488][ T7974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.856615][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.938726][ T7980] loop4: detected capacity change from 0 to 4096 [ 180.970959][ T7980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.140575][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.241000][ T5353] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 181.269866][ T7996] WARNING! power/level is deprecated; use power/control instead [ 181.375633][ T8001] Format for deleting device is "id" (uint). [ 181.391296][ T5353] usb 4-1: unable to get BOS descriptor or descriptor too short [ 181.391351][ T5353] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 181.392568][ T5353] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 181.392594][ T5353] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 181.392613][ T5353] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 181.392634][ T5353] usb 4-1: config 129 has no interface number 0 [ 181.392650][ T5353] usb 4-1: config 129 has no interface number 1 [ 181.392703][ T5353] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 181.392729][ T5353] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 181.392764][ T5353] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 181.392790][ T5353] usb 4-1: config 129 interface 135 has no altsetting 0 [ 181.392808][ T5353] usb 4-1: config 129 interface 5 has no altsetting 0 [ 181.396944][ T5353] usb 4-1: string descriptor 0 read error: -22 [ 181.397094][ T5353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.564594][ T5353] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 181.564663][ T5353] usb 4-1: MIDIStreaming interface descriptor not found [ 181.985081][ T8015] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.811/8015 [ 181.985108][ T8015] caller is ieee80211_tx_control_port+0xac7/0x1100 [ 181.985144][ T8015] CPU: 0 UID: 0 PID: 8015 Comm: syz.0.811 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.985171][ T8015] Tainted: [L]=SOFTLOCKUP [ 181.985179][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.985191][ T8015] Call Trace: [ 181.985201][ T8015] [ 181.985210][ T8015] dump_stack_lvl+0xe8/0x150 [ 181.985241][ T8015] check_preemption_disabled+0xcd/0xd0 [ 181.985269][ T8015] ieee80211_tx_control_port+0xac7/0x1100 [ 181.985295][ T8015] ? ieee80211_tx_control_port+0x71b/0x1100 [ 181.985325][ T8015] nl80211_tx_control_port+0x624/0x960 [ 181.985364][ T8015] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 181.985393][ T8015] ? nl80211_pre_doit+0x53d/0x890 [ 181.985426][ T8015] genl_family_rcv_msg_doit+0x233/0x340 [ 181.985457][ T8015] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 181.985494][ T8015] ? bpf_lsm_capable+0x9/0x20 [ 181.985515][ T8015] ? security_capable+0x7e/0x2c0 [ 181.985552][ T8015] genl_rcv_msg+0x614/0x7a0 [ 181.985591][ T8015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.985611][ T8015] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 181.985634][ T8015] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 181.985659][ T8015] ? __pfx_nl80211_post_doit+0x10/0x10 [ 181.985688][ T8015] ? __asan_memcpy+0x40/0x70 [ 181.985711][ T8015] ? __skb_clone+0x5c/0x6c0 [ 181.985749][ T8015] netlink_rcv_skb+0x226/0x4a0 [ 181.985779][ T8015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.985802][ T8015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.985848][ T8015] ? down_read+0x2b9/0x320 [ 181.985877][ T8015] genl_rcv+0x28/0x40 [ 181.985896][ T8015] netlink_unicast+0x7bd/0x940 [ 181.985933][ T8015] netlink_sendmsg+0x7c3/0xae0 [ 181.985968][ T8015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.986006][ T8015] ? apparmor_socket_sendmsg+0x98/0x360 [ 181.986040][ T8015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.986068][ T8015] sock_sendmsg_nosec+0x13a/0x180 [ 181.986100][ T8015] ____sys_sendmsg+0x54e/0x850 [ 181.986151][ T8015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.986198][ T8015] ? import_iovec+0x73/0xa0 [ 181.986225][ T8015] ___sys_sendmsg+0x2a5/0x360 [ 181.986250][ T8015] ? __lock_acquire+0x747/0x2de0 [ 181.986279][ T8015] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.986310][ T8015] ? futex_wait+0x2a2/0x390 [ 181.986365][ T8015] ? __fget_files+0x2a/0x420 [ 181.986387][ T8015] ? __fget_files+0x3a2/0x420 [ 181.986421][ T8015] __x64_sys_sendmsg+0x1b1/0x290 [ 181.986450][ T8015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.986501][ T8015] do_syscall_64+0x166/0x520 [ 181.986522][ T8015] ? trace_irq_disable+0x3b/0x140 [ 181.986544][ T8015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.986566][ T8015] ? clear_bhb_loop+0x70/0xc0 [ 181.986600][ T8015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.986619][ T8015] RIP: 0033:0x7ff1d059e159 [ 181.986639][ T8015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.986656][ T8015] RSP: 002b:00007ff1d148f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.986678][ T8015] RAX: ffffffffffffffda RBX: 00007ff1d0825fa0 RCX: 00007ff1d059e159 [ 181.986693][ T8015] RDX: 0000000000000000 RSI: 0000200000003700 RDI: 0000000000000003 [ 181.986706][ T8015] RBP: 00007ff1d063503b R08: 0000000000000000 R09: 0000000000000000 [ 181.986718][ T8015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.986730][ T8015] R13: 00007ff1d0826038 R14: 00007ff1d0825fa0 R15: 00007ffe182c77b8 [ 181.986763][ T8015] [ 182.391950][ T5353] usb 4-1: USB disconnect, device number 12