last executing test programs: 9.706198081s ago: executing program 2 (id=1595): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x80, 0x4) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 9.182085583s ago: executing program 0 (id=1601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r6) r7 = syz_open_procfs(0x0, &(0x7f00000020c0)='environ\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) io_uring_enter(0xffffffffffffffff, 0x4d10, 0x2, 0x2, 0x0, 0x0) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$cgroup_int(r5, &(0x7f0000000040)=0x800000000001c8, 0x12) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 8.139667988s ago: executing program 0 (id=1604): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000e40)={0x40, 0x9, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="001446000000fd07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.139261527s ago: executing program 3 (id=1605): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f0000000140)={[{@localalloc={'localalloc', 0x3d, 0xf}}, {@heartbeat_none}, {@heartbeat_none}, {@inode64}, {@coherency_full}, {@resv_level={'resv_level', 0x3d, 0x20}}, {@err_cont}, {@user_xattr}, {@acl}, {@data_writeback}, {@preferred_slot={'preferred_slot', 0x3d, 0x7}}, {@journal_async_commit}]}, 0x1, 0x444c, &(0x7f00000088c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) 7.103391952s ago: executing program 3 (id=1608): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f0000000180)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@enospc_debug}, {@noflushoncommit}, {@usebackuproot}, {@max_inline={'max_inline', 0x3d, [0x37, 0x37, 0x6b, 0x37]}}, {@thread_pool={'thread_pool', 0x3d, 0x6}}, {@ssd_spread}]}, 0x1, 0x55ae, &(0x7f0000005600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) 6.985335622s ago: executing program 2 (id=1609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000040085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x23, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.914385187s ago: executing program 2 (id=1610): socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x5, 0x80000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r6, &(0x7f0000000080)='./file0\x00') readlinkat(r6, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 5.787970449s ago: executing program 2 (id=1612): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x12, "518aba4d000000000000000000000000002000"}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) openat$rtc(0xffffffffffffff9c, 0x0, 0x42801, 0x0) 5.307530768s ago: executing program 0 (id=1614): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0xfe, 0x1}, 0x20) 5.185882548s ago: executing program 4 (id=1615): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0xfffffffffffffffc}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2804c082}, 0x440ee) 4.980683045s ago: executing program 0 (id=1617): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101}) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x43c, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x85, 0x8, 0x4, 0x9, 0x4, 0x9, 0xcf, 0x775, 0xfffffffa, 0x3, 0xa2, 0x4, 0x4, 0x7fff, 0x3, 0xf, 0x4, 0x3, 0x6, 0x2, 0x8, 0x7, 0x6, 0xffffffff, 0x9, 0x78, 0x1, 0x2, 0x4, 0x1, 0xfffffee8, 0x5, 0x9, 0xa, 0x5, 0x8000, 0xd9, 0x0, 0x16, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x5, 0x3ff, 0x7, 0x0, 0x5, 0xfffffff7, 0x8, 0x50ea, 0x6, 0x8001, 0x9, 0xb0e0, 0xf, 0x5, 0x8, 0x3, 0x0, 0xcc000000, 0x5b23, 0x5, 0x8, 0x3, 0xee, 0x7fffffff, 0x7fffffff, 0x3, 0x172, 0x5ae27a20, 0x5, 0x6, 0x4, 0x200, 0x1ff, 0x3, 0x400, 0xe6b3, 0xd171, 0x6, 0x1ff, 0x7, 0x699213b0, 0x9, 0xa, 0x12, 0x3, 0x4, 0x0, 0x100, 0x5, 0x6793, 0x0, 0x1, 0xfffffffa, 0x9, 0x80000000, 0x7, 0x5, 0x0, 0x80000000, 0x400, 0x7, 0x7, 0x5, 0x9, 0x6, 0x9, 0x0, 0x1, 0x5, 0x2, 0x2, 0x2, 0x7ff, 0x40, 0x7f, 0x5fece1ea, 0xbf7, 0x8, 0x78, 0xe, 0x80000000, 0x6, 0x8, 0x5, 0xe, 0x5, 0x200, 0x4, 0x4, 0x0, 0x0, 0x1, 0x3, 0xb, 0x70, 0x2, 0x1, 0x9, 0x1800000, 0x9, 0xbff, 0x4, 0x6, 0x800, 0x7, 0x5, 0x3, 0x9, 0x6, 0x0, 0x2, 0x6, 0x800, 0x3ff, 0x9, 0x3, 0xcc, 0xc60, 0x3, 0x8, 0x4, 0x1, 0x0, 0x7, 0x2, 0x6, 0xc, 0x4, 0x32, 0x2, 0x8, 0x1000, 0x2, 0x4, 0x4, 0x2, 0xffff, 0xb37, 0x7fff, 0xbec, 0x8, 0x5, 0x1, 0x5, 0x0, 0x1, 0xffff, 0x7f, 0x3, 0x94f, 0xc91, 0x9, 0x3, 0x2, 0xd46, 0xf, 0x200, 0x0, 0x8, 0x7fffffff, 0x0, 0x8, 0x2, 0xe6, 0xb, 0x18000000, 0x4, 0x5, 0xd756, 0x6, 0x3, 0x800, 0xd3, 0x2, 0x6, 0x9, 0x4, 0x7, 0x5, 0xaec, 0x100, 0x0, 0xfffffffb, 0x40, 0xfffffffe, 0x3, 0xa, 0x7f, 0x1, 0x9c, 0x400, 0x5, 0x8000, 0x8, 0x8, 0x9, 0x6, 0xffffff7f, 0xee2b, 0x7, 0xeaf, 0x3, 0x401, 0x7, 0x7f, 0x5f, 0x1000, 0x7, 0x9, 0x7, 0x8001, 0x9, 0x3]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x40881) recvmmsg(r4, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d40)=""/13, 0xd}, {&(0x7f0000000d80)=""/247, 0xf7}], 0x2}, 0x3}], 0x1, 0x1, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.890147332s ago: executing program 4 (id=1618): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file1\x00', 0x1810002, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="2da97369bd5bd2a022e4fea628166430fb7a26dae38cd827ad7f8cff5d2246bdd2cc0e8101b9631aa9db6c88c4ea13a8fbc6a23601da47409ecba43e29d90521e4a37f2f57fa7ce2366b5b89b5b9529791fb53b47e83c2014cd5779926a7dd8a0de70a50b2baf658b32d6d108efa8d3b6101762c8308a5b3351fd14516c9c33e6c6bd15e956f84604a27325b8ebb315aff3e39aa98ba22dffb1b6a7c1acafedad4ef237de4595f77f679e98e9dcbf01dc5bcbd5c199b9e95c24b", @ANYRES32, @ANYRES8=0x0, @ANYRES32], 0x1, 0x1d8, &(0x7f0000001a40)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x4081, @empty, 0x101}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0xb0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendto$inet6(r3, 0x0, 0x0, 0x10, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 4.124505324s ago: executing program 1 (id=1619): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.550203622s ago: executing program 4 (id=1620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000004008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x23, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.478272398s ago: executing program 3 (id=1621): r0 = io_uring_setup(0x560e, &(0x7f0000000a40)={0x0, 0xb589, 0x2, 0xfffffffe, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) close_range(r0, r1, 0x0) 2.410905174s ago: executing program 1 (id=1622): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) 2.392607085s ago: executing program 0 (id=1623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.149646025s ago: executing program 3 (id=1624): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000280)={0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0f5a94536a277c}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18, 0x48000}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 2.149016105s ago: executing program 0 (id=1625): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f55, &(0x7f000000efc0)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100)) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 2.148787465s ago: executing program 4 (id=1626): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) wait4(0x0, 0x0, 0x20000000, 0x0) 1.993623758s ago: executing program 1 (id=1627): gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) creat(0x0, 0x16d) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) 1.406486366s ago: executing program 4 (id=1628): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x0, 0x1ff, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r3, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) 1.246245899s ago: executing program 2 (id=1629): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabb, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x101042, 0x0) 1.245822689s ago: executing program 1 (id=1630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r6) r7 = syz_open_procfs(0x0, &(0x7f00000020c0)='environ\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) io_uring_enter(0xffffffffffffffff, 0x4d10, 0x2, 0x2, 0x0, 0x0) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) chdir(&(0x7f0000002080)='./file0\x00') write$cgroup_int(r5, &(0x7f0000000040)=0x800000000001c8, 0x12) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 1.198561882s ago: executing program 3 (id=1631): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000340)={{r0}, 0x81, 0x57, 0x100000000}) 982.20261ms ago: executing program 3 (id=1632): userfaultfd(0x801) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) listen(0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@restrict={0xb, 0x0, 0x0, 0xb, 0x2}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x1}, @fwd={0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x1000}}, @float={0xf, 0x0, 0x0, 0x10, 0xc}, @fwd={0x9}]}}, &(0x7f0000000300)=""/148, 0x6e, 0x94}, 0x28) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$revoke(0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60010020, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, '|P3', 0x1}}}, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xb5) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) recvfrom(r1, &(0x7f00000000c0)=""/66, 0x42, 0x40000141, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x80) 247.1015ms ago: executing program 1 (id=1633): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @value=r0}, 0x28) 170.145546ms ago: executing program 2 (id=1634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@empty, @private=0xa010101, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x100101, 0x0, 0x801}, 0x3c) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r2, 0x0, 0x91}, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) rt_sigqueueinfo(0x0, 0x15, &(0x7f0000000000)={0x2e, 0x6, 0xffff7d34}) syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x83) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26044885}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) rseq(0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) 91.388283ms ago: executing program 1 (id=1635): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 0s ago: executing program 4 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4, 0x12}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8005) kernel console output (not intermixed with test programs): -fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.1047: corrupted in-inode xattr [ 674.449832][ T9438] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1047: couldn't read orphan inode 15 (err -117) [ 674.462352][ T9438] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 674.495291][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 674.992426][ T4428] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 675.568143][ T8840] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (8840) [ 675.709915][ T9455] loop0: detected capacity change from 0 to 256 [ 675.733882][ T4428] usb 4-1: Using ep0 maxpacket: 16 [ 675.740976][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 675.781624][ T4428] usb 4-1: config index 0 descriptor too short (expected 16370, got 36) [ 675.783670][ T9455] FAT-fs (loop0): Unrecognized mount option "coDepage=865" or missing value [ 675.806492][ T4428] usb 4-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 675.834443][ T4428] usb 4-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 675.875111][ T4428] usb 4-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 675.900371][ T9458] loop1: detected capacity change from 0 to 128 [ 675.934618][ T4428] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 675.964304][ T4428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.975529][ T9458] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 676.033889][ T4428] usb 4-1: Product: syz [ 676.058392][ T4428] usb 4-1: Manufacturer: syz [ 676.374051][ T4428] usb 4-1: SerialNumber: syz [ 676.557255][ T9460] loop2: detected capacity change from 0 to 256 [ 676.571708][ T9460] FAT-fs (loop2): Unrecognized mount option "coDepage=865" or missing value [ 677.118748][ T9462] overlayfs: missing 'lowerdir' [ 677.952707][ T9455] loop0: detected capacity change from 0 to 32768 [ 677.987046][ T9455] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 678.015316][ T6165] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 678.033553][ T9455] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 678.062007][ T9455] BTRFS info (device loop0): turning off barriers [ 678.070279][ T9460] loop2: detected capacity change from 0 to 32768 [ 678.076895][ T9455] BTRFS info (device loop0): setting nodatasum [ 678.084331][ T9455] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 678.094020][ T9460] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1052 (9460) [ 678.107165][ T9455] BTRFS info (device loop0): use zstd compression, level 3 [ 678.255567][ T6165] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 678.262229][ T9455] BTRFS info (device loop0): using free space tree [ 678.287476][ T6165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.379070][ T9474] hugetlbfs: Bad value for 'size' [ 678.942517][ T6165] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 678.961843][ T6165] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 678.981025][ T6165] usb 2-1: Manufacturer: syz [ 679.001995][ T6165] usb 2-1: config 0 descriptor?? [ 679.018682][ T4257] usb 4-1: USB disconnect, device number 8 [ 679.078901][ T9455] BTRFS error (device loop0): open_ctree failed: -12 [ 679.134869][ T4260] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4260) [ 679.283870][ T6165] rc_core: IR keymap rc-hauppauge not found [ 679.400127][ T6165] Registered IR keymap rc-empty [ 679.414765][ T6165] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 679.474265][ T6165] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 679.767927][ T9506] vxfs: WRONG superblock magic 00000000 at 1 [ 679.774869][ T9506] vxfs: WRONG superblock magic 00000000 at 8 [ 679.780924][ T9506] vxfs: can't find superblock. [ 679.803932][ T4373] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 680.191839][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 680.297360][ T9510] dlm: no local IP address has been set [ 680.303009][ T9510] dlm: cannot start dlm midcomms -107 [ 680.312849][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 680.319416][ T6167] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 680.344269][ T4373] usb 5-1: device descriptor read/64, error -32 [ 680.377820][ T6165] usb 2-1: USB disconnect, device number 15 [ 680.525400][ T6167] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 680.603557][ T6167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.616707][ T4373] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 680.634021][ T4332] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 680.808907][ T6167] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 680.833991][ T4373] usb 5-1: Using ep0 maxpacket: 16 [ 680.839224][ T4332] usb 4-1: Using ep0 maxpacket: 8 [ 680.848959][ T4332] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 680.901961][ T6167] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 680.927060][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.945468][ T6167] usb 1-1: Manufacturer: syz [ 680.970768][ T4332] usb 4-1: Product: syz [ 680.991244][ T4332] usb 4-1: Manufacturer: syz [ 681.004502][ T4332] usb 4-1: SerialNumber: syz [ 681.010666][ T6167] usb 1-1: config 0 descriptor?? [ 681.041667][ T4332] usb 4-1: config 0 descriptor?? [ 681.059854][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1057'. [ 681.272328][ T4332] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 681.304068][ T6167] rc_core: IR keymap rc-hauppauge not found [ 681.310018][ T6167] Registered IR keymap rc-empty [ 681.343302][ T6167] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 681.395305][ T6167] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 681.450790][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 681.480150][ T6167] usb 1-1: USB disconnect, device number 13 [ 681.675212][ T9523] loop2: detected capacity change from 0 to 1024 [ 681.790916][ T9523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 682.663099][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 682.747197][ T9534] loop2: detected capacity change from 0 to 128 [ 682.778436][ T9534] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 683.054209][ T4332] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 683.084046][ T4332] usb 4-1: USB disconnect, device number 9 [ 683.579664][ T4373] usb 5-1: unable to get BOS descriptor or descriptor too short [ 683.591676][ T4373] usb 5-1: no configurations [ 683.634069][ T4373] usb 5-1: can't read configurations, error -22 [ 683.665496][ T4373] usb usb5-port1: attempt power cycle [ 683.710988][ T9543] loop4: detected capacity change from 0 to 128 [ 683.748562][ T9543] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 683.873883][ T6165] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 683.941046][ T9546] overlayfs: missing 'lowerdir' [ 683.953896][ T6167] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 684.069510][ T6165] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 684.090362][ T6165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.143997][ T6167] usb 2-1: Using ep0 maxpacket: 32 [ 684.157653][ T6167] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 684.166176][ T6165] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 684.200450][ T6167] usb 2-1: config 0 has no interface number 0 [ 684.210560][ T6165] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 684.239593][ T6167] usb 2-1: config 0 interface 89 has no altsetting 0 [ 684.287336][ T6165] usb 1-1: Manufacturer: syz [ 684.306029][ T6167] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 684.337711][ T6165] usb 1-1: config 0 descriptor?? [ 684.391563][ T6167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.460195][ T6167] usb 2-1: Product: syz [ 684.498520][ T6167] usb 2-1: Manufacturer: syz [ 684.503143][ T6167] usb 2-1: SerialNumber: syz [ 684.513975][ T6165] rc_core: IR keymap rc-hauppauge not found [ 684.519931][ T6165] Registered IR keymap rc-empty [ 684.539884][ T6165] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 684.570766][ T6167] usb 2-1: config 0 descriptor?? [ 684.601316][ T6167] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 684.630309][ T6165] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 684.661421][ T6167] em28xx 2-1:0.89: Video interface 89 found: bulk [ 684.734150][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 686.117248][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.124631][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.189486][ T4433] usb 1-1: USB disconnect, device number 14 [ 686.335682][ T6167] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 686.417092][ T9559] loop4: detected capacity change from 0 to 256 [ 686.444782][ T9559] FAT-fs (loop4): Unrecognized mount option "coDepage=865" or missing value [ 686.948823][ T9559] loop4: detected capacity change from 0 to 32768 [ 686.975942][ T9559] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 686.996037][ T9559] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 687.012418][ T9559] BTRFS info (device loop4): turning off barriers [ 687.024059][ T9559] BTRFS info (device loop4): setting nodatasum [ 687.030296][ T9559] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 687.050784][ T9559] BTRFS info (device loop4): use zstd compression, level 3 [ 687.069549][ T9559] BTRFS info (device loop4): using free space tree [ 687.104022][ T4318] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 687.161173][ T6167] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 687.183927][ T6167] em28xx 2-1:0.89: board has no eeprom [ 687.253892][ T6167] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 687.266347][ T6167] em28xx 2-1:0.89: analog set to bulk mode. [ 687.288965][ T6165] em28xx 2-1:0.89: Registering V4L2 extension [ 687.302248][ T6167] usb 2-1: USB disconnect, device number 16 [ 687.316784][ T4318] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 687.331641][ T6167] em28xx 2-1:0.89: Disconnecting em28xx [ 687.351623][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.376570][ T4318] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 687.390617][ T4318] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 687.549825][ T4318] usb 3-1: Manufacturer: syz [ 687.556294][ T4318] usb 3-1: config 0 descriptor?? [ 687.691175][ T9591] hugetlbfs: Bad value for 'size' [ 688.301572][ T6165] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 688.317379][ T4268] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 688.339956][ T6165] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 688.400369][ T6165] em28xx 2-1:0.89: No AC97 audio processor [ 688.413921][ T4325] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 688.471617][ T6165] usb 2-1: Decoder not found [ 688.512081][ T6165] em28xx 2-1:0.89: failed to create media graph [ 688.524047][ T4318] rc_core: IR keymap rc-hauppauge not found [ 688.530130][ T4318] Registered IR keymap rc-empty [ 688.548571][ T4318] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 688.562724][ T6165] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 688.592730][ T6165] em28xx 2-1:0.89: Registering snapshot button... [ 688.610838][ T4318] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 688.643943][ T6165] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input19 [ 688.663967][ T4325] usb 4-1: Using ep0 maxpacket: 16 [ 688.692708][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 688.709295][ T4318] usb 3-1: USB disconnect, device number 14 [ 688.718194][ T6165] em28xx 2-1:0.89: Remote control support is not available for this card. [ 688.757293][ T6167] em28xx 2-1:0.89: Closing input extension [ 688.763154][ T6167] em28xx 2-1:0.89: Deregistering snapshot button [ 689.109714][ T6167] em28xx 2-1:0.89: Freeing device [ 690.524811][ T9614] loop4: detected capacity change from 0 to 128 [ 690.544939][ T6167] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 690.619768][ T9614] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 691.143913][ T6167] usb 3-1: Using ep0 maxpacket: 8 [ 691.152694][ T6167] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 691.222717][ T6167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.281586][ T6167] usb 3-1: Product: syz [ 691.400405][ T6167] usb 3-1: Manufacturer: syz [ 691.405584][ T6167] usb 3-1: SerialNumber: syz [ 691.420933][ T6167] usb 3-1: config 0 descriptor?? [ 692.168457][ T6167] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 692.208077][ T9616] overlayfs: missing 'lowerdir' [ 692.903862][ T4332] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 693.113891][ T4332] usb 5-1: Using ep0 maxpacket: 8 [ 693.123024][ T4332] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 693.173011][ T4332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.181411][ T4332] usb 5-1: Product: syz [ 693.201642][ T4332] usb 5-1: Manufacturer: syz [ 693.217745][ T4332] usb 5-1: SerialNumber: syz [ 693.262807][ T4332] usb 5-1: config 0 descriptor?? [ 693.319976][ T4325] usb 4-1: unable to get BOS descriptor or descriptor too short [ 693.404841][ T4325] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 693.429429][ T4325] usb 4-1: can't read configurations, error -71 [ 693.488931][ T4332] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 693.647839][ T6167] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 693.706309][ T6167] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 693.746097][ T6167] usb 3-1: media controller created [ 693.809842][ T6167] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 694.077336][ T6167] i2c i2c-1: Added multiplexed i2c bus 2 [ 694.188146][ T6167] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 694.438809][ T6167] usb 3-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 694.451090][ T6167] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 694.742008][ T6167] DVB: Unable to find symbol r820t_attach() [ 694.882858][ T6167] usb 3-1: USB disconnect, device number 15 [ 695.118267][ T4332] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 695.149724][ T4332] usb 5-1: USB disconnect, device number 12 [ 695.151795][ T9638] loop3: detected capacity change from 0 to 1024 [ 695.273958][ T6167] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 695.296408][ T9638] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1081: Invalid block bitmap block 0 in block_group 0 [ 695.401786][ T9638] Quota error (device loop3): write_blk: dquota write failed [ 695.476351][ T9638] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 695.506303][ T6167] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 695.537455][ T9638] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.1081: Failed to acquire dquot type 0 [ 695.549659][ T6167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.569811][ T6167] usb 3-1: config 0 descriptor?? [ 695.585966][ T9638] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.1081: Freeing blocks not in datazone - block = 0, count = 4096 [ 695.606734][ T6167] cp210x 3-1:0.0: cp210x converter detected [ 695.623217][ T9638] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1081: Invalid inode bitmap blk 0 in block_group 0 [ 695.639878][ T2956] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 695.689832][ T2956] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:6: Failed to release dquot type 0 [ 695.706132][ T9638] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 695.757458][ T9638] EXT4-fs (loop3): 1 orphan inode deleted [ 695.763282][ T9638] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 696.074616][ T6167] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 696.076357][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 696.153917][ T4325] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 696.353877][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 696.360928][ T4325] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 696.383443][ T4325] usb 5-1: config 0 has no interface number 0 [ 696.403423][ T4325] usb 5-1: config 0 interface 89 has no altsetting 0 [ 696.428656][ T4325] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 696.453577][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.475820][ T6167] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 696.513355][ T6167] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 696.532368][ T4325] usb 5-1: Product: syz [ 696.550500][ T4325] usb 5-1: Manufacturer: syz [ 696.571978][ T6167] usb 3-1: cp210x converter now attached to ttyUSB0 [ 696.578664][ T4325] usb 5-1: SerialNumber: syz [ 696.587794][ T6167] usb 3-1: USB disconnect, device number 16 [ 696.592676][ T4332] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 696.603148][ T4325] usb 5-1: config 0 descriptor?? [ 696.615003][ T4325] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 696.626838][ T6167] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 696.635994][ T6167] cp210x 3-1:0.0: device disconnected [ 696.642224][ T4325] em28xx 5-1:0.89: Video interface 89 found: bulk [ 696.813940][ T4332] usb 4-1: Using ep0 maxpacket: 32 [ 696.821214][ T4332] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 696.853434][ T4332] usb 4-1: config 0 has no interface number 0 [ 696.881483][ T4332] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 696.921802][ T4332] usb 4-1: config 0 interface 85 has no altsetting 0 [ 696.951531][ T4332] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 696.984150][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.048895][ T4332] usb 4-1: Product: syz [ 697.063917][ T4332] usb 4-1: Manufacturer: syz [ 697.068540][ T4332] usb 4-1: SerialNumber: syz [ 697.132125][ T4332] usb 4-1: config 0 descriptor?? [ 697.214592][ T4325] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 697.567858][ T4332] appletouch 4-1:0.85: Geyser mode initialized. [ 697.590925][ T4332] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input20 [ 697.786979][ T4332] usb 4-1: USB disconnect, device number 12 [ 697.837147][ T4325] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 697.860631][ T4332] appletouch 4-1:0.85: input: appletouch disconnected [ 697.871452][ T4325] em28xx 5-1:0.89: board has no eeprom [ 697.973986][ T4325] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 697.981252][ T4325] em28xx 5-1:0.89: analog set to bulk mode. [ 698.099384][ T6167] em28xx 5-1:0.89: Registering V4L2 extension [ 698.126931][ T4325] usb 5-1: USB disconnect, device number 13 [ 699.148593][ T4325] em28xx 5-1:0.89: Disconnecting em28xx [ 699.245729][ T6167] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 699.275551][ T6167] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 699.306400][ T6167] em28xx 5-1:0.89: No AC97 audio processor [ 699.348355][ T6167] usb 5-1: Decoder not found [ 699.357862][ T6167] em28xx 5-1:0.89: failed to create media graph [ 699.375776][ T9667] device syzkaller0 entered promiscuous mode [ 699.402752][ T6167] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 699.468428][ T6167] em28xx 5-1:0.89: Registering snapshot button... [ 699.572110][ T6167] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input21 [ 699.626511][ T6167] em28xx 5-1:0.89: Remote control support is not available for this card. [ 699.674009][ T4325] em28xx 5-1:0.89: Closing input extension [ 699.679961][ T4325] em28xx 5-1:0.89: Deregistering snapshot button [ 699.718739][ T4325] em28xx 5-1:0.89: Freeing device [ 700.337624][ T9678] loop4: detected capacity change from 0 to 4096 [ 701.543341][ T9678] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 701.554089][ T9678] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 701.608603][ T9679] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 702.233892][ T4332] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 702.443872][ T4332] usb 5-1: Using ep0 maxpacket: 16 [ 702.451250][ T4332] usb 5-1: config index 0 descriptor too short (expected 16370, got 36) [ 702.507273][ T4332] usb 5-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 702.524170][ T4332] usb 5-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 702.542738][ T4332] usb 5-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 702.579592][ T4332] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 702.593881][ T4373] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 702.618547][ T4332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.627132][ T4332] usb 5-1: Product: syz [ 702.632008][ T4332] usb 5-1: Manufacturer: syz [ 702.637078][ T4332] usb 5-1: SerialNumber: syz [ 702.689718][ T9689] loop0: detected capacity change from 0 to 256 [ 702.708540][ T9689] FAT-fs (loop0): Unrecognized mount option "coDepage=865" or missing value [ 702.823897][ T4373] usb 3-1: Using ep0 maxpacket: 8 [ 702.839019][ T4373] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 702.886825][ T4373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.919815][ T4373] usb 3-1: Product: syz [ 702.940104][ T4373] usb 3-1: Manufacturer: syz [ 702.950324][ T4373] usb 3-1: SerialNumber: syz [ 702.976530][ T4373] usb 3-1: config 0 descriptor?? [ 703.204131][ T4373] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 703.339020][ T9689] loop0: detected capacity change from 0 to 32768 [ 703.373141][ T9689] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1095 (9689) [ 703.460818][ T9689] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 703.515881][ T9689] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 703.540318][ T9689] BTRFS info (device loop0): turning off barriers [ 703.547952][ T9689] BTRFS info (device loop0): setting nodatasum [ 703.571953][ T9689] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 703.605468][ T9689] BTRFS info (device loop0): use zstd compression, level 3 [ 703.624677][ T9689] BTRFS info (device loop0): using free space tree [ 704.152846][ T9716] hugetlbfs: Bad value for 'size' [ 704.553674][ T4267] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 704.842652][ T4373] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 704.868126][ T4373] usb 3-1: USB disconnect, device number 17 [ 705.000542][ T6453] usb 5-1: USB disconnect, device number 14 [ 705.262633][ T9722] loop4: detected capacity change from 0 to 1024 [ 705.283302][ T9722] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 706.399848][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 706.533857][ T6167] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 706.593936][ T9718] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 706.606133][ T6453] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 706.752770][ T9740] loop4: detected capacity change from 0 to 4096 [ 706.829679][ T9740] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 706.840302][ T9740] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 707.494058][ T9741] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 707.511370][ T6453] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 707.537321][ T6453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.593681][ T6453] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 707.620405][ T6453] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 707.653868][ T9718] usb 3-1: Using ep0 maxpacket: 8 [ 707.688269][ T6453] usb 1-1: Manufacturer: syz [ 707.693891][ T6167] usb 2-1: Using ep0 maxpacket: 16 [ 707.709417][ T6453] usb 1-1: config 0 descriptor?? [ 707.709530][ T9718] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 707.763052][ T9718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.799266][ T9718] usb 3-1: Product: syz [ 707.819592][ T9718] usb 3-1: Manufacturer: syz [ 707.832169][ T9718] usb 3-1: SerialNumber: syz [ 707.863663][ T9718] usb 3-1: config 0 descriptor?? [ 707.994546][ T6453] rc_core: IR keymap rc-hauppauge not found [ 708.000751][ T6453] Registered IR keymap rc-empty [ 708.043537][ T6453] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 708.094179][ T9718] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 708.119104][ T6453] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22 [ 708.150567][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 708.178432][ T6453] usb 1-1: USB disconnect, device number 15 [ 708.293863][ T4332] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 708.495388][ T4332] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 708.510172][ T4332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.584451][ T4332] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 708.641004][ T4332] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 708.671884][ T4332] usb 5-1: Manufacturer: syz [ 708.685549][ T4332] usb 5-1: config 0 descriptor?? [ 708.832289][ T9756] loop0: detected capacity change from 0 to 128 [ 708.844034][ T4332] rc_core: IR keymap rc-hauppauge not found [ 708.858270][ T4332] Registered IR keymap rc-empty [ 708.868774][ T9756] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 708.882918][ T4332] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 708.901915][ T4332] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input23 [ 708.920390][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 709.517925][ T9718] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 709.659959][ T9718] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 709.672653][ T9760] overlayfs: missing 'lowerdir' [ 709.710707][ T9718] usb 3-1: media controller created [ 709.776783][ T4332] usb 5-1: USB disconnect, device number 15 [ 709.863541][ T9718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 710.078682][ T9718] i2c i2c-1: Added multiplexed i2c bus 2 [ 710.090209][ T9718] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 710.116580][ T9718] usb 3-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 710.127447][ T9718] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 710.220893][ T9718] DVB: Unable to find symbol r820t_attach() [ 710.297427][ T4257] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 710.483946][ T4257] usb 1-1: Using ep0 maxpacket: 32 [ 710.503734][ T4257] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 710.545288][ T4257] usb 1-1: config 0 has no interface number 0 [ 710.551409][ T4257] usb 1-1: config 0 interface 89 has no altsetting 0 [ 710.588828][ T4257] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 710.608871][ T6167] usb 2-1: unable to get BOS descriptor or descriptor too short [ 710.622032][ T6167] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 710.657722][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.674325][ T6167] usb 2-1: can't read configurations, error -71 [ 710.680717][ T4257] usb 1-1: Product: syz [ 710.687326][ T4257] usb 1-1: Manufacturer: syz [ 710.692014][ T4257] usb 1-1: SerialNumber: syz [ 710.711173][ T4257] usb 1-1: config 0 descriptor?? [ 710.732798][ T4257] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 710.764606][ T4257] em28xx 1-1:0.89: Video interface 89 found: bulk [ 711.043938][ T9718] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 711.053897][ T6167] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 711.277321][ T9718] usb 5-1: Using ep0 maxpacket: 16 [ 711.285997][ T6167] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.333108][ T4257] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 711.370095][ T6167] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 711.388118][ T6167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.617443][ T4373] usb 3-1: USB disconnect, device number 18 [ 712.630632][ T6167] usb 2-1: config 0 descriptor?? [ 712.649184][ T6167] pwc: Askey VC010 type 2 USB webcam detected. [ 712.938124][ T4257] em28xx 1-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 712.948394][ T4257] em28xx 1-1:0.89: board has no eeprom [ 713.049496][ T6167] pwc: recv_control_msg error -32 req 02 val 2b00 [ 713.063154][ T6167] pwc: recv_control_msg error -32 req 02 val 2700 [ 713.073870][ T6453] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 713.087296][ T6167] pwc: recv_control_msg error -32 req 02 val 2c00 [ 713.103743][ T6167] pwc: recv_control_msg error -32 req 04 val 1000 [ 713.114138][ T6167] pwc: recv_control_msg error -32 req 04 val 1300 [ 713.123241][ T6167] pwc: recv_control_msg error -32 req 04 val 1400 [ 713.135053][ T6167] pwc: recv_control_msg error -32 req 02 val 2000 [ 713.142712][ T6167] pwc: recv_control_msg error -32 req 02 val 2100 [ 713.150026][ T6167] pwc: recv_control_msg error -32 req 04 val 1500 [ 713.157333][ T6167] pwc: recv_control_msg error -32 req 02 val 2500 [ 713.165348][ T6167] pwc: recv_control_msg error -32 req 02 val 2400 [ 713.174704][ T4373] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 713.184105][ T6167] pwc: recv_control_msg error -32 req 02 val 2600 [ 713.191960][ T6167] pwc: recv_control_msg error -71 req 02 val 2900 [ 713.199202][ T6167] pwc: recv_control_msg error -71 req 02 val 2800 [ 713.208828][ T6167] pwc: recv_control_msg error -71 req 04 val 1100 [ 713.216301][ T6167] pwc: recv_control_msg error -71 req 04 val 1200 [ 713.234456][ T6167] pwc: Registered as video103. [ 713.240829][ T6167] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 713.254773][ T6167] usb 2-1: USB disconnect, device number 18 [ 713.267766][ T6453] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.285481][ T6453] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 713.319324][ T6453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.379956][ T6453] usb 4-1: config 0 descriptor?? [ 713.385055][ T4373] usb 3-1: Using ep0 maxpacket: 8 [ 713.396364][ T4373] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 713.412926][ T4373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.414235][ T4257] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 713.414343][ T6453] pwc: Askey VC010 type 2 USB webcam detected. [ 713.427154][ T4257] em28xx 1-1:0.89: analog set to bulk mode. [ 713.463080][ T4257] usb 1-1: USB disconnect, device number 16 [ 713.473583][ T4257] em28xx 1-1:0.89: Disconnecting em28xx [ 713.479653][ T9599] em28xx 1-1:0.89: Registering V4L2 extension [ 713.490633][ T4373] usb 3-1: Product: syz [ 713.504107][ T4373] usb 3-1: Manufacturer: syz [ 713.541845][ T4373] usb 3-1: SerialNumber: syz [ 713.596077][ T9599] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 713.603408][ T9599] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 713.614011][ T4373] usb 3-1: config 0 descriptor?? [ 713.625611][ T9599] em28xx 1-1:0.89: No AC97 audio processor [ 713.644333][ T9599] usb 1-1: Decoder not found [ 713.649034][ T9599] em28xx 1-1:0.89: failed to create media graph [ 713.679126][ T9599] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 713.741380][ T9599] em28xx 1-1:0.89: Registering snapshot button... [ 713.827249][ T6453] pwc: recv_control_msg error -32 req 02 val 2b00 [ 713.833684][ T9599] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input25 [ 713.845081][ T4373] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 713.879047][ T6453] pwc: recv_control_msg error -32 req 02 val 2700 [ 713.891249][ T9599] em28xx 1-1:0.89: Remote control support is not available for this card. [ 713.901249][ T6453] pwc: recv_control_msg error -32 req 02 val 2c00 [ 713.909779][ T4257] em28xx 1-1:0.89: Closing input extension [ 713.921237][ T4257] em28xx 1-1:0.89: Deregistering snapshot button [ 713.942640][ T4257] em28xx 1-1:0.89: Freeing device [ 714.158612][ T9786] loop1: detected capacity change from 0 to 40427 [ 714.175345][ T6453] pwc: recv_control_msg error -32 req 04 val 1000 [ 714.185420][ T6453] pwc: recv_control_msg error -32 req 04 val 1300 [ 714.191946][ T9786] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 714.199774][ T9786] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 714.209599][ T9786] F2FS-fs (loop1): invalid crc value [ 714.223884][ T6453] pwc: recv_control_msg error -32 req 04 val 1400 [ 714.243963][ T6453] pwc: recv_control_msg error -32 req 02 val 2000 [ 714.264870][ T6453] pwc: recv_control_msg error -32 req 02 val 2100 [ 714.277909][ T9786] F2FS-fs (loop1): Found nat_bits in checkpoint [ 714.322600][ T6453] pwc: recv_control_msg error -32 req 04 val 1500 [ 714.335886][ T6453] pwc: recv_control_msg error -32 req 02 val 2500 [ 714.345058][ T9786] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 714.352184][ T9786] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 714.375549][ T6453] pwc: recv_control_msg error -32 req 02 val 2400 [ 714.585569][ T6453] pwc: recv_control_msg error -71 req 02 val 2900 [ 714.602145][ T6453] pwc: recv_control_msg error -71 req 02 val 2800 [ 714.620943][ T6453] pwc: recv_control_msg error -71 req 04 val 1100 [ 714.653674][ T6453] pwc: recv_control_msg error -71 req 04 val 1200 [ 714.684408][ T6453] pwc: Registered as video103. [ 714.710256][ T6453] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 714.752505][ T6453] usb 4-1: USB disconnect, device number 13 [ 714.794100][ T4257] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 714.928389][ T9718] usb 5-1: unable to get BOS descriptor or descriptor too short [ 714.956666][ T9718] usb 5-1: no configurations [ 714.961291][ T9718] usb 5-1: can't read configurations, error -22 [ 715.010253][ T4257] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.040879][ T4257] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 715.098834][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.148574][ T4257] usb 1-1: config 0 descriptor?? [ 715.172565][ T4257] pwc: Askey VC010 type 2 USB webcam detected. [ 715.393643][ T4373] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 715.416011][ T4373] usb 3-1: USB disconnect, device number 19 [ 715.423973][ T9718] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 715.587802][ T4257] pwc: recv_control_msg error -32 req 02 val 2b00 [ 715.598882][ T4257] pwc: recv_control_msg error -32 req 02 val 2700 [ 715.614385][ T9718] usb 5-1: Using ep0 maxpacket: 32 [ 715.623977][ T4257] pwc: recv_control_msg error -32 req 02 val 2c00 [ 715.631940][ T9718] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 715.650998][ T9718] usb 5-1: config 0 has no interface number 0 [ 715.657873][ T4257] pwc: recv_control_msg error -32 req 04 val 1000 [ 715.674092][ T9718] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 715.687079][ T4257] pwc: recv_control_msg error -32 req 04 val 1300 [ 715.703974][ T9718] usb 5-1: config 0 interface 85 has no altsetting 0 [ 715.711397][ T4257] pwc: recv_control_msg error -32 req 04 val 1400 [ 715.721927][ T4257] pwc: recv_control_msg error -32 req 02 val 2000 [ 715.740934][ T4257] pwc: recv_control_msg error -32 req 02 val 2100 [ 715.749785][ T9718] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 715.772159][ T4257] pwc: recv_control_msg error -32 req 04 val 1500 [ 715.778890][ T9718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.804470][ T9718] usb 5-1: Product: syz [ 715.809309][ T4257] pwc: recv_control_msg error -32 req 02 val 2500 [ 715.816097][ T9718] usb 5-1: Manufacturer: syz [ 715.820967][ T9718] usb 5-1: SerialNumber: syz [ 715.826420][ T4257] pwc: recv_control_msg error -32 req 02 val 2400 [ 715.845690][ T9718] usb 5-1: config 0 descriptor?? [ 716.038956][ T4257] pwc: recv_control_msg error -71 req 02 val 2900 [ 716.060896][ T4257] pwc: recv_control_msg error -71 req 02 val 2800 [ 716.102479][ T4257] pwc: recv_control_msg error -71 req 04 val 1100 [ 716.129831][ T4257] pwc: recv_control_msg error -71 req 04 val 1200 [ 716.249633][ T4257] pwc: Registered as video103. [ 716.273916][ T9718] appletouch 5-1:0.85: Geyser mode initialized. [ 716.295023][ T9718] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input27 [ 716.360078][ T4257] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28 [ 716.411027][ T4257] usb 1-1: USB disconnect, device number 17 [ 716.543588][ T9718] usb 5-1: USB disconnect, device number 17 [ 716.568556][ T9718] appletouch 5-1:0.85: input: appletouch disconnected [ 716.764047][ T4433] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 716.824752][ T9822] loop6: detected capacity change from 0 to 1 [ 716.862657][ T9822] Dev loop6: unable to read RDB block 1 [ 716.877881][ T9822] loop6: unable to read partition table [ 716.890611][ T9822] loop6: partition table beyond EOD, truncated [ 716.909520][ T9822] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 716.963947][ T4433] usb 3-1: Using ep0 maxpacket: 32 [ 716.971457][ T4433] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 717.003865][ T4433] usb 3-1: config 0 has no interface number 0 [ 717.030038][ T4433] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 717.084194][ T4433] usb 3-1: config 0 interface 85 has no altsetting 0 [ 717.094039][ T4433] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 717.126327][ T4433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.155153][ T4433] usb 3-1: Product: syz [ 717.159344][ T4433] usb 3-1: Manufacturer: syz [ 717.177186][ T4433] usb 3-1: SerialNumber: syz [ 717.191180][ T9825] loop6: detected capacity change from 0 to 1 [ 717.205958][ T4433] usb 3-1: config 0 descriptor?? [ 717.229876][ T9825] Dev loop6: unable to read RDB block 1 [ 717.254040][ T9825] loop6: unable to read partition table [ 717.272420][ T9825] loop6: partition table beyond EOD, truncated [ 717.301249][ T9825] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 717.679333][ T4433] appletouch 3-1:0.85: Geyser mode initialized. [ 717.688611][ T4433] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input29 [ 717.761362][ T4433] libceph: connect (1)[c::]:6789 error -101 [ 717.793938][ T9833] ceph: No mds server is up or the cluster is laggy [ 717.800699][ T4433] libceph: mon0 (1)[c::]:6789 connect error [ 717.913322][ T4433] usb 3-1: USB disconnect, device number 20 [ 717.927987][ T4433] appletouch 3-1:0.85: input: appletouch disconnected [ 719.013879][ T6167] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 719.206552][ T6167] usb 3-1: Using ep0 maxpacket: 16 [ 719.386520][ T9851] loop1: detected capacity change from 0 to 40427 [ 719.402371][ T9851] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 719.410269][ T9851] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 719.420078][ T9851] F2FS-fs (loop1): invalid crc value [ 719.455517][ T9851] F2FS-fs (loop1): Found nat_bits in checkpoint [ 719.517960][ T9851] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 719.525102][ T9851] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 720.453912][ T9599] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 720.643966][ T9599] usb 1-1: Using ep0 maxpacket: 32 [ 720.650938][ T9599] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 720.668009][ T9599] usb 1-1: config 0 has no interface number 0 [ 720.678837][ T9599] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 720.723931][ T9599] usb 1-1: config 0 interface 85 has no altsetting 0 [ 720.751522][ T9599] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 720.781512][ T9599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.812824][ T9599] usb 1-1: Product: syz [ 720.830278][ T9599] usb 1-1: Manufacturer: syz [ 720.847397][ T9599] usb 1-1: SerialNumber: syz [ 720.867508][ T9599] usb 1-1: config 0 descriptor?? [ 720.895039][ T4257] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 721.084076][ T4257] usb 5-1: Using ep0 maxpacket: 8 [ 721.100231][ T4257] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 721.133461][ T4257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.159243][ T4257] usb 5-1: Product: syz [ 721.172518][ T4257] usb 5-1: Manufacturer: syz [ 721.192326][ T4257] usb 5-1: SerialNumber: syz [ 721.213457][ T4257] usb 5-1: config 0 descriptor?? [ 721.295450][ T9599] appletouch 1-1:0.85: Geyser mode initialized. [ 721.306375][ T9599] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input30 [ 721.431758][ T4257] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 721.520499][ T9599] usb 1-1: USB disconnect, device number 18 [ 721.550513][ T9599] appletouch 1-1:0.85: input: appletouch disconnected [ 722.431867][ T6167] usb 3-1: unable to get BOS descriptor or descriptor too short [ 722.490867][ T6167] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 722.503887][ T9599] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 722.521877][ T6167] usb 3-1: can't read configurations, error -71 [ 722.526939][ T9871] loop2: detected capacity change from 0 to 128 [ 722.579063][ T9871] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 722.844975][ T4318] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 723.046623][ T9599] usb 1-1: Using ep0 maxpacket: 16 [ 723.075250][ T9599] usb 1-1: config index 0 descriptor too short (expected 16370, got 36) [ 723.089977][ T9599] usb 1-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 723.108244][ T9599] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 723.118625][ T9599] usb 1-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 723.182440][ T9599] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 723.201948][ T9599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.223512][ T9599] usb 1-1: Product: syz [ 723.248430][ T9599] usb 1-1: Manufacturer: syz [ 723.264174][ T9599] usb 1-1: SerialNumber: syz [ 723.290944][ T4257] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 723.299646][ T4318] usb 2-1: Using ep0 maxpacket: 8 [ 723.301016][ T9873] loop3: detected capacity change from 0 to 256 [ 723.311769][ T9873] FAT-fs (loop3): Unrecognized mount option "coDepage=865" or missing value [ 723.336574][ T4318] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 723.352367][ T4257] usb 5-1: USB disconnect, device number 18 [ 723.374201][ T4318] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 723.978733][ T4318] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 723.991692][ T4318] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 724.005399][ T4318] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 724.015205][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.220699][ T9873] loop3: detected capacity change from 0 to 32768 [ 724.232920][ T4318] usb 2-1: GET_CAPABILITIES returned 0 [ 724.242566][ T4318] usbtmc 2-1:16.0: can't read capabilities [ 724.251323][ T9873] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1136 (9873) [ 724.368735][ T9873] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 724.382542][ T9873] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 724.394494][ T9873] BTRFS info (device loop3): turning off barriers [ 724.401025][ T9873] BTRFS info (device loop3): setting nodatasum [ 724.407700][ T9873] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 724.417339][ T9873] BTRFS info (device loop3): use zstd compression, level 3 [ 724.425236][ T9873] BTRFS info (device loop3): using free space tree [ 724.630777][ T9887] vxfs: WRONG superblock magic 00000000 at 1 [ 724.637590][ T9887] vxfs: WRONG superblock magic 00000000 at 8 [ 724.643669][ T9887] vxfs: can't find superblock. [ 724.829005][ T6453] libceph: connect (1)[c::]:6789 error -101 [ 724.863509][ T6453] libceph: mon0 (1)[c::]:6789 connect error [ 725.104656][ T9884] ceph: No mds server is up or the cluster is laggy [ 725.144353][ T4257] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 725.239702][ T6453] usb 2-1: USB disconnect, device number 19 [ 725.504335][ T4257] usb 5-1: Using ep0 maxpacket: 32 [ 725.515563][ T4257] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 725.730651][ T4318] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 725.915929][ T4257] usb 5-1: config 0 has no interface number 0 [ 725.922323][ T4257] usb 5-1: config 0 interface 89 has no altsetting 0 [ 726.195149][ T4257] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 726.204445][ T4318] usb 3-1: Using ep0 maxpacket: 32 [ 726.212503][ T4318] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 726.225372][ T4318] usb 3-1: config 0 has no interface number 0 [ 726.232058][ T4257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.241731][ T4318] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 726.253740][ T4257] usb 5-1: Product: syz [ 726.258642][ T4269] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 726.258843][ T4257] usb 5-1: Manufacturer: syz [ 726.298207][ T4318] usb 3-1: config 0 interface 85 has no altsetting 0 [ 726.328942][ T4318] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 726.343496][ T4257] usb 5-1: SerialNumber: syz [ 726.363478][ T4257] usb 5-1: config 0 descriptor?? [ 726.389127][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.392321][ T6453] usb 1-1: USB disconnect, device number 19 [ 726.418027][ T4257] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 726.435587][ T4318] usb 3-1: Product: syz [ 726.455571][ T4318] usb 3-1: Manufacturer: syz [ 726.467932][ T4257] em28xx 5-1:0.89: Video interface 89 found: bulk [ 726.484365][ T4318] usb 3-1: SerialNumber: syz [ 726.504655][ T4318] usb 3-1: config 0 descriptor?? [ 726.526775][ T9793] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (9793) [ 726.816887][ T9918] loop3: detected capacity change from 0 to 1024 [ 726.843342][ T9918] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1141: Invalid block bitmap block 0 in block_group 0 [ 726.863591][ T9918] Quota error (device loop3): write_blk: dquota write failed [ 726.871608][ T9918] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 726.895518][ T9918] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.1141: Failed to acquire dquot type 0 [ 726.941451][ T4318] appletouch 3-1:0.85: Geyser mode initialized. [ 726.961366][ T4318] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input31 [ 726.988445][ T9918] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.1141: Freeing blocks not in datazone - block = 0, count = 4096 [ 726.988897][ T9918] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1141: Invalid inode bitmap blk 0 in block_group 0 [ 726.989093][ T9918] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 726.989402][ T9918] EXT4-fs (loop3): 1 orphan inode deleted [ 726.989429][ T9918] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 727.049257][ T4257] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 727.050022][ T4413] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 727.050162][ T4413] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:7: Failed to release dquot type 0 [ 727.173717][ T4318] usb 3-1: USB disconnect, device number 23 [ 727.184923][ T4318] appletouch 3-1:0.85: input: appletouch disconnected [ 727.443919][ T4428] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 727.643926][ T4428] usb 2-1: Using ep0 maxpacket: 32 [ 727.654988][ T4428] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 727.656367][ T4257] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 727.683543][ T4428] usb 2-1: config 0 has no interface number 0 [ 727.693699][ T4428] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 727.709365][ T4257] em28xx 5-1:0.89: board has no eeprom [ 727.719520][ T4428] usb 2-1: config 0 interface 85 has no altsetting 0 [ 727.739010][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 727.739203][ T4428] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 727.754177][ T4428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.762219][ T4428] usb 2-1: Product: syz [ 727.766722][ T4428] usb 2-1: Manufacturer: syz [ 727.771798][ T4428] usb 2-1: SerialNumber: syz [ 727.781680][ T4428] usb 2-1: config 0 descriptor?? [ 727.793868][ T4257] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 727.801149][ T4257] em28xx 5-1:0.89: analog set to bulk mode. [ 727.818666][ T4318] em28xx 5-1:0.89: Registering V4L2 extension [ 727.836830][ T4257] usb 5-1: USB disconnect, device number 19 [ 727.843402][ T4257] em28xx 5-1:0.89: Disconnecting em28xx [ 727.894399][ T9929] loop2: detected capacity change from 0 to 128 [ 727.937393][ T9929] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 728.008408][ T4318] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 728.028267][ T4318] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 728.045854][ T4318] em28xx 5-1:0.89: No AC97 audio processor [ 728.063712][ T4318] usb 5-1: Decoder not found [ 728.068471][ T4318] em28xx 5-1:0.89: failed to create media graph [ 728.074921][ T4318] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 728.155927][ T4318] em28xx 5-1:0.89: Registering snapshot button... [ 728.196987][ T4318] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input33 [ 728.232819][ T4318] em28xx 5-1:0.89: Remote control support is not available for this card. [ 728.293875][ T4436] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 728.313612][ T4257] em28xx 5-1:0.89: Closing input extension [ 728.320235][ T4257] em28xx 5-1:0.89: Deregistering snapshot button [ 728.516035][ T9938] vxfs: WRONG superblock magic 00000000 at 1 [ 728.523103][ T9938] vxfs: WRONG superblock magic 00000000 at 8 [ 728.529307][ T9938] vxfs: can't find superblock. [ 728.632406][ T4436] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.822931][ T4436] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 728.918257][ T9936] ceph: No mds server is up or the cluster is laggy [ 728.925427][ T4436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.933589][ T4428] appletouch 2-1:0.85: Geyser mode initialized. [ 728.935238][ T4257] em28xx 5-1:0.89: Freeing device [ 728.942050][ T4428] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input32 [ 728.955408][ T4436] usb 4-1: config 0 descriptor?? [ 728.964075][ T4436] pwc: Askey VC010 type 2 USB webcam detected. [ 728.975333][ T127] libceph: connect (1)[c::]:6789 error -101 [ 728.981377][ T127] libceph: mon0 (1)[c::]:6789 connect error [ 729.238282][ T4318] usb 2-1: USB disconnect, device number 20 [ 729.337060][ T4318] appletouch 2-1:0.85: input: appletouch disconnected [ 729.432763][ T4436] pwc: recv_control_msg error -32 req 02 val 2b00 [ 729.450481][ T4436] pwc: recv_control_msg error -32 req 02 val 2700 [ 729.723885][ T9718] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 730.441355][ T4436] pwc: recv_control_msg error -32 req 02 val 2c00 [ 730.474011][ T4436] pwc: recv_control_msg error -32 req 04 val 1000 [ 730.513339][ T4436] pwc: recv_control_msg error -32 req 04 val 1300 [ 730.541235][ T4436] pwc: recv_control_msg error -32 req 04 val 1400 [ 730.553508][ T4436] pwc: recv_control_msg error -32 req 02 val 2000 [ 730.565861][ T4436] pwc: recv_control_msg error -32 req 02 val 2100 [ 730.673927][ T9718] usb 5-1: Using ep0 maxpacket: 16 [ 730.716387][ T4436] pwc: recv_control_msg error -32 req 04 val 1500 [ 730.723488][ T4436] pwc: recv_control_msg error -32 req 02 val 2500 [ 730.738787][ T4436] pwc: recv_control_msg error -32 req 02 val 2400 [ 731.605666][ T4436] pwc: recv_control_msg error -71 req 02 val 2600 [ 731.612535][ T4436] pwc: recv_control_msg error -71 req 02 val 2900 [ 731.626307][ T4436] pwc: recv_control_msg error -71 req 02 val 2800 [ 731.646418][ T4436] pwc: recv_control_msg error -71 req 04 val 1100 [ 731.663513][ T4436] pwc: recv_control_msg error -71 req 04 val 1200 [ 731.689008][ T4436] pwc: Registered as video103. [ 731.712659][ T4436] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 731.811301][ T9967] loop0: detected capacity change from 0 to 2048 [ 731.831257][ T4436] usb 4-1: USB disconnect, device number 14 [ 731.888161][ T9967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 733.072324][ T9989] Bluetooth: MGMT ver 1.22 [ 733.102848][ T9986] loop0: detected capacity change from 0 to 4096 [ 733.137467][ T9986] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 733.948663][T10007] loop3: detected capacity change from 0 to 128 [ 734.352668][T10010] loop0: detected capacity change from 0 to 764 [ 735.272240][T10006] sctp: failed to load transform for md5: -2 [ 735.284807][T10007] EXT4-fs (loop3): Test dummy encryption mode enabled [ 735.334830][T10007] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 735.365585][T10007] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 735.685367][T10005] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 735.722294][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 735.814141][ T9718] usb 5-1: unable to get BOS descriptor or descriptor too short [ 735.833945][ T9718] usb 5-1: no configurations [ 735.865254][ T9718] usb 5-1: can't read configurations, error -22 [ 735.924544][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030fad000: rx timeout, send abort [ 735.936467][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888030fad000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 736.089529][T10036] loop4: detected capacity change from 0 to 2048 [ 736.140975][T10036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 736.454581][T10040] loop3: detected capacity change from 0 to 64 [ 736.517556][T10042] loop4: detected capacity change from 0 to 512 [ 736.538560][T10038] capability: warning: `syz.3.1168' uses deprecated v2 capabilities in a way that may be insecure [ 736.546275][T10042] EXT4-fs: Ignoring removed bh option [ 736.608300][T10042] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 736.665186][T10042] EXT4-fs (loop4): 1 truncate cleaned up [ 736.680343][T10042] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 736.695380][T10045] loop2: detected capacity change from 0 to 64 [ 736.804389][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 738.761841][T10071] loop3: detected capacity change from 0 to 1024 [ 738.865933][T10074] loop2: detected capacity change from 0 to 512 [ 738.929573][T10074] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1179: casefold flag without casefold feature [ 739.193931][T10074] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1179: couldn't read orphan inode 15 (err -117) [ 739.224812][T10074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 739.269100][ T5258] hfsplus: b-tree write err: -5, ino 4 [ 739.654704][T10085] Driver unsupported XDP return value 0 on prog (id 243) dev N/A, expect packet loss! [ 739.863341][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 739.906622][ T4381] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 740.115592][ T4381] usb 1-1: Using ep0 maxpacket: 8 [ 740.122488][ T4381] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 740.139444][ T4381] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 740.145803][T10090] loop1: detected capacity change from 0 to 40427 [ 740.151636][ T4381] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 740.174022][T10090] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 740.181778][T10090] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 740.196802][T10090] F2FS-fs (loop1): invalid crc value [ 740.219082][ T4381] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 740.229885][T10090] F2FS-fs (loop1): Found nat_bits in checkpoint [ 740.234155][ T4381] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.251119][ T4436] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 740.268077][ T4381] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 740.277517][ T4381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.277988][T10090] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 740.292716][T10090] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 740.443865][ T4436] usb 5-1: Using ep0 maxpacket: 16 [ 740.453412][ T4436] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 740.525275][ T4436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.536276][ T4381] usb 1-1: usb_control_msg returned -32 [ 740.541894][ T4381] usbtmc 1-1:16.0: can't read capabilities [ 740.830494][ T4271] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 740.841950][ T4271] Bluetooth: hci3: Injecting HCI hardware error event [ 740.864699][ T4271] Bluetooth: hci3: hardware error 0x00 [ 741.205588][ T4436] usb 5-1: Product: syz [ 741.209870][ T4436] usb 5-1: Manufacturer: syz [ 741.211933][ T26] audit: type=1800 audit(1754791412.541:2): pid=10112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1184" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 741.221179][ T4436] usb 5-1: SerialNumber: syz [ 741.334136][ T4436] usb 5-1: config 0 descriptor?? [ 741.750058][ T4436] dvb_usb_dtv5100: probe of 5-1:0.0 failed with error -71 [ 741.769466][ T4436] usb 5-1: USB disconnect, device number 22 [ 741.950441][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1191'. [ 742.102908][T10120] loop3: detected capacity change from 0 to 32768 [ 742.252341][T10120] XFS (loop3): Mounting V5 Filesystem [ 742.856672][T10120] XFS (loop3): Ending clean mount [ 742.914806][T10120] XFS (loop3): Quotacheck needed: Please wait. [ 742.956785][ T4257] usb 1-1: USB disconnect, device number 20 [ 743.025431][T10120] XFS (loop3): Quotacheck: Done. [ 743.160015][ T4269] XFS (loop3): Unmounting Filesystem [ 743.407111][ T4271] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 743.562011][T10154] loop2: detected capacity change from 0 to 128 [ 744.263350][T10170] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 744.304128][T10170] overlayfs: missing 'lowerdir' [ 744.367225][ T4257] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 744.398763][T10175] loop0: detected capacity change from 0 to 64 [ 744.519376][T10177] netlink: 'syz.3.1199': attribute type 3 has an invalid length. [ 744.528792][T10177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1199'. [ 745.143872][ T4257] usb 3-1: Using ep0 maxpacket: 8 [ 745.577407][ T4257] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 745.610576][ T4257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.630850][ T4257] usb 3-1: Product: syz [ 745.636491][ T4257] usb 3-1: Manufacturer: syz [ 745.654405][ T4257] usb 3-1: SerialNumber: syz [ 745.675124][T10183] loop3: detected capacity change from 0 to 512 [ 745.683467][ T4257] usb 3-1: config 0 descriptor?? [ 745.703758][T10183] EXT4-fs: Ignoring removed mblk_io_submit option [ 745.725515][T10183] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 745.726049][T10159] loop1: detected capacity change from 0 to 32768 [ 745.751052][T10183] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 745.805709][T10183] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 745.831914][T10183] EXT4-fs (loop3): orphan cleanup on readonly fs [ 745.845766][T10183] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1208: Invalid block bitmap block 0 in block_group 0 [ 745.862986][T10183] EXT4-fs (loop3): Remounting filesystem read-only [ 745.870177][T10183] Quota error (device loop3): write_blk: dquota write failed [ 745.884682][T10183] Quota error (device loop3): write_blk: dquota write failed [ 745.896484][ T4257] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 745.910124][T10159] XFS (loop1): Mounting V5 Filesystem [ 745.953721][T10183] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 746.010534][T10183] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.1208: Failed to acquire dquot type 1 [ 746.041150][T10159] XFS (loop1): Ending clean mount [ 746.154550][T10183] EXT4-fs (loop3): Remounting filesystem read-only [ 746.184126][T10183] Quota error (device loop3): write_blk: dquota write failed [ 746.215619][T10183] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 746.226743][ T4270] XFS (loop1): Unmounting Filesystem [ 746.274271][T10183] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.1208: Failed to acquire dquot type 1 [ 746.928399][ T4257] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 746.939567][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.946266][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.312223][T10202] loop0: detected capacity change from 0 to 32768 [ 747.381995][T10183] EXT4-fs (loop3): Remounting filesystem read-only [ 747.706518][ T4257] usb 3-1: USB disconnect, device number 24 [ 747.732948][T10202] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 747.877520][T10183] Quota error (device loop3): write_blk: dquota write failed [ 748.110931][T10183] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 748.183951][T10183] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.1208: Failed to acquire dquot type 1 [ 748.250106][T10183] EXT4-fs (loop3): Remounting filesystem read-only [ 748.277075][T10183] EXT4-fs (loop3): 1 orphan inode deleted [ 748.322859][T10183] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 748.986746][T10215] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 749.135815][ T4267] ocfs2: Unmounting device (7,0) on (node local) [ 749.518136][T10222] loop2: detected capacity change from 0 to 7 [ 749.541722][T10222] Dev loop2: unable to read RDB block 7 [ 749.685215][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 749.703953][T10222] loop2: unable to read partition table [ 749.764115][T10222] loop2: partition table beyond EOD, truncated [ 750.443981][T10222] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 751.039515][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1224'. [ 751.100080][T10245] loop3: detected capacity change from 0 to 2048 [ 751.212261][T10249] trusted_key: encrypted_key: insufficient parameters specified [ 751.235905][ T9793] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 751.617144][T10245] loop3: detected capacity change from 0 to 512 [ 751.625330][T10245] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 751.688437][T10245] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 751.700394][T10245] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.769783][T10245] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 751.797138][T10245] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 751.813665][T10245] EXT4-fs (loop3): This should not happen!! Data will be lost [ 751.813665][T10245] [ 751.827756][T10245] EXT4-fs (loop3): Total free blocks count 0 [ 751.835425][T10245] EXT4-fs (loop3): Free/Dirty block details [ 751.841474][T10245] EXT4-fs (loop3): free_blocks=39626 [ 751.857828][T10245] EXT4-fs (loop3): dirty_blocks=12 [ 751.863007][T10245] EXT4-fs (loop3): Block reservation details [ 751.869204][T10245] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 752.545995][T10257] loop4: detected capacity change from 0 to 40427 [ 752.573074][T10257] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 752.580900][T10257] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 752.591282][T10257] F2FS-fs (loop4): invalid crc value [ 753.375281][T10257] F2FS-fs (loop4): Found nat_bits in checkpoint [ 753.410041][T10237] loop1: detected capacity change from 0 to 40427 [ 753.440572][T10257] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 753.447696][T10257] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 753.521539][T10237] F2FS-fs (loop1): invalid crc value [ 753.601086][T10237] F2FS-fs (loop1): Found nat_bits in checkpoint [ 754.732394][ T26] audit: type=1800 audit(1754791425.361:3): pid=10268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1225" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 755.139389][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 755.334059][T10237] F2FS-fs (loop1): Start checkpoint disabled! [ 755.695329][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'. [ 755.814720][ T4268] syz-executor: attempt to access beyond end of device [ 755.814720][ T4268] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 758.058834][T10312] loop2: detected capacity change from 0 to 1024 [ 758.133930][ T4428] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 758.262660][T10312] hfsplus: unable to parse mount options [ 759.098594][ T4428] usb 4-1: config 0 has no interfaces? [ 759.130077][ T4428] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 760.240864][T10330] loop2: detected capacity change from 0 to 32768 [ 760.764152][T10330] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 760.972526][ T4428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.980710][ T4428] usb 4-1: Product: syz [ 760.984923][ T4428] usb 4-1: Manufacturer: syz [ 760.989569][ T4428] usb 4-1: SerialNumber: syz [ 760.996389][ T4428] usb 4-1: config 0 descriptor?? [ 761.223800][T10337] loop4: detected capacity change from 0 to 1024 [ 761.715554][ T5071] hfsplus: b-tree write err: -5, ino 4 [ 761.732434][ T4266] ocfs2: Unmounting device (7,2) on (node local) [ 761.878374][T10340] loop4: detected capacity change from 0 to 1024 [ 762.001445][T10340] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 762.772148][T10338] loop1: detected capacity change from 0 to 32768 [ 762.858226][ T4428] usb 4-1: can't set config #0, error -71 [ 762.883868][ T4428] usb 4-1: USB disconnect, device number 15 [ 762.967205][ T7917] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 763.151392][ T7917] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 112 with error 28 [ 763.164506][ T7917] EXT4-fs (loop4): This should not happen!! Data will be lost [ 763.164506][ T7917] [ 763.183338][ T7917] EXT4-fs (loop4): Total free blocks count 0 [ 763.195904][ T7917] EXT4-fs (loop4): Free/Dirty block details [ 764.600883][ T7917] EXT4-fs (loop4): free_blocks=68451041280 [ 764.974138][ T7917] EXT4-fs (loop4): dirty_blocks=208 [ 764.979383][ T7917] EXT4-fs (loop4): Block reservation details [ 765.006837][ T7917] EXT4-fs (loop4): i_reserved_data_blocks=13 [ 765.026759][ T7917] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 86 with error 28 [ 765.106986][T10366] loop0: detected capacity change from 0 to 256 [ 765.154376][T10366] exfat: Deprecated parameter 'utf8' [ 765.159733][T10366] exfat: Deprecated parameter 'namecase' [ 765.184431][T10366] exfat: Deprecated parameter 'utf8' [ 765.232425][T10366] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389a3796, utbl_chksum : 0xe619d30d) [ 765.773907][ T6167] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 765.799009][T10378] fuse: Invalid rootmode [ 765.974756][ T6167] usb 1-1: Using ep0 maxpacket: 32 [ 765.996109][ T6167] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 67, changing to 10 [ 766.026279][ T6167] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16938, setting to 1024 [ 766.042126][ T6167] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 766.054459][ T6167] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 766.070458][ T6167] usb 1-1: Product: syz [ 766.075171][ T6167] usb 1-1: Manufacturer: syz [ 766.102815][ T6167] hub 1-1:4.0: USB hub found [ 766.300413][ T6167] hub 1-1:4.0: 2 ports detected [ 766.308553][ T6167] hub 1-1:4.0: insufficient power available to use all downstream ports [ 766.334277][T10390] loop1: detected capacity change from 0 to 1024 [ 766.501098][ T6167] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 766.511628][ T6167] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 766.576344][ T6167] usb 1-1: USB disconnect, device number 21 [ 766.678949][T10385] loop4: detected capacity change from 0 to 32768 [ 766.768206][ T4821] hfsplus: b-tree write err: -5, ino 3 [ 766.792514][ T4270] hfsplus: node 4:3 still has 2 user(s)! [ 767.962973][T10399] syz.4.1266 (10399) used greatest stack depth: 18176 bytes left [ 768.016834][T10382] loop3: detected capacity change from 0 to 32768 [ 768.081768][T10382] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 768.121454][T10382] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 768.160631][T10382] BTRFS info (device loop3): using free space tree [ 768.470995][T10382] BTRFS info (device loop3): enabling ssd optimizations [ 768.594902][ T26] audit: type=1804 audit(1754791440.221:4): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1260" name="/newroot/271/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 768.769984][T10382] BTRFS info (device loop3): balance: start -s [ 768.929022][T10382] BTRFS info (device loop3): relocating block group 1048576 flags system [ 769.237451][T10382] BTRFS info (device loop3): balance: ended with status: 0 [ 769.382177][ T4269] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 769.723277][T10440] loop0: detected capacity change from 0 to 256 [ 769.739312][T10440] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 770.801659][T10435] loop1: detected capacity change from 0 to 40427 [ 770.963618][T10435] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 771.807886][T10435] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 772.108945][T10453] loop0: detected capacity change from 0 to 40427 [ 772.147260][T10453] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 772.155610][T10453] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 772.174711][T10453] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 772.194587][T10437] comedi comedi0: Minor 5 could not be opened [ 772.266145][T10453] F2FS-fs (loop0): invalid crc value [ 772.272837][T10435] F2FS-fs (loop1): invalid crc value [ 772.281237][T10435] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 772.321421][T10453] F2FS-fs (loop0): Found nat_bits in checkpoint [ 772.353921][T10453] F2FS-fs (loop0): Start checkpoint disabled! [ 772.394910][T10453] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 772.402014][T10453] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 772.740865][T10465] cgroup: none used incorrectly [ 773.241127][T10470] loop3: detected capacity change from 0 to 40427 [ 773.254197][T10470] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 773.262468][T10470] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 773.281809][T10470] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 773.290808][T10470] F2FS-fs (loop3): invalid crc value [ 773.355359][T10470] F2FS-fs (loop3): Found nat_bits in checkpoint [ 773.380576][T10470] F2FS-fs (loop3): Start checkpoint disabled! [ 773.398455][T10470] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 773.405948][T10470] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 773.655782][T10478] loop0: detected capacity change from 0 to 1024 [ 773.697299][T10478] EXT4-fs: Ignoring removed orlov option [ 773.728435][T10474] loop4: detected capacity change from 0 to 4096 [ 773.754230][T10474] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 774.637870][T10478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 774.889556][T10490] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 776.067859][T10504] loop3: detected capacity change from 0 to 128 [ 776.087893][T10504] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 776.133947][T10504] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 778.107111][ T4524] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 778.108153][T10518] loop1: detected capacity change from 0 to 128 [ 778.176019][T10520] loop3: detected capacity change from 0 to 128 [ 778.188645][T10520] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 778.224926][T10518] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 778.301976][T10520] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 778.366758][T10518] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 778.496802][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 779.954847][T10522] loop4: detected capacity change from 0 to 4096 [ 780.185713][ T4897] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 780.222551][ T5071] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 780.449743][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1304'. [ 781.241450][T10545] device gre1 entered promiscuous mode [ 781.449122][ T4268] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 781.485855][ T4268] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 781.645069][ T4257] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 781.855885][ T4257] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.886309][ T4257] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 781.925024][ T4257] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 781.958257][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 781.986333][ T4257] usb 3-1: SerialNumber: syz [ 782.565508][ T4257] usb 3-1: 0:2 : does not exist [ 782.602473][ T4257] usb 3-1: unit 5: unexpected type 0x0d [ 782.661760][ T4257] usb 3-1: USB disconnect, device number 25 [ 782.762038][T10583] input: syz1 as /devices/virtual/input/input35 [ 784.460521][T10616] loop0: detected capacity change from 0 to 256 [ 784.639221][T10616] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 784.929279][ T26] audit: type=1800 audit(1754791456.571:5): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1333" name="bus" dev="loop0" ino=1048638 res=0 errno=0 [ 786.498662][T10629] loop3: detected capacity change from 0 to 128 [ 786.722097][T10629] EXT4-fs (loop3): Test dummy encryption mode enabled [ 787.113319][T10629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 787.124082][T10629] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.359856][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 787.416118][T10638] loop1: detected capacity change from 0 to 32768 [ 787.423347][T10638] XFS: ikeep mount option is deprecated. [ 787.483241][T10638] XFS (loop1): Mounting V5 Filesystem [ 787.553305][T10638] XFS (loop1): Ending clean mount [ 787.601644][T10638] XFS (loop1): Quotacheck needed: Please wait. [ 787.725204][T10638] XFS (loop1): Quotacheck: Done. [ 787.857834][ T4270] XFS (loop1): Unmounting Filesystem [ 787.912884][T10661] loop4: detected capacity change from 0 to 2048 [ 787.955592][T10661] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 787.996755][T10661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 788.039220][ T26] audit: type=1800 audit(1754791459.681:6): pid=10661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1347" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 788.113491][T10646] loop2: detected capacity change from 0 to 32768 [ 788.151696][T10646] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1344 (10646) [ 788.209767][T10646] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 788.225243][T10646] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 788.242379][T10646] BTRFS info (device loop2): metadata ratio 2 [ 788.249852][T10646] BTRFS info (device loop2): allowing degraded mounts [ 788.275338][T10646] BTRFS info (device loop2): force zlib compression, level 3 [ 788.284130][ T6452] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 788.318453][T10646] BTRFS info (device loop2): metadata ratio 4 [ 788.328542][T10646] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 788.358347][T10646] BTRFS info (device loop2): use zstd compression, level 3 [ 788.375980][T10646] BTRFS info (device loop2): force clearing of disk cache [ 788.399132][T10646] BTRFS info (device loop2): max_inline at 0 [ 788.421595][T10646] BTRFS info (device loop2): using free space tree [ 788.494178][ T9599] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 788.503831][ T6452] usb 1-1: Using ep0 maxpacket: 32 [ 788.511098][ T6452] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 788.703222][ T6452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.716874][ T6452] usb 1-1: config 0 descriptor?? [ 788.734644][ T6452] gspca_main: sunplus-2.14.0 probing 041e:400b [ 789.719537][ T9599] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 789.777226][ T6452] gspca_sunplus: reg_w_riv err -71 [ 789.785195][ T6452] sunplus: probe of 1-1:0.0 failed with error -71 [ 789.956261][ T6452] usb 1-1: USB disconnect, device number 22 [ 789.963357][ T9599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.971442][ T9599] usb 5-1: Product: syz [ 789.975673][ T9599] usb 5-1: Manufacturer: syz [ 789.981939][ T9599] usb 5-1: SerialNumber: syz [ 789.996889][T10646] BTRFS info (device loop2): enabling ssd optimizations [ 790.001386][ T9599] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 790.039100][T10646] BTRFS info (device loop2): rebuilding free space tree [ 790.069480][ T9599] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 790.246529][ T26] audit: type=1326 audit(1754791461.891:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc728f8ebe9 code=0x7ffc0000 [ 790.284457][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1355'. [ 790.337950][ T26] audit: type=1326 audit(1754791461.891:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc728f8ebe9 code=0x7ffc0000 [ 790.416055][ T26] audit: type=1326 audit(1754791461.891:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc728f8d550 code=0x7ffc0000 [ 790.452222][ T4266] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 790.476264][ T6452] usb 5-1: USB disconnect, device number 23 [ 790.502255][T10704] loop1: detected capacity change from 0 to 1024 [ 790.573069][T10704] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 790.684676][ T26] audit: type=1326 audit(1754791461.891:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc728f90417 code=0x7ffc0000 [ 790.834016][ T26] audit: type=1326 audit(1754791461.891:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc728f8ebe9 code=0x7ffc0000 [ 791.577698][ T9599] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 791.610127][ T9599] ath9k_htc: Failed to initialize the device [ 791.751666][ T6452] usb 5-1: ath9k_htc: USB layer deinitialized [ 792.136525][T10718] loop0: detected capacity change from 0 to 1024 [ 792.147147][ T26] audit: type=1326 audit(1754791461.891:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc728f90417 code=0x7ffc0000 [ 792.350074][ T26] audit: type=1326 audit(1754791461.891:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc728f8d84a code=0x7ffc0000 [ 792.372714][ T26] audit: type=1326 audit(1754791461.891:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc728f8ebe9 code=0x7ffc0000 [ 792.417810][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 792.456483][ T26] audit: type=1326 audit(1754791461.891:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc728f8ebe9 code=0x7ffc0000 [ 792.520311][ T26] audit: type=1326 audit(1754791461.891:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc728f8ebe9 code=0x7ffc0000 [ 792.803885][ T9599] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 792.810243][T10724] loop4: detected capacity change from 0 to 1024 [ 793.544605][T10729] loop3: detected capacity change from 0 to 131072 [ 793.562680][ T9599] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.657713][T10729] F2FS-fs (loop3): Found nat_bits in checkpoint [ 793.694824][ T9599] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 793.711717][T10729] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 793.839543][ T9599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.849253][T10729] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 793.884445][ T9599] usb 1-1: config 0 descriptor?? [ 793.891864][ T9599] pwc: Askey VC010 type 2 USB webcam detected. [ 794.366565][T10741] loop2: detected capacity change from 0 to 4096 [ 794.956680][T10743] loop4: detected capacity change from 0 to 131072 [ 794.998179][T10743] F2FS-fs (loop4): invalid crc value [ 795.005626][ T9599] pwc: recv_control_msg error -32 req 02 val 2b00 [ 795.042559][ T9599] pwc: recv_control_msg error -32 req 02 val 2700 [ 795.076455][ T9599] pwc: recv_control_msg error -32 req 02 val 2c00 [ 795.112852][T10743] F2FS-fs (loop4): Found nat_bits in checkpoint [ 795.140115][ T9599] pwc: recv_control_msg error -32 req 04 val 1000 [ 795.155800][T10743] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 795.182501][T10743] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 795.206769][ T9599] pwc: recv_control_msg error -32 req 04 val 1300 [ 795.275699][ T9599] pwc: recv_control_msg error -32 req 04 val 1400 [ 795.299014][ T9599] pwc: recv_control_msg error -32 req 02 val 2000 [ 795.344559][ T9599] pwc: recv_control_msg error -32 req 02 val 2100 [ 795.373863][ T9599] pwc: recv_control_msg error -32 req 04 val 1500 [ 795.384465][ T9599] pwc: recv_control_msg error -32 req 02 val 2500 [ 795.420753][ T9599] pwc: recv_control_msg error -32 req 02 val 2400 [ 795.482644][ T9599] pwc: recv_control_msg error -32 req 02 val 2600 [ 795.517884][ T9599] pwc: recv_control_msg error -32 req 02 val 2900 [ 795.534361][ T9599] pwc: recv_control_msg error -32 req 02 val 2800 [ 795.561702][ T9599] pwc: recv_control_msg error -32 req 04 val 1100 [ 795.721871][ T9599] pwc: Registered as video103. [ 795.741282][ T9599] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 797.702140][ T9599] usb 1-1: USB disconnect, device number 23 [ 798.354988][T10773] tmpfs: Unknown parameter 'quota' [ 799.657498][T10787] loop3: detected capacity change from 0 to 40427 [ 799.679668][T10787] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 799.687972][T10787] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 799.704040][T10787] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 799.734775][T10787] F2FS-fs (loop3): invalid crc value [ 799.769890][T10787] F2FS-fs (loop3): Found nat_bits in checkpoint [ 799.803260][T10787] F2FS-fs (loop3): Start checkpoint disabled! [ 799.862200][T10787] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 799.869277][T10787] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 800.124220][T10792] loop2: detected capacity change from 0 to 512 [ 800.131259][T10792] EXT4-fs: Ignoring removed oldalloc option [ 800.195442][T10792] EXT4-fs (loop2): 1 truncate cleaned up [ 800.207781][T10792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 800.542149][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 800.808432][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 800.842609][T10810] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 801.128446][ T7917] kworker/u4:21: attempt to access beyond end of device [ 801.128446][ T7917] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 801.313856][ T9602] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 801.840104][ T9602] usb 3-1: config 0 has no interfaces? [ 802.503584][ T9602] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 802.593839][ T9602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.638726][ T9602] usb 3-1: Product: syz [ 802.653257][ T9602] usb 3-1: Manufacturer: syz [ 802.683628][ T9602] usb 3-1: SerialNumber: syz [ 802.709685][ T9602] usb 3-1: config 0 descriptor?? [ 803.062982][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 803.062993][ T26] audit: type=1326 audit(1754791474.701:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efdd8ebe9 code=0x7ffc0000 [ 803.593484][ T26] audit: type=1326 audit(1754791474.731:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9efdd8ebe9 code=0x7ffc0000 [ 803.628140][ T26] audit: type=1326 audit(1754791474.731:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efdd8ebe9 code=0x7ffc0000 [ 803.660582][ T26] audit: type=1326 audit(1754791474.731:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efdd8ebe9 code=0x7ffc0000 [ 804.234355][ T26] audit: type=1326 audit(1754791474.731:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f9efdd8ebe9 code=0x7ffc0000 [ 804.257437][ T26] audit: type=1326 audit(1754791474.731:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efdd8ebe9 code=0x7ffc0000 [ 804.392886][ T26] audit: type=1326 audit(1754791474.731:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efdd8ebe9 code=0x7ffc0000 [ 804.446341][ T26] audit: type=1326 audit(1754791474.741:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9efdd8ebe9 code=0x7ffc0000 [ 804.515128][ T26] audit: type=1326 audit(1754791474.741:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efdd8ebe9 code=0x7ffc0000 [ 804.537770][ T26] audit: type=1326 audit(1754791474.741:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efdd8ebe9 code=0x7ffc0000 [ 804.608827][T10846] loop0: detected capacity change from 0 to 4096 [ 804.630724][T10846] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 804.832419][ T9793] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 805.004952][ T9602] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 805.163931][ T4385] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 805.355425][ T4385] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.390641][ T4385] usb 2-1: config 0 has no interfaces? [ 805.405523][ T4385] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 805.425765][ T4385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.443437][ T4385] usb 2-1: config 0 descriptor?? [ 805.463874][ T9602] usb 5-1: Using ep0 maxpacket: 16 [ 805.471260][ T9602] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 805.511022][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 805.524485][ T9602] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 805.532670][ T9602] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 805.623206][ T9602] usb 5-1: config 0 has no interface number 0 [ 805.637658][T10833] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.645204][T10833] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.663898][ T9602] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 805.668902][ T6452] usb 2-1: USB disconnect, device number 21 [ 805.690196][ T9602] usb 5-1: config 0 interface 104 has no altsetting 1 [ 805.722516][ T9602] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 805.870948][ T9602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.901286][ T9602] usb 5-1: Product: syz [ 806.624318][ T9602] usb 5-1: Manufacturer: syz [ 806.629066][ T9602] usb 5-1: SerialNumber: syz [ 806.640004][ T9602] usb 5-1: config 0 descriptor?? [ 806.705597][T10858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1403'. [ 806.927093][T10858] loop0: detected capacity change from 0 to 40427 [ 806.947444][ T9602] asix 5-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 806.966529][T10858] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 806.974856][T10858] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 806.983351][T10858] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 806.992834][T10858] F2FS-fs (loop0): invalid crc value [ 807.013571][T10858] F2FS-fs (loop0): Found nat_bits in checkpoint [ 807.042401][T10858] F2FS-fs (loop0): Start checkpoint disabled! [ 807.054315][T10858] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 807.061394][T10858] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 807.106327][T10858] syz.0.1403: attempt to access beyond end of device [ 807.106327][T10858] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 807.147399][ T9602] asix: probe of 5-1:0.104 failed with error -71 [ 807.747636][ T9602] usb 5-1: USB disconnect, device number 24 [ 807.854016][ T4385] usb 3-1: USB disconnect, device number 26 [ 807.909565][ T4332] kernel read not supported for file /vbi6 (pid: 4332 comm: kworker/1:3) [ 808.165141][T10877] MPTCP: addr_signal error, rm_addr=2 [ 808.365956][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.379233][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.385789][ T4524] kworker/u4:14: attempt to access beyond end of device [ 808.385789][ T4524] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 808.756489][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1410'. [ 809.750667][T10833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.743923][ T4428] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 810.950465][ T4428] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.961785][ T4428] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 810.971312][ T4428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.990460][ T4428] usb 3-1: config 0 descriptor?? [ 811.020310][ T4428] pwc: Askey VC010 type 2 USB webcam detected. [ 811.081931][T10833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.343980][T10719] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 811.351673][ T4339] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 811.372911][T10833] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.382005][T10833] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.391450][T10833] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.406782][ T4428] pwc: recv_control_msg error -32 req 02 val 2b00 [ 811.413343][T10833] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.423090][ T4428] pwc: recv_control_msg error -32 req 02 val 2700 [ 811.442334][ T4428] pwc: recv_control_msg error -32 req 02 val 2c00 [ 811.531747][ T4428] pwc: recv_control_msg error -32 req 04 val 1000 [ 811.544105][ T4428] pwc: recv_control_msg error -32 req 04 val 1300 [ 811.553864][ T4339] usb 5-1: Using ep0 maxpacket: 32 [ 811.559040][T10719] usb 1-1: Using ep0 maxpacket: 16 [ 811.564887][T10833] device gre1 left promiscuous mode [ 811.570306][ T4428] pwc: recv_control_msg error -32 req 04 val 1400 [ 811.573289][ T4339] usb 5-1: unable to get BOS descriptor or descriptor too short [ 811.584577][T10719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.595138][ T4428] pwc: recv_control_msg error -32 req 02 val 2000 [ 811.601979][T10875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1407'. [ 811.627673][T10719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.637962][T10719] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.654439][ T4339] usb 5-1: config 0 has an invalid interface number: 251 but max is 1 [ 811.683894][T10719] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 811.697980][ T4339] usb 5-1: config 0 has an invalid interface number: 2 but max is 1 [ 811.717793][T10719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.725858][ T4339] usb 5-1: config 0 has no interface number 0 [ 811.742126][ T4339] usb 5-1: config 0 has no interface number 1 [ 811.749849][T10719] usb 1-1: config 0 descriptor?? [ 811.764038][ T4339] usb 5-1: config 0 interface 251 has no altsetting 0 [ 811.771013][ T4339] usb 5-1: config 0 interface 2 has no altsetting 0 [ 811.784786][T10719] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37 [ 811.803496][ T4339] usb 5-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 811.867341][ T3624] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 811.888355][ T4428] pwc: recv_control_msg error -32 req 04 val 1500 [ 811.894594][ T4339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.902349][ T4428] pwc: recv_control_msg error -71 req 02 val 2500 [ 811.939712][ T4428] pwc: recv_control_msg error -71 req 02 val 2400 [ 811.950331][ T4339] usb 5-1: Product: syz [ 811.964064][ T4339] usb 5-1: Manufacturer: syz [ 811.968758][ T4339] usb 5-1: SerialNumber: syz [ 811.974038][ T4428] pwc: recv_control_msg error -71 req 02 val 2600 [ 811.988349][T10898] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 811.992715][ T4428] pwc: recv_control_msg error -71 req 02 val 2900 [ 812.034352][ T4428] pwc: recv_control_msg error -71 req 02 val 2800 [ 812.039920][ T4339] usb 5-1: config 0 descriptor?? [ 812.043522][ T4428] pwc: recv_control_msg error -71 req 04 val 1100 [ 812.081519][ T3624] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 812.084742][ T4428] pwc: recv_control_msg error -71 req 04 val 1200 [ 812.146096][ T4428] pwc: Registered as video103. [ 812.147810][T10719] usb 1-1: USB disconnect, device number 24 [ 812.177092][ T4428] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 812.350500][ T4428] usb 3-1: USB disconnect, device number 27 [ 812.493176][ T4260] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 812.551668][ T4339] usb 5-1: selecting invalid altsetting 0 [ 812.567855][ T4339] usb 5-1: Could not set interface, error -22 [ 812.620428][ T4339] usb 5-1: USB disconnect, device number 25 [ 812.673675][T10910] loop2: detected capacity change from 0 to 1024 [ 812.708035][T10910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 812.761731][T10910] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 812.775787][T10910] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 812.798484][T10910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 812.846569][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 813.156407][T10927] loop0: detected capacity change from 0 to 128 [ 813.225336][ T26] audit: type=1800 audit(1754791484.871:82): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1423" name="file1" dev="loop0" ino=1048640 res=0 errno=0 [ 813.343993][ T26] audit: type=1800 audit(1754791484.901:83): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1423" name="file1" dev="loop0" ino=1048640 res=0 errno=0 [ 814.629210][T10951] loop0: detected capacity change from 0 to 2048 [ 815.020458][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 815.216847][T10951] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 815.582098][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 815.651159][T10933] loop1: detected capacity change from 0 to 32768 [ 818.469180][T11004] loop1: detected capacity change from 0 to 1024 [ 818.669729][T11004] hfsplus: b-tree write err: -5, ino 3 [ 818.929482][T11020] sg_write: process 947 (syz.4.1443) changed security contexts after opening file descriptor, this is not allowed. [ 819.145323][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1444'. [ 819.200040][T11027] loop0: detected capacity change from 0 to 256 [ 819.210834][T11027] exfat: Deprecated parameter 'utf8' [ 819.217058][T11027] exfat: Deprecated parameter 'namecase' [ 819.222779][T11027] exfat: Deprecated parameter 'utf8' [ 819.287326][T11027] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389a3796, utbl_chksum : 0xe619d30d) [ 819.477665][T11032] loop1: detected capacity change from 0 to 256 [ 819.536326][T11032] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 819.622097][T11032] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 819.636633][T11032] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 819.667015][ T4435] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 819.874006][ T4435] usb 1-1: Using ep0 maxpacket: 32 [ 819.880919][ T4435] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 67, changing to 10 [ 819.925272][ T4435] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16938, setting to 1024 [ 819.969633][ T4435] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 819.989397][ T4435] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 820.025023][ T4435] usb 1-1: Product: syz [ 820.039973][ T4435] usb 1-1: Manufacturer: syz [ 820.059912][ T4435] hub 1-1:4.0: USB hub found [ 820.167495][T11040] loop2: detected capacity change from 0 to 4096 [ 820.221486][T11040] ntfs3: Unknown parameter 'nocase' [ 820.254757][ T4435] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 820.655006][ T4428] usb 1-1: USB disconnect, device number 25 [ 822.660861][T11042] loop1: detected capacity change from 0 to 32768 [ 822.725203][T11042] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1451 (11042) [ 823.755145][T11042] BTRFS error (device loop1): open_ctree failed: -4 [ 825.109252][ T8840] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (8840) [ 825.295569][T11094] capability: warning: `syz.4.1470' uses 32-bit capabilities (legacy support in use) [ 825.320844][T11088] loop3: detected capacity change from 0 to 4096 [ 825.416678][T11096] loop0: detected capacity change from 0 to 64 [ 826.232051][T11109] loop0: detected capacity change from 0 to 2048 [ 826.302186][T11109] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 826.551823][T11115] tmpfs: Unknown parameter 'grpquota' [ 828.640137][T11131] loop1: detected capacity change from 0 to 512 [ 828.769471][T11131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 828.793919][T11131] ext4 filesystem being mounted at /294/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.861914][T11131] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #4: comm syz.1.1481: corrupted inode contents [ 828.972774][T11131] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #4: comm syz.1.1481: mark_inode_dirty error [ 829.044484][T11131] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #4: comm syz.1.1481: corrupted inode contents [ 829.066849][T11131] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #4: comm syz.1.1481: mark_inode_dirty error [ 829.090016][T11149] loop0: detected capacity change from 0 to 736 [ 829.142847][T11131] Quota error (device loop1): write_blk: dquota write failed [ 829.234121][T11131] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 829.268096][T11131] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.1481: Failed to acquire dquot type 1 [ 829.378465][T11144] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #4: comm syz.1.1481: corrupted inode contents [ 829.449550][T11144] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #4: comm syz.1.1481: mark_inode_dirty error [ 829.622506][T11144] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #4: comm syz.1.1481: corrupted inode contents [ 829.776346][T11144] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #4: comm syz.1.1481: mark_inode_dirty error [ 829.819726][T11144] Quota error (device loop1): write_blk: dquota write failed [ 829.848558][T11144] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 829.883831][ T4280] Bluetooth: hci4: command 0x0405 tx timeout [ 829.917770][T11144] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 829.951413][T11144] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.1481: Failed to acquire dquot type 1 [ 830.051216][T11145] Quota error (device loop1): write_blk: dquota write failed [ 830.101244][T11145] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 830.230774][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 830.363886][ T6452] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 830.575015][ T6452] usb 5-1: Using ep0 maxpacket: 32 [ 830.590124][ T6452] usb 5-1: config 0 has an invalid interface number: 43 but max is 4 [ 830.625513][ T6452] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 830.654491][ T6452] usb 5-1: config 0 has no interface number 0 [ 830.679900][ T6452] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 830.719494][ T6452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.744611][ T6452] usb 5-1: Product: syz [ 830.748795][ T6452] usb 5-1: Manufacturer: syz [ 830.753419][ T6452] usb 5-1: SerialNumber: syz [ 830.774467][ T6452] usb 5-1: config 0 descriptor?? [ 830.797572][ T6452] ftdi_sio 5-1:0.43: FTDI USB Serial Device converter detected [ 830.819017][ T6452] usb 5-1: Detected SIO [ 830.839347][ T6452] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 830.993061][ T6452] usb 5-1: USB disconnect, device number 26 [ 831.021790][ T6452] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 831.050909][ T6452] ftdi_sio 5-1:0.43: device disconnected [ 832.533272][T11191] loop4: detected capacity change from 0 to 512 [ 832.602641][T11191] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 832.618898][T11191] EXT4-fs (loop4): orphan cleanup on readonly fs [ 832.630591][T11191] Quota error (device loop4): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 832.652069][T11191] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 832.667607][T11191] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 832.705597][T11191] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1503: bg 0: block 40: padding at end of block bitmap is not set [ 832.732000][T11191] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 832.736958][T11197] loop1: detected capacity change from 0 to 512 [ 832.759838][T11191] EXT4-fs (loop4): 1 truncate cleaned up [ 832.769069][T11191] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 833.126138][T11201] loop3: detected capacity change from 0 to 65536 [ 833.182885][T11197] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 833.274211][T11197] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 833.305171][T11201] XFS (loop3): Mounting V5 Filesystem [ 833.699342][T11201] XFS (loop3): Ending clean mount [ 833.728281][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 833.876127][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 833.933384][ T4269] XFS (loop3): Unmounting Filesystem [ 834.176991][T11225] loop2: detected capacity change from 0 to 4096 [ 834.224659][T11225] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 834.640113][T11229] loop4: detected capacity change from 0 to 32768 [ 834.647032][T11229] XFS: ikeep mount option is deprecated. [ 836.021150][T11229] XFS (loop4): Mounting V5 Filesystem [ 836.032433][T11225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1512'. [ 836.252491][T11229] XFS (loop4): Ending clean mount [ 836.284473][T11229] XFS (loop4): Quotacheck needed: Please wait. [ 836.378341][T11229] XFS (loop4): Quotacheck: Done. [ 837.621935][T11268] loop1: detected capacity change from 0 to 4096 [ 837.647482][ T4268] XFS (loop4): Unmounting Filesystem [ 841.640726][T11306] loop4: detected capacity change from 0 to 512 [ 841.848817][T11306] EXT4-fs (loop4): orphan cleanup on readonly fs [ 841.876864][T11306] Quota error (device loop4): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 842.542764][T11306] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 842.579164][T11306] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 842.657945][T11306] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1536: bg 0: block 248: padding at end of block bitmap is not set [ 842.747328][T11306] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 842.763685][T11306] EXT4-fs (loop4): 1 orphan inode deleted [ 842.778881][T11324] loop2: detected capacity change from 0 to 512 [ 842.793003][T11306] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 842.849352][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 842.889679][T11324] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 842.934024][T11324] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.191814][T11338] loop0: detected capacity change from 0 to 64 [ 843.343966][ T4339] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 843.398951][T11338] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 843.748237][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 843.931124][ T4339] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.973088][ T4339] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 844.013683][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.050746][ T4339] usb 5-1: config 0 descriptor?? [ 844.061029][T11348] loop0: detected capacity change from 0 to 764 [ 844.070901][ T4339] pwc: Askey VC010 type 2 USB webcam detected. [ 844.087436][T11348] rock: directory entry would overflow storage [ 844.097827][T11348] rock: sig=0x4654, size=5, remaining=4 [ 844.611959][T11322] loop1: detected capacity change from 0 to 40427 [ 844.684045][T11322] F2FS-fs (loop1): invalid crc value [ 844.717877][T11322] F2FS-fs (loop1): Found nat_bits in checkpoint [ 844.829249][ T4339] pwc: recv_control_msg error -32 req 02 val 2b00 [ 844.849308][ T4339] pwc: recv_control_msg error -32 req 02 val 2700 [ 844.880089][ T4339] pwc: recv_control_msg error -32 req 02 val 2c00 [ 844.910434][ T4339] pwc: recv_control_msg error -32 req 04 val 1000 [ 844.940107][ T4339] pwc: recv_control_msg error -32 req 04 val 1300 [ 844.949028][T11322] F2FS-fs (loop1): Start checkpoint disabled! [ 844.956197][T11356] device syzkaller1 entered promiscuous mode [ 844.982837][T11322] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 844.988503][ T4339] pwc: recv_control_msg error -32 req 04 val 1400 [ 845.046305][ T4339] pwc: recv_control_msg error -32 req 02 val 2000 [ 845.078126][ T4339] pwc: recv_control_msg error -32 req 02 val 2100 [ 845.113911][ T4339] pwc: recv_control_msg error -32 req 04 val 1500 [ 845.277221][T11362] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 845.291904][T11362] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 845.298669][T11362] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 845.305620][T11362] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 845.312174][T11362] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 845.320000][T11362] comedi comedi3: 8255: I/O port conflict (0x100010,4) [ 845.327394][T11362] comedi comedi3: 8255: I/O port conflict (0x1000002,4) [ 845.327636][ T4339] pwc: recv_control_msg error -71 req 02 val 2400 [ 845.351137][ T4339] pwc: recv_control_msg error -71 req 02 val 2600 [ 845.358217][ T4339] pwc: recv_control_msg error -71 req 02 val 2900 [ 845.369532][ T4339] pwc: recv_control_msg error -71 req 02 val 2800 [ 845.376811][ T4339] pwc: recv_control_msg error -71 req 04 val 1100 [ 845.383636][ T4339] pwc: recv_control_msg error -71 req 04 val 1200 [ 845.944038][T11362] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffbf,4) [ 846.084219][T11362] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 846.097083][ T2906] kworker/u4:5: attempt to access beyond end of device [ 846.097083][ T2906] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 846.164058][T11362] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 846.176387][T11362] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 846.201721][T11362] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 846.232982][T11362] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 846.260319][ T4339] pwc: Registered as video103. [ 846.281234][ T4339] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41 [ 846.291695][T11362] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 846.333920][T11362] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 846.341520][T11362] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 846.373198][T11362] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 846.376653][ T4339] usb 5-1: USB disconnect, device number 27 [ 846.383281][T11362] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 846.413859][T11362] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 846.450929][T11362] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 846.497434][T11362] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 846.524836][T11362] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 846.531346][T11362] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 846.583866][T11362] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 846.674395][ T26] audit: type=1326 audit(1754791518.321:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11374 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059638ebe9 code=0x7ffc0000 [ 846.732086][ T26] audit: type=1326 audit(1754791518.321:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11374 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f059638ebe9 code=0x7ffc0000 [ 846.840881][ T26] audit: type=1326 audit(1754791518.321:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11374 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059638ebe9 code=0x7ffc0000 [ 846.868506][ T4339] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 846.942522][ T26] audit: type=1326 audit(1754791518.321:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11374 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059638ebe9 code=0x7ffc0000 [ 847.083810][ T4339] usb 5-1: Using ep0 maxpacket: 8 [ 847.093675][ T4339] usb 5-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 847.132214][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.151688][ T4339] usb 5-1: config 0 descriptor?? [ 847.190016][ T4339] usblcd 5-1:0.0: USBLCD model not supported. [ 847.395567][ T4339] usb 5-1: USB disconnect, device number 28 [ 848.239986][T11373] loop2: detected capacity change from 0 to 40427 [ 848.291893][T11373] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x3ffff [ 848.502386][T11373] F2FS-fs (loop2): invalid crc value [ 848.509140][T11373] F2FS-fs (loop2) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x1890/0x7160 [ 849.507807][T11373] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12) [ 849.508029][ T9602] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 849.735335][ T9602] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.762324][ T9602] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 849.809155][ T9602] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 849.923855][ T9602] usb 1-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 849.931968][ T9602] usb 1-1: Product: syz [ 849.985795][ T9602] usb 1-1: config 0 descriptor?? [ 850.475354][T11433] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1583'. [ 850.494722][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 850.502055][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 850.511637][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 850.519014][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 850.572110][ T9602] usb 1-1: USB disconnect, device number 26 [ 850.586645][T11426] overlayfs: missing 'lowerdir' [ 851.592341][T11446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1588'. [ 852.237479][T11435] loop1: detected capacity change from 0 to 40427 [ 852.274960][T11435] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 852.293868][T11435] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 852.328966][T11435] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x3ffff [ 852.355754][T11435] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6 [ 852.388102][T11435] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x5 [ 852.442387][T11435] F2FS-fs (loop1): invalid crc value [ 852.498697][T11435] F2FS-fs (loop1): Found nat_bits in checkpoint [ 852.601724][T11435] F2FS-fs (loop1): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [1, 3] run fsck to fix. [ 852.624971][T11472] loop3: detected capacity change from 0 to 4096 [ 852.640673][T11435] F2FS-fs (loop1): Failed to read root inode [ 853.623501][ T4269] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 853.636595][ T4269] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 853.953809][ T4379] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 854.153855][ T4379] usb 1-1: Using ep0 maxpacket: 32 [ 854.160981][ T4379] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 854.191174][ T4379] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 854.218195][ T4339] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 854.221571][ T4379] usb 1-1: config 0 interface 0 has no altsetting 0 [ 854.244803][ T4379] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 854.263852][ T4379] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 854.274039][ T4379] usb 1-1: Product: syz [ 854.278222][ T4379] usb 1-1: Manufacturer: syz [ 854.293106][ T4379] usb 1-1: SerialNumber: syz [ 854.305277][ T4379] usb 1-1: config 0 descriptor?? [ 854.319978][T11490] loop4: detected capacity change from 0 to 32768 [ 854.341549][T11491] loop3: detected capacity change from 0 to 32768 [ 854.399703][T11491] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 854.409619][T11490] XFS (loop4): Mounting V5 Filesystem [ 854.425280][ T4339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 854.436849][ T4339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 854.454594][ T4339] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xDA, skipping [ 854.508414][ T4339] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 854.510488][T11490] XFS (loop4): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:128). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 854.535350][T11490] XFS (loop4): log mount/recovery failed: error -22 [ 854.551932][ T4339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 854.578034][ T4339] usb 2-1: SerialNumber: syz [ 854.603180][ T4339] usb 2-1: config 0 descriptor?? [ 854.611090][T11490] XFS (loop4): log mount failed [ 854.625257][ T4269] (syz-executor,4269,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 854.678745][ T4269] ocfs2: Unmounting device (7,3) on (node local) [ 854.743550][ T4379] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 854.864476][ T4339] usb 2-1: USB disconnect, device number 22 [ 855.787152][ T4379] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 855.798008][ T4379] gs_usb: probe of 1-1:0.0 failed with error -71 [ 855.808040][ T4379] usb 1-1: USB disconnect, device number 27 [ 857.520178][T11528] block device autoloading is deprecated and will be removed. [ 857.633485][T11531] loop4: detected capacity change from 0 to 64 [ 857.752214][T11535] syz.4.1618: attempt to access beyond end of device [ 857.752214][T11535] loop4: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 857.766534][T11535] Buffer I/O error on dev loop4, logical block 8388608, async page read [ 857.780321][T11535] syz.4.1618: attempt to access beyond end of device [ 857.780321][T11535] loop4: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 857.794293][T11535] Buffer I/O error on dev loop4, logical block 8388608, async page read [ 860.279968][T11559] 9p: Unknown Cache mode readahead [ 860.556579][T11566] loop2: detected capacity change from 0 to 2048 [ 860.623164][T11569] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 860.660638][T11566] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 860.732555][T11566] Remounting filesystem read-only [ 861.462440][T11554] loop0: detected capacity change from 0 to 32768 [ 861.546182][T11554] ERROR: (device loop0): duplicateIXtree: [ 861.546182][T11554] [ 861.586719][T11554] ERROR: (device loop0): remounting filesystem as read-only [ 861.663096][T11554] BUG: Bad page state in process syz.0.1625 pfn:73bef [ 861.720764][T11579] 9pnet_virtio: no channels available for device syz [ 861.735778][T11554] page:ffffea0001cefbc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x33 pfn:0x73bef [ 861.800738][T11554] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 861.877356][T11580] ERROR: (device loop0): dtSearch: stack overrun! [ 861.877356][T11580] [ 861.904124][T11554] raw: 00fff00000002006 ffffea0001f74048 ffffc9000602f980 0000000000000000 [ 861.991588][T11580] btstack dump: [ 862.023930][T11554] raw: 0000000000000033 ffff88807cfc2ba0 00000000ffffffff 0000000000000000 [ 862.052926][T11554] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 862.100870][T11580] bn = 0, index = 0 [ 862.111490][T11554] page_owner tracks the page as allocated [ 862.121441][T11580] bn = 2d, index = 0 [ 862.146020][T11580] bn = 0, index = 0 [ 862.150098][T11580] bn = 2d, index = 0 [ 862.154662][T11554] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 11554, tgid 11551 (syz.0.1625), ts 861650830144, free_ts 861618979631 [ 862.154793][T11580] bn = 0, index = 0 [ 862.177561][T11554] post_alloc_hook+0x173/0x1a0 [ 862.182668][T11554] get_page_from_freelist+0x1a26/0x1ac0 [ 862.189023][T11554] __alloc_pages+0x1df/0x4e0 [ 862.194072][T11554] folio_alloc+0x1c/0x60 [ 862.198659][T11554] filemap_alloc_folio+0xdb/0x460 [ 862.204344][T11580] bn = 2d, index = 0 [ 862.208408][T11554] __filemap_get_folio+0x697/0xdd0 [ 862.220054][T11580] bn = 0, index = 0 [ 862.225747][T11554] pagecache_get_page+0x26/0x250 [ 862.231391][T11580] bn = 0, index = 0 [ 862.236430][T11580] jfs_lookup: dtSearch returned -5 [ 862.242027][T11554] __get_metapage+0x2a4/0xfa0 [ 862.247476][T11554] diNewExt+0x9eb/0x2cb0 [ 862.252717][T11554] diAllocAG+0xde9/0x1c20 [ 862.257501][T11554] diAlloc+0x1c9/0x1910 [ 862.261991][T11554] ialloc+0x88/0x950 [ 862.266624][T11554] jfs_mkdir+0x190/0xa70 [ 862.271096][T11554] vfs_mkdir+0x387/0x570 [ 862.288710][T11554] do_mkdirat+0x1d0/0x430 [ 862.293474][T11554] __x64_sys_mkdirat+0x85/0x90 [ 862.299082][T11554] page last free stack trace: [ 862.304304][T11554] free_unref_page_prepare+0x8b4/0x9a0 [ 862.310266][T11554] free_unref_page+0x2e/0x3f0 [ 862.315458][T11554] tlb_finish_mmu+0x10c/0x1c0 [ 862.320731][T11554] exit_mmap+0x343/0x8e0 [ 862.327060][T11554] __mmput+0x118/0x3c0 [ 862.331644][T11554] exit_mm+0x1e6/0x2c0 [ 862.337804][T11554] do_exit+0x8c1/0x2400 [ 862.342343][T11554] do_group_exit+0x217/0x2d0 [ 862.348032][T11554] __x64_sys_exit_group+0x3b/0x40 [ 862.353539][T11554] do_syscall_64+0x4c/0xa0 [ 862.358504][T11554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 862.415705][T11554] Modules linked in: [ 862.432920][T11554] CPU: 0 PID: 11554 Comm: syz.0.1625 Not tainted 6.1.147-syzkaller #0 [ 862.441108][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 862.451217][T11554] Call Trace: [ 862.454510][T11554] [ 862.457467][T11554] dump_stack_lvl+0x168/0x22e [ 862.462168][T11554] ? show_regs_print_info+0x12/0x12 [ 862.467391][T11554] ? swiotlb_print_info+0x60/0x60 [ 862.472459][T11554] bad_page+0x14b/0x170 [ 862.476644][T11554] free_unref_page_prepare+0x42a/0x9a0 [ 862.482144][T11554] ? percpu_ref_put+0x19/0x180 [ 862.486941][T11554] free_unref_page_list+0xbb/0x8e0 [ 862.492091][T11554] release_pages+0x1f92/0x2200 [ 862.496882][T11554] ? lru_cache_disable+0x30/0x30 [ 862.501829][T11554] ? mlock_page_drain_local+0x75/0x490 [ 862.507289][T11554] ? mlock_page_drain_local+0x75/0x490 [ 862.512747][T11554] ? mlock_page_drain_local+0x289/0x490 [ 862.518293][T11554] __pagevec_release+0x6d/0xe0 [ 862.523063][T11554] truncate_inode_pages_range+0x2f6/0xff0 [ 862.528808][T11554] ? mapping_evict_folio+0x520/0x520 [ 862.534145][T11554] ? parse_options+0xc03/0xdb0 [ 862.538923][T11554] ? jfs_fill_super+0xac0/0xac0 [ 862.543788][T11554] ? sync_filesystem+0x103/0x220 [ 862.548731][T11554] jfs_remount+0x337/0x5a0 [ 862.553173][T11554] ? jfs_statfs+0x550/0x550 [ 862.557675][T11554] ? __might_sleep+0xd0/0xd0 [ 862.562269][T11554] ? hook_sb_remount+0x19/0xc0 [ 862.567041][T11554] reconfigure_super+0x219/0x880 [ 862.571982][T11554] path_mount+0xdfd/0x1010 [ 862.576396][T11554] ? kmem_cache_free+0xf7/0x290 [ 862.581248][T11554] __se_sys_mount+0x2d6/0x3c0 [ 862.585927][T11554] ? __x64_sys_mount+0xc0/0xc0 [ 862.590692][T11554] ? lockdep_hardirqs_on+0x94/0x140 [ 862.595895][T11554] ? __x64_sys_mount+0x1c/0xc0 [ 862.600672][T11554] do_syscall_64+0x4c/0xa0 [ 862.605084][T11554] ? clear_bhb_loop+0x60/0xb0 [ 862.609758][T11554] ? clear_bhb_loop+0x60/0xb0 [ 862.614433][T11554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 862.620332][T11554] RIP: 0033:0x7f5e2b98ebe9 [ 862.624764][T11554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.644376][T11554] RSP: 002b:00007f5e2c81e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 862.652785][T11554] RAX: ffffffffffffffda RBX: 00007f5e2bbb5fa0 RCX: 00007f5e2b98ebe9 [ 862.660752][T11554] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 862.668720][T11554] RBP: 00007f5e2ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 862.676686][T11554] R10: 0000000002012024 R11: 0000000000000246 R12: 0000000000000000 [ 862.684657][T11554] R13: 00007f5e2bbb6038 R14: 00007f5e2bbb5fa0 R15: 00007fff0bb26fa8 [ 862.692643][T11554] [ 862.707584][T11554] Disabling lock debugging due to kernel taint [ 862.733322][T11554] BUG: Bad page state in process syz.0.1625 pfn:7dd01 [ 862.747856][T11554] page:ffffea0001f74040 refcount:0 mapcount:0 mapping:0000000000000000 index:0x32 pfn:0x7dd01 [ 862.760562][T11554] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 862.776812][T11554] raw: 00fff00000002006 ffffea0001d7fb88 ffffc9000602f980 0000000000000000 [ 862.787631][T11554] raw: 0000000000000032 ffff88807cfc29b0 00000000ffffffff 0000000000000000 [ 862.798220][T11554] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 862.805723][T11554] page_owner tracks the page as allocated [ 862.811618][T11554] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 11554, tgid 11551 (syz.0.1625), ts 861650805469, free_ts 861618988507 [ 862.830449][T11554] post_alloc_hook+0x173/0x1a0 [ 862.835317][T11554] get_page_from_freelist+0x1a26/0x1ac0 [ 862.841199][T11554] __alloc_pages+0x1df/0x4e0 [ 862.845970][T11554] folio_alloc+0x1c/0x60 [ 862.850270][T11554] filemap_alloc_folio+0xdb/0x460 [ 862.855486][T11554] __filemap_get_folio+0x697/0xdd0 [ 862.860735][T11554] pagecache_get_page+0x26/0x250 [ 862.867104][T11554] __get_metapage+0x2a4/0xfa0 [ 862.871915][T11554] diNewExt+0x9eb/0x2cb0 [ 862.876420][T11554] diAllocAG+0xde9/0x1c20 [ 862.880892][T11554] diAlloc+0x1c9/0x1910 [ 862.886459][T11554] ialloc+0x88/0x950 [ 862.890543][T11554] jfs_mkdir+0x190/0xa70 [ 862.895110][T11554] vfs_mkdir+0x387/0x570 [ 862.899406][T11554] do_mkdirat+0x1d0/0x430 [ 862.904910][T11554] __x64_sys_mkdirat+0x85/0x90 [ 862.909775][T11554] page last free stack trace: [ 862.915080][T11554] free_unref_page_prepare+0x8b4/0x9a0 [ 862.920607][T11554] free_unref_page+0x2e/0x3f0 [ 862.925415][T11554] tlb_finish_mmu+0x10c/0x1c0 [ 862.930104][T11554] exit_mmap+0x343/0x8e0 [ 862.934747][T11554] __mmput+0x118/0x3c0 [ 862.939148][T11554] exit_mm+0x1e6/0x2c0 [ 862.943281][T11554] do_exit+0x8c1/0x2400 [ 862.947645][T11554] do_group_exit+0x217/0x2d0 [ 862.952290][T11554] __x64_sys_exit_group+0x3b/0x40 [ 862.957518][T11554] do_syscall_64+0x4c/0xa0 [ 862.962017][T11554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 862.968123][T11554] Modules linked in: [ 862.972136][T11554] CPU: 1 PID: 11554 Comm: syz.0.1625 Tainted: G B 6.1.147-syzkaller #0 [ 862.981764][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 862.991809][T11554] Call Trace: [ 862.995100][T11554] [ 862.998023][T11554] dump_stack_lvl+0x168/0x22e [ 863.002692][T11554] ? show_regs_print_info+0x12/0x12 [ 863.007881][T11554] ? swiotlb_print_info+0x60/0x60 [ 863.012911][T11554] bad_page+0x14b/0x170 [ 863.017064][T11554] free_unref_page_prepare+0x42a/0x9a0 [ 863.022528][T11554] ? percpu_ref_put+0x19/0x180 [ 863.027288][T11554] free_unref_page_list+0xbb/0x8e0 [ 863.032396][T11554] release_pages+0x1f92/0x2200 [ 863.037170][T11554] ? lru_cache_disable+0x30/0x30 [ 863.042107][T11554] ? mlock_page_drain_local+0x75/0x490 [ 863.047568][T11554] ? mlock_page_drain_local+0x75/0x490 [ 863.053016][T11554] ? mlock_page_drain_local+0x289/0x490 [ 863.058553][T11554] __pagevec_release+0x6d/0xe0 [ 863.063311][T11554] truncate_inode_pages_range+0x2f6/0xff0 [ 863.069054][T11554] ? mapping_evict_folio+0x520/0x520 [ 863.074341][T11554] ? parse_options+0xc03/0xdb0 [ 863.079108][T11554] ? jfs_fill_super+0xac0/0xac0 [ 863.083967][T11554] ? sync_filesystem+0x103/0x220 [ 863.088927][T11554] jfs_remount+0x337/0x5a0 [ 863.093345][T11554] ? jfs_statfs+0x550/0x550 [ 863.097841][T11554] ? __might_sleep+0xd0/0xd0 [ 863.102429][T11554] ? hook_sb_remount+0x19/0xc0 [ 863.107195][T11554] reconfigure_super+0x219/0x880 [ 863.112127][T11554] path_mount+0xdfd/0x1010 [ 863.116546][T11554] ? kmem_cache_free+0xf7/0x290 [ 863.121388][T11554] __se_sys_mount+0x2d6/0x3c0 [ 863.126066][T11554] ? __x64_sys_mount+0xc0/0xc0 [ 863.130820][T11554] ? lockdep_hardirqs_on+0x94/0x140 [ 863.136012][T11554] ? __x64_sys_mount+0x1c/0xc0 [ 863.140765][T11554] do_syscall_64+0x4c/0xa0 [ 863.145184][T11554] ? clear_bhb_loop+0x60/0xb0 [ 863.149869][T11554] ? clear_bhb_loop+0x60/0xb0 [ 863.154546][T11554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 863.160464][T11554] RIP: 0033:0x7f5e2b98ebe9 [ 863.164881][T11554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.184496][T11554] RSP: 002b:00007f5e2c81e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 863.192924][T11554] RAX: ffffffffffffffda RBX: 00007f5e2bbb5fa0 RCX: 00007f5e2b98ebe9 [ 863.200886][T11554] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 863.208851][T11554] RBP: 00007f5e2ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 863.216863][T11554] R10: 0000000002012024 R11: 0000000000000246 R12: 0000000000000000 [ 863.224836][T11554] R13: 00007f5e2bbb6038 R14: 00007f5e2bbb5fa0 R15: 00007fff0bb26fa8 [ 863.232821][T11554] [ 863.237958][T11554] BUG: Bad page state in process syz.0.1625 pfn:75fee [ 863.246854][T11554] page:ffffea0001d7fb80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x31 pfn:0x75fee [ 863.257272][T11554] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 863.268586][T11554] raw: 00fff00000002006 ffffea00012c8f08 ffffc9000602f980 0000000000000000 [ 863.277558][T11554] raw: 0000000000000031 ffff88807cfc23e0 00000000ffffffff 0000000000000000 [ 863.287299][T11554] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 863.294721][T11554] page_owner tracks the page as allocated [ 863.300496][T11554] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 11554, tgid 11551 (syz.0.1625), ts 861650779732, free_ts 861618997299 [ 863.318890][T11554] post_alloc_hook+0x173/0x1a0 [ 863.323957][T11554] get_page_from_freelist+0x1a26/0x1ac0 [ 863.330622][T11554] __alloc_pages+0x1df/0x4e0 [ 863.335323][T11554] folio_alloc+0x1c/0x60 [ 863.339627][T11554] filemap_alloc_folio+0xdb/0x460 [ 863.345738][T11554] __filemap_get_folio+0x697/0xdd0 [ 863.351177][T11554] pagecache_get_page+0x26/0x250 [ 863.356211][T11554] __get_metapage+0x2a4/0xfa0 [ 863.360944][T11554] diNewExt+0x9eb/0x2cb0 [ 863.365232][T11554] diAllocAG+0xde9/0x1c20 [ 863.369576][T11554] diAlloc+0x1c9/0x1910 [ 863.373962][T11554] ialloc+0x88/0x950 [ 863.377925][T11554] jfs_mkdir+0x190/0xa70 [ 863.382172][T11554] vfs_mkdir+0x387/0x570 [ 863.386629][T11554] do_mkdirat+0x1d0/0x430 [ 863.391019][T11554] __x64_sys_mkdirat+0x85/0x90 [ 863.395993][T11554] page last free stack trace: [ 863.400731][T11554] free_unref_page_prepare+0x8b4/0x9a0 [ 863.406770][T11554] free_unref_page+0x2e/0x3f0 [ 863.411534][T11554] tlb_finish_mmu+0x10c/0x1c0 [ 863.416265][T11554] exit_mmap+0x343/0x8e0 [ 863.420518][T11554] __mmput+0x118/0x3c0 [ 863.424726][T11554] exit_mm+0x1e6/0x2c0 [ 863.428864][T11554] do_exit+0x8c1/0x2400 [ 863.433028][T11554] do_group_exit+0x217/0x2d0 [ 863.437828][T11554] __x64_sys_exit_group+0x3b/0x40 [ 863.442933][T11554] do_syscall_64+0x4c/0xa0 [ 863.447385][T11554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 863.453539][T11554] Modules linked in: [ 863.458414][T11554] CPU: 1 PID: 11554 Comm: syz.0.1625 Tainted: G B 6.1.147-syzkaller #0 [ 863.468048][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 863.478093][T11554] Call Trace: [ 863.481365][T11554] [ 863.484294][T11554] dump_stack_lvl+0x168/0x22e [ 863.488980][T11554] ? show_regs_print_info+0x12/0x12 [ 863.494169][T11554] ? swiotlb_print_info+0x60/0x60 [ 863.499196][T11554] bad_page+0x14b/0x170 [ 863.503357][T11554] free_unref_page_prepare+0x42a/0x9a0 [ 863.508811][T11554] ? percpu_ref_put+0x19/0x180 [ 863.513576][T11554] free_unref_page_list+0xbb/0x8e0 [ 863.518691][T11554] release_pages+0x1f92/0x2200 [ 863.523460][T11554] ? lru_cache_disable+0x30/0x30 [ 863.528398][T11554] ? mlock_page_drain_local+0x75/0x490 [ 863.533856][T11554] ? mlock_page_drain_local+0x75/0x490 [ 863.539311][T11554] ? mlock_page_drain_local+0x289/0x490 [ 863.544870][T11554] __pagevec_release+0x6d/0xe0 [ 863.549630][T11554] truncate_inode_pages_range+0x2f6/0xff0 [ 863.555354][T11554] ? mapping_evict_folio+0x520/0x520 [ 863.560637][T11554] ? parse_options+0xc03/0xdb0 [ 863.565423][T11554] ? jfs_fill_super+0xac0/0xac0 [ 863.570290][T11554] ? sync_filesystem+0x103/0x220 [ 863.575230][T11554] jfs_remount+0x337/0x5a0 [ 863.579657][T11554] ? jfs_statfs+0x550/0x550 [ 863.584158][T11554] ? __might_sleep+0xd0/0xd0 [ 863.588750][T11554] ? hook_sb_remount+0x19/0xc0 [ 863.593512][T11554] reconfigure_super+0x219/0x880 [ 863.598445][T11554] path_mount+0xdfd/0x1010 [ 863.602852][T11554] ? kmem_cache_free+0xf7/0x290 [ 863.607698][T11554] __se_sys_mount+0x2d6/0x3c0 [ 863.612383][T11554] ? __x64_sys_mount+0xc0/0xc0 [ 863.617149][T11554] ? lockdep_hardirqs_on+0x94/0x140 [ 863.622347][T11554] ? __x64_sys_mount+0x1c/0xc0 [ 863.627104][T11554] do_syscall_64+0x4c/0xa0 [ 863.631520][T11554] ? clear_bhb_loop+0x60/0xb0 [ 863.636192][T11554] ? clear_bhb_loop+0x60/0xb0 [ 863.640872][T11554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 863.646766][T11554] RIP: 0033:0x7f5e2b98ebe9 [ 863.651216][T11554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.670826][T11554] RSP: 002b:00007f5e2c81e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 863.679271][T11554] RAX: ffffffffffffffda RBX: 00007f5e2bbb5fa0 RCX: 00007f5e2b98ebe9 [ 863.687250][T11554] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 863.695218][T11554] RBP: 00007f5e2ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 863.703192][T11554] R10: 0000000002012024 R11: 0000000000000246 R12: 0000000000000000 [ 863.711180][T11554] R13: 00007f5e2bbb6038 R14: 00007f5e2bbb5fa0 R15: 00007fff0bb26fa8 [ 863.719151][T11554] [ 863.724135][T11554] BUG: Bad page state in process syz.0.1625 pfn:7cc45 [ 863.732159][T11554] page:ffffea0001f31140 refcount:0 mapcount:0 mapping:0000000000000000 index:0xd pfn:0x7cc45 [ 863.742504][T11554] flags: 0xfff08000002046(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 863.753342][T11554] raw: 00fff08000002046 ffffea0001f99e48 ffffea000069d648 0000000000000000 [ 863.762326][T11554] raw: 000000000000000d ffff88807cfc22e8 00000000ffffffff 0000000000000000 [ 863.771136][T11554] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 863.778669][T11554] page_owner tracks the page as allocated [ 863.784648][T11554] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 11554, tgid 11551 (syz.0.1625), ts 861477395460, free_ts 861409299782 [ 863.803208][T11554] post_alloc_hook+0x173/0x1a0 [ 863.808286][T11554] get_page_from_freelist+0x1a26/0x1ac0 [ 863.813987][T11554] __alloc_pages+0x1df/0x4e0 [ 863.818722][T11554] folio_alloc+0x1c/0x60 [ 863.823029][T11554] filemap_alloc_folio+0xdb/0x460 [ 863.828324][T11554] do_read_cache_folio+0x1bb/0x760 [ 863.833505][T11554] do_read_cache_page+0x32/0x220 [ 863.838618][T11554] __get_metapage+0x316/0xfa0 [ 863.843498][T11554] diReadSpecial+0x257/0x6f0 [ 863.848181][T11554] jfs_mount+0x3cd/0x860 [ 863.852574][T11554] jfs_fill_super+0x4de/0xac0 [ 863.858364][T11554] mount_bdev+0x287/0x3c0 [ 863.863022][T11554] legacy_get_tree+0xe6/0x180 [ 863.867817][T11554] vfs_get_tree+0x88/0x270 [ 863.872341][T11554] do_new_mount+0x24a/0xa40 [ 863.876981][T11554] __se_sys_mount+0x2d6/0x3c0 [ 863.881782][T11554] page last free stack trace: [ 863.886542][T11554] free_unref_page_prepare+0x8b4/0x9a0 [ 863.892158][T11554] free_unref_page_list+0xbb/0x8e0 [ 863.897367][T11554] release_pages+0x1f92/0x2200 [ 863.902516][T11554] tlb_flush_mmu+0xff/0x210 [ 863.907108][T11554] tlb_finish_mmu+0xbd/0x1c0 [ 863.911819][T11554] exit_mmap+0x343/0x8e0 [ 863.916208][T11554] __mmput+0x118/0x3c0 [ 863.920409][T11554] exit_mm+0x1e6/0x2c0 [ 863.924565][T11554] do_exit+0x8c1/0x2400 [ 863.928861][T11554] do_group_exit+0x217/0x2d0 [ 863.933497][T11554] get_signal+0x1272/0x1350 [ 863.938309][T11554] arch_do_signal_or_restart+0xb0/0x1230 [ 863.944072][T11554] exit_to_user_mode_loop+0x70/0x110 [ 863.949474][T11554] exit_to_user_mode_prepare+0xb1/0x140 [ 863.955160][T11554] syscall_exit_to_user_mode+0x16/0x40 [ 863.960796][T11554] do_syscall_64+0x58/0xa0 [ 863.966725][T11554] Modules linked in: [ 863.970719][T11554] CPU: 0 PID: 11554 Comm: syz.0.1625 Tainted: G B 6.1.147-syzkaller #0 [ 863.980347][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 863.990394][T11554] Call Trace: [ 863.993668][T11554] [ 863.996590][T11554] dump_stack_lvl+0x168/0x22e [ 864.001258][T11554] ? show_regs_print_info+0x12/0x12 [ 864.006459][T11554] ? swiotlb_print_info+0x60/0x60 [ 864.011492][T11554] bad_page+0x14b/0x170 [ 864.015661][T11554] free_unref_page_prepare+0x42a/0x9a0 [ 864.021127][T11554] free_unref_page_list+0xbb/0x8e0 [ 864.026238][T11554] release_pages+0x1f92/0x2200 [ 864.031006][T11554] ? lru_cache_disable+0x30/0x30 [ 864.035948][T11554] ? mlock_page_drain_local+0x75/0x490 [ 864.041398][T11554] ? mlock_page_drain_local+0x75/0x490 [ 864.046849][T11554] ? mlock_page_drain_local+0x289/0x490 [ 864.052385][T11554] __pagevec_release+0x6d/0xe0 [ 864.057144][T11554] truncate_inode_pages_range+0x2f6/0xff0 [ 864.062864][T11554] ? mapping_evict_folio+0x520/0x520 [ 864.068151][T11554] ? parse_options+0xc03/0xdb0 [ 864.072920][T11554] ? jfs_fill_super+0xac0/0xac0 [ 864.077777][T11554] ? sync_filesystem+0x103/0x220 [ 864.082734][T11554] jfs_remount+0x337/0x5a0 [ 864.087153][T11554] ? jfs_statfs+0x550/0x550 [ 864.091652][T11554] ? __might_sleep+0xd0/0xd0 [ 864.096271][T11554] ? hook_sb_remount+0x19/0xc0 [ 864.101038][T11554] reconfigure_super+0x219/0x880 [ 864.105983][T11554] path_mount+0xdfd/0x1010 [ 864.110414][T11554] ? kmem_cache_free+0xf7/0x290 [ 864.115271][T11554] __se_sys_mount+0x2d6/0x3c0 [ 864.119943][T11554] ? __x64_sys_mount+0xc0/0xc0 [ 864.124722][T11554] ? lockdep_hardirqs_on+0x94/0x140 [ 864.129916][T11554] ? __x64_sys_mount+0x1c/0xc0 [ 864.134686][T11554] do_syscall_64+0x4c/0xa0 [ 864.139099][T11554] ? clear_bhb_loop+0x60/0xb0 [ 864.143768][T11554] ? clear_bhb_loop+0x60/0xb0 [ 864.148442][T11554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.154335][T11554] RIP: 0033:0x7f5e2b98ebe9 [ 864.158743][T11554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.178349][T11554] RSP: 002b:00007f5e2c81e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 864.186762][T11554] RAX: ffffffffffffffda RBX: 00007f5e2bbb5fa0 RCX: 00007f5e2b98ebe9 [ 864.194734][T11554] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 864.202719][T11554] RBP: 00007f5e2ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 864.210693][T11554] R10: 0000000002012024 R11: 0000000000000246 R12: 0000000000000000 [ 864.218660][T11554] R13: 00007f5e2bbb6038 R14: 00007f5e2bbb5fa0 R15: 00007fff0bb26fa8 [ 864.226644][T11554] [ 864.276629][ T108] BUG: Bad page state in process jfsCommit pfn:7bf18 [ 864.283492][ T108] page:ffffea0001efc600 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2d pfn:0x7bf18 [ 864.293964][ T108] flags: 0xfff00000002007(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 864.304266][ T108] raw: 00fff00000002007 dead000000000100 dead000000000122 0000000000000000 [ 864.312901][ T108] raw: 000000000000002d ffff88807cfc2d90 00000000ffffffff 0000000000000000 [ 864.321555][ T108] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 864.328927][ T108] page_owner tracks the page as allocated [ 864.335392][ T108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 11554, tgid 11551 (syz.0.1625), ts 861657815731, free_ts 861617322909 [ 864.353802][ T108] post_alloc_hook+0x173/0x1a0 [ 864.358677][ T108] get_page_from_freelist+0x1a26/0x1ac0 [ 864.364370][ T108] __alloc_pages+0x1df/0x4e0 [ 864.369016][ T108] folio_alloc+0x1c/0x60 [ 864.373489][ T108] filemap_alloc_folio+0xdb/0x460 [ 864.378750][ T108] __filemap_get_folio+0x697/0xdd0 [ 864.383962][ T108] pagecache_get_page+0x26/0x250 [ 864.388967][ T108] __get_metapage+0x2a4/0xfa0 [ 864.393656][ T108] dtSplitRoot+0x1de/0x14e0 [ 864.398408][ T108] dtInsert+0xe2a/0x58a0 [ 864.402710][ T108] jfs_mkdir+0x6e5/0xa70 [ 864.406983][ T108] vfs_mkdir+0x387/0x570 [ 864.411240][ T108] do_mkdirat+0x1d0/0x430 [ 864.415736][ T108] __x64_sys_mkdirat+0x85/0x90 [ 864.420603][ T108] do_syscall_64+0x4c/0xa0 [ 864.425048][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.430965][ T108] page last free stack trace: [ 864.435787][ T108] free_unref_page_prepare+0x8b4/0x9a0 [ 864.441296][ T108] free_unref_page_list+0xbb/0x8e0 [ 864.446993][ T108] release_pages+0x1f92/0x2200 [ 864.451814][ T108] tlb_flush_mmu+0xff/0x210 [ 864.456353][ T108] tlb_finish_mmu+0xbd/0x1c0 [ 864.460951][ T108] exit_mmap+0x343/0x8e0 [ 864.465327][ T108] __mmput+0x118/0x3c0 [ 864.469439][ T108] exit_mm+0x1e6/0x2c0 [ 864.473515][ T108] do_exit+0x8c1/0x2400 [ 864.478028][ T108] do_group_exit+0x217/0x2d0 [ 864.482683][ T108] __x64_sys_exit_group+0x3b/0x40 [ 864.487882][ T108] do_syscall_64+0x4c/0xa0 [ 864.492343][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.498431][ T108] Modules linked in: [ 864.502435][ T108] CPU: 1 PID: 108 Comm: jfsCommit Tainted: G B 6.1.147-syzkaller #0 [ 864.511810][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 864.521883][ T108] Call Trace: [ 864.525161][ T108] [ 864.528087][ T108] dump_stack_lvl+0x168/0x22e [ 864.532765][ T108] ? show_regs_print_info+0x12/0x12 [ 864.537958][ T108] ? swiotlb_print_info+0x60/0x60 [ 864.542997][ T108] bad_page+0x14b/0x170 [ 864.547156][ T108] free_unref_page_prepare+0x42a/0x9a0 [ 864.552635][ T108] free_unref_page+0x2e/0x3f0 [ 864.557311][ T108] ? __folio_put+0xf1/0x210 [ 864.561832][ T108] txUnlock+0x27e/0xcb0 [ 864.565989][ T108] jfs_lazycommit+0x56c/0xa50 [ 864.570681][ T108] ? txFreelock+0x5a0/0x5a0 [ 864.575177][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 864.581072][ T108] ? do_task_dead+0xd0/0xd0 [ 864.585574][ T108] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 864.591467][ T108] ? __kthread_parkme+0x162/0x1c0 [ 864.596493][ T108] kthread+0x29d/0x330 [ 864.600560][ T108] ? txFreelock+0x5a0/0x5a0 [ 864.605060][ T108] ? kthread_blkcg+0xd0/0xd0 [ 864.609685][ T108] ret_from_fork+0x1f/0x30 [ 864.614103][ T108] [ 864.620272][ T108] page:ffffea0001efc600 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2d pfn:0x7bf18 [ 864.630601][ T108] flags: 0xfff00000002007(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 864.641966][ T108] raw: 00fff00000002007 dead000000000100 dead000000000122 0000000000000000 [ 864.650667][ T108] raw: 000000000000002d ffff88807cfc2d90 00000000ffffffff 0000000000000000 [ 864.660570][ T108] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 864.671106][ T108] page_owner tracks the page as allocated [ 864.678153][ T108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 11554, tgid 11551 (syz.0.1625), ts 861657815731, free_ts 861617322909 [ 864.696945][ T108] post_alloc_hook+0x173/0x1a0 [ 864.701815][ T108] get_page_from_freelist+0x1a26/0x1ac0 [ 864.707461][ T108] __alloc_pages+0x1df/0x4e0 [ 864.712216][ T108] folio_alloc+0x1c/0x60 [ 864.716613][ T108] filemap_alloc_folio+0xdb/0x460 [ 864.721773][ T108] __filemap_get_folio+0x697/0xdd0 [ 864.727092][ T108] pagecache_get_page+0x26/0x250 [ 864.732161][ T108] __get_metapage+0x2a4/0xfa0 [ 864.736985][ T108] dtSplitRoot+0x1de/0x14e0 [ 864.741718][ T108] dtInsert+0xe2a/0x58a0 [ 864.746478][ T108] jfs_mkdir+0x6e5/0xa70 [ 864.752078][ T108] vfs_mkdir+0x387/0x570 [ 864.756429][ T108] do_mkdirat+0x1d0/0x430 [ 864.761073][ T108] __x64_sys_mkdirat+0x85/0x90 [ 864.766460][ T108] do_syscall_64+0x4c/0xa0 [ 864.771939][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.778138][ T108] page last free stack trace: [ 864.783204][ T108] free_unref_page_prepare+0x8b4/0x9a0 [ 864.802250][ T108] free_unref_page_list+0xbb/0x8e0 [ 864.807501][ T108] release_pages+0x1f92/0x2200 [ 864.812451][ T108] tlb_flush_mmu+0xff/0x210 [ 864.818402][ T108] tlb_finish_mmu+0xbd/0x1c0 [ 864.823092][ T108] exit_mmap+0x343/0x8e0 [ 864.827420][ T108] __mmput+0x118/0x3c0 [ 864.831666][ T108] exit_mm+0x1e6/0x2c0 [ 864.837577][ T108] do_exit+0x8c1/0x2400 [ 864.841831][ T108] do_group_exit+0x217/0x2d0 [ 864.846632][ T108] __x64_sys_exit_group+0x3b/0x40 [ 864.851853][ T108] do_syscall_64+0x4c/0xa0 [ 864.856445][ T108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.863051][ T108] ------------[ cut here ]------------ [ 864.868577][ T108] kernel BUG at include/linux/mm.h:1135! [ 864.874427][ T108] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 864.880535][ T108] CPU: 0 PID: 108 Comm: jfsCommit Tainted: G B 6.1.147-syzkaller #0 [ 864.889894][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 864.899958][ T108] RIP: 0010:put_metapage+0x24f/0x340 [ 864.905236][ T108] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b 89 e4 fe e9 25 ff ff ff e8 a1 6c 94 fe 48 8b 3c 24 48 c7 c6 80 21 c6 8a e8 91 f8 ce fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 5a 70 94 [ 864.924831][ T108] RSP: 0018:ffffc90002cb7ce0 EFLAGS: 00010246 [ 864.930900][ T108] RAX: f792d0561fab0e00 RBX: ffff88807cfc2d90 RCX: f792d0561fab0e00 [ 864.938862][ T108] RDX: 0000000000000000 RSI: ffffffff8adef300 RDI: ffffffff8adef2c0 [ 864.946823][ T108] RBP: 000000000000007f R08: dffffc0000000000 R09: fffffbfff1c3e976 [ 864.954785][ T108] R10: fffffbfff1c3e976 R11: 1ffffffff1c3e975 R12: ffff88807cfc2db8 [ 864.962746][ T108] R13: ffffea0001efc634 R14: 1ffff1100f9f85b7 R15: 1ffff1100f9f85c4 [ 864.970719][ T108] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 864.979648][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 864.986225][ T108] CR2: 00007f0596583ad8 CR3: 000000007d023000 CR4: 00000000003506f0 [ 864.994198][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 865.002164][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 865.010130][ T108] Call Trace: [ 865.013404][ T108] [ 865.016332][ T108] txUnlock+0x427/0xcb0 [ 865.020490][ T108] jfs_lazycommit+0x56c/0xa50 [ 865.025174][ T108] ? txFreelock+0x5a0/0x5a0 [ 865.029670][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 865.035563][ T108] ? do_task_dead+0xd0/0xd0 [ 865.040067][ T108] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 865.045965][ T108] ? __kthread_parkme+0x162/0x1c0 [ 865.051006][ T108] kthread+0x29d/0x330 [ 865.055074][ T108] ? txFreelock+0x5a0/0x5a0 [ 865.059580][ T108] ? kthread_blkcg+0xd0/0xd0 [ 865.064182][ T108] ret_from_fork+0x1f/0x30 [ 865.068600][ T108] [ 865.071614][ T108] Modules linked in: [ 865.081586][ T108] ---[ end trace 0000000000000000 ]--- [ 865.087716][ T108] RIP: 0010:put_metapage+0x24f/0x340 [ 865.093527][ T108] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b 89 e4 fe e9 25 ff ff ff e8 a1 6c 94 fe 48 8b 3c 24 48 c7 c6 80 21 c6 8a e8 91 f8 ce fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 5a 70 94 [ 865.115897][ T108] RSP: 0018:ffffc90002cb7ce0 EFLAGS: 00010246 [ 865.123343][ T108] RAX: f792d0561fab0e00 RBX: ffff88807cfc2d90 RCX: f792d0561fab0e00 [ 865.131440][ T108] RDX: 0000000000000000 RSI: ffffffff8adef300 RDI: ffffffff8adef2c0 [ 865.139549][ T108] RBP: 000000000000007f R08: dffffc0000000000 R09: fffffbfff1c3e976 [ 865.147661][ T108] R10: fffffbfff1c3e976 R11: 1ffffffff1c3e975 R12: ffff88807cfc2db8 [ 865.155750][ T108] R13: ffffea0001efc634 R14: 1ffff1100f9f85b7 R15: 1ffff1100f9f85c4 [ 865.164262][ T108] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 865.173312][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 865.180009][ T108] CR2: 00007f0596583ad8 CR3: 000000005cefb000 CR4: 00000000003506f0 [ 865.188155][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 865.196479][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 865.204942][ T108] Kernel panic - not syncing: Fatal exception [ 865.211301][ T108] Kernel Offset: disabled [ 865.215638][ T108] Rebooting in 86400 seconds..