last executing test programs: 5.505203014s ago: executing program 2 (id=831): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 5.114513094s ago: executing program 2 (id=835): unshare(0x40200) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) semctl$SETVAL(r0, 0x3, 0x10, 0x0) 4.47610609s ago: executing program 3 (id=843): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x716e) accept$inet6(r0, 0x0, 0x0) 4.360269412s ago: executing program 3 (id=845): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xfd, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000740)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x8, [{@private=0xa010100, 0x100}, {@local}, {@remote, 0x6}]}]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "3ce7b9286b574dc2720ef6057772f09df9d3421eee34e003", "047b90670593e17881953d1e429031066797feb6632a4cea988cc9256fe11df4"}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10042, 0x0) 4.226404606s ago: executing program 3 (id=846): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) 4.205592106s ago: executing program 2 (id=847): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x1, 0xff}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write(r1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x8, 0x100, 0x7}) 3.274858209s ago: executing program 0 (id=858): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0xfffffffffffffee0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x1000, 0x9, 0x4, 0x8000, 0xfffd, 0xec, 0x3906, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.770554812s ago: executing program 1 (id=854): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000200)="010000000000000001000000000000000000000000000000000000007f0000007f000000000000000100"/76) write(r1, &(0x7f0000000300)="f9037301d7f9", 0x6) 2.572247917s ago: executing program 2 (id=855): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2008082, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xfc, 0xc3d, &(0x7f0000001ac0)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0xfffffffffffffe8c}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card3/oss_mixer\x00', 0x84440, 0x0) 2.279712204s ago: executing program 2 (id=856): memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000380)="581991f6b25ee1faad059c7290cfb4213d370984c7f9e8717f75f9d39deb0afb907c9fa24a0b851333a469a44c21d7b1b0a37f300b250c30129f5355819ddc70d1eca14df0e9c258f50ba013fd748ef0976a1fa87c64b2113b2202ae1dfae0dfb619836d3fb09a3576bd1f59df8389e7878640d03bcb8d557af8695954e25349845b6ee3be36392a627b56038d1cca00d993f1cb7e72f6325fdd46d11fada07f701b5637865cacc87c6ecbfeb8af316dfd3b2ce183697659ec942aa7edd1cbd67e08ee020781f041e470b641a059653d7ca08741f5d2b33778f36ca393b7036068ab554d", 0xe4, 0xfffffffffffffffe) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.874532604s ago: executing program 1 (id=857): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x132a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 1.818041515s ago: executing program 3 (id=859): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000ea8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.721751568s ago: executing program 3 (id=860): r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/344], 0x6, 0x551b, &(0x7f0000006100)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) unlink(&(0x7f0000000080)='./file1\x00') ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) dup2(r0, r1) 1.721045478s ago: executing program 1 (id=868): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 727.096072ms ago: executing program 1 (id=861): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002019}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x7) 688.807453ms ago: executing program 0 (id=862): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) read(r0, &(0x7f0000000500)=""/100, 0x64) 649.650264ms ago: executing program 3 (id=863): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x1414c1) unshare(0x22020400) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x48000, 0x41) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffe, 0x0, 0x0, 0x4, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad33000100", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000300)) 520.025557ms ago: executing program 1 (id=864): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) 519.117387ms ago: executing program 0 (id=865): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) writev(r0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 395.72211ms ago: executing program 0 (id=866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a3d0100000000000000150a0000060900020073797a31000000000900010073797a31000000002c0003801c0000840c00018006000100d10300000c000440000000002df31ab30c000080080003400000000214000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 229.358744ms ago: executing program 1 (id=867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x3) 228.514564ms ago: executing program 0 (id=869): r0 = syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e3, &(0x7f0000000800)="$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") ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1fd) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) 6.47323ms ago: executing program 2 (id=870): open(&(0x7f0000000000)='./file0\x00', 0x68940, 0xac) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 0s ago: executing program 0 (id=871): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) kernel console output (not intermixed with test programs): sb_ep_enable returned -22 [ 83.800271][ T5785] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 83.817904][ T5785] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 83.830405][ T5785] usbserial_generic 4-1:1.0: generic converter detected [ 83.850422][ T5785] usb 4-1: generic converter now attached to ttyUSB0 [ 83.962328][ T6061] loop2: detected capacity change from 0 to 32768 [ 83.969635][ T6061] ======================================================= [ 83.969635][ T6061] WARNING: The mand mount option has been deprecated and [ 83.969635][ T6061] and is ignored by this kernel. Remove the mand [ 83.969635][ T6061] option from the mount to silence this warning. [ 83.969635][ T6061] ======================================================= [ 84.037985][ T6061] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.083197][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 84.083445][ T5832] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.135006][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 84.144515][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 84.154297][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 84.163781][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 84.174261][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 84.201236][ T6061] XFS (loop2): Ending clean mount [ 84.229879][ T6061] XFS (loop2): Quotacheck needed: Please wait. [ 84.234177][ T5785] usb 4-1: USB disconnect, device number 2 [ 84.248363][ T5785] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 84.259280][ T5785] usbserial_generic 4-1:1.0: device disconnected [ 84.302349][ T6061] XFS (loop2): Quotacheck: Done. [ 84.309298][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 84.323171][ T5832] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.343443][ T5832] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.365232][ T5832] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.377067][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.400935][ T27] audit: type=1800 audit(1786565526.051:11): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.86" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 84.446807][ T5832] usb 2-1: Product: syz [ 84.451021][ T5832] usb 2-1: Manufacturer: syz [ 84.463506][ T5832] usb 2-1: SerialNumber: syz [ 84.508599][ T5780] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.704057][ T5832] usb 2-1: 0:2 : does not exist [ 84.731748][ T5832] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 84.831963][ T5832] usb 2-1: USB disconnect, device number 2 [ 85.263340][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 85.450978][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 85.460242][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.468310][ T9] usb 3-1: Product: syz [ 85.472479][ T9] usb 3-1: Manufacturer: syz [ 85.478031][ T9] usb 3-1: SerialNumber: syz [ 85.489329][ T9] usb 3-1: config 0 descriptor?? [ 85.504756][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 85.520471][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.531256][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 85.549188][ T9] usb 3-1: media controller created [ 85.581075][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.666309][ T9] DVB: Unable to find symbol mt352_attach() [ 85.717255][ T6083] dvb-usb: bulk message failed: -22 (7/0) [ 85.743819][ T9] DVB: Unable to find symbol nxt6000_attach() [ 85.763305][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 85.776434][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 85.805469][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 85.812544][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 85.822830][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 85.830867][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 85.845510][ T9] usb 3-1: USB disconnect, device number 5 [ 85.976678][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 86.112300][ T6107] loop1: detected capacity change from 0 to 256 [ 86.183413][ T6107] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 86.366720][ T6111] capability: warning: `syz.3.105' uses deprecated v2 capabilities in a way that may be insecure [ 86.694247][ T6123] netlink: 200 bytes leftover after parsing attributes in process `syz.0.111'. [ 86.873141][ T6131] tipc: New replicast peer: 255.255.255.255 [ 86.881790][ T6131] tipc: Enabled bearer , priority 10 [ 86.969948][ T173] cfg80211: failed to load regulatory.db [ 87.290976][ T6150] loop5: detected capacity change from 0 to 7 [ 87.309051][ T6150] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 87.333405][ T173] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 87.333984][ T6150] loop5: partition table partially beyond EOD, truncated [ 87.378489][ T6150] loop5: p1 size 487441168 extends beyond EOD, truncated [ 87.411209][ T27] audit: type=1326 audit(1786565529.061:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.125" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7e779e0d9 code=0x0 [ 87.495700][ T6157] loop0: detected capacity change from 0 to 1024 [ 87.496499][ T5987] udevd[5987]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 87.544888][ T6157] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 87.550535][ T173] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.577543][ T6157] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 87.587294][ T6157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.619368][ T173] usb 4-1: not running at top speed; connect to a high speed hub [ 87.636096][ T6157] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.127: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 87.660126][ T173] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 87.689026][ T173] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 87.704640][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.714125][ T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.722541][ T173] usb 4-1: Product: syz [ 87.755572][ T173] usb 4-1: Manufacturer: syz [ 87.769284][ T173] usb 4-1: SerialNumber: syz [ 88.012579][ T173] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 88.031595][ T173] usb 4-1: MIDIStreaming interface descriptor not found [ 88.082711][ T6168] binder: 6167:6168 ioctl c0306201 0 returned -14 [ 88.107809][ T6168] binder: 6167:6168 ioctl c0046209 0 returned -22 [ 88.118207][ T173] usb 4-1: USB disconnect, device number 3 [ 88.208233][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.660530][ T6178] input: syz0 as /devices/virtual/input/input9 [ 89.096478][ T6187] loop1: detected capacity change from 0 to 32768 [ 89.119815][ T6187] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 89.158834][ T6187] XFS (loop1): Ending clean mount [ 89.375799][ T6202] loop0: detected capacity change from 0 to 256 [ 89.379241][ T5778] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 89.394526][ T6202] exfat: Deprecated parameter 'utf8' [ 89.429622][ T6202] exfat: Deprecated parameter 'utf8' [ 89.459755][ T6202] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 90.077049][ T6219] netlink: 'syz.1.148': attribute type 21 has an invalid length. [ 90.093633][ T6219] netlink: 128 bytes leftover after parsing attributes in process `syz.1.148'. [ 90.104349][ T6219] netlink: 3 bytes leftover after parsing attributes in process `syz.1.148'. [ 90.423473][ T5832] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.640155][ T5832] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 90.661502][ T6232] loop3: detected capacity change from 0 to 512 [ 90.675251][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.684819][ T6232] EXT4-fs: Ignoring removed bh option [ 90.703603][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.719389][ T6232] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.729127][ T5832] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 90.741410][ T6234] loop2: detected capacity change from 0 to 512 [ 90.751839][ T6232] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.778408][ T5832] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 90.794060][ T6234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.808969][ T5832] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 90.831286][ T6234] EXT4-fs (loop2): 1 truncate cleaned up [ 90.832129][ T6232] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.843290][ T5832] usb 2-1: Manufacturer: syz [ 90.872550][ T6234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.885819][ T6232] EXT4-fs (loop3): 1 truncate cleaned up [ 90.892668][ T6232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.925286][ T5832] usb 2-1: config 0 descriptor?? [ 90.938186][ T27] audit: type=1800 audit(1786565532.591:13): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.154" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 91.197679][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.297200][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.353863][ T5832] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 91.374160][ T5832] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 91.413826][ T5832] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 91.614169][ T6250] block nbd0: NBD_DISCONNECT [ 91.631953][ T6247] block nbd0: Disconnected due to user request. [ 91.669930][ T6247] block nbd0: shutting down sockets [ 91.750015][ T5832] usb 2-1: USB disconnect, device number 3 [ 92.399247][ T6281] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 92.464737][ T6281] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 92.582644][ T6286] Zero length message leads to an empty skb [ 93.103392][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 93.382893][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 93.698680][ T6319] loop3: detected capacity change from 0 to 512 [ 93.753172][ T5987] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.547418][ T6325] loop3: detected capacity change from 0 to 512 [ 94.567601][ T6325] EXT4-fs (loop3): 1 truncate cleaned up [ 94.575018][ T6325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.629773][ T6325] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.192: bg 0: block 465: padding at end of block bitmap is not set [ 94.671197][ T6325] EXT4-fs (loop3): Remounting filesystem read-only [ 94.733582][ T6331] Illegal XDP return value 4292175216 on prog (id 16) dev N/A, expect packet loss! [ 94.789028][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.883547][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 94.890170][ T5782] Bluetooth: hci4: command 0x1003 tx timeout [ 94.898714][ T6335] syzkaller1: entered allmulticast mode [ 95.384877][ T6354] warning: `syz.0.204' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.400021][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 95.435055][ T6357] team1: entered promiscuous mode [ 95.454203][ T6357] team1: entered allmulticast mode [ 95.474069][ T6357] 8021q: adding VLAN 0 to HW filter on device team1 [ 95.924953][ T6373] loop1: detected capacity change from 0 to 128 [ 95.965102][ T6373] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 96.119984][ T6373] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 96.141482][ T6373] FAT-fs (loop1): Filesystem has been set read-only [ 96.151512][ T6373] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 96.271683][ T6377] loop2: detected capacity change from 0 to 128 [ 96.312867][ T6377] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.335554][ T6377] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.424555][ T6383] loop1: detected capacity change from 0 to 128 [ 96.432120][ T6383] EXT4-fs: inline encryption not supported [ 96.443986][ T6383] EXT4-fs (loop1): Test dummy encryption mode enabled [ 96.458821][ T6383] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.472090][ T6383] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.494722][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.899410][ T6383] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 97.028092][ T5778] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.437922][ T6418] C: renamed from team_slave_0 (while UP) [ 97.448974][ T6418] netlink: 'syz.2.227': attribute type 2 has an invalid length. [ 97.458040][ T6418] netlink: 116 bytes leftover after parsing attributes in process `syz.2.227'. [ 97.468893][ T6418] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 97.824677][ T6428] loop5: detected capacity change from 0 to 7 [ 97.840516][ T6428] Dev loop5: unable to read RDB block 7 [ 97.849991][ T6428] loop5: unable to read partition table [ 97.856355][ T6428] loop5: partition table beyond EOD, truncated [ 97.877708][ T6428] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 98.059357][ T6438] lo: entered allmulticast mode [ 98.072046][ T6437] lo: left allmulticast mode [ 98.193083][ T6443] netlink: 'syz.3.240': attribute type 4 has an invalid length. [ 98.303400][ T42] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 98.352479][ T6448] input: syz0 as /devices/virtual/input/input10 [ 98.463384][ T6452] loop3: detected capacity change from 0 to 1024 [ 98.481796][ T6452] EXT4-fs: Ignoring removed bh option [ 98.496678][ T6452] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.514078][ T42] usb 1-1: unable to get BOS descriptor or descriptor too short [ 98.528348][ T6452] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 98.534466][ T42] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 98.552240][ T6452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.565403][ T42] usb 1-1: config 100 has no interface number 0 [ 98.565452][ T42] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 98.583868][ T42] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 98.595581][ T42] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 98.606155][ T42] usb 1-1: config 100 interface 173 has no altsetting 0 [ 98.620033][ T42] usb 1-1: string descriptor 0 read error: -22 [ 98.626483][ T42] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 98.635767][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.654815][ T6436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.679751][ T42] metro_usb 1-1:100.173: Metrologic USB to Serial converter detected [ 98.692245][ T42] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 98.871057][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.005978][ T6436] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 99.038890][ T42] usb 1-1: USB disconnect, device number 4 [ 99.044120][ T6465] loop3: detected capacity change from 0 to 512 [ 99.057263][ T6465] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.069446][ T42] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 99.089012][ T42] metro_usb 1-1:100.173: device disconnected [ 99.106150][ T6465] EXT4-fs (loop3): 1 truncate cleaned up [ 99.156042][ T6465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.160516][ T27] audit: type=1800 audit(1786565540.811:14): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.249" name="attr_allow_any_host" dev="configfs" ino=9564 res=0 errno=0 [ 99.318981][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.375105][ T6472] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 99.494594][ T6472] overlayfs: failed to look up (tracing) for ino (-66) [ 99.791387][ T6487] loop2: detected capacity change from 0 to 2048 [ 99.906455][ T6487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.114757][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.468001][ T6513] pim6reg1: entered promiscuous mode [ 100.475749][ T6513] pim6reg1: entered allmulticast mode [ 100.657730][ T42] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 100.850817][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.864767][ T42] usb 3-1: config 0 has no interfaces? [ 100.878546][ T42] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 100.898481][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.916804][ T42] usb 3-1: Product: syz [ 100.926936][ T42] usb 3-1: Manufacturer: syz [ 100.937070][ T42] usb 3-1: SerialNumber: syz [ 100.948701][ T42] usb 3-1: config 0 descriptor?? [ 101.128919][ T6534] loop3: detected capacity change from 0 to 1024 [ 101.171659][ T6534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.195975][ T6534] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.294926][ T6534] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.275: lblock 3 mapped to illegal pblock 3 (length 3) [ 101.312622][ T6534] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 101.325190][ T6534] EXT4-fs (loop3): This should not happen!! Data will be lost [ 101.325190][ T6534] [ 101.387182][ T6534] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.275: bg 0: block 112: padding at end of block bitmap is not set [ 101.407521][ T6534] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 101.423384][ T6534] EXT4-fs (loop3): This should not happen!! Data will be lost [ 101.423384][ T6534] [ 101.433116][ T6534] EXT4-fs (loop3): Total free blocks count 0 [ 101.439264][ T6534] EXT4-fs (loop3): Free/Dirty block details [ 101.445553][ T6534] EXT4-fs (loop3): free_blocks=0 [ 101.451287][ T6534] EXT4-fs (loop3): dirty_blocks=64 [ 101.456578][ T6534] EXT4-fs (loop3): Block reservation details [ 101.482225][ T4516] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 101.698765][ T6548] loop1: detected capacity change from 0 to 164 [ 101.732941][ T6548] ISOFS: unable to read i-node block [ 101.739348][ T6548] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 102.083938][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.092298][ T5782] Bluetooth: hci0: command tx timeout [ 102.121322][ T6550] loop3: detected capacity change from 0 to 40427 [ 102.162207][ T6550] F2FS-fs (loop3): invalid crc value [ 102.180269][ T6550] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.263479][ T5832] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.329396][ T6550] F2FS-fs (loop3): Start checkpoint disabled! [ 102.356161][ T6562] loop0: detected capacity change from 0 to 512 [ 102.365186][ T6562] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.384085][ T6550] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 102.455188][ T6550] syz.3.281: attempt to access beyond end of device [ 102.455188][ T6550] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 102.485194][ T5832] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.517119][ T5832] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.542274][ T5832] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 102.552658][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.563673][ T5832] usb 2-1: Product: syz [ 102.567874][ T5832] usb 2-1: Manufacturer: syz [ 102.572486][ T5832] usb 2-1: SerialNumber: syz [ 102.596061][ T49] kworker/u4:3: attempt to access beyond end of device [ 102.596061][ T49] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 102.612620][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 102.621305][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 102.820098][ T5832] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 102.874229][ T6566] jffs2: notice: (6566) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 103.013588][ T6571] loop0: detected capacity change from 0 to 1024 [ 103.052625][ T6571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.065602][ T6571] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.092586][ T6571] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.290: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.109785][ T6571] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 103.122769][ T6571] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.122769][ T6571] [ 103.145091][ T6571] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.290: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.162984][ T6571] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.290: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.181775][ T6571] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.290: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.197717][ T6571] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.290: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.212638][ T6571] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.290: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.227137][ T6576] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.290: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.242786][ T6571] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.290: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.257401][ T6571] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.290: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.274734][ T5785] usb 2-1: USB disconnect, device number 4 [ 103.280439][ T6571] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.290: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.298179][ T5785] usblp0: removed [ 103.388366][ T23] usb 3-1: USB disconnect, device number 6 [ 103.800102][ T6587] loop2: detected capacity change from 0 to 4096 [ 103.942194][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.992106][ T6590] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.387415][ T6601] loop1: detected capacity change from 0 to 256 [ 104.683168][ T6610] loop1: detected capacity change from 0 to 256 [ 104.714824][ T6610] exfat: Deprecated parameter 'namecase' [ 104.749811][ T6610] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 105.113312][ T5831] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.294147][ T5831] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 105.302786][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.311863][ T5831] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.322879][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.330770][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.339783][ T5831] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.351641][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.359379][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.368887][ T5831] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.379904][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.387674][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.396688][ T5831] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.407623][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.414387][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.423048][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.432051][ T5831] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.443076][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.451707][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.460701][ T5831] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.471642][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.479186][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.488158][ T5831] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.499329][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.506869][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.515840][ T5831] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.528493][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.538629][ T5831] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 105.548271][ T5831] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 105.556728][ T5831] usb 1-1: Product: syz [ 105.560927][ T5831] usb 1-1: Manufacturer: syz [ 105.566090][ T5831] usb 1-1: SerialNumber: syz [ 105.572623][ T5831] usb 1-1: config 0 descriptor?? [ 105.581182][ T5831] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 105.594359][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 105.605689][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.615198][ T9] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 105.623624][ T9] usb 3-1: config 0 has no interface number 0 [ 105.629758][ T9] usb 3-1: config 0 interface 213 has no altsetting 0 [ 105.638534][ T9] usb 3-1: New USB device found, idVendor=3993, idProduct=7e17, bcdDevice=9e.a8 [ 105.647706][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.656807][ T9] usb 3-1: Product: syz [ 105.661677][ T9] usb 3-1: Manufacturer: syz [ 105.666366][ T9] usb 3-1: SerialNumber: syz [ 105.673349][ T9] usb 3-1: config 0 descriptor?? [ 105.893121][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 105.901682][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 105.911130][ T5831] usb 1-1: USB disconnect, device number 5 [ 105.917921][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 105.935130][ T9] usb 3-1: Found UVC 0.02 device syz (3993:7e17) [ 105.942700][ T9] usb 3-1: No valid video chain found. [ 105.954422][ T5831] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 105.965426][ T9] usb 3-1: USB disconnect, device number 7 [ 106.095467][ T6632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.315'. [ 106.107700][ T6632] veth0_macvtap: left promiscuous mode [ 106.133831][ T6632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.315'. [ 106.158715][ T6634] loop1: detected capacity change from 0 to 1024 [ 106.396574][ T6639] overlayfs: statfs failed on './file0' [ 106.729867][ T6650] loop0: detected capacity change from 0 to 4096 [ 106.888325][ T6650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.110068][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.197057][ T6672] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 107.213940][ T5813] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.423818][ T5813] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.444504][ T5813] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.464774][ T5813] usb 2-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 107.476352][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.499692][ T5813] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 107.540358][ T6680] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 107.550285][ T6680] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 108.190783][ T6701] loop2: detected capacity change from 0 to 8192 [ 108.659437][ T6716] geneve2: entered promiscuous mode [ 108.785486][ T2321] usb 2-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 108.810848][ T6723] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 108.833787][ T2321] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 109.198247][ T6732] loop3: detected capacity change from 0 to 4096 [ 109.253479][ T6736] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.285995][ T6721] loop2: detected capacity change from 0 to 32768 [ 109.412598][ T6721] JBD2: Ignoring recovery information on journal [ 109.519124][ T6721] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 109.880378][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 109.929879][ T9] usb 2-1: USB disconnect, device number 5 [ 110.080241][ T5831] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.207572][ T6755] geneve2: entered promiscuous mode [ 110.275746][ T5831] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 110.297146][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.316788][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.346931][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.361287][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.372936][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.386265][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.394605][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.405045][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.440576][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.454543][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.465185][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.496681][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.515473][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.525242][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.546412][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.565183][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.583281][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.603284][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.620195][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.633698][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.659960][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.671252][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.680704][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.692120][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.702415][ T5831] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 110.712338][ T5831] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 110.721184][ T5831] usb 4-1: Product: syz [ 110.725888][ T5831] usb 4-1: Manufacturer: syz [ 110.731053][ T5831] usb 4-1: SerialNumber: syz [ 110.745432][ T5831] usb 4-1: config 0 descriptor?? [ 110.761797][ T5831] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 111.130269][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 111.138955][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 111.147717][ T5831] usb 4-1: USB disconnect, device number 4 [ 111.165143][ T5831] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 112.353383][ T6816] loop0: detected capacity change from 0 to 40427 [ 112.372954][ T6816] F2FS-fs (loop0): invalid crc value [ 112.385267][ T6816] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.443062][ T6816] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 112.502638][ T6816] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 112.740397][ T6824] loop0: detected capacity change from 0 to 1024 [ 113.152631][ T6838] loop2: detected capacity change from 0 to 512 [ 113.171385][ T6838] EXT4-fs: Ignoring removed bh option [ 113.187528][ T6838] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.208119][ T6838] EXT4-fs (loop2): 1 truncate cleaned up [ 113.215553][ T6838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.479287][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.769041][ T6849] binder: 6848:6849 ioctl c0306201 0 returned -14 [ 113.777782][ T6849] binder: 6848:6849 ioctl c0046209 0 returned -22 [ 113.815150][ T6851] loop2: detected capacity change from 0 to 1024 [ 113.870327][ T6851] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 113.936373][ T6851] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 113.959252][ T6858] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 113.959721][ T6844] loop3: detected capacity change from 0 to 40427 [ 113.988447][ T6851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.017468][ T6844] F2FS-fs (loop3): invalid crc value [ 114.086349][ T6844] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.095941][ T6851] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.402: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 114.150151][ T6865] loop1: detected capacity change from 0 to 1024 [ 114.234233][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.259532][ T27] audit: type=1800 audit(1786565555.911:15): pid=6865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.405" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 114.270107][ T6844] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 114.425222][ T6844] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 114.476863][ T6874] loop9: detected capacity change from 0 to 255852544 [ 114.573717][ T5832] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 114.775393][ T5832] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.813305][ T5832] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.823094][ T5832] usb 1-1: config 0 interface 0 has no altsetting 0 [ 114.831692][ T6880] CIFS: Attempting to mount //127.0.0.1/share [ 114.864958][ T5832] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 114.896558][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.920775][ T5832] usb 1-1: config 0 descriptor?? [ 115.240033][ T6894] loop2: detected capacity change from 0 to 512 [ 115.359502][ T5832] hid-steam 0003:28DE:1102.0003: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 115.447444][ T6894] EXT4-fs (loop2): Test dummy encryption mode enabled [ 115.473131][ T6894] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.416: inode has both inline data and extents flags [ 115.496016][ T6894] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.416: couldn't read orphan inode 15 (err -117) [ 115.515557][ T6894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.577911][ T5832] usb 1-1: USB disconnect, device number 6 [ 115.625863][ T6880] CIFS: VFS: cifs_mount failed w/return code = -112 [ 115.715985][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.748162][ T6907] loop1: detected capacity change from 0 to 64 [ 115.808381][ T27] audit: type=1800 audit(1786565557.461:16): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.420" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 115.965518][ T5778] hfs: node 4:3 still has 1 user(s)! [ 116.359091][ T6913] loop2: detected capacity change from 0 to 32768 [ 116.375307][ T6913] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 116.386108][ T6913] XFS (loop2): Mounting V5 filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a in no-recovery mode. Filesystem will be inconsistent. [ 116.453084][ T5780] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 116.523534][ T5832] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.662958][ T6930] overlayfs: failed to verify origin (newroot/95, ino=514, err=-116) [ 116.694198][ T6930] overlayfs: failed to verify upper root origin [ 116.730780][ T5832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.741343][ T5832] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.775846][ T5832] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.803460][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.822189][ T5832] usb 1-1: SerialNumber: syz [ 116.926915][ T6935] sctp: [Deprecated]: syz.2.425 (pid 6935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.926915][ T6935] Use struct sctp_sack_info instead [ 116.966301][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.430'. [ 116.976697][ T6937] bond0: ARP target 0.0.0.2 is already present [ 116.984832][ T6937] bond0: option arp_ip_target: invalid value (33554432) [ 117.050200][ T5832] usb 1-1: 0:2 : does not exist [ 117.106620][ T5832] usb 1-1: USB disconnect, device number 7 [ 117.227111][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.326899][ T6947] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.356475][ T27] audit: type=1800 audit(1786565559.011:17): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.435" name="file1" dev="loop1" ino=1048614 res=0 errno=0 [ 117.379321][ T6947] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 117.414734][ T6947] FAT-fs (loop1): Filesystem has been set read-only [ 118.323454][ T5813] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 118.527734][ T5813] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 118.541882][ T6972] set_capacity_and_notify: 1 callbacks suppressed [ 118.541895][ T6972] loop2: detected capacity change from 0 to 32768 [ 118.566227][ T5813] usb 1-1: config 1 has no interface number 0 [ 118.572399][ T5813] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.585638][ T5813] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 118.595823][ T5813] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 118.608660][ T5813] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.618455][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.627294][ T5813] usb 1-1: Product: syz [ 118.631860][ T5813] usb 1-1: Manufacturer: syz [ 118.637831][ T5813] usb 1-1: SerialNumber: syz [ 118.658447][ T6972] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 118.725128][ T6972] XFS (loop2): Ending clean mount [ 118.822446][ T5780] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 119.473690][ T5831] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.479776][ T5813] cdc_ncm 1-1:1.1: bind() failure [ 119.653365][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 119.660082][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.671094][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.681701][ T5831] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 119.692520][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.706803][ T5831] usb 4-1: config 0 descriptor?? [ 119.719693][ T5813] usb 1-1: USB disconnect, device number 8 [ 120.147383][ T5831] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 120.477371][ T173] usb 4-1: USB disconnect, device number 5 [ 120.623042][ T7032] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 120.995356][ T7038] loop2: detected capacity change from 0 to 32768 [ 121.041630][ T7038] JBD2: Ignoring recovery information on journal [ 121.086874][ T7038] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 121.152860][ T27] audit: type=1800 audit(1786565562.801:18): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.468" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 121.243921][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 121.322952][ T7045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.471'. [ 121.341096][ T7045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.471'. [ 121.475377][ T7049] netlink: 868 bytes leftover after parsing attributes in process `syz.2.470'. [ 121.599249][ T7053] loop0: detected capacity change from 0 to 4096 [ 121.645979][ T5987] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.056290][ T7070] loop2: detected capacity change from 0 to 1024 [ 122.065876][ T7070] EXT4-fs: Ignoring removed bh option [ 122.117451][ T7070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 122.137228][ T7070] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.165622][ T7070] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.481: lblock 3 mapped to illegal pblock 3 (length 3) [ 122.189879][ T7070] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 122.215004][ T7070] EXT4-fs (loop2): This should not happen!! Data will be lost [ 122.215004][ T7070] [ 122.226371][ T7077] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.481: lblock 3 mapped to illegal pblock 3 (length 1) [ 122.319775][ T7070] EXT4-fs error (device loop2): ext4_ext_remove_space:2957: inode #15: comm syz.2.481: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 122.350005][ T7070] EXT4-fs error (device loop2) in ext4_setattr:5683: Corrupt filesystem [ 122.417369][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 122.583296][ T5832] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 122.777807][ T5832] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.809544][ T5832] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.839984][ T5832] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.850119][ T5832] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 122.874077][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.916004][ T5832] usb 4-1: config 0 descriptor?? [ 123.308723][ T5813] kernel read not supported for file /video9 (pid: 5813 comm: kworker/1:3) [ 123.364615][ T5832] hid-steam 0003:28DE:1102.0005: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 123.536302][ T7109] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 123.536302][ T7109] The task syz.0.495 (7109) triggered the difference, watch for misbehavior. [ 123.622605][ T5813] usb 4-1: USB disconnect, device number 6 [ 123.960666][ T7122] loop1: detected capacity change from 0 to 8192 [ 123.985154][ T7122] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 123.998755][ T7122] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 124.018665][ T7122] REISERFS (device loop1): using ordered data mode [ 124.030077][ T7122] reiserfs: using flush barriers [ 124.037530][ T7122] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.054769][ T7122] REISERFS (device loop1): checking transaction log (loop1) [ 124.074922][ T7122] REISERFS (device loop1): Using r5 hash to sort names [ 124.109233][ T7122] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 124.178270][ T7122] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 124.212455][ T7122] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 124.252653][ T7126] REISERFS error (device loop1): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 124.265635][ T7126] REISERFS (device loop1): Remounting filesystem read-only [ 124.493504][ T5813] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.583865][ T5832] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 124.674176][ T5813] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 124.682807][ T5813] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.702853][ T5813] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.717785][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.734898][ T5813] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.744156][ T5813] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.755475][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.762888][ T5813] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.771867][ T5813] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.783161][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.791056][ T5832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.801830][ T5832] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 124.811711][ T5832] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.824789][ T5813] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.833941][ T5813] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.845072][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.853262][ T5832] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 124.862341][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 124.870471][ T5813] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.879450][ T5813] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.890457][ T5832] usb 1-1: Product: syz [ 124.894694][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.901721][ T5832] usb 1-1: Manufacturer: syz [ 124.909325][ T5813] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.918331][ T5813] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.918781][ T7128] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 124.929337][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.944376][ T5813] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.954478][ T5832] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 124.967779][ T5813] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.980190][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.987387][ T5832] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 124.999862][ T5813] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.009534][ T5813] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.020510][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.029989][ T5813] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 125.039381][ T5813] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 125.048048][ T5813] usb 4-1: Product: syz [ 125.052466][ T5813] usb 4-1: Manufacturer: syz [ 125.057235][ T5813] usb 4-1: SerialNumber: syz [ 125.064044][ T5813] usb 4-1: config 0 descriptor?? [ 125.078138][ T5813] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 125.158397][ T173] usb 1-1: USB disconnect, device number 9 [ 125.170127][ T173] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 125.180168][ T173] garmin_gps 1-1:1.0: device disconnected [ 125.291809][ T5785] usb 4-1: USB disconnect, device number 7 [ 125.300123][ T5785] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 126.147451][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 126.658762][ T7166] loop0: detected capacity change from 0 to 32768 [ 126.669312][ T7166] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.519 (7166) [ 126.693964][ T7166] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 126.705654][ T7166] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 126.715305][ T7166] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 126.725923][ T7166] BTRFS info (device loop0): use zstd compression, level 3 [ 126.733620][ T7166] BTRFS info (device loop0): using free space tree [ 126.781600][ T7166] BTRFS info (device loop0): enabling ssd optimizations [ 126.788798][ T7166] BTRFS info (device loop0): auto enabling async discard [ 126.796097][ T5813] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 126.822921][ T27] audit: type=1800 audit(1786565568.471:19): pid=7166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.519" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 126.873045][ T5775] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 127.200286][ T7188] loop1: detected capacity change from 0 to 32768 [ 127.213392][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 127.223081][ T5813] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 127.235114][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 127.245509][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.256232][ T5813] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.270924][ T5813] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.280337][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.319732][ T7188] JBD2: Ignoring recovery information on journal [ 127.374022][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.394337][ T7188] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 127.526848][ T5813] usb 4-1: GET_CAPABILITIES returned 0 [ 127.532792][ T5813] usbtmc 4-1:16.0: can't read capabilities [ 127.574633][ T27] audit: type=1800 audit(1786565569.221:20): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.522" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 127.637878][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 127.646585][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.666235][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.676599][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.686922][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.700565][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.710079][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.719730][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 127.745583][ T173] usb 4-1: USB disconnect, device number 8 [ 127.931466][ T7192] loop0: detected capacity change from 0 to 32768 [ 127.946758][ T23] usb 3-1: GET_CAPABILITIES returned 0 [ 127.960087][ T23] usbtmc 3-1:16.0: can't read capabilities [ 127.970124][ T7192] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 128.015339][ T7192] XFS (loop0): Mounting V5 filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a in no-recovery mode. Filesystem will be inconsistent. [ 128.112329][ T5775] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 128.178221][ T23] usb 3-1: USB disconnect, device number 8 [ 128.603374][ T42] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 128.828378][ T42] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 128.843402][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.882834][ T42] usb 1-1: config 0 descriptor?? [ 128.899491][ T42] cp210x 1-1:0.0: cp210x converter detected [ 129.234037][ T7229] loop8: detected capacity change from 0 to 7 [ 129.277740][ T7229] Dev loop8: unable to read RDB block 7 [ 129.308942][ T42] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 129.324676][ T7229] loop8: unable to read partition table [ 129.341408][ T42] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 129.361104][ T7229] loop8: partition table beyond EOD, truncated [ 129.367769][ T42] usb 1-1: cp210x converter now attached to ttyUSB0 [ 129.395181][ T7229] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 129.585318][ T42] usb 1-1: USB disconnect, device number 10 [ 129.596138][ T42] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 129.613851][ T42] cp210x 1-1:0.0: device disconnected [ 129.772439][ T7244] loop1: detected capacity change from 0 to 512 [ 129.860753][ T7244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.878274][ T7244] ext4 filesystem being mounted at /128/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.897707][ T5813] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 130.056444][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.067799][ T7251] loop3: detected capacity change from 0 to 1024 [ 130.105969][ T5813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.143689][ T5813] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 130.152739][ T5813] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 130.175221][ T7251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.185750][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.197856][ T5813] usb 3-1: config 0 descriptor?? [ 130.209344][ T5813] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 130.216255][ T5813] dvb-usb: bulk message failed: -22 (3/0) [ 130.228377][ T5813] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 130.237683][ T5813] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 130.244851][ T5813] usb 3-1: media controller created [ 130.251994][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.280785][ T5813] dvb-usb: bulk message failed: -22 (6/0) [ 130.288435][ T5813] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 130.298156][ T5813] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 130.341463][ T5813] dvb-usb: schedule remote query interval to 150 msecs. [ 130.369085][ T5813] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 130.392486][ T7251] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.3.542: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 130.444316][ T7251] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 130.447305][ T7240] dvb-usb: bulk message failed: -22 (2/0) [ 130.472256][ T7251] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.542: Deleting old file: nlink 1, error=-117 [ 130.486537][ T42] usb 3-1: USB disconnect, device number 9 [ 130.551421][ T42] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 130.678195][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.192739][ T7269] loop2: detected capacity change from 0 to 8192 [ 131.227706][ T7269] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.273636][ T7269] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 131.282983][ T7269] REISERFS (device loop2): using ordered data mode [ 131.289809][ T7269] reiserfs: using flush barriers [ 131.299473][ T7269] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.333973][ T7269] REISERFS (device loop2): checking transaction log (loop2) [ 131.393065][ T7269] REISERFS (device loop2): Using r5 hash to sort names [ 131.411597][ T7269] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 131.455855][ T7269] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 131.477067][ T7269] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 131.501622][ T7269] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 131.520020][ T7275] REISERFS error (device loop2): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 131.532243][ T7275] REISERFS (device loop2): Remounting filesystem read-only [ 131.539909][ T7269] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 131.779839][ T7286] loop3: detected capacity change from 0 to 1024 [ 132.078541][ T7290] loop3: detected capacity change from 0 to 1024 [ 132.085747][ T7289] process 'syz.2.564' launched './file0' with NULL argv: empty string added [ 132.101824][ T7289] Invalid argument reading file caps for ./file0 [ 132.107510][ T7290] EXT4-fs: Ignoring removed bh option [ 132.162270][ T7290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 132.177345][ T7290] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.291980][ T7290] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.554: lblock 3 mapped to illegal pblock 3 (length 3) [ 132.313958][ T7290] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 132.356364][ T7290] EXT4-fs (loop3): This should not happen!! Data will be lost [ 132.356364][ T7290] [ 132.415990][ T7300] EXT4-fs error (device loop3): ext4_ext_remove_space:2957: inode #15: comm syz.3.554: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 132.463933][ T7300] EXT4-fs error (device loop3) in ext4_setattr:5683: Corrupt filesystem [ 132.626596][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.667561][ T7305] nvme nvme0: rdma_resolve_addr failed (-19). [ 132.696163][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 132.919686][ T7312] loop3: detected capacity change from 0 to 8192 [ 132.962609][ T7312] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.037255][ T7325] loop0: detected capacity change from 0 to 1024 [ 133.051475][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.063784][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.072712][ T7312] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 133.082261][ T7312] REISERFS (device loop3): using ordered data mode [ 133.089527][ T7312] reiserfs: using flush barriers [ 133.107799][ T7325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.133424][ T7312] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.143461][ T7325] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.169946][ T7312] REISERFS (device loop3): checking transaction log (loop3) [ 133.180054][ T7312] REISERFS (device loop3): Using r5 hash to sort names [ 133.208990][ T7312] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 133.219752][ T7325] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 3: comm syz.0.567: lblock 3 mapped to illegal pblock 3 (length 3) [ 133.261582][ T7325] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 133.288495][ T7312] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 133.298036][ T7325] EXT4-fs (loop0): This should not happen!! Data will be lost [ 133.298036][ T7325] [ 133.311912][ T7312] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 133.312308][ T7312] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 133.346764][ T7329] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.567: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.364544][ T7312] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 133.382138][ T7329] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.567: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.393623][ T7312] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 133.402505][ T7322] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.567: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.414417][ T7330] REISERFS error (device loop3): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 133.431702][ T7322] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.567: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.435584][ T7330] REISERFS (device loop3): Remounting filesystem read-only [ 133.463422][ T7329] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.567: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.479266][ T7322] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.567: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.497773][ T7322] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.567: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.514876][ T7329] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.567: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.543447][ T7329] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.567: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.597192][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 133.846595][ T7343] loop1: detected capacity change from 0 to 1024 [ 133.866775][ T7343] EXT4-fs: Ignoring removed bh option [ 133.970147][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 133.986925][ T7343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 134.012812][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.012812][ T12] [ 134.025620][ T7343] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.062112][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.065998][ T7343] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.574: lblock 3 mapped to illegal pblock 3 (length 3) [ 134.088698][ T7343] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 134.101249][ T7343] EXT4-fs (loop1): This should not happen!! Data will be lost [ 134.101249][ T7343] [ 134.127942][ T7352] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.574: lblock 3 mapped to illegal pblock 3 (length 1) [ 134.226202][ T7343] EXT4-fs error (device loop1): ext4_ext_remove_space:2957: inode #15: comm syz.1.574: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 134.269047][ T7343] EXT4-fs error (device loop1) in ext4_setattr:5683: Corrupt filesystem [ 134.311764][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.579264][ T7357] loop0: detected capacity change from 0 to 8192 [ 134.639596][ T7357] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 134.793688][ T7357] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 134.848512][ T7357] REISERFS (device loop0): using ordered data mode [ 134.861341][ T7357] reiserfs: using flush barriers [ 134.891778][ T7357] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.912342][ T7368] loop3: detected capacity change from 0 to 40427 [ 134.929157][ T7368] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 134.937550][ T7368] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 134.947136][ T7357] REISERFS (device loop0): checking transaction log (loop0) [ 134.955806][ T7368] F2FS-fs (loop3): invalid crc value [ 134.980109][ T7368] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.000961][ T7357] REISERFS (device loop0): Using r5 hash to sort names [ 135.013814][ T7357] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 135.042884][ T7368] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 135.050427][ T7368] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 135.072470][ T7357] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 135.231488][ T7357] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 135.299135][ T7373] REISERFS error (device loop0): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 135.371831][ T7373] REISERFS (device loop0): Remounting filesystem read-only [ 135.467221][ T7360] loop2: detected capacity change from 0 to 32768 [ 135.510115][ T7368] F2FS-fs (loop3): Start checkpoint disabled! [ 135.653392][ T7360] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 135.989730][ T7379] loop0: detected capacity change from 0 to 8192 [ 136.001876][ T7381] loop1: detected capacity change from 0 to 4096 [ 136.026371][ T7360] syz.2.583 (7360) used greatest stack depth: 18840 bytes left [ 136.041640][ T7379] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.068079][ T7379] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 136.079923][ T7379] REISERFS (device loop0): using ordered data mode [ 136.088656][ T7385] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.089385][ T7379] reiserfs: using flush barriers [ 136.146112][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 136.149680][ T7379] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.173573][ T7381] NILFS error (device loop1): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 136.225507][ T7379] REISERFS (device loop0): checking transaction log (loop0) [ 136.255099][ T7381] Remounting filesystem read-only [ 136.256665][ T7379] REISERFS (device loop0): Using r5 hash to sort names [ 136.293971][ T7379] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 136.320045][ T7388] NILFS error (device loop1): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 136.466681][ T7379] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 136.467504][ T5778] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 136.517579][ T7379] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 136.523168][ T5778] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 136.538673][ T7389] REISERFS error (device loop0): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 136.551985][ T5778] NILFS (loop1): discard dirty block: blocknr=14, size=4096 [ 136.566486][ T5778] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 136.583463][ T7389] REISERFS (device loop0): Remounting filesystem read-only [ 136.590780][ T5778] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 136.603305][ T5778] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 136.610344][ T5778] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 136.623052][ T5778] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 136.636728][ T5778] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 136.858834][ T42] libceph: connect (1)[c::]:6789 error -101 [ 136.866491][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 136.883552][ T7395] ceph: No mds server is up or the cluster is laggy [ 137.641539][ T7415] loop0: detected capacity change from 0 to 512 [ 137.722179][ T7415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.794012][ T7415] ext4 filesystem being mounted at /147/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.961606][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.708391][ T7430] loop3: detected capacity change from 0 to 32768 [ 138.747304][ T7430] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.604 (7430) [ 138.801532][ T7430] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 138.814231][ T7430] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 138.847568][ T7430] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 138.873348][ T7430] BTRFS info (device loop3): use zstd compression, level 3 [ 138.904165][ T7430] BTRFS info (device loop3): using free space tree [ 138.978110][ T7430] BTRFS info (device loop3): enabling ssd optimizations [ 138.995411][ T7430] BTRFS info (device loop3): auto enabling async discard [ 139.162614][ T27] audit: type=1800 audit(1786565580.811:21): pid=7430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.604" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 139.275325][ T5779] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 140.001247][ T7469] loop0: detected capacity change from 0 to 32768 [ 140.092636][ T7469] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 140.124301][ T7469] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.298657][ T7469] XFS (loop0): Ending clean mount [ 140.321330][ T7469] XFS (loop0): Quotacheck needed: Please wait. [ 140.333608][ T5813] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 140.420264][ T7469] XFS (loop0): Quotacheck: Done. [ 140.550818][ T5775] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.562109][ T5813] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.576209][ T5813] usb 3-1: config 0 has no interface number 0 [ 140.582545][ T5813] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.593838][ T5813] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.604636][ T5813] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 140.613966][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.629668][ T5813] usb 3-1: config 0 descriptor?? [ 141.065049][ T5813] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 141.072303][ T5813] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 141.080023][ T5813] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 141.087400][ T5813] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 141.096763][ T5813] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 141.104094][ T5813] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 141.114924][ T5813] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 141.138849][ T5813] hid_prodikeys: hid-prodikeys: failed to find output report [ 141.138849][ T5813] [ 141.450185][ T7509] input: syz0 as /devices/virtual/input/input13 [ 141.509148][ T5813] usb 3-1: USB disconnect, device number 10 [ 141.532192][ T7511] loop3: detected capacity change from 0 to 512 [ 141.561022][ T7511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.574094][ T7511] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.651742][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.042895][ T27] audit: type=1326 audit(1786565583.691:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1c99e0d9 code=0x7ffc0000 [ 142.075198][ T27] audit: type=1326 audit(1786565583.691:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1c99e0d9 code=0x7ffc0000 [ 142.105110][ T27] audit: type=1326 audit(1786565583.701:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbe1c99e0d9 code=0x7ffc0000 [ 142.147719][ T27] audit: type=1326 audit(1786565583.761:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1c99e0d9 code=0x7ffc0000 [ 142.172185][ T27] audit: type=1326 audit(1786565583.761:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1c99e0d9 code=0x7ffc0000 [ 142.196678][ T27] audit: type=1326 audit(1786565583.791:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.3.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbe1c95e90e code=0x7ffc0000 [ 142.224155][ T27] audit: type=1326 audit(1786565583.801:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe1c99e0d9 code=0x7ffc0000 [ 142.259733][ T27] audit: type=1326 audit(1786565583.801:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1c99e0d9 code=0x7ffc0000 [ 142.314583][ T27] audit: type=1326 audit(1786565583.801:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.636" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1c99e0d9 code=0x7ffc0000 [ 142.712897][ T7538] loop1: detected capacity change from 0 to 24 [ 142.772908][ T7540] loop2: detected capacity change from 0 to 1024 [ 142.821292][ T7540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 142.864693][ T7540] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.036852][ T7540] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.639: lblock 3 mapped to illegal pblock 3 (length 3) [ 143.107570][ T7540] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 143.213657][ T7540] EXT4-fs (loop2): This should not happen!! Data will be lost [ 143.213657][ T7540] [ 143.247719][ T7554] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.639: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.274774][ T7558] loop5: detected capacity change from 0 to 7 [ 143.292502][ T7558] Dev loop5: unable to read RDB block 7 [ 143.303354][ T7558] loop5: AHDI p1 p2 [ 143.307345][ T7558] loop5: partition table partially beyond EOD, truncated [ 143.323545][ T7558] loop5: p1 start 1668641394 is beyond EOD, truncated [ 143.353434][ T7554] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.639: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.388417][ T7539] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.639: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.443720][ T7539] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.639: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.498823][ T7554] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.639: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.553818][ T7554] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.639: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.613337][ T7554] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.639: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.654655][ T7554] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.639: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.685176][ T7554] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.639: lblock 3 mapped to illegal pblock 3 (length 1) [ 143.732858][ T7550] loop0: detected capacity change from 0 to 40427 [ 143.792655][ T7550] F2FS-fs (loop0): heap/no_heap options were deprecated [ 143.806259][ T7550] F2FS-fs (loop0): invalid crc value [ 143.837070][ T7550] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.858587][ T7553] loop3: detected capacity change from 0 to 32768 [ 143.976879][ T7553] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 144.025117][ T7550] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 144.102061][ T1096] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 144.163231][ T1096] EXT4-fs (loop2): This should not happen!! Data will be lost [ 144.163231][ T1096] [ 144.245243][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 144.291314][ T5775] syz-executor: attempt to access beyond end of device [ 144.291314][ T5775] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.369211][ T5775] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 144.387819][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 144.524991][ T42] libceph: connect (1)[c::]:6789 error -101 [ 144.531082][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 144.554562][ T7566] ceph: No mds server is up or the cluster is laggy [ 144.837677][ T7575] loop1: detected capacity change from 0 to 128 [ 145.156953][ T7587] batadv_slave_1: entered promiscuous mode [ 145.195152][ T7584] batadv_slave_1: left promiscuous mode [ 145.692567][ T7610] overlayfs: failed to verify origin (newroot/183, ino=979, err=-116) [ 145.701074][ T7610] overlayfs: failed to verify upper root origin [ 146.673352][ T173] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 146.701153][ T7621] loop2: detected capacity change from 0 to 131072 [ 146.713482][ T7621] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 146.721620][ T7621] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 146.737728][ T7621] F2FS-fs (loop2): invalid crc value [ 146.749125][ T7621] F2FS-fs (loop2): Found nat_bits in checkpoint [ 146.801556][ T7621] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 146.808759][ T7621] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 146.868883][ T173] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 146.890737][ T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.911926][ T173] usb 1-1: Product: syz [ 146.920181][ T173] usb 1-1: Manufacturer: syz [ 146.931965][ T173] usb 1-1: SerialNumber: syz [ 146.945908][ T173] usb 1-1: config 0 descriptor?? [ 146.959375][ T173] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 146.983650][ T173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.003738][ T173] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 147.019273][ T173] usb 1-1: media controller created [ 147.050593][ T173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.119610][ T173] DVB: Unable to find symbol mt352_attach() [ 147.181346][ T7635] dvb-usb: bulk message failed: -22 (7/0) [ 147.234184][ T173] DVB: Unable to find symbol nxt6000_attach() [ 147.240304][ T173] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 147.258283][ T173] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 147.282888][ T173] dvb-usb: schedule remote query interval to 1000 msecs. [ 147.300047][ T173] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 147.311106][ T173] dvb-usb: bulk message failed: -22 (7/0) [ 147.323237][ T173] dvb-usb: bulk message failed: -22 (7/0) [ 147.351903][ T173] usb 1-1: USB disconnect, device number 11 [ 147.412753][ T7648] sctp: [Deprecated]: syz.3.682 (pid 7648) Use of int in maxseg socket option. [ 147.412753][ T7648] Use struct sctp_assoc_value instead [ 147.475224][ T173] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 147.665013][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 147.679263][ T7653] bond_slave_0: entered promiscuous mode [ 147.685519][ T7653] bond_slave_1: entered promiscuous mode [ 147.691476][ T7653] macvlan2: entered promiscuous mode [ 147.696837][ T7653] bond0: entered promiscuous mode [ 147.702970][ T7653] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 148.153873][ T7665] loop8: detected capacity change from 0 to 8 [ 148.169910][ T7655] loop3: detected capacity change from 0 to 32768 [ 148.176874][ T7665] Dev loop8: unable to read RDB block 8 [ 148.182934][ T7665] loop8: unable to read partition table [ 148.190683][ T7665] loop8: partition table beyond EOD, truncated [ 148.206351][ T7665] loop_reread_partitions: partition scan of loop8 (被x^>) failed (rc=-5) [ 148.266172][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 148.266186][ T27] audit: type=1800 audit(1786565589.911:33): pid=7655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.684" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 148.347694][ T7670] loop2: detected capacity change from 0 to 24 [ 149.203454][ T173] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 149.393302][ T173] usb 3-1: Using ep0 maxpacket: 32 [ 149.401614][ T173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.424233][ T173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.443412][ T173] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 149.463047][ T173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.478151][ T173] usb 3-1: config 0 descriptor?? [ 149.486907][ T7693] loop0: detected capacity change from 0 to 32768 [ 149.548182][ T7693] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 149.659808][ T7693] XFS (loop0): Ending clean mount [ 149.942842][ T173] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 149.956379][ T5775] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 150.231567][ T5785] usb 3-1: USB disconnect, device number 11 [ 150.459124][ T7729] loop1: detected capacity change from 0 to 1024 [ 150.497883][ T7729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.524799][ T27] audit: type=1800 audit(1786565592.181:34): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.711" name="file0" dev="loop1" ino=19 res=0 errno=0 [ 150.581202][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.474070][ T5832] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 151.616595][ T7763] loop0: detected capacity change from 0 to 128 [ 151.683459][ T5832] usb 3-1: Using ep0 maxpacket: 8 [ 151.698590][ T5832] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 151.710291][ T5832] usb 3-1: config 179 has no interface number 0 [ 151.717037][ T5832] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 151.741366][ T5832] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 151.763487][ T5832] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.782987][ T5832] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 151.797899][ T5832] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 151.812034][ T5832] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 151.823885][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.834894][ T7751] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.117898][ T5832] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input15 [ 152.342866][ T5785] usb 3-1: USB disconnect, device number 12 [ 152.342974][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 152.358007][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 152.372694][ T5785] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 152.942063][ T7771] loop3: detected capacity change from 0 to 1024 [ 152.981716][ T7771] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 153.019939][ T7771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.147359][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.224222][ T5832] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 153.403669][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 153.419897][ T5832] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 153.429144][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.438399][ T5832] usb 1-1: Product: syz [ 153.442585][ T5832] usb 1-1: Manufacturer: syz [ 153.451662][ T5832] usb 1-1: SerialNumber: syz [ 153.459789][ T5832] usb 1-1: config 0 descriptor?? [ 153.681795][ T7786] loop3: detected capacity change from 0 to 40427 [ 153.699669][ T7786] F2FS-fs (loop3): heap/no_heap options were deprecated [ 153.711503][ T7786] F2FS-fs (loop3): invalid crc value [ 153.722103][ T7786] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.839382][ T7786] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 153.901777][ T5832] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 153.917706][ T5832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.944100][ T5832] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 153.952094][ T5832] usb 1-1: media controller created [ 153.965088][ T5779] syz-executor: attempt to access beyond end of device [ 153.965088][ T5779] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.993817][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.010757][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 154.285036][ T7797] loop2: detected capacity change from 0 to 1024 [ 154.585367][ T5832] zl10353_read_register: readreg error (reg=127, ret==0) [ 154.610434][ T5832] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 154.652849][ T5832] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 154.692354][ T5832] usb 1-1: USB disconnect, device number 12 [ 154.809301][ T5832] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 155.073515][ T7822] Bluetooth: MGMT ver 1.22 [ 155.203515][ T7826] loop2: detected capacity change from 0 to 1024 [ 155.219419][ T7826] EXT4-fs: inline encryption not supported [ 155.277182][ T7826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.418568][ T7836] loop0: detected capacity change from 0 to 512 [ 155.428433][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.428626][ T7836] ext4: Unknown parameter 'context' [ 155.466680][ T7836] loop0: detected capacity change from 0 to 512 [ 155.491922][ T7836] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 155.500756][ T7836] System zones: 0-2, 18-18, 34-35 [ 155.538129][ T7836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.578262][ T7836] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.601538][ T7840] loop2: detected capacity change from 0 to 128 [ 155.803004][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.967230][ T7850] netlink: 292 bytes leftover after parsing attributes in process `syz.0.759'. [ 156.432535][ T7870] 9pnet: p9_errstr2errno: server reported unknown error  [ 156.471237][ T7871] loop0: detected capacity change from 0 to 2048 [ 156.543565][ T5785] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 156.559584][ T7871] loop0: p2 p3 < > p4 < p5 > [ 156.565772][ T7871] loop0: partition table partially beyond EOD, truncated [ 156.575405][ T7871] loop0: p3 start 4284289 is beyond EOD, truncated [ 156.615356][ T5142] loop0: p2 p3 < > p4 < p5 > [ 156.620184][ T5142] loop0: partition table partially beyond EOD, truncated [ 156.636995][ T5142] loop0: p3 start 4284289 is beyond EOD, truncated [ 156.759017][ T5785] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.786345][ T5785] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 156.810698][ T5987] udevd[5987]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 156.813026][ T5770] udevd[5770]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 156.821314][ T6032] udevd[6032]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 156.833139][ T5785] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 156.878618][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.942102][ T5785] ums-alauda 4-1:1.0: USB Mass Storage device detected [ 156.979593][ T5785] ums-alauda 4-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 156.979593][ T5785] Please send a copy of this message to and [ 157.011488][ T5785] scsi host1: usb-storage 4-1:1.0 [ 157.349444][ T7888] loop0: detected capacity change from 0 to 32768 [ 157.385497][ T7888] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 157.394353][ T7888] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 157.430056][ T7888] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 157.443855][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 157.463284][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 157.532242][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 68ms [ 157.542358][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 157.551214][ T7888] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 157.793719][ T7888] gfs2: fsid=syz:syz.0: found 1 quota changes [ 157.832734][ T7888] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 157.841538][ T7888] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 157.851338][ T7888] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 157.860460][ T7888] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 157.871312][ T7888] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 158.000034][ T5775] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 158.019033][ T5775] CPU: 0 PID: 5775 Comm: syz-executor Not tainted syzkaller #0 [ 158.026631][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.036721][ T5775] Call Trace: [ 158.040023][ T5775] [ 158.042962][ T5775] dump_stack_lvl+0x18c/0x250 [ 158.047683][ T5775] ? show_regs_print_info+0x20/0x20 [ 158.052902][ T5775] ? load_image+0x420/0x420 [ 158.057442][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 158.062676][ T5775] gfs2_assert_warn_i+0x18b/0x2c0 [ 158.067725][ T5775] gfs2_qd_dispose+0x488/0x580 [ 158.072526][ T5775] gfs2_quota_cleanup+0x40d/0x720 [ 158.077577][ T5775] ? gfs2_make_fs_ro+0x17e/0x320 [ 158.082543][ T5775] ? spin_lock_bucket+0x150/0x150 [ 158.087607][ T5775] ? __might_sleep+0xe0/0xe0 [ 158.092223][ T5775] ? down_write+0x16e/0x200 [ 158.096759][ T5775] ? down_read_killable+0x340/0x340 [ 158.101989][ T5775] ? gfs2_quota_sync+0x595/0x5a0 [ 158.106982][ T5775] gfs2_make_fs_ro+0x2aa/0x320 [ 158.111857][ T5775] ? gfs2_put_super+0x1db/0x930 [ 158.116730][ T5775] ? gfs2_dinode_out+0xb10/0xb10 [ 158.121689][ T5775] ? do_raw_spin_lock+0x11f/0x2b0 [ 158.125481][ T7905] veth0: entered promiscuous mode [ 158.126771][ T5775] ? __rwlock_init+0x150/0x150 [ 158.133470][ T7905] veth0: left promiscuous mode [ 158.136572][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 158.146569][ T5775] gfs2_put_super+0x224/0x930 [ 158.151272][ T5775] ? gfs2_evict_inode+0x13c0/0x13c0 [ 158.156535][ T5775] generic_shutdown_super+0x134/0x2b0 [ 158.161899][ T5775] kill_block_super+0x44/0x90 [ 158.166569][ T5775] deactivate_locked_super+0x97/0x100 [ 158.171945][ T5775] cleanup_mnt+0x3d7/0x460 [ 158.176354][ T5775] task_work_run+0x1d4/0x260 [ 158.181051][ T5775] ? task_work_cancel+0x220/0x220 [ 158.186075][ T5775] ? exit_to_user_mode_loop+0x3b/0x110 [ 158.191529][ T5775] exit_to_user_mode_loop+0xe6/0x110 [ 158.196817][ T5775] exit_to_user_mode_prepare+0xee/0x180 [ 158.202375][ T5775] syscall_exit_to_user_mode+0x1a/0x50 [ 158.207830][ T5775] do_syscall_64+0x61/0xb0 [ 158.212243][ T5775] ? clear_bhb_loop+0x40/0x90 [ 158.216938][ T5775] ? clear_bhb_loop+0x40/0x90 [ 158.221623][ T5775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.227521][ T5775] RIP: 0033:0x7f592e39f317 [ 158.231931][ T5775] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 158.251551][ T5775] RSP: 002b:00007fff94af2418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 158.259976][ T5775] RAX: 0000000000000000 RBX: 00007f592e434474 RCX: 00007f592e39f317 [ 158.267944][ T5775] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff94af24d0 [ 158.275914][ T5775] RBP: 00007fff94af24d0 R08: 00007fff94af34d0 R09: 00000000ffffffff [ 158.283887][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff94af3560 [ 158.291853][ T5775] R13: 00007f592e434474 R14: 00000000000268b5 R15: 00007fff94af35a0 [ 158.299828][ T5775] [ 158.319720][ T3494] scsi 1:0:0:0: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 158.350524][ T3494] scsi 1:0:0:1: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 158.425819][ T3494] scsi 1:0:0:0: Attached scsi generic sg1 type 0 [ 158.446706][ T11] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 158.480679][ T2995] sd 1:0:0:1: [sdc] Media removed, stopped polling [ 158.501201][ T3494] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 158.544756][ T11] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 158.571713][ T23] usb 4-1: USB disconnect, device number 9 [ 158.657777][ T2995] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 158.684577][ T5770] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 158.899636][ T5987] udevd[5987]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 159.125971][ T5987] udevd[5987]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 159.310528][ T6032] udevd[6032]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 159.321132][ T5782] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 159.332926][ T5782] CPU: 0 PID: 5782 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 159.340607][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.350686][ T5782] Workqueue: hci3 hci_rx_work [ 159.355400][ T5782] Call Trace: [ 159.358691][ T5782] [ 159.361639][ T5782] dump_stack_lvl+0x18c/0x250 [ 159.366349][ T5782] ? show_regs_print_info+0x20/0x20 [ 159.371590][ T5782] ? load_image+0x420/0x420 [ 159.376138][ T5782] sysfs_create_dir_ns+0x26e/0x2a0 [ 159.381280][ T5782] ? __lock_acquire+0x7d80/0x7d80 [ 159.386336][ T5782] ? sysfs_warn_dup+0xa0/0xa0 [ 159.391049][ T5782] ? do_raw_spin_unlock+0x121/0x230 [ 159.396290][ T5782] kobject_add_internal+0x617/0xc90 [ 159.401543][ T5782] kobject_add+0x164/0x240 [ 159.406011][ T5782] ? kobject_init+0x1d0/0x1d0 [ 159.410731][ T5782] ? get_device_parent+0x366/0x390 [ 159.415889][ T5782] device_add+0x3fa/0xc40 [ 159.420262][ T5782] hci_conn_add_sysfs+0xd5/0x1e0 [ 159.425251][ T5782] le_conn_complete_evt+0xe9f/0x1480 [ 159.430590][ T5782] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 159.436873][ T5782] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 159.442543][ T5782] ? mutex_unlock+0x10/0x10 [ 159.447077][ T5782] ? skb_pull_data+0xf0/0x1f0 [ 159.451825][ T5782] hci_le_conn_complete_evt+0x187/0x440 [ 159.457409][ T5782] ? hci_remote_host_features_evt+0x150/0x150 [ 159.463517][ T5782] hci_event_packet+0x7b4/0x1280 [ 159.468503][ T5782] ? __lock_acquire+0x7d80/0x7d80 [ 159.473556][ T5782] ? lock_chain_count+0x20/0x20 [ 159.478437][ T5782] ? bis_list+0x290/0x290 [ 159.482799][ T5782] ? lockdep_hardirqs_on+0x98/0x150 [ 159.488034][ T5782] ? hci_send_to_monitor+0xd7/0x4f0 [ 159.493272][ T5782] hci_rx_work+0x43a/0xd60 [ 159.497731][ T5782] ? process_scheduled_works+0x975/0x1600 [ 159.503487][ T5782] process_scheduled_works+0xa60/0x1600 [ 159.509099][ T5782] ? worker_attach_to_pool+0x370/0x370 [ 159.514598][ T5782] ? assign_work+0x3cc/0x5d0 [ 159.519233][ T5782] worker_thread+0xa5e/0xfe0 [ 159.523888][ T5782] kthread+0x2fa/0x390 [ 159.527982][ T5782] ? pr_cont_work+0x550/0x550 [ 159.532691][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 159.537295][ T5782] ret_from_fork+0x48/0x80 [ 159.541739][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 159.546362][ T5782] ret_from_fork_asm+0x11/0x20 [ 159.551168][ T5782] [ 159.558920][ T5782] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 159.573278][ T5782] Bluetooth: hci3: failed to register connection device [ 159.926236][ T7950] loop3: detected capacity change from 0 to 1024 [ 159.934728][ T7950] EXT4-fs: Ignoring removed bh option [ 159.974102][ T7950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.088056][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.453286][ T173] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 160.656927][ T173] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 160.670674][ T7978] loop0: detected capacity change from 0 to 256 [ 160.677275][ T173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.713432][ T173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.753423][ T173] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 160.780909][ T173] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 160.823299][ T173] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 160.843275][ T173] usb 4-1: Manufacturer: syz [ 160.865453][ T173] usb 4-1: config 0 descriptor?? [ 160.986124][ T7980] loop1: detected capacity change from 0 to 8192 [ 161.002983][ T7980] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 161.016382][ T7980] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 161.025820][ T7980] REISERFS (device loop1): using ordered data mode [ 161.032506][ T7980] reiserfs: using flush barriers [ 161.044152][ T7980] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.065184][ T7980] REISERFS (device loop1): checking transaction log (loop1) [ 161.080325][ T7974] loop2: detected capacity change from 0 to 32768 [ 161.121457][ T7980] REISERFS (device loop1): Using rupasov hash to sort names [ 161.162727][ T7974] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 161.166634][ T7990] netlink: 'syz.0.812': attribute type 13 has an invalid length. [ 161.180862][ T7980] REISERFS (device loop1): using 3.5.x disk format [ 161.189160][ T7980] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 161.202271][ T7980] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 161.215623][ T7980] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 161.226997][ T7980] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 161.241213][ T7980] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 161.303688][ T7974] XFS (loop2): Ending clean mount [ 161.315237][ T173] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 161.335913][ T173] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 161.348269][ T173] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 161.620994][ T5780] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 161.675789][ T42] usb 4-1: USB disconnect, device number 10 [ 162.085414][ T8001] netlink: 60 bytes leftover after parsing attributes in process `syz.0.816'. [ 162.108219][ T8001] smc: net device nr0 applied user defined pnetid S [ 162.235117][ T8007] loop0: detected capacity change from 0 to 128 [ 162.273915][ T8007] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 162.314718][ T8007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.455466][ T7997] loop1: detected capacity change from 0 to 40427 [ 162.465720][ T7997] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 162.486040][ T7997] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 162.495877][ T7997] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 162.504267][ T7997] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 162.512759][ T7997] F2FS-fs (loop1): Image doesn't support compression [ 162.526752][ T7997] F2FS-fs (loop1): invalid crc value [ 162.548261][ T7997] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.673039][ T7997] F2FS-fs (loop1): Start checkpoint disabled! [ 162.712119][ T7997] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 162.723467][ T7997] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 162.827861][ T7997] F2FS-fs (loop1): inject evict_inode fail in f2fs_evict_inode of evict+0x4b7/0x8a0 [ 162.934059][ T3466] kworker/u4:8: attempt to access beyond end of device [ 162.934059][ T3466] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 162.949345][ T3466] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 162.953433][ T42] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 162.956937][ T3466] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 163.146748][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 163.158542][ T8028] gretap0: entered promiscuous mode [ 163.174013][ T42] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 163.182562][ T42] usb 1-1: config 179 has no interface number 0 [ 163.200650][ T42] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 163.222645][ T42] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 163.263854][ T42] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.299833][ T42] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 163.329981][ T42] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.364813][ T42] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 163.376495][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.396787][ T8019] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.740370][ T5832] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input16 [ 163.763632][ T8037] loop2: detected capacity change from 0 to 32768 [ 163.838177][ T8037] JBD2: Ignoring recovery information on journal [ 163.920882][ T8037] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 164.037771][ T42] usb 1-1: USB disconnect, device number 13 [ 164.043875][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 164.043913][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 164.055767][ T27] audit: type=1804 audit(1786565605.691:35): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.830" name="/newroot/239/file1/bus" dev="loop2" ino=17058 res=1 errno=0 [ 164.067616][ T42] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 164.090930][ T27] audit: type=1800 audit(1786565605.691:36): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.830" name="bus" dev="loop2" ino=17058 res=0 errno=0 [ 164.092344][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.176748][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 164.437268][ T8047] loop3: detected capacity change from 0 to 512 [ 164.448556][ T8047] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.461464][ T8047] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8016c018, mo2=0082] [ 164.501993][ T8047] EXT4-fs (loop3): 1 truncate cleaned up [ 164.529412][ T8047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.579877][ T8047] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 164.617307][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.854410][ T8062] loop6: detected capacity change from 0 to 8 [ 164.866455][ T8062] Dev loop6: unable to read RDB block 8 [ 164.872184][ T8062] loop6: unable to read partition table [ 164.878708][ T8062] loop6: partition table beyond EOD, truncated [ 164.889964][ T8062] loop_reread_partitions: partition scan of loop6 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 165.038933][ T8066] loop0: detected capacity change from 0 to 1024 [ 165.078226][ T8066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.236424][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.314509][ T8074] loop0: detected capacity change from 0 to 1024 [ 165.325978][ T8074] EXT4-fs: Ignoring removed bh option [ 165.348696][ T8074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.482793][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.743376][ T5831] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 165.783324][ T173] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 165.923345][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 165.932277][ T5831] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 165.941481][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.949574][ T5831] usb 4-1: Product: syz [ 165.954069][ T5831] usb 4-1: Manufacturer: syz [ 165.958810][ T5831] usb 4-1: SerialNumber: syz [ 165.966179][ T5831] usb 4-1: config 0 descriptor?? [ 165.985548][ T173] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.995334][ T173] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.005268][ T173] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.020405][ T173] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 166.029789][ T173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 166.037979][ T173] usb 3-1: Product: syz [ 166.042275][ T173] usb 3-1: Manufacturer: syz [ 166.047002][ T173] usb 3-1: SerialNumber: syz [ 166.265209][ T173] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 166.393390][ T5831] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 166.422418][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.436867][ T5831] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 166.445198][ T5831] usb 4-1: media controller created [ 166.461275][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.491595][ T5832] usb 3-1: USB disconnect, device number 13 [ 166.511799][ T5832] usblp0: removed [ 166.674747][ T8095] Mass Storage Function, version: 2009/09/11 [ 166.682567][ T8095] LUN: removable file: (no medium) [ 166.753673][ T42] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 166.765254][ T8097] loop1: detected capacity change from 0 to 1024 [ 166.779189][ T8097] hfsplus: invalid catalog max_key_len 715 [ 166.786934][ T8097] hfsplus: failed to load catalog file [ 166.956414][ T42] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.971957][ T42] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.993448][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.005921][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.034285][ T5831] zl10353_read_register: readreg error (reg=127, ret==0) [ 167.041252][ T42] usb 1-1: Product: syz [ 167.058806][ T5831] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 167.066469][ T42] usb 1-1: Manufacturer: syz [ 167.092855][ T5831] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 167.102669][ T42] usb 1-1: SerialNumber: syz [ 167.132957][ T5831] usb 4-1: USB disconnect, device number 11 [ 167.215817][ T8102] loop2: detected capacity change from 0 to 2048 [ 167.246947][ T8102] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 167.266817][ T5831] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 167.300753][ T27] audit: type=1800 audit(1786565608.951:37): pid=8102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.855" name=420C5664B27921B14DC1DB8892FD32D0AD7BC946813591AD8DEFF4B05F60CEA0DA7710A8 dev="loop2" ino=1368 res=0 errno=0 [ 167.803402][ T5785] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 167.993408][ T5785] usb 3-1: Using ep0 maxpacket: 16 [ 168.006172][ T5782] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 168.011493][ T5785] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.018091][ T5782] CPU: 1 PID: 5782 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 168.034992][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.045073][ T5782] Workqueue: hci2 hci_rx_work [ 168.049779][ T5782] Call Trace: [ 168.052718][ T5785] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.053049][ T5782] [ 168.053059][ T5782] dump_stack_lvl+0x18c/0x250 [ 168.053086][ T5782] ? show_regs_print_info+0x20/0x20 [ 168.075703][ T5782] ? load_image+0x420/0x420 [ 168.080221][ T5782] sysfs_create_dir_ns+0x26e/0x2a0 [ 168.085330][ T5782] ? __lock_acquire+0x7d80/0x7d80 [ 168.090353][ T5782] ? sysfs_warn_dup+0xa0/0xa0 [ 168.095023][ T5782] ? do_raw_spin_unlock+0x121/0x230 [ 168.100220][ T5782] kobject_add_internal+0x617/0xc90 [ 168.105426][ T5782] kobject_add+0x164/0x240 [ 168.109842][ T5782] ? kobject_init+0x1d0/0x1d0 [ 168.114520][ T5782] ? get_device_parent+0x366/0x390 [ 168.119636][ T5782] device_add+0x3fa/0xc40 [ 168.123968][ T5782] hci_conn_add_sysfs+0xd5/0x1e0 [ 168.128906][ T5782] le_conn_complete_evt+0xe9f/0x1480 [ 168.134188][ T5782] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 168.140425][ T5782] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 168.146056][ T5782] ? mutex_unlock+0x10/0x10 [ 168.150586][ T5782] ? skb_pull_data+0xf0/0x1f0 [ 168.155285][ T5782] hci_le_conn_complete_evt+0x187/0x440 [ 168.160844][ T5782] ? hci_remote_host_features_evt+0x150/0x150 [ 168.166913][ T5782] hci_event_packet+0x7b4/0x1280 [ 168.171851][ T5782] ? __lock_acquire+0x7d80/0x7d80 [ 168.176873][ T5782] ? lock_chain_count+0x20/0x20 [ 168.181718][ T5782] ? bis_list+0x290/0x290 [ 168.186046][ T5782] ? lockdep_hardirqs_on+0x98/0x150 [ 168.191243][ T5782] ? hci_send_to_monitor+0xd7/0x4f0 [ 168.196439][ T5782] hci_rx_work+0x43a/0xd60 [ 168.200853][ T5782] ? process_scheduled_works+0x975/0x1600 [ 168.206569][ T5782] process_scheduled_works+0xa60/0x1600 [ 168.212128][ T5782] ? worker_attach_to_pool+0x370/0x370 [ 168.217598][ T5782] ? assign_work+0x3cc/0x5d0 [ 168.222192][ T5782] worker_thread+0xa5e/0xfe0 [ 168.226801][ T5782] kthread+0x2fa/0x390 [ 168.230865][ T5782] ? pr_cont_work+0x550/0x550 [ 168.235540][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 168.240125][ T5782] ret_from_fork+0x48/0x80 [ 168.244546][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 168.249131][ T5782] ret_from_fork_asm+0x11/0x20 [ 168.253905][ T5782] [ 168.263879][ T5785] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 168.265529][ T42] cdc_ncm 1-1:1.0: bind() failure [ 168.288630][ T42] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 168.293897][ T5785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.301874][ T5782] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 168.306463][ T42] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 168.316287][ T5782] Bluetooth: hci2: failed to register connection device [ 168.332041][ T5785] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 168.341614][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.350726][ T42] usbtest: probe of 1-1:1.1 failed with error -71 [ 168.362901][ T5785] usb 3-1: config 0 descriptor?? [ 168.385467][ T42] usb 1-1: USB disconnect, device number 14 [ 168.598052][ T8113] loop3: detected capacity change from 0 to 40427 [ 168.611501][ T8113] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 168.621564][ T8113] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 168.630823][ T8113] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 168.640218][ T8113] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 168.649422][ T8113] F2FS-fs (loop3): Image doesn't support compression [ 168.657678][ T8113] F2FS-fs (loop3): invalid crc value [ 168.665994][ T8113] F2FS-fs (loop3): Found nat_bits in checkpoint [ 168.722610][ T8113] F2FS-fs (loop3): Start checkpoint disabled! [ 168.738602][ T8113] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 168.745752][ T8113] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 168.786784][ T5785] hid (null): unknown global tag 0x5e [ 168.798164][ T5785] hid (null): unknown global tag 0xd [ 168.819198][ T5785] hid (null): global environment stack underflow [ 168.844886][ T5785] hid (null): report_id 3016947009 is invalid [ 168.851776][ T5785] hid (null): nested delimiters [ 168.862510][ T5785] hid (null): unknown global tag 0xe [ 168.862574][ T8113] F2FS-fs (loop3): inject evict_inode fail in f2fs_evict_inode of evict+0x4b7/0x8a0 [ 168.868266][ T5785] hid (null): invalid report_count -1985749320 [ 168.903783][ T2321] pvrusb2: request_firmware fatal error with code=-110 [ 168.918187][ T2321] pvrusb2: Failure uploading firmware1 [ 168.941023][ T2321] pvrusb2: Device initialization was not successful. [ 168.953946][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 168.973950][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 169.008231][ T9] pvrusb2: Device being rendered inoperable [ 169.011197][ T5832] usb 3-1: USB disconnect, device number 14 [ 169.185004][ T3466] kworker/u4:8: attempt to access beyond end of device [ 169.185004][ T3466] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 169.202197][ T3466] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 169.211796][ T3466] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 169.489995][ T8129] loop0: detected capacity change from 0 to 64 [ 169.514536][ T8131] netlink: 'syz.1.867': attribute type 13 has an invalid length. [ 169.533154][ T27] audit: type=1800 audit(1786565611.181:38): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.869" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 169.628679][ T8134] loop6: detected capacity change from 0 to 8 [ 169.645225][ T8134] Dev loop6: unable to read RDB block 8 [ 169.657975][ T8134] loop6: unable to read partition table [ 169.667838][ T3543] ------------[ cut here ]------------ [ 169.673612][ T3543] kernel BUG at fs/hfs/inode.c:450! [ 169.683139][ T3543] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 169.689245][ T3543] CPU: 0 PID: 3543 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 169.696885][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.706954][ T3543] Workqueue: writeback wb_workfn (flush-7:0) [ 169.712940][ T3543] RIP: 0010:hfs_write_inode+0x87b/0x880 [ 169.714216][ T8134] loop6: partition table beyond EOD, [ 169.718473][ T3543] Code: c7 c1 00 73 33 97 80 e1 07 80 c1 03 38 c1 0f 8c 6f fe ff ff 48 c7 c7 00 73 33 97 e8 5f 10 84 ff e9 5e fe ff ff e8 45 8d 2b ff <0f> 0b 0f 1f 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 bf [ 169.718492][ T3543] RSP: 0018:ffffc9000cb07340 EFLAGS: 00010293 [ 169.718507][ T3543] RAX: ffffffff825be4db RBX: ffff88802db48ea8 RCX: ffff88802e575a00 [ 169.718519][ T3543] RDX: 0000000000000000 RSI: ffffffff8d339880 RDI: 0000000000000000 [ 169.725184][ T8134] truncated [ 169.743455][ T3543] RBP: ffffc9000cb074d0 R08: ffff88802e575a00 R09: 0000000000000003 [ 169.743473][ T3543] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 169.743482][ T3543] R13: 1ffff92001960e6c R14: ffff88802db48e58 R15: 0000000000000000 [ 169.743492][ T3543] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 169.743504][ T3543] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.743515][ T3543] CR2: 00007fff94af1dc0 CR3: 0000000023b72000 CR4: 00000000003506f0 [ 169.743529][ T3543] Call Trace: [ 169.743536][ T3543] [ 169.743544][ T3543] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 169.743573][ T3543] ? __rwlock_init+0x150/0x150 [ 169.743594][ T3543] __writeback_single_inode+0x720/0xee0 [ 169.753413][ T8134] loop_reread_partitions: partition scan of loop6 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 169.757613][ T3543] writeback_sb_inodes+0x813/0x1020 [ 169.855425][ T3543] ? queue_io+0x530/0x530 [ 169.859771][ T3543] ? move_expired_inodes+0x726/0x770 [ 169.865057][ T3543] ? rcu_is_watching+0x15/0xb0 [ 169.869810][ T3543] ? queue_io+0x3ba/0x530 [ 169.874134][ T3543] wb_writeback+0x45e/0xbe0 [ 169.878650][ T3543] ? queue_io+0x2e1/0x530 [ 169.882967][ T3543] ? percpu_ref_tryget+0x250/0x250 [ 169.888080][ T3543] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 169.894063][ T3543] ? __lock_acquire+0x7d80/0x7d80 [ 169.899076][ T3543] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.904265][ T3543] wb_workfn+0x400/0xe60 [ 169.908499][ T3543] ? inode_wait_for_writeback+0x230/0x230 [ 169.914207][ T3543] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 169.920171][ T3543] ? __lock_acquire+0x7d80/0x7d80 [ 169.925184][ T3543] ? read_lock_is_recursive+0x20/0x20 [ 169.930542][ T3543] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.935729][ T3543] ? process_scheduled_works+0x975/0x1600 [ 169.941445][ T3543] ? process_scheduled_works+0x975/0x1600 [ 169.947150][ T3543] process_scheduled_works+0xa60/0x1600 [ 169.952701][ T3543] ? worker_attach_to_pool+0x370/0x370 [ 169.958166][ T3543] ? assign_work+0x3cc/0x5d0 [ 169.962750][ T3543] worker_thread+0xa5e/0xfe0 [ 169.967355][ T3543] ? _raw_spin_unlock+0x40/0x40 [ 169.972204][ T3543] ? __kthread_parkme+0x71/0x1c0 [ 169.977147][ T3543] kthread+0x2fa/0x390 [ 169.981208][ T3543] ? pr_cont_work+0x550/0x550 [ 169.985873][ T3543] ? kthread_blkcg+0xd0/0xd0 [ 169.990452][ T3543] ret_from_fork+0x48/0x80 [ 169.994853][ T3543] ? kthread_blkcg+0xd0/0xd0 [ 169.999427][ T3543] ret_from_fork_asm+0x11/0x20 [ 170.004184][ T3543] [ 170.007207][ T3543] Modules linked in: [ 170.035866][ T3543] ---[ end trace 0000000000000000 ]--- [ 170.041380][ T3543] RIP: 0010:hfs_write_inode+0x87b/0x880 [ 170.051496][ T3543] Code: c7 c1 00 73 33 97 80 e1 07 80 c1 03 38 c1 0f 8c 6f fe ff ff 48 c7 c7 00 73 33 97 e8 5f 10 84 ff e9 5e fe ff ff e8 45 8d 2b ff <0f> 0b 0f 1f 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 bf [ 170.078415][ T3543] RSP: 0018:ffffc9000cb07340 EFLAGS: 00010293 [ 170.087193][ T3543] RAX: ffffffff825be4db RBX: ffff88802db48ea8 RCX: ffff88802e575a00 [ 170.095410][ T3543] RDX: 0000000000000000 RSI: ffffffff8d339880 RDI: 0000000000000000 [ 170.103785][ T3543] RBP: ffffc9000cb074d0 R08: ffff88802e575a00 R09: 0000000000000003 [ 170.111816][ T3543] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 170.120105][ T3543] R13: 1ffff92001960e6c R14: ffff88802db48e58 R15: 0000000000000000 [ 170.129115][ T3543] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 170.138156][ T3543] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.144862][ T3543] CR2: 00007fbe1cbef2f8 CR3: 0000000023b72000 CR4: 00000000003506e0 [ 170.152876][ T3543] Kernel panic - not syncing: Fatal exception [ 170.159089][ T3543] Kernel Offset: disabled [ 170.163402][ T3543] Rebooting in 86400 seconds..