last executing test programs: 3.972137821s ago: executing program 1 (id=2046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}]}, {0xffffffffffffffbf}]}]}, 0x30}}, 0x0) 3.762279789s ago: executing program 1 (id=2048): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000280)={0xfffffff7, 0x200401, 0xfffffffd, 0xc6cf, 0x91, "000000000000000000000008000000f2ffffff", 0xfffff3bb, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) 3.568361896s ago: executing program 1 (id=2050): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 3.463866394s ago: executing program 1 (id=2052): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 3.208022406s ago: executing program 3 (id=2054): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={r1, 0x80}, 0x8) 3.055619739s ago: executing program 3 (id=2056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="640033008000de00ffffffffffff080211000000e9b78e575a63009500000000e4f30000000064000140"], 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.911781292s ago: executing program 3 (id=2058): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x300000, 0x12) 2.776335053s ago: executing program 2 (id=2059): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) ppoll(0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)={[0x23]}, 0x8) 2.776213773s ago: executing program 3 (id=2060): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff}) 2.644061645s ago: executing program 2 (id=2061): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1b, r1, 0x1, 0xfd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) 2.424322253s ago: executing program 2 (id=2063): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f00000001c0)=[{0x1, 0xabdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 2.204265662s ago: executing program 2 (id=2065): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x44e2, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x24044854) 1.534252839s ago: executing program 0 (id=2072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x2c, r1, 0x201, 0x0, 0xfffffffd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x8010) 1.457155476s ago: executing program 0 (id=2073): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x7}]}}]}, 0x44}}, 0x0) 1.248223424s ago: executing program 0 (id=2074): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000001c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x6003, &(0x7f0000001d00)="$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") lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000780)={0x0, 0xfb, 0xfc9, 0x1, 0x6, "515079cd5c31ad0da3a4d12c82b75247", "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"}, 0xfc9, 0x2) 1.05563872s ago: executing program 4 (id=2075): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103042, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) 898.190774ms ago: executing program 4 (id=2076): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r1, 0x5}, &(0x7f0000000240)=0x8) 599.763319ms ago: executing program 4 (id=2077): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000880)='y\x105\b\xf7u\x83%:r7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00@\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\x9a\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xf2\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xc7/\x97X\xac\b\xb0\xc2<\x00E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xcb\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRCf\xab\xbc\xbd\xa8w\x06.\xf3k\x01\x00B\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\x01\x00\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2\xadg\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j \x92\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae\'\xc5\x11\xbbYW\xfc\xaf\x06\x94!\xdf\x90\xf22T\'+\xa9\x1c\xe8\x99T', 0x6) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x2, [{r1, 0x0, 0x10000}, {r1, 0x0, 0x4000, 0x1000}]}) 486.687899ms ago: executing program 4 (id=2078): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x1, 0x44f, &(0x7f00000002c0)="$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") utimes(&(0x7f0000000080)='./file0\x00', 0x0) 481.019249ms ago: executing program 3 (id=2079): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 284.389706ms ago: executing program 1 (id=2080): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a0000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 284.196746ms ago: executing program 0 (id=2081): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r1, 0x541e, &(0x7f0000000040)) 284.001796ms ago: executing program 4 (id=2082): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x29, 0x43}], 0x10}}], 0x1, 0x4000000) 209.421472ms ago: executing program 2 (id=2083): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES32], 0x1, 0x5b9, &(0x7f0000000340)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') stat(&(0x7f0000001d00)='./file1\x00', &(0x7f0000001d40)) 90.870332ms ago: executing program 0 (id=2084): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) msgsnd(0x0, 0x0, 0x8, 0x800) 89.727233ms ago: executing program 1 (id=2085): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 0s ago: executing program 4 (id=2086): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x401, 0x1, 0x4, 0x3, 0xd, "0ff884b5d0449ec8f2d8175b5505ddf5201923"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x17) kernel console output (not intermixed with test programs): filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.489949][ T6444] FAT-fs (loop1): Directory bread(block 67) failed [ 161.510157][ T6444] FAT-fs (loop1): Directory bread(block 68) failed [ 161.537984][ T6444] FAT-fs (loop1): Directory bread(block 69) failed [ 161.554280][ T6444] FAT-fs (loop1): Directory bread(block 70) failed [ 161.568803][ T6422] loop0: detected capacity change from 0 to 32768 [ 161.592704][ T6444] FAT-fs (loop1): Directory bread(block 71) failed [ 161.599591][ T6444] FAT-fs (loop1): Directory bread(block 72) failed [ 161.618683][ T6444] FAT-fs (loop1): Directory bread(block 73) failed [ 161.749246][ T6422] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 161.777778][ T6456] loop4: detected capacity change from 0 to 512 [ 161.810966][ T6456] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 161.894289][ T6455] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 161.901485][ T6455] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 161.912849][ T6456] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.981779][ T6455] vhci_hcd vhci_hcd.0: Device attached [ 161.990939][ T6456] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #17: comm syz.4.784: inline data xattr refers to an external xattr inode [ 162.015008][ T4266] ocfs2: Unmounting device (7,0) on (node local) [ 162.078437][ T6456] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.784: couldn't read orphan inode 17 (err -117) [ 162.143317][ T6456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 162.223543][ T26] audit: type=1800 audit(1755260948.966:33): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.784" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 162.237517][ T41] vhci_hcd: vhci_device speed not set [ 162.252813][ T4963] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 162.322723][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 162.362640][ T41] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 162.377417][ T6465] loop2: detected capacity change from 0 to 64 [ 162.474352][ T4963] usb 4-1: config 0 has no interfaces? [ 162.480121][ T4963] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 162.510322][ T4963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.523990][ T6470] netlink: 'syz.1.788': attribute type 3 has an invalid length. [ 162.537726][ T4963] usb 4-1: config 0 descriptor?? [ 162.781213][ T6458] vhci_hcd: cannot find the pending unlink 6 [ 162.792629][ T6458] usbip_core: unknown command [ 162.797448][ T6458] vhci_hcd: unknown pdu 5 [ 162.817248][ T4327] usb 4-1: USB disconnect, device number 10 [ 162.834753][ T6458] usbip_core: unknown command [ 162.862528][ T41] vhci_hcd: vhci_device speed not set [ 162.873911][ T1113] vhci_hcd: stop threads [ 162.902646][ T1113] vhci_hcd: release socket [ 162.933098][ T1113] vhci_hcd: disconnect device [ 162.942589][ T41] usb 39-1: device descriptor read/64, error -71 [ 162.951953][ T6487] netlink: 72 bytes leftover after parsing attributes in process `syz.1.794'. [ 163.143547][ T41] vhci_hcd: vhci_device speed not set [ 163.818139][ T6490] loop0: detected capacity change from 0 to 32768 [ 164.112816][ T4960] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 164.138418][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 164.230819][ T6532] syz.4.818 uses obsolete (PF_INET,SOCK_PACKET) [ 164.289405][ T6534] loop3: detected capacity change from 0 to 128 [ 164.312402][ T4960] usb 3-1: Using ep0 maxpacket: 16 [ 164.326764][ T4960] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 164.360004][ T6534] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 164.366635][ T4960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.423024][ T4960] usb 3-1: Product: syz [ 164.451077][ T4960] usb 3-1: Manufacturer: syz [ 164.460769][ T4960] usb 3-1: SerialNumber: syz [ 164.481291][ T4960] usb 3-1: config 0 descriptor?? [ 164.686433][ T4960] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 164.761013][ T4515] udevd[4515]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.945693][ T5102] usb 3-1: USB disconnect, device number 9 [ 165.420819][ T6565] loop0: detected capacity change from 0 to 64 [ 165.429100][ T6564] loop4: detected capacity change from 0 to 128 [ 165.479413][ T6565] hfs: unable to locate alternate MDB [ 165.530358][ T6565] hfs: continuing without an alternate MDB [ 165.789623][ T6544] loop3: detected capacity change from 0 to 40427 [ 165.825994][ T6544] F2FS-fs (loop3): invalid crc value [ 165.856555][ T6544] F2FS-fs (loop3): Found nat_bits in checkpoint [ 166.039229][ T6544] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 166.519334][ T6603] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 166.921586][ T6616] loop3: detected capacity change from 0 to 64 [ 167.838724][ T6644] loop1: detected capacity change from 0 to 512 [ 168.019835][ T6644] EXT4-fs (loop1): 1 orphan inode deleted [ 168.026738][ T6644] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 168.035920][ T6644] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.135943][ T6644] EXT4-fs (loop1): resizing filesystem from 64 to 1 blocks [ 168.162932][ T6644] EXT4-fs warning (device loop1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 168.192720][ T5019] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 168.295372][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 168.397632][ T6632] loop0: detected capacity change from 0 to 32768 [ 168.429575][ T6632] [ 168.429575][ T6632] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.429575][ T6632] [ 168.444540][ T5019] usb 4-1: Using ep0 maxpacket: 8 [ 168.465150][ T5019] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 168.487772][ T5019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.530198][ T5019] usb 4-1: Product: syz [ 168.560380][ T6655] loop1: detected capacity change from 0 to 4096 [ 168.563686][ T5019] usb 4-1: Manufacturer: syz [ 168.602782][ T5019] usb 4-1: SerialNumber: syz [ 168.622810][ T5019] usb 4-1: config 0 descriptor?? [ 168.630361][ T40] read_mapping_page failed! [ 168.650420][ T5019] usb_ehset_test: probe of 4-1:0.0 failed with error -32 [ 168.659391][ T40] ERROR: (device loop0): txCommit: [ 168.659391][ T40] [ 168.690690][ T6655] ntfs: volume version 3.1. [ 168.742500][ T40] jfs_write_inode: jfs_commit_inode failed! [ 168.748966][ T4266] [ 168.748966][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.748966][ T4266] [ 168.754174][ T6655] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-3. You might want to try to use the mount option nls=utf8. [ 168.772675][ T4266] [ 168.772675][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.772675][ T4266] [ 168.856864][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 168.876995][ T5019] usb 4-1: USB disconnect, device number 11 [ 168.877799][ T6655] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 168.915716][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 168.933021][ T6664] netlink: 'syz.2.880': attribute type 14 has an invalid length. [ 168.951443][ T6664] netlink: 'syz.2.880': attribute type 13 has an invalid length. [ 169.537593][ T6679] loop0: detected capacity change from 0 to 512 [ 169.574328][ T6679] EXT4-fs (loop0): Test dummy encryption mode enabled [ 169.611590][ T6682] loop1: detected capacity change from 0 to 64 [ 169.647586][ T6679] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 169.666371][ T6677] loop2: detected capacity change from 0 to 4096 [ 169.691441][ T6677] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 169.721004][ T6679] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.886: Directory hole found for htree leaf block 0 [ 169.741610][ T6686] loop4: detected capacity change from 0 to 64 [ 169.833690][ T6677] ntfs3: loop2: Failed to load root. [ 169.882846][ T6679] EXT4-fs (loop0): Remounting filesystem read-only [ 170.072168][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 170.859921][ T6720] delete_channel: no stack [ 170.877767][ T6719] delete_channel: no stack [ 171.025350][ T6724] loop0: detected capacity change from 0 to 512 [ 171.034392][ T4963] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.148968][ T6724] EXT4-fs (loop0): 1 orphan inode deleted [ 171.188628][ T6724] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 171.247431][ T6724] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.262555][ T4963] usb 5-1: Using ep0 maxpacket: 16 [ 171.262885][ T6715] loop3: detected capacity change from 0 to 32768 [ 171.288634][ T4963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 171.344126][ T6715] JBD2: Ignoring recovery information on journal [ 171.356452][ T4963] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 171.364781][ T6724] EXT4-fs (loop0): resizing filesystem from 64 to 1 blocks [ 171.407332][ T6724] EXT4-fs warning (device loop0): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 171.411434][ T4963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.455414][ T6715] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 171.481421][ T4963] usb 5-1: Product: syz [ 171.521726][ T6710] loop2: detected capacity change from 0 to 32768 [ 171.526311][ T6734] loop1: detected capacity change from 0 to 16 [ 171.531044][ T4963] usb 5-1: Manufacturer: syz [ 171.541940][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 171.557462][ T4963] usb 5-1: SerialNumber: syz [ 171.565003][ T6710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.900 (6710) [ 171.589084][ T4963] usb 5-1: config 0 descriptor?? [ 171.606783][ T4963] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 171.635582][ T6734] erofs: (device loop1): mounted with root inode @ nid 36. [ 171.667779][ T4963] em28xx 5-1:0.0: DVB interface 0 found: isoc [ 171.674384][ T6710] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.710284][ T6710] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 171.736141][ T26] audit: type=1800 audit(1755260958.476:34): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.909" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 171.743436][ T4269] ocfs2: Unmounting device (7,3) on (node local) [ 171.801002][ T6710] BTRFS info (device loop2): doing ref verification [ 171.843031][ T6710] BTRFS info (device loop2): disabling tree log [ 171.860201][ T6710] BTRFS info (device loop2): max_inline at 4096 [ 171.880397][ T6710] BTRFS info (device loop2): using free space tree [ 171.904543][ T4963] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 172.028493][ T4963] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 172.078595][ T4963] em28xx 5-1:0.0: board has no eeprom [ 172.172414][ T4963] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 172.191312][ T4963] em28xx 5-1:0.0: dvb set to isoc mode. [ 172.242780][ T6710] BTRFS info (device loop2): enabling ssd optimizations [ 172.257229][ T4960] em28xx 5-1:0.0: Binding DVB extension [ 172.302445][ T4963] usb 5-1: USB disconnect, device number 5 [ 172.350656][ T4963] em28xx 5-1:0.0: Disconnecting em28xx [ 172.497307][ T6771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.916'. [ 172.555842][ T4960] em28xx 5-1:0.0: Registering input extension [ 172.608980][ T4963] em28xx 5-1:0.0: Closing input extension [ 172.699418][ T4963] em28xx 5-1:0.0: Freeing device [ 172.970117][ T4268] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 173.160652][ T6748] loop1: detected capacity change from 0 to 32768 [ 173.180554][ T4412] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4412) [ 173.419579][ T6748] XFS (loop1): Mounting V5 Filesystem [ 173.552522][ T41] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.611816][ T6748] XFS (loop1): Ending clean mount [ 173.614348][ T6810] loop4: detected capacity change from 0 to 256 [ 173.639157][ T6748] XFS (loop1): Quotacheck needed: Please wait. [ 173.678545][ T6810] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 173.747786][ T41] usb 4-1: Using ep0 maxpacket: 8 [ 173.759787][ T41] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.780010][ T6810] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 173.785666][ T41] usb 4-1: config 0 has no interface number 0 [ 173.805848][ T41] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.819542][ T41] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.832617][ T41] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 173.835871][ T6810] exFAT-fs (loop4): error, failed to bmap (inode : ffff88806fd107e0 iblock : 8, err : -5) [ 173.841868][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.850276][ T41] usb 4-1: config 0 descriptor?? [ 173.866664][ T6748] XFS (loop1): Quotacheck: Done. [ 173.940625][ T6810] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 173.969661][ T41] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 174.096331][ T6795] iowarrior 4-1:0.1: Error -90 while submitting URB [ 174.154754][ T41] usb 4-1: USB disconnect, device number 12 [ 174.198846][ T4276] XFS (loop1): Unmounting Filesystem [ 174.515628][ T6822] loop0: detected capacity change from 0 to 256 [ 174.593094][ T6822] FAT-fs (loop0): Directory bread(block 64) failed [ 174.599820][ T6822] FAT-fs (loop0): Directory bread(block 65) failed [ 174.647040][ T6822] FAT-fs (loop0): Directory bread(block 66) failed [ 174.666931][ T6822] FAT-fs (loop0): Directory bread(block 67) failed [ 174.679220][ T6822] FAT-fs (loop0): Directory bread(block 68) failed [ 174.686737][ T6822] FAT-fs (loop0): Directory bread(block 69) failed [ 174.716127][ T6822] FAT-fs (loop0): Directory bread(block 70) failed [ 174.759221][ T6822] FAT-fs (loop0): Directory bread(block 71) failed [ 174.776812][ T6822] FAT-fs (loop0): Directory bread(block 72) failed [ 174.801454][ T6822] FAT-fs (loop0): Directory bread(block 73) failed [ 175.043880][ T6822] syz.0.937: attempt to access beyond end of device [ 175.043880][ T6822] loop0: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 175.081310][ T6822] syz.0.937: attempt to access beyond end of device [ 175.081310][ T6822] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 175.103980][ T26] audit: type=1800 audit(1755260961.846:35): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.937" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=1048668 res=0 errno=0 [ 175.146001][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.398303][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.429691][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.439842][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.458132][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.497438][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.519315][ T6828] loop1: detected capacity change from 0 to 32768 [ 175.527522][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.553184][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.561942][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.612622][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.627627][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.663040][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.681788][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.702137][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.736732][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.766653][ T4960] hid-generic 20A0:0006:0003.0019: unknown main item tag 0x0 [ 175.848595][ T4960] hid-generic 20A0:0006:0003.0019: hidraw0: HID v0.05 Device [syz1] on syz0 [ 176.154381][ T6859] fido_id[6859]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 176.332644][ T4960] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 176.433208][ T6877] loop1: detected capacity change from 0 to 2048 [ 176.451336][ T6881] loop4: detected capacity change from 0 to 256 [ 176.490756][ T6877] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.549413][ T4960] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 176.559677][ T6881] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 176.603809][ T4960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.648880][ T4960] usb 4-1: config 0 descriptor?? [ 176.682688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 176.900575][ T4960] kaweth 4-1:0.0: Firmware present in device. [ 177.078611][ T4960] kaweth 4-1:0.0: Statistics collection: 0 [ 177.091408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 177.104185][ T4960] kaweth 4-1:0.0: Multicast filter limit: 0 [ 177.127106][ T4960] kaweth 4-1:0.0: MTU: 0 [ 177.144057][ T4960] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 177.276318][ T26] audit: type=1326 audit(1755260964.016:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6895 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe9b8ebe9 code=0x7ffc0000 [ 177.298932][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.306350][ T4960] kaweth: probe of 4-1:0.0 failed with error -5 [ 177.331193][ T4960] usb 4-1: USB disconnect, device number 13 [ 177.384022][ T26] audit: type=1326 audit(1755260964.016:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6895 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f4fe9b8ebe9 code=0x7ffc0000 [ 177.384792][ T6889] loop1: detected capacity change from 0 to 16384 [ 177.455428][ T26] audit: type=1326 audit(1755260964.016:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6895 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe9b8ebe9 code=0x7ffc0000 [ 177.520269][ T26] audit: type=1326 audit(1755260964.016:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6895 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe9b8ebe9 code=0x7ffc0000 [ 177.575869][ T6899] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.604852][ T26] audit: type=1326 audit(1755260964.016:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6895 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f4fe9b8ebe9 code=0x7ffc0000 [ 177.691201][ T26] audit: type=1326 audit(1755260964.016:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6895 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe9b8ebe9 code=0x7ffc0000 [ 177.743683][ T6901] loop4: detected capacity change from 0 to 4096 [ 177.773772][ T26] audit: type=1326 audit(1755260964.016:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6895 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe9b8ebe9 code=0x7ffc0000 [ 177.797002][ T6901] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 177.874799][ T6892] loop2: detected capacity change from 0 to 32768 [ 177.919671][ T6892] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.969 (6892) [ 177.985579][ T6901] ntfs3: loop4: Failed to load $Extend. [ 178.015978][ T6892] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 178.059487][ T6901] ntfs3: loop4: MFT: r=b, expect seq=0 instead of b! [ 178.060068][ T6892] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 178.142875][ T6892] BTRFS info (device loop2): using free space tree [ 178.187649][ T6905] loop3: detected capacity change from 0 to 4096 [ 178.196286][ T6905] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 178.216804][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.279351][ T6905] ntfs: volume version 3.1. [ 178.444770][ T6898] loop0: detected capacity change from 0 to 32768 [ 178.522503][ T6892] BTRFS info (device loop2): enabling ssd optimizations [ 178.556238][ T6898] XFS (loop0): Mounting V5 Filesystem [ 178.635752][ T6898] XFS (loop0): Ending clean mount [ 178.688834][ T6898] XFS (loop0): Quotacheck needed: Please wait. [ 178.712169][ T46] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 178.827722][ T4268] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 178.894938][ T6898] XFS (loop0): Quotacheck: Done. [ 179.078786][ T4637] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 9 /dev/loop2 scanned by udevd (4637) [ 179.251437][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 179.412898][ T4266] XFS (loop0): Unmounting Filesystem [ 179.428916][ T6903] loop1: detected capacity change from 0 to 32768 [ 179.449269][ T6903] XFS: ikeep mount option is deprecated. [ 179.493993][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.979'. [ 179.505319][ T6946] netlink: 'syz.2.979': attribute type 2 has an invalid length. [ 179.562800][ T6946] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 179.571402][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 179.687332][ T6903] XFS (loop1): Mounting V5 Filesystem [ 180.043885][ T6903] XFS (loop1): Ending clean mount [ 180.071269][ T6903] XFS (loop1): Quotacheck needed: Please wait. [ 180.225206][ T6903] XFS (loop1): Quotacheck: Done. [ 180.325468][ T6974] loop3: detected capacity change from 0 to 512 [ 180.398465][ T6974] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.832552][ T4276] XFS (loop1): Unmounting Filesystem [ 180.874890][ T6983] netlink: 'syz.3.994': attribute type 30 has an invalid length. [ 181.183180][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 181.239928][ T6991] IPVS: Error joining to the multicast group [ 181.974979][ T7019] binder: 7018:7019 ioctl 400c620e 200000001f40 returned -22 [ 182.176837][ T7032] loop1: detected capacity change from 0 to 128 [ 182.207392][ T7032] FAT-fs (loop1): Invalid FSINFO signature: 0x4161ffff, 0x61417272 (sector = 1) [ 182.222528][ T6461] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.305904][ T4963] Process accounting resumed [ 182.317143][ T4963] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 182.330614][ T4963] FAT-fs (loop1): Filesystem has been set read-only [ 182.418417][ T7041] loop2: detected capacity change from 0 to 512 [ 182.426119][ T4276] FAT-fs (loop1): Invalid FSINFO signature: 0x4161ffff, 0x61417272 (sector = 1) [ 182.448824][ T6461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 182.472519][ T6461] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 182.496552][ T6461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.514257][ T6461] usb 5-1: config 0 descriptor?? [ 182.521142][ T7041] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 182.547086][ T7041] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.570924][ T7041] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 10: comm syz.2.1023: lblock 15 mapped to illegal pblock 10 (length 19) [ 182.610438][ T7048] sp0: Synchronizing with TNC [ 182.640234][ T7048] sp0: Found TNC [ 182.655555][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 182.693218][ T41] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 182.892714][ T41] usb 4-1: Using ep0 maxpacket: 8 [ 182.899238][ T41] usb 4-1: too many configurations: 120, using maximum allowed: 8 [ 182.930519][ T41] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 182.957151][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 182.967555][ T6461] aquacomputer_d5next 0003:0C70:F011.001A: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.4-1/input0 [ 182.985459][ T41] usb 4-1: Product: syz [ 183.000222][ T41] usb 4-1: Manufacturer: syz [ 183.011364][ T7059] loop0: detected capacity change from 0 to 512 [ 183.018883][ T41] usb 4-1: SerialNumber: syz [ 183.038089][ T41] usb 4-1: config 0 descriptor?? [ 183.075123][ T41] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 183.085316][ T7059] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.1030: corrupted in-inode xattr [ 183.102499][ T41] usb 4-1: setting power ON [ 183.112688][ T41] dvb-usb: bulk message failed: -22 (2/0) [ 183.114652][ T7059] EXT4-fs (loop0): Remounting filesystem read-only [ 183.140843][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.152097][ T41] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 183.160987][ T41] usb 4-1: media controller created [ 183.179194][ T6461] usb 5-1: USB disconnect, device number 6 [ 183.180827][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.210970][ T41] usb 4-1: selecting invalid altsetting 6 [ 183.211510][ T7059] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1030: couldn't read orphan inode 15 (err -117) [ 183.228159][ T41] usb 4-1: digital interface selection failed (-22) [ 183.241115][ T41] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 183.266616][ T7059] EXT4-fs (loop0): Remounting filesystem read-only [ 183.275232][ T41] usb 4-1: setting power OFF [ 183.285158][ T7039] dvb-usb: bulk message failed: -22 (3/0) [ 183.294918][ T7059] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 183.309232][ T41] dvb-usb: bulk message failed: -22 (2/0) [ 183.316265][ T7039] cxusb: i2c wr: len=80 is too big! [ 183.316265][ T7039] [ 183.332378][ T41] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 183.372473][ T41] (NULL device *): no alternate interface [ 183.410505][ T41] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 183.467781][ T7066] fido_id[7066]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 183.516167][ T41] usb 4-1: USB disconnect, device number 14 [ 183.569592][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 183.698248][ T4327] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 183.883089][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 183.906004][ T4327] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.922223][ T4327] usb 3-1: config 6 has an invalid interface number: 96 but max is 0 [ 183.941154][ T4327] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 183.962793][ T4327] usb 3-1: config 6 has no interface number 0 [ 183.979923][ T4327] usb 3-1: config 6 interface 96 has no altsetting 0 [ 183.990155][ T4327] usb 3-1: string descriptor 0 read error: -22 [ 184.010477][ T7082] loop4: detected capacity change from 0 to 1024 [ 184.027594][ T7084] loop1: detected capacity change from 0 to 512 [ 184.041890][ T4327] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=4f.2b [ 184.076879][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.087851][ T7084] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.126586][ T7082] hfsplus: invalid xattr key length: 0 [ 184.167874][ T7084] EXT4-fs (loop1): 1 truncate cleaned up [ 184.185078][ T7084] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.282177][ T46] hfsplus: b-tree write err: -5, ino 8 [ 184.380896][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 184.418715][ T7089] loop0: detected capacity change from 0 to 4096 [ 184.478242][ T7094] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1045'. [ 184.484520][ T7089] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 184.616553][ T7089] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 184.621851][ T7098] netlink: 'syz.3.1048': attribute type 7 has an invalid length. [ 184.651429][ T7098] netlink: 'syz.3.1048': attribute type 8 has an invalid length. [ 184.717392][ T4327] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 184.765264][ T7089] ntfs3: loop0: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 184.790323][ T7096] loop1: detected capacity change from 0 to 4096 [ 184.808297][ T4327] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 184.825181][ T7096] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 184.866303][ T4327] dib0700: firmware download failed at 28 with -71 [ 184.892859][ T4327] usb 3-1: USB disconnect, device number 10 [ 184.922354][ T7096] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 184.960837][ T7096] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 185.046171][ T7096] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 185.084096][ T7096] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 185.127054][ T7105] sp0: Synchronizing with TNC [ 185.167663][ T7096] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 185.206156][ T7096] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 185.297219][ T7096] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 185.299287][ T7108] loop3: detected capacity change from 0 to 4096 [ 185.462871][ T7096] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 185.483747][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.511070][ T7112] loop0: detected capacity change from 0 to 32768 [ 185.518418][ T7112] XFS: attr2 mount option is deprecated. [ 185.543524][ T7108] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 185.561271][ T7108] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 185.579927][ T7108] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 185.605718][ T7108] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 185.617636][ T7112] XFS (loop0): Mounting V5 Filesystem [ 185.624143][ T7108] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 185.633835][ T7108] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 185.646294][ T7108] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 185.663210][ T7108] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 185.672888][ T7108] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 185.683672][ T7096] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 185.697812][ T7096] ntfs: volume version 3.1. [ 185.703337][ T7108] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00 [ 185.703364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 185.736218][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1055'. [ 185.745645][ T4413] XFS (loop0): Metadata CRC error detected at xfs_agi_read_verify+0x18d/0x250, xfs_agi block 0x2 [ 185.745753][ T4413] XFS (loop0): Unmount and run xfs_repair [ 185.745765][ T4413] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 185.745778][ T4413] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 10 00 XAGI............ [ 185.745791][ T4413] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 185.745802][ T4413] 00000020: 00 00 11 40 ff ff ff ff ff ff ff ff ff ff ff ff ...@............ [ 185.745813][ T4413] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 185.745823][ T4413] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 185.745833][ T4413] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 185.966871][ T4413] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 185.995222][ T4413] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 186.015077][ T7112] XFS (loop0): metadata I/O error in "xfs_read_agi+0x295/0x650" at daddr 0x2 len 1 error 74 [ 186.026196][ T7112] XFS (loop0): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 186.035660][ T7112] XFS (loop0): Failed to read root inode 0x1140, error 117 [ 186.187548][ T7131] tipc: Started in network mode [ 186.197877][ T7131] tipc: Node identity ac14140f, cluster identity 4711 [ 186.213452][ T7131] tipc: New replicast peer: 255.255.255.255 [ 186.288296][ T7131] tipc: Enabled bearer , priority 10 [ 186.754743][ T7147] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1066'. [ 186.804331][ T7143] loop1: detected capacity change from 0 to 4096 [ 186.965384][ T7142] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 187.289730][ T7167] loop4: detected capacity change from 0 to 256 [ 187.355538][ T5019] tipc: Node number set to 2886997007 [ 187.421698][ T7167] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 187.768082][ T7145] loop0: detected capacity change from 0 to 32768 [ 187.804858][ T7145] XFS: noikeep mount option is deprecated. [ 187.909454][ T7178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.951817][ T7145] XFS (loop0): Mounting V5 Filesystem [ 188.176776][ T7145] XFS (loop0): Ending clean mount [ 188.240084][ T7145] XFS (loop0): Quotacheck needed: Please wait. [ 188.359707][ T7145] XFS (loop0): Quotacheck: Done. [ 188.502042][ T7192] loop1: detected capacity change from 0 to 32768 [ 188.552144][ T7192] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1084 (7192) [ 188.592035][ T4266] XFS (loop0): Unmounting Filesystem [ 188.607540][ T7192] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.648929][ T7192] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 188.692786][ T7192] BTRFS info (device loop1): setting nodatacow, compression disabled [ 188.701168][ T7192] BTRFS info (device loop1): enabling auto defrag [ 188.807376][ T7192] BTRFS info (device loop1): max_inline at 0 [ 188.812505][ T7208] netlink: 'syz.2.1091': attribute type 10 has an invalid length. [ 188.829419][ T7174] loop3: detected capacity change from 0 to 32768 [ 188.836135][ T7192] BTRFS info (device loop1): using free space tree [ 188.960574][ T7208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.018715][ T7208] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 189.105911][ T7209] netlink: 'syz.2.1091': attribute type 10 has an invalid length. [ 189.181475][ T7209] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1091'. [ 189.220608][ T7209] device batadv0 entered promiscuous mode [ 189.268550][ T7209] bond0: (slave batadv0): Releasing backup interface [ 189.343196][ T7209] bridge0: port 3(batadv0) entered blocking state [ 189.366439][ T7209] bridge0: port 3(batadv0) entered disabled state [ 189.563207][ T4276] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.767391][ T4659] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 189.778616][ T4659] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 190.136701][ T7237] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 190.175801][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.188258][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.243030][ T4327] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 190.424061][ T7246] loop4: detected capacity change from 0 to 512 [ 190.443397][ T4327] usb 3-1: Using ep0 maxpacket: 32 [ 190.451247][ T4327] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.483326][ T4327] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.525254][ T4327] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 190.547155][ T7246] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 190.570193][ T7246] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.582002][ T4327] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 190.643515][ T4327] usb 3-1: Product: syz [ 190.648192][ T4327] usb 3-1: Manufacturer: syz [ 190.704764][ T4327] hub 3-1:4.0: USB hub found [ 190.773535][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 190.900952][ T4327] hub 3-1:4.0: 9 ports detected [ 190.910091][ T4327] hub 3-1:4.0: insufficient power available to use all downstream ports [ 191.058572][ T7267] loop3: detected capacity change from 0 to 16 [ 191.108623][ T4327] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 191.122828][ T4327] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 191.135695][ T7267] erofs: (device loop3): mounted with root inode @ nid 36. [ 191.226739][ T4327] usb 3-1: USB disconnect, device number 11 [ 191.245827][ T7267] erofs: (device loop3): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 191.313110][ T7272] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 191.357434][ T7272] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 191.402772][ T7272] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 191.423225][ T7272] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 191.447680][ T7272] syz.3.1107: attempt to access beyond end of device [ 191.447680][ T7272] loop3: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 191.508691][ T7272] syz.3.1107: attempt to access beyond end of device [ 191.508691][ T7272] loop3: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 191.803980][ T7286] loop2: detected capacity change from 0 to 128 [ 191.809236][ T7284] loop0: detected capacity change from 0 to 256 [ 192.045896][ T7288] device bridge0 entered promiscuous mode [ 192.078178][ T7290] loop2: detected capacity change from 0 to 512 [ 192.092414][ T7288] device macvlan2 entered promiscuous mode [ 192.122985][ T7290] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 192.147721][ T7290] EXT4-fs (loop2): invalid journal inode [ 192.156498][ T7292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.174309][ T7290] EXT4-fs (loop2): can't get journal size [ 192.314823][ T7290] EXT4-fs (loop2): 1 truncate cleaned up [ 192.320841][ T7290] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 192.365466][ T7271] loop4: detected capacity change from 0 to 40427 [ 192.413161][ T7271] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 192.425699][ T7299] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 192.475873][ T7271] F2FS-fs (loop4): invalid crc value [ 192.484937][ T7290] EXT4-fs warning (device loop2): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 192.549959][ T7271] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.745870][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 192.761730][ T7271] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 192.940042][ T7271] F2FS-fs (loop4): access invalid blkaddr:2816 [ 192.973454][ T7271] CPU: 1 PID: 7271 Comm: syz.4.1109 Not tainted 6.1.148-syzkaller #0 [ 192.981775][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.992463][ T7271] Call Trace: [ 192.996036][ T7271] [ 192.999164][ T7271] dump_stack_lvl+0x168/0x22e [ 193.003976][ T7271] ? show_regs_print_info+0x12/0x12 [ 193.009648][ T7271] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 193.015524][ T7271] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 193.020939][ T7271] f2fs_map_blocks+0xd37/0x3840 [ 193.025864][ T7271] ? f2fs_do_map_lock+0x70/0x70 [ 193.030834][ T7271] ? preempt_count_add+0x8d/0x190 [ 193.035987][ T7271] ? clear_nonspinnable+0x60/0x60 [ 193.041712][ T7271] ? fiemap_prep+0x1a8/0x240 [ 193.046953][ T7271] f2fs_fiemap+0x93d/0x1990 [ 193.051986][ T7271] ? do_syscall_64+0x4c/0xa0 [ 193.056808][ T7271] ? f2fs_overwrite_io+0x1e0/0x1e0 [ 193.062390][ T7271] ? __lock_acquire+0x7c50/0x7c50 [ 193.067707][ T7271] ? __might_fault+0xc2/0x120 [ 193.072731][ T7271] ? __might_fault+0xa6/0x120 [ 193.077763][ T7271] do_vfs_ioctl+0x1425/0x1d10 [ 193.082739][ T7271] ? __ia32_compat_sys_ioctl+0x780/0x780 [ 193.088472][ T7271] ? tomoyo_path_number_perm+0x1b6/0x600 [ 193.094198][ T7271] ? __lock_acquire+0x7c50/0x7c50 [ 193.099266][ T7271] ? slab_free_freelist_hook+0x131/0x1a0 [ 193.105064][ T7271] ? tomoyo_path_number_perm+0x4ae/0x600 [ 193.111159][ T7271] ? __kmem_cache_free+0xb6/0x1f0 [ 193.116656][ T7271] ? tomoyo_path_number_perm+0x503/0x600 [ 193.123028][ T7271] ? tomoyo_path_number_perm+0x1b6/0x600 [ 193.129042][ T7271] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 193.135112][ T7271] ? __fget_files+0x28/0x4d0 [ 193.140237][ T7271] ? bpf_lsm_file_ioctl+0x5/0x10 [ 193.145313][ T7271] ? security_file_ioctl+0x7c/0xa0 [ 193.150545][ T7271] __se_sys_ioctl+0x83/0x170 [ 193.155971][ T7271] do_syscall_64+0x4c/0xa0 [ 193.160564][ T7271] ? clear_bhb_loop+0x60/0xb0 [ 193.166238][ T7271] ? clear_bhb_loop+0x60/0xb0 [ 193.172098][ T7271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.178467][ T7271] RIP: 0033:0x7f4fe9b8ebe9 [ 193.182989][ T7271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.202974][ T7271] RSP: 002b:00007f4fea99b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.211415][ T7271] RAX: ffffffffffffffda RBX: 00007f4fe9db5fa0 RCX: 00007f4fe9b8ebe9 [ 193.219511][ T7271] RDX: 0000200000000040 RSI: 00000000c020660b RDI: 0000000000000004 [ 193.227771][ T7271] RBP: 00007f4fe9c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 193.236700][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.244780][ T7271] R13: 00007f4fe9db6038 R14: 00007f4fe9db5fa0 R15: 00007ffc72fe9688 [ 193.252942][ T7271] [ 193.256446][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.414612][ T7320] Zero length message leads to an empty skb [ 193.573253][ T4327] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 193.772932][ T4327] usb 4-1: Using ep0 maxpacket: 8 [ 193.781860][ T4327] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 193.822374][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.857074][ T4327] pvrusb2: Hardware description: Terratec Grabster AV400 [ 193.879343][ T4327] pvrusb2: ********** [ 193.910322][ T4327] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 193.922251][ T4327] pvrusb2: Important functionality might not be entirely working. [ 193.931079][ T4327] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 193.943690][ T4327] pvrusb2: ********** [ 194.063590][ T2309] pvrusb2: Invalid write control endpoint [ 194.293782][ T7316] pvrusb2: Invalid write control endpoint [ 194.334685][ T4327] usb 4-1: USB disconnect, device number 15 [ 194.367235][ T2309] pvrusb2: Invalid write control endpoint [ 194.391110][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 194.445398][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 194.463182][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 194.500069][ T2309] pvrusb2: Device being rendered inoperable [ 194.517176][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 194.545576][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 194.577913][ T2309] pvrusb2: Attached sub-driver cx25840 [ 194.592977][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 194.622752][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.629868][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.632596][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 195.112974][ T41] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 195.123856][ T7372] syzkaller1: tun_chr_ioctl cmd 35111 [ 195.134002][ T7370] loop2: detected capacity change from 0 to 2048 [ 195.222882][ T7370] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 195.333041][ T41] usb 1-1: Using ep0 maxpacket: 16 [ 195.353547][ T41] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.417748][ T7370] EXT4-fs (loop2): shut down requested (1) [ 195.445442][ T41] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.496487][ T41] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 195.517136][ T41] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.527705][ T41] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 195.530131][ T7381] loop4: detected capacity change from 0 to 256 [ 195.538073][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.583728][ T41] usb 1-1: config 0 descriptor?? [ 195.591681][ T7381] exfat: Deprecated parameter 'namecase' [ 195.620235][ T7381] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 195.639284][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 195.677828][ T4257] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 195.775124][ T7385] loop2: detected capacity change from 0 to 1024 [ 195.876824][ T7385] hfsplus: bad catalog entry type [ 195.882872][ T4257] usb 4-1: Using ep0 maxpacket: 8 [ 195.891100][ T4257] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 195.942398][ T4257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.965702][ T4257] pvrusb2: Hardware description: Terratec Grabster AV400 [ 195.998363][ T41] hid (null): report_id 0 is invalid [ 196.008020][ T4257] pvrusb2: ********** [ 196.013514][ T4257] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 196.062607][ T4257] pvrusb2: Important functionality might not be entirely working. [ 196.077447][ T4257] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 196.110559][ T4257] pvrusb2: ********** [ 196.121531][ T40] hfsplus: b-tree write err: -5, ino 4 [ 196.202903][ T2309] pvrusb2: Invalid write control endpoint [ 196.297182][ T41] usb 1-1: USB disconnect, device number 11 [ 196.391016][ T2309] pvrusb2: Invalid write control endpoint [ 196.410416][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 196.444410][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 196.461375][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 196.486360][ T2309] pvrusb2: Device being rendered inoperable [ 196.500237][ T7377] pvrusb2: Killing an I2C read to 1 that has wlen too large (desired=62 limit=60) [ 196.520142][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 196.529121][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 196.549104][ T4963] usb 4-1: USB disconnect, device number 16 [ 196.564392][ T2309] pvrusb2: Attached sub-driver cx25840 [ 196.581943][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 196.598926][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 196.684028][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 196.684037][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 196.692992][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 196.991015][ T7414] loop0: detected capacity change from 0 to 4096 [ 197.015182][ T7414] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 197.027464][ T7414] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 197.049127][ T7415] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.096241][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 197.096263][ T26] audit: type=1800 audit(1755260983.838:43): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1173" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 197.203532][ T4257] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 197.212750][ T41] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 197.403155][ T41] usb 5-1: Using ep0 maxpacket: 16 [ 197.404439][ T4257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.404469][ T4257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.404499][ T4257] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 197.404518][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.405448][ T41] usb 5-1: unable to get BOS descriptor or descriptor too short [ 197.406515][ T4257] usb 3-1: config 0 descriptor?? [ 197.408080][ T41] usb 5-1: config 9 has an invalid interface number: 48 but max is 0 [ 197.408103][ T41] usb 5-1: config 9 has no interface number 0 [ 197.408123][ T41] usb 5-1: config 9 interface 48 has no altsetting 0 [ 197.410798][ T41] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 197.410827][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.410846][ T41] usb 5-1: Product: syz [ 197.410859][ T41] usb 5-1: Manufacturer: syz [ 197.410873][ T41] usb 5-1: SerialNumber: syz [ 197.626600][ T41] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 197.817641][ T4257] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 197.845924][ T4257] hid-steam 0003:28DE:1142.001C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 197.869598][ T4257] hid-steam 0003:28DE:1142.001D: unknown main item tag 0x0 [ 197.888325][ T4257] hid-steam 0003:28DE:1142.001D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 197.989762][ T7434] loop3: detected capacity change from 0 to 1024 [ 197.997650][ T4257] hid-steam 0003:28DE:1142.001C: Steam wireless receiver connected [ 198.004437][ T7436] loop0: detected capacity change from 0 to 256 [ 198.025236][ T4257] usb 3-1: USB disconnect, device number 12 [ 198.032025][ T41] gspca_vc032x: reg_w err -71 [ 198.032729][ T7434] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.057899][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.074826][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.089882][ T4257] hid-steam 0003:28DE:1142.001C: Steam wireless receiver disconnected [ 198.109336][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.136972][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.157323][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.179305][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.186366][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.192247][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.198227][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.204322][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.209808][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.216585][ T7434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.226231][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.231816][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.245583][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.263842][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.269584][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.275820][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.281314][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.289660][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.297814][ T41] gspca_vc032x: Unknown sensor... [ 198.304356][ T41] vc032x: probe of 5-1:9.48 failed with error -22 [ 198.331397][ T41] usb 5-1: USB disconnect, device number 7 [ 198.404231][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 198.421713][ T7437] fido_id[7437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 198.665801][ T7443] loop3: detected capacity change from 0 to 4096 [ 198.680879][ T7443] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 198.775726][ T7443] ntfs: volume version 3.1. [ 199.384563][ T7451] loop0: detected capacity change from 0 to 32768 [ 199.438085][ T26] audit: type=1800 audit(1755260986.178:44): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1188" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 199.470506][ T7451] syz.0.1188: attempt to access beyond end of device [ 199.470506][ T7451] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 199.528113][ T7451] metapage_write_end_io: I/O error [ 199.557477][ T7451] ERROR: (device loop0): diWrite: ixpxd invalid [ 199.557477][ T7451] [ 199.584836][ T7451] ERROR: (device loop0): remounting filesystem as read-only [ 199.608567][ T7451] ERROR: (device loop0): txCommit: [ 199.608567][ T7451] [ 199.631835][ T7451] blkno = 8ed2c, nblocks = 1 [ 199.641494][ T7451] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 199.641494][ T7451] [ 199.690627][ T7451] ERROR: (device loop0): dbAllocBits: leaf page corrupt [ 199.690627][ T7451] [ 199.756119][ T7451] syz.0.1188: attempt to access beyond end of device [ 199.756119][ T7451] loop0: rw=34817, sector=4683776, nr_sectors = 4 limit=32768 [ 199.820092][ T7451] syz.0.1188: attempt to access beyond end of device [ 199.820092][ T7451] loop0: rw=34817, sector=4683780, nr_sectors = 2048 limit=32768 [ 199.853853][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'. [ 199.863860][ T7451] syz.0.1188: attempt to access beyond end of device [ 199.863860][ T7451] loop0: rw=34817, sector=4685828, nr_sectors = 516 limit=32768 [ 199.977043][ T106] blkno = 8ed2c, nblocks = 4 [ 199.983033][ T106] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 199.983033][ T106] [ 200.008273][ T7463] loop4: detected capacity change from 0 to 32768 [ 200.033063][ T106] blkno = 8ef00, nblocks = 141 [ 200.042788][ T106] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 200.042788][ T106] [ 200.065967][ T7463] ialloc: diAlloc returned -5! [ 200.142535][ T7473] input: syz1 as /devices/virtual/input/input15 [ 200.211196][ T106] ERROR: (device loop4): diUpdatePMap: the iag is outside the map [ 200.211196][ T106] [ 200.262091][ T106] ERROR: (device loop4): remounting filesystem as read-only [ 200.732895][ T7491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1205'. [ 200.856160][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1205'. [ 200.901319][ T7495] loop2: detected capacity change from 0 to 256 [ 200.925655][ T7495] exfat: Deprecated parameter 'namecase' [ 200.931654][ T7495] exfat: Deprecated parameter 'namecase' [ 200.988412][ T7495] exfat: Deprecated parameter 'namecase' [ 201.002098][ T7495] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 201.225542][ T7503] loop4: detected capacity change from 0 to 8192 [ 201.243599][ T7503] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 201.261273][ T7503] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 201.273409][ T7503] REISERFS (device loop4): using ordered data mode [ 201.280392][ T7503] reiserfs: using flush barriers [ 201.292592][ T7503] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 201.320258][ T5698] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 201.373961][ T7503] REISERFS (device loop4): checking transaction log (loop4) [ 201.479039][ T7503] REISERFS (device loop4): Using tea hash to sort names [ 201.489854][ T7503] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 201.507797][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 201.524521][ T5698] usb 4-1: Using ep0 maxpacket: 32 [ 201.536548][ T5698] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 201.572209][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.615243][ T5698] usb 4-1: config 0 descriptor?? [ 201.847668][ T5698] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 201.874548][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.894840][ T5698] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 201.903811][ T5698] usb 4-1: media controller created [ 201.924094][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.941770][ T7520] loop4: detected capacity change from 0 to 128 [ 201.957873][ T7520] EXT4-fs: Ignoring removed nobh option [ 202.005063][ T7520] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 202.014784][ T7520] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.065862][ T5698] az6027: usb out operation failed. (-71) [ 202.075789][ T5698] az6027: usb out operation failed. (-71) [ 202.093287][ T5698] stb0899_attach: Driver disabled by Kconfig [ 202.100145][ T5698] az6027: no front-end attached [ 202.100145][ T5698] [ 202.143956][ T5698] az6027: usb out operation failed. (-71) [ 202.149748][ T5698] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 202.153529][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 202.171393][ T5698] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 202.217440][ T5698] dvb-usb: schedule remote query interval to 400 msecs. [ 202.239924][ T5698] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 202.295873][ T5698] usb 4-1: USB disconnect, device number 17 [ 202.367129][ T5698] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 202.774503][ T7538] netlink: 'syz.2.1225': attribute type 29 has an invalid length. [ 202.803567][ T7538] netlink: 'syz.2.1225': attribute type 29 has an invalid length. [ 202.942829][ T7546] ax25_connect(): syz.4.1228 uses autobind, please contact jreuter@yaina.de [ 203.117445][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 203.253344][ T7552] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1232'. [ 203.280385][ T7554] loop3: detected capacity change from 0 to 2048 [ 203.399658][ T7554] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 203.453416][ T7554] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.675933][ T7565] netdevsim netdevsim4: Firmware load for 'nel/fscaps./file0/../file0' refused, path contains '..' component [ 203.965052][ T7573] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1240'. [ 203.990066][ T7573] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1240'. [ 204.035696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 204.047166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 204.067653][ T7575] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1240'. [ 204.131854][ T7573] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1240'. [ 204.181237][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 204.212762][ T4413] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 204.340864][ T7559] loop2: detected capacity change from 0 to 32768 [ 204.381173][ T7559] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1234 (7559) [ 204.408655][ T4413] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 204.424570][ T4413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.434729][ T4413] usb 1-1: Product: syz [ 204.439527][ T4413] usb 1-1: Manufacturer: syz [ 204.454667][ T4413] usb 1-1: SerialNumber: syz [ 204.505851][ T4413] usb 1-1: config 0 descriptor?? [ 204.535968][ T4413] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 012 [ 204.579149][ T7559] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 204.609826][ T7559] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 204.652756][ T7559] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 204.707626][ T7559] BTRFS info (device loop2): use lzo compression, level 0 [ 204.737008][ T7559] BTRFS info (device loop2): max_inline at 0 [ 204.797679][ T7559] BTRFS info (device loop2): using free space tree [ 204.942814][ T4413] (null): failure reading functionality [ 204.979160][ T4413] i2c i2c-1: connected i2c-tiny-usb device [ 205.143015][ T7559] BTRFS info (device loop2): enabling ssd optimizations [ 205.166213][ T5698] usb 1-1: USB disconnect, device number 12 [ 205.177705][ T26] audit: type=1800 audit(1755260991.918:45): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1234" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 205.201451][ T7559] BTRFS info (device loop2): resizing devid 6744073709551615 [ 205.221853][ T7559] BTRFS info (device loop2): resizer unable to find device 6744073709551615 [ 205.316973][ T7610] loop4: detected capacity change from 0 to 512 [ 205.388646][ T4268] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 205.435699][ T7610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 205.449065][ T7610] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.476464][ T7610] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.1249: corrupted inode contents [ 205.495961][ T7610] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.1249: mark_inode_dirty error [ 205.570388][ T7610] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.1249: corrupted inode contents [ 205.655556][ T7610] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1249: mark_inode_dirty error [ 205.986744][ T7587] loop3: detected capacity change from 0 to 32768 [ 206.084886][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 206.396591][ T7631] loop4: detected capacity change from 0 to 1024 [ 206.514471][ T7631] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 206.623080][ T26] audit: type=1800 audit(1755260993.368:46): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1254" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 206.699637][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1263'. [ 206.710194][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1263'. [ 206.802244][ T7648] bridge0: port 3(vlan2) entered blocking state [ 206.830998][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 206.937582][ T7648] bridge0: port 3(vlan2) entered disabled state [ 207.783270][ T7678] program syz.1.1276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.104090][ T5698] kernel write not supported for file /527/attr/exec (pid: 5698 comm: kworker/1:18) [ 208.482662][ T7703] loop4: detected capacity change from 0 to 4096 [ 208.546029][ T7703] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 208.562812][ T7703] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 208.572073][ T7703] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 208.586431][ T7703] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 208.638945][ T7703] ntfs: volume version 3.1. [ 208.693111][ T7703] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-4. You might want to try to use the mount option nls=utf8. [ 208.725423][ T7712] loop7: detected capacity change from 0 to 7 [ 208.741940][ T7703] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 208.792724][ T5698] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 208.801286][ T7712] Dev loop7: unable to read RDB block 7 [ 208.850086][ T7712] loop7: unable to read partition table [ 208.863468][ T7712] loop7: partition table beyond EOD, truncated [ 208.889669][ T7712] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 209.002939][ T5698] usb 4-1: Using ep0 maxpacket: 16 [ 209.020243][ T5698] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.045007][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.071340][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.117013][ T5698] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 209.143676][ T5698] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.199919][ T5698] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.217730][ T7625] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 209.225893][ T5698] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.274547][ T5698] usb 4-1: Manufacturer: syz [ 209.299884][ T5698] usb 4-1: config 0 descriptor?? [ 209.429313][ T7625] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 209.461774][ T7625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.482189][ T7625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.522113][ T7625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 209.555197][ T7625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.620267][ T7625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.672845][ T7625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 209.691513][ T7625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.724903][ T7625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.748505][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 209.760976][ T7625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 209.786727][ T7625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.792789][ T5698] rc_core: IR keymap rc-hauppauge not found [ 209.812396][ T7625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.832938][ T5698] Registered IR keymap rc-empty [ 209.834690][ T7625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 209.838109][ T5698] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.859407][ T7625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.889746][ T7625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.914418][ T7625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 209.928757][ T7625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.932770][ T5698] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.981937][ T7625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.013724][ T5698] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 210.013852][ T7625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 210.039183][ T5698] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 210.119745][ T7625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.140265][ T5698] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 210.150121][ T7625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.188030][ T7625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 210.212783][ T5698] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 210.229385][ T7625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.252806][ T5698] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 210.257254][ T7625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.293039][ T5698] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 210.297213][ T7625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 210.321055][ T7625] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 210.339772][ T7625] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 210.342881][ T5698] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 210.349323][ T7625] usb 3-1: Product: syz [ 210.366330][ T7625] usb 3-1: Manufacturer: syz [ 210.374764][ T7625] usb 3-1: SerialNumber: syz [ 210.381240][ T7625] usb 3-1: config 0 descriptor?? [ 210.405000][ T7625] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 210.432717][ T5698] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 210.482833][ T5698] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 210.522905][ T5698] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 210.542377][ T4271] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 210.552886][ T5698] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 210.583287][ T5698] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 210.624001][ T5698] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 210.642421][ T5698] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 210.666850][ T5698] usb 4-1: USB disconnect, device number 18 [ 210.757189][ T4271] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 210.782729][ T4271] usb 5-1: config 0 has no interface number 0 [ 210.789009][ T4271] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 210.799251][ T7757] loop1: detected capacity change from 0 to 32768 [ 210.814379][ T4271] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 210.836506][ T7757] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1312 (7757) [ 210.847691][ T4271] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 210.866326][ T4271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.878133][ T4271] usb 5-1: Product: syz [ 210.887023][ T4271] usb 5-1: Manufacturer: syz [ 210.891843][ T4271] usb 5-1: SerialNumber: syz [ 210.901553][ T4271] usb 5-1: config 0 descriptor?? [ 210.909959][ T7757] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.914667][ T7753] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 210.945324][ T7757] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 210.948190][ T4271] yurex 5-1:0.50: USB YUREX device now attached to Yurex #1 [ 210.978201][ T7757] BTRFS info (device loop1): setting nodatacow, compression disabled [ 211.004987][ T7757] BTRFS info (device loop1): max_inline at 4096 [ 211.033674][ T7757] BTRFS info (device loop1): using free space tree [ 211.559295][ T4276] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.772204][ T4515] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4515) [ 211.838622][ T7792] loop2: detected capacity change from 0 to 7 [ 211.845462][ T7791] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1320'. [ 211.858193][ T4637] Dev loop2: unable to read RDB block 7 [ 211.868035][ T4637] loop2: AHDI p1 p2 p3 [ 211.896400][ T4637] loop2: partition table partially beyond EOD, truncated [ 211.919584][ T4637] loop2: p1 start 1601398130 is beyond EOD, truncated [ 211.963529][ T4637] loop2: p2 start 1702059890 is beyond EOD, truncated [ 212.013122][ T7792] Dev loop2: unable to read RDB block 7 [ 212.018937][ T7792] loop2: AHDI p1 p2 p3 [ 212.038577][ T7625] usb 3-1: USB disconnect, device number 13 [ 212.061465][ T7625] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 212.063538][ T7792] loop2: partition table partially beyond EOD, truncated [ 212.133067][ T7792] loop2: p1 start 1601398130 is beyond EOD, truncated [ 212.151247][ T7792] loop2: p2 start 1702059890 is beyond EOD, truncated [ 212.165044][ T22] usb 5-1: USB disconnect, device number 8 [ 212.192164][ T22] yurex 5-1:0.50: USB YUREX #1 now disconnected [ 212.318377][ T7799] input: syz0 as /devices/virtual/input/input18 [ 212.692956][ T4314] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 212.882886][ T4314] usb 1-1: Using ep0 maxpacket: 8 [ 212.891084][ T4314] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 212.915960][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.951859][ T4314] pvrusb2: Hardware description: Terratec Grabster AV400 [ 212.974165][ T4314] pvrusb2: ********** [ 212.978815][ T4314] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 213.001482][ T4314] pvrusb2: Important functionality might not be entirely working. [ 213.003717][ T7824] loop2: detected capacity change from 0 to 256 [ 213.011900][ T4314] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 213.032865][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 213.052736][ T4314] pvrusb2: ********** [ 213.083409][ T7824] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 213.134219][ T7824] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 213.148263][ T2309] pvrusb2: Invalid write control endpoint [ 213.211282][ T7824] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 213.265995][ T7824] UDF-fs: Scanning with blocksize 512 failed [ 213.291048][ T7824] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 213.326376][ T7824] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.361474][ T2309] pvrusb2: Invalid write control endpoint [ 213.389830][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 213.431947][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 213.448011][ T7833] loop3: detected capacity change from 0 to 1024 [ 213.457138][ T7830] loop1: detected capacity change from 0 to 4096 [ 213.465917][ T7833] EXT4-fs: Ignoring removed nobh option [ 213.469333][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 213.482119][ T7833] EXT4-fs: Ignoring removed bh option [ 213.494569][ T7830] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 213.506205][ T2309] pvrusb2: Device being rendered inoperable [ 213.506886][ T7833] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.523521][ T7803] pvrusb2: Attempted to execute control transfer when device not ok [ 213.547985][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 213.571853][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 213.578178][ T5028] usb 1-1: USB disconnect, device number 13 [ 213.586804][ T2309] pvrusb2: Attached sub-driver cx25840 [ 213.593098][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 213.605014][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 213.624397][ T7833] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 213.685465][ T26] audit: type=1800 audit(1755261000.428:47): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1333" name="file0" dev="loop1" ino=0 res=0 errno=0 [ 213.959731][ T4276] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 214.015320][ T4276] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 214.109337][ T7833] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.1335: Allocating blocks 497-513 which overlap fs metadata [ 214.128183][ T4276] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 214.193169][ T7833] EXT4-fs (loop3): pa ffff888073b85380: logic 256, phys. 385, len 8 [ 214.204272][ T7833] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 214.627748][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 214.861307][ T7873] loop4: detected capacity change from 0 to 2048 [ 214.900842][ T7873] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.157031][ T7879] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1356'. [ 215.739807][ T7901] loop3: detected capacity change from 0 to 256 [ 215.752760][ T7896] loop4: detected capacity change from 0 to 1024 [ 215.778188][ T7896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.880300][ T7896] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 215.950049][ T7906] syz.3.1364: attempt to access beyond end of device [ 215.950049][ T7906] loop3: rw=2049, sector=256, nr_sectors = 96 limit=256 [ 216.034496][ T7901] syz.3.1364: attempt to access beyond end of device [ 216.034496][ T7901] loop3: rw=2049, sector=352, nr_sectors = 4 limit=256 [ 216.240342][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 216.562000][ T7923] loop4: detected capacity change from 0 to 1024 [ 216.659346][ T7926] loop2: detected capacity change from 0 to 764 [ 216.802050][ T7931] loop3: detected capacity change from 0 to 512 [ 217.208973][ T7931] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 217.342680][ T7625] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 217.555783][ T7625] usb 3-1: unable to get BOS descriptor or descriptor too short [ 217.594169][ T7625] usb 3-1: config 6 has an invalid interface number: 200 but max is 0 [ 217.612459][ T7625] usb 3-1: config 6 has no interface number 0 [ 217.621323][ T7625] usb 3-1: config 6 interface 200 has no altsetting 0 [ 217.667048][ T7625] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 217.702988][ T7625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.763248][ T7625] usb 3-1: Product: syz [ 217.769816][ T7625] usb 3-1: Manufacturer: syz [ 217.782037][ T7625] usb 3-1: SerialNumber: syz [ 218.053109][ T22] kernel read not supported for file /usbmon9 (pid: 22 comm: kworker/1:0) [ 218.182773][ T4271] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 218.340327][ T7974] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 218.376312][ T7625] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 218.399450][ T7625] dvb-usb: bulk message failed: -71 (3/0) [ 218.419627][ T4271] usb 5-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.449890][ T7625] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 218.475374][ T4271] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.501701][ T7625] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 218.533752][ T4271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.540694][ T4271] usb 5-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 218.561281][ T7625] usb 3-1: media controller created [ 218.568349][ T4271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.607658][ T4271] usb 5-1: config 0 descriptor?? [ 218.616297][ T7625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.663552][ T7625] dvb-usb: bulk message failed: -71 (6/0) [ 218.692193][ T7625] dvb-usb: bulk message failed: -71 (6/0) [ 218.712119][ T7625] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 218.748602][ T7625] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 218.779565][ T7625] dvb-usb: schedule remote query interval to 150 msecs. [ 218.787365][ T7625] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 218.821183][ T7625] usb 3-1: USB disconnect, device number 14 [ 218.925773][ T7625] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 219.051624][ T4271] wacom 0003:056A:00CE.001E: hidraw0: USB HID vff.fe Device [HID 056a:00ce] on usb-dummy_hcd.4-1/input0 [ 219.227659][ T7997] loop2: detected capacity change from 0 to 64 [ 219.271311][ T4271] usb 5-1: USB disconnect, device number 9 [ 219.484107][ T7995] fido_id[7995]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 220.145463][ T8021] loop4: detected capacity change from 0 to 1024 [ 220.319081][ T1113] hfsplus: b-tree write err: -5, ino 4 [ 221.412150][ T8055] loop2: detected capacity change from 0 to 512 [ 221.472228][ T8055] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 221.609475][ T8055] EXT4-fs (loop2): 1 truncate cleaned up [ 221.632916][ T8055] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 221.692015][ T8067] loop3: detected capacity change from 0 to 1024 [ 221.740271][ T8067] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 221.843441][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 221.988510][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 222.029856][ T3638] udevd[3638]: worker [4412] terminated by signal 33 (Unknown signal 33) [ 222.064464][ T3638] udevd[3638]: worker [4412] failed while handling '/devices/virtual/block/loop0' [ 222.133385][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1444'. [ 222.759652][ T8108] loop4: detected capacity change from 0 to 256 [ 223.183320][ T8097] loop3: detected capacity change from 0 to 32768 [ 223.283514][ T8097] XFS (loop3): Mounting V5 Filesystem [ 223.438752][ T8097] XFS (loop3): Ending clean mount [ 223.467747][ T8097] XFS (loop3): Quotacheck needed: Please wait. [ 223.573253][ T8097] XFS (loop3): Quotacheck: Done. [ 223.687743][ T4269] XFS (loop3): Unmounting Filesystem [ 223.906841][ T8138] loop1: detected capacity change from 0 to 2048 [ 223.994340][ T8138] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 224.012870][ T8138] UDF-fs: Scanning with blocksize 512 failed [ 224.048916][ T8138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.070194][ T41] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 224.139212][ T8142] loop2: detected capacity change from 0 to 1024 [ 224.282053][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 224.300288][ T41] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 224.329631][ T41] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.360654][ T41] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.386114][ T41] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.406789][ T41] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.421106][ T41] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.431511][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.667240][ T41] usb 5-1: GET_CAPABILITIES returned 0 [ 224.671293][ T8154] input: syz0 as /devices/virtual/input/input23 [ 224.681836][ T41] usbtmc 5-1:16.0: can't read capabilities [ 224.887923][ T5028] usb 5-1: USB disconnect, device number 10 [ 225.286590][ T8178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1484'. [ 225.707832][ T8187] tipc: Started in network mode [ 225.730369][ T8187] tipc: Node identity , cluster identity 4711 [ 225.749095][ T8187] tipc: Failed to set node id, please configure manually [ 225.767832][ T8187] tipc: Enabling of bearer rejected, failed to enable media [ 225.839490][ T8170] loop1: detected capacity change from 0 to 32768 [ 225.983732][ T8170] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 226.101727][ T8204] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1495'. [ 226.308794][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 226.436143][ T8218] loop1: detected capacity change from 0 to 16 [ 226.493100][ T8218] erofs: (device loop1): mounted with root inode @ nid 36. [ 226.584891][ T8218] overlayfs: failed to get metacopy (-117) [ 226.610217][ T8223] netlink: 'syz.0.1505': attribute type 10 has an invalid length. [ 226.794500][ T8223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.884211][ T8223] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 226.916145][ T8227] netlink: 'syz.0.1505': attribute type 10 has an invalid length. [ 226.990065][ T8227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1505'. [ 227.038005][ T8227] device batadv0 entered promiscuous mode [ 227.086736][ T8227] bond0: (slave batadv0): Releasing backup interface [ 227.126302][ T8227] bridge0: port 3(batadv0) entered blocking state [ 227.158839][ T8227] bridge0: port 3(batadv0) entered disabled state [ 227.422992][ T9] batman_adv: batadv0: IGMP Querier appeared [ 227.429783][ T9] batman_adv: batadv0: MLD Querier appeared [ 227.640081][ T8224] loop4: detected capacity change from 0 to 32768 [ 227.673482][ T8224] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 228.021432][ T4515] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 228.452939][ T22] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 228.470030][ T8246] loop1: detected capacity change from 0 to 40427 [ 228.503098][ T8246] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 228.540855][ T8246] F2FS-fs (loop1): invalid crc value [ 228.579828][ T8246] F2FS-fs (loop1): Found nat_bits in checkpoint [ 228.663035][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 228.671031][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.712754][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.732705][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 228.751394][ T22] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 228.797606][ T8246] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 228.830484][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.904723][ T22] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 228.929755][ T8246] F2FS-fs (loop1): access invalid blkaddr:2816 [ 228.949893][ T8246] CPU: 0 PID: 8246 Comm: syz.1.1516 Not tainted 6.1.148-syzkaller #0 [ 228.958310][ T8246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.962788][ T22] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 228.968636][ T8246] Call Trace: [ 228.981008][ T8246] [ 228.983969][ T8246] dump_stack_lvl+0x168/0x22e [ 228.989335][ T8246] ? show_regs_print_info+0x12/0x12 [ 228.994747][ T8246] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 229.000693][ T8246] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 229.006377][ T8246] f2fs_map_blocks+0xd37/0x3840 [ 229.011300][ T8246] ? f2fs_do_map_lock+0x70/0x70 [ 229.012810][ T22] usb 5-1: Manufacturer: syz [ 229.016520][ T8246] ? preempt_count_add+0x8d/0x190 [ 229.026352][ T8246] ? clear_nonspinnable+0x60/0x60 [ 229.031502][ T8246] ? fiemap_prep+0x1a8/0x240 [ 229.036302][ T8246] f2fs_fiemap+0x93d/0x1990 [ 229.041134][ T8246] ? do_syscall_64+0x4c/0xa0 [ 229.046137][ T8246] ? f2fs_overwrite_io+0x1e0/0x1e0 [ 229.051301][ T8246] ? __lock_acquire+0x7c50/0x7c50 [ 229.056390][ T8246] ? __might_fault+0xc2/0x120 [ 229.061472][ T8246] ? __might_fault+0xa6/0x120 [ 229.064124][ T22] usb 5-1: config 0 descriptor?? [ 229.066571][ T8246] do_vfs_ioctl+0x1425/0x1d10 [ 229.076831][ T8246] ? __ia32_compat_sys_ioctl+0x780/0x780 [ 229.082720][ T8246] ? tomoyo_path_number_perm+0x1b6/0x600 [ 229.088484][ T8246] ? __lock_acquire+0x7c50/0x7c50 [ 229.094187][ T8246] ? slab_free_freelist_hook+0x131/0x1a0 [ 229.100127][ T8246] ? tomoyo_path_number_perm+0x4ae/0x600 [ 229.106011][ T8246] ? __kmem_cache_free+0xb6/0x1f0 [ 229.111429][ T8246] ? tomoyo_path_number_perm+0x503/0x600 [ 229.117277][ T8246] ? tomoyo_path_number_perm+0x1b6/0x600 [ 229.123127][ T8246] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 229.128943][ T8246] ? __fget_files+0x28/0x4d0 [ 229.134715][ T8246] ? bpf_lsm_file_ioctl+0x5/0x10 [ 229.139787][ T8246] ? security_file_ioctl+0x7c/0xa0 [ 229.145367][ T8246] __se_sys_ioctl+0x83/0x170 [ 229.150451][ T8246] do_syscall_64+0x4c/0xa0 [ 229.155105][ T8246] ? clear_bhb_loop+0x60/0xb0 [ 229.160180][ T8246] ? clear_bhb_loop+0x60/0xb0 [ 229.165308][ T8246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.171429][ T8246] RIP: 0033:0x7f1046d8ebe9 [ 229.175891][ T8246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.196371][ T8246] RSP: 002b:00007f1047c84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.205086][ T8246] RAX: ffffffffffffffda RBX: 00007f1046fb5fa0 RCX: 00007f1046d8ebe9 [ 229.206575][ T8257] loop3: detected capacity change from 0 to 40427 [ 229.213335][ T8246] RDX: 0000200000000040 RSI: 00000000c020660b RDI: 0000000000000004 [ 229.213357][ T8246] RBP: 00007f1046e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 229.213367][ T8246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.213377][ T8246] R13: 00007f1046fb6038 R14: 00007f1046fb5fa0 R15: 00007fff48072b28 [ 229.213402][ T8246] [ 229.284258][ T4271] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 229.295580][ T8257] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 229.330244][ T8257] F2FS-fs (loop3): invalid crc value [ 229.383136][ T8257] F2FS-fs (loop3): Found nat_bits in checkpoint [ 229.478833][ T22] rc_core: IR keymap rc-hauppauge not found [ 229.492967][ T4271] usb 1-1: Using ep0 maxpacket: 32 [ 229.499124][ T22] Registered IR keymap rc-empty [ 229.500451][ T4271] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.518276][ T22] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.542888][ T8257] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 229.555573][ T8277] loop2: detected capacity change from 0 to 2048 [ 229.558911][ T4271] usb 1-1: config 0 has no interface number 0 [ 229.572761][ T22] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.592135][ T8277] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 229.599674][ T4271] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.613905][ T22] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 229.669052][ T4271] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.673732][ T22] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24 [ 229.718453][ T4271] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 229.739033][ T4271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.782454][ T4271] usb 1-1: config 0 descriptor?? [ 229.829241][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 229.842804][ T22] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.864064][ T4269] syz-executor: attempt to access beyond end of device [ 229.864064][ T4269] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 229.884514][ T22] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.946187][ T22] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.992899][ T22] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 230.022996][ T22] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 230.055690][ T22] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 230.112791][ T22] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 230.143228][ T22] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 230.172928][ T22] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 230.213149][ T22] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 230.262552][ T22] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 230.293746][ T22] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 230.312813][ T22] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 230.365937][ T22] usb 5-1: USB disconnect, device number 11 [ 230.404170][ T4271] uclogic 0003:28BD:0094.001F: pen parameters not found [ 230.432655][ T4271] uclogic 0003:28BD:0094.001F: interface is invalid, ignoring [ 230.618617][ T4271] usb 1-1: USB disconnect, device number 14 [ 230.696199][ T8292] loop1: detected capacity change from 0 to 164 [ 231.014583][ T8299] netlink: 'syz.3.1535': attribute type 10 has an invalid length. [ 231.045742][ T8299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.101659][ T8299] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 231.166901][ T8301] netlink: 'syz.3.1535': attribute type 10 has an invalid length. [ 231.234674][ T8301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1535'. [ 231.256690][ T8301] device batadv0 entered promiscuous mode [ 231.317755][ T8301] bond0: (slave batadv0): Releasing backup interface [ 231.353978][ T8301] bridge0: port 3(batadv0) entered blocking state [ 231.374105][ T8301] bridge0: port 3(batadv0) entered disabled state [ 231.618992][ T8320] loop1: detected capacity change from 0 to 1024 [ 231.673181][ T8320] EXT4-fs: Ignoring removed bh option [ 231.800126][ T8320] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 231.819639][ T1113] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 231.829822][ T1113] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 232.336691][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 232.487058][ T8345] netlink: 'syz.1.1554': attribute type 6 has an invalid length. [ 232.512628][ T8345] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1554'. [ 232.869849][ T8355] loop1: detected capacity change from 0 to 1024 [ 232.897403][ T8355] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 232.974381][ T8355] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 233.034462][ T5028] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 233.170821][ T8365] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1563'. [ 233.200673][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 233.232758][ T5028] usb 1-1: Using ep0 maxpacket: 8 [ 233.240215][ T5028] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 233.270187][ T5028] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.291354][ T5028] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.322669][ T5028] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.340294][ T5028] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.365167][ T5028] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.382707][ T5028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.593590][ T8376] loop2: detected capacity change from 0 to 1024 [ 233.626023][ T5028] usb 1-1: GET_CAPABILITIES returned 0 [ 233.631826][ T5028] usbtmc 1-1:16.0: can't read capabilities [ 233.691228][ T1113] hfsplus: b-tree write err: -5, ino 4 [ 233.731424][ T46] kworker/u4:3: attempt to access beyond end of device [ 233.731424][ T46] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 233.770655][ T8382] loop4: detected capacity change from 0 to 1024 [ 233.806220][ T46] metapage_write_end_io: I/O error [ 233.817722][ T46] JFS: metapage_get_blocks failed [ 233.834547][ T46] JFS: metapage_get_blocks failed [ 233.878960][ T4271] usb 1-1: USB disconnect, device number 15 [ 233.887631][ T8382] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 234.029908][ T8388] loop3: detected capacity change from 0 to 16 [ 234.088521][ T8388] erofs: (device loop3): mounted with root inode @ nid 36. [ 234.128855][ T8388] overlayfs: failed to get metacopy (-117) [ 234.152169][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 234.371559][ T8384] loop2: detected capacity change from 0 to 32768 [ 234.449444][ T8384] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 234.521187][ T8398] loop4: detected capacity change from 0 to 4096 [ 234.533723][ T8398] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 234.627141][ T8381] loop1: detected capacity change from 0 to 32768 [ 234.681908][ T4268] ocfs2: Unmounting device (7,2) on (node local) [ 234.710704][ T26] audit: type=1800 audit(1755261021.438:48): pid=8381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1581" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 234.735023][ T7625] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 234.739145][ T8381] syz.1.1581: attempt to access beyond end of device [ 234.739145][ T8381] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 234.821142][ T8398] ntfs: volume version 3.1. [ 234.912765][ T8381] metapage_write_end_io: I/O error [ 234.919191][ T8381] ERROR: (device loop1): diWrite: ixpxd invalid [ 234.919191][ T8381] [ 234.954716][ T7625] usb 4-1: unable to get BOS descriptor or descriptor too short [ 234.966589][ T8381] ERROR: (device loop1): remounting filesystem as read-only [ 234.977841][ T7625] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 234.996951][ T8381] ERROR: (device loop1): txCommit: [ 234.996951][ T8381] [ 235.007113][ T7625] usb 4-1: config 6 has no interface number 0 [ 235.022478][ T7625] usb 4-1: config 6 interface 200 has no altsetting 0 [ 235.031465][ T8381] blkno = 8ed2c, nblocks = 1 [ 235.042960][ T8381] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 235.042960][ T8381] [ 235.058271][ T7625] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 235.093653][ T7625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.109280][ T8409] ax25_connect(): syz.0.1590 uses autobind, please contact jreuter@yaina.de [ 235.135254][ T7625] usb 4-1: Product: syz [ 235.149807][ T7625] usb 4-1: Manufacturer: syz [ 235.157838][ T8381] ERROR: (device loop1): dbAllocBits: leaf page corrupt [ 235.157838][ T8381] [ 235.177746][ T7625] usb 4-1: SerialNumber: syz [ 235.203103][ T8381] syz.1.1581: attempt to access beyond end of device [ 235.203103][ T8381] loop1: rw=34817, sector=4683776, nr_sectors = 4 limit=32768 [ 235.248409][ T8381] syz.1.1581: attempt to access beyond end of device [ 235.248409][ T8381] loop1: rw=34817, sector=4683780, nr_sectors = 2048 limit=32768 [ 235.327830][ T8381] syz.1.1581: attempt to access beyond end of device [ 235.327830][ T8381] loop1: rw=34817, sector=4685828, nr_sectors = 516 limit=32768 [ 235.346400][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.389443][ T107] blkno = 8ed2c, nblocks = 4 [ 235.403524][ T107] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 235.403524][ T107] [ 235.442992][ T107] blkno = 8ef00, nblocks = 141 [ 235.449176][ T107] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 235.449176][ T107] [ 235.745099][ T8427] netlink: 'syz.1.1587': attribute type 29 has an invalid length. [ 235.774867][ T7625] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 235.796425][ T7625] dvb-usb: bulk message failed: -71 (3/0) [ 235.819631][ T7625] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.845421][ T7625] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 235.858092][ T7625] usb 4-1: media controller created [ 235.878987][ T7625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.901231][ T8427] netlink: 'syz.1.1587': attribute type 29 has an invalid length. [ 235.901295][ T7625] dvb-usb: bulk message failed: -71 (6/0) [ 235.925612][ T8430] netlink: 'syz.1.1587': attribute type 29 has an invalid length. [ 235.933980][ T7625] dvb-usb: bulk message failed: -71 (6/0) [ 235.940026][ T7625] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 235.981715][ T7625] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 236.022899][ T7625] dvb-usb: schedule remote query interval to 150 msecs. [ 236.050697][ T7625] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 236.122791][ T7625] usb 4-1: USB disconnect, device number 19 [ 236.202826][ T7625] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 236.469035][ T8432] loop2: detected capacity change from 0 to 32768 [ 236.535932][ T8432] XFS (loop2): Mounting V5 Filesystem [ 236.666558][ T8432] XFS (loop2): Ending clean mount [ 236.701557][ T8432] XFS (loop2): Quotacheck needed: Please wait. [ 236.849029][ T8432] XFS (loop2): Quotacheck: Done. [ 236.961369][ T8461] netdevsim netdevsim3: Firmware load for 'nel/fscaps./file0/../file0' refused, path contains '..' component [ 237.021535][ T4268] XFS (loop2): Unmounting Filesystem [ 237.203009][ T8466] input: syz1 as /devices/virtual/input/input26 [ 237.474981][ T8474] loop3: detected capacity change from 0 to 256 [ 237.501206][ T8474] exfat: Deprecated parameter 'namecase' [ 237.536506][ T8474] exfat: Deprecated parameter 'namecase' [ 237.559112][ T8474] exfat: Deprecated parameter 'namecase' [ 237.597908][ T8474] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 237.881373][ T8484] loop3: detected capacity change from 0 to 128 [ 237.909362][ T8484] EXT4-fs: Ignoring removed nobh option [ 237.917752][ T8482] loop4: detected capacity change from 0 to 2048 [ 237.981133][ T8484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 237.997922][ T8482] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 238.041656][ T8484] ext4 filesystem being mounted at /320/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 238.263019][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 238.273703][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 238.385481][ T8498] loop3: detected capacity change from 0 to 1024 [ 238.406525][ T8499] input: syz1 as /devices/virtual/input/input27 [ 238.604986][ T1113] hfsplus: b-tree write err: -5, ino 4 [ 238.639495][ T8503] loop2: detected capacity change from 0 to 2048 [ 238.739598][ T8503] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 238.759296][ T8503] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.924694][ T40] JFS: metapage_get_blocks failed [ 239.064903][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 239.221393][ T8520] netlink: 'syz.2.1625': attribute type 6 has an invalid length. [ 239.270086][ T8520] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1625'. [ 239.618593][ T8535] input: syz1 as /devices/virtual/input/input28 [ 239.710729][ T8531] loop3: detected capacity change from 0 to 4096 [ 240.027566][ T4269] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 240.034549][ T8540] loop4: detected capacity change from 0 to 2048 [ 240.074317][ T4269] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 240.121675][ T8540] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 240.132991][ T8540] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.501637][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 240.554717][ T8551] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1640'. [ 240.586992][ T8551] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1640'. [ 240.634016][ T8553] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1640'. [ 240.677979][ T8551] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1640'. [ 240.678302][ T8555] program syz.4.1641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.729080][ T8534] loop2: detected capacity change from 0 to 32768 [ 240.767192][ T26] audit: type=1800 audit(1755261027.508:49): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1634" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 240.832864][ T8534] syz.2.1634: attempt to access beyond end of device [ 240.832864][ T8534] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 240.933961][ T8534] metapage_write_end_io: I/O error [ 240.955918][ T8534] ERROR: (device loop2): diWrite: ixpxd invalid [ 240.955918][ T8534] [ 241.051280][ T8534] ERROR: (device loop2): remounting filesystem as read-only [ 241.069376][ T8534] ERROR: (device loop2): txCommit: [ 241.069376][ T8534] [ 241.114676][ T8534] blkno = 8ed2c, nblocks = 1 [ 241.119389][ T8534] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 241.119389][ T8534] [ 241.203418][ T8534] ERROR: (device loop2): dbAllocBits: leaf page corrupt [ 241.203418][ T8534] [ 241.243122][ T8534] syz.2.1634: attempt to access beyond end of device [ 241.243122][ T8534] loop2: rw=34817, sector=4683776, nr_sectors = 4 limit=32768 [ 241.297649][ T8534] syz.2.1634: attempt to access beyond end of device [ 241.297649][ T8534] loop2: rw=34817, sector=4683780, nr_sectors = 2048 limit=32768 [ 241.299788][ T8571] loop4: detected capacity change from 0 to 256 [ 241.324585][ T8534] syz.2.1634: attempt to access beyond end of device [ 241.324585][ T8534] loop2: rw=34817, sector=4685828, nr_sectors = 516 limit=32768 [ 241.376487][ T107] blkno = 8ed2c, nblocks = 4 [ 241.381258][ T107] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 241.381258][ T107] [ 241.501104][ T107] blkno = 8ef00, nblocks = 141 [ 241.521113][ T107] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 241.521113][ T107] [ 241.665011][ T8581] block nbd1: shutting down sockets [ 242.065773][ T8593] loop3: detected capacity change from 0 to 128 [ 242.120115][ T8593] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 242.245110][ T8593] UDF-fs: error (device loop3): udf_read_inode: (ino 86) failed unknown file type=13 [ 242.673889][ T41] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 242.878281][ T41] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 242.906025][ T41] usb 5-1: can't read configurations, error -71 [ 243.278717][ T8607] loop3: detected capacity change from 0 to 32768 [ 243.335966][ T26] audit: type=1800 audit(1755261030.078:50): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1665" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 243.363385][ T8607] syz.3.1665: attempt to access beyond end of device [ 243.363385][ T8607] loop3: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 243.388884][ T8607] metapage_write_end_io: I/O error [ 243.399290][ T8607] ERROR: (device loop3): diWrite: ixpxd invalid [ 243.399290][ T8607] [ 243.425874][ T8607] ERROR: (device loop3): remounting filesystem as read-only [ 243.442392][ T8607] ERROR: (device loop3): txCommit: [ 243.442392][ T8607] [ 243.461467][ T8607] blkno = 8ed2c, nblocks = 1 [ 243.470934][ T8607] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 243.470934][ T8607] [ 243.557775][ T8607] ERROR: (device loop3): dbAllocBits: leaf page corrupt [ 243.557775][ T8607] [ 243.580050][ T8607] syz.3.1665: attempt to access beyond end of device [ 243.580050][ T8607] loop3: rw=34817, sector=4683776, nr_sectors = 4 limit=32768 [ 243.700664][ T8607] syz.3.1665: attempt to access beyond end of device [ 243.700664][ T8607] loop3: rw=34817, sector=4683780, nr_sectors = 2048 limit=32768 [ 243.819021][ T8607] syz.3.1665: attempt to access beyond end of device [ 243.819021][ T8607] loop3: rw=34817, sector=4685828, nr_sectors = 516 limit=32768 [ 243.868519][ T107] blkno = 8ed2c, nblocks = 4 [ 243.873945][ T107] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 243.873945][ T107] [ 243.948446][ T107] blkno = 8ef00, nblocks = 141 [ 243.963249][ T4659] JFS: metapage_get_blocks failed [ 243.976103][ T107] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 243.976103][ T107] [ 244.261164][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 244.484878][ T8649] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1695'. [ 244.531586][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1685'. [ 244.552785][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1685'. [ 244.593876][ T8651] bridge0: port 3(vlan2) entered blocking state [ 244.601581][ T8651] bridge0: port 3(vlan2) entered disabled state [ 244.782998][ T8658] block nbd2: shutting down sockets [ 245.004697][ T8660] loop4: detected capacity change from 0 to 2048 [ 245.054881][ T8660] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 245.113804][ T8660] NILFS (loop4): mounting unchecked fs [ 245.209019][ T8660] NILFS (loop4): recovery complete [ 245.280952][ T8668] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.336857][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1704'. [ 246.508935][ T8678] loop4: detected capacity change from 0 to 32768 [ 246.583911][ T26] audit: type=1800 audit(1755261033.328:51): pid=8678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1694" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 246.590897][ T8678] syz.4.1694: attempt to access beyond end of device [ 246.590897][ T8678] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 246.737068][ T8678] metapage_write_end_io: I/O error [ 246.755215][ T8678] ERROR: (device loop4): diWrite: ixpxd invalid [ 246.755215][ T8678] [ 246.778326][ T8678] ERROR: (device loop4): remounting filesystem as read-only [ 246.802870][ T8678] ERROR: (device loop4): txCommit: [ 246.802870][ T8678] [ 246.824443][ T8678] blkno = 8ed2c, nblocks = 1 [ 246.841546][ T8678] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 246.841546][ T8678] [ 246.925491][ T8678] ERROR: (device loop4): dbAllocBits: leaf page corrupt [ 246.925491][ T8678] [ 246.971171][ T8678] syz.4.1694: attempt to access beyond end of device [ 246.971171][ T8678] loop4: rw=34817, sector=4683776, nr_sectors = 4 limit=32768 [ 247.006587][ T8678] syz.4.1694: attempt to access beyond end of device [ 247.006587][ T8678] loop4: rw=34817, sector=4683780, nr_sectors = 2064 limit=32768 [ 247.043210][ T8678] syz.4.1694: attempt to access beyond end of device [ 247.043210][ T8678] loop4: rw=34817, sector=4685844, nr_sectors = 500 limit=32768 [ 247.089710][ T107] blkno = 8ed2c, nblocks = 4 [ 247.095110][ T107] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 247.095110][ T107] [ 247.122330][ T107] blkno = 8ef00, nblocks = 141 [ 247.130813][ T107] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 247.130813][ T107] [ 248.309470][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1715'. [ 249.105628][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1727'. [ 249.178844][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1727'. [ 249.219132][ T8744] bridge0: port 3(vlan2) entered blocking state [ 249.303676][ T8744] bridge0: port 3(vlan2) entered disabled state [ 249.634937][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 249.728806][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1735'. [ 250.604590][ T4659] kworker/u4:7: attempt to access beyond end of device [ 250.604590][ T4659] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 250.653334][ T4659] metapage_write_end_io: I/O error [ 250.663222][ T4659] JFS: metapage_get_blocks failed [ 252.072479][ T7625] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 252.264664][ T7625] usb 4-1: unable to get BOS descriptor or descriptor too short [ 252.301354][ T7625] usb 4-1: config 6 has an invalid interface number: 96 but max is 0 [ 252.310885][ T7625] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 252.321707][ T7625] usb 4-1: config 6 has no interface number 0 [ 252.328609][ T7625] usb 4-1: config 6 interface 96 has no altsetting 0 [ 252.348118][ T7625] usb 4-1: string descriptor 0 read error: -22 [ 252.361965][ T7625] usb 4-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=4f.2b [ 252.383136][ T7625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.973469][ T7625] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 252.985708][ T7625] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 252.994619][ T7625] dib0700: firmware download failed at 28 with -71 [ 253.014203][ T7625] usb 4-1: USB disconnect, device number 20 [ 253.460687][ T8828] bond0: option lp_interval: invalid value (0) [ 253.479571][ T8828] bond0: option lp_interval: allowed values 1 - 2147483647 [ 254.663465][ T5028] kernel read not supported for file /usbmon9 (pid: 5028 comm: kworker/1:16) [ 254.878925][ T8862] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 256.045569][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.053020][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.326186][ T8899] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 258.707807][ T4271] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 258.903802][ T4271] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 258.953094][ T4271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.962130][ T4271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.050826][ T4271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.106073][ T4271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.141291][ T4271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.201976][ T4271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.238969][ T4271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.297211][ T4271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.347650][ T4271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.392829][ T4271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.462603][ T4271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.502344][ T4271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.562054][ T4271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.573407][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1842'. [ 259.592184][ T4271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.652946][ T4271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.712585][ T4271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.736553][ T4271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.789898][ T4271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.809317][ T4271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.830698][ T4271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.862296][ T4271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.881140][ T4271] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.910370][ T4271] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.942403][ T4271] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.970018][ T4271] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 259.988584][ T4271] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 260.019376][ T4271] usb 5-1: Product: syz [ 260.048911][ T4271] usb 5-1: Manufacturer: syz [ 260.066609][ T4271] usb 5-1: SerialNumber: syz [ 260.080511][ T4271] usb 5-1: config 0 descriptor?? [ 260.096051][ T4271] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 261.787663][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802736ac00: rx timeout, send abort [ 261.800901][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802736ac00: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 261.811969][ T4271] usb 5-1: USB disconnect, device number 14 [ 261.840306][ T4271] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 262.022923][ T9041] ax25_connect(): syz.4.1862 uses autobind, please contact jreuter@yaina.de [ 264.645879][ T9120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1898'. [ 264.875283][ T9129] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1902'. [ 267.763063][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880785cbc00: rx timeout, send abort [ 267.771861][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880785cbc00: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 268.523098][ T4659] kworker/u4:7: attempt to access beyond end of device [ 268.523098][ T4659] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 268.578747][ T4659] metapage_write_end_io: I/O error [ 268.607071][ T4659] JFS: metapage_get_blocks failed [ 268.636171][ T4659] JFS: metapage_get_blocks failed [ 269.974784][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1949'. [ 269.992417][ T9235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1949'. [ 270.029858][ T9235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1949'. [ 271.307189][ T9270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1964'. [ 273.235536][ T9313] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 273.723078][ T4659] JFS: metapage_get_blocks failed [ 273.999664][ T9329] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.010587][ T9329] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.019675][ T9329] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.028884][ T9329] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.363957][ T4355] kworker/u4:6: attempt to access beyond end of device [ 274.363957][ T4355] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 274.438543][ T4355] metapage_write_end_io: I/O error [ 274.482571][ T4355] JFS: metapage_get_blocks failed [ 274.532127][ T4355] JFS: metapage_get_blocks failed [ 274.600789][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1997'. [ 275.663221][ T9368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2007'. [ 277.353793][ T9407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2027'. [ 277.724483][ T40] kworker/u4:2: attempt to access beyond end of device [ 277.724483][ T40] loop3: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 277.807822][ T40] metapage_write_end_io: I/O error [ 277.856804][ T40] JFS: metapage_get_blocks failed [ 277.884544][ T40] JFS: metapage_get_blocks failed [ 277.972632][ T22] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 278.144274][ T9433] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2037'. [ 278.163294][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 278.171801][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.196915][ T9429] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2037'. [ 278.228390][ T22] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 278.271783][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.307884][ T22] usb 4-1: config 0 descriptor?? [ 278.561962][ T22] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 278.763827][ T46] JFS: metapage_get_blocks failed [ 278.769660][ T4271] usb 4-1: USB disconnect, device number 21 [ 279.562912][ T4355] JFS: metapage_get_blocks failed [ 279.576600][ T4355] JFS: metapage_get_blocks failed [ 280.923036][ T4355] JFS: metapage_get_blocks failed [ 281.024515][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 281.252384][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 281.259456][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 281.301958][ T7] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 281.312037][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.335310][ T7] usb 3-1: config 0 descriptor?? [ 281.554528][ T7] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 281.776799][ T7] usb 3-1: USB disconnect, device number 15 [ 282.629464][ T9534] sp0: Synchronizing with TNC [ 282.652471][ T40] [ 282.654942][ T40] ===================================================== [ 282.662404][ T40] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 282.670054][ T40] 6.1.148-syzkaller #0 Not tainted [ 282.675338][ T40] ----------------------------------------------------- [ 282.682386][ T40] kworker/u4:2/40 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 282.690301][ T40] ffffffff8d5911f8 (disc_data_lock#4){.+.+}-{2:2}, at: sixpack_write_wakeup+0x2c/0x460 [ 282.700299][ T40] [ 282.700299][ T40] and this task is already holding: [ 282.708021][ T40] ffffffff96f6cf68 (&port_lock_key){-.-.}-{2:2}, at: uart_write+0x113/0x910 [ 282.716754][ T40] which would create a new lock dependency: [ 282.722643][ T40] (&port_lock_key){-.-.}-{2:2} -> (disc_data_lock#4){.+.+}-{2:2} [ 282.730868][ T40] [ 282.730868][ T40] but this new dependency connects a HARDIRQ-irq-safe lock: [ 282.740827][ T40] (&port_lock_key){-.-.}-{2:2} [ 282.740927][ T40] [ 282.740927][ T40] ... which became HARDIRQ-irq-safe at: [ 282.753996][ T40] lock_acquire+0x1b4/0x490 [ 282.758846][ T40] _raw_spin_lock_irqsave+0xa4/0xf0 [ 282.764124][ T40] serial8250_handle_irq+0x7a/0x6d0 [ 282.769662][ T40] serial8250_default_handle_irq+0xb4/0x1a0 [ 282.775710][ T40] serial8250_interrupt+0x9b/0x1c0 [ 282.780982][ T40] __handle_irq_event_percpu+0x298/0xa30 [ 282.786769][ T40] handle_irq_event+0x87/0x1e0 [ 282.791596][ T40] handle_edge_irq+0x243/0xb20 [ 282.796606][ T40] __common_interrupt+0xd7/0x1e0 [ 282.801631][ T40] common_interrupt+0xb0/0xd0 [ 282.806375][ T40] asm_common_interrupt+0x22/0x40 [ 282.811563][ T40] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 282.817725][ T40] uart_write+0x68a/0x910 [ 282.822402][ T40] n_tty_write+0xd1a/0x11c0 [ 282.827083][ T40] file_tty_write+0x4dd/0x860 [ 282.832044][ T40] vfs_write+0x44c/0x960 [ 282.836461][ T40] ksys_write+0x143/0x240 [ 282.841062][ T40] do_syscall_64+0x4c/0xa0 [ 282.846156][ T40] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.852588][ T40] [ 282.852588][ T40] to a HARDIRQ-irq-unsafe lock: [ 282.859969][ T40] (disc_data_lock#4){.+.+}-{2:2} [ 282.859991][ T40] [ 282.859991][ T40] ... which became HARDIRQ-irq-unsafe at: [ 282.873236][ T40] ... [ 282.873244][ T40] lock_acquire+0x1b4/0x490 [ 282.880405][ T40] _raw_read_lock+0x32/0x40 [ 282.885017][ T40] sixpack_receive_buf+0x50/0x1430 [ 282.890386][ T40] tty_ldisc_receive_buf+0x113/0x150 [ 282.895968][ T40] tty_port_default_receive_buf+0x69/0x90 [ 282.901951][ T40] flush_to_ldisc+0x2f7/0x860 [ 282.906713][ T40] process_one_work+0x898/0x1160 [ 282.911729][ T40] worker_thread+0xaa2/0x1250 [ 282.916495][ T40] kthread+0x29d/0x330 [ 282.920984][ T40] ret_from_fork+0x1f/0x30 [ 282.925558][ T40] [ 282.925558][ T40] other info that might help us debug this: [ 282.925558][ T40] [ 282.935988][ T40] Possible interrupt unsafe locking scenario: [ 282.935988][ T40] [ 282.944557][ T40] CPU0 CPU1 [ 282.949990][ T40] ---- ---- [ 282.955664][ T40] lock(disc_data_lock#4); [ 282.960343][ T40] local_irq_disable(); [ 282.967403][ T40] lock(&port_lock_key); [ 282.974628][ T40] lock(disc_data_lock#4); [ 282.981828][ T40] [ 282.985453][ T40] lock(&port_lock_key); [ 282.990132][ T40] [ 282.990132][ T40] *** DEADLOCK *** [ 282.990132][ T40] [ 282.998538][ T40] 6 locks held by kworker/u4:2/40: [ 283.004201][ T40] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 283.015513][ T40] #1: ffffc90000b17d00 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 283.026651][ T40] #2: ffff888024590ce8 (&buf->lock){+.+.}-{3:3}, at: flush_to_ldisc+0x34/0x860 [ 283.036247][ T40] #3: ffff888076472098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x18/0x80 [ 283.045933][ T40] #4: ffffffff96f6cf68 (&port_lock_key){-.-.}-{2:2}, at: uart_write+0x113/0x910 [ 283.055221][ T40] #5: ffff888076472098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x18/0x80 [ 283.065152][ T40] [ 283.065152][ T40] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 283.076165][ T40] -> (&port_lock_key){-.-.}-{2:2} { [ 283.081540][ T40] IN-HARDIRQ-W at: [ 283.085569][ T40] lock_acquire+0x1b4/0x490 [ 283.091800][ T40] _raw_spin_lock_irqsave+0xa4/0xf0 [ 283.098680][ T40] serial8250_handle_irq+0x7a/0x6d0 [ 283.105692][ T40] serial8250_default_handle_irq+0xb4/0x1a0 [ 283.113492][ T40] serial8250_interrupt+0x9b/0x1c0 [ 283.120353][ T40] __handle_irq_event_percpu+0x298/0xa30 [ 283.128073][ T40] handle_irq_event+0x87/0x1e0 [ 283.134598][ T40] handle_edge_irq+0x243/0xb20 [ 283.141183][ T40] __common_interrupt+0xd7/0x1e0 [ 283.147996][ T40] common_interrupt+0xb0/0xd0 [ 283.154477][ T40] asm_common_interrupt+0x22/0x40 [ 283.161379][ T40] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 283.169198][ T40] uart_write+0x68a/0x910 [ 283.175452][ T40] n_tty_write+0xd1a/0x11c0 [ 283.181615][ T40] file_tty_write+0x4dd/0x860 [ 283.188043][ T40] vfs_write+0x44c/0x960 [ 283.193918][ T40] ksys_write+0x143/0x240 [ 283.199910][ T40] do_syscall_64+0x4c/0xa0 [ 283.206057][ T40] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.213673][ T40] IN-SOFTIRQ-W at: [ 283.217656][ T40] lock_acquire+0x1b4/0x490 [ 283.223897][ T40] _raw_spin_lock_irqsave+0xa4/0xf0 [ 283.230874][ T40] serial8250_handle_irq+0x7a/0x6d0 [ 283.237764][ T40] serial8250_default_handle_irq+0xb4/0x1a0 [ 283.245345][ T40] serial8250_interrupt+0x9b/0x1c0 [ 283.252198][ T40] __handle_irq_event_percpu+0x298/0xa30 [ 283.259487][ T40] handle_irq_event+0x87/0x1e0 [ 283.266110][ T40] handle_edge_irq+0x243/0xb20 [ 283.272755][ T40] __common_interrupt+0xd7/0x1e0 [ 283.279340][ T40] common_interrupt+0xb0/0xd0 [ 283.285761][ T40] asm_common_interrupt+0x22/0x40 [ 283.292443][ T40] unwind_next_frame+0x10fa/0x20b0 [ 283.299207][ T40] __unwind_start+0x5bb/0x740 [ 283.305726][ T40] arch_stack_walk+0xda/0x140 [ 283.312069][ T40] stack_trace_save+0x98/0xe0 [ 283.318850][ T40] kasan_set_track+0x4b/0x70 [ 283.325089][ T40] kasan_save_free_info+0x2d/0x50 [ 283.331944][ T40] ____kasan_slab_free+0x126/0x1e0 [ 283.338835][ T40] slab_free_freelist_hook+0x131/0x1a0 [ 283.346127][ T40] kmem_cache_free+0xf7/0x290 [ 283.353331][ T40] rcu_core+0x9c0/0x16a0 [ 283.359750][ T40] handle_softirqs+0x2a1/0x920 [ 283.366264][ T40] run_ksoftirqd+0x98/0xf0 [ 283.372684][ T40] smpboot_thread_fn+0x64a/0xa40 [ 283.379266][ T40] kthread+0x29d/0x330 [ 283.385255][ T40] ret_from_fork+0x1f/0x30 [ 283.391542][ T40] INITIAL USE at: [ 283.396365][ T40] lock_acquire+0x1b4/0x490 [ 283.402792][ T40] _raw_spin_lock_irqsave+0xa4/0xf0 [ 283.409677][ T40] serial8250_do_set_termios+0x544/0x17d0 [ 283.417165][ T40] uart_set_options+0x3c2/0x5d0 [ 283.423617][ T40] serial8250_console_setup+0x2ce/0x3a0 [ 283.430995][ T40] univ8250_console_setup+0xe9/0x180 [ 283.437944][ T40] try_enable_preferred_console+0x48a/0x600 [ 283.445507][ T40] register_console+0x1b0/0x9c0 [ 283.452029][ T40] univ8250_console_init+0x41/0x43 [ 283.458806][ T40] console_init+0x1bc/0x78e [ 283.465740][ T40] start_kernel+0x303/0x539 [ 283.472107][ T40] secondary_startup_64_no_verify+0xcf/0xdb [ 283.479578][ T40] } [ 283.482062][ T40] ... key at: [] port_lock_key+0x0/0x20 [ 283.489958][ T40] [ 283.489958][ T40] the dependencies between the lock to be acquired [ 283.489965][ T40] and HARDIRQ-irq-unsafe lock: [ 283.503487][ T40] -> (disc_data_lock#4){.+.+}-{2:2} { [ 283.508953][ T40] HARDIRQ-ON-R at: [ 283.512912][ T40] lock_acquire+0x1b4/0x490 [ 283.519174][ T40] _raw_read_lock+0x32/0x40 [ 283.525736][ T40] sixpack_receive_buf+0x50/0x1430 [ 283.532604][ T40] tty_ldisc_receive_buf+0x113/0x150 [ 283.539791][ T40] tty_port_default_receive_buf+0x69/0x90 [ 283.547428][ T40] flush_to_ldisc+0x2f7/0x860 [ 283.553796][ T40] process_one_work+0x898/0x1160 [ 283.560754][ T40] worker_thread+0xaa2/0x1250 [ 283.567108][ T40] kthread+0x29d/0x330 [ 283.573687][ T40] ret_from_fork+0x1f/0x30 [ 283.579772][ T40] SOFTIRQ-ON-R at: [ 283.584010][ T40] lock_acquire+0x1b4/0x490 [ 283.590280][ T40] _raw_read_lock+0x32/0x40 [ 283.596588][ T40] sixpack_receive_buf+0x50/0x1430 [ 283.603426][ T40] tty_ldisc_receive_buf+0x113/0x150 [ 283.610469][ T40] tty_port_default_receive_buf+0x69/0x90 [ 283.618396][ T40] flush_to_ldisc+0x2f7/0x860 [ 283.625444][ T40] process_one_work+0x898/0x1160 [ 283.632503][ T40] worker_thread+0xaa2/0x1250 [ 283.639605][ T40] kthread+0x29d/0x330 [ 283.645768][ T40] ret_from_fork+0x1f/0x30 [ 283.652200][ T40] INITIAL USE at: [ 283.656442][ T40] lock_acquire+0x1b4/0x490 [ 283.662593][ T40] _raw_write_lock_irq+0x9f/0xe0 [ 283.669172][ T40] sixpack_close+0x28/0x290 [ 283.675315][ T40] tty_ldisc_kill+0xa6/0x1a0 [ 283.682026][ T40] tty_ldisc_release+0x170/0x200 [ 283.688861][ T40] tty_release_struct+0x26/0xd0 [ 283.695429][ T40] tty_release+0xc72/0x1600 [ 283.701573][ T40] __fput+0x22c/0x920 [ 283.707223][ T40] task_work_run+0x1ca/0x250 [ 283.713933][ T40] exit_to_user_mode_loop+0xe6/0x110 [ 283.720889][ T40] exit_to_user_mode_prepare+0xb1/0x140 [ 283.728197][ T40] syscall_exit_to_user_mode+0x16/0x40 [ 283.735533][ T40] do_syscall_64+0x58/0xa0 [ 283.741901][ T40] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.749549][ T40] INITIAL READ USE at: [ 283.753885][ T40] lock_acquire+0x1b4/0x490 [ 283.760748][ T40] _raw_read_lock+0x32/0x40 [ 283.767442][ T40] sixpack_receive_buf+0x50/0x1430 [ 283.774563][ T40] tty_ldisc_receive_buf+0x113/0x150 [ 283.781870][ T40] tty_port_default_receive_buf+0x69/0x90 [ 283.789667][ T40] flush_to_ldisc+0x2f7/0x860 [ 283.796681][ T40] process_one_work+0x898/0x1160 [ 283.803800][ T40] worker_thread+0xaa2/0x1250 [ 283.810796][ T40] kthread+0x29d/0x330 [ 283.816974][ T40] ret_from_fork+0x1f/0x30 [ 283.823581][ T40] } [ 283.826738][ T40] ... key at: [] disc_data_lock+0x18/0x100 [ 283.835099][ T40] ... acquired at: [ 283.838989][ T40] _raw_read_lock+0x32/0x40 [ 283.843773][ T40] sixpack_write_wakeup+0x2c/0x460 [ 283.849187][ T40] tty_wakeup+0xb4/0xf0 [ 283.853604][ T40] tty_port_default_wakeup+0x9e/0xf0 [ 283.859220][ T40] serial8250_tx_chars+0x629/0x830 [ 283.864786][ T40] serial8250_start_tx+0x6a9/0x8a0 [ 283.870507][ T40] uart_write+0x67d/0x910 [ 283.875017][ T40] sixpack_receive_buf+0x438/0x1430 [ 283.880471][ T40] tty_ldisc_receive_buf+0x113/0x150 [ 283.885944][ T40] tty_port_default_receive_buf+0x69/0x90 [ 283.892110][ T40] flush_to_ldisc+0x2f7/0x860 [ 283.897053][ T40] process_one_work+0x898/0x1160 [ 283.902197][ T40] worker_thread+0xaa2/0x1250 [ 283.907154][ T40] kthread+0x29d/0x330 [ 283.911401][ T40] ret_from_fork+0x1f/0x30 [ 283.916169][ T40] [ 283.918604][ T40] [ 283.918604][ T40] stack backtrace: [ 283.924699][ T40] CPU: 1 PID: 40 Comm: kworker/u4:2 Not tainted 6.1.148-syzkaller #0 [ 283.933229][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.944346][ T40] Workqueue: events_unbound flush_to_ldisc [ 283.950185][ T40] Call Trace: [ 283.953669][ T40] [ 283.956779][ T40] dump_stack_lvl+0x168/0x22e [ 283.961562][ T40] ? load_image+0x3b0/0x3b0 [ 283.966186][ T40] ? show_regs_print_info+0x12/0x12 [ 283.971637][ T40] ? load_image+0x3b0/0x3b0 [ 283.976219][ T40] ? print_shortest_lock_dependencies+0xf0/0x160 [ 283.982547][ T40] __lock_acquire+0x660b/0x7c50 [ 283.987572][ T40] ? verify_lock_unused+0x140/0x140 [ 283.993051][ T40] lock_acquire+0x1b4/0x490 [ 283.997854][ T40] ? sixpack_write_wakeup+0x2c/0x460 [ 284.003244][ T40] ? read_lock_is_recursive+0x10/0x10 [ 284.008700][ T40] ? ldsem_down_read_trylock+0x134/0x190 [ 284.014432][ T40] ? tty_ldisc_ref+0x18/0x80 [ 284.019301][ T40] ? __ldsem_down_read_nested+0x7d0/0x7d0 [ 284.025362][ T40] ? sixpack_receive_buf+0x1430/0x1430 [ 284.031021][ T40] _raw_read_lock+0x32/0x40 [ 284.035544][ T40] ? sixpack_write_wakeup+0x2c/0x460 [ 284.041200][ T40] sixpack_write_wakeup+0x2c/0x460 [ 284.046505][ T40] ? sixpack_receive_buf+0x1430/0x1430 [ 284.051957][ T40] tty_wakeup+0xb4/0xf0 [ 284.056202][ T40] tty_port_default_wakeup+0x9e/0xf0 [ 284.061541][ T40] serial8250_tx_chars+0x629/0x830 [ 284.066845][ T40] serial8250_start_tx+0x6a9/0x8a0 [ 284.071958][ T40] uart_write+0x67d/0x910 [ 284.076436][ T40] sixpack_receive_buf+0x438/0x1430 [ 284.081638][ T40] ? ldsem_down_read_trylock+0x134/0x190 [ 284.087373][ T40] ? sixpack_ioctl+0x540/0x540 [ 284.092580][ T40] tty_ldisc_receive_buf+0x113/0x150 [ 284.098038][ T40] tty_port_default_receive_buf+0x69/0x90 [ 284.103953][ T40] flush_to_ldisc+0x2f7/0x860 [ 284.108653][ T40] ? process_one_work+0x7a1/0x1160 [ 284.114030][ T40] process_one_work+0x898/0x1160 [ 284.119149][ T40] ? worker_detach_from_pool+0x240/0x240 [ 284.124857][ T40] ? _raw_spin_lock_irq+0xab/0xe0 [ 284.129883][ T40] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 284.135516][ T40] ? kthread_data+0x4b/0xc0 [ 284.140398][ T40] worker_thread+0xaa2/0x1250 [ 284.145161][ T40] ? __kthread_parkme+0x162/0x1c0 [ 284.150541][ T40] kthread+0x29d/0x330 [ 284.154956][ T40] ? worker_clr_flags+0x1a0/0x1a0 [ 284.160213][ T40] ? kthread_blkcg+0xd0/0xd0 [ 284.165118][ T40] ret_from_fork+0x1f/0x30 [ 284.169786][ T40] [ 284.173088][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.181769][ T1113] JFS: metapage_get_blocks failed [ 285.962493][ T1113] JFS: metapage_get_blocks failed [ 289.242834][ T4355] JFS: metapage_get_blocks failed [ 291.012653][ T11] JFS: metapage_get_blocks failed