last executing test programs: 2m54.625698816s ago: executing program 2 (id=150): socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x8c9e1000) 2m54.247579143s ago: executing program 2 (id=152): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000003f80)=""/4117, 0x1015}], 0x1}, 0x20f2) 2m54.040882083s ago: executing program 2 (id=155): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x34, r2, 0x1, 0x270bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x167}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x40) 2m53.846389932s ago: executing program 2 (id=156): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x4, 0x33f, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsync(r0) 2m53.484605049s ago: executing program 2 (id=160): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feffe7d5b2a4f9810fc5c81195554c"], 0xc8) dup3(r1, r0, 0x0) 2m52.890065806s ago: executing program 2 (id=166): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x8, 0x0, {0xa, 0x4e23, 0x9, @mcast1, 0x97}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="00000600"}) 2m52.417621838s ago: executing program 32 (id=166): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x8, 0x0, {0xa, 0x4e23, 0x9, @mcast1, 0x97}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="00000600"}) 2m44.411598278s ago: executing program 0 (id=204): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) lseek(r0, 0x2, 0x2) 2m43.016757532s ago: executing program 0 (id=209): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6e6f7265636f766572792c6261727269657200646973636172642c626172726965722c6261726f626172726965722c6572726f72733d63b63d8fc49ca56fbb43000000000000"], 0x3, 0xf1d, &(0x7f0000002d80)="$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") truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 2m41.619321687s ago: executing program 0 (id=217): pause() syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000180)='./cgroup\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) 2m40.25106879s ago: executing program 0 (id=222): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m39.778528991s ago: executing program 0 (id=226): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m38.874021233s ago: executing program 0 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 2m38.431602994s ago: executing program 33 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 2m31.273012892s ago: executing program 4 (id=262): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[], 0x0) 2m30.938754798s ago: executing program 4 (id=264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2m30.67038439s ago: executing program 4 (id=267): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) 2m29.908124795s ago: executing program 4 (id=268): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x4, 0x33f, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsync(r0) 2m29.256670935s ago: executing program 4 (id=270): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff00000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000cc0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x2, 0x58, 0x67, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x79}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0x9, 0x0, 0x1, 0x2, 0x0, 0xca}, 0x2, {0xe, 0x0, 0x1, 0x12, 0x1, 0x0, 0x1, 0x1}}}}}}}}}, 0x0) 2m28.601210155s ago: executing program 4 (id=272): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) write(r0, 0x0, 0x0) 2m27.963445084s ago: executing program 34 (id=272): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) write(r0, 0x0, 0x0) 2m22.770913112s ago: executing program 3 (id=294): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1080, @loopback, 0xfffffffd}, 0x1c) 2m22.543102572s ago: executing program 3 (id=295): socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x100, 0x0, 0xba, 0x1}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2m22.288207424s ago: executing program 3 (id=296): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000006, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x1000d, 0x0, 0x0, 0x41100}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 2m21.633456644s ago: executing program 3 (id=301): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000940)={[{}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x3, 0x447, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m20.83224414s ago: executing program 3 (id=304): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000540)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x2, 0x100, 0x220f, {0x77359400}, {}, {0x2, 0x1}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "433a127efc014c01"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 2m19.994000229s ago: executing program 3 (id=308): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001b00)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='!\x00\n'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f0000000880)=ANY=[@ANYBLOB="60310f"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2m19.31351954s ago: executing program 35 (id=308): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001b00)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='!\x00\n'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f0000000880)=ANY=[@ANYBLOB="60310f"], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.466518061s ago: executing program 5 (id=1143): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 3.386102805s ago: executing program 1 (id=1144): setrlimit(0xf, &(0x7f0000000000)={0x0, 0xff}) timer_create(0x3, 0x0, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 3.309592049s ago: executing program 5 (id=1145): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) 3.087603829s ago: executing program 5 (id=1147): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.021152417s ago: executing program 5 (id=1152): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x82) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 1.854092425s ago: executing program 1 (id=1154): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x4, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x2}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) 1.666011394s ago: executing program 7 (id=1155): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="00e08b93bf40be4e268033bf508674092695e23b9c0c480b7dd5eebfb3850c1d46c70e0ba436041b72bd536fc848f85db23045fa764694"], 0x2, 0x6a9, &(0x7f0000000440)="$eJzs3U+IHFkdB/BvdTo96QjZ2X/ZKMIOG1h0g8lMmjURhI0ikkOQoJe9DslkM6STXSazkl3EdNRdwZMn2YOHFYmHPYmIsJ7E9SwIXjzlHvDmIYI6UtXVPT0znclMMpme7H4+UFOv+tV77/d+1J/u6oQO8Jl19vXs76XI2WPnbpTbd253undud64OykmmkjSSZn+Vop0UnyRn0l/y+fLFurvifuO8evfjovnBR53+VrNeqv3LTnutrQY8doRecmC4sS/JTL/4n632urG/aqn6ubDa30MqhnGXCTs6SBxM2soGvdXKxgOb3/d8B54cN/v3zQ2mk4Pp313L9wGprw4PvjJM3n2vTf9ee5UDAACAJ9XYz/KjnrqXe7mRQ7sTDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHw6FP3fDCzqpTEoz6QY/P5/a+Q39VsTDvcRvXepWn33qUkHAgAAAAAAAACP5MV7uZcbOTTYXimq7/xfqjaeq/5+Lm/nehaylOO5kfksZzlLmUsyPdJR68b88vLS3MaWv0jZcmVl5Wbd8uTYlifXxtVbH+i4f2mwYScAAAAAAAAA+Mz6Uc6ufv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB7QZHs66+q5blBeTqNZr1Lq5gZ7t6aWKA75E+TDgAAAAAev3a9PlT8r19YKarP/Ierz/0H8nauZTmLWU43C7lYPQvof+pv/K3X6d653blaLhs7/sY/txVH1WP6zx7Gjzxb7fH8sMXZfDvfy7HM5HyWspjvZz7LWchMvlWV5lNkun56MX3ndjuDWDfGe2bN1vn1sb04Ui7jO1JF0s6lLFaxHc+F1iD0Rr3fkZHR/tBK1o14q8xO8Vptizm6WK/LGf28Xu+g5sM3na5mvn+Ykdk692U2nh7N+8bcb/M4WT/SXBrDZ1DPrY5Sbq4f6aFyfrBel7l+f+dzPmqbj9LWZqL3s3JrcPQd3jznyZf//ufzlxvXrly+dP3YY5zS7lh/THRGMvHCljLRLTPRe4RMHHiU+HdOq85G/yq6vavlS1XbQ1nMd/JmLmYhpzKbuZzObL6Wk+nk5Ehen988r9W51tjeuXb0S3WhvCf9dOTetGum7ldR5vXpkbyOXummq7rRV1az9MwWslS0Mj5L/xgbSvMLdaEc48cjd5zJW5+JuZFMPLt5Jn7135Uk17vXrixdnn9ri+O9XK/L0/a9tdfmX+/IhLavnm55vDwzuKW+nzVHR1n37PB2uzZfrfobl2bd2Zq6VqrzuV/3oDO17OnwrXE99eteGDtKp6o7MlK35l1O3kx3+C4EgD3s4CsHW+277b+2P2z/pH25fe7AN6dOT32xlf1/af5x328bv2l8vXglH+aHOTTpSAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NPg+jvvXpnvdheW9mAhjR3u8NbYqkEq+q+09sbcn9TC1GZH1O+SbNK8NYmY20n2ROrS3IWxpjKm6tzwlXbSGMaT5Moe+YE74HE4sXz1rRPX33n3K4tX599YeGPh2snTp1471fnq3M0Tlxa7C7P9v5OOEngcVt8GTDoSAAAAAAAAAAAAYKt24783jBm26E1grgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCT6ezr2d9LkbnZ47Pl9p3bnW65DMqrezaTNJIUP0iKT5Iz6S+ZHumuuN84r979+Jcvf/BRZ7Wv5mD/xrp2v//Xyso2Z9Grl8wk2VevH2xqS/1dGOmvt83A+orhDMuEHR0kDibt/wEAAP//bfYMRQ==") connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x5, @empty, 0x7}, 0x1c) 1.581444198s ago: executing program 1 (id=1157): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f0000000980)=[{&(0x7f0000002600)=""/4115, 0x1013}, {0x0}], 0x2) 1.495670562s ago: executing program 1 (id=1158): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) recvfrom(r0, 0x0, 0x0, 0x40000040, 0x0, 0x0) 1.32248734s ago: executing program 7 (id=1160): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xe, 0x2, 0x9}}]}, 0x38}}, 0x4000010) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe"], 0xfe33) 1.30812185s ago: executing program 5 (id=1161): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xb942) write$hidraw(r1, &(0x7f0000000900)="eb04f454", 0x4) 955.722266ms ago: executing program 7 (id=1163): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_winnt}, {@fat=@flush}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uni_xlateno}, {@numtail}, {@utf8}, {@numtail}, {@fat=@check_normal}, {@uni_xlate}, {@utf8}]}, 0x7f, 0x2bd, &(0x7f0000000240)="$eJzs3U9rI2UYAPBnmkmaqpAcPInggB48le1+gi1SYTEnZQ56UXGzIE1YaDCwKsY9eRc8+Qm8+B08evDiN/DgUfDmIuIsyUz+dtrdLiFbyu936TPzvs/7b962EJg3n7w+PL33YHT/0dd/RLudxN6duBOPk+jGXsx9GwDATfK4KOLvohTRurRuOisvOtXV3m5GCABs2/r//6f699mqAQDX2QcffvTeca938n6WtSOG343zJCKGyTgvy4/vx+cxiH7cik78F1EslPErd3snkWbZ/MOA8UHkEcOPf6uuj/+KmOUfRSe65/Pfvds7OcpK8dZwMs6nPU9/NuOlJOK4SMqGbkcnXo0omlE1ssy/XZMfeSvefvPHavz/9+MwOvH7Z/EgBnFv1sQy/5ujLHun+OGfr8oZ5BHJZJzvz+otFY2dPRQAAAAAAAAAAAAAAAAAAAAAAG68w2yhu3p+zvyYv8PD+vLZ+UCNmvOBqhN+Jivn69zKsmx+jM84b0aZn8ZraaQvdPIAAAAAAAAAAAAAAAAAAABwTYwefnn66WDQP1sLfim++CmitmgZVG/0R3UnXSlKY2+16PJ2aoLTn5/a+3MG0ahGPUjOdTGf0DM3mF5cef8qAzuoa6dawpo1TAdRDv77qy/CG1ea4DQonmOd57trukkuqdyI0cN2/SZZ2ZkHVWNno9kDOrho064HRc3SNS7Mam1pj7Ve3u6mnc64uVjM9Trt6ZNcudPc8m/KhmQR/dra9l8hAAAAAAAAAAAAAAAAAAAg1t7/jz/PFT56IUMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ1bfv//Ioju5p3NYFIl9+vSN4L9s1FNt90dTxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAb7kkAAAD//5gAW2c=") openat(0xffffffffffffff9c, 0x0, 0x100, 0x62) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x80, 0x146) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 766.070015ms ago: executing program 7 (id=1165): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232", 0x88, 0xfffffffffffffffd) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000280)=ANY=[], 0x8) 649.078761ms ago: executing program 6 (id=1166): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f00000001c0)={r4}) 637.828681ms ago: executing program 7 (id=1167): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6}}, 0x40) syz_emit_ethernet(0xd81, &(0x7f0000000c40)={@local, @random="5fc9e9a6f5fe", @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@generic={0x88fb, "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"}}}, 0x0) 505.863677ms ago: executing program 5 (id=1168): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x001%\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 505.205377ms ago: executing program 1 (id=1169): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)=0x2) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) 418.028041ms ago: executing program 6 (id=1170): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000002340)=ANY=[], 0x0) 378.749143ms ago: executing program 7 (id=1171): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 289.677927ms ago: executing program 6 (id=1172): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 179.627531ms ago: executing program 6 (id=1173): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a4fc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b87f7c40a1702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f600e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10f9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80729fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a85430600f1e49db5a5517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a00000000000000000000000047e628cd57cde4268f47c9aaec3a3dfe43e032b88ea53656a8740c1a4e0a99be5c97ba451d8b2b0f4e12ba96082e0f6b2dabe716699090058e61a38ce85611945106dd1309087d3a2cf3aaef6216ff3720c3917170544a509071166565eaa3c9285b5227f520cd47"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 159.341843ms ago: executing program 1 (id=1174): syz_usb_connect(0x0, 0x371, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 112.640715ms ago: executing program 6 (id=1175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf256800000008000300", @ANYRES32=r3, @ANYBLOB="2b00c7"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 6 (id=1176): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fcntl$lock(r1, 0x6, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 94967295 subj=unconfined pid=7497 comm="syz.5.413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147bd9e159 code=0x7ffc0000 [ 165.723325][ T28] audit: type=1326 audit(1789674585.983:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.5.413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147bd9e159 code=0x7ffc0000 [ 165.765644][ T28] audit: type=1326 audit(1789674585.983:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.5.413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147bd9e159 code=0x7ffc0000 [ 165.790350][ T5816] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 165.806097][ T28] audit: type=1326 audit(1789674585.983:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.5.413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f147bd9e159 code=0x7ffc0000 [ 165.989704][ T5816] usb 7-1: Using ep0 maxpacket: 16 [ 166.012540][ T5816] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.035641][ T5816] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.069017][ T5816] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 166.089107][ T5816] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 166.146035][ T5816] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.197554][ T5816] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 166.209752][ T5816] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 166.228058][ T5816] usb 7-1: Manufacturer: syz [ 166.256197][ T5816] usb 7-1: config 0 descriptor?? [ 166.582689][ T27] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 166.620262][ T5816] rc_core: IR keymap rc-hauppauge not found [ 166.626694][ T5816] Registered IR keymap rc-empty [ 166.637270][ T5816] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 166.680322][ T5816] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 166.744494][ T5816] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 166.784177][ T5816] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input10 [ 166.799467][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 166.828216][ T27] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 166.858662][ T27] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.876040][ T5816] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 166.889762][ T27] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.915222][ T27] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.930232][ T5816] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 166.949918][ T27] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.979713][ T5816] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 166.986995][ T27] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.009585][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.040007][ T5816] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 167.093950][ T5816] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 167.139819][ T5816] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 167.186038][ T5816] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 167.239829][ T5816] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 167.265316][ T27] usb 6-1: usb_control_msg returned -32 [ 167.279925][ T27] usbtmc 6-1:16.0: can't read capabilities [ 167.299653][ T5816] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 167.350357][ T5816] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 167.397832][ T5816] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 167.429360][ T5816] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 167.449826][ T5816] usb 7-1: USB disconnect, device number 3 [ 167.500068][ T7540] loop1: detected capacity change from 0 to 40427 [ 167.529960][ T7540] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 167.564903][ T7540] F2FS-fs (loop1): Image doesn't support compression [ 167.584879][ T7540] F2FS-fs (loop1): Image doesn't support compression [ 167.603359][ T7540] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 167.638586][ T7540] F2FS-fs (loop1): invalid crc value [ 167.663562][ T7540] F2FS-fs (loop1): Found nat_bits in checkpoint [ 167.749828][ T27] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 167.797313][ T7540] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 167.854620][ T5846] usb 6-1: USB disconnect, device number 6 [ 167.959693][ T27] usb 8-1: Using ep0 maxpacket: 32 [ 167.962835][ T5777] syz-executor: attempt to access beyond end of device [ 167.962835][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 167.969364][ T27] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 168.011175][ T27] usb 8-1: config 0 has no interface number 0 [ 168.027114][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 168.042248][ T27] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 168.051689][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.066200][ T27] usb 8-1: Product: syz [ 168.087002][ T27] usb 8-1: Manufacturer: syz [ 168.101297][ T27] usb 8-1: SerialNumber: syz [ 168.121286][ T27] usb 8-1: config 0 descriptor?? [ 168.137961][ T27] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 168.341372][ T27] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 168.381762][ T27] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 168.580548][ T5846] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 168.752480][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 168.761951][ T27] usb 8-1: USB disconnect, device number 3 [ 168.799288][ T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 168.826822][ T5846] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.860040][ T5846] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.880428][ T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 168.913158][ T5846] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 168.931799][ T27] quatech2 8-1:0.51: device disconnected [ 168.941625][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 168.971575][ T5846] usb 7-1: SerialNumber: syz [ 169.208870][ T5846] usb 7-1: 0:2 : does not exist [ 169.214343][ T5846] usb 7-1: usbmixer: too many channels (61) in unit 5 [ 169.234976][ T5846] usb 7-1: USB disconnect, device number 4 [ 169.325281][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.593745][ T7599] loop1: detected capacity change from 0 to 1024 [ 169.921949][ T7610] loop7: detected capacity change from 0 to 2048 [ 170.014439][ T7615] loop1: detected capacity change from 0 to 1764 [ 170.031309][ T7610] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.163563][ T7610] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 170.189063][ T7610] EXT4-fs (loop7): Remounting filesystem read-only [ 170.302279][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.517747][ T7627] loop6: detected capacity change from 0 to 2048 [ 170.590423][ T7627] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 170.620550][ T7627] UDF-fs: Scanning with blocksize 512 failed [ 170.652666][ T5850] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 170.688976][ T7627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.854831][ T5850] usb 6-1: unable to get BOS descriptor or descriptor too short [ 170.886660][ T5850] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.905579][ T5850] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.920591][ T5850] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 170.959620][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.985568][ T5850] usb 6-1: Product: syz [ 170.998067][ T5850] usb 6-1: Manufacturer: syz [ 171.008198][ T5850] usb 6-1: SerialNumber: syz [ 171.051921][ T5850] usb 6-1: selecting invalid altsetting 1 [ 171.078492][ T5850] usb 6-1: unit 6 not found! [ 171.932524][ T5850] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 171.977151][ T7664] loop7: detected capacity change from 0 to 8 [ 171.989735][ T5850] usb 6-1: USB disconnect, device number 7 [ 172.050514][ T7664] SQUASHFS error: zlib decompression failed, data probably corrupt [ 172.059066][ T7664] SQUASHFS error: Failed to read block 0x9b: -5 [ 172.118539][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.129641][ T7664] SQUASHFS error: Unable to read metadata cache entry [99] [ 172.171759][ T7664] SQUASHFS error: Unable to read inode 0x127 [ 172.533986][ T7678] FAULT_INJECTION: forcing a failure. [ 172.533986][ T7678] name failslab, interval 1, probability 0, space 0, times 0 [ 172.567630][ T7678] CPU: 1 PID: 7678 Comm: syz.6.455 Not tainted syzkaller #0 [ 172.575010][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.585128][ T7678] Call Trace: [ 172.588452][ T7678] [ 172.591434][ T7678] dump_stack_lvl+0x18c/0x250 [ 172.596178][ T7678] ? show_regs_print_info+0x20/0x20 [ 172.601434][ T7678] ? load_image+0x420/0x420 [ 172.605995][ T7678] ? __might_sleep+0xe0/0xe0 [ 172.610644][ T7678] ? __lock_acquire+0x7d80/0x7d80 [ 172.615722][ T7678] should_fail_ex+0x394/0x4c0 [ 172.620456][ T7678] should_failslab+0x9/0x20 [ 172.625014][ T7678] slab_pre_alloc_hook+0x59/0x300 [ 172.630088][ T7678] ? d_instantiate+0x6f/0x90 [ 172.634731][ T7678] kmem_cache_alloc+0x5a/0x2c0 [ 172.639542][ T7678] ? alloc_empty_file+0x9e/0x1d0 [ 172.644525][ T7678] alloc_empty_file+0x9e/0x1d0 [ 172.649324][ T7678] alloc_file+0x5b/0x600 [ 172.653610][ T7678] alloc_file_pseudo+0x184/0x210 [ 172.658593][ T7678] ? fput+0x1a0/0x1a0 [ 172.662612][ T7678] ? _raw_spin_unlock+0x28/0x40 [ 172.667527][ T7678] anon_inode_getfd+0xca/0x1c0 [ 172.672344][ T7678] __se_sys_fanotify_init+0x62a/0x750 [ 172.677790][ T7678] do_syscall_64+0x55/0xb0 [ 172.682285][ T7678] ? clear_bhb_loop+0x40/0x90 [ 172.687020][ T7678] ? clear_bhb_loop+0x40/0x90 [ 172.691772][ T7678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.697722][ T7678] RIP: 0033:0x7fa39f39e159 [ 172.702191][ T7678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.721846][ T7678] RSP: 002b:00007fa3a0197028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 172.730298][ T7678] RAX: ffffffffffffffda RBX: 00007fa39f625fa0 RCX: 00007fa39f39e159 [ 172.738302][ T7678] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000010 [ 172.746320][ T7678] RBP: 00007fa39f43506b R08: 0000000000000000 R09: 0000000000000000 [ 172.754335][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.762334][ T7678] R13: 00007fa39f626038 R14: 00007fa39f625fa0 R15: 00007ffed0463828 [ 172.770367][ T7678] [ 172.929118][ T7667] loop1: detected capacity change from 0 to 32768 [ 172.987178][ T7667] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.295582][ T7667] XFS (loop1): Ending clean mount [ 173.338112][ T7667] XFS (loop1): Quotacheck needed: Please wait. [ 173.427799][ T7667] XFS (loop1): Quotacheck: Done. [ 173.716541][ T5777] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.776520][ T7713] loop6: detected capacity change from 0 to 2048 [ 173.879906][ T7713] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.512772][ T7734] loop5: detected capacity change from 0 to 64 [ 174.606383][ T7736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.614287][ T7736] IPv6: NLM_F_CREATE should be set when creating new route [ 174.621656][ T7736] IPv6: NLM_F_CREATE should be set when creating new route [ 174.628908][ T7736] IPv6: NLM_F_CREATE should be set when creating new route [ 174.669683][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 174.669696][ T28] audit: type=1800 audit(1789674595.553:32): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.469" name="file1" dev="loop5" ino=22 res=0 errno=0 [ 174.885394][ T28] audit: type=1800 audit(1789674595.773:33): pid=7740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.471" name="ipv4_port" dev="configfs" ino=14283 res=0 errno=0 [ 175.142185][ T7717] loop7: detected capacity change from 0 to 40427 [ 175.170429][ T7717] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x7ffff [ 175.178825][ T7717] F2FS-fs (loop7): Image doesn't support compression [ 175.207953][ T7717] F2FS-fs (loop7): Image doesn't support compression [ 175.234242][ T7717] F2FS-fs (loop7): invalid crc value [ 175.267752][ T7717] F2FS-fs (loop7): Found nat_bits in checkpoint [ 175.323841][ T23] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 175.428940][ T7717] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 175.564972][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 175.592056][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.634592][ T23] usb 6-1: string descriptor 0 read error: -22 [ 175.653300][ T7717] F2FS-fs (loop7): inject checkpoint error in f2fs_balance_fs of f2fs_map_blocks+0x6bc/0x4080 [ 175.659996][ T23] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 175.701743][ T7717] F2FS-fs (loop7): Stopped filesystem due to reason: 1 [ 175.709591][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.349856][ T5846] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 176.357766][ T23] usb 6-1: failed to read current rate; disabling the check [ 176.561734][ T5846] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.579574][ T5846] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 176.599557][ T5846] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 176.610059][ T5850] usb 6-1: USB disconnect, device number 8 [ 176.620854][ T5846] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 176.664476][ T5846] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 176.687473][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.728340][ T7771] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 176.757382][ T7771] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 176.801192][ T5846] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 176.815231][ T5846] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 176.825573][ T5846] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 176.840804][ T5846] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 176.852026][ T5846] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 176.875507][ T5846] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 176.892809][ T5846] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 176.940841][ T12] wlan0: Trigger new scan to find an IBSS to join [ 177.016922][ T7792] capability: warning: `syz.7.481' uses 32-bit capabilities (legacy support in use) [ 177.172299][ T7796] loop7: detected capacity change from 0 to 256 [ 177.183481][ T7796] exfat: Deprecated parameter 'utf8' [ 177.198045][ T7796] exfat: Deprecated parameter 'namecase' [ 177.268937][ T7796] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 177.467115][ T5846] usb 7-1: USB disconnect, device number 5 [ 177.502616][ T5846] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 177.523998][ T5846] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 177.551778][ T5846] keyspan 7-1:1.0: device disconnected [ 177.829061][ T7807] loop5: detected capacity change from 0 to 4096 [ 178.029969][ T7807] ntfs: volume version 3.1. [ 178.052053][ T7813] syzkaller1: entered promiscuous mode [ 178.079634][ T7813] syzkaller1: entered allmulticast mode [ 179.472916][ T7850] netlink: 'syz.7.498': attribute type 10 has an invalid length. [ 179.489494][ T7850] netlink: 65015 bytes leftover after parsing attributes in process `syz.7.498'. [ 179.646534][ T7854] loop5: detected capacity change from 0 to 1024 [ 179.700818][ T7854] EXT4-fs: Ignoring removed bh option [ 179.737451][ T7854] EXT4-fs: Ignoring removed bh option [ 179.761230][ T7854] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 179.906151][ T7854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.073043][ T7870] netlink: 20 bytes leftover after parsing attributes in process `syz.6.505'. [ 180.091360][ T7870] netlink: 20 bytes leftover after parsing attributes in process `syz.6.505'. [ 180.150117][ T7854] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 180.291979][ T6625] EXT4-fs error (device loop5): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /67/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 180.360402][ T6625] EXT4-fs error (device loop5): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /67/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 180.429104][ T6625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.598489][ T7886] loop6: detected capacity change from 0 to 2048 [ 180.650179][ T7886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.970597][ T7883] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 181.018818][ T7883] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 562 with error 28 [ 181.069664][ T7883] EXT4-fs (loop6): This should not happen!! Data will be lost [ 181.069664][ T7883] [ 181.079369][ T7883] EXT4-fs (loop6): Total free blocks count 0 [ 181.132144][ T7883] EXT4-fs (loop6): Free/Dirty block details [ 181.169130][ T7883] EXT4-fs (loop6): free_blocks=4096 [ 181.177773][ T7883] EXT4-fs (loop6): dirty_blocks=576 [ 181.222765][ T7883] EXT4-fs (loop6): Block reservation details [ 181.228848][ T7883] EXT4-fs (loop6): i_reserved_data_blocks=36 [ 181.401648][ T6822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.490321][ T5816] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 181.617275][ T7896] loop1: detected capacity change from 0 to 32768 [ 181.672160][ T7896] (syz.1.510,7896,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 181.693968][ T7896] (syz.1.510,7896,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 181.704127][ T5816] usb 8-1: Using ep0 maxpacket: 8 [ 181.740605][ T5816] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 181.772253][ T5816] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.803546][ T7896] (syz.1.510,7896,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 181.843268][ T5816] pvrusb2: Hardware description: Terratec Grabster AV400 [ 181.886292][ T5816] pvrusb2: ********** [ 181.898675][ T5816] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 181.911527][ T134] wlan0: Trigger new scan to find an IBSS to join [ 181.924667][ T7896] JBD2: Ignoring recovery information on journal [ 181.945003][ T5816] pvrusb2: Important functionality might not be entirely working. [ 181.988409][ T5816] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 182.033822][ T5816] pvrusb2: ********** [ 182.061597][ T2322] pvrusb2: Invalid write control endpoint [ 182.096218][ T7896] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 182.240638][ T2322] pvrusb2: Invalid write control endpoint [ 182.248006][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 182.298646][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 182.330344][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 182.364201][ T2322] pvrusb2: Device being rendered inoperable [ 182.391046][ T7905] pvrusb2: Attempted to execute control transfer when device not ok [ 182.414700][ T5846] usb 8-1: USB disconnect, device number 4 [ 182.424981][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 182.444021][ T7930] hsr0: entered allmulticast mode [ 182.449109][ T7930] hsr_slave_0: entered allmulticast mode [ 182.470555][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 182.485129][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 182.490354][ T7930] hsr_slave_1: entered allmulticast mode [ 182.502790][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.519'. [ 182.541115][ T2322] pvrusb2: Attached sub-driver cx25840 [ 182.547797][ T7930] hsr_slave_0: left promiscuous mode [ 182.567448][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 182.580058][ T7930] hsr_slave_1: left promiscuous mode [ 182.600937][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 182.764171][ T7930] hsr0 (unregistering): left allmulticast mode [ 182.904542][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.059167][ T7938] loop1: detected capacity change from 0 to 2048 [ 183.133521][ T7938] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 183.155693][ T7938] UDF-fs: Scanning with blocksize 512 failed [ 183.227808][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.7.521'. [ 183.249562][ T7938] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.547615][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 183.818072][ T7964] loop7: detected capacity change from 0 to 512 [ 183.884709][ T7964] EXT4-fs (loop7): Test dummy encryption mode enabled [ 184.042965][ T7964] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.174841][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.319671][ T5850] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 184.529667][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 184.545257][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.560552][ T7989] Mass Storage Function, version: 2009/09/11 [ 184.560755][ T5814] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 184.606154][ T7989] LUN: removable file: (no medium) [ 184.607859][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.628814][ T5850] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 184.640126][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.658070][ T5850] usb 2-1: config 0 descriptor?? [ 184.672659][ T28] audit: type=1800 audit(1789674605.563:34): pid=7989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.533" name="nofua" dev="configfs" ino=15655 res=0 errno=0 [ 184.819950][ T5814] usb 7-1: Using ep0 maxpacket: 16 [ 184.833801][ T5814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.855454][ T5814] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.888778][ T5814] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.919928][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.941640][ T5814] usb 7-1: config 0 descriptor?? [ 185.184519][ T5850] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 185.397760][ T5814] HID 045e:07da: Invalid code 65791 type 1 [ 185.458430][ T5814] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0008/input/input11 [ 185.527769][ T5850] usb 2-1: USB disconnect, device number 14 [ 185.548527][ T5814] microsoft 0003:045E:07DA.0008: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 186.014749][ T5850] usb 7-1: USB disconnect, device number 6 [ 186.714133][ T8037] loop6: detected capacity change from 0 to 256 [ 186.836715][ T5846] kernel write not supported for file /ppp (pid: 5846 comm: kworker/1:5) [ 187.194965][ T8029] loop5: detected capacity change from 0 to 32768 [ 187.269104][ T8029] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.565087][ T8029] XFS (loop5): Ending clean mount [ 187.611872][ T8029] XFS (loop5): Quotacheck needed: Please wait. [ 187.728590][ T8029] XFS (loop5): Quotacheck: Done. [ 188.005108][ T8061] loop1: detected capacity change from 0 to 32768 [ 188.043691][ T6625] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.097040][ T8061] JBD2: Ignoring recovery information on journal [ 188.280174][ T8061] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 188.806106][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 189.262430][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.6.557'. [ 189.637330][ T8122] loop1: detected capacity change from 0 to 1024 [ 189.649442][ T8122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.724841][ T8122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.994122][ T8133] loop6: detected capacity change from 0 to 1024 [ 190.118241][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.265537][ T8136] loop8: detected capacity change from 0 to 7 [ 190.291424][ T8136] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 190.308980][ T8136] loop8: partition table partially beyond EOD, truncated [ 190.327647][ T8136] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 190.359173][ T8136] loop8: p2 start 121280928 is beyond EOD, truncated [ 190.448414][ T8144] loop1: detected capacity change from 0 to 512 [ 190.468735][ T5789] udevd[5789]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 190.515228][ T8144] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 190.529659][ T5850] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 190.552436][ T8144] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e0a8, mo2=0002] [ 190.628418][ T8144] System zones: 1-12 [ 190.638595][ T8144] EXT4-fs (loop1): orphan cleanup on readonly fs [ 190.664515][ T8144] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.563: bg 0: block 361: padding at end of block bitmap is not set [ 190.751832][ T5850] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 190.752431][ T8144] EXT4-fs (loop1): Remounting filesystem read-only [ 190.767794][ T5850] usb 7-1: config 0 has no interface number 0 [ 190.777612][ T8144] EXT4-fs (loop1): 1 truncate cleaned up [ 190.790584][ T5850] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.803312][ T8144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 190.820862][ T5850] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 190.843856][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.864439][ T5850] usb 7-1: Product: syz [ 190.868657][ T5850] usb 7-1: Manufacturer: syz [ 190.899585][ T5850] usb 7-1: SerialNumber: syz [ 190.927862][ T5850] usb 7-1: config 0 descriptor?? [ 190.977050][ T5850] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 190.984605][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 191.068017][ T8160] pci 0000:00:07.0: [1af4:1005] type 00 class 0x00ff00 [ 191.107903][ T8160] pci 0000:00:07.0: BAR 0 [io 0xc0a0-0xc0bf] [ 191.124308][ T8160] pci 0000:00:07.0: BAR 1 [mem 0xfe802000-0xfe80203f] [ 191.350190][ T8160] pci 0000:00:07.0: BAR 1 [mem 0xc0000000-0xc000003f]: assigned [ 191.368226][ T8160] pci 0000:00:07.0: BAR 0 [io 0x1000-0x101f]: assigned [ 191.428595][ T8160] virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver [ 191.564909][ T8170] loop1: detected capacity change from 0 to 128 [ 191.579058][ T8170] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.679471][ T987] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.833567][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 191.848204][ T5850] usb 7-1: USB disconnect, device number 7 [ 191.864968][ T5850] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 192.224346][ T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 192.252007][ T8187] loop7: detected capacity change from 0 to 8192 [ 192.428728][ T23] usb 2-1: config 0 has no interfaces? [ 192.451678][ T23] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 192.465931][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.486801][ T23] usb 2-1: config 0 descriptor?? [ 192.507884][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.747574][ T23] usb 2-1: USB disconnect, device number 15 [ 192.909099][ T8208] FAULT_INJECTION: forcing a failure. [ 192.909099][ T8208] name failslab, interval 1, probability 0, space 0, times 0 [ 192.930867][ T8208] CPU: 1 PID: 8208 Comm: syz.6.582 Not tainted syzkaller #0 [ 192.938203][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.948378][ T8208] Call Trace: [ 192.951679][ T8208] [ 192.954639][ T8208] dump_stack_lvl+0x18c/0x250 [ 192.959373][ T8208] ? show_regs_print_info+0x20/0x20 [ 192.964614][ T8208] ? load_image+0x420/0x420 [ 192.969174][ T8208] ? __might_sleep+0xe0/0xe0 [ 192.973815][ T8208] ? __lock_acquire+0x7d80/0x7d80 [ 192.978888][ T8208] ? percpu_ref_put+0x12/0x100 [ 192.983697][ T8208] should_fail_ex+0x394/0x4c0 [ 192.988435][ T8208] should_failslab+0x9/0x20 [ 192.993006][ T8208] slab_pre_alloc_hook+0x59/0x300 [ 192.998099][ T8208] kmem_cache_alloc+0x5a/0x2c0 [ 193.002901][ T8208] ? vm_area_dup+0x61/0x270 [ 193.007443][ T8208] vm_area_dup+0x61/0x270 [ 193.011899][ T8208] __split_vma+0x1a8/0xc20 [ 193.016367][ T8208] ? mmap_write_unlock+0x160/0x160 [ 193.021514][ T8208] ? split_vma+0x8f/0x110 [ 193.025870][ T8208] mlock_fixup+0x415/0x550 [ 193.030341][ T8208] apply_vma_lock_flags+0x2a7/0x3c0 [ 193.035566][ T8208] ? __lock_acquire+0x7d80/0x7d80 [ 193.040615][ T8208] ? do_mlock+0x740/0x740 [ 193.044967][ T8208] ? down_write_killable+0x181/0x230 [ 193.050304][ T8208] do_mlock+0x4be/0x740 [ 193.054486][ T8208] ? lru_gen_add_folio+0xe00/0xe00 [ 193.059614][ T8208] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 193.065632][ T8208] ? lock_chain_count+0x20/0x20 [ 193.070546][ T8208] ? syscall_enter_from_user_mode+0x25/0x80 [ 193.076469][ T8208] __x64_sys_mlock+0x60/0x70 [ 193.081091][ T8208] do_syscall_64+0x55/0xb0 [ 193.085541][ T8208] ? clear_bhb_loop+0x40/0x90 [ 193.090263][ T8208] ? clear_bhb_loop+0x40/0x90 [ 193.094975][ T8208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.100917][ T8208] RIP: 0033:0x7fa39f39e159 [ 193.105357][ T8208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.124985][ T8208] RSP: 002b:00007fa3a0197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 193.133432][ T8208] RAX: ffffffffffffffda RBX: 00007fa39f625fa0 RCX: 00007fa39f39e159 [ 193.141427][ T8208] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000701000 [ 193.149422][ T8208] RBP: 00007fa39f43506b R08: 0000000000000000 R09: 0000000000000000 [ 193.157412][ T8208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.165390][ T8208] R13: 00007fa39f626038 R14: 00007fa39f625fa0 R15: 00007ffed0463828 [ 193.173395][ T8208] [ 193.298396][ T8212] netlink: 24 bytes leftover after parsing attributes in process `syz.5.583'. [ 193.307511][ T8212] netlink: 24 bytes leftover after parsing attributes in process `syz.5.583'. [ 193.375102][ T8214] loop6: detected capacity change from 0 to 16 [ 193.433698][ T8214] erofs: (device loop6): mounted with root inode @ nid 36. [ 193.784493][ T8221] bridge_slave_0: left allmulticast mode [ 193.802352][ T8225] loop7: detected capacity change from 0 to 256 [ 193.823741][ T8225] FAT-fs (loop7): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿ" or missing value [ 193.835349][ T8221] bridge_slave_0: left promiscuous mode [ 193.880007][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.943463][ T8221] bridge_slave_1: left allmulticast mode [ 193.979627][ T8221] bridge_slave_1: left promiscuous mode [ 194.021062][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.048286][ T8221] bond0: (slave bond_slave_0): Releasing backup interface [ 194.125435][ T8221] bond0: (slave bond_slave_1): Releasing backup interface [ 194.188422][ T8234] loop7: detected capacity change from 0 to 2048 [ 194.212316][ T8221] team0: Port device team_slave_0 removed [ 194.218557][ T8234] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 194.259145][ T8234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.296811][ T8221] team0: Port device team_slave_1 removed [ 194.308152][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.318255][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.345855][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.367759][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.406004][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.446254][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.918854][ T8254] loop1: detected capacity change from 0 to 128 [ 194.964106][ T8254] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 194.990541][ T8254] System zones: 1-3, 19-19, 35-36 [ 195.007207][ T8254] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 195.028463][ T8254] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.075183][ T8254] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 195.145751][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.159690][ T5815] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 195.384399][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.424455][ T5815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.457925][ T5815] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.495102][ T5815] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.532615][ T5815] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.555459][ T8270] loop6: detected capacity change from 0 to 2048 [ 195.578818][ T5815] usb 8-1: config 0 descriptor?? [ 195.627171][ T8270] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 195.676193][ T8270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.792140][ T8248] loop5: detected capacity change from 0 to 40427 [ 195.818044][ T8248] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 195.848389][ T8248] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 195.849868][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 195.867835][ T8248] F2FS-fs (loop5): invalid crc value [ 196.046789][ T5815] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 196.108986][ T5815] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 196.117506][ T23] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 196.147177][ T8248] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 196.159379][ T8248] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 196.177517][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.320842][ T28] audit: type=1800 audit(1789674617.203:35): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.595" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 196.386828][ T8282] loop6: detected capacity change from 0 to 8192 [ 196.413466][ C1] dln2 2-1:1.0: size mismatch: handle 1 cmd 30 echo 0 size 14 actual 13 [ 196.631782][ T23] dln2 2-1:1.0: failed to initialize hardware [ 196.670560][ T23] dln2: probe of 2-1:1.0 failed with error -110 [ 196.808086][ T6625] syz-executor: attempt to access beyond end of device [ 196.808086][ T6625] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.860882][ T6625] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 197.483385][ C0] plantronics 0003:047F:FFFF.0009: usb_submit_urb(ctrl) failed: -1 [ 197.801923][ T8318] loop5: detected capacity change from 0 to 32768 [ 197.865906][ T8318] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 197.934228][ T8318] XFS (loop5): Ending clean mount [ 197.954462][ T8321] loop6: detected capacity change from 0 to 32768 [ 198.002513][ T8321] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 198.018354][ T28] audit: type=1800 audit(1789674618.903:36): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.604" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 198.170383][ T8321] syz.6.607 (8321) used greatest stack depth: 18776 bytes left [ 198.307264][ T6822] ocfs2: Unmounting device (7,6) on (node local) [ 198.352050][ T27] usb 8-1: USB disconnect, device number 5 [ 198.613649][ T6625] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 198.643440][ T27] usb 2-1: USB disconnect, device number 16 [ 198.735124][ T8344] input: syz0 as /devices/virtual/input/input12 [ 199.251466][ T8356] loop1: detected capacity change from 0 to 1024 [ 199.282535][ T8354] loop7: detected capacity change from 0 to 2048 [ 199.365469][ T8356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 199.417245][ T8356] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.439884][ T8364] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.562484][ T8356] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.617: lblock 3 mapped to illegal pblock 3 (length 3) [ 199.643448][ T8356] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 199.669592][ T8356] EXT4-fs (loop1): This should not happen!! Data will be lost [ 199.669592][ T8356] [ 199.701485][ T8356] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.617: lblock 0 mapped to illegal pblock 0 (length 3) [ 199.783427][ T8356] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 199.805087][ T8356] EXT4-fs (loop1): This should not happen!! Data will be lost [ 199.805087][ T8356] [ 199.817696][ T8343] loop6: detected capacity change from 0 to 40427 [ 199.837326][ T8354] NILFS (loop7): error -2 truncating bmap (ino=16) [ 199.852269][ T8356] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.617: bg 0: block 112: padding at end of block bitmap is not set [ 199.885399][ T8343] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 199.898807][ T8343] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 199.914148][ T8356] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28 [ 199.928455][ T8356] EXT4-fs (loop1): This should not happen!! Data will be lost [ 199.928455][ T8356] [ 199.938898][ T8356] EXT4-fs (loop1): Total free blocks count 0 [ 199.963784][ T8343] F2FS-fs (loop6): invalid crc value [ 199.969143][ T8343] F2FS-fs (loop6): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 199.989701][ T8356] EXT4-fs (loop1): Free/Dirty block details [ 199.997762][ T8356] EXT4-fs (loop1): free_blocks=0 [ 200.010785][ T8343] F2FS-fs (loop6): Found nat_bits in checkpoint [ 200.105892][ T8364] NILFS (loop7): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 200.149794][ T8364] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=16) [ 200.186515][ T987] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 7: comm kworker/u4:6: lblock 7 mapped to illegal pblock 7 (length 9) [ 200.206205][ T8364] Remounting filesystem read-only [ 200.221218][ T11] NILFS (loop7): discard dirty page: offset=4096, ino=6 [ 200.238696][ T11] NILFS (loop7): discard dirty block: blocknr=39, size=1024 [ 200.255564][ T8343] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 200.259054][ T11] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.291128][ T11] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.300026][ T8343] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 200.335709][ T11] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.379684][ T11] NILFS (loop7): discard dirty page: offset=0, ino=5 [ 200.386419][ T11] NILFS (loop7): discard dirty block: blocknr=41, size=1024 [ 200.425688][ T11] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.443493][ T11] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.466985][ T8379] CIFS: Attempting to mount //127.0.0.1/share [ 200.491907][ T11] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.503271][ T8379] CIFS: VFS: Error connecting to socket. Aborting operation. [ 200.523811][ T6965] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 200.526008][ T8379] CIFS: VFS: cifs_mount failed w/return code = -101 [ 200.563698][ T6965] NILFS (loop7): discard dirty page: offset=0, ino=3 [ 200.579607][ T6965] NILFS (loop7): discard dirty block: blocknr=42, size=1024 [ 200.586962][ T6965] NILFS (loop7): discard dirty block: blocknr=43, size=1024 [ 200.619851][ T6965] NILFS (loop7): discard dirty block: blocknr=44, size=1024 [ 200.628912][ T6822] syz-executor: attempt to access beyond end of device [ 200.628912][ T6822] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 200.657052][ T6965] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.691364][ T6822] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 200.839147][ T8389] loop5: detected capacity change from 0 to 2048 [ 200.946163][ T8389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.157237][ T6625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.717970][ T8413] netlink: 104 bytes leftover after parsing attributes in process `syz.5.630'. [ 202.169597][ T8431] syz_tun: entered allmulticast mode [ 202.236132][ T8431] pimreg: entered allmulticast mode [ 202.261534][ T8404] loop1: detected capacity change from 0 to 40427 [ 202.274510][ T8404] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 202.296309][ T8404] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 202.336259][ T8404] F2FS-fs (loop1): invalid crc value [ 202.743572][ T8404] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 202.759618][ T8404] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 202.954666][ T28] audit: type=1800 audit(1789674623.843:37): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.628" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 203.391340][ T5777] syz-executor: attempt to access beyond end of device [ 203.391340][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.431737][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 203.883240][ T8458] loop7: detected capacity change from 0 to 32768 [ 203.993241][ T8458] JBD2: Ignoring recovery information on journal [ 204.194822][ T8458] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 204.821804][ T8509] loop5: detected capacity change from 0 to 256 [ 204.911206][ T6965] ocfs2: Unmounting device (7,7) on (node local) [ 205.152768][ T8519] loop6: detected capacity change from 0 to 64 [ 205.270368][ T8524] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.662'. [ 205.503777][ T28] audit: type=1800 audit(1789674626.393:38): pid=8530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.664" name="nofua" dev="configfs" ino=16320 res=0 errno=0 [ 206.619672][ T5780] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.675970][ T8552] loop7: detected capacity change from 0 to 32768 [ 206.842565][ T8562] loop1: detected capacity change from 0 to 32768 [ 206.968031][ T8562] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 207.005552][ T8584] loop7: detected capacity change from 0 to 256 [ 207.479162][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 209.105796][ T8624] loop7: detected capacity change from 0 to 40427 [ 209.161611][ T8624] F2FS-fs (loop7): invalid crc value [ 209.171796][ T8624] F2FS-fs (loop7): Found nat_bits in checkpoint [ 209.310954][ T8624] F2FS-fs (loop7): Start checkpoint disabled! [ 209.335979][ T8656] sctp: [Deprecated]: syz.5.701 (pid 8656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.335979][ T8656] Use struct sctp_sack_info instead [ 209.410713][ T8624] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 209.547176][ T8624] process 'syz.7.690' launched './file0' with NULL argv: empty string added [ 209.764608][ T8669] loop1: detected capacity change from 0 to 128 [ 209.815939][ T8669] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.858836][ T8669] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.069642][ T2990] kworker/u4:13: attempt to access beyond end of device [ 210.069642][ T2990] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 210.106386][ T2990] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 210.134009][ T2990] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 210.168884][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.176684][ T8701] loop5: detected capacity change from 0 to 256 [ 211.472855][ T8711] sd 0:0:1:0: PR command failed: 1026 [ 211.487790][ T8711] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 211.504953][ T8711] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 211.709750][ T8719] loop5: detected capacity change from 0 to 512 [ 211.716961][ T8719] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.785221][ T8719] EXT4-fs: Ignoring removed nobh option [ 211.839446][ T8719] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 211.904970][ T8719] EXT4-fs (loop5): 1 truncate cleaned up [ 211.922240][ T8719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.202570][ T6625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.726507][ T8745] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 213.677434][ T8789] Invalid argument reading file caps for ./file0 [ 213.879879][ T5846] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 214.083330][ T8803] netlink: 'syz.1.741': attribute type 29 has an invalid length. [ 214.095145][ T5846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.112906][ T8803] netlink: 'syz.1.741': attribute type 29 has an invalid length. [ 214.127580][ T5846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.148142][ T5846] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.182966][ T5846] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.211121][ T8806] netlink: 'syz.1.741': attribute type 29 has an invalid length. [ 214.230315][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.263713][ T5846] usb 7-1: config 0 descriptor?? [ 214.278366][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.286074][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.336452][ T8808] netlink: 'syz.1.741': attribute type 29 has an invalid length. [ 214.353992][ T8810] FAULT_INJECTION: forcing a failure. [ 214.353992][ T8810] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 214.384736][ T8803] netlink: 'syz.1.741': attribute type 29 has an invalid length. [ 214.397275][ T8810] CPU: 0 PID: 8810 Comm: syz.7.744 Not tainted syzkaller #0 [ 214.404698][ T8810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.414781][ T8810] Call Trace: [ 214.418094][ T8810] [ 214.421067][ T8810] dump_stack_lvl+0x18c/0x250 [ 214.425800][ T8810] ? show_regs_print_info+0x20/0x20 [ 214.431052][ T8810] ? load_image+0x420/0x420 [ 214.435609][ T8810] ? __lock_acquire+0x7d80/0x7d80 [ 214.440682][ T8810] should_fail_ex+0x394/0x4c0 [ 214.445403][ T8810] prepare_alloc_pages+0x1e1/0x5b0 [ 214.450555][ T8810] __alloc_pages+0x134/0x460 [ 214.455176][ T8810] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.461374][ T8810] ? zone_statistics+0x170/0x170 [ 214.466453][ T8810] ? alloc_pages+0x4e1/0x740 [ 214.471112][ T8810] kimage_alloc_pages+0xc5/0x330 [ 214.476115][ T8810] kimage_alloc_control_pages+0x483/0xb30 [ 214.481902][ T8810] ? kimage_free_pages+0x1d0/0x1d0 [ 214.487079][ T8810] do_kexec_load+0x398/0x6d0 [ 214.491744][ T8810] __se_sys_kexec_load+0x134/0x160 [ 214.496939][ T8810] do_syscall_64+0x55/0xb0 [ 214.501393][ T8810] ? clear_bhb_loop+0x40/0x90 [ 214.506119][ T8810] ? clear_bhb_loop+0x40/0x90 [ 214.510843][ T8810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.516762][ T8810] RIP: 0033:0x7ff1bff9e159 [ 214.521209][ T8810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.540851][ T8810] RSP: 002b:00007ff1c0e09028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 214.549306][ T8810] RAX: ffffffffffffffda RBX: 00007ff1c0225fa0 RCX: 00007ff1bff9e159 [ 214.557295][ T8810] RDX: 0000200000000580 RSI: 0000000000000001 RDI: 0000000000000000 [ 214.565292][ T8810] RBP: 00007ff1c003506b R08: 0000000000000000 R09: 0000000000000000 [ 214.573303][ T8810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.581315][ T8810] R13: 00007ff1c0226038 R14: 00007ff1c0225fa0 R15: 00007ffd13de0098 [ 214.589319][ T8810] [ 214.639036][ T8810] kexec: Could not allocate swap buffer [ 214.832155][ T5846] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 214.890107][ T5846] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 215.197530][ T8] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 215.404376][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.429780][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 215.506710][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 215.550662][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 215.558719][ T8] usb 2-1: SerialNumber: syz [ 215.591596][ T8] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 215.628681][ T8] usb-storage 2-1:1.0: USB Mass Storage device detected [ 215.669155][ T8] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 215.707764][ T8] scsi host1: usb-storage 2-1:1.0 [ 216.230373][ C1] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 216.999975][ T56] usb 2-1: USB disconnect, device number 17 [ 217.070735][ T9] usb 7-1: USB disconnect, device number 8 [ 217.279591][ T5846] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 217.499781][ T5846] usb 8-1: Using ep0 maxpacket: 16 [ 217.511060][ T5846] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.536507][ T5846] usb 8-1: config 0 interface 0 has no altsetting 0 [ 217.568162][ T5846] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 217.590050][ T5846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.619813][ T5846] usb 8-1: config 0 descriptor?? [ 218.041980][ T8874] raw-gadget.0 gadget.7: fail, usb_ep_set_halt returned -11 [ 218.084718][ T5846] usbhid 8-1:0.0: can't add hid device: -71 [ 218.107387][ T5846] usbhid: probe of 8-1:0.0 failed with error -71 [ 218.131759][ T5846] usb 8-1: USB disconnect, device number 6 [ 218.149717][ T5814] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 218.347125][ T5814] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 218.367318][ T5814] usb 7-1: config 0 interface 0 has no altsetting 0 [ 218.391517][ T5814] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.417793][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 218.431066][ T5814] usb 7-1: Product: syz [ 218.435287][ T5814] usb 7-1: Manufacturer: syz [ 218.446177][ T5814] usb 7-1: SerialNumber: syz [ 218.465577][ T5814] usb 7-1: config 0 descriptor?? [ 218.490387][ T5814] usb 7-1: selecting invalid altsetting 0 [ 218.591347][ T8939] loop5: detected capacity change from 0 to 8 [ 218.714301][ T8939] SQUASHFS error: Failed to read block 0x4de: -5 [ 218.766359][ T8939] SQUASHFS error: Failed to read block 0x4de: -5 [ 218.785702][ T28] audit: type=1800 audit(1789674640.670:39): pid=8939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.770" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 218.874429][ T8943] raw_sendmsg: syz.7.771 forgot to set AF_INET. Fix it! [ 218.902584][ T5814] usb 7-1: USB disconnect, device number 9 [ 219.216675][ T8936] loop1: detected capacity change from 0 to 32768 [ 219.302844][ T8936] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 219.429595][ T8936] XFS (loop1): Ending clean mount [ 219.519091][ T28] audit: type=1800 audit(1789674641.390:40): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.768" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 219.723063][ T5777] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 220.258639][ T8970] loop5: detected capacity change from 0 to 32768 [ 220.443600][ T8988] input: syz0 as /devices/virtual/input/input13 [ 220.889073][ T8981] loop7: detected capacity change from 0 to 32768 [ 220.980212][ T8981] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 221.186889][ T8981] XFS (loop7): Ending clean mount [ 221.268177][ T8994] loop1: detected capacity change from 0 to 32768 [ 221.305530][ T8981] XFS (loop7): Quotacheck needed: Please wait. [ 221.366347][ T8994] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.379704][ T8994] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 221.408839][ T8994] BTRFS info (device loop1): setting nodatasum [ 221.442843][ T8994] BTRFS info (device loop1): force zlib compression, level 3 [ 221.488645][ T8994] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 221.546309][ T8994] BTRFS info (device loop1): use lzo compression, level 0 [ 221.566242][ T8981] XFS (loop7): Quotacheck: Done. [ 221.590097][ T8994] BTRFS info (device loop1): turning on flush-on-commit [ 221.597105][ T8994] BTRFS info (device loop1): enabling auto defrag [ 221.657034][ T8994] BTRFS info (device loop1): max_inline at 4096 [ 221.666906][ T28] audit: type=1800 audit(1789674643.550:41): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.780" name="bus" dev="loop7" ino=4428 res=0 errno=0 [ 221.682276][ T8994] BTRFS info (device loop1): using free space tree [ 221.852079][ T9022] loop5: detected capacity change from 0 to 4096 [ 221.890407][ T8994] BTRFS info (device loop1): enabling ssd optimizations [ 221.941227][ T6965] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.006904][ T28] audit: type=1800 audit(1789674643.890:42): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.782" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 222.059302][ T28] audit: type=1800 audit(1789674643.920:43): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.782" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 222.110867][ T9022] ntfs3: loop5: ino=19, mi_enum_attr [ 222.130120][ T9022] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 222.232108][ T5777] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.648061][ T9055] loop5: detected capacity change from 0 to 512 [ 222.656720][ T9054] netlink: 36 bytes leftover after parsing attributes in process `syz.7.789'. [ 222.781078][ T9055] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.792: Unrecognised inode hash code 255 [ 222.857172][ T9055] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.792: Corrupt directory, running e2fsck is recommended [ 222.880365][ T9055] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 222.888726][ T9055] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.792: corrupted in-inode xattr: invalid ea_ino [ 222.969793][ T9055] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.792: couldn't read orphan inode 15 (err -117) [ 223.036130][ T9055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.135625][ T9055] EXT4-fs error (device loop5): __ext4_remount:6756: comm syz.5.792: Abort forced by user [ 223.204477][ T9055] EXT4-fs (loop5): Remounting filesystem read-only [ 223.230586][ T9055] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 223.295316][ T9055] EXT4-fs warning (device loop5): ext4_empty_dir:3149: inode #2: comm syz.5.792: directory missing '.' [ 223.354708][ T9073] netlink: 20 bytes leftover after parsing attributes in process `syz.7.795'. [ 223.365824][ T9075] sctp: [Deprecated]: syz.1.796 (pid 9075) Use of int in max_burst socket option deprecated. [ 223.365824][ T9075] Use struct sctp_assoc_value instead [ 223.406051][ T6625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.791111][ T9085] loop1: detected capacity change from 0 to 4096 [ 223.864407][ T9085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.948457][ T9094] loop6: detected capacity change from 0 to 512 [ 224.004300][ T9094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.311188][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.356426][ T6822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.500615][ T9110] syzkaller1: entered promiscuous mode [ 224.506987][ T9110] syzkaller1: entered allmulticast mode [ 224.875274][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029f7e000: rx timeout, send abort [ 225.038014][ T9108] loop7: detected capacity change from 0 to 32768 [ 225.111859][ T9124] loop5: detected capacity change from 0 to 8192 [ 225.134924][ T9124] REISERFS warning (device loop5): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 225.153601][ T9108] JBD2: Ignoring recovery information on journal [ 225.279457][ T9108] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 225.375846][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029f7e400: rx timeout, send abort [ 225.384310][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029f7e000: abort rx timeout. Force session deactivation [ 225.753387][ T9139] loop6: detected capacity change from 0 to 512 [ 225.825375][ T9139] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 225.839863][ T6965] ocfs2: Unmounting device (7,7) on (node local) [ 225.884198][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029f7e400: abort rx timeout. Force session deactivation [ 225.917562][ T9139] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.810: bad orphan inode 131083 [ 226.008405][ T9139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.120847][ T9139] fscrypt (loop6, inode 18): Mutually exclusive encryption flags (0x0c) [ 226.252857][ T6822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.283724][ T9151] loop5: detected capacity change from 0 to 512 [ 226.332643][ T9151] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 226.364041][ T9151] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 226.413963][ T9151] System zones: 1-12 [ 226.441669][ T9151] EXT4-fs (loop5): 1 truncate cleaned up [ 226.449002][ T9151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.515143][ T9151] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 226.815629][ T6625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.228440][ T9181] loop6: detected capacity change from 0 to 2048 [ 227.318993][ T9181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.480149][ T28] audit: type=1800 audit(1789674649.330:44): pid=9181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.821" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 227.492126][ T9163] loop7: detected capacity change from 0 to 131072 [ 227.549743][ T9163] F2FS-fs (loop7): invalid crc value [ 227.574097][ T9163] F2FS-fs (loop7): Found nat_bits in checkpoint [ 227.626164][ T9163] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 227.783265][ T6822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.020457][ T27] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 228.234317][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.263346][ T27] usb 6-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x14, skipping [ 228.310045][ T27] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.355970][ T27] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 228.385553][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.408324][ T27] usb 6-1: Product: syz [ 228.427404][ T27] usb 6-1: Manufacturer: syz [ 228.438877][ T27] usb 6-1: SerialNumber: syz [ 228.478489][ T27] cdc_subset: probe of 6-1:1.0 failed with error -22 [ 228.491512][ T27] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 228.501275][ T27] cdc_ncm 6-1:1.0: bind() failure [ 228.510651][ T27] cdc_subset: probe of 6-1:1.1 failed with error -22 [ 228.517879][ T27] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 228.542086][ T27] cdc_ncm 6-1:1.1: bind() failure [ 228.734710][ T23] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 228.762294][ T5850] usb 6-1: USB disconnect, device number 9 [ 228.941088][ T23] usb 7-1: Using ep0 maxpacket: 16 [ 228.951965][ T23] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 228.977176][ T23] usb 7-1: config 0 has no interface number 0 [ 228.995969][ T23] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 229.021589][ T23] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 229.051499][ T23] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 229.080422][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.099055][ T23] usb 7-1: Product: syz [ 229.104763][ T23] usb 7-1: Manufacturer: syz [ 229.128915][ T23] usb 7-1: SerialNumber: syz [ 229.150765][ T23] usb 7-1: config 0 descriptor?? [ 229.172861][ T9211] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 229.200705][ T9211] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 229.476682][ T9211] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 229.566497][ T9211] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 229.742607][ T9222] loop1: detected capacity change from 0 to 32768 [ 229.819224][ T9235] loop5: detected capacity change from 0 to 16 [ 229.870330][ T9235] erofs: (device loop5): mounted with root inode @ nid 36. [ 230.402225][ T9245] loop5: detected capacity change from 0 to 512 [ 230.448146][ T9245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.463109][ T23] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 230.509237][ T9245] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.515041][ T9245] EXT4-fs warning (device loop5): verify_group_input:169: Last group not full [ 230.518087][ T23] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 230.561701][ T23] asix: probe of 7-1:0.34 failed with error -71 [ 230.600853][ T23] usb 7-1: USB disconnect, device number 10 [ 230.696178][ T6625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.865894][ T9259] FAULT_INJECTION: forcing a failure. [ 230.865894][ T9259] name failslab, interval 1, probability 0, space 0, times 0 [ 230.889561][ T9259] CPU: 1 PID: 9259 Comm: syz.5.834 Not tainted syzkaller #0 [ 230.896901][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.907023][ T9259] Call Trace: [ 230.910330][ T9259] [ 230.911235][ T9257] loop7: detected capacity change from 0 to 4096 [ 230.913279][ T9259] dump_stack_lvl+0x18c/0x250 [ 230.924320][ T9259] ? show_regs_print_info+0x20/0x20 [ 230.929556][ T9259] ? load_image+0x420/0x420 [ 230.934109][ T9259] ? __might_sleep+0xe0/0xe0 [ 230.938769][ T9259] ? __lock_acquire+0x7d80/0x7d80 [ 230.942263][ T9257] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 230.943826][ T9259] should_fail_ex+0x394/0x4c0 [ 230.968976][ T9259] should_failslab+0x9/0x20 [ 230.973527][ T9259] slab_pre_alloc_hook+0x59/0x300 [ 230.978610][ T9259] ? __se_sys_fspick+0x206/0x3b0 [ 230.983592][ T9259] __kmem_cache_alloc_node+0x53/0x250 [ 230.989026][ T9259] ? __se_sys_fspick+0x206/0x3b0 [ 230.994018][ T9259] kmalloc_trace+0x2a/0xe0 [ 230.998507][ T9259] __se_sys_fspick+0x206/0x3b0 [ 231.003326][ T9259] ? lock_chain_count+0x20/0x20 [ 231.008230][ T9259] ? __x64_sys_fspick+0x80/0x80 [ 231.013141][ T9259] ? lockdep_hardirqs_on+0x98/0x150 [ 231.018391][ T9259] do_syscall_64+0x55/0xb0 [ 231.022850][ T9259] ? clear_bhb_loop+0x40/0x90 [ 231.027580][ T9259] ? clear_bhb_loop+0x40/0x90 [ 231.032312][ T9259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.038268][ T9259] RIP: 0033:0x7f147bd9e159 [ 231.042720][ T9259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.062365][ T9259] RSP: 002b:00007f147cc7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 231.070810][ T9259] RAX: ffffffffffffffda RBX: 00007f147c025fa0 RCX: 00007f147bd9e159 [ 231.078800][ T9259] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 231.086790][ T9259] RBP: 00007f147be3506b R08: 0000000000000000 R09: 0000000000000000 [ 231.094799][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.102801][ T9259] R13: 00007f147c026038 R14: 00007f147c025fa0 R15: 00007fff068f21c8 [ 231.110800][ T9259] [ 231.160727][ T9257] ntfs: (device loop7): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 231.216075][ T9263] loop1: detected capacity change from 0 to 1024 [ 231.256682][ T9257] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 231.308463][ T9257] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 231.345858][ T9263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.370177][ T9257] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 231.379024][ T9257] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 231.445691][ T9257] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 231.454527][ T9257] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 231.475336][ T9257] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 231.504353][ T9257] ntfs: volume version 3.1. [ 231.721792][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.094783][ T9287] loop7: detected capacity change from 0 to 512 [ 232.117168][ T9287] EXT4-fs: Ignoring removed orlov option [ 232.133236][ T9287] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.154548][ T9287] EXT4-fs: inline encryption not supported [ 232.216577][ T9287] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.843: corrupted in-inode xattr: e_value size too large [ 232.267747][ T9287] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.843: couldn't read orphan inode 15 (err -117) [ 232.315480][ T9287] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.413151][ T9299] loop6: detected capacity change from 0 to 128 [ 232.525767][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.682223][ T9303] loop7: detected capacity change from 0 to 128 [ 232.726578][ T9303] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 232.767056][ T9303] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 233.054180][ T9309] loop5: detected capacity change from 0 to 1024 [ 233.094830][ T8895] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 233.282031][ T5850] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 233.495958][ T5850] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 233.515575][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.544905][ T9330] loop6: detected capacity change from 0 to 256 [ 233.562029][ T5850] usb 2-1: Product: syz [ 233.566281][ T5850] usb 2-1: Manufacturer: syz [ 233.601948][ T5850] usb 2-1: SerialNumber: syz [ 233.723909][ T9330] FAT-fs (loop6): Directory bread(block 64) failed [ 233.735234][ T9330] FAT-fs (loop6): Directory bread(block 65) failed [ 233.765092][ T9330] FAT-fs (loop6): Directory bread(block 66) failed [ 233.788797][ T9330] FAT-fs (loop6): Directory bread(block 67) failed [ 233.802670][ T9330] FAT-fs (loop6): Directory bread(block 68) failed [ 233.812733][ T9330] FAT-fs (loop6): Directory bread(block 69) failed [ 233.841945][ T9330] FAT-fs (loop6): Directory bread(block 70) failed [ 233.848529][ T9330] FAT-fs (loop6): Directory bread(block 71) failed [ 233.875654][ T9330] FAT-fs (loop6): Directory bread(block 72) failed [ 233.896168][ T9330] FAT-fs (loop6): Directory bread(block 73) failed [ 234.024149][ T56] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 234.092075][ T9330] syz.6.855: attempt to access beyond end of device [ 234.092075][ T9330] loop6: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 234.129046][ T9330] syz.6.855: attempt to access beyond end of device [ 234.129046][ T9330] loop6: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 234.227416][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.258067][ T5850] (unnamed net_device) (uninitialized): Assigned a random MAC address: 26:58:92:ba:bd:26 [ 234.270152][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.302530][ T56] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 234.316584][ T5850] rtl8150 2-1:1.0: eth17: rtl8150 is detected [ 234.323157][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.339455][ T5850] usb 2-1: USB disconnect, device number 18 [ 234.349165][ T56] usb 6-1: config 0 descriptor?? [ 234.488194][ T7315] udevd[7315]: setting mode of /dev/bus/usb/002/018 to 020664 failed: No such file or directory [ 234.514931][ T7315] udevd[7315]: setting owner of /dev/bus/usb/002/018 to uid=0, gid=0 failed: No such file or directory [ 234.598621][ T9351] netlink: 428 bytes leftover after parsing attributes in process `syz.7.860'. [ 234.628916][ T9351] netlink: 32 bytes leftover after parsing attributes in process `syz.7.860'. [ 234.786743][ T56] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 234.809047][ T56] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 234.832613][ T56] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.000B/input/input14 [ 234.924435][ T56] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 234.975999][ T9358] loop7: detected capacity change from 0 to 4096 [ 235.031537][ T9358] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 235.064971][ T9358] NILFS (loop7): mounting unchecked fs [ 235.141006][ T23] usb 6-1: USB disconnect, device number 10 [ 235.158811][ T9358] NILFS (loop7): recovery complete [ 235.183029][ T9367] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.227297][ T9363] fido_id[9363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 235.280809][ T5814] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 235.338776][ T9370] loop1: detected capacity change from 0 to 24 [ 235.367135][ T9370] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 235.441755][ T9370] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 235.492300][ T5814] usb 7-1: Using ep0 maxpacket: 32 [ 235.528063][ T5814] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 235.555590][ T5814] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 235.594779][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 235.611674][ T5814] usb 7-1: Product: syz [ 235.629109][ T5814] usb 7-1: Manufacturer: syz [ 235.648844][ T5814] usb 7-1: SerialNumber: syz [ 235.670613][ T5814] usb 7-1: config 0 descriptor?? [ 235.691793][ T9362] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 235.740664][ T5814] hub 7-1:0.0: bad descriptor, ignoring hub [ 235.746666][ T5814] hub: probe of 7-1:0.0 failed with error -5 [ 236.023793][ T9389] bonding: no command found in bonding_masters - use +ifname or -ifname [ 236.364697][ T9408] loop1: detected capacity change from 0 to 512 [ 236.402646][ T9408] FAT-fs (loop1): Directory bread(block 199916) failed [ 236.411089][ T9408] FAT-fs (loop1): Directory bread(block 199917) failed [ 236.419364][ T9408] FAT-fs (loop1): Directory bread(block 199918) failed [ 236.456646][ T9408] FAT-fs (loop1): Directory bread(block 199919) failed [ 236.465072][ T9408] FAT-fs (loop1): Directory bread(block 199920) failed [ 236.472280][ T9408] FAT-fs (loop1): Directory bread(block 199921) failed [ 236.479263][ T9408] FAT-fs (loop1): Directory bread(block 199922) failed [ 236.489358][ T9408] FAT-fs (loop1): Directory bread(block 199923) failed [ 236.526359][ T56] usb 7-1: USB disconnect, device number 11 [ 236.551251][ T9408] FAT-fs (loop1): Directory bread(block 199916) failed [ 236.597832][ T9408] FAT-fs (loop1): Directory bread(block 199917) failed [ 236.739624][ T56] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 236.870575][ T9419] loop5: detected capacity change from 0 to 1024 [ 236.878657][ T9419] EXT4-fs: Ignoring removed orlov option [ 236.885152][ T23] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 236.921581][ T9419] EXT4-fs: test_dummy_encryption requires encrypt feature [ 236.944253][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 236.975110][ T56] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 236.999547][ T56] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 237.023832][ T56] usb 7-1: Product: syz [ 237.028699][ T56] usb 7-1: Manufacturer: syz [ 237.064446][ T56] usb 7-1: SerialNumber: syz [ 237.073467][ T56] usb 7-1: config 0 descriptor?? [ 237.079181][ T9399] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 237.113207][ T23] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.138323][ T56] hub 7-1:0.0: bad descriptor, ignoring hub [ 237.145542][ T23] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 237.150011][ T56] hub: probe of 7-1:0.0 failed with error -5 [ 237.159325][ T23] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 237.175139][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 237.192635][ T23] usb 8-1: SerialNumber: syz [ 237.208450][ T23] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 237.221110][ T9423] vcan0: tx address claim with broadcast sa [ 237.228769][ T23] usb-storage 8-1:1.0: USB Mass Storage device detected [ 237.238739][ T23] usb-storage 8-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 237.253542][ T23] scsi host1: usb-storage 8-1:1.0 [ 237.365364][ T9428] loop1: detected capacity change from 0 to 1024 [ 237.550030][ T56] usb 7-1: USB disconnect, device number 12 [ 237.765557][ T9441] loop5: detected capacity change from 0 to 512 [ 237.782971][ T9441] EXT4-fs (loop5): 1 truncate cleaned up [ 237.809221][ T9441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.839587][ T9441] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.883: bg 0: block 465: padding at end of block bitmap is not set [ 237.860818][ T9441] EXT4-fs (loop5): Remounting filesystem read-only [ 237.918974][ T6625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.103233][ T9450] loop6: detected capacity change from 0 to 256 [ 238.111385][ T9450] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿ" or missing value [ 238.339599][ T56] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 238.545869][ T56] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.559924][ T56] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 238.570137][ T9462] loop1: detected capacity change from 0 to 256 [ 238.577320][ T56] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.587022][ T9462] exfat: Deprecated parameter 'utf8' [ 238.598527][ T9462] exfat: Deprecated parameter 'utf8' [ 238.608690][ T9462] exfat: Deprecated parameter 'utf8' [ 238.618531][ T56] usb 6-1: config 0 interface 0 has no altsetting 0 [ 238.628258][ T56] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 238.638996][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.653900][ T9462] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 238.669113][ T56] usb 6-1: config 0 descriptor?? [ 238.698011][ T9448] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 238.928906][ T9466] loop5: detected capacity change from 0 to 7 [ 238.950053][ T9466] Dev loop5: unable to read RDB block 7 [ 238.956383][ T9466] loop5: unable to read partition table [ 238.966103][ T9466] loop5: partition table beyond EOD, truncated [ 238.973711][ T9466] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.157151][ T56] dragonrise 0003:0079:0006.000C: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.5-1/input0 [ 239.178252][ T9468] tun0: tun_chr_ioctl cmd 2147767511 [ 239.189465][ T56] dragonrise 0003:0079:0006.000C: no inputs found [ 239.195966][ T9468] tun0: tun_chr_ioctl cmd 35108 [ 239.195970][ T56] dragonrise 0003:0079:0006.000C: force feedback init failed [ 239.257430][ T9472] loop7: detected capacity change from 0 to 256 [ 239.371828][ T23] usb 8-1: USB disconnect, device number 7 [ 239.440188][ T56] usb 6-1: USB disconnect, device number 11 [ 239.503395][ T9475] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 239.944034][ T9485] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 240.166794][ T9490] bond1 (unregistering): Released all slaves [ 240.200284][ T9495] netlink: 44 bytes leftover after parsing attributes in process `syz.5.908'. [ 240.483055][ T9501] syzkaller1: entered promiscuous mode [ 240.488797][ T9501] syzkaller1: entered allmulticast mode [ 240.558226][ T9503] set_capacity_and_notify: 1 callbacks suppressed [ 240.558242][ T9503] loop6: detected capacity change from 0 to 128 [ 240.595652][ T9503] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.658592][ T9503] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.747697][ T9499] loop5: detected capacity change from 0 to 32768 [ 240.759717][ T9499] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.910 (9499) [ 240.836281][ T9499] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 240.869258][ T9499] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 240.874328][ T6822] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.920738][ T9499] BTRFS info (device loop5): using free space tree [ 241.161859][ T9499] BTRFS info (device loop5): enabling ssd optimizations [ 241.179664][ T9499] BTRFS info (device loop5): auto enabling async discard [ 241.548510][ T9538] loop1: detected capacity change from 0 to 512 [ 241.564889][ T9538] EXT4-fs: Ignoring removed nobh option [ 241.636572][ T9538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.661880][ T9538] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.784774][ T6625] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.813304][ T8896] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 241.822444][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.913842][ T9544] loop7: detected capacity change from 0 to 2048 [ 241.992120][ T9544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.249620][ T9552] jffs2: notice: (9552) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 242.277149][ T9554] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 242.358797][ T9554] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 174 with error 28 [ 242.375280][ T9554] EXT4-fs (loop7): This should not happen!! Data will be lost [ 242.375280][ T9554] [ 242.436280][ T9554] EXT4-fs (loop7): Total free blocks count 0 [ 242.447222][ T9554] EXT4-fs (loop7): Free/Dirty block details [ 242.454571][ T9554] EXT4-fs (loop7): free_blocks=2415919504 [ 242.499439][ T9560] Invalid argument reading file caps for ./file0 [ 242.525236][ T9554] EXT4-fs (loop7): dirty_blocks=528 [ 242.542635][ T9554] EXT4-fs (loop7): Block reservation details [ 242.548657][ T9554] EXT4-fs (loop7): i_reserved_data_blocks=33 [ 242.609629][ T5850] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 242.625399][ T9562] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 242.675074][ T9564] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 242.706468][ T9564] CIFS mount error: No usable UNC path provided in device string! [ 242.706468][ T9564] [ 242.727928][ T9564] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 242.814128][ T987] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 174 with max blocks 1182 with error 28 [ 242.839552][ T5850] usb 2-1: Using ep0 maxpacket: 16 [ 242.864765][ T5850] usb 2-1: config 0 has no interfaces? [ 242.900471][ T5850] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 242.925248][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.948596][ T5850] usb 2-1: Product: syz [ 242.953049][ T5850] usb 2-1: Manufacturer: syz [ 242.959427][ T5850] usb 2-1: SerialNumber: syz [ 242.985469][ T5850] usb 2-1: config 0 descriptor?? [ 243.219103][ T9575] loop7: detected capacity change from 0 to 256 [ 243.346098][ T56] usb 2-1: USB disconnect, device number 19 [ 243.836734][ T9585] loop7: detected capacity change from 0 to 64 [ 243.863642][ T9586] loop6: detected capacity change from 0 to 256 [ 243.937566][ T9586] exfat: Deprecated parameter 'utf8' [ 243.979839][ T9586] exfat: Deprecated parameter 'utf8' [ 244.020005][ T9586] exfat: Deprecated parameter 'utf8' [ 244.043336][ T9585] hfs: keylen 1794 too large [ 244.110324][ T9585] hfs: keylen 1794 too large [ 244.138154][ T9586] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 244.228201][ T9587] hfs: keylen 1794 too large [ 244.544598][ T2950] hfs: keylen 1794 too large [ 245.528480][ T9601] loop7: detected capacity change from 0 to 2048 [ 245.570934][ T9601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.615700][ T9592] loop1: detected capacity change from 0 to 40427 [ 245.627078][ T9592] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 245.647856][ T9592] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 245.720255][ T9592] F2FS-fs (loop1): invalid crc value [ 245.734478][ T9592] F2FS-fs (loop1): Found nat_bits in checkpoint [ 245.929568][ T9592] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 245.936691][ T9592] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 245.952097][ T9604] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 245.989131][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.7.946'. [ 246.019587][ T9609] netlink: 'syz.7.946': attribute type 3 has an invalid length. [ 246.216067][ T5777] syz-executor: attempt to access beyond end of device [ 246.216067][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 246.264200][ T5777] F2FS-fs (loop1): Remounting filesystem read-only [ 246.380881][ T9615] loop7: detected capacity change from 0 to 1024 [ 246.388582][ T9615] ext4: Unknown parameter 'rootcontext' [ 246.464040][ T5789] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.512536][ T9615] mtrr: base(0x2becfee7ffe61d43000) is not aligned on a size(0x96c076bb000) boundary [ 247.068076][ T9625] loop5: detected capacity change from 0 to 256 [ 247.073894][ T9617] loop6: detected capacity change from 0 to 40427 [ 247.110362][ T9617] F2FS-fs (loop6): invalid crc value [ 247.146571][ T9617] F2FS-fs (loop6): Found nat_bits in checkpoint [ 247.166777][ T9625] exfat: Deprecated parameter 'utf8' [ 247.221028][ T9625] exfat: Deprecated parameter 'utf8' [ 247.226423][ T9625] exfat: Deprecated parameter 'utf8' [ 247.323983][ T9625] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 247.346922][ T9617] F2FS-fs (loop6): Start checkpoint disabled! [ 247.377523][ T9617] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 247.505161][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 247.505176][ T28] audit: type=1800 audit(1789674669.390:45): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.951" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 247.553207][ T9617] syz.6.951: attempt to access beyond end of device [ 247.553207][ T9617] loop6: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 247.583595][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 247.591199][ T9617] syz.6.951: attempt to access beyond end of device [ 247.591199][ T9617] loop6: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 247.701431][ T9617] syz.6.951: attempt to access beyond end of device [ 247.701431][ T9617] loop6: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 247.761526][ T9617] syz.6.951: attempt to access beyond end of device [ 247.761526][ T9617] loop6: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 247.780429][ T9617] syz.6.951: attempt to access beyond end of device [ 247.780429][ T9617] loop6: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 247.846041][ T9617] syz.6.951: attempt to access beyond end of device [ 247.846041][ T9617] loop6: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 248.102700][ T1134] kworker/u4:7: attempt to access beyond end of device [ 248.102700][ T1134] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 248.129689][ T1134] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 248.146884][ T1134] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 249.106249][ T9662] loop6: detected capacity change from 0 to 2048 [ 249.200110][ T9662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.818006][ T9674] loop6: detected capacity change from 0 to 2048 [ 249.846302][ T9675] binder: 9672:9675 ioctl c0306201 0 returned -14 [ 249.864685][ T9674] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.559647][ T5850] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 250.759576][ T5850] usb 6-1: Using ep0 maxpacket: 8 [ 250.797255][ T5850] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.839621][ T5850] usb 6-1: config 0 interface 0 has no altsetting 0 [ 250.846312][ T5850] usb 6-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 250.878355][ T9694] loop1: detected capacity change from 0 to 512 [ 250.899552][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.927377][ T5850] usb 6-1: config 0 descriptor?? [ 251.150542][ T9694] FAT-fs (loop1): error, corrupted file size (i_pos 51, 512) [ 251.196049][ T9694] FAT-fs (loop1): error, invalid FAT chain (i_pos 51, last_block 64) [ 251.408148][ T5850] sony 0003:054C:0002.000D: unknown main item tag 0x3 [ 251.507850][ T5850] sony 0003:054C:0002.000D: No inputs registered, leaving [ 251.569537][ T5850] sony 0003:054C:0002.000D: hidraw0: USB HID v0.00 Joystick [HID 054c:0002] on usb-dummy_hcd.5-1/input0 [ 251.609649][ T5850] sony 0003:054C:0002.000D: failed to claim input [ 251.694264][ T5850] usb 6-1: USB disconnect, device number 12 [ 251.785200][ T9703] fido_id[9703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 251.866837][ T9705] loop7: detected capacity change from 0 to 64 [ 252.155110][ T9711] loop7: detected capacity change from 0 to 1024 [ 252.238594][ T9711] hfsplus: invalid length 32517 has been corrected to 255 [ 252.286074][ T9713] loop6: detected capacity change from 0 to 512 [ 252.335460][ T9713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.412399][ T9713] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.519717][ T9713] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.596085][ T987] hfsplus: b-tree write err: -5, ino 20 [ 252.603879][ T9713] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.985: bg 0: block 217: padding at end of block bitmap is not set [ 252.650762][ T9713] EXT4-fs (loop6): Remounting filesystem read-only [ 252.782789][ T9720] loop7: detected capacity change from 0 to 512 [ 252.809833][ T9720] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 252.830647][ T6822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.851436][ T987] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 252.865698][ T987] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 252.876476][ T9720] EXT4-fs (loop7): 1 truncate cleaned up [ 252.934357][ T9720] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.988417][ T9709] loop1: detected capacity change from 0 to 32768 [ 253.073830][ T9709] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 253.149708][ T9709] XFS (loop1): Mounting V5 filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a in no-recovery mode. Filesystem will be inconsistent. [ 253.311800][ T9720] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 253.399625][ T27] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 253.460005][ T9720] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 253.479648][ T9720] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 253.493385][ T5777] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 253.515400][ T9720] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 253.657539][ T27] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.679519][ T27] usb 6-1: config 0 has no interface number 0 [ 253.687362][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.700328][ T27] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.739280][ T27] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.799555][ T27] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.839967][ T27] usb 6-1: config 0 interface 1 has no altsetting 0 [ 253.846730][ T27] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 253.869667][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.929810][ T27] usb 6-1: config 0 descriptor?? [ 254.389720][ T5850] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 254.568257][ T9748] loop1: detected capacity change from 0 to 1024 [ 254.629584][ T5850] usb 8-1: Using ep0 maxpacket: 8 [ 254.645804][ T5850] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 254.660109][ T5850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.663960][ T27] uclogic 0003:145F:0212.000E: pen parameters not found [ 254.668133][ T5850] usb 8-1: Product: syz [ 254.695005][ T27] uclogic 0003:145F:0212.000E: interface is invalid, ignoring [ 254.744508][ T5850] usb 8-1: Manufacturer: syz [ 254.749167][ T5850] usb 8-1: SerialNumber: syz [ 254.771996][ T5850] usb 8-1: config 0 descriptor?? [ 254.790958][ T5850] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 254.948964][ T5814] usb 6-1: USB disconnect, device number 13 [ 254.966437][ T8894] hfsplus: b-tree write err: -5, ino 3 [ 255.006709][ T5777] hfsplus: node 4:3 still has 1 user(s)! [ 255.156957][ T9752] loop1: detected capacity change from 0 to 2048 [ 255.203032][ T9752] loop1: p3 < > p4 < > [ 255.259705][ T9752] loop1: partition table partially beyond EOD, truncated [ 255.286700][ T9752] loop1: p3 start 4284289 is beyond EOD, truncated [ 255.747287][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.755106][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.134003][ T9754] loop6: detected capacity change from 0 to 131072 [ 256.149026][ T9754] F2FS-fs (loop6): invalid crc value [ 256.177001][ T9754] F2FS-fs (loop6): Found nat_bits in checkpoint [ 256.249719][ T9754] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 256.353922][ T5850] gspca_sonixj: reg_w1 err -71 [ 256.469663][ T5850] sonixj: probe of 8-1:0.0 failed with error -71 [ 256.505785][ T5850] usb 8-1: USB disconnect, device number 8 [ 256.755062][ T9758] loop1: detected capacity change from 0 to 32768 [ 256.793410][ T9758] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.999 (9758) [ 256.870533][ T9758] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 256.899621][ T9758] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 256.935348][ T9758] BTRFS info (device loop1): using free space tree [ 257.171875][ T9758] BTRFS info (device loop1): enabling ssd optimizations [ 257.179619][ T9758] BTRFS info (device loop1): auto enabling async discard [ 257.637507][ T1134] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 257.702928][ T9790] loop5: detected capacity change from 0 to 512 [ 257.757224][ T5777] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 257.763436][ T9790] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.899648][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 258.460894][ T27] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 258.542474][ T27] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.328686][ T9799] loop7: detected capacity change from 0 to 32768 [ 259.407602][ T9799] JBD2: Ignoring recovery information on journal [ 259.592368][ T9799] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 259.756627][ T6965] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 259.803519][ T6965] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 259.834452][ T6965] OCFS2: File system is now read-only. [ 259.849519][ T6965] (syz-executor,6965,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 259.894841][ T6965] (syz-executor,6965,0):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 259.914261][ T6965] (syz-executor,6965,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 259.951969][ T6965] (syz-executor,6965,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 259.980640][ T6965] (syz-executor,6965,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 260.029393][ T9819] loop6: detected capacity change from 0 to 1024 [ 260.045991][ T6965] ocfs2: Unmounting device (7,7) on (node local) [ 260.069732][ T9803] loop5: detected capacity change from 0 to 32768 [ 260.130863][ T9819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.173658][ T9803] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 260.334620][ T6822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.438185][ T9803] XFS (loop5): Ending clean mount [ 260.458806][ T9834] loop7: detected capacity change from 0 to 1024 [ 260.471284][ T9834] EXT4-fs: Ignoring removed oldalloc option [ 260.488601][ T9834] EXT4-fs: Ignoring removed bh option [ 260.537560][ T9834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 260.605375][ T9834] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.778731][ T9834] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.1014: bg 0: block 112: padding at end of block bitmap is not set [ 260.822385][ T9834] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 260.824607][ T6625] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 260.858827][ T9834] EXT4-fs (loop7): This should not happen!! Data will be lost [ 260.858827][ T9834] [ 260.892692][ T9834] EXT4-fs (loop7): Total free blocks count 0 [ 260.898878][ T9834] EXT4-fs (loop7): Free/Dirty block details [ 260.908954][ T9834] EXT4-fs (loop7): free_blocks=0 [ 260.914972][ T9834] EXT4-fs (loop7): dirty_blocks=80 [ 260.920646][ T9834] EXT4-fs (loop7): Block reservation details [ 260.926776][ T9834] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 261.062451][ T6965] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 261.625335][ T9859] loop1: detected capacity change from 0 to 256 [ 261.672284][ T9859] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 262.144555][ T9876] loop7: detected capacity change from 0 to 4096 [ 262.237088][ T9876] ntfs3: loop7: ino=b, Correct links count -> 1. [ 262.255525][ T9876] ntfs3: loop7: ino=18, mi_enum_attr [ 262.268480][ T9876] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 262.576137][ T9872] loop1: detected capacity change from 0 to 32768 [ 262.613314][ T9872] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1032 (9872) [ 262.663793][ T9872] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 262.715329][ T9872] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 262.738201][ T9872] BTRFS info (device loop1): force clearing of disk cache [ 262.753213][ T9872] BTRFS info (device loop1): use zlib compression, level 3 [ 262.762852][ T9872] BTRFS info (device loop1): enabling ssd optimizations [ 262.772376][ T9872] BTRFS info (device loop1): using spread ssd allocation scheme [ 262.811996][ T9872] BTRFS info (device loop1): using free space tree [ 263.031560][ T9872] BTRFS info (device loop1): auto enabling async discard [ 263.086375][ T9872] BTRFS info (device loop1): rebuilding free space tree [ 263.132356][ T9872] BTRFS info (device loop1): checking UUID tree [ 263.444829][ T5777] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 263.892126][ T9917] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.1045'. [ 263.936745][ T9920] loop1: detected capacity change from 0 to 16 [ 263.943140][ T9917] netlink: 6332 bytes leftover after parsing attributes in process `syz.6.1045'. [ 263.989090][ T9921] loop5: detected capacity change from 0 to 1024 [ 263.996009][ T9920] erofs: (device loop1): mounted with root inode @ nid 36. [ 264.078500][ T9920] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 65535 @ nid 46 [ 264.192899][ T9921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.240623][ T9927] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 264.464347][ T9932] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1050'. [ 264.720905][ T6625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.970134][ T5850] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 265.159685][ T5850] usb 7-1: Using ep0 maxpacket: 32 [ 265.173302][ T5850] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 265.189705][ T5814] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 265.191914][ T5850] usb 7-1: config 0 has no interface number 0 [ 265.208129][ T5850] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 265.223962][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.232251][ T5850] usb 7-1: Product: syz [ 265.237320][ T5850] usb 7-1: Manufacturer: syz [ 265.242101][ T5850] usb 7-1: SerialNumber: syz [ 265.264611][ T5850] usb 7-1: config 0 descriptor?? [ 265.272090][ T5850] smsc95xx v2.0.0 [ 265.371389][ T5814] usb 8-1: config index 0 descriptor too short (expected 50, got 32) [ 265.381943][ T5814] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.401789][ T5814] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 265.416245][ T5814] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.444026][ T5814] usb 8-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 265.456694][ T5814] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.472146][ T5814] usb 8-1: Product: syz [ 265.479616][ T5814] usb 8-1: Manufacturer: syz [ 265.487648][ T5814] usb 8-1: SerialNumber: syz [ 265.502949][ T9947] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 265.514873][ T5814] usb_debug 8-1:1.0: debug converter detected [ 265.522372][ T9951] loop5: detected capacity change from 0 to 40427 [ 265.535638][ T5814] usb 8-1: debug converter now attached to ttyUSB0 [ 265.558709][ T9951] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 265.596213][ T9951] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 265.649097][ T9951] F2FS-fs (loop5): Found nat_bits in checkpoint [ 265.718626][ C1] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 265.761270][ T5814] usb 8-1: USB disconnect, device number 9 [ 265.775650][ T5814] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 265.800138][ T5814] usb_debug 8-1:1.0: device disconnected [ 265.867806][ T9951] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 265.892890][ T9951] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 266.140292][ T28] audit: type=1800 audit(1789674688.030:46): pid=9951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1058" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 266.326197][ T5850] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 266.360223][ T5850] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 266.378969][ T5850] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 266.423718][ T5850] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 266.460591][ T5850] usb 7-1: USB disconnect, device number 13 [ 266.818700][ T9962] loop1: detected capacity change from 0 to 2048 [ 266.901927][ T9964] loop7: detected capacity change from 0 to 256 [ 266.974688][ T9962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.021321][ T9964] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 267.129829][ T9962] fscrypt (loop1, inode 18): Can't use IV_INO_LBLK_64 policy on filesystem 'loop1' because it doesn't have stable inode numbers [ 267.345213][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.607479][ T9987] WARNING! power/level is deprecated; use power/control instead [ 268.059639][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 268.239081][ T9990] loop6: detected capacity change from 0 to 32768 [ 268.305352][ T9990] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 268.455326][ T9990] XFS (loop6): Ending clean mount [ 268.540518][ T9990] XFS (loop6): User initiated shutdown received. [ 268.551853][ T9990] XFS (loop6): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 268.557054][T10017] loop5: detected capacity change from 0 to 256 [ 268.624997][T10019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 268.644351][ T9990] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 268.851170][ T6822] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 268.875271][T10023] loop1: detected capacity change from 0 to 1024 [ 269.030019][T10023] hfsplus: request for non-existent node -709361664 in B*Tree [ 269.037983][T10023] hfsplus: request for non-existent node -709361664 in B*Tree [ 269.103836][T10023] hfsplus: b-tree write err: -5, ino 8 [ 269.168100][ T5789] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 269.240208][T10023] syz.1.1079: attempt to access beyond end of device [ 269.240208][T10023] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 269.259632][T10023] EXT4-fs (loop1): unable to read superblock [ 269.503967][T10033] loop1: detected capacity change from 0 to 4096 [ 269.544992][T10033] ntfs3: loop1: ino=b, Correct links count -> 1. [ 269.573599][T10033] ntfs3: loop1: ino=18, mi_enum_attr [ 269.578964][T10033] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 269.720731][ T27] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 269.939593][ T27] usb 7-1: Using ep0 maxpacket: 16 [ 269.962367][ T27] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.009536][ T27] usb 7-1: config 0 has no interface number 0 [ 270.015707][ T27] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.055869][T10034] loop7: detected capacity change from 0 to 32768 [ 270.062498][ T27] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.062550][ T27] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 270.062587][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.080317][ T27] usb 7-1: config 0 descriptor?? [ 270.151493][T10034] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 270.186414][T10034] JBD2: Ignoring recovery information on journal [ 270.253373][T10034] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 270.505959][ T6965] ocfs2: Unmounting device (7,7) on (node local) [ 270.766385][ T27] uclogic 0003:28BD:0071.0010: pen parameters not found [ 270.775107][ T27] uclogic 0003:28BD:0071.0010: interface is invalid, ignoring [ 270.933213][T10049] loop7: detected capacity change from 0 to 32768 [ 270.960663][T10049] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 271.046896][T10049] XFS (loop7): Ending clean mount [ 271.071171][ T27] usb 7-1: USB disconnect, device number 14 [ 271.191389][T10059] Set syz1 is full, maxelem 256 reached [ 271.222379][ T28] audit: type=1800 audit(1789674693.110:47): pid=10049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1087" name=2E02 dev="loop7" ino=4426 res=0 errno=0 [ 271.436202][ T6965] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 271.861363][ T56] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 272.053531][ T56] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.066422][ T56] usb 6-1: config 0 interface 0 has no altsetting 0 [ 272.073168][ T56] usb 6-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00 [ 272.082722][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.093386][ T56] usb 6-1: config 0 descriptor?? [ 272.532778][ T56] input: HID 1ae7:9001 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1AE7:9001.0011/input/input16 [ 272.661482][ T56] speedlink 0003:1AE7:9001.0011: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 1ae7:9001] on usb-dummy_hcd.5-1/input0 [ 272.891955][T10087] loop1: detected capacity change from 0 to 16 [ 272.913819][ T28] audit: type=1326 audit(1789674694.800:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.6.1103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39f39e159 code=0x7ffc0000 [ 272.980442][T10087] erofs: (device loop1): mounted with root inode @ nid 36. [ 272.985214][ T28] audit: type=1326 audit(1789674694.800:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.6.1103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39f39e159 code=0x7ffc0000 [ 273.016908][ T28] audit: type=1326 audit(1789674694.800:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.6.1103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39f39e159 code=0x7ffc0000 [ 273.116126][ T28] audit: type=1326 audit(1789674694.800:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.6.1103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39f39e159 code=0x7ffc0000 [ 273.206060][ T28] audit: type=1326 audit(1789674694.840:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.6.1103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa39f39e159 code=0x7ffc0000 [ 273.249122][ T28] audit: type=1326 audit(1789674694.840:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.6.1103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39f39e159 code=0x7ffc0000 [ 273.275076][ T28] audit: type=1326 audit(1789674694.840:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.6.1103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39f39e159 code=0x7ffc0000 [ 273.304699][ T28] audit: type=1326 audit(1789674694.840:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.6.1103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39f39e159 code=0x7ffc0000 [ 273.376398][ T28] audit: type=1326 audit(1789674694.840:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.6.1103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39f39e159 code=0x7ffc0000 [ 273.746297][T10105] tipc: Started in network mode [ 273.764011][T10105] tipc: Node identity ac141441, cluster identity 4711 [ 273.775590][T10105] tipc: Enabled bearer , priority 10 [ 274.003185][T10109] nbd7: detected capacity change from 0 to 127 [ 274.027814][T10112] block nbd7: NBD_DISCONNECT [ 274.044651][T10114] loop6: detected capacity change from 0 to 64 [ 274.069739][T10112] block nbd7: Disconnected due to user request. [ 274.123580][T10112] block nbd7: shutting down sockets [ 274.180358][ C1] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.189677][ C1] Buffer I/O error on dev nbd7, logical block 0, async page read [ 274.198983][ C1] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 274.208120][ C1] Buffer I/O error on dev nbd7, logical block 1, async page read [ 274.215917][ C1] Buffer I/O error on dev nbd7, logical block 2, async page read [ 274.223742][ C1] Buffer I/O error on dev nbd7, logical block 3, async page read [ 274.235629][ T97] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 274.246515][ T97] Buffer I/O error on dev nbd7, logical block 0, async page read [ 274.254577][ T97] Buffer I/O error on dev nbd7, logical block 1, async page read [ 274.262656][ T97] Buffer I/O error on dev nbd7, logical block 2, async page read [ 274.271079][ T97] Buffer I/O error on dev nbd7, logical block 3, async page read [ 274.281148][ T97] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 274.290413][ T97] Buffer I/O error on dev nbd7, logical block 0, async page read [ 274.298173][ T97] Buffer I/O error on dev nbd7, logical block 1, async page read [ 274.306385][ T97] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 274.315701][ T97] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.325094][ T97] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 274.335064][ T97] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.344940][ T97] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.354322][ T97] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.371040][ T5789] ldm_validate_partition_table(): Disk read failed. [ 274.390374][ T5789] Dev nbd7: unable to read RDB block 0 [ 274.452858][ T5789] nbd7: unable to read partition table [ 274.501405][ T5789] ldm_validate_partition_table(): Disk read failed. [ 274.517000][ T5789] Dev nbd7: unable to read RDB block 0 [ 274.525311][ T5789] nbd7: unable to read partition table [ 274.660680][ T56] usb 6-1: USB disconnect, device number 14 [ 274.812838][T10128] loop6: detected capacity change from 0 to 256 [ 274.892853][ T27] tipc: Node number set to 2886997057 [ 275.233655][ T27] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 275.424092][ T27] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 275.453146][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.455431][T10145] loop6: detected capacity change from 0 to 2048 [ 275.475159][ T27] usb 6-1: Product: syz [ 275.479376][ T27] usb 6-1: Manufacturer: syz [ 275.495939][ T27] usb 6-1: SerialNumber: syz [ 275.515843][ T27] usb 6-1: config 0 descriptor?? [ 275.548342][ T27] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 275.552599][T10145] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 275.576520][T10145] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.604377][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.634940][ T27] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 275.672597][ T27] usb 6-1: media controller created [ 275.693824][T10151] can0: slcan on ttyp34. [ 275.781356][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.830757][T10150] can0 (unregistered): slcan off ttyp34. [ 275.898943][ T27] DVB: Unable to find symbol mt352_attach() [ 275.988922][ T27] DVB: Unable to find symbol nxt6000_attach() [ 276.000133][ T27] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 276.014483][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 276.043815][ T27] dvb-usb: schedule remote query interval to 1000 msecs. [ 276.063180][ T27] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 276.076790][ T27] dvb-usb: bulk message failed: -22 (7/0) [ 276.086966][ T27] dvb-usb: bulk message failed: -22 (7/0) [ 276.114485][ T27] usb 6-1: USB disconnect, device number 15 [ 276.225455][ T27] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 277.038047][T10172] loop7: detected capacity change from 0 to 32768 [ 277.064062][T10172] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 277.094900][T10174] loop1: detected capacity change from 0 to 32768 [ 277.140321][T10174] JBD2: Ignoring recovery information on journal [ 277.206066][T10172] XFS (loop7): Ending clean mount [ 277.300789][T10178] loop6: detected capacity change from 0 to 40427 [ 277.319571][T10178] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 277.326570][T10178] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 277.354129][T10178] F2FS-fs (loop6): invalid crc value [ 277.363015][T10174] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 277.419751][T10178] F2FS-fs (loop6): Found nat_bits in checkpoint [ 277.538764][ T6965] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 277.642604][T10178] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 277.663569][T10178] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 277.847644][T10199] loop7: detected capacity change from 0 to 64 [ 277.994980][ T6822] syz-executor: attempt to access beyond end of device [ 277.994980][ T6822] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 278.015467][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 278.062032][ T6822] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 278.069126][ T6822] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 278.868309][T10203] loop5: detected capacity change from 0 to 32768 [ 278.913362][T10203] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 279.024943][T10203] XFS (loop5): Ending clean mount [ 279.193196][ T6625] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 279.455111][T10231] batadv_slave_1: entered promiscuous mode [ 279.509797][T10230] batadv_slave_1: left promiscuous mode [ 279.700480][T10234] loop7: detected capacity change from 0 to 1024 [ 279.744952][T10234] hfsplus: failed to load catalog file [ 279.985451][ T8] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 280.034970][ T8] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 280.054263][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1160'. [ 280.184324][T10253] netlink: 34959 bytes leftover after parsing attributes in process `syz.7.1160'. [ 280.337660][T10255] loop7: detected capacity change from 0 to 256 [ 280.433714][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1164'. [ 280.445951][T10257] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1164'. [ 281.069557][ T5814] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 281.151258][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1175'. [ 281.151678][ T23] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 281.204423][T10278] [ 281.206804][T10278] ====================================================== [ 281.213849][T10278] WARNING: possible circular locking dependency detected [ 281.220899][T10278] syzkaller #0 Not tainted [ 281.225348][T10278] ------------------------------------------------------ [ 281.232397][T10278] syz.1.1174/10278 is trying to acquire lock: [ 281.238493][T10278] ffff88814de320e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_lock+0x189/0x390 [ 281.247934][T10278] [ 281.247934][T10278] but task is already holding lock: [ 281.255315][T10278] ffff888148971888 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 281.264945][T10278] [ 281.264945][T10278] which lock already depends on the new lock. [ 281.264945][T10278] [ 281.275357][T10278] [ 281.275357][T10278] the existing dependency chain (in reverse order) is: [ 281.284377][T10278] [ 281.284377][T10278] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 281.292588][T10278] __mutex_lock+0x135/0xc80 [ 281.297631][T10278] bd_finish_claiming+0x229/0x3f0 [ 281.303193][T10278] blkdev_get_by_dev+0x469/0x610 [ 281.308669][T10278] bdev_open_by_dev+0x77/0x100 [ 281.314012][T10278] setup_bdev_super+0x59/0x660 [ 281.319322][T10278] mount_bdev+0x1ce/0x2c0 [ 281.324195][T10278] legacy_get_tree+0xea/0x180 [ 281.329446][T10278] vfs_get_tree+0x8c/0x280 [ 281.334399][T10278] do_new_mount+0x24a/0xa40 [ 281.339444][T10278] init_mount+0xde/0x130 [ 281.344256][T10278] do_mount_root+0x97/0x230 [ 281.349293][T10278] mount_root_generic+0x1a6/0x3e0 [ 281.354851][T10278] prepare_namespace+0xc2/0x100 [ 281.360246][T10278] kernel_init_freeable+0x41a/0x560 [ 281.366015][T10278] kernel_init+0x1d/0x1c0 [ 281.370893][T10278] ret_from_fork+0x48/0x80 [ 281.375842][T10278] ret_from_fork_asm+0x11/0x20 [ 281.381142][T10278] [ 281.381142][T10278] -> #3 (bdev_lock){+.+.}-{3:3}: [ 281.388272][T10278] __mutex_lock+0x135/0xc80 [ 281.393310][T10278] bd_prepare_to_claim+0x1d9/0x4a0 [ 281.398960][T10278] truncate_bdev_range+0x4e/0x260 [ 281.404609][T10278] blkdev_fallocate+0x50d/0x6a0 [ 281.410021][T10278] vfs_fallocate+0x585/0x6f0 [ 281.415151][T10278] __x64_sys_fallocate+0xc1/0x110 [ 281.420720][T10278] do_syscall_64+0x55/0xb0 [ 281.425666][T10278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.432105][T10278] [ 281.432105][T10278] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 281.440541][T10278] down_write+0x97/0x200 [ 281.445312][T10278] set_blocksize+0x247/0x4b0 [ 281.450458][T10278] sb_min_blocksize+0xbe/0x190 [ 281.455778][T10278] ext4_fill_super+0x6e7/0x6870 [ 281.461292][T10278] get_tree_bdev+0x3e5/0x520 [ 281.466474][T10278] vfs_get_tree+0x8c/0x280 [ 281.471444][T10278] do_new_mount+0x24a/0xa40 [ 281.476480][T10278] init_mount+0xde/0x130 [ 281.481263][T10278] do_mount_root+0x97/0x230 [ 281.486315][T10278] mount_root_generic+0x1a6/0x3e0 [ 281.491869][T10278] prepare_namespace+0xc2/0x100 [ 281.497246][T10278] kernel_init_freeable+0x41a/0x560 [ 281.502970][T10278] kernel_init+0x1d/0x1c0 [ 281.507883][T10278] ret_from_fork+0x48/0x80 [ 281.512831][T10278] ret_from_fork_asm+0x11/0x20 [ 281.518126][T10278] [ 281.518126][T10278] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 281.526824][T10278] down_write+0x97/0x200 [ 281.531594][T10278] set_blocksize+0x1ff/0x4b0 [ 281.536724][T10278] sb_min_blocksize+0xbe/0x190 [ 281.542040][T10278] ext4_fill_super+0x6e7/0x6870 [ 281.547473][T10278] get_tree_bdev+0x3e5/0x520 [ 281.552594][T10278] vfs_get_tree+0x8c/0x280 [ 281.557554][T10278] do_new_mount+0x24a/0xa40 [ 281.562607][T10278] init_mount+0xde/0x130 [ 281.567396][T10278] do_mount_root+0x97/0x230 [ 281.572438][T10278] mount_root_generic+0x1a6/0x3e0 [ 281.578006][T10278] prepare_namespace+0xc2/0x100 [ 281.583396][T10278] kernel_init_freeable+0x41a/0x560 [ 281.589136][T10278] kernel_init+0x1d/0x1c0 [ 281.594009][T10278] ret_from_fork+0x48/0x80 [ 281.598979][T10278] ret_from_fork_asm+0x11/0x20 [ 281.604285][T10278] [ 281.604285][T10278] -> #0 (&type->s_umount_key#32){++++}-{3:3}: [ 281.612568][T10278] __lock_acquire+0x37ef/0x7d80 [ 281.617988][T10278] lock_acquire+0x19e/0x420 [ 281.623028][T10278] down_read+0x46/0x2e0 [ 281.627742][T10278] super_lock+0x189/0x390 [ 281.632608][T10278] fs_bdev_mark_dead+0xad/0x1f0 [ 281.637995][T10278] bdev_mark_dead+0x83/0x1a0 [ 281.643135][T10278] blk_report_disk_dead+0x21c/0x3e0 [ 281.648884][T10278] del_gendisk+0x2cb/0x8f0 [ 281.653839][T10278] sd_remove+0x8d/0x100 [ 281.658533][T10278] device_release_driver_internal+0x458/0x6f0 [ 281.665128][T10278] bus_remove_device+0x43b/0x520 [ 281.670600][T10278] device_del+0x51f/0x910 [ 281.675462][T10278] __scsi_remove_device+0x1a2/0x390 [ 281.681216][T10278] scsi_forget_host+0xd0/0x110 [ 281.686552][T10278] scsi_remove_host+0x1b3/0x730 [ 281.691941][T10278] virtscsi_remove+0x130/0x1a0 [ 281.697245][T10278] virtio_dev_remove+0x96/0x1a0 [ 281.702628][T10278] device_release_driver_internal+0x408/0x6f0 [ 281.709227][T10278] bus_remove_device+0x43b/0x520 [ 281.714710][T10278] device_del+0x51f/0x910 [ 281.719588][T10278] device_unregister+0x20/0xc0 [ 281.724895][T10278] unregister_virtio_device+0x37/0x60 [ 281.730805][T10278] virtio_pci_remove+0x7f/0xf0 [ 281.736112][T10278] pci_device_remove+0x97/0x230 [ 281.741527][T10278] device_release_driver_internal+0x408/0x6f0 [ 281.748213][T10278] pci_stop_bus_device+0x108/0x140 [ 281.753861][T10278] pci_stop_and_remove_bus_device_locked+0x1a/0x30 [ 281.760919][T10278] remove_store+0xe6/0x150 [ 281.765876][T10278] kernfs_fop_write_iter+0x3a4/0x520 [ 281.771712][T10278] vfs_write+0x474/0x9a0 [ 281.776496][T10278] ksys_write+0x151/0x260 [ 281.781398][T10278] do_syscall_64+0x55/0xb0 [ 281.786361][T10278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.792798][T10278] [ 281.792798][T10278] other info that might help us debug this: [ 281.792798][T10278] [ 281.803065][T10278] Chain exists of: [ 281.803065][T10278] &type->s_umount_key#32 --> bdev_lock --> &bdev->bd_holder_lock [ 281.803065][T10278] [ 281.816755][T10278] Possible unsafe locking scenario: [ 281.816755][T10278] [ 281.824216][T10278] CPU0 CPU1 [ 281.829594][T10278] ---- ---- [ 281.834980][T10278] lock(&bdev->bd_holder_lock); [ 281.839939][T10278] lock(bdev_lock); [ 281.846375][T10278] lock(&bdev->bd_holder_lock); [ 281.853852][T10278] rlock(&type->s_umount_key#32); [ 281.859003][T10278] [ 281.859003][T10278] *** DEADLOCK *** [ 281.859003][T10278] [ 281.867161][T10278] 9 locks held by syz.1.1174/10278: [ 281.872385][T10278] #0: ffff8880616f94c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 281.881653][T10278] #1: ffff888062a4e418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 281.890564][T10278] #2: ffff88805f48d488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 281.900346][T10278] #3: ffffffff8d816548 (pci_rescan_remove_lock){+.+.}-{3:3}, at: pci_stop_and_remove_bus_device_locked+0x12/0x30 [ 281.912392][T10278] #4: ffff88814765a1f0 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 281.922958][T10278] #5: ffff888145e751b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 281.933536][T10278] #6: ffff888145ecc0e0 (&shost->scan_mutex){+.+.}-{3:3}, at: scsi_remove_host+0x32/0x730 [ 281.943492][T10278] #7: ffff8881423823b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 281.954050][T10278] #8: ffff888148971888 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 281.964081][T10278] [ 281.964081][T10278] stack backtrace: [ 281.969975][T10278] CPU: 1 PID: 10278 Comm: syz.1.1174 Not tainted syzkaller #0 [ 281.977441][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.987544][T10278] Call Trace: [ 281.990853][T10278] [ 281.993821][T10278] dump_stack_lvl+0x18c/0x250 [ 281.998521][T10278] ? load_image+0x420/0x420 [ 282.003084][T10278] ? show_regs_print_info+0x20/0x20 [ 282.008305][T10278] ? print_circular_bug+0x12b/0x1a0 [ 282.013544][T10278] check_noncircular+0x2fc/0x400 [ 282.018520][T10278] ? print_deadlock_bug+0x5d0/0x5d0 [ 282.023741][T10278] ? lockdep_lock+0xf5/0x230 [ 282.028359][T10278] ? _find_first_zero_bit+0xd6/0x100 [ 282.033670][T10278] __lock_acquire+0x37ef/0x7d80 [ 282.038554][T10278] ? __lock_acquire+0x1262/0x7d80 [ 282.043599][T10278] ? verify_lock_unused+0x140/0x140 [ 282.048822][T10278] ? verify_lock_unused+0x140/0x140 [ 282.054041][T10278] ? find_lock_entries+0x120/0x1020 [ 282.059266][T10278] lock_acquire+0x19e/0x420 [ 282.063790][T10278] ? super_lock+0x189/0x390 [ 282.068314][T10278] ? __might_sleep+0xe0/0xe0 [ 282.072920][T10278] ? read_lock_is_recursive+0x20/0x20 [ 282.078315][T10278] ? __mutex_trylock_common+0x160/0x270 [ 282.085045][T10278] ? trace_raw_output_contention_end+0xd0/0xd0 [ 282.091215][T10278] ? mapping_try_invalidate+0x4bf/0x570 [ 282.096790][T10278] down_read+0x46/0x2e0 [ 282.100961][T10278] ? super_lock+0x189/0x390 [ 282.105498][T10278] super_lock+0x189/0x390 [ 282.109848][T10278] ? xa_find_after+0xaf/0x430 [ 282.114547][T10278] ? user_get_super+0x180/0x180 [ 282.119414][T10278] ? mutex_lock_nested+0x20/0x20 [ 282.124364][T10278] fs_bdev_mark_dead+0xad/0x1f0 [ 282.129225][T10278] ? super_s_dev_set+0xa0/0xa0 [ 282.134006][T10278] bdev_mark_dead+0x83/0x1a0 [ 282.138627][T10278] ? blk_report_disk_dead+0x88/0x3e0 [ 282.143931][T10278] blk_report_disk_dead+0x21c/0x3e0 [ 282.149159][T10278] ? __blk_mark_disk_dead+0x120/0x120 [ 282.154544][T10278] ? xa_find_after+0xaf/0x430 [ 282.159236][T10278] del_gendisk+0x2cb/0x8f0 [ 282.163673][T10278] ? blk_report_disk_dead+0x3e0/0x3e0 [ 282.169076][T10278] ? __pm_runtime_resume+0x129/0x170 [ 282.174397][T10278] sd_remove+0x8d/0x100 [ 282.178576][T10278] ? sd_probe+0x11c0/0x11c0 [ 282.183103][T10278] device_release_driver_internal+0x458/0x6f0 [ 282.189193][T10278] bus_remove_device+0x43b/0x520 [ 282.194207][T10278] ? bus_probe_device+0x260/0x260 [ 282.199245][T10278] ? up_write+0x1be/0x410 [ 282.203592][T10278] ? kernfs_remove_by_name_ns+0x117/0x150 [ 282.210206][T10278] device_del+0x51f/0x910 [ 282.214560][T10278] ? kill_device+0x160/0x160 [ 282.219177][T10278] ? kobject_put+0x421/0x450 [ 282.223787][T10278] __scsi_remove_device+0x1a2/0x390 [ 282.229007][T10278] scsi_forget_host+0xd0/0x110 [ 282.233813][T10278] scsi_remove_host+0x1b3/0x730 [ 282.238687][T10278] virtscsi_remove+0x130/0x1a0 [ 282.243501][T10278] virtio_dev_remove+0x96/0x1a0 [ 282.248372][T10278] ? virtio_dev_probe+0xae0/0xae0 [ 282.253413][T10278] device_release_driver_internal+0x408/0x6f0 [ 282.259511][T10278] bus_remove_device+0x43b/0x520 [ 282.264500][T10278] ? bus_probe_device+0x260/0x260 [ 282.269552][T10278] ? up_write+0x1be/0x410 [ 282.273903][T10278] ? kernfs_remove_by_name_ns+0x117/0x150 [ 282.279652][T10278] device_del+0x51f/0x910 [ 282.284002][T10278] ? kill_device+0x160/0x160 [ 282.288616][T10278] ? pci_device_is_present+0x175/0x240 [ 282.294088][T10278] ? pci_real_dma_dev+0x20/0x20 [ 282.298982][T10278] device_unregister+0x20/0xc0 [ 282.303762][T10278] unregister_virtio_device+0x37/0x60 [ 282.309169][T10278] virtio_pci_remove+0x7f/0xf0 [ 282.313958][T10278] pci_device_remove+0x97/0x230 [ 282.318840][T10278] ? pci_device_probe+0x8d0/0x8d0 [ 282.323887][T10278] device_release_driver_internal+0x408/0x6f0 [ 282.330065][T10278] pci_stop_bus_device+0x108/0x140 [ 282.335206][T10278] pci_stop_and_remove_bus_device_locked+0x1a/0x30 [ 282.341907][T10278] remove_store+0xe6/0x150 [ 282.346338][T10278] ? pci_dev_hp_attrs_are_visible+0xe0/0xe0 [ 282.352249][T10278] ? __virt_addr_valid+0x10c/0x380 [ 282.357391][T10278] ? sysfs_kf_write+0x187/0x2a0 [ 282.362278][T10278] ? sysfs_kf_read+0x360/0x360 [ 282.367084][T10278] kernfs_fop_write_iter+0x3a4/0x520 [ 282.372410][T10278] vfs_write+0x474/0x9a0 [ 282.376688][T10278] ? file_end_write+0x250/0x250 [ 282.381594][T10278] ? __fget_files+0x3fc/0x460 [ 282.386302][T10278] ? __fdget_pos+0x2a3/0x330 [ 282.390914][T10278] ? ksys_write+0x74/0x260 [ 282.395349][T10278] ksys_write+0x151/0x260 [ 282.399706][T10278] ? __ia32_sys_read+0x90/0x90 [ 282.404505][T10278] ? lockdep_hardirqs_on+0x98/0x150 [ 282.409714][T10278] do_syscall_64+0x55/0xb0 [ 282.414151][T10278] ? clear_bhb_loop+0x40/0x90 [ 282.418869][T10278] ? clear_bhb_loop+0x40/0x90 [ 282.423571][T10278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.429494][T10278] RIP: 0033:0x7faaebf9e159 [ 282.433936][T10278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.455315][T10278] RSP: 002b:00007faaecdef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.463790][T10278] RAX: ffffffffffffffda RBX: 00007faaec225fa0 RCX: 00007faaebf9e159 [ 282.471774][T10278] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 282.479760][T10278] RBP: 00007faaec03506b R08: 0000000000000000 R09: 0000000000000000 [ 282.487741][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.495749][T10278] R13: 00007faaec226038 R14: 00007faaec225fa0 R15: 00007fffa9751a68 [ 282.503739][T10278] [ 282.525369][ T8894] blk_print_req_error: 107 callbacks suppressed [ 282.525386][ T8894] device offline error, dev sda, sector 835894 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 282.558869][ T8894] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 104486) [ 282.559725][ T5814] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.589521][ T5814] usb 6-1: config 0 has no interface number 0 [ 282.595660][ T5814] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.607447][ T5814] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.617393][ T5814] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 282.626551][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.638760][ T8894] Buffer I/O error on device sda1, logical block 104448 [ 282.643194][ T23] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 282.652110][ T8894] device offline error, dev sda, sector 844078 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 282.657218][ T5814] usb 6-1: config 0 descriptor?? [ 282.672568][ T23] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 282.674357][ T8894] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 105509) [ 282.683430][ T23] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.707024][ T23] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 282.716419][ T8894] Buffer I/O error on device sda1, logical block 105471 [ 282.719232][ T23] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 282.732922][ T8894] device offline error, dev sda, sector 847886 op 0x1:(WRITE) flags 0x0 phys_seg 23 prio class 2 [ 282.749279][ T8894] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 105985) [ 282.761890][ T23] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 282.769809][ T8894] Buffer I/O error on device sda1, logical block 105947 [ 282.774082][ T23] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.781857][ T8894] Buffer I/O error on device sda1, logical block 105948 [ 282.786862][ T23] usb 8-1: Product: syz [ 282.793483][ T8894] Buffer I/O error on device sda1, logical block 105949 [ 282.801960][ T23] usb 8-1: Manufacturer: syz [ 282.804268][ T8894] Buffer I/O error on device sda1, logical block 105950 [ 282.815701][ T8894] Buffer I/O error on device sda1, logical block 105951 [ 282.823313][ T8894] Buffer I/O error on device sda1, logical block 105952 [ 282.832239][ T23] cdc_wdm 8-1:1.0: skipping garbage [ 282.837462][ T23] cdc_wdm 8-1:1.0: skipping garbage [ 282.844516][ T23] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 282.851052][ T8894] Buffer I/O error on device sda1, logical block 105953 [ 282.858090][ T23] cdc_wdm 8-1:1.0: Unknown control protocol [ 282.864582][ T8894] Buffer I/O error on device sda1, logical block 105954 [ 282.880167][ T8894] device offline error, dev sda, sector 721286 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 282.890967][ T8894] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90160) [ 282.902976][ T8894] device offline error, dev sda, sector 721350 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 282.915512][ T8894] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90168) [ 282.927388][ T8894] device offline error, dev sda, sector 721382 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 282.938051][ T8894] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90172) [ 282.949779][ T8894] device offline error, dev sda, sector 721398 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 282.960730][ T8894] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90174) [ 282.975384][ T8894] device offline error, dev sda, sector 721414 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 282.987348][ T8894] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90176) [ 283.000793][ T8894] device offline error, dev sda, sector 721478 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 283.011459][ T8894] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90184) [ 283.024418][ T8894] device offline error, dev sda, sector 721494 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 283.039603][ T8894] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90186) [ 283.062467][T10278] buffer_io_error: 138 callbacks suppressed [ 283.062481][T10278] Buffer I/O error on dev sda1, logical block 1, lost async page write [ 283.062836][ T5106] Aborting journal on device sda1-8. [ 283.074804][T10278] Buffer I/O error on dev sda1, logical block 131, lost async page write [ 283.099876][ T97] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 283.108584][ T5106] JBD2: I/O error when updating journal superblock for sda1-8. [ 283.124342][T10271] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.7.1171: Detected aborted journal [ 283.135586][ T97] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 283.143795][T10271] EXT4-fs (sda1): I/O error while writing superblock [ 283.152879][T10271] EXT4-fs (sda1): Remounting filesystem read-only [ 283.165308][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 283.172051][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 283.178753][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 283.185419][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 283.191734][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 283.198429][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 283.205081][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 283.211716][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 283.218081][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 283.224728][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 283.231081][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 283.237734][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 283.244024][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 283.250654][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 283.256907][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 283.263544][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 283.267491][ T5814] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 283.270281][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 283.283584][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 283.289801][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.296631][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 283.299424][ T5814] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 283.303252][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 283.323030][ T5850] usb 8-1: USB disconnect, device number 10 [ 283.329062][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 283.348885][ T5814] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 283.364453][ T5814] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 283.373154][ T5814] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 283.389397][ T5814] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 283.399185][ T5814] prodikeys 0003:041E:2801.0013: unknown main item tag 0x0 [ 283.416900][T10278] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 283.423629][ T5814] prodikeys 0003:041E:2801.0013: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1 [ 283.439339][ T5814] hid_prodikeys: hid-prodikeys: failed to find output report [ 283.439339][ T5814] [ 283.454692][ T5789] scsi 0:0:1:0: rejecting I/O to dead device [ 283.479707][ T5814] usb 6-1: USB disconnect, device number 16 [ 283.500976][T10283] udevd[10283]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error