last executing test programs: 30.862636562s ago: executing program 3 (id=1111): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) close(0x3) mq_unlink(&(0x7f0000000000)='eth0\x00') 30.420511251s ago: executing program 3 (id=1113): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) 29.314739818s ago: executing program 3 (id=1125): unshare(0x8040480) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) 27.725508131s ago: executing program 3 (id=1142): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000480)=""/72, 0x48}], 0x2, 0x0, 0x0, 0x8000}, 0x8000) 26.544713542s ago: executing program 3 (id=1150): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 26.330988601s ago: executing program 3 (id=1152): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000680)=0x9) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7f) 11.20477776s ago: executing program 32 (id=1152): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000680)=0x9) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7f) 8.564967561s ago: executing program 1 (id=1293): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x2) connect$unix(r0, &(0x7f0000000040)=@file={0xc0878a164e8c25fa, './file0\x00'}, 0x6e) 8.166930063s ago: executing program 1 (id=1296): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 7.741831468s ago: executing program 4 (id=1300): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b11, 0x0) 6.250319184s ago: executing program 1 (id=1305): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 5.788338337s ago: executing program 4 (id=1308): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet6(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000200)=0x8) 4.736677455s ago: executing program 1 (id=1310): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026007b0900000800b70000"], 0x2c}}, 0x0) 4.736407375s ago: executing program 4 (id=1312): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x1}}}}]}, 0x88}}, 0x0) 3.485669888s ago: executing program 0 (id=1317): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000200)=0x3cec, 0x4) 3.328134086s ago: executing program 0 (id=1318): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/vlan/vlan1\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000840)=""/66, 0x42) 3.313916929s ago: executing program 2 (id=1319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x600, 0x0, 0x4}]}) 3.150745548s ago: executing program 0 (id=1320): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x200002, &(0x7f0000000040), 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x12100, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x800000) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) 3.073557252s ago: executing program 2 (id=1321): syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x300, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0xe0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3, 0x89, 0x0, @private, @local}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 2.865037509s ago: executing program 2 (id=1322): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181002, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000240)={0x400, 0x1, 0xffffffff, 0xe7c9f, 0x0, 0x1ff, 0x10, 0x80000000, 0x4, 0x5, 0x10, 0x2, &(0x7f00000000c0)=[0x5], 0x1, &(0x7f0000000140)="ac8f73cdfe6fdeedf5db35fa6fda9ef748da4eae174677b242a9e79c4873ca2608c165f419a11c0d1b3e559511d8278c7710035a39d1e2f48ca100dc155296ce43b617c6a60d5243a319b534602d8fffdc81bdd8f638cfd43f4b72c3a95902fb1757e4b5afef7d8c43e411f4052ca6def9e8387bd61b708fcf4a184cac1e6b617e29f03b80def1bfebd8cfd22694dd9214516b4ead12e96b8162c10406530c9f5fb20271dd7d7fc838e980374eb248901eccf7856a79e5b9ae73", 0xba}) close(r0) 2.463773971s ago: executing program 2 (id=1323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xec, 0x8, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r1, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000007c0), &(0x7f00000000c0)=@udp=r1, 0x1}, 0x20) 2.318624516s ago: executing program 2 (id=1324): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.872974156s ago: executing program 0 (id=1325): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@dstopts={0x2f}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 940.354473ms ago: executing program 4 (id=1326): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28, 0x7ffffff7}}], 0x1, 0x4040) 885.355983ms ago: executing program 1 (id=1327): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 842.4189ms ago: executing program 2 (id=1328): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0xb, {"10421b0f4959410bcd694ee565560c26", "7f3db605e694f78760e7d6d6029ca25a", "943c27e0c76a1ef747add078a622e85b"}, 0x1, 0x4}) 571.105178ms ago: executing program 1 (id=1329): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) 551.840812ms ago: executing program 4 (id=1330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d04, 0xec000000, 0x7ff}]}) 352.234988ms ago: executing program 0 (id=1331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5a3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 48.328002ms ago: executing program 4 (id=1332): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000880)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) readv(r1, &(0x7f0000000900)=[{&(0x7f0000000600)=""/137, 0x89}], 0x1) 0s ago: executing program 0 (id=1333): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) pread64(r0, &(0x7f0000002100)=""/171, 0xab, 0x9a) read$FUSE(r0, &(0x7f0000004f80)={0x2020}, 0x2063) kernel console output (not intermixed with test programs): pe 2 family 0 port 6081 - 0 [ 114.107347][ T27] audit: type=1326 audit(1776081130.830:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ec39c819 code=0x7ffc0000 [ 114.216032][ T27] audit: type=1326 audit(1776081130.860:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ec39c819 code=0x7ffc0000 [ 114.386977][ T27] audit: type=1326 audit(1776081130.860:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ec39c819 code=0x7ffc0000 [ 114.440798][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.479101][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.498610][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.525541][ T27] audit: type=1326 audit(1776081130.870:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f26ec39c819 code=0x7ffc0000 [ 114.570931][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.585260][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.614571][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.632653][ T27] audit: type=1326 audit(1776081130.870:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ec39c819 code=0x7ffc0000 [ 114.754142][ T27] audit: type=1326 audit(1776081130.870:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ec39c819 code=0x7ffc0000 [ 114.820269][ T27] audit: type=1326 audit(1776081130.870:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ec39c819 code=0x7ffc0000 [ 114.894640][ T27] audit: type=1326 audit(1776081130.870:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ec39c819 code=0x7ffc0000 [ 115.032095][ T27] audit: type=1326 audit(1776081130.870:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f26ec39c819 code=0x7ffc0000 [ 115.095162][ T27] audit: type=1326 audit(1776081130.870:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ec39c819 code=0x7ffc0000 [ 115.199422][ T27] audit: type=1326 audit(1776081130.870:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ec39c819 code=0x7ffc0000 [ 115.279395][ T27] audit: type=1326 audit(1776081130.870:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ec39c819 code=0x7ffc0000 [ 115.422300][ T27] audit: type=1326 audit(1776081130.870:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ec39c819 code=0x7ffc0000 [ 116.020670][ T5049] loop0: detected capacity change from 0 to 256 [ 116.102316][ T5049] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.858946][ C1] sched: RT throttling activated [ 117.887331][ T5045] loop1: detected capacity change from 0 to 262144 [ 117.901996][ T5045] F2FS-fs (loop1): invalid crc value [ 117.962109][ T5045] F2FS-fs (loop1): Found nat_bits in checkpoint [ 118.028808][ T5045] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 118.131434][ T5094] loop4: detected capacity change from 0 to 128 [ 118.195952][ T5094] EXT4-fs (loop4): Test dummy encryption mode enabled [ 118.297010][ T5094] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 118.367475][ T5094] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.716451][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 119.020361][ T5105] loop1: detected capacity change from 0 to 4096 [ 119.145161][ T5067] loop2: detected capacity change from 0 to 40427 [ 119.225977][ T5067] F2FS-fs (loop2): invalid crc value [ 119.263648][ T5067] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.416260][ T5105] ntfs: volume version 3.1. [ 119.513100][ T5067] F2FS-fs (loop2): Start checkpoint disabled! [ 119.554097][ T5105] __ntfs_error: 7 callbacks suppressed [ 119.554115][ T5105] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default. You might want to try to use the mount option nls=utf8. [ 119.626018][ T5067] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 119.674261][ T5105] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 120.089312][ T4775] kworker/u4:8: attempt to access beyond end of device [ 120.089312][ T4775] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 120.199174][ T5130] loop4: detected capacity change from 0 to 4096 [ 120.212071][ T4775] kworker/u4:8: attempt to access beyond end of device [ 120.212071][ T4775] loop2: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 120.761473][ T5150] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.075595][ T5156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 121.235011][ T5160] loop0: detected capacity change from 0 to 512 [ 121.355583][ T5160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.407704][ T5160] ext4 filesystem being mounted at /50/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.647034][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 121.837328][ T5187] netlink: 'syz.0.278': attribute type 2 has an invalid length. [ 122.400711][ T5205] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 124.539054][ T5256] serio: Serial port ttyS3 [ 124.717075][ T5264] Zero length message leads to an empty skb [ 124.805994][ T5268] loop4: detected capacity change from 0 to 64 [ 124.962449][ T5268] Trying to free block not in datazone [ 125.003737][ T5273] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 125.010907][ T5273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.024572][ T5273] vhci_hcd vhci_hcd.0: Device attached [ 125.309312][ T4317] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 125.317159][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.520502][ T26] usb 4-1: config 0 has no interfaces? [ 125.529704][ T26] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 125.566366][ T26] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 125.596085][ T26] usb 4-1: Manufacturer: syz [ 125.626896][ T26] usb 4-1: config 0 descriptor?? [ 125.842339][ T5274] usb 39-1: recv xbuf, 0 [ 125.853374][ T22] usb 4-1: USB disconnect, device number 2 [ 125.857579][ T46] vhci_hcd: stop threads [ 125.865636][ T46] vhci_hcd: release socket [ 125.889791][ T46] vhci_hcd: disconnect device [ 125.919068][ T4317] vhci_hcd: vhci_device speed not set [ 125.959152][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.102766][ T5297] loop2: detected capacity change from 0 to 32768 [ 126.169097][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 126.180034][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 126.204589][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 126.226701][ T26] usb 1-1: string descriptor 0 read error: -22 [ 126.248816][ T26] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 126.272195][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.296720][ T5292] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 126.317511][ T26] usb 1-1: MIDIStreaming interface descriptor not found [ 126.545903][ T5308] Set syz1 is full, maxelem 2 reached [ 126.631933][ T128] usb 1-1: USB disconnect, device number 3 [ 126.803744][ T5312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.330'. [ 126.840830][ T5312] netlink: 'syz.2.330': attribute type 7 has an invalid length. [ 126.860034][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 126.901908][ T5312] device gretap0 entered promiscuous mode [ 127.035330][ T5312] device gretap0 left promiscuous mode [ 127.263145][ T5320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 127.279884][ T5320] bridge_slave_0: default FDB implementation only supports local addresses [ 127.569085][ T128] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 127.627102][ T5332] loop2: detected capacity change from 0 to 2048 [ 127.759132][ T4314] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.770617][ T128] usb 1-1: config 246 has an invalid interface number: 166 but max is 0 [ 127.792725][ T128] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 127.805891][ T128] usb 1-1: config 246 has no interface number 0 [ 127.822264][ T128] usb 1-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 127.846873][ T128] usb 1-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.875030][ T5332] loop2: p1 < > p3 [ 127.889215][ T5332] loop2: p3 size 134217728 extends beyond EOD, truncated [ 127.900714][ T128] usb 1-1: config 246 interface 166 has no altsetting 0 [ 127.916906][ T128] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 127.929783][ T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.938113][ T128] usb 1-1: Product: syz [ 127.942642][ T128] usb 1-1: Manufacturer: syz [ 127.947670][ T128] usb 1-1: SerialNumber: syz [ 127.979082][ T4314] usb 2-1: Using ep0 maxpacket: 32 [ 127.990211][ T4314] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 128.034715][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.085333][ T4314] usb 2-1: Product: syz [ 128.106403][ T4314] usb 2-1: Manufacturer: syz [ 128.111679][ T4314] usb 2-1: SerialNumber: syz [ 128.131635][ T4314] usb 2-1: config 0 descriptor?? [ 128.186749][ T4314] dw2102: su3000_identify_state [ 128.209715][ T4314] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 128.251453][ T4314] dw2102: su3000_power_ctrl: 1, initialized 0 [ 128.258309][ T4314] dvb-usb: bulk message failed: -22 (2/0) [ 128.302869][ T4314] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.317651][ T4314] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 128.347298][ T5328] dvb-usb: bulk message failed: -22 (5/0) [ 128.369065][ T5328] dw2102: i2c transfer failed. [ 128.379459][ T4314] usb 2-1: media controller created [ 128.384934][ T4314] dvb-usb: bulk message failed: -22 (6/0) [ 128.445632][ T4314] dw2102: i2c transfer failed. [ 128.465126][ T4314] dvb-usb: bulk message failed: -22 (6/0) [ 128.495460][ T4314] dw2102: i2c transfer failed. [ 128.525001][ T4314] dvb-usb: bulk message failed: -22 (6/0) [ 128.533742][ T4314] dw2102: i2c transfer failed. [ 128.538712][ T4314] dvb-usb: bulk message failed: -22 (6/0) [ 128.571191][ T4314] dw2102: i2c transfer failed. [ 128.587090][ T128] usb 1-1: Limiting number of CPorts to U8_MAX [ 128.587930][ T4314] dvb-usb: bulk message failed: -22 (6/0) [ 128.607870][ T128] usb 1-1: Not enough endpoints found in device, aborting! [ 128.631467][ T4314] dw2102: i2c transfer failed. [ 128.644648][ T4314] dvb-usb: bulk message failed: -22 (6/0) [ 128.665136][ T4314] dw2102: i2c transfer failed. [ 128.675280][ T4314] dvb-usb: MAC address: 02:02:02:02:02:02 [ 128.772141][ T4314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.809735][ T128] usb 1-1: USB disconnect, device number 4 [ 128.853329][ T5346] loop4: detected capacity change from 0 to 512 [ 128.867228][ T4314] dvb-usb: bulk message failed: -22 (3/0) [ 128.890519][ T4314] dw2102: command 0x0e transfer failed. [ 128.896674][ T4314] dvb-usb: bulk message failed: -22 (3/0) [ 128.940319][ T4314] dw2102: command 0x0e transfer failed. [ 129.262412][ T4314] dvb-usb: bulk message failed: -22 (3/0) [ 129.276681][ T4314] dw2102: command 0x0e transfer failed. [ 129.302205][ T4314] dvb-usb: bulk message failed: -22 (3/0) [ 129.310019][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.335546][ T4314] dw2102: command 0x0e transfer failed. [ 129.347281][ T4314] dvb-usb: bulk message failed: -22 (1/0) [ 129.355805][ T4314] dw2102: command 0x51 transfer failed. [ 129.507908][ T4314] DVB: Unable to find symbol ds3000_attach() [ 129.515744][ T4314] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 129.530601][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.569061][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16648, setting to 1024 [ 129.611213][ T14] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 129.651346][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.691223][ T14] usb 4-1: config 0 descriptor?? [ 129.893678][ T4314] rc_core: IR keymap rc-su3000 not found [ 129.902566][ T4314] Registered IR keymap rc-empty [ 129.908518][ T4314] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 129.960790][ T4314] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7 [ 129.996295][ T4314] dvb-usb: schedule remote query interval to 150 msecs. [ 130.005159][ T4314] dw2102: su3000_power_ctrl: 0, initialized 1 [ 130.021841][ T4314] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 130.054006][ T4314] usb 2-1: USB disconnect, device number 3 [ 130.131776][ T14] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 130.167541][ T14] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input8 [ 130.290915][ T4314] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 130.344791][ C0] usb 4-1: input irq status -75 received [ 130.418700][ T14] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 130.643221][ T4314] usb 4-1: USB disconnect, device number 3 [ 130.685713][ T5358] loop1: detected capacity change from 0 to 32768 [ 130.844892][ T5358] XFS (loop1): Mounting V5 Filesystem [ 130.877011][ T5385] fido_id[5385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 130.957590][ T5358] XFS (loop1): Ending clean mount [ 131.086691][ T5373] loop2: detected capacity change from 0 to 40427 [ 131.154717][ T5373] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x3ffff [ 131.174229][ T5373] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 131.193936][ T5373] F2FS-fs (loop2): invalid crc value [ 131.220707][ T5373] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.389072][ T4716] XFS (loop1): Unmounting Filesystem [ 131.409284][ T5373] F2FS-fs (loop2): Start checkpoint disabled! [ 131.466070][ T5402] loop3: detected capacity change from 0 to 256 [ 131.473070][ T5373] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 131.568440][ T5402] exfat: Deprecated parameter 'namecase' [ 131.666031][ T5402] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 131.762557][ T5404] loop0: detected capacity change from 0 to 4096 [ 132.049679][ T5405] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.134624][ T46] kworker/u4:3: attempt to access beyond end of device [ 132.134624][ T46] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 132.952147][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.959714][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.005742][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.573475][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.725853][ T5451] loop0: detected capacity change from 0 to 512 [ 133.741614][ T5451] EXT4-fs: Ignoring removed nobh option [ 133.757944][ T5451] EXT4-fs error (device loop0): __ext4_iget:5102: inode #11: block 1: comm syz.0.387: invalid block [ 133.776566][ T5451] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.387: couldn't read orphan inode 11 (err -117) [ 133.790237][ T5451] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 133.794713][ T14] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.889012][ T14] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 133.911461][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 133.931050][ T14] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.967859][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.026213][ T5438] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.147771][ T5461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'. [ 134.219217][ T5463] loop4: detected capacity change from 0 to 64 [ 134.322411][ T128] usb 2-1: USB disconnect, device number 4 [ 135.661202][ T5484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 135.695994][ T5484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 136.021602][ T5496] loop0: detected capacity change from 0 to 64 [ 136.276406][ T5499] loop4: detected capacity change from 0 to 4096 [ 136.304785][ T5499] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 136.463534][ T5499] ntfs3: loop4: ntfs_sync_inode r=1e failed, -22. [ 136.498715][ T5499] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 136.544577][ T5504] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 136.863532][ T4279] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 137.241924][ T5518] loop1: detected capacity change from 0 to 1024 [ 137.446732][ T4775] hfsplus: b-tree write err: -5, ino 25 [ 137.470039][ T4775] hfsplus: b-tree write err: -5, ino 4 [ 137.475701][ T4775] hfsplus: b-tree write err: -5, ino 2 [ 137.788997][ T5529] ax25_connect(): syz.3.420 uses autobind, please contact jreuter@yaina.de [ 137.816430][ T5529] ax25_connect(): syz.3.420 uses autobind, please contact jreuter@yaina.de [ 139.858310][ T5582] loop3: detected capacity change from 0 to 128 [ 139.981151][ T5592] loop1: detected capacity change from 0 to 64 [ 139.992325][ T5582] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 140.009089][ T5592] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 140.027177][ T5582] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.065348][ T5588] loop2: detected capacity change from 0 to 4096 [ 140.166544][ T5588] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.366560][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 140.434080][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 141.228523][ T5618] netlink: 12611 bytes leftover after parsing attributes in process `syz.1.459'. [ 141.238304][ T128] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 141.391500][ T5624] loop1: detected capacity change from 0 to 512 [ 141.461408][ T128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 141.481717][ T5624] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.462: corrupted in-inode xattr [ 141.549968][ T5624] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.462: couldn't read orphan inode 15 (err -117) [ 141.560349][ T128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.580797][ T5624] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 141.621156][ T128] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 141.696713][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.714061][ T128] usb 5-1: config 0 descriptor?? [ 141.786662][ T4716] EXT4-fs (loop1): unmounting filesystem. [ 142.089118][ T126] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.149135][ T128] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 142.156371][ T128] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 142.179106][ T128] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 142.186396][ T128] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 142.214458][ T5641] loop3: detected capacity change from 0 to 128 [ 142.228607][ T128] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 142.244628][ T5641] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿ" or missing value [ 142.256829][ T128] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0 [ 142.289045][ T128] petalynx 0003:18B1:0037.0003: unknown global tag 0xd [ 142.294474][ T126] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.295964][ T128] petalynx 0003:18B1:0037.0003: item 0 0 1 13 parsing failed [ 142.320765][ T126] usb 1-1: config 0 has no interface number 0 [ 142.348634][ T128] petalynx 0003:18B1:0037.0003: parse failed [ 142.364881][ T126] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.377696][ T126] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.388121][ T126] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 142.397937][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.414411][ T128] petalynx: probe of 0003:18B1:0037.0003 failed with error -22 [ 142.418772][ T126] usb 1-1: config 0 descriptor?? [ 142.444415][ T128] usb 5-1: USB disconnect, device number 3 [ 142.682964][ T5633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.709460][ T5633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.941359][ T126] prodikeys 0003:041E:2801.0004: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 142.971710][ T126] hid_prodikeys: hid-prodikeys: failed to find output report [ 142.971710][ T126] [ 143.191795][ T128] usb 1-1: USB disconnect, device number 5 [ 143.291500][ T5655] fido_id[5655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 143.549322][ T4317] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 143.623322][ T5674] loop4: detected capacity change from 0 to 256 [ 143.769105][ T4317] usb 4-1: Using ep0 maxpacket: 8 [ 143.788658][ T4317] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.831766][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.856279][ T4317] usb 4-1: Product: syz [ 143.866368][ T4317] usb 4-1: Manufacturer: syz [ 143.878624][ T4317] usb 4-1: SerialNumber: syz [ 143.905599][ T4317] usb 4-1: config 0 descriptor?? [ 144.014676][ T5682] hub 1-0:1.0: USB hub found [ 144.021960][ T5682] hub 1-0:1.0: 1 port detected [ 144.140893][ T4317] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.755562][ T4317] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 144.783036][ T4317] usb 4-1: USB disconnect, device number 4 [ 144.952039][ T5703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.496'. [ 145.181218][ T5710] loop0: detected capacity change from 0 to 4096 [ 145.264133][ T5710] NILFS (loop0): invalid segment: Checksum error in segment payload [ 145.299865][ T5710] NILFS (loop0): trying rollback from an earlier position [ 145.379013][ T5710] NILFS (loop0): recovery complete [ 145.447474][ T5715] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.312560][ T5739] loop0: detected capacity change from 0 to 64 [ 146.569236][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.789129][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 146.801110][ T14] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.828594][ T14] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.858183][ T14] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 146.883923][ T14] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 146.908457][ T14] usb 5-1: Product: syz [ 146.920473][ T14] usb 5-1: Manufacturer: syz [ 146.948210][ T14] hub 5-1:4.0: USB hub found [ 147.008889][ T5753] loop1: detected capacity change from 0 to 512 [ 147.033881][ T5755] loop0: detected capacity change from 0 to 256 [ 147.100157][ T5753] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 147.116782][ T5753] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.170642][ T5753] capability: warning: `syz.1.517' uses deprecated v2 capabilities in a way that may be insecure [ 147.182192][ T14] hub 5-1:4.0: 3 ports detected [ 147.280677][ T4716] EXT4-fs (loop1): unmounting filesystem. [ 147.394589][ T14] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 147.410714][ T14] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 147.510321][ T14] usb 5-1: USB disconnect, device number 4 [ 148.257938][ T5781] futex_wake_op: syz.4.527 tries to shift op by -1; fix this program [ 149.345609][ T5809] loop0: detected capacity change from 0 to 256 [ 149.937928][ T5826] loop3: detected capacity change from 0 to 128 [ 149.969795][ T5827] loop2: detected capacity change from 0 to 1024 [ 149.993932][ T5827] EXT4-fs: inline encryption not supported [ 150.015592][ T5826] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 150.062398][ T5827] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 150.099091][ T5827] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.168979][ T4317] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.221956][ T4270] sysv_free_block: trying to free block not in datazone [ 150.232958][ T5827] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.550: bg 0: block 112: padding at end of block bitmap is not set [ 150.269403][ T4270] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 150.382458][ T4317] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 14129, setting to 64 [ 150.414608][ T4317] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.450725][ T4775] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm kworker/u4:8: lblock 3 mapped to illegal pblock 3 (length 3) [ 150.463576][ T4317] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 150.506761][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 150.532522][ T4775] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 150.543267][ T4317] usb 2-1: Product: syz [ 150.559686][ T4317] usb 2-1: Manufacturer: syz [ 150.564506][ T4317] usb 2-1: SerialNumber: syz [ 150.574956][ T4775] EXT4-fs (loop2): This should not happen!! Data will be lost [ 150.574956][ T4775] [ 150.587068][ T4317] usb 2-1: config 0 descriptor?? [ 150.603921][ T4775] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 2) [ 150.620383][ T4775] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 2 with error 117 [ 150.655738][ T4317] usb 2-1: selecting invalid altsetting 0 [ 150.657785][ T4775] EXT4-fs (loop2): This should not happen!! Data will be lost [ 150.657785][ T4775] [ 150.697971][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 150.973175][ T126] usb 2-1: USB disconnect, device number 5 [ 151.158725][ T5821] loop0: detected capacity change from 0 to 40427 [ 151.190449][ T5821] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 151.198691][ T5821] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 151.249454][ T5821] F2FS-fs (loop0): invalid crc value [ 151.286276][ T5821] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 151.461948][ T5821] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 151.481249][ T5821] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 152.295511][ T5877] loop3: detected capacity change from 0 to 1024 [ 152.407307][ T5880] loop0: detected capacity change from 0 to 512 [ 152.472296][ T5883] loop1: detected capacity change from 0 to 256 [ 152.496628][ T11] hfsplus: b-tree write err: -5, ino 25 [ 152.514971][ T11] hfsplus: b-tree write err: -5, ino 4 [ 152.594100][ T5880] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.571: invalid block [ 152.601459][ T11] hfsplus: b-tree write err: -5, ino 2 [ 152.617159][ T5880] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.571: invalid indirect mapped block 10 (level 1) [ 152.637055][ T5880] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.571: invalid indirect mapped block 8 (level 1) [ 152.689706][ T11] hfsplus: b-tree write err: -5, ino 26 [ 152.746637][ T5880] EXT4-fs (loop0): 1 truncate cleaned up [ 152.759100][ T5880] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 152.928597][ T4298] hfsplus: b-tree write err: -5, ino 4 [ 152.955257][ T4298] hfsplus: b-tree write err: -5, ino 2 [ 153.172301][ T5894] batman_adv: batadv0: Adding interface: gretap1 [ 153.234962][ T5894] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.355088][ T5894] batman_adv: batadv0: Interface activated: gretap1 [ 153.396162][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 153.417460][ T5900] loop3: detected capacity change from 0 to 128 [ 153.511506][ T5900] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 153.630607][ T5900] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.845222][ T27] audit: type=1326 audit(1776081170.570:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a59c819 code=0x7ffc0000 [ 153.945446][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 153.948629][ T27] audit: type=1326 audit(1776081170.620:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a59c819 code=0x7ffc0000 [ 154.060215][ T27] audit: type=1326 audit(1776081170.620:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a59c819 code=0x7ffc0000 [ 154.179051][ T27] audit: type=1326 audit(1776081170.620:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a59c819 code=0x7ffc0000 [ 154.264428][ T27] audit: type=1326 audit(1776081170.620:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a59c819 code=0x7ffc0000 [ 154.368968][ T27] audit: type=1326 audit(1776081170.620:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a59c819 code=0x7ffc0000 [ 154.483560][ T27] audit: type=1326 audit(1776081170.620:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a59c819 code=0x7ffc0000 [ 154.599028][ T27] audit: type=1326 audit(1776081170.620:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c9a59c819 code=0x7ffc0000 [ 154.704192][ T5932] loop3: detected capacity change from 0 to 2048 [ 154.767282][ T27] audit: type=1326 audit(1776081170.620:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a59c819 code=0x7ffc0000 [ 154.892910][ T5940] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.926195][ T27] audit: type=1326 audit(1776081170.620:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.1.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9a59c819 code=0x7ffc0000 [ 155.617772][ T5960] loop1: detected capacity change from 0 to 128 [ 156.071408][ T5975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.613'. [ 156.249305][ T4317] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.486502][ T4317] usb 5-1: Using ep0 maxpacket: 16 [ 156.494382][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.522177][ T4317] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.561404][ T4317] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 156.602333][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.635128][ T4317] usb 5-1: config 0 descriptor?? [ 156.642884][ T5982] loop0: detected capacity change from 0 to 8192 [ 156.687481][ T5982] FAT-fs (loop0): Unrecognized mount option "0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff" or missing value [ 156.823704][ T5991] loop2: detected capacity change from 0 to 32768 [ 156.873897][ T5991] JBD2: Ignoring recovery information on journal [ 156.882790][ T5991] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 156.891690][ T5991] JBD2: bad block at offset 32 [ 156.944940][ T5991] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 156.955313][ T4284] Bluetooth: hci3: command 0x0405 tx timeout [ 156.997749][ T5991] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 157.017767][ T5991] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 157.028050][ T5991] OCFS2: File system is now read-only. [ 157.033863][ T5991] (syz.2.619,5991,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 157.041535][ T5991] (syz.2.619,5991,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 157.050064][ T5991] (syz.2.619,5991,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 157.057946][ T5991] (syz.2.619,5991,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 157.066985][ T5991] (syz.2.619,5991,0):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 157.075743][ T5991] (syz.2.619,5991,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 157.084014][ T5991] (syz.2.619,5991,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 157.092243][ T5991] (syz.2.619,5991,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 157.101005][ T5991] (syz.2.619,5991,0):ocfs2_mknod:298 ERROR: status = -5 [ 157.108315][ T5991] (syz.2.619,5991,0):ocfs2_mknod:502 ERROR: status = -5 [ 157.115469][ T5991] (syz.2.619,5991,0):ocfs2_create:676 ERROR: status = -5 [ 157.125564][ T4317] belkin 0003:1020:0006.0005: unknown main item tag 0x0 [ 157.155127][ T5993] loop1: detected capacity change from 0 to 4096 [ 157.161957][ T4317] belkin 0003:1020:0006.0005: unknown main item tag 0x0 [ 157.196369][ T4317] belkin 0003:1020:0006.0005: unknown main item tag 0x0 [ 157.251981][ T4317] belkin 0003:1020:0006.0005: unknown main item tag 0x0 [ 157.293198][ T4317] belkin 0003:1020:0006.0005: unknown main item tag 0x0 [ 157.312924][ T4317] belkin 0003:1020:0006.0005: unknown main item tag 0x0 [ 157.318212][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 157.349880][ T4317] belkin 0003:1020:0006.0005: collection stack underflow [ 157.357140][ T4317] belkin 0003:1020:0006.0005: item 0 4 0 12 parsing failed [ 157.387129][ T4317] belkin 0003:1020:0006.0005: parse failed [ 157.417757][ T4317] belkin: probe of 0003:1020:0006.0005 failed with error -22 [ 157.486154][ T4317] usb 5-1: USB disconnect, device number 5 [ 157.544704][ T5993] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 157.667925][ T5993] ntfs3: loop1: Failed to load $Extend. [ 158.267044][ T6011] loop1: detected capacity change from 0 to 2048 [ 158.454076][ T6011] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 158.626573][ T5998] loop2: detected capacity change from 0 to 32768 [ 158.686212][ T5998] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.621 (5998) [ 158.748658][ T4716] EXT4-fs (loop1): unmounting filesystem. [ 158.763457][ T5998] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 158.822548][ T5998] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 158.863752][ T5998] BTRFS info (device loop2): using free space tree [ 159.073848][ T5998] BTRFS info (device loop2): enabling ssd optimizations [ 159.158208][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 159.158224][ T27] audit: type=1800 audit(1776081175.880:38): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.621" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 159.455333][ T6049] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 159.643968][ T4272] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 159.796536][ T6056] loop0: detected capacity change from 0 to 64 [ 160.314036][ T6054] loop1: detected capacity change from 0 to 8192 [ 160.421393][ T6054] FAT-fs (loop1): Unrecognized mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 160.594874][ T6079] loop0: detected capacity change from 0 to 2048 [ 160.713488][ T6079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.914046][ T27] audit: type=1800 audit(1776081177.640:39): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.641" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 161.947403][ T6084] loop2: detected capacity change from 0 to 32768 [ 162.118282][ T6084] XFS (loop2): Mounting V5 Filesystem [ 162.215390][ T6084] XFS (loop2): Ending clean mount [ 162.462872][ T4272] XFS (loop2): Unmounting Filesystem [ 162.584638][ T128] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.791203][ T128] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 162.819147][ T128] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 162.865308][ T128] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.895386][ T128] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 162.935551][ T128] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 162.976050][ T128] usb 1-1: Product: syz [ 162.996302][ T128] usb 1-1: Manufacturer: syz [ 163.006412][ T128] usb 1-1: SerialNumber: syz [ 163.030000][ T128] usb 1-1: config 0 descriptor?? [ 163.077520][ T128] hub 1-1:0.0: bad descriptor, ignoring hub [ 163.083596][ T128] hub: probe of 1-1:0.0 failed with error -5 [ 163.127305][ T128] usb 1-1: selecting invalid altsetting 0 [ 163.155211][ T6104] loop1: detected capacity change from 0 to 32768 [ 163.217896][ T6104] (syz.1.654,6104,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.305071][ T6104] (syz.1.654,6104,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.382262][ T6104] JBD2: Ignoring recovery information on journal [ 163.483848][ T6132] loop2: detected capacity change from 0 to 512 [ 163.528323][ T6104] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 163.739008][ T6118] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 163.973318][ T6118] usb 1-1: device firmware changed [ 164.002991][ T6064] usb 1-1: USB disconnect, device number 6 [ 164.118495][ T4716] ocfs2: Unmounting device (7,1) on (node local) [ 164.189043][ T6064] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 164.234806][ T6140] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 164.391262][ T6064] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 164.420358][ T6064] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 164.449250][ T6064] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.498516][ T6064] usb 1-1: string descriptor 0 read error: -22 [ 164.519086][ T6064] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 164.528856][ T6064] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 164.565800][ T6064] usb 1-1: config 0 descriptor?? [ 164.595280][ T6064] hub 1-1:0.0: bad descriptor, ignoring hub [ 164.614472][ T6064] hub: probe of 1-1:0.0 failed with error -5 [ 164.643759][ T6064] usb 1-1: selecting invalid altsetting 0 [ 164.909962][ T6150] loop1: detected capacity change from 0 to 1024 [ 164.937572][ T6150] EXT4-fs: inline encryption not supported [ 165.019492][ T4317] usb 1-1: USB disconnect, device number 7 [ 165.201666][ T6137] syz.4.664 (6137): drop_caches: 2 [ 165.221142][ T6150] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.250396][ T6150] EXT4-fs (loop1): Test dummy encryption mode enabled [ 165.311099][ T6150] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 165.359312][ T6146] loop2: detected capacity change from 0 to 32768 [ 165.377186][ T6146] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.676 (6146) [ 165.395798][ T6146] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 165.406763][ T6146] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 165.416357][ T6146] BTRFS info (device loop2): using free space tree [ 165.761386][ T6146] BTRFS info (device loop2): enabling ssd optimizations [ 165.774515][ T4716] EXT4-fs (loop1): unmounting filesystem. [ 166.100997][ T4272] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 167.212655][ T6195] loop2: detected capacity change from 0 to 512 [ 167.245678][ T6186] loop0: detected capacity change from 0 to 32768 [ 167.312449][ T6195] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.675: invalid block [ 167.356992][ T6186] (syz.0.673,6186,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 167.383845][ T6195] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.675: invalid indirect mapped block 10 (level 1) [ 167.429412][ T6195] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.675: invalid indirect mapped block 8 (level 1) [ 167.451442][ T6186] (syz.0.673,6186,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 167.479810][ T6195] EXT4-fs (loop2): 1 truncate cleaned up [ 167.491339][ T6195] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 167.603462][ T6186] JBD2: Ignoring recovery information on journal [ 167.774027][ T6186] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 168.022870][ T6191] loop3: detected capacity change from 0 to 32768 [ 168.057471][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 168.066971][ T4266] ocfs2: Unmounting device (7,0) on (node local) [ 168.215226][ T6191] XFS (loop3): Mounting V5 Filesystem [ 168.396170][ T6191] XFS (loop3): Ending clean mount [ 168.603541][ T4270] XFS (loop3): Unmounting Filesystem [ 169.424031][ T6231] netlink: 'syz.0.699': attribute type 18 has an invalid length. [ 169.458220][ T6225] loop2: detected capacity change from 0 to 8192 [ 169.513797][ T6225] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff" or missing value [ 169.719014][ T6062] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 169.909382][ T6062] usb 4-1: Using ep0 maxpacket: 32 [ 169.939243][ T6062] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 169.989123][ T6062] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 170.034239][ T6062] usb 4-1: string descriptor 0 read error: -22 [ 170.066636][ T6062] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 170.127174][ T6062] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.159573][ T6233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 170.183764][ T6062] usb 4-1: MIDIStreaming interface descriptor not found [ 170.516320][ T6061] usb 4-1: USB disconnect, device number 5 [ 170.667282][ T6255] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 170.931029][ T6265] loop1: detected capacity change from 0 to 256 [ 171.024346][ T6265] FAT-fs (loop1): Directory bread(block 64) failed [ 171.067010][ T6265] FAT-fs (loop1): Directory bread(block 65) failed [ 171.112456][ T6265] FAT-fs (loop1): Directory bread(block 66) failed [ 171.132148][ T6265] FAT-fs (loop1): Directory bread(block 67) failed [ 171.167371][ T6265] FAT-fs (loop1): Directory bread(block 68) failed [ 171.203114][ T6265] FAT-fs (loop1): Directory bread(block 69) failed [ 171.239080][ T6265] FAT-fs (loop1): Directory bread(block 70) failed [ 171.275164][ T6265] FAT-fs (loop1): Directory bread(block 71) failed [ 171.318669][ T6265] FAT-fs (loop1): Directory bread(block 72) failed [ 171.364312][ T6265] FAT-fs (loop1): Directory bread(block 73) failed [ 171.554624][ T6265] syz.1.698: attempt to access beyond end of device [ 171.554624][ T6265] loop1: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 171.888997][ T6062] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.011553][ T6290] sp0: Synchronizing with TNC [ 172.079080][ T6062] usb 4-1: Using ep0 maxpacket: 32 [ 172.086383][ T6062] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 172.114839][ T6062] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 172.146102][ T6062] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 172.165494][ T6295] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 172.188963][ T6062] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 172.225514][ T6062] usb 4-1: config 0 interface 0 has no altsetting 0 [ 172.252701][ T6062] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 172.294365][ T6062] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 172.316835][ T6062] usb 4-1: Product: syz [ 172.343027][ T6062] usb 4-1: Manufacturer: syz [ 172.347745][ T6062] usb 4-1: SerialNumber: syz [ 172.381433][ T6062] usb 4-1: config 0 descriptor?? [ 172.387821][ T6298] loop1: detected capacity change from 0 to 512 [ 172.407825][ T6062] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 172.444705][ T6062] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 172.453937][ T6298] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 172.763015][ T4716] EXT4-fs (loop1): unmounting filesystem. [ 172.968690][ T6310] loop2: detected capacity change from 0 to 2048 [ 173.014223][ T6310] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 173.100334][ T6310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.378989][ T4317] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 173.398460][ T6319] loop2: detected capacity change from 0 to 2048 [ 173.447491][ T6319] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.566523][ T4317] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 173.589086][ T4317] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 173.611445][ T4317] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.628645][ T4317] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 173.637971][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 173.652781][ T4317] usb 5-1: Product: syz [ 173.657029][ T4317] usb 5-1: Manufacturer: syz [ 173.664262][ T4317] usb 5-1: SerialNumber: syz [ 173.681454][ T4317] usb 5-1: config 0 descriptor?? [ 173.688580][ T4317] hub 5-1:0.0: bad descriptor, ignoring hub [ 173.698219][ T4317] hub: probe of 5-1:0.0 failed with error -5 [ 173.734490][ T4317] usb 5-1: selecting invalid altsetting 0 [ 173.765413][ T6312] loop1: detected capacity change from 0 to 32768 [ 173.808761][ T6321] loop2: detected capacity change from 0 to 7 [ 173.843837][ T4370] Dev loop2: unable to read RDB block 7 [ 173.851731][ T4370] loop2: unable to read partition table [ 173.877995][ T4370] loop2: partition table beyond EOD, truncated [ 173.900742][ T6312] JBD2: Ignoring recovery information on journal [ 173.953370][ T6321] Dev loop2: unable to read RDB block 7 [ 174.036913][ T6321] loop2: unable to read partition table [ 174.067561][ T6321] loop2: partition table beyond EOD, truncated [ 174.091658][ T6312] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 174.112491][ T6321] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 174.278505][ T4716] ocfs2: Unmounting device (7,1) on (node local) [ 174.689120][ T6316] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 174.705344][ T6062] usb 4-1: USB disconnect, device number 6 [ 174.720952][ T6062] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 174.796484][ T6336] loop1: detected capacity change from 0 to 4096 [ 174.833816][ T6336] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 174.902474][ T6316] usb 5-1: device firmware changed [ 174.912703][ T6069] usb 5-1: USB disconnect, device number 6 [ 175.075664][ T6336] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 175.098837][ T6336] ntfs3: loop1: ino=1b, "file0" attr_set_size [ 175.118848][ T6345] loop3: detected capacity change from 0 to 128 [ 175.125347][ T6069] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 175.182981][ T6345] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 175.203028][ T6345] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.341020][ T6069] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 175.350882][ T6069] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 175.383680][ T6069] usb 5-1: config 0 interface 0 has no altsetting 0 [ 175.402947][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 175.403437][ T6069] usb 5-1: string descriptor 0 read error: -22 [ 175.427531][ T4716] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 175.463637][ T4716] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 175.479676][ T6069] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 175.516180][ T6069] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 175.583757][ T6069] usb 5-1: config 0 descriptor?? [ 175.619600][ T6069] hub 5-1:0.0: bad descriptor, ignoring hub [ 175.625723][ T6069] hub: probe of 5-1:0.0 failed with error -5 [ 175.667088][ T6069] usb 5-1: selecting invalid altsetting 0 [ 176.012496][ T6062] usb 5-1: USB disconnect, device number 7 [ 176.192731][ T6360] loop1: detected capacity change from 0 to 512 [ 176.197608][ T6361] loop0: detected capacity change from 0 to 512 [ 176.225534][ T6361] EXT4-fs: Ignoring removed nobh option [ 176.249812][ T6361] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 176.272710][ T6360] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.297974][ T6361] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.342726][ T6360] EXT4-fs (loop1): 1 truncate cleaned up [ 176.359060][ T6360] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 176.373181][ T6361] EXT4-fs (loop0): 1 truncate cleaned up [ 176.403023][ T6361] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 176.495445][ T6351] loop3: detected capacity change from 0 to 32768 [ 176.678323][ T6351] XFS (loop3): Mounting V5 Filesystem [ 176.770880][ T4716] EXT4-fs (loop1): unmounting filesystem. [ 176.796514][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 176.949568][ T4284] Bluetooth: hci1: command 0x2016 tx timeout [ 176.980589][ T6351] XFS (loop3): Ending clean mount [ 177.064727][ T6384] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 177.170475][ T6384] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 177.564987][ T4270] XFS (loop3): Unmounting Filesystem [ 178.255463][ T6401] set_capacity_and_notify: 1 callbacks suppressed [ 178.255485][ T6401] loop2: detected capacity change from 0 to 8192 [ 178.312375][ T6401] FAT-fs (loop2): Unrecognized mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 179.928299][ T6420] loop2: detected capacity change from 0 to 32768 [ 179.977404][ T6420] (syz.2.759,6420,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.068190][ T6420] (syz.2.759,6420,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.242222][ T6420] JBD2: Ignoring recovery information on journal [ 180.344420][ T6420] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 180.503148][ T6454] ALSA: mixer_oss: invalid OSS volume '' [ 180.615807][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 181.293645][ T6469] loop2: detected capacity change from 0 to 512 [ 181.335000][ T6469] EXT4-fs: Ignoring removed orlov option [ 181.346479][ T6469] EXT4-fs (loop2): Test dummy encryption mode enabled [ 181.410325][ T6469] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 181.450643][ T6469] EXT4-fs (loop2): 1 truncate cleaned up [ 181.456391][ T6469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.664642][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 181.848310][ T6485] loop2: detected capacity change from 0 to 128 [ 181.923890][ T6485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 181.953334][ T6485] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.992213][ T6489] loop3: detected capacity change from 0 to 64 [ 182.187225][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 182.201551][ T6492] loop0: detected capacity change from 0 to 512 [ 182.249055][ T6492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.351541][ T6492] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.788: invalid indirect mapped block 4294967295 (level 1) [ 182.391740][ T6492] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.788: invalid indirect mapped block 4294967295 (level 1) [ 182.408586][ T6492] EXT4-fs (loop0): 2 truncates cleaned up [ 182.416299][ T6492] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 182.493675][ T6492] netlink: 104 bytes leftover after parsing attributes in process `syz.0.788'. [ 182.588015][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 182.589675][ T6061] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 182.799231][ T6061] usb 5-1: Using ep0 maxpacket: 16 [ 182.807816][ T6061] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.848949][ T6061] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.923800][ T6061] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.931177][ T6061] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 182.968279][ T6061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.009047][ T6061] usb 5-1: config 0 descriptor?? [ 183.253126][ T6484] loop1: detected capacity change from 0 to 40427 [ 183.300663][ T6484] F2FS-fs (loop1): build fault injection attr: rate: 684, type: 0x3ffff [ 183.354781][ T6484] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 183.410850][ T6484] F2FS-fs (loop1): invalid crc value [ 183.439745][ T6061] hid (null): report_id 4846 is invalid [ 183.459248][ T6061] hid (null): invalid report_count -251170499 [ 183.465532][ T6061] hid (null): global environment stack underflow [ 183.483187][ T6484] F2FS-fs (loop1): Found nat_bits in checkpoint [ 183.507829][ T6061] hid (null): global environment stack underflow [ 183.539374][ T6061] hid (null): unknown global tag 0xc [ 183.546369][ T6061] hid (null): usage index exceeded [ 183.600789][ T6484] F2FS-fs (loop1): Start checkpoint disabled! [ 183.645707][ T22] usb 5-1: USB disconnect, device number 8 [ 183.670139][ T6484] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 183.738436][ T6528] loop2: detected capacity change from 0 to 1024 [ 183.803831][ T6528] EXT4-fs: Ignoring removed bh option [ 183.820358][ T6484] syz.1.784: attempt to access beyond end of device [ 183.820358][ T6484] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.838534][ T6528] EXT4-fs: Ignoring removed bh option [ 183.885260][ T6528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 183.914329][ T6484] F2FS-fs (loop1) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x178/0x910 [ 183.936737][ T6528] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 184.089979][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 184.093767][ T9] kworker/u4:0: attempt to access beyond end of device [ 184.093767][ T9] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 184.789131][ T4286] Bluetooth: hci0: command 0x2016 tx timeout [ 185.189037][ T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.273484][ T6545] loop3: detected capacity change from 0 to 32768 [ 185.380421][ T6545] XFS (loop3): Mounting V5 Filesystem [ 185.389298][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 185.397140][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.429190][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.441398][ T22] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 185.455044][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.465372][ T22] usb 5-1: config 0 descriptor?? [ 185.474206][ T22] hub 5-1:0.0: USB hub found [ 185.506648][ T6545] XFS (loop3): Ending clean mount [ 185.565484][ T6574] loop2: detected capacity change from 0 to 256 [ 185.677797][ T22] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 185.743805][ T4270] XFS (loop3): Unmounting Filesystem [ 185.806859][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 186.129371][ T22] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 186.419235][ T22] usb 5-1: USB disconnect, device number 9 [ 186.477090][ T6586] fido_id[6586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 186.832636][ T6591] loop1: detected capacity change from 0 to 4096 [ 186.993586][ T6581] loop2: detected capacity change from 0 to 32768 [ 187.067799][ T6581] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.820 (6581) [ 187.128256][ T6581] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.143418][ T6581] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 187.152795][ T6581] BTRFS info (device loop2): setting nodatasum [ 187.160858][ T6581] BTRFS info (device loop2): force zlib compression, level 3 [ 187.168319][ T6581] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 187.180170][ T6581] BTRFS info (device loop2): use lzo compression, level 0 [ 187.188343][ T6581] BTRFS info (device loop2): turning on flush-on-commit [ 187.196273][ T6581] BTRFS info (device loop2): enabling auto defrag [ 187.203214][ T6581] BTRFS info (device loop2): max_inline at 4096 [ 187.209979][ T6581] BTRFS info (device loop2): using free space tree [ 187.217134][ T6591] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 187.560545][ T6581] BTRFS info (device loop2): enabling ssd optimizations [ 187.585216][ T27] audit: type=1800 audit(1776081204.310:40): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.823" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 187.673877][ T6610] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.823: corrupted inode contents [ 187.821440][ T6610] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #15: comm syz.1.823: mark_inode_dirty error [ 187.890846][ T4272] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.919387][ T6610] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.823: corrupted inode contents [ 188.033908][ T6610] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.823: mark_inode_dirty error [ 188.163324][ T6610] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.823: corrupted inode contents [ 188.294845][ T6610] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.823: mark_inode_dirty error [ 188.332595][ T6610] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.823: corrupted inode contents [ 188.370948][ T6610] EXT4-fs error (device loop1): ext4_truncate:4325: inode #15: comm syz.1.823: mark_inode_dirty error [ 188.484254][ T6610] EXT4-fs error (device loop1) in ext4_setattr:5695: Corrupt filesystem [ 188.738459][ T4716] EXT4-fs (loop1): unmounting filesystem. [ 188.794832][ T128] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.859106][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 188.984756][ T128] usb 5-1: Using ep0 maxpacket: 16 [ 188.992075][ T128] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.032335][ T6644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.834'. [ 189.039481][ T128] usb 5-1: config 0 has no interface number 0 [ 189.048721][ T128] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.062203][ T22] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 189.072924][ T22] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 189.085292][ T128] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.098768][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.108297][ T128] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 189.121554][ T22] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 189.141184][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.158955][ T22] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 189.172933][ T128] usb 5-1: config 0 descriptor?? [ 189.180380][ T22] usb 3-1: Product: syz [ 189.187089][ T22] usb 3-1: Manufacturer: syz [ 189.200816][ T22] usb 3-1: SerialNumber: syz [ 189.223578][ T22] usb 3-1: config 0 descriptor?? [ 189.240460][ T22] hub 3-1:0.0: bad descriptor, ignoring hub [ 189.253159][ T22] hub: probe of 3-1:0.0 failed with error -5 [ 189.274671][ T22] usb 3-1: selecting invalid altsetting 0 [ 189.806025][ T128] uclogic 0003:28BD:0071.0008: pen parameters not found [ 189.819028][ T128] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring [ 189.843020][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.870458][ T6654] device batadv_slave_0 entered promiscuous mode [ 189.903582][ T6638] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 189.913068][ T6654] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 190.028110][ T128] usb 5-1: USB disconnect, device number 10 [ 190.124132][ T6638] usb 3-1: device firmware changed [ 190.136320][ T6062] usb 3-1: USB disconnect, device number 3 [ 190.244572][ T6660] loop0: detected capacity change from 0 to 16 [ 190.264206][ T6660] erofs: (device loop0): mounted with root inode @ nid 36. [ 190.319142][ T6062] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 190.526948][ T6062] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 190.539125][ T6062] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 190.562329][ T6062] usb 3-1: config 0 interface 0 has no altsetting 0 [ 190.593739][ T6062] usb 3-1: string descriptor 0 read error: -22 [ 190.609052][ T6062] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 190.622953][ T6062] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 190.664557][ T6062] usb 3-1: config 0 descriptor?? [ 190.685513][ T6062] hub 3-1:0.0: bad descriptor, ignoring hub [ 190.702891][ T6062] hub: probe of 3-1:0.0 failed with error -5 [ 190.739943][ T6062] usb 3-1: selecting invalid altsetting 0 [ 191.119354][ T6062] usb 3-1: USB disconnect, device number 4 [ 192.479079][ T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 192.684765][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 192.692410][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.720280][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.750435][ T22] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.770350][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.795893][ T22] usb 1-1: Product: syz [ 192.800357][ T22] usb 1-1: Manufacturer: syz [ 192.805109][ T22] usb 1-1: SerialNumber: syz [ 192.889144][ T26] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 192.936136][ T6682] loop1: detected capacity change from 0 to 32768 [ 192.979129][ T128] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 193.012074][ T6682] XFS (loop1): Mounting V5 Filesystem [ 193.032826][ T22] usb 1-1: 0:2 : does not exist [ 193.051645][ T22] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 193.075505][ T22] usb 1-1: USB disconnect, device number 8 [ 193.086096][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 193.099463][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.178203][ T128] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 193.204017][ T128] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 193.214723][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.256311][ T128] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.266485][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.287602][ T26] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 193.298941][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.308577][ T128] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 193.325646][ T26] usb 3-1: config 0 descriptor?? [ 193.332584][ T128] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 193.347840][ T128] usb 4-1: Product: syz [ 193.360218][ T128] usb 4-1: Manufacturer: syz [ 193.365267][ T128] usb 4-1: SerialNumber: syz [ 193.380996][ T128] usb 4-1: config 0 descriptor?? [ 193.401163][ T6682] XFS (loop1): Ending clean mount [ 193.408183][ T128] hub 4-1:0.0: bad descriptor, ignoring hub [ 193.414739][ T128] hub: probe of 4-1:0.0 failed with error -5 [ 193.424933][ T128] usb 4-1: selecting invalid altsetting 0 [ 193.461085][ T5306] udevd[5306]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.751601][ T4716] XFS (loop1): Unmounting Filesystem [ 193.766485][ T26] microsoft 0003:045E:07DA.0009: unknown main item tag 0x4 [ 193.965257][ T26] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 193.996741][ T26] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 194.029081][ T26] microsoft 0003:045E:07DA.0009: no inputs found [ 194.035594][ T26] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 194.068993][ T6714] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 194.088736][ T26] usb 3-1: USB disconnect, device number 5 [ 194.281379][ T6714] usb 4-1: device firmware changed [ 194.295265][ T22] usb 4-1: USB disconnect, device number 7 [ 194.356781][ T6731] fido_id[6731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 194.393185][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.399950][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.508967][ T22] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 194.711573][ T22] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 194.728997][ T22] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 194.759663][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.777639][ T22] usb 4-1: string descriptor 0 read error: -22 [ 194.797825][ T22] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.819473][ T22] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.844513][ T22] usb 4-1: config 0 descriptor?? [ 194.861510][ T22] hub 4-1:0.0: bad descriptor, ignoring hub [ 194.889004][ T22] hub: probe of 4-1:0.0 failed with error -5 [ 194.930067][ T22] usb 4-1: selecting invalid altsetting 0 [ 195.269384][ T6062] usb 4-1: USB disconnect, device number 8 [ 196.247147][ T6761] loop2: detected capacity change from 0 to 512 [ 196.477793][ T6761] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.882: corrupted inode contents [ 196.531444][ T6761] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #16: comm syz.2.882: mark_inode_dirty error [ 196.563885][ T6761] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.882: corrupted inode contents [ 196.608163][ T6761] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.882: mark_inode_dirty error [ 196.621362][ T27] audit: type=1326 audit(1776081213.350:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfc39c819 code=0x7ffc0000 [ 196.653244][ T6761] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.882: corrupted inode contents [ 196.688981][ T27] audit: type=1326 audit(1776081213.350:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfc39c819 code=0x7ffc0000 [ 196.740078][ T6761] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 196.778084][ T6761] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.882: corrupted inode contents [ 196.818980][ T27] audit: type=1326 audit(1776081213.370:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f2dfc39c819 code=0x7ffc0000 [ 196.846483][ T6761] EXT4-fs error (device loop2): ext4_truncate:4325: inode #16: comm syz.2.882: mark_inode_dirty error [ 196.872198][ T6761] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 196.888963][ T27] audit: type=1326 audit(1776081213.370:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfc39c819 code=0x7ffc0000 [ 196.924633][ T6761] EXT4-fs (loop2): 1 truncate cleaned up [ 196.942197][ T4298] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 196.964935][ T6761] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 196.978183][ T4298] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 196.990685][ T27] audit: type=1326 audit(1776081213.370:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfc39c819 code=0x7ffc0000 [ 197.019250][ T6761] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.067884][ T6775] netlink: 'syz.0.887': attribute type 9 has an invalid length. [ 197.079063][ T27] audit: type=1326 audit(1776081213.380:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f2dfc39c819 code=0x7ffc0000 [ 197.153297][ T27] audit: type=1326 audit(1776081213.380:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfc39c819 code=0x7ffc0000 [ 197.277129][ T27] audit: type=1326 audit(1776081213.380:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfc39c819 code=0x7ffc0000 [ 197.354927][ T27] audit: type=1326 audit(1776081213.410:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f2dfc39c819 code=0x7ffc0000 [ 197.538670][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 197.879100][ T4316] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 198.084183][ T4316] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 198.111422][ T4316] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 198.159014][ T4316] usb 2-1: config 0 interface 0 has no altsetting 0 [ 198.177743][ T4316] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 198.196178][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 198.219160][ T4316] usb 2-1: Product: syz [ 198.223425][ T4316] usb 2-1: Manufacturer: syz [ 198.256747][ T4316] usb 2-1: SerialNumber: syz [ 198.284556][ T4316] usb 2-1: config 0 descriptor?? [ 198.305904][ T4316] hub 2-1:0.0: bad descriptor, ignoring hub [ 198.329293][ T4316] hub: probe of 2-1:0.0 failed with error -5 [ 198.356955][ T4316] usb 2-1: selecting invalid altsetting 0 [ 198.999624][ T6784] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 199.074291][ T6831] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 199.093333][ T6831] syzkaller1: linktype set to 776 [ 199.226551][ T6784] usb 2-1: device firmware changed [ 199.250906][ T6069] usb 2-1: USB disconnect, device number 6 [ 199.469021][ T6069] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 199.501243][ T6844] loop2: detected capacity change from 0 to 512 [ 199.592930][ T6844] FAT-fs (loop2): Directory bread(block 199916) failed [ 199.629171][ T6844] FAT-fs (loop2): Directory bread(block 199917) failed [ 199.641046][ T6844] FAT-fs (loop2): Directory bread(block 199918) failed [ 199.648209][ T6844] FAT-fs (loop2): Directory bread(block 199919) failed [ 199.661317][ T6069] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 199.677400][ T6069] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 199.689160][ T6844] FAT-fs (loop2): Directory bread(block 199920) failed [ 199.716622][ T6844] FAT-fs (loop2): Directory bread(block 199921) failed [ 199.733457][ T6069] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.737122][ T6844] FAT-fs (loop2): Directory bread(block 199922) failed [ 199.763976][ T6069] usb 2-1: string descriptor 0 read error: -22 [ 199.778166][ T6844] FAT-fs (loop2): Directory bread(block 199923) failed [ 199.806794][ T6069] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 199.833288][ T6069] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 199.887064][ T6069] usb 2-1: config 0 descriptor?? [ 199.912291][ T6069] hub 2-1:0.0: bad descriptor, ignoring hub [ 199.916648][ T6844] FAT-fs (loop2): FAT read failed (blocknr 128) [ 199.959066][ T6069] hub: probe of 2-1:0.0 failed with error -5 [ 199.967853][ T6069] usb 2-1: selecting invalid altsetting 0 [ 200.279481][ T6069] usb 2-1: USB disconnect, device number 7 [ 200.476313][ T6838] loop3: detected capacity change from 0 to 32768 [ 200.573108][ T6838] XFS (loop3): Mounting V5 Filesystem [ 200.749711][ T6838] XFS (loop3): Ending clean mount [ 200.794958][ T6838] XFS (loop3): Quotacheck needed: Please wait. [ 200.915652][ T6878] loop2: detected capacity change from 0 to 512 [ 200.919635][ T6838] XFS (loop3): Quotacheck: Done. [ 200.940060][ T6878] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.991428][ T6878] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 201.059072][ T6878] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.281656][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 201.320568][ T4270] XFS (loop3): Unmounting Filesystem [ 201.590660][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 201.590690][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 201.596749][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 201.596785][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 202.140511][ T6906] program syz.2.938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.278738][ T6911] loop3: detected capacity change from 0 to 1024 [ 202.330055][ T6911] EXT4-fs: Ignoring removed bh option [ 202.405428][ T6911] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.419447][ T6911] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.701948][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 202.886005][ T6932] netlink: 76 bytes leftover after parsing attributes in process `syz.3.945'. [ 203.276097][ T6938] syz.4.948 (6938) used greatest stack depth: 19824 bytes left [ 203.359102][ T6069] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 203.549177][ T6069] usb 3-1: Using ep0 maxpacket: 32 [ 203.559113][ T26] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 203.563840][ T6069] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 203.594560][ T6069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.609608][ T6069] usb 3-1: Product: syz [ 203.614154][ T6069] usb 3-1: Manufacturer: syz [ 203.624951][ T6069] usb 3-1: SerialNumber: syz [ 203.638610][ T6069] usb 3-1: config 0 descriptor?? [ 203.680855][ T22] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 203.770884][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 203.798655][ T26] usb 4-1: config 0 has no interfaces? [ 203.824778][ T26] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 203.839127][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.857680][ T26] usb 4-1: Product: syz [ 203.867806][ T26] usb 4-1: Manufacturer: syz [ 203.875534][ T22] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 203.888964][ T26] usb 4-1: SerialNumber: syz [ 203.894500][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.913029][ T26] usb 4-1: config 0 descriptor?? [ 203.928666][ T22] usb 5-1: config 0 descriptor?? [ 203.948722][ T22] cp210x 5-1:0.0: cp210x converter detected [ 204.023710][ T6958] netlink: 56 bytes leftover after parsing attributes in process `syz.1.956'. [ 204.193324][ T128] usb 4-1: USB disconnect, device number 9 [ 204.265189][ T6069] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 204.285949][ T6069] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 204.303235][ T6069] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 204.358520][ T22] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 204.384584][ T22] usb 5-1: cp210x converter now attached to ttyUSB0 [ 204.394006][ T6069] peak_usb: probe of 3-1:0.0 failed with error -22 [ 204.472539][ T6069] usb 3-1: USB disconnect, device number 6 [ 204.587839][ T6061] usb 5-1: USB disconnect, device number 11 [ 204.614208][ T6061] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 204.661616][ T6061] cp210x 5-1:0.0: device disconnected [ 204.704786][ T6972] loop1: detected capacity change from 0 to 2048 [ 204.795226][ T6972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 204.822801][ T6972] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.046831][ T4716] EXT4-fs (loop1): unmounting filesystem. [ 205.119328][ T6072] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 205.235023][ T6985] netlink: 56 bytes leftover after parsing attributes in process `syz.2.968'. [ 205.339032][ T6072] usb 4-1: Using ep0 maxpacket: 32 [ 205.369148][ T6072] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 205.377429][ T6072] usb 4-1: config 0 has no interface number 0 [ 205.403253][ T6072] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 205.435195][ T6072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.446520][ T6988] loop0: detected capacity change from 0 to 4096 [ 205.455287][ T6072] usb 4-1: Product: syz [ 205.516334][ T6072] usb 4-1: Manufacturer: syz [ 205.531350][ T6072] usb 4-1: SerialNumber: syz [ 205.562632][ T6072] usb 4-1: config 0 descriptor?? [ 205.611227][ T6072] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 205.803497][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.853390][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.891717][ T4266] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 205.898365][ T4266] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 206.278627][ T6072] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 206.316903][ T6072] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 206.398116][ T7013] loop2: detected capacity change from 0 to 256 [ 206.460824][ T7013] exfat: Deprecated parameter 'utf8' [ 206.480608][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 206.488513][ T6072] usb 4-1: USB disconnect, device number 10 [ 206.513663][ T6072] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 206.544281][ T7013] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 206.603218][ T6072] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 206.662390][ T6072] quatech2 4-1:0.51: device disconnected [ 207.096602][ T7029] loop1: detected capacity change from 0 to 8 [ 207.112321][ T7026] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 207.118816][ T22] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 207.126591][ T7026] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.182780][ T7026] vhci_hcd vhci_hcd.0: Device attached [ 207.360781][ T22] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.376392][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.410043][ T22] usb 5-1: config 0 descriptor?? [ 207.418965][ T6069] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 207.429101][ T6072] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 207.437704][ T22] cp210x 5-1:0.0: cp210x converter detected [ 207.623301][ T6069] usb 1-1: config 7 interface 0 has no altsetting 0 [ 207.645086][ T6069] usb 1-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=d5.27 [ 207.660663][ T6069] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.672371][ T6069] usb 1-1: Product: syz [ 207.676609][ T6069] usb 1-1: Manufacturer: syz [ 207.689064][ T6069] usb 1-1: SerialNumber: syz [ 207.825005][ T22] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 207.949456][ T7027] vhci_hcd: unknown pdu 1 [ 207.956711][ T6069] au0828: au0828: Device initialization failed. [ 207.969062][ T6069] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 207.986666][ T4296] vhci_hcd: stop threads [ 207.991197][ T4296] vhci_hcd: release socket [ 208.019375][ T4296] vhci_hcd: disconnect device [ 208.027390][ T6069] usb 1-1: USB disconnect, device number 9 [ 208.050700][ T22] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 208.058709][ T22] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 208.103164][ T22] usb 5-1: cp210x converter now attached to ttyUSB0 [ 208.147686][ T22] usb 5-1: USB disconnect, device number 12 [ 208.172467][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 208.200883][ T22] cp210x 5-1:0.0: device disconnected [ 208.234753][ T7039] loop3: detected capacity change from 0 to 32768 [ 208.258716][ T7039] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.991 (7039) [ 208.281293][ T7048] netlink: 'syz.1.995': attribute type 3 has an invalid length. [ 208.293049][ T7048] netlink: 56 bytes leftover after parsing attributes in process `syz.1.995'. [ 208.315906][ T7039] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.334326][ T7039] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 208.347486][ T7039] BTRFS info (device loop3): force clearing of disk cache [ 208.372300][ T7039] BTRFS info (device loop3): metadata ratio 0 [ 208.406287][ T7039] BTRFS info (device loop3): enabling ssd optimizations [ 208.470688][ T7039] BTRFS info (device loop3): using spread ssd allocation scheme [ 208.478621][ T7039] BTRFS info (device loop3): using free space tree [ 208.800444][ T7044] loop2: detected capacity change from 0 to 32768 [ 208.876271][ T7044] jfs_create: dtInsert returned -EIO [ 208.883801][ T7044] ERROR: (device loop2): jfs_create: [ 208.883801][ T7044] [ 208.896144][ T7039] BTRFS info (device loop3): rebuilding free space tree [ 208.906024][ T7044] ERROR: (device loop2): remounting filesystem as read-only [ 209.490125][ T4270] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.615248][ T7090] ax25_connect(): syz.1.1005 uses autobind, please contact jreuter@yaina.de [ 209.926960][ T5307] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop3 scanned by udevd (5307) [ 210.160416][ T7064] loop0: detected capacity change from 0 to 32768 [ 210.269000][ T6062] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 210.320818][ T7064] XFS (loop0): Mounting V5 Filesystem [ 210.455577][ T7064] XFS (loop0): Ending clean mount [ 210.478990][ T6062] usb 3-1: Using ep0 maxpacket: 32 [ 210.486090][ T6062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.497191][ T6062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.507618][ T6062] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 210.528339][ T6062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.560329][ T6062] usb 3-1: config 0 descriptor?? [ 210.590968][ T6062] hub 3-1:0.0: USB hub found [ 210.714177][ T4266] XFS (loop0): Unmounting Filesystem [ 210.786720][ T6062] hub 3-1:0.0: 6 ports detected [ 210.796000][ T6062] hub 3-1:0.0: insufficient power available to use all downstream ports [ 211.000611][ T6062] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 211.007386][ T6062] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 211.088162][ T6062] usbhid 3-1:0.0: can't add hid device: -71 [ 211.096212][ T6062] usbhid: probe of 3-1:0.0 failed with error -71 [ 211.153200][ T6062] usb 3-1: USB disconnect, device number 7 [ 211.987095][ T7143] loop2: detected capacity change from 0 to 64 [ 212.204890][ T7153] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1028'. [ 212.237814][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 212.556426][ T6072] vhci_hcd: vhci_device speed not set [ 212.755885][ T7166] loop2: detected capacity change from 0 to 512 [ 213.318502][ T7151] loop3: detected capacity change from 0 to 32768 [ 213.485789][ T7151] XFS (loop3): Mounting V5 Filesystem [ 213.492074][ T7181] loop1: detected capacity change from 0 to 4096 [ 213.547976][ T7181] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 213.568652][ T7151] XFS (loop3): Ending clean mount [ 213.762440][ T7181] ntfs3: loop1: failed to convert "c46c" to iso8859-15 [ 213.836800][ T4270] XFS (loop3): Unmounting Filesystem [ 214.126345][ T7206] loop2: detected capacity change from 0 to 128 [ 214.609152][ T6062] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 214.810278][ T6062] usb 2-1: Using ep0 maxpacket: 8 [ 214.817713][ T6062] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 214.840955][ T6062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.894691][ T6062] pvrusb2: Hardware description: Terratec Grabster AV400 [ 214.912017][ T6062] pvrusb2: ********** [ 214.940156][ T6062] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 214.980691][ T6062] pvrusb2: Important functionality might not be entirely working. [ 215.006045][ T6062] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 215.040663][ T7202] loop0: detected capacity change from 0 to 32768 [ 215.041027][ T6062] pvrusb2: ********** [ 215.092024][ T2309] pvrusb2: Invalid write control endpoint [ 215.106926][ T7202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1047 (7202) [ 215.167806][ T7202] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.230526][ T7202] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 215.275743][ T7202] BTRFS info (device loop0): turning on sync discard [ 215.296252][ T6062] usb 2-1: USB disconnect, device number 8 [ 215.302672][ T7202] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 215.346889][ T7202] BTRFS info (device loop0): use zstd compression, level 3 [ 215.397625][ T7202] BTRFS info (device loop0): turning on async discard [ 215.436562][ T7202] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 215.450395][ T2309] pvrusb2: Invalid write control endpoint [ 215.456223][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 215.494435][ T7202] BTRFS info (device loop0): trying to use backup root at mount time [ 215.531053][ T7202] BTRFS info (device loop0): enabling auto defrag [ 215.547891][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 215.562456][ T7202] BTRFS info (device loop0): using free space tree [ 215.581665][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 215.612626][ T2309] pvrusb2: Device being rendered inoperable [ 215.632969][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 215.718828][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 215.771970][ T4298] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 215.839553][ T2309] pvrusb2: Attached sub-driver cx25840 [ 215.845277][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 215.872416][ T7202] BTRFS error (device loop0): failed to load root extent [ 215.894654][ T7202] BTRFS warning (device loop0): try to load backup roots slot 1 [ 215.910494][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 215.924607][ T46] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 215.983418][ T7250] loop3: detected capacity change from 0 to 16 [ 216.004398][ T7202] BTRFS warning (device loop0): couldn't read tree root [ 216.029018][ T7202] BTRFS warning (device loop0): try to load backup roots slot 2 [ 216.059527][ T7202] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 216.076478][ T7250] erofs: (device loop3): erofs_init_device: empty device tag @ pos 0 [ 216.120582][ T7202] BTRFS warning (device loop0): couldn't read tree root [ 216.148642][ T7202] BTRFS warning (device loop0): try to load backup roots slot 3 [ 216.249277][ T7202] BTRFS info (device loop0): enabling ssd optimizations [ 216.267545][ T7250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1058'. [ 216.279816][ T7202] BTRFS info (device loop0): rebuilding free space tree [ 216.350999][ T7250] device ip6gre1 entered promiscuous mode [ 216.401601][ T7202] BTRFS info (device loop0): checking UUID tree [ 216.475701][ T7264] loop1: detected capacity change from 0 to 512 [ 216.722469][ T7264] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 216.738561][ T4266] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 216.770559][ T7264] FAT-fs (loop1): Filesystem has been set read-only [ 216.784692][ T7268] loop2: detected capacity change from 0 to 8 [ 216.786620][ T7264] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 216.985628][ T5307] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (5307) [ 217.067943][ T7268] SQUASHFS error: Unable to read directory block [249:c] [ 218.359777][ T7306] loop1: detected capacity change from 0 to 256 [ 218.412630][ T7306] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 219.367829][ T7328] input: syz1 as /devices/virtual/input/input9 [ 219.518984][ T7299] loop2: detected capacity change from 0 to 40427 [ 219.554679][ T7299] F2FS-fs (loop2): Invalid segment/section count (24 != 3 * 1) [ 219.583470][ T7299] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 219.621027][ T7299] F2FS-fs (loop2): invalid crc value [ 219.685856][ T7299] F2FS-fs (loop2): Found nat_bits in checkpoint [ 219.798462][ T7341] loop0: detected capacity change from 0 to 512 [ 219.855211][ T7299] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 219.876407][ T7341] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 219.891508][ T7299] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 219.923417][ T7341] EXT4-fs (loop0): invalid journal inode [ 219.973139][ T7341] EXT4-fs (loop0): can't get journal size [ 219.983742][ T7299] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 220.019394][ T6064] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 220.147444][ T7341] EXT4-fs (loop0): 1 truncate cleaned up [ 220.189078][ T7341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 220.239229][ T6064] usb 2-1: Using ep0 maxpacket: 32 [ 220.246003][ T7299] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 220.247842][ T6064] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 220.304468][ T6064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.352312][ T6064] usb 2-1: config 0 descriptor?? [ 220.568150][ T6064] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 220.600087][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 220.610782][ T6064] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.649795][ T6064] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 220.657328][ T6064] usb 2-1: media controller created [ 220.707099][ T6064] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.083558][ T7355] loop0: detected capacity change from 0 to 4096 [ 221.105178][ T7355] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 221.264654][ T6064] az6027: usb out operation failed. (-71) [ 221.283879][ T6064] stb0899_attach: Driver disabled by Kconfig [ 221.307640][ T6064] az6027: no front-end attached [ 221.307640][ T6064] [ 221.350157][ T6064] az6027: usb out operation failed. (-71) [ 221.356136][ T6064] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 221.413567][ T6064] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 221.453873][ T6064] dvb-usb: schedule remote query interval to 400 msecs. [ 221.495603][ T6064] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 221.537601][ T6064] usb 2-1: USB disconnect, device number 9 [ 221.781407][ T6064] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 222.399076][ T6069] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 222.409984][ T7388] loop5: detected capacity change from 0 to 7 [ 222.423807][ T7386] loop2: detected capacity change from 0 to 2048 [ 222.450417][ T7388] Dev loop5: unable to read RDB block 7 [ 222.476002][ T7386] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 222.497641][ T7388] loop5: unable to read partition table [ 222.530547][ T4329] loop: Write error at byte offset 4, length 3584. [ 222.545086][ T7388] loop5: partition table beyond EOD, truncated [ 222.562190][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 222.572136][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 222.590197][ T7388] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 222.619006][ T6069] usb 2-1: Using ep0 maxpacket: 16 [ 222.619006][ T7386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.645654][ T6069] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.702759][ T6069] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.751485][ T6069] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 222.791852][ T6069] usb 2-1: config 0 interface 0 has no altsetting 0 [ 222.799309][ T6069] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 222.808643][ T6069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.827891][ T6069] usb 2-1: config 0 descriptor?? [ 223.243357][ T6069] hid (null): report_id 0 is invalid [ 223.258949][ T6069] hid (null): bogus close delimiter [ 223.276063][ T6069] hid (null): unknown global tag 0xe [ 223.299086][ T6069] hid (null): global environment stack underflow [ 223.326096][ T6069] hid (null): global environment stack underflow [ 223.347160][ T6069] hid (null): global environment stack underflow [ 223.367267][ T6069] hid (null): unknown global tag 0xd [ 223.473053][ T26] usb 2-1: USB disconnect, device number 10 [ 224.099150][ T7428] loop2: detected capacity change from 0 to 512 [ 224.166341][ T7428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 224.248319][ T7428] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.1128: Unimplemented hash flags: 0x0001 [ 224.278979][ T7428] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1128: Corrupt directory, running e2fsck is recommended [ 224.297974][ T7428] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.1128: path /222/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 224.528823][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 224.613364][ T7440] loop0: detected capacity change from 0 to 256 [ 224.732400][ T7440] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 225.074961][ T7450] program syz.0.1137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.106178][ T7422] loop3: detected capacity change from 0 to 32768 [ 225.243673][ T7422] XFS (loop3): Mounting V5 Filesystem [ 225.373643][ T7422] XFS (loop3): Ending clean mount [ 225.458363][ T4270] XFS (loop3): Unmounting Filesystem [ 225.899912][ T7475] loop5: detected capacity change from 0 to 7 [ 225.936164][ T7475] Dev loop5: unable to read RDB block 7 [ 225.956134][ T7475] loop5: unable to read partition table [ 225.957303][ T4296] loop: Write error at byte offset 4, length 3584. [ 225.985496][ T7475] loop5: partition table beyond EOD, truncated [ 226.013321][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 226.020360][ T7475] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 226.022936][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 226.922490][ T7473] loop0: detected capacity change from 0 to 32768 [ 227.132524][ T7473] XFS (loop0): Mounting V5 Filesystem [ 227.262535][ T7473] XFS (loop0): Ending clean mount [ 227.517283][ T4266] XFS (loop0): Unmounting Filesystem [ 227.660954][ T6069] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 227.908970][ T6069] usb 3-1: Using ep0 maxpacket: 16 [ 227.934822][ T6069] usb 3-1: config 2 has an invalid interface number: 142 but max is 0 [ 227.963742][ T6069] usb 3-1: config 2 has no interface number 0 [ 227.970780][ T6069] usb 3-1: config 2 interface 142 altsetting 0 has an invalid endpoint with address 0xEA, skipping [ 227.989913][ T6069] usb 3-1: config 2 interface 142 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 228.008959][ T6069] usb 3-1: config 2 interface 142 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 228.044004][ T6069] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 228.053963][ T6069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.062447][ T6069] usb 3-1: Product: syz [ 228.066795][ T6069] usb 3-1: Manufacturer: syz [ 228.071576][ T6069] usb 3-1: SerialNumber: syz [ 228.117690][ T6069] usb 3-1: NFC: intf ffff88807927b000 id ffffffff8d406400 [ 228.335830][ T6062] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 228.355190][ T6069] usb 3-1: USB disconnect, device number 8 [ 228.544346][ T6062] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.564450][ T6062] usb 2-1: config 0 has no interface number 0 [ 228.582878][ T6062] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 228.600162][ T6062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.620883][ T6062] usb 2-1: config 0 descriptor?? [ 228.631575][ T6062] usb 2-1: selecting invalid altsetting 1 [ 228.652001][ T6062] dvb_ttusb_budget: ttusb_init_controller: error [ 228.678953][ T6062] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 228.820371][ T7525] loop0: detected capacity change from 0 to 256 [ 228.838467][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.878001][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.915478][ T7525] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 229.008625][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 229.008644][ T27] audit: type=1800 audit(1776081501.729:53): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1164" name="file1" dev="loop0" ino=1048633 res=0 errno=0 [ 229.064491][ T6062] DVB: Unable to find symbol cx22700_attach() [ 229.302773][ T6062] DVB: Unable to find symbol tda10046_attach() [ 229.322433][ T6062] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 229.355996][ T6062] usb 2-1: USB disconnect, device number 11 [ 230.402497][ T7528] loop2: detected capacity change from 0 to 40427 [ 230.441507][ T7528] F2FS-fs (loop2): invalid crc value [ 230.477709][ T7528] F2FS-fs (loop2): Found nat_bits in checkpoint [ 230.662625][ T7528] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 230.682656][ T7528] F2FS-fs (loop2): Start checkpoint disabled! [ 230.732479][ T7528] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 231.034180][ T7563] loop1: detected capacity change from 0 to 64 [ 231.080321][ T46] kworker/u4:3: attempt to access beyond end of device [ 231.080321][ T46] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 232.681974][ T7590] tipc: Started in network mode [ 232.686957][ T7590] tipc: Node identity ac14140f, cluster identity 4711 [ 232.727356][ T7590] tipc: New replicast peer: 255.255.255.255 [ 232.782725][ T7590] tipc: Enabled bearer , priority 10 [ 232.807362][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1192'. [ 232.857155][ T7594] loop2: detected capacity change from 0 to 2048 [ 232.966259][ T7595] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.225551][ T7595] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 233.267247][ T7595] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 233.301380][ T7595] Remounting filesystem read-only [ 233.335423][ T4272] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 233.360824][ T7602] loop1: detected capacity change from 0 to 512 [ 233.412160][ T7602] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 233.761027][ T7609] loop0: detected capacity change from 0 to 2048 [ 233.811112][ T7609] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 233.870907][ T7609] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 233.906529][ T7609] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 233.914292][ T6062] tipc: Node number set to 2886997007 [ 233.953954][ T7609] UDF-fs: Scanning with blocksize 512 failed [ 234.015467][ T7609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.080075][ T27] audit: type=1800 audit(1776081506.809:54): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1199" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 234.423301][ T7620] loop0: detected capacity change from 0 to 1024 [ 234.473081][ T7620] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 234.473081][ T7620] [ 235.365293][ T7639] loop2: detected capacity change from 0 to 128 [ 235.442144][ T7639] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 235.483821][ T7639] hpfs: filesystem error: improperly stopped [ 235.509951][ T7639] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 235.539144][ T7639] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 235.565654][ T7639] hpfs: You really don't want any checks? You are crazy... [ 235.594224][ T7639] hpfs: hpfs_map_sector(): read error [ 235.634801][ T7639] hpfs: code page support is disabled [ 235.659459][ T7639] hpfs: hpfs_map_4sectors(): unaligned read [ 235.667699][ T7639] hpfs: hpfs_map_4sectors(): unaligned read [ 235.722693][ T7639] hpfs: filesystem error: unable to find root dir [ 236.109108][ T7650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1217'. [ 236.697695][ T7668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1224'. [ 236.734362][ T7668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1224'. [ 236.777153][ T7672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1224'. [ 236.835831][ T7668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1224'. [ 236.926847][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 237.428015][ T7688] tun0: tun_chr_ioctl cmd 1074025677 [ 237.465368][ T7688] tun0: linktype set to 773 [ 237.986212][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 238.013862][ T7704] loop0: detected capacity change from 0 to 16 [ 238.035030][ T7704] erofs: (device loop0): mounted with root inode @ nid 36. [ 238.672730][ T7719] device ip6gre1 entered promiscuous mode [ 238.686850][ T6062] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.708129][ T6062] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.735111][ T6069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.967615][ T6062] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.100538][ T6062] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.204315][ T7715] loop1: detected capacity change from 0 to 32768 [ 239.261940][ T6062] kernel write not supported for file /snd/midiC2D0 (pid: 6062 comm: kworker/0:12) [ 239.354746][ T7715] XFS (loop1): Mounting V5 Filesystem [ 239.553916][ T7715] XFS (loop1): Ending clean mount [ 239.632377][ T7715] XFS (loop1): Quotacheck needed: Please wait. [ 239.867945][ T7715] XFS (loop1): Quotacheck: Done. [ 240.157339][ T4716] XFS (loop1): Unmounting Filesystem [ 241.264800][ T7762] device bridge_slave_0 left promiscuous mode [ 241.286404][ T7762] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.045863][ T6069] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 242.249963][ T6069] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 242.280581][ T6069] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.302468][ T6069] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 242.324178][ T6069] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.343510][ T7788] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1275'. [ 242.377397][ T6069] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.387184][ T7788] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1275'. [ 242.413672][ T6069] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.429405][ T6069] usb 2-1: Product: syz [ 242.438126][ T6069] usb 2-1: Manufacturer: syz [ 242.438459][ T7789] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1275'. [ 242.466753][ T6069] cdc_wdm 2-1:1.0: skipping garbage [ 242.472627][ T6069] cdc_wdm 2-1:1.0: skipping garbage [ 242.506357][ T6069] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 242.506638][ T7788] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1275'. [ 242.512732][ T6069] cdc_wdm 2-1:1.0: Unknown control protocol [ 242.733221][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 242.740325][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 242.749855][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 242.756543][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 242.762906][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 242.769636][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 242.779767][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 242.786471][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 242.792791][ T6072] usb 2-1: USB disconnect, device number 12 [ 242.799173][ T7779] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 242.853769][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.866778][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.933723][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.944034][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.952060][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 242.959813][ T4273] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.029051][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 243.588079][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 243.840570][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.118544][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.249924][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.269122][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.278026][ T7792] device bridge_slave_0 entered promiscuous mode [ 244.349117][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.411788][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.428245][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.456504][ T7792] device bridge_slave_1 entered promiscuous mode [ 244.575722][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.668791][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.733836][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.784130][ T7834] loop0: detected capacity change from 0 to 8 [ 244.848226][ T7834] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 244.865089][ T5306] udevd[5306]: incorrect cramfs checksum on /dev/loop0 [ 244.915142][ T7792] team0: Port device team_slave_0 added [ 245.003512][ T5307] udevd[5307]: incorrect cramfs checksum on /dev/loop0 [ 245.021388][ T7838] device batadv0 entered promiscuous mode [ 245.030943][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 245.070222][ T7838] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 245.128718][ T7838] device batadv0 left promiscuous mode [ 245.236545][ T7792] team0: Port device team_slave_1 added [ 245.420034][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.488941][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.602674][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.636308][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.664403][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.723591][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.939192][ T22] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 246.139178][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 246.146643][ T22] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 246.167263][ T22] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.198080][ T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.220112][ T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.251416][ T22] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.299862][ T22] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.319437][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.415571][ T7792] device hsr_slave_0 entered promiscuous mode [ 246.435304][ T7792] device hsr_slave_1 entered promiscuous mode [ 246.465513][ T7792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.478273][ T7792] Cannot create hsr debugfs directory [ 246.526230][ T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 246.561491][ T22] usb 5-1: GET_CAPABILITIES returned 0 [ 246.567200][ T22] usbtmc 5-1:16.0: can't read capabilities [ 246.711878][ T26] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 246.729247][ T26] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 246.750918][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 246.804626][ T26] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 246.824591][ T26] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 246.833783][ T6062] usb 5-1: USB disconnect, device number 13 [ 246.861277][ T26] usb 1-1: Product: syz [ 246.865582][ T26] usb 1-1: Manufacturer: syz [ 246.879210][ T26] usb 1-1: SerialNumber: syz [ 246.897768][ T26] usb 1-1: config 0 descriptor?? [ 246.912738][ T26] hub 1-1:0.0: bad descriptor, ignoring hub [ 246.927902][ T26] hub: probe of 1-1:0.0 failed with error -5 [ 246.951482][ T26] usb 1-1: selecting invalid altsetting 0 [ 247.109180][ T4284] Bluetooth: hci5: command 0x041b tx timeout [ 247.584555][ T7863] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 247.800801][ T7863] usb 1-1: device firmware changed [ 247.809505][ T26] usb 1-1: USB disconnect, device number 10 [ 247.904900][ T7792] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.920299][ T7792] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.933836][ T7792] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.984929][ T7792] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.006090][ T26] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 248.213126][ T11] device hsr_slave_0 left promiscuous mode [ 248.225910][ T11] device hsr_slave_1 left promiscuous mode [ 248.237874][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.246129][ T26] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 248.255279][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.267461][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.269466][ T26] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 248.299317][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.307555][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.320033][ T26] usb 1-1: string descriptor 0 read error: -22 [ 248.326498][ T26] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 248.340879][ T11] device bridge_slave_1 left promiscuous mode [ 248.347786][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.355709][ T26] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 248.384122][ T26] usb 1-1: config 0 descriptor?? [ 248.401207][ T11] device bridge_slave_0 left promiscuous mode [ 248.402622][ T26] hub 1-1:0.0: bad descriptor, ignoring hub [ 248.408079][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.449057][ T26] hub: probe of 1-1:0.0 failed with error -5 [ 248.491759][ T26] usb 1-1: selecting invalid altsetting 0 [ 248.619729][ T11] device veth1_macvtap left promiscuous mode [ 248.628753][ T26] usb 1-1: USB disconnect, device number 11 [ 248.647776][ T11] device veth0_macvtap left promiscuous mode [ 248.671807][ T11] device veth1_vlan left promiscuous mode [ 248.692053][ T11] device veth0_vlan left promiscuous mode [ 249.044676][ T11] bond1 (unregistering): Released all slaves [ 249.195546][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 250.564811][ T7930] loop0: detected capacity change from 0 to 32768 [ 250.584599][ T7930] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1320 (7930) [ 250.666004][ T11] team0 (unregistering): Port device team_slave_1 removed [ 250.676363][ T7930] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 250.718536][ T7930] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 250.767335][ T7930] BTRFS info (device loop0): using free space tree [ 250.804744][ T11] team0 (unregistering): Port device team_slave_0 removed [ 250.913749][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.005706][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.054244][ T7930] BTRFS info (device loop0): enabling ssd optimizations [ 251.290214][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 251.338707][ T4266] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 251.981026][ T11] bond0 (unregistering): Released all slaves [ 251.989093][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.178695][ T7955] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1324'. [ 252.399442][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.458324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.477316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.511768][ T7792] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.534396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.570274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.590510][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.597688][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.657600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.690287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.744601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.759116][ T6064] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 252.807463][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.814831][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.860619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.922852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.989295][ T6064] usb 3-1: Using ep0 maxpacket: 32 [ 252.996318][ T6064] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 253.009350][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.035518][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.049843][ T6064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.067153][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.078391][ T6064] usb 3-1: config 0 descriptor?? [ 253.127639][ T6064] as10x_usb: device has been detected [ 253.134247][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.150005][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.163881][ T6064] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 253.183039][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.219897][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.252907][ T6064] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 253.273682][ T7792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.316260][ T7969] ------------[ cut here ]------------ [ 253.321608][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.322153][ T7969] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 253.352215][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.368437][ T6064] as10x_usb: error during firmware upload part1 [ 253.386725][ T6064] Registered device nBox DVB-T Dongle [ 253.387482][ T7969] WARNING: CPU: 0 PID: 7969 at kernel/locking/mutex.c:582 __mutex_lock+0xa32/0xaf0 [ 253.402537][ T7969] Modules linked in: [ 253.406506][ T7969] CPU: 0 PID: 7969 Comm: syz.2.1328 Not tainted syzkaller #0 [ 253.414520][ T7969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 253.424866][ T7969] RIP: 0010:__mutex_lock+0xa32/0xaf0 [ 253.430407][ T7969] Code: 04 28 84 c0 0f 85 b7 00 00 00 83 3d 6f 2e e9 03 00 0f 85 df f6 ff ff 48 c7 c7 20 fb 8b 8a 48 c7 c6 c0 fb 8b 8a e8 5e ec 16 f7 <0f> 0b e9 c5 f6 ff ff 0f 0b e9 6b f9 ff ff 48 c7 c1 40 01 c0 96 80 [ 253.441455][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.451457][ T7969] RSP: 0018:ffffc900033dfaa0 EFLAGS: 00010246 [ 253.464280][ T7969] RAX: 3ea62d7ffaa0fc00 RBX: ffff888079dd8ce0 RCX: 0000000000080000 [ 253.472355][ T7969] RDX: ffffc9000cc09000 RSI: 000000000000c14d RDI: 000000000000c14e [ 253.480542][ T7969] RBP: ffffc900033dfbf8 R08: ffffc900033df727 R09: 1ffff9200067bee4 [ 253.488841][ T7969] R10: dffffc0000000000 R11: fffff5200067bee5 R12: 0000000000000000 [ 253.496926][ T7969] R13: dffffc0000000000 R14: ffff888079dd8000 R15: 0000000000000000 [ 253.505303][ T7969] FS: 00007f3c4bd3d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 253.514468][ T7969] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.521190][ T7969] CR2: 00007f3c4bd1cd58 CR3: 000000001e36c000 CR4: 00000000003506f0 [ 253.529273][ T7969] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.537482][ T7969] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.545552][ T7969] Call Trace: [ 253.548931][ T7969] [ 253.551940][ T7969] ? trace_contention_end+0x5f/0x170 [ 253.557299][ T7969] ? __mutex_lock+0x1ab/0xaf0 [ 253.562091][ T7969] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 253.567797][ T7969] ? mutex_lock_nested+0x10/0x10 [ 253.573175][ T7969] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 253.579210][ T7969] ? dmx_section_feed_start_filtering+0x51/0x690 [ 253.585706][ T7969] ? mutex_lock_nested+0x10/0x10 [ 253.590749][ T7969] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 253.596815][ T7969] ? lock_chain_count+0x20/0x20 [ 253.601803][ T7969] ? _raw_spin_lock_irq+0xb7/0xf0 [ 253.606897][ T7969] as102_dvb_dmx_start_feed+0x6c/0x280 [ 253.612492][ T7969] dmx_section_feed_start_filtering+0x4f1/0x690 [ 253.618797][ T7969] dvb_dmxdev_filter_start+0xc87/0x1090 [ 253.624468][ T7969] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 253.630045][ T7969] dvb_demux_do_ioctl+0x463/0x530 [ 253.635266][ T7969] dvb_usercopy+0x191/0x2b0 [ 253.639886][ T7969] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 253.645692][ T7969] ? dvb_generic_ioctl+0xb0/0xb0 [ 253.650757][ T7969] ? dvb_demux_poll+0x210/0x210 [ 253.655838][ T7969] dvb_demux_ioctl+0x25/0x30 [ 253.660639][ T7969] __se_sys_ioctl+0xfa/0x170 [ 253.665420][ T7969] do_syscall_64+0x4c/0xa0 [ 253.669970][ T7969] ? clear_bhb_loop+0x60/0xb0 [ 253.674890][ T7969] ? clear_bhb_loop+0x60/0xb0 [ 253.679684][ T7969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.685756][ T7969] RIP: 0033:0x7f3c4ad9c819 [ 253.690289][ T7969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.709990][ T7969] RSP: 002b:00007f3c4bd3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.718559][ T7969] RAX: ffffffffffffffda RBX: 00007f3c4b015fa0 RCX: 00007f3c4ad9c819 [ 253.726655][ T7969] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 253.734728][ T7969] RBP: 00007f3c4ae32c91 R08: 0000000000000000 R09: 0000000000000000 [ 253.742805][ T7969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.750880][ T7969] R13: 00007f3c4b016038 R14: 00007f3c4b015fa0 R15: 00007ffc3e734228 [ 253.759052][ T7969] [ 253.762132][ T7969] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 253.769450][ T7969] CPU: 0 PID: 7969 Comm: syz.2.1328 Not tainted syzkaller #0 [ 253.776876][ T7969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 253.787021][ T7969] Call Trace: [ 253.790350][ T7969] [ 253.793326][ T7969] dump_stack_lvl+0x188/0x24e [ 253.798071][ T7969] ? memcpy+0x3c/0x60 [ 253.802320][ T7969] ? show_regs_print_info+0x12/0x12 [ 253.807601][ T7969] ? load_image+0x400/0x400 [ 253.812174][ T7969] panic+0x2e5/0x730 [ 253.816130][ T7969] ? bpf_jit_dump+0xd0/0xd0 [ 253.820718][ T7969] __warn+0x2f8/0x4f0 [ 253.825025][ T7969] ? __mutex_lock+0xa32/0xaf0 [ 253.829862][ T7969] ? __mutex_lock+0xa32/0xaf0 [ 253.834609][ T7969] report_bug+0x2ba/0x4f0 [ 253.839187][ T7969] ? __mutex_lock+0xa32/0xaf0 [ 253.843929][ T7969] handle_bug+0x3a/0x70 [ 253.848160][ T7969] exc_invalid_op+0x16/0x40 [ 253.852923][ T7969] asm_exc_invalid_op+0x16/0x20 [ 253.857847][ T7969] RIP: 0010:__mutex_lock+0xa32/0xaf0 [ 253.863199][ T7969] Code: 04 28 84 c0 0f 85 b7 00 00 00 83 3d 6f 2e e9 03 00 0f 85 df f6 ff ff 48 c7 c7 20 fb 8b 8a 48 c7 c6 c0 fb 8b 8a e8 5e ec 16 f7 <0f> 0b e9 c5 f6 ff ff 0f 0b e9 6b f9 ff ff 48 c7 c1 40 01 c0 96 80 [ 253.882875][ T7969] RSP: 0018:ffffc900033dfaa0 EFLAGS: 00010246 [ 253.888982][ T7969] RAX: 3ea62d7ffaa0fc00 RBX: ffff888079dd8ce0 RCX: 0000000000080000 [ 253.896997][ T7969] RDX: ffffc9000cc09000 RSI: 000000000000c14d RDI: 000000000000c14e [ 253.905021][ T7969] RBP: ffffc900033dfbf8 R08: ffffc900033df727 R09: 1ffff9200067bee4 [ 253.913115][ T7969] R10: dffffc0000000000 R11: fffff5200067bee5 R12: 0000000000000000 [ 253.921313][ T7969] R13: dffffc0000000000 R14: ffff888079dd8000 R15: 0000000000000000 [ 253.929434][ T7969] ? trace_contention_end+0x5f/0x170 [ 253.934763][ T7969] ? __mutex_lock+0x1ab/0xaf0 [ 253.939485][ T7969] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 253.945151][ T7969] ? mutex_lock_nested+0x10/0x10 [ 253.950156][ T7969] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 253.955933][ T7969] ? dmx_section_feed_start_filtering+0x51/0x690 [ 253.962298][ T7969] ? mutex_lock_nested+0x10/0x10 [ 253.967363][ T7969] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 253.974079][ T7969] ? lock_chain_count+0x20/0x20 [ 253.979062][ T7969] ? _raw_spin_lock_irq+0xb7/0xf0 [ 253.984138][ T7969] as102_dvb_dmx_start_feed+0x6c/0x280 [ 253.989739][ T7969] dmx_section_feed_start_filtering+0x4f1/0x690 [ 253.996202][ T7969] dvb_dmxdev_filter_start+0xc87/0x1090 [ 254.001870][ T7969] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 254.007570][ T7969] dvb_demux_do_ioctl+0x463/0x530 [ 254.012913][ T7969] dvb_usercopy+0x191/0x2b0 [ 254.017498][ T7969] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 254.023097][ T7969] ? dvb_generic_ioctl+0xb0/0xb0 [ 254.028171][ T7969] ? dvb_demux_poll+0x210/0x210 [ 254.033151][ T7969] dvb_demux_ioctl+0x25/0x30 [ 254.037848][ T7969] __se_sys_ioctl+0xfa/0x170 [ 254.042482][ T7969] do_syscall_64+0x4c/0xa0 [ 254.047025][ T7969] ? clear_bhb_loop+0x60/0xb0 [ 254.051918][ T7969] ? clear_bhb_loop+0x60/0xb0 [ 254.056644][ T7969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.062593][ T7969] RIP: 0033:0x7f3c4ad9c819 [ 254.067060][ T7969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.086968][ T7969] RSP: 002b:00007f3c4bd3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.095419][ T7969] RAX: ffffffffffffffda RBX: 00007f3c4b015fa0 RCX: 00007f3c4ad9c819 [ 254.103448][ T7969] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 254.111568][ T7969] RBP: 00007f3c4ae32c91 R08: 0000000000000000 R09: 0000000000000000 [ 254.119687][ T7969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.127906][ T7969] R13: 00007f3c4b016038 R14: 00007f3c4b015fa0 R15: 00007ffc3e734228 [ 254.136036][ T7969] [ 254.139324][ T7969] Kernel Offset: disabled [ 254.143771][ T7969] Rebooting in 86400 seconds..