last executing test programs: 7.219093823s ago: executing program 2 (id=381): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000280)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x633b, 0x4) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) 6.996837938s ago: executing program 2 (id=383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.769314504s ago: executing program 2 (id=385): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0xa}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x1, @desc1}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140)={0x0, @adiantum, 0x0, @desc2}) 6.176421498s ago: executing program 2 (id=388): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140), 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.8924049s ago: executing program 3 (id=405): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4.350144273s ago: executing program 2 (id=397): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0xfffffff0, 0x80000}) 4.344296093s ago: executing program 4 (id=398): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd [ 77.355230][ T4294] dump_stack_lvl+0x188/0x250 [ 77.359968][ T4294] ? show_regs_print_info+0x20/0x20 [ 77.365216][ T4294] ? load_image+0x410/0x410 [ 77.369770][ T4294] ? __might_sleep+0xf0/0xf0 [ 77.374415][ T4294] ? __lock_acquire+0x7b50/0x7b50 [ 77.379494][ T4294] should_fail+0x383/0x4b0 [ 77.383957][ T4294] should_failslab+0x5/0x20 [ 77.388665][ T4294] slab_pre_alloc_hook+0x51/0xc0 [ 77.393650][ T4294] ? prepare_creds+0x3c/0x610 [ 77.398400][ T4294] kmem_cache_alloc+0x3d/0x280 [ 77.403214][ T4294] prepare_creds+0x3c/0x610 [ 77.407759][ T4294] __sys_setuid+0x92/0x580 [ 77.412217][ T4294] ? lockdep_hardirqs_on+0x94/0x140 [ 77.417456][ T4294] do_syscall_64+0x4c/0xa0 [ 77.421914][ T4294] ? clear_bhb_loop+0x30/0x80 [ 77.426658][ T4294] ? clear_bhb_loop+0x30/0x80 [ 77.431407][ T4294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.437356][ T4294] RIP: 0033:0x7f21170ac159 [ 77.441812][ T4294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.461557][ T4294] RSP: 002b:00007f2115304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 77.470020][ T4294] RAX: ffffffffffffffda RBX: 00007f2117333fa0 RCX: 00007f21170ac159 [ 77.478031][ T4294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.486039][ T4294] RBP: 00007f2117143024 R08: 0000000000000000 R09: 0000000000000000 [ 77.487507][ T4230] usb 1-1: 0:2 : does not exist [ 77.494046][ T4294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.494064][ T4294] R13: 00007f2117334038 R14: 00007f2117333fa0 R15: 00007ffcfb63f4d8 [ 77.494096][ T4294] [ 77.532854][ T4288] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 77.567242][ T4288] REISERFS (device loop3): using ordered data mode [ 77.575080][ T4288] reiserfs: using flush barriers [ 77.582987][ T4288] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.602651][ T4288] REISERFS (device loop3): checking transaction log (loop3) [ 77.618463][ T4288] REISERFS (device loop3): Using r5 hash to sort names [ 77.629603][ T4288] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 77.744315][ T4230] usb 1-1: USB disconnect, device number 2 [ 77.833431][ T4300] netlink: 'syz.2.12': attribute type 11 has an invalid length. [ 77.885001][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.111613][ T4308] loop1: detected capacity change from 0 to 512 [ 78.191046][ T4308] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 78.225702][ T4308] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 78.307883][ T4308] EXT4-fs (loop1): 1 truncate cleaned up [ 78.313594][ T4308] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 78.367655][ T4314] loop3: detected capacity change from 0 to 4096 [ 78.526266][ T4314] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 78.626552][ T4314] ntfs3: loop3: Failed to load $Extend. [ 78.633174][ T4328] loop2: detected capacity change from 0 to 1024 [ 78.652019][ T4332] rtc_cmos 00:00: Alarms can be up to one day in the future [ 78.678041][ T4328] EXT4-fs (loop2): Ignoring removed bh option [ 78.773608][ T4328] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,mb_optimize_scan=0x0000000000000000,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 78.883950][ T4328] process 'syz.2.24' launched './file1' with NULL argv: empty string added [ 78.964634][ T4339] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 79.434250][ T4358] device wlan0 entered promiscuous mode [ 79.441333][ T4358] device macsec1 entered promiscuous mode [ 79.463806][ T4358] device macsec2 entered promiscuous mode [ 79.486426][ T4358] Zero length message leads to an empty skb [ 79.517212][ T4270] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.708523][ T4371] loop1: detected capacity change from 0 to 256 [ 79.768502][ T4270] usb 5-1: Using ep0 maxpacket: 32 [ 79.790399][ T4375] loop0: detected capacity change from 0 to 1024 [ 79.797291][ T4371] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 79.836804][ T4375] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 79.877891][ T4375] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 79.898924][ T4375] EXT4-fs (loop0): orphan cleanup on readonly fs [ 79.914283][ T4270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.934658][ T4375] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.43: Inode bitmap for bg 0 marked uninitialized [ 79.953338][ T4375] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,errors=remount-ro,inode_readahead_blks=0x0000000000000000,errors=continue,. Quota mode: writeback. [ 79.988108][ T4270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.033423][ T4270] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 80.057144][ T4270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.116409][ T4270] usb 5-1: config 0 descriptor?? [ 80.262691][ T4388] netlink: 'syz.1.48': attribute type 1 has an invalid length. [ 80.387161][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.440366][ T4392] mmap: syz.2.51 (4392) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 80.575957][ T4388] loop1: detected capacity change from 0 to 32768 [ 80.582584][ T4231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.637367][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 80.692131][ T4270] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 80.757284][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 120, changing to 10 [ 80.799529][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8253, setting to 1024 [ 80.831912][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.851768][ T4231] usb 4-1: Using ep0 maxpacket: 8 [ 80.858377][ T21] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.872534][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.893871][ T21] usb 1-1: config 0 descriptor?? [ 80.977872][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.990482][ T4270] usb 5-1: USB disconnect, device number 2 [ 80.997547][ T4231] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.041969][ T4231] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.065750][ T4398] fido_id[4398]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 81.100757][ T4231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 81.203135][ T4407] input: syz1 as /devices/virtual/input/input5 [ 81.297250][ T4231] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 81.312258][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.320884][ T4231] usb 4-1: Product: syz [ 81.325204][ T4231] usb 4-1: Manufacturer: syz [ 81.335976][ T4231] usb 4-1: SerialNumber: syz [ 81.346297][ T4231] usb 4-1: config 0 descriptor?? [ 81.379130][ T21] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 81.390190][ T4231] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 81.404239][ T21] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input6 [ 81.491473][ T1108] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 81.520965][ T21] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 81.614142][ T4231] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 81.626984][ T4270] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.641014][ T4231] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 81.679379][ T4231] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 81.713656][ T21] usb 1-1: USB disconnect, device number 3 [ 81.761812][ T4420] loop4: detected capacity change from 0 to 256 [ 81.807637][ T4420] ======================================================= [ 81.807637][ T4420] WARNING: The mand mount option has been deprecated and [ 81.807637][ T4420] and is ignored by this kernel. Remove the mand [ 81.807637][ T4420] option from the mount to silence this warning. [ 81.807637][ T4420] ======================================================= [ 81.857854][ T4231] usb 4-1: USB disconnect, device number 2 [ 81.869635][ T4420] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.891682][ T4420] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 81.897850][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.915488][ T4420] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 81.934173][ T4270] usb 3-1: Using ep0 maxpacket: 8 [ 81.947295][ T1108] usb 2-1: not running at top speed; connect to a high speed hub [ 82.081889][ T4270] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.111309][ T4270] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 82.125787][ T4270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.145468][ T4270] usb 3-1: config 0 descriptor?? [ 82.187287][ T1108] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 82.196525][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.204708][ T1108] usb 2-1: Product: syz [ 82.209276][ T1108] usb 2-1: Manufacturer: syz [ 82.213906][ T1108] usb 2-1: SerialNumber: syz [ 82.270820][ T1108] usb 2-1: selecting invalid altsetting 1 [ 82.292830][ T1108] usb 2-1: selecting invalid altsetting 1 [ 82.304790][ T1108] usb 2-1: selecting invalid altsetting 1 [ 82.349034][ T4416] udevd[4416]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.482320][ T4270] usb 3-1: string descriptor 0 read error: -71 [ 82.496492][ T4270] usb 3-1: USB disconnect, device number 2 [ 82.526512][ T7] usb 2-1: USB disconnect, device number 2 [ 82.673094][ T4430] loop0: detected capacity change from 0 to 2048 [ 82.710290][ T4432] loop3: detected capacity change from 0 to 128 [ 82.727480][ T4430] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.761855][ T4422] loop4: detected capacity change from 0 to 40427 [ 82.803586][ T4432] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 82.845536][ T4422] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 82.870180][ T4432] hpfs: filesystem error: improperly stopped [ 82.876608][ T4432] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 82.887149][ T4422] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 82.927058][ T4432] hpfs: You really don't want any checks? You are crazy... [ 82.945541][ T4422] F2FS-fs (loop4): invalid crc value [ 82.970660][ T4432] hpfs: hpfs_map_sector(): read error [ 82.992423][ T4432] hpfs: code page support is disabled [ 83.007557][ T4432] hpfs: hpfs_map_4sectors(): unaligned read [ 83.036442][ T4422] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 83.048883][ T4432] hpfs: hpfs_map_4sectors(): unaligned read [ 83.054826][ T4432] hpfs: filesystem error: unable to find root dir [ 83.178168][ T4432] hpfs: hpfs_map_4sectors(): unaligned read [ 83.184842][ T4432] hpfs: hpfs_map_sector(): read error [ 83.394104][ T4422] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 83.408045][ T4422] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.596151][ T4462] device ipvlan2 entered promiscuous mode [ 83.613369][ T4463] loop1: detected capacity change from 0 to 1764 [ 83.628569][ T4462] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 83.668886][ T4434] attempt to access beyond end of device [ 83.668886][ T4434] loop4: rw=2049, want=45104, limit=40427 [ 83.880960][ T4468] loop2: detected capacity change from 0 to 256 [ 83.986888][ T4468] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.049849][ T4468] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 84.098620][ T4468] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x292ddf5b, utbl_chksum : 0xe619d30d) [ 84.919703][ T4496] loop4: detected capacity change from 0 to 128 [ 84.920197][ T4472] loop3: detected capacity change from 0 to 32768 [ 84.953978][ T4496] EXT4-fs (loop4): Ignoring removed bh option [ 85.021942][ T4496] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,bh,,errors=continue. Quota mode: writeback. [ 85.038408][ T4496] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.626962][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.808158][ T4523] netlink: 56 bytes leftover after parsing attributes in process `syz.0.104'. [ 85.869886][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 85.987595][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.016825][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.087850][ T21] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.133196][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.153502][ T4504] loop1: detected capacity change from 0 to 32768 [ 86.171038][ T21] usb 3-1: config 0 descriptor?? [ 86.195248][ T4533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.261604][ T4504] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.95 (4504) [ 86.312273][ T4504] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 86.331792][ T4504] BTRFS info (device loop1): setting nodatasum [ 86.352018][ T4504] BTRFS info (device loop1): force zlib compression, level 3 [ 86.387387][ T4504] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 86.415611][ T4504] BTRFS info (device loop1): use lzo compression, level 0 [ 86.426729][ T4517] loop3: detected capacity change from 0 to 40427 [ 86.433570][ T4504] BTRFS info (device loop1): turning on flush-on-commit [ 86.458645][ T4517] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 86.470506][ T4504] BTRFS info (device loop1): enabling auto defrag [ 86.477908][ T4504] BTRFS info (device loop1): max_inline at 4096 [ 86.499363][ T4517] F2FS-fs (loop3): invalid crc value [ 86.510644][ T4504] BTRFS info (device loop1): using free space tree [ 86.518240][ T4504] BTRFS info (device loop1): has skinny extents [ 86.547327][ T4517] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.663214][ T1345] cfg80211: failed to load regulatory.db [ 86.702642][ T21] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input7 [ 86.767382][ T4554] device batadv_slave_0 entered promiscuous mode [ 86.779270][ T21] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 86.794733][ T4553] device batadv_slave_0 left promiscuous mode [ 86.798539][ T4517] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.956786][ T4504] BTRFS info (device loop1): enabling ssd optimizations [ 87.041187][ T4568] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.114'. [ 87.075617][ T4566] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 87.124526][ T4198] attempt to access beyond end of device [ 87.124526][ T4198] loop3: rw=2049, want=45104, limit=40427 [ 87.186396][ T4230] usb 3-1: USB disconnect, device number 3 [ 87.333649][ T4571] loop0: detected capacity change from 0 to 2048 [ 87.430001][ T4571] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 87.798041][ T4270] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.932211][ T4583] loop0: detected capacity change from 0 to 512 [ 88.096936][ T4583] FAT-fs (loop0): bogus number of FAT sectors [ 88.103414][ T4583] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 88.151632][ T4583] FAT-fs (loop0): Can't find a valid FAT filesystem [ 88.245316][ T4270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.268091][ T4270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.302349][ T4270] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.334302][ T4270] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.344753][ T4270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.402442][ T4270] usb 5-1: config 0 descriptor?? [ 88.536905][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.639122][ T4611] loop1: detected capacity change from 0 to 256 [ 88.662309][ T4611] exfat: Deprecated parameter 'namecase' [ 88.731706][ T4611] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 88.804233][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 88.890445][ T4270] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 88.927711][ T4270] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 88.967287][ T7] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 25, changing to 8 [ 88.991191][ T7] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.023683][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 89.038839][ T7] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 89.062302][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.083887][ T7] usb 3-1: config 0 descriptor?? [ 89.136903][ T4613] loop3: detected capacity change from 0 to 32768 [ 89.180857][ T4620] sctp: [Deprecated]: syz.1.132 (pid 4620) Use of int in max_burst socket option deprecated. [ 89.180857][ T4620] Use struct sctp_assoc_value instead [ 89.203533][ T1345] usb 5-1: USB disconnect, device number 3 [ 89.274895][ T4613] JBD2: Ignoring recovery information on journal [ 89.508969][ T4613] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 89.551180][ T7] input: HID 0079:0006 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0079:0006.0005/input/input8 [ 89.655785][ T7] dragonrise 0003:0079:0006.0005: input,hidraw0: USB HID v80.04 Joystick [HID 0079:0006] on usb-dummy_hcd.2-1/input0 [ 89.696817][ T7] dragonrise 0003:0079:0006.0005: no output reports found [ 89.708044][ T4198] ocfs2: Unmounting device (7,3) on (node local) [ 89.726011][ T7] dragonrise 0003:0079:0006.0005: force feedback init failed [ 89.903963][ T7] usb 3-1: USB disconnect, device number 4 [ 89.975350][ T4644] loop1: detected capacity change from 0 to 2048 [ 90.093022][ T4644] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 90.161046][ T4655] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.239774][ T26] audit: type=1800 audit(1788201292.028:2): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.144" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 90.311236][ T4659] input: syz0 as /devices/virtual/input/input9 [ 90.320019][ T26] audit: type=1800 audit(1788201292.048:3): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.144" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 90.347349][ T1345] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.363592][ T4653] fido_id[4653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 90.631525][ T4669] FAULT_INJECTION: forcing a failure. [ 90.631525][ T4669] name failslab, interval 1, probability 0, space 0, times 0 [ 90.645446][ T4670] binder: 4667:4670 ioctl c018620c 200000000080 returned -1 [ 90.659149][ T4669] CPU: 1 PID: 4669 Comm: syz.3.154 Not tainted syzkaller #0 [ 90.666492][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.676588][ T4669] Call Trace: [ 90.679914][ T4669] [ 90.682895][ T4669] dump_stack_lvl+0x188/0x250 [ 90.687617][ T4669] ? show_regs_print_info+0x20/0x20 [ 90.692859][ T4669] ? load_image+0x410/0x410 [ 90.697406][ T4669] ? __might_sleep+0xf0/0xf0 [ 90.702045][ T4669] ? __lock_acquire+0x7b50/0x7b50 [ 90.707122][ T4669] should_fail+0x383/0x4b0 [ 90.711592][ T4669] should_failslab+0x5/0x20 [ 90.716143][ T4669] slab_pre_alloc_hook+0x51/0xc0 [ 90.721122][ T4669] ? __sigqueue_alloc+0x3a6/0x4b0 [ 90.726221][ T4669] kmem_cache_alloc+0x3d/0x280 [ 90.731029][ T4669] __sigqueue_alloc+0x3a6/0x4b0 [ 90.735980][ T4669] do_timer_create+0x1e2/0x1250 [ 90.740899][ T4669] ? __ia32_sys_clock_nanosleep_time32+0xa0/0xa0 [ 90.747279][ T4669] ? __context_tracking_exit+0x4c/0x80 [ 90.752784][ T4669] __x64_sys_timer_create+0x149/0x1c0 [ 90.758198][ T4669] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.764221][ T4669] ? posix_timer_event+0xf0/0xf0 [ 90.769200][ T4669] ? lock_chain_count+0x20/0x20 [ 90.774130][ T4669] ? lockdep_hardirqs_on+0x94/0x140 [ 90.779380][ T4669] do_syscall_64+0x4c/0xa0 [ 90.783833][ T4669] ? clear_bhb_loop+0x30/0x80 [ 90.788548][ T4669] ? clear_bhb_loop+0x30/0x80 [ 90.793269][ T4669] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.799308][ T4669] RIP: 0033:0x7f381a2e0159 [ 90.803757][ T4669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.818513][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 90.823393][ T4669] RSP: 002b:00007f3818538028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 90.839302][ T4669] RAX: ffffffffffffffda RBX: 00007f381a567fa0 RCX: 00007f381a2e0159 [ 90.847315][ T4669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 90.855321][ T4669] RBP: 00007f381a377024 R08: 0000000000000000 R09: 0000000000000000 [ 90.863346][ T4669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.871367][ T4669] R13: 00007f381a568038 R14: 00007f381a567fa0 R15: 00007ffd985d8d78 [ 90.879394][ T4669] [ 90.930114][ T4672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.155'. [ 90.998498][ T1345] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 91.017138][ T1345] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 91.054530][ T1345] usb 1-1: Product: syz [ 91.070118][ T1345] usb 1-1: config 0 descriptor?? [ 91.117349][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 91.124280][ T1345] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 91.149117][ T1345] usb 1-1: Detected FT232H [ 91.255806][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 91.266380][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 91.357356][ T1345] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 91.418163][ T4691] loop3: detected capacity change from 0 to 2048 [ 91.482573][ T7] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 91.495421][ T4691] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.499671][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.517024][ T4691] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.545096][ T7] usb 3-1: Product: syz [ 91.558780][ T4691] fs-verity: sha512 using implementation "sha512-avx2" [ 91.572607][ T7] usb 3-1: Manufacturer: syz [ 91.577871][ T7] usb 3-1: SerialNumber: syz [ 91.606896][ T7] usb 3-1: config 0 descriptor?? [ 91.645405][ T4691] syz.3.164 (4691) used greatest stack depth: 20688 bytes left [ 91.657034][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.709640][ T4695] loop1: detected capacity change from 0 to 32768 [ 91.753728][ T4695] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.166 (4695) [ 91.818508][ T4695] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 91.833159][ T4695] BTRFS info (device loop1): setting nodatacow, compression disabled [ 91.842319][ T4695] BTRFS info (device loop1): force clearing of disk cache [ 91.855782][ T4695] BTRFS info (device loop1): turning off barriers [ 91.863536][ T4695] BTRFS info (device loop1): use no compression [ 91.875391][ T4695] BTRFS info (device loop1): disabling free space tree [ 91.886063][ T4695] BTRFS info (device loop1): enabling ssd optimizations [ 91.897089][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 91.908209][ T1345] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 91.938170][ T4695] BTRFS info (device loop1): using spread ssd allocation scheme [ 91.976677][ T4695] BTRFS info (device loop1): turning on flush-on-commit [ 91.996614][ T4695] BTRFS info (device loop1): has skinny extents [ 92.017094][ T21] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 92.035817][ T21] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 92.045359][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 92.065164][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.083155][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.102390][ T7] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 92.119841][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 92.138012][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.147369][ T21] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 92.147400][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.156160][ T4598] usb 1-1: USB disconnect, device number 4 [ 92.165049][ T4705] loop3: detected capacity change from 0 to 8192 [ 92.178394][ T21] usb 5-1: config 0 descriptor?? [ 92.209097][ T4598] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 92.218559][ T7] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 92.218642][ T7] usb 3-1: media controller created [ 92.243554][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.264545][ T4695] BTRFS info (device loop1): clearing free space tree [ 92.304655][ T4695] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.320266][ T4705] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 92.333752][ T4598] ftdi_sio 1-1:0.0: device disconnected [ 92.340341][ T4705] REISERFS (device loop3): using ordered data mode [ 92.340881][ T4695] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.357250][ T4705] reiserfs: using flush barriers [ 92.358256][ T7] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 92.371356][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 92.389725][ T4705] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.406597][ T4705] REISERFS (device loop3): checking transaction log (loop3) [ 92.466023][ T4695] BTRFS info (device loop1): checking UUID tree [ 92.479594][ T21] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 92.620520][ T4695] jffs2: notice: (4695) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.654067][ T7] usb 3-1: USB disconnect, device number 5 [ 92.709044][ T4705] REISERFS (device loop3): Using rupasov hash to sort names [ 92.718267][ T4705] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 92.751868][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 92.791799][ T1345] usb 5-1: USB disconnect, device number 4 [ 92.822979][ T1345] usblp0: removed [ 93.202449][ T4737] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 93.366786][ T4747] Invalid ELF header len 8 [ 93.436491][ T4750] loop4: detected capacity change from 0 to 128 [ 93.510047][ T4750] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 93.571488][ T4750] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.740707][ T4762] netlink: 244 bytes leftover after parsing attributes in process `syz.2.181'. [ 93.986558][ T4776] loop4: detected capacity change from 0 to 2048 [ 94.052113][ T4776] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.125974][ T4776] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 94.150379][ T4776] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 94.165089][ T4776] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.165089][ T4776] [ 94.178095][ T4776] EXT4-fs (loop4): Total free blocks count 0 [ 94.184160][ T4776] EXT4-fs (loop4): Free/Dirty block details [ 94.190328][ T4776] EXT4-fs (loop4): free_blocks=4096 [ 94.195616][ T4776] EXT4-fs (loop4): dirty_blocks=32 [ 94.201228][ T4776] EXT4-fs (loop4): Block reservation details [ 94.207681][ T4776] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 94.223586][ T4781] loop3: detected capacity change from 0 to 1764 [ 94.250563][ T4233] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.305733][ T144] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 94.330942][ T144] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.330942][ T144] [ 94.644993][ T4803] netlink: 104 bytes leftover after parsing attributes in process `syz.0.196'. [ 94.660587][ T4598] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 94.687201][ T4233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.881058][ T4233] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 94.893315][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.906049][ T4233] usb 2-1: Product: syz [ 94.912816][ T4233] usb 2-1: Manufacturer: syz [ 94.921560][ T4233] usb 2-1: SerialNumber: syz [ 94.988649][ T4233] symbolserial 2-1:1.0: symbol converter detected [ 95.020215][ T4233] usb 2-1: symbol converter now attached to ttyUSB0 [ 95.030730][ T4598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.054197][ T4819] loop4: detected capacity change from 0 to 128 [ 95.063666][ T4598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.080121][ T4598] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.101504][ T4598] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.112399][ T4598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.129324][ T4598] usb 3-1: config 0 descriptor?? [ 95.304905][ T4230] usb 2-1: USB disconnect, device number 3 [ 95.335349][ T4230] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 95.397191][ T4230] symbolserial 2-1:1.0: device disconnected [ 95.469127][ T26] audit: type=1800 audit(1788201297.258:4): pid=4829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.206" name="out_ports" dev="configfs" ino=34528 res=0 errno=0 [ 95.615370][ T4598] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 95.649714][ T4598] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description [ 95.677728][ T4598] plantronics 0003:047F:FFFF.0006: parse failed [ 95.684137][ T4598] plantronics: probe of 0003:047F:FFFF.0006 failed with error -22 [ 95.893242][ T4233] usb 3-1: USB disconnect, device number 6 [ 96.080482][ T4853] netlink: 236 bytes leftover after parsing attributes in process `syz.3.219'. [ 96.134264][ T4856] loop1: detected capacity change from 0 to 136 [ 96.311337][ T4735] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 96.345584][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 96.509770][ T4869] netlink: 'syz.2.225': attribute type 29 has an invalid length. [ 96.536727][ T4869] netlink: 'syz.2.225': attribute type 29 has an invalid length. [ 96.550839][ T4869] netlink: 'syz.2.225': attribute type 29 has an invalid length. [ 96.560495][ T4869] netlink: 'syz.2.225': attribute type 29 has an invalid length. [ 96.569983][ T4735] usb 5-1: Using ep0 maxpacket: 16 [ 96.578485][ T4869] netlink: 'syz.2.225': attribute type 29 has an invalid length. [ 96.601353][ T4866] loop3: detected capacity change from 0 to 4096 [ 96.695830][ T4876] loop2: detected capacity change from 0 to 128 [ 96.722735][ T4866] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 96.781205][ T4876] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 96.842896][ T4876] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.937912][ T4735] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 96.947501][ T4735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.961395][ T4866] ntfs3: loop3: failed to convert "c46c" to iso8859-6 [ 96.970674][ T4735] usb 5-1: Product: syz [ 96.974888][ T4735] usb 5-1: Manufacturer: syz [ 97.001161][ T4735] usb 5-1: SerialNumber: syz [ 97.037436][ T4866] ntfs3: loop3: failed to convert "0030" to iso8859-6 [ 97.078645][ T4866] ntfs3: loop3: failed to convert "0031" to iso8859-6 [ 97.118511][ T4866] ntfs3: loop3: failed to convert "0032" to iso8859-6 [ 97.202750][ T4866] ntfs3: loop3: failed to convert "0033" to iso8859-6 [ 97.347123][ T4735] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 97.404391][ T4735] usb 5-1: USB disconnect, device number 5 [ 97.555719][ T4894] loop2: detected capacity change from 0 to 2048 [ 97.672546][ T4894] device-mapper: ioctl: invalid device name [ 97.714907][ T4896] loop3: detected capacity change from 0 to 4096 [ 97.855877][ T4896] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 97.997095][ T4898] loop2: detected capacity change from 0 to 1024 [ 98.054584][ T4898] EXT4-fs (loop2): Ignoring removed bh option [ 98.134129][ T4898] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 98.237170][ T4198] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 98.302674][ T4198] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 98.356913][ T4198] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 98.566578][ T4195] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.673567][ T4910] loop3: detected capacity change from 0 to 256 [ 98.718610][ T4910] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 99.043443][ T4900] loop4: detected capacity change from 0 to 32768 [ 99.103743][ T4900] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.239 (4900) [ 99.194319][ T4900] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 99.242994][ T4900] BTRFS info (device loop4): using free space tree [ 99.260233][ T4900] BTRFS info (device loop4): has skinny extents [ 99.631891][ T4900] BTRFS info (device loop4): enabling ssd optimizations [ 99.935989][ T4950] input: syz0 as /devices/virtual/input/input11 [ 100.125244][ T4941] loop2: detected capacity change from 0 to 40427 [ 100.176082][ T4941] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 100.208041][ T4952] FAULT_INJECTION: forcing a failure. [ 100.208041][ T4952] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.236934][ T4941] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 100.322922][ T4954] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.376925][ T4952] CPU: 0 PID: 4952 Comm: syz.3.251 Not tainted syzkaller #0 [ 100.384291][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.394391][ T4952] Call Trace: [ 100.397708][ T4952] [ 100.400677][ T4952] dump_stack_lvl+0x188/0x250 [ 100.405402][ T4952] ? show_regs_print_info+0x20/0x20 [ 100.410639][ T4952] ? load_image+0x410/0x410 [ 100.415299][ T4952] ? __lock_acquire+0x7b50/0x7b50 [ 100.420373][ T4952] ? __lock_acquire+0x7b50/0x7b50 [ 100.425446][ T4952] should_fail+0x383/0x4b0 [ 100.429930][ T4952] set_fd_set+0x3a/0x90 [ 100.434129][ T4952] core_sys_select+0x7c1/0x8f0 [ 100.438946][ T4952] ? poll_select_set_timeout+0x150/0x150 [ 100.444644][ T4952] ? sigprocmask+0x190/0x190 [ 100.449291][ T4952] ? __context_tracking_exit+0x4c/0x80 [ 100.454807][ T4952] __se_sys_pselect6+0x2f4/0x3c0 [ 100.459792][ T4952] ? __x64_sys_pselect6+0xf0/0xf0 [ 100.464872][ T4952] ? __x64_sys_pselect6+0x1d/0xf0 [ 100.469946][ T4952] do_syscall_64+0x4c/0xa0 [ 100.474406][ T4952] ? clear_bhb_loop+0x30/0x80 [ 100.479120][ T4952] ? clear_bhb_loop+0x30/0x80 [ 100.483966][ T4952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.489921][ T4952] RIP: 0033:0x7f381a2e0159 [ 100.494378][ T4952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.514052][ T4952] RSP: 002b:00007f3818538028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 100.522518][ T4952] RAX: ffffffffffffffda RBX: 00007f381a567fa0 RCX: 00007f381a2e0159 [ 100.530530][ T4952] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 100.538553][ T4952] RBP: 00007f381a377024 R08: 0000000000000000 R09: 0000200000000300 [ 100.546662][ T4952] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 100.554706][ T4952] R13: 00007f381a568038 R14: 00007f381a567fa0 R15: 00007ffd985d8d78 [ 100.562734][ T4952] [ 100.589455][ T4941] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.835963][ T4941] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 100.877011][ T4941] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.985469][ T4968] device syzkaller1 entered promiscuous mode [ 101.079228][ T26] audit: type=1800 audit(1788201302.868:5): pid=4941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.248" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 101.326356][ T4975] user requested TSC rate below hardware speed [ 101.457141][ T4960] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 101.702518][ T4986] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.709681][ T4960] usb 5-1: Using ep0 maxpacket: 32 [ 101.838023][ T4960] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.858679][ T4960] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.011061][ T4960] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 102.028992][ T4960] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 102.057034][ T4960] usb 5-1: Product: syz [ 102.067281][ T4960] usb 5-1: Manufacturer: syz [ 102.115576][ T4999] Invalid argument reading file caps for ./file0 [ 102.138525][ T4960] hub 5-1:4.0: USB hub found [ 102.254343][ T5003] loop3: detected capacity change from 0 to 8192 [ 102.401442][ T5012] capability: warning: `syz.0.272' uses deprecated v2 capabilities in a way that may be insecure [ 102.424913][ T5010] device syzkaller1 entered promiscuous mode [ 102.437875][ T4960] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 102.587705][ T5020] ip_tables: iptables: counters copy to user failed while replacing table [ 102.646094][ T5020] tipc: Started in network mode [ 102.669400][ T5022] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.725370][ T5020] tipc: Node identity ac141441, cluster identity 4711 [ 102.749211][ T5020] tipc: Enabled bearer , priority 10 [ 102.803340][ T5025] loop1: detected capacity change from 0 to 512 [ 102.810674][ T5028] loop2: detected capacity change from 0 to 64 [ 102.858934][ T4735] usb 5-1: USB disconnect, device number 6 [ 102.870848][ T5025] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,minixdf,min_batch_time=0x0000000000000003,. Quota mode: writeback. [ 102.887117][ T5025] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.073770][ T5038] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 103.182814][ T5040] attempt to access beyond end of device [ 103.182814][ T5040] loop2: rw=2049, want=162, limit=64 [ 103.203144][ T5042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 103.212903][ T5040] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 103.267160][ T5040] attempt to access beyond end of device [ 103.267160][ T5040] loop2: rw=2049, want=163, limit=64 [ 103.295489][ T5040] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 103.320240][ T5040] attempt to access beyond end of device [ 103.320240][ T5040] loop2: rw=2049, want=164, limit=64 [ 103.341151][ T5040] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 103.353265][ T5040] attempt to access beyond end of device [ 103.353265][ T5040] loop2: rw=2049, want=168, limit=64 [ 103.422852][ T5040] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 103.432518][ T5040] attempt to access beyond end of device [ 103.432518][ T5040] loop2: rw=2049, want=170, limit=64 [ 103.444054][ T5040] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 103.503963][ T5040] attempt to access beyond end of device [ 103.503963][ T5040] loop2: rw=2049, want=172, limit=64 [ 103.529380][ T5049] scsi_strcpy_devinfo: vendor string 'vendo*r' is too long [ 103.543094][ T5049] scsi_strcpy_devinfo: model string 'mo劌rrdel' is too long [ 103.559898][ T5053] loop3: detected capacity change from 0 to 512 [ 103.592173][ T5040] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 103.624040][ T5053] EXT4-fs (loop3): Ignoring removed nobh option [ 103.630568][ T5040] attempt to access beyond end of device [ 103.630568][ T5040] loop2: rw=2049, want=173, limit=64 [ 103.678055][ T5040] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 103.732333][ T5053] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 103.774573][ T5053] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.869351][ T4230] tipc: Node number set to 2886997057 [ 103.921660][ T5065] loop1: detected capacity change from 0 to 1024 [ 103.987813][ T5053] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.290: corrupted inode contents [ 104.013466][ T5053] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.290: mark_inode_dirty error [ 104.032851][ T5053] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.290: corrupted inode contents [ 104.053125][ T5053] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.290: mark_inode_dirty error [ 104.058241][ T5065] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.157288][ T4735] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.181907][ T5065] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.247378][ T4233] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 104.304390][ T5065] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.294: bg 0: block 112: padding at end of block bitmap is not set [ 104.379774][ T5073] loop3: detected capacity change from 0 to 512 [ 104.392412][ T5065] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 35 with max blocks 1 with error 28 [ 104.414863][ T5065] EXT4-fs (loop1): This should not happen!! Data will be lost [ 104.414863][ T5065] [ 104.425657][ T5065] EXT4-fs (loop1): Total free blocks count 0 [ 104.431872][ T5073] EXT4-fs (loop3): Ignoring removed bh option [ 104.438469][ T4735] usb 5-1: Using ep0 maxpacket: 8 [ 104.445131][ T5073] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 104.454691][ T5065] EXT4-fs (loop1): Free/Dirty block details [ 104.474261][ T5065] EXT4-fs (loop1): free_blocks=0 [ 104.495327][ T5073] EXT4-fs (loop3): 1 truncate cleaned up [ 104.503869][ T5064] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.294: lblock 0 mapped to illegal pblock 0 (length 1) [ 104.541734][ T5073] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,abort,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 104.565087][ T5065] EXT4-fs (loop1): dirty_blocks=16 [ 104.584588][ T5065] EXT4-fs (loop1): Block reservation details [ 104.587066][ T4735] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 104.592897][ T5065] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 104.608573][ T5064] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.294: lblock 0 mapped to illegal pblock 0 (length 1) [ 104.622080][ T4735] usb 5-1: config 0 has no interface number 0 [ 104.628950][ T4735] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 104.638481][ T4735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.658603][ T4735] usb 5-1: config 0 descriptor?? [ 104.674752][ T5064] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.294: lblock 0 mapped to illegal pblock 0 (length 1) [ 104.688545][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.699974][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.711781][ T4233] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 104.721822][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.730978][ T5064] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.294: lblock 0 mapped to illegal pblock 0 (length 1) [ 104.753126][ T4233] usb 3-1: config 0 descriptor?? [ 104.759173][ T5064] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.294: lblock 0 mapped to illegal pblock 0 (length 1) [ 104.774421][ T5064] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.294: lblock 0 mapped to illegal pblock 0 (length 1) [ 104.815206][ T5065] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.294: lblock 0 mapped to illegal pblock 0 (length 1) [ 104.839631][ T5065] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.294: lblock 0 mapped to illegal pblock 0 (length 1) [ 104.887071][ T4735] viperboard 5-1:0.143: version 0.00 found at bus 005 address 007 [ 104.950927][ T5067] ucsi_ccg 0-0008: failed to get FW build information [ 105.020789][ T4735] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 105.033030][ T4735] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 105.143007][ T5067] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 105.159765][ T5067] ucsi_ccg: probe of 0-0008 failed with error -110 [ 105.212410][ T5067] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 105.240052][ T4233] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 105.273129][ T4233] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 105.312391][ T4233] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 105.355175][ T4233] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 105.363312][ T4233] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 105.388444][ T4233] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 105.436205][ T5102] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.450037][ T4232] usb 5-1: USB disconnect, device number 7 [ 105.946108][ T5126] jffs2: notice: (5126) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 105.967060][ T4233] playstation 0003:054C:0DF2.0007: Failed to retrieve feature with reportID 5: -71 [ 106.008085][ T4233] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense calibration info: -71 [ 106.038274][ T4233] playstation 0003:054C:0DF2.0007: Failed to get calibration data from DualSense [ 106.061840][ T4233] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 106.097315][ T4233] playstation: probe of 0003:054C:0DF2.0007 failed with error -71 [ 106.120544][ T5132] loop4: detected capacity change from 0 to 4096 [ 106.146682][ T4233] usb 3-1: USB disconnect, device number 7 [ 106.184266][ T5132] EXT4-fs (loop4): Ignoring removed nobh option [ 106.286973][ T4230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.323255][ T5138] fido_id[5138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 106.457945][ T5132] EXT4-fs (loop4): Test dummy encryption mode enabled [ 106.464809][ T5132] EXT4-fs (loop4): Ignoring removed bh option [ 106.504249][ T5132] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 106.607034][ T4735] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 106.657709][ T4230] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 106.678191][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.705011][ T4230] usb 4-1: config 0 descriptor?? [ 106.797210][ T5132] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 107.089420][ T4735] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.156447][ T5173] netlink: 36 bytes leftover after parsing attributes in process `syz.1.316'. [ 107.176975][ T5173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 107.235418][ T4230] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 107.274173][ T4230] [drm] Initialized udl on minor 2 [ 107.466379][ T5157] loop2: detected capacity change from 0 to 32768 [ 107.577334][ T5157] JBD2: Ignoring recovery information on journal [ 107.657068][ T4230] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 107.678819][ T4230] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 107.695379][ T4230] usb 4-1: USB disconnect, device number 3 [ 107.710572][ T4598] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 107.728515][ T4598] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 107.757477][ T4598] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 107.759318][ T5157] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 107.846150][ T5190] user requested TSC rate below hardware speed [ 107.939426][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 107.947449][ T4735] usb 1-1: config 8 has an invalid interface number: 59 but max is 3 [ 107.955617][ T4735] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 107.981307][ T4735] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 107.993393][ T4735] usb 1-1: config 8 has no interface number 0 [ 108.000572][ T4735] usb 1-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x1A, skipping [ 108.011918][ T4735] usb 1-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 108.033386][ T4735] usb 1-1: config 8 interface 59 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 108.057541][ T4735] usb 1-1: config 8 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 108.113321][ T4735] usb 1-1: config 8 interface 59 has no altsetting 0 [ 108.287086][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.407697][ T4735] usb 1-1: string descriptor 0 read error: -22 [ 108.414548][ T4735] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 108.431749][ T4735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.509037][ T4735] ttusbir 1-1:8.59: cannot find expected altsetting [ 108.574231][ T5179] loop1: detected capacity change from 0 to 32768 [ 108.697307][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.711015][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 108.787225][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.800178][ T5214] loop2: detected capacity change from 0 to 256 [ 108.836349][ T5179] XFS (loop1): Mounting V5 Filesystem [ 109.057089][ T21] usb 5-1: string descriptor 0 read error: -22 [ 109.065430][ T21] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 109.108513][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.155016][ T5179] XFS (loop1): Ending clean mount [ 109.302013][ T5227] netlink: 288 bytes leftover after parsing attributes in process `syz.2.334'. [ 109.317595][ T5227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.334'. [ 109.389312][ T4230] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 109.422836][ T4188] XFS (loop1): Unmounting Filesystem [ 109.798819][ T4595] usb 1-1: USB disconnect, device number 5 [ 109.817036][ T4230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.827373][ T21] usb 5-1: current rate 6100856 is different from the runtime rate 48000 [ 109.919680][ T4230] usb 4-1: config 100 has an invalid interface number: 173 but max is 0 [ 109.937067][ T4230] usb 4-1: config 100 has no interface number 0 [ 109.955032][ T4230] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 109.986368][ T4230] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 64468, setting to 8 [ 110.032018][ T4230] usb 4-1: config 100 interface 173 has no altsetting 0 [ 110.104410][ T4233] usb 5-1: USB disconnect, device number 8 [ 110.311534][ T4230] usb 4-1: string descriptor 0 read error: -22 [ 110.321353][ T5249] loop2: detected capacity change from 0 to 1024 [ 110.329790][ T4230] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 110.358613][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.392556][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.417316][ T5223] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 110.424800][ T5249] EXT4-fs (loop2): Ignoring removed bh option [ 110.424866][ T5223] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 110.457100][ T5249] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.478918][ T4230] metro_usb 4-1:100.173: Metrologic USB to Serial converter detected [ 110.500466][ T4230] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 110.571881][ T5249] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,noblock_validity,nobarrier,journal_ioprio=0x0000000000000005,abort,bh,init_itable,,errors=continue. Quota mode: none. [ 110.787751][ T5223] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 110.816724][ T5249] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz.2.344: path /64/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 110.851359][ T4230] usb 4-1: USB disconnect, device number 4 [ 110.885039][ T4230] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 110.916256][ T5259] PID 5259 killed due to inadequate hugepage pool [ 110.935164][ T5262] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz.2.344: path /64/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 110.955600][ T4230] metro_usb 4-1:100.173: device disconnected [ 111.217215][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.241614][ T5269] loop2: detected capacity change from 0 to 256 [ 111.309670][ T5269] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 111.448291][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.921251][ T5290] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 112.061101][ T5295] loop2: detected capacity change from 0 to 1764 [ 112.110656][ T5298] sp0: Synchronizing with TNC [ 112.256717][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.351618][ T5309] loop2: detected capacity change from 0 to 512 [ 112.362982][ T5310] loop3: detected capacity change from 0 to 512 [ 112.515841][ T5309] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 112.529641][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.540290][ T5310] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 112.556603][ T5309] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.647044][ T5310] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.839914][ T5276] loop1: detected capacity change from 0 to 40427 [ 112.880417][ T5276] F2FS-fs (loop1): Corrupted extension count (33554469 + 1 > 64) [ 112.913136][ T5276] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 112.963809][ T5276] F2FS-fs (loop1): invalid crc value [ 112.998850][ T5276] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 113.172842][ T5276] F2FS-fs (loop1): recover fsync data on readonly fs [ 113.207566][ T5276] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 113.235227][ T5276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.607079][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.712167][ T5319] loop4: detected capacity change from 0 to 32768 [ 113.773518][ T5319] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.367 (5319) [ 113.840330][ T5319] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 113.845408][ T5322] loop3: detected capacity change from 0 to 32768 [ 113.871289][ T5319] BTRFS info (device loop4): force zlib compression, level 3 [ 113.907396][ T5322] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.368 (5322) [ 113.915644][ T5319] BTRFS info (device loop4): allowing degraded mounts [ 113.984533][ T5319] BTRFS info (device loop4): setting nodatasum [ 113.994686][ T5322] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 113.999605][ T5319] BTRFS info (device loop4): allowing degraded mounts [ 114.043655][ T5319] BTRFS info (device loop4): using free space tree [ 114.043819][ T5322] BTRFS info (device loop3): using free space tree [ 114.088027][ T5322] BTRFS info (device loop3): has skinny extents [ 114.095092][ T5319] BTRFS info (device loop4): has skinny extents [ 114.177422][ T4735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.214381][ T5347] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 114.307146][ T4959] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.391650][ T5322] BTRFS info (device loop3): enabling ssd optimizations [ 114.401849][ T4233] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.597044][ T4959] usb 1-1: Using ep0 maxpacket: 8 [ 114.647495][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.743666][ T4959] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.753674][ T4959] usb 1-1: no configurations [ 114.761102][ T4416] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop4 scanned by udevd (4416) [ 114.773031][ T4959] usb 1-1: can't read configurations, error -22 [ 114.857650][ T4233] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.868374][ T4233] usb 2-1: config 1 interface 0 has no altsetting 1 [ 115.057577][ T4233] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 115.071062][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.080076][ T4233] usb 2-1: Product: syz [ 115.084302][ T4233] usb 2-1: Manufacturer: syz [ 115.089417][ T4233] usb 2-1: SerialNumber: syz [ 115.303679][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.325487][ T5404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.412555][ T4233] dvbdev: DVB: registering new adapter (DEC3000-s) [ 115.439795][ T4233] usb 2-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 115.472315][ T5410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.666568][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 115.687076][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.744950][ T5417] loop4: detected capacity change from 0 to 128 [ 115.825331][ T5417] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 115.847765][ T4233] usb 2-1: USB disconnect, device number 4 [ 115.877197][ T5417] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.946984][ T5419] loop2: detected capacity change from 0 to 512 [ 116.011747][ T5419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 116.064839][ T5409] loop3: detected capacity change from 0 to 32768 [ 116.071797][ T5419] System zones: 1-12 [ 116.104727][ T5419] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.385: missing EA_INODE flag [ 116.164620][ T5419] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.385: error while reading EA inode 12 err=-117 [ 116.232727][ T5419] EXT4-fs (loop2): 1 orphan inode deleted [ 116.265603][ T5419] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 116.327863][ T5409] XFS (loop3): Mounting V5 Filesystem [ 116.333546][ T5419] syz.2.385 (pid 5419) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 116.600427][ T5409] XFS (loop3): Ending clean mount [ 116.654527][ T5409] XFS (loop3): Quotacheck needed: Please wait. [ 116.714635][ T154] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 116.732574][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.787178][ T154] XFS (loop3): Unmount and run xfs_repair [ 116.809171][ T154] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 116.827574][ T4959] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.835181][ T154] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 116.854733][ T154] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 116.874339][ T154] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 116.891560][ T5447] tipc: Started in network mode [ 116.894107][ T154] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 116.904956][ T5447] tipc: Node identity ac14142f, cluster identity 4711 [ 116.916928][ T154] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 116.928133][ T5447] tipc: New replicast peer: 172.20.20.170 [ 116.934764][ T5447] tipc: Enabled bearer , priority 10 [ 116.951455][ T154] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 116.971196][ T154] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 116.986985][ T154] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 116.992196][ T5448] tipc: New replicast peer: 0.0.0.0 [ 117.006525][ T154] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 117.060784][ T5409] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 117.160677][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 117.210998][ T23] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.232919][ T4959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.282714][ T4959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.320787][ T4959] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.362999][ T4959] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.392787][ T4959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.415348][ T4959] usb 1-1: config 0 descriptor?? [ 117.445564][ T5443] loop2: detected capacity change from 0 to 32768 [ 117.460734][ T4198] XFS (loop3): Unmounting Filesystem [ 117.580277][ T5443] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.388 (5443) [ 117.626868][ T5443] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 117.635850][ T5443] BTRFS info (device loop2): using free space tree [ 117.666174][ T5443] BTRFS info (device loop2): has skinny extents [ 117.767160][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.783559][ T5458] loop4: detected capacity change from 0 to 512 [ 117.811452][ T5450] hid-generic 0000:0000:0000.0008: pid 5450 passed too short report [ 117.884319][ T5458] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 117.921129][ T4959] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 117.960837][ T5443] BTRFS info (device loop2): enabling ssd optimizations [ 117.974678][ T5458] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.986528][ T4959] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 118.066967][ T5406] tipc: Node number set to 2886997039 [ 118.221612][ T5406] usb 1-1: USB disconnect, device number 8 [ 118.327743][ T5405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.446533][ T5489] netlink: 'syz.1.401': attribute type 29 has an invalid length. [ 118.465203][ T5489] netlink: 'syz.1.401': attribute type 29 has an invalid length. [ 118.486094][ T5489] netlink: 'syz.1.401': attribute type 29 has an invalid length. [ 118.563318][ T5489] netlink: 'syz.1.401': attribute type 29 has an invalid length. [ 118.606249][ T5489] netlink: 'syz.1.401': attribute type 29 has an invalid length. [ 118.804352][ T5504] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 118.827878][ T5502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.855037][ T5504] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 119.024194][ T5521] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.127050][ T5405] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 119.316965][ T5508] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 119.528107][ T5405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.539760][ T5405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.550149][ T5405] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.564896][ T5405] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.574532][ T5405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.601220][ T5405] usb 3-1: config 0 descriptor?? [ 119.737159][ T5508] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.817160][ T5508] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 119.825590][ T5508] usb 1-1: config 100 has no interface number 0 [ 119.885167][ T5508] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 119.895903][ T5508] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 64468, setting to 8 [ 119.910059][ T5508] usb 1-1: config 100 interface 173 has no altsetting 0 [ 119.923329][ T5502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.002978][ T5535] netlink: 656 bytes leftover after parsing attributes in process `syz.4.415'. [ 120.145190][ T5405] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 120.174996][ T5405] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 120.187403][ T5508] usb 1-1: string descriptor 0 read error: -22 [ 120.187538][ T5508] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 120.187564][ T5508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.294355][ T5521] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 120.301834][ T5521] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 120.342885][ T5508] metro_usb 1-1:100.173: Metrologic USB to Serial converter detected [ 120.374381][ T5508] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 120.597144][ T5521] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 120.622219][ T5405] usb 1-1: USB disconnect, device number 9 [ 120.645665][ T5405] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 120.671976][ T5405] metro_usb 1-1:100.173: device disconnected [ 120.763952][ T5540] loop4: detected capacity change from 0 to 32768 [ 120.796894][ T5540] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.418 (5540) [ 120.856305][ T5540] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 120.875017][ T5540] BTRFS info (device loop4): setting nodatacow, compression disabled [ 120.894480][ T5540] BTRFS info (device loop4): force clearing of disk cache [ 120.908540][ T5540] BTRFS info (device loop4): turning off barriers [ 120.919329][ T5540] BTRFS info (device loop4): use no compression [ 120.938236][ T5540] BTRFS info (device loop4): disabling free space tree [ 120.953134][ T5540] BTRFS info (device loop4): enabling ssd optimizations [ 120.967665][ T5540] BTRFS info (device loop4): using spread ssd allocation scheme [ 120.967699][ T5508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.994864][ T5540] BTRFS info (device loop4): turning on flush-on-commit [ 121.012608][ T5540] BTRFS info (device loop4): has skinny extents [ 121.131434][ T5551] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 121.191175][ T5551] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 121.232091][ T5559] FAULT_INJECTION: forcing a failure. [ 121.232091][ T5559] name failslab, interval 1, probability 0, space 0, times 0 [ 121.262293][ T5559] CPU: 0 PID: 5559 Comm: syz.0.421 Not tainted syzkaller #0 [ 121.269742][ T5559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.279844][ T5559] Call Trace: [ 121.283185][ T5559] [ 121.286172][ T5559] dump_stack_lvl+0x188/0x250 [ 121.290893][ T5559] ? show_regs_print_info+0x20/0x20 [ 121.296130][ T5559] ? load_image+0x410/0x410 [ 121.300669][ T5559] ? __might_sleep+0xf0/0xf0 [ 121.305288][ T5559] ? __lock_acquire+0x7b50/0x7b50 [ 121.310389][ T5559] should_fail+0x383/0x4b0 [ 121.314850][ T5559] should_failslab+0x5/0x20 [ 121.319381][ T5559] slab_pre_alloc_hook+0x51/0xc0 [ 121.324355][ T5559] ? __d_alloc+0x27/0x6d0 [ 121.328716][ T5559] kmem_cache_alloc+0x3d/0x280 [ 121.333524][ T5559] __d_alloc+0x27/0x6d0 [ 121.337718][ T5559] ? d_alloc_pseudo+0xe/0x70 [ 121.342368][ T5559] d_alloc_pseudo+0x19/0x70 [ 121.346940][ T5559] alloc_file_pseudo+0xe0/0x200 [ 121.351840][ T5559] ? alloc_empty_file_noaccount+0x80/0x80 [ 121.357609][ T5559] ? alloc_fd+0x59e/0x650 [ 121.361986][ T5559] sock_alloc_file+0xb3/0x240 [ 121.366702][ T5559] __sys_socket+0x11d/0x170 [ 121.371245][ T5559] __x64_sys_socket+0x76/0x80 [ 121.375971][ T5559] do_syscall_64+0x4c/0xa0 [ 121.380426][ T5559] ? clear_bhb_loop+0x30/0x80 [ 121.385141][ T5559] ? clear_bhb_loop+0x30/0x80 [ 121.389858][ T5559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.395946][ T5559] RIP: 0033:0x7f1f89793159 [ 121.400407][ T5559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.420077][ T5559] RSP: 002b:00007f1f879eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 121.428542][ T5559] RAX: ffffffffffffffda RBX: 00007f1f89a1afa0 RCX: 00007f1f89793159 [ 121.436557][ T5559] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 121.444559][ T5559] RBP: 00007f1f8982a024 R08: 0000000000000000 R09: 0000000000000000 [ 121.452564][ T5559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.460570][ T5559] R13: 00007f1f89a1b038 R14: 00007f1f89a1afa0 R15: 00007fff8f838578 [ 121.468595][ T5559] [ 121.483897][ T4959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.526359][ T5502] usb 3-1: USB disconnect, device number 8 [ 121.593646][ T5540] BTRFS info (device loop4): clearing free space tree [ 121.600657][ T5540] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.611405][ T5540] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.638251][ T5540] BTRFS info (device loop4): checking UUID tree [ 121.749143][ T5540] jffs2: notice: (5540) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.817110][ T5508] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.007273][ T5502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.257514][ T5579] loop2: detected capacity change from 0 to 512 [ 122.336672][ T5581] smc: net device team0 applied user defined pnetid SYZ2 [ 122.369471][ T5508] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 122.392028][ T5508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.404506][ T5585] smc: net device team0 erased user defined pnetid SYZ2 [ 122.414699][ T5579] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.436453][ T5508] usb 2-1: Product: syz [ 122.441255][ T5579] ext4 filesystem being mounted at /81/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.462438][ T5508] usb 2-1: Manufacturer: syz [ 122.473091][ T5508] usb 2-1: SerialNumber: syz [ 122.485216][ T5508] usb 2-1: config 0 descriptor?? [ 122.527751][ T5508] hub 2-1:0.0: bad descriptor, ignoring hub [ 122.533915][ T5508] hub: probe of 2-1:0.0 failed with error -5 [ 122.580362][ T5587] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 122.620853][ T5579] [ 122.623240][ T5579] ====================================================== [ 122.630280][ T5579] WARNING: possible circular locking dependency detected [ 122.637337][ T5579] syzkaller #0 Not tainted [ 122.641783][ T5579] ------------------------------------------------------ [ 122.648821][ T5579] syz.2.426/5579 is trying to acquire lock: [ 122.654738][ T5579] ffff88805fba9668 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 122.664294][ T5579] [ 122.664294][ T5579] but task is already holding lock: [ 122.671688][ T5579] ffff88805a220208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 122.681345][ T5579] [ 122.681345][ T5579] which lock already depends on the new lock. [ 122.681345][ T5579] [ 122.691776][ T5579] [ 122.691776][ T5579] the existing dependency chain (in reverse order) is: [ 122.700815][ T5579] [ 122.700815][ T5579] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 122.708933][ T5579] down_read+0x44/0x2e0 [ 122.713686][ T5579] v2_read_dquot+0x4a/0x110 [ 122.719361][ T5579] dquot_acquire+0x152/0x520 [ 122.724511][ T5579] ext4_acquire_dquot+0x2e3/0x4a0 [ 122.730090][ T5579] dqget+0x713/0xbb0 [ 122.734542][ T5579] __dquot_initialize+0x3a9/0xd00 [ 122.740224][ T5579] ext4_mkdir+0x198/0xc90 [ 122.745149][ T5579] vfs_mkdir+0x386/0x570 [ 122.749951][ T5579] do_mkdirat+0x1dd/0x5c0 [ 122.754838][ T5579] __x64_sys_mkdirat+0x85/0x90 [ 122.757392][ T5508] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 122.760168][ T5579] do_syscall_64+0x4c/0xa0 [ 122.760195][ T5579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.779570][ T5579] [ 122.779570][ T5579] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 122.787250][ T5579] __mutex_lock_common+0x1e5/0x2400 [ 122.793015][ T5579] mutex_lock_nested+0x17/0x20 [ 122.795428][ T5508] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.798344][ T5579] dquot_commit+0x5a/0x410 [ 122.798372][ T5579] ext4_write_dquot+0x1f0/0x360 [ 122.798394][ T5579] mark_all_dquot_dirty+0xf9/0x400 [ 122.823589][ T5579] __dquot_alloc_space+0x5cb/0xe10 [ 122.829263][ T5579] ext4_mb_new_blocks+0xf80/0x47c0 [ 122.835201][ T5579] ext4_ext_map_blocks+0x17d1/0x63d0 [ 122.841051][ T5579] ext4_map_blocks+0x97f/0x1a50 [ 122.846473][ T5579] ext4_getblk+0x176/0x670 [ 122.851445][ T5579] ext4_bread+0x26/0x180 [ 122.856249][ T5579] ext4_append+0x2bb/0x560 [ 122.857697][ T5508] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 122.861218][ T5579] ext4_init_new_dir+0x2a7/0x910 [ 122.861244][ T5579] ext4_mkdir+0x4c3/0xc90 [ 122.880003][ T5579] vfs_mkdir+0x386/0x570 [ 122.884809][ T5579] do_mkdirat+0x1dd/0x5c0 [ 122.889697][ T5579] __x64_sys_mkdirat+0x85/0x90 [ 122.891825][ T5508] usb 2-1: media controller created [ 122.895038][ T5579] do_syscall_64+0x4c/0xa0 [ 122.895062][ T5579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.911664][ T5579] [ 122.911664][ T5579] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 122.918116][ T5587] CIFS: Attempting to mount \\127.0.0.1\test [ 122.919520][ T5579] __lock_acquire+0x2c66/0x7b50 [ 122.930905][ T5579] lock_acquire+0x19e/0x400 [ 122.935964][ T5579] down_write+0x38/0x60 [ 122.940759][ T5579] ext4_map_blocks+0x8c4/0x1a50 [ 122.946404][ T5579] ext4_getblk+0x176/0x670 [ 122.951375][ T5579] ext4_bread+0x26/0x180 [ 122.956174][ T5579] ext4_quota_write+0x237/0x580 [ 122.959708][ T5566] dib0700: tx buffer length is larger than 4. Not supported. [ 122.961582][ T5579] get_free_dqblk+0x38a/0x7a0 [ 122.974297][ T5579] do_insert_tree+0x21b/0x19c0 [ 122.979620][ T5579] do_insert_tree+0x5c4/0x19c0 [ 122.984973][ T5579] do_insert_tree+0x5c4/0x19c0 [ 122.990297][ T5579] qtree_write_dquot+0x354/0x4a0 [ 122.995794][ T5579] v2_write_dquot+0x108/0x190 [ 123.001027][ T5579] dquot_acquire+0x2d5/0x520 [ 123.006172][ T5579] ext4_acquire_dquot+0x2e3/0x4a0 [ 123.011766][ T5579] dqget+0x713/0xbb0 [ 123.016210][ T5579] __dquot_initialize+0x324/0xd00 [ 123.021806][ T5579] ext4_create+0x92/0x470 [ 123.026680][ T5579] path_openat+0x120a/0x2fb0 [ 123.031815][ T5579] do_filp_open+0x1df/0x400 [ 123.036866][ T5579] do_sys_openat2+0x14b/0x500 [ 123.042114][ T5579] __x64_sys_creat+0x8c/0xb0 [ 123.047246][ T5579] do_syscall_64+0x4c/0xa0 [ 123.052213][ T5579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.058663][ T5579] [ 123.058663][ T5579] other info that might help us debug this: [ 123.058663][ T5579] [ 123.068915][ T5579] Chain exists of: [ 123.068915][ T5579] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 123.068915][ T5579] [ 123.076330][ T5508] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.082598][ T5579] Possible unsafe locking scenario: [ 123.082598][ T5579] [ 123.082606][ T5579] CPU0 CPU1 [ 123.082612][ T5579] ---- ---- [ 123.082617][ T5579] lock(&s->s_dquot.dqio_sem); [ 123.082633][ T5579] lock(&dquot->dq_lock); [ 123.082648][ T5579] lock(&s->s_dquot.dqio_sem); [ 123.082663][ T5579] lock(&ei->i_data_sem/2); [ 123.132976][ T5579] [ 123.132976][ T5579] *** DEADLOCK *** [ 123.132976][ T5579] [ 123.141142][ T5579] 4 locks held by syz.2.426/5579: [ 123.146189][ T5579] #0: ffff88805a220460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 123.155385][ T5579] #1: ffff88805fbaabd0 (&type->i_mutex_dir_key#4){++++}-{3:3}, at: path_openat+0x821/0x2fb0 [ 123.165644][ T5579] #2: ffff88807367e7a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 123.175083][ T5579] #3: ffff88805a220208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 123.185126][ T5579] [ 123.185126][ T5579] stack backtrace: [ 123.191032][ T5579] CPU: 0 PID: 5579 Comm: syz.2.426 Not tainted syzkaller #0 [ 123.198344][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.208424][ T5579] Call Trace: [ 123.211725][ T5579] [ 123.214685][ T5579] dump_stack_lvl+0x188/0x250 [ 123.219395][ T5579] ? load_image+0x410/0x410 [ 123.224026][ T5579] ? show_regs_print_info+0x20/0x20 [ 123.229364][ T5579] ? print_circular_bug+0x12b/0x1a0 [ 123.234615][ T5579] check_noncircular+0x296/0x330 [ 123.234646][ T5579] ? add_chain_block+0x9b0/0x9b0 [ 123.234665][ T5579] ? lockdep_lock+0xf1/0x1f0 [ 123.234692][ T5579] ? mark_lock+0x94/0x320 [ 123.234708][ T5579] ? _find_first_zero_bit+0xd1/0xf0 [ 123.234730][ T5579] __lock_acquire+0x2c66/0x7b50 [ 123.234763][ T5579] ? verify_lock_unused+0x140/0x140 [ 123.234788][ T5579] ? mark_lock+0x94/0x320 [ 123.234806][ T5579] ? verify_lock_unused+0x140/0x140 [ 123.234835][ T5579] lock_acquire+0x19e/0x400 [ 123.234856][ T5579] ? ext4_map_blocks+0x8c4/0x1a50 [ 123.234880][ T5579] ? __might_sleep+0xf0/0xf0 [ 123.234900][ T5579] ? read_lock_is_recursive+0x10/0x10 [ 123.234925][ T5579] ? rcu_is_watching+0x11/0xa0 [ 123.234945][ T5579] ? ext4_es_lookup_extent+0x5fd/0x9f0 [ 123.234972][ T5579] down_write+0x38/0x60 [ 123.234995][ T5579] ? ext4_map_blocks+0x8c4/0x1a50 [ 123.235016][ T5579] ext4_map_blocks+0x8c4/0x1a50 [ 123.235041][ T5579] ? _raw_spin_unlock+0x40/0x40 [ 123.235070][ T5579] ? ext4_issue_zeroout+0x250/0x250 [ 123.235094][ T5579] ? stack_depot_save+0x41b/0x460 [ 123.235117][ T5579] ext4_getblk+0x176/0x670 [ 123.235136][ T5579] ? __kasan_kmalloc+0xaf/0xe0 [ 123.235156][ T5579] ? get_free_dqblk+0x45/0x7a0 [ 123.235176][ T5579] ? ext4_get_block_unwritten+0x30/0x30 [ 123.235196][ T5579] ? ext4_create+0x92/0x470 [ 123.235216][ T5579] ? __x64_sys_creat+0x8c/0xb0 [ 123.235233][ T5579] ? do_syscall_64+0x4c/0xa0 [ 123.235253][ T5579] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.235278][ T5579] ext4_bread+0x26/0x180 [ 123.235298][ T5579] ext4_quota_write+0x237/0x580 [ 123.235323][ T5579] ? ext4_quota_read+0x390/0x390 [ 123.235349][ T5579] get_free_dqblk+0x38a/0x7a0 [ 123.235367][ T5579] ? ext4_quota_read+0x390/0x390 [ 123.235389][ T5579] do_insert_tree+0x21b/0x19c0 [ 123.235410][ T5579] ? from_kgid+0x14f/0x6a0 [ 123.235432][ T5579] ? ext4_quota_read+0x316/0x390 [ 123.235456][ T5579] do_insert_tree+0x5c4/0x19c0 [ 123.235477][ T5579] ? from_kgid+0x14f/0x6a0 [ 123.235498][ T5579] ? __brelse+0x55/0x90 [ 123.235520][ T5579] do_insert_tree+0x5c4/0x19c0 [ 123.235549][ T5579] qtree_write_dquot+0x354/0x4a0 [ 123.235578][ T5579] v2_write_dquot+0x108/0x190 [ 123.235602][ T5579] dquot_acquire+0x2d5/0x520 [ 123.235628][ T5579] ext4_acquire_dquot+0x2e3/0x4a0 [ 123.235654][ T5579] dqget+0x713/0xbb0 [ 123.235681][ T5579] __dquot_initialize+0x324/0xd00 [ 123.235706][ T5579] ? ext4_lookup+0x51d/0x930 [ 123.235725][ T5579] ? dquot_initialize+0x20/0x20 [ 123.235748][ T5579] ? end_current_label_crit_section+0x14b/0x170 [ 123.235771][ T5579] ? common_perm+0x15d/0x1b0 [ 123.235792][ T5579] ext4_create+0x92/0x470 [ 123.235816][ T5579] ? ext4_lookup+0x930/0x930 [ 123.235837][ T5579] ? inode_permission+0xef/0x480 [ 123.235857][ T5579] ? bpf_lsm_inode_create+0x5/0x10 [ 123.235877][ T5579] ? security_inode_create+0xb3/0x100 [ 123.235897][ T5579] ? ext4_lookup+0x930/0x930 [ 123.235918][ T5579] path_openat+0x120a/0x2fb0 [ 123.235956][ T5579] ? do_filp_open+0x400/0x400 [ 123.235987][ T5579] do_filp_open+0x1df/0x400 [ 123.236010][ T5579] ? vfs_tmpfile+0x300/0x300 [ 123.236040][ T5579] ? _raw_spin_unlock+0x24/0x40 [ 123.236073][ T5579] ? alloc_fd+0x59e/0x650 [ 123.236095][ T5579] do_sys_openat2+0x14b/0x500 [ 123.236117][ T5579] ? do_sys_open+0xe0/0xe0 [ 123.236134][ T5579] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.236161][ T5579] ? lock_chain_count+0x20/0x20 [ 123.236187][ T5579] __x64_sys_creat+0x8c/0xb0 [ 123.236208][ T5579] do_syscall_64+0x4c/0xa0 [ 123.236227][ T5579] ? clear_bhb_loop+0x30/0x80 [ 123.236249][ T5579] ? clear_bhb_loop+0x30/0x80 [ 123.236271][ T5579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.236293][ T5579] RIP: 0033:0x7f21170ac159 [ 123.236313][ T5579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.236332][ T5579] RSP: 002b:00007f2115304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 123.236355][ T5579] RAX: ffffffffffffffda RBX: 00007f2117333fa0 RCX: 00007f21170ac159 [ 123.236371][ T5579] RDX: 0000000000000000 RSI: b1f748c0b226b696 RDI: 0000200000000100 [ 123.236386][ T5579] RBP: 00007f2117143024 R08: 0000000000000000 R09: 0000000000000000 [ 123.236399][ T5579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.236412][ T5579] R13: 00007f2117334038 R14: 00007f2117333fa0 R15: 00007ffcfb63f4d8 [ 123.236435][ T5579] [ 123.242040][ T5507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.284913][ T5508] DVB: Unable to find symbol dib7000p_attach() [ 123.284927][ T5508] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 123.348505][ T26] audit: type=1800 audit(1788201325.128:6): pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.426" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 123.378341][ T5508] rc_core: IR keymap rc-dib0700-rc5 not found [ 123.378358][ T5508] Registered IR keymap rc-empty [ 123.378518][ T5508] dvb-usb: could not initialize remote control. [ 123.378527][ T5508] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 123.410706][ T5508] usb 2-1: USB disconnect, device number 5 [ 123.411660][ T5587] CIFS: VFS: Could not allocate crypto cmac(aes) [ 123.411947][ T5587] CIFS: VFS: cifs_mount failed w/return code = -512 [ 123.456610][ T5508] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 124.182637][ T5526] Set syz0 is full, maxelem 65536 reached [ 124.248840][ T5507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.407805][ T4735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.487391][ T4963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.287199][ T5508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.331759][ T5508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.367255][ T5502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.527468][ T4963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.407110][ T5508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.457203][ T5502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.487232][ T5502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.567578][ T4735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.808133][ T4735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.527619][ T5508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.577102][ T5502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog